Phishing emails are one of the most common types of cyber attacks used by criminals, and are most typically used to infect your computer, or steal user data through a technique called email spoofing.
Email spoofing tricks users into thinking that a message they received originated from a known or trusted source—in most cases, a colleague, vendor, or brand. In these attacks, the sender forges email headers to display a fake sender address, which most users believe to be authentic.
If you receive an email that seems suspicious:
If you receive an email that seems suspicious:
Verify that the sender’s email address has a valid username and domain name. Suspicious email addresses often look similar to “John Doe <johndoe.%[email protected]>”;
Verify that the sender of an email is trusted/known, and that the tone of the message is consistent with the sender;
Scan for grammatical errors, typos, or anomalies in the body of the email. Legitimate messages from companies rarely contain these types of errors;
Consider the message’s tone and what is being offered. If it seems threatening or too good to be true, there’s a high probability that it’s a phishing attempt; and
Take note of what’s being asked of you. the majority of companies won’t request sensitive or personal information via email.
Another way to verify the authenticity of an email is by reviewing the email’s header for clues.
Another way to verify the authenticity of an email is by reviewing the email’s header for clues.
Confirm that the 'From:' email address matches the display name. The from: address may appear legitimate at first, but closer inspection of the email headers could reveal that the email address actually associated with the display name originated from someone else.
Ensure that the 'Reply-To' header matches the source. This is typically hidden when receiving the message, and is often overlooked when responding. If the reply-to address doesn’t match the sender or the site that they claim to be from, there is a high probability that it’s been forged.
Locate where the 'Return-Path' goes. The return-path identifies where the message originally came from. While it’s still possible to forge the Return-path in a message header, it’s not a commonly used tactic.
If you accidentally interact with a malicious email, stay calm and:
If you accidentally interact with a malicious email, stay calm and:
Stop using your device;
Disable Wi-Fi or disconnect any network cables so your device can’t connect to the Internet;
Power off your device;
Contact your IT security department if you’re using a corporate device. They can disable accounts and other device features;
Change your password, passphrase, or PIN using a different device;
Scan the device using anti-malware software if possible;
Restore network connections only when you achieve a clean system;
Perform any available updates and security patches on your device; and
Monitor your accounts regularly for suspicious activity.
Related articles