Yuav ua li cas yog tias koj tau txais email tsis txaus ntseeg los ntawm koj tus kheej email

Tau txais email uas zoo li los ntawm koj tus kheej qhov chaw nyob tuaj yeem ceeb, tab sis feem ntau, nws tsis qhia tias koj tus account tau nkag mus. Tom qab qhov no feem ntau yog cov txheej txheem xa tawm tus kheej (email spoofing) uas siv cov txheej txheem tsis zoo los ua kom cov lus pom tseeb thaum nws tsis yog.

Cybercriminals siv txoj kev no los blackmail, kis malware, lossis nyiag cov ntaub ntawv los ntawm kev thov kom ceev, txaj muag, lossis ntshai kom tau txais koj them nyiaj hauv cryptocurrency lossis nyem rau ntawm qhov teeb meem txuas. Cov koom haum xws li INCIBE, OCU, thiab cov kws paub txog kev nyab xeeb ceeb toom tias cov emails no yog dag thiab pom zoo kom tsis txhob muab rau blackmail lossis muab cov ntaub ntawv ntiag tug. Peb mam li qhia koj li cas. Yuav ua li cas yog tias koj tau txais email tsis txaus ntseeg los ntawm koj tus kheej email.

Dab tsi yog email spoofing thiab vim li cas koj thiaj tau txais email los ntawm "koj"?

Email spoofing yog cov txheej txheem uas cuam tshuam nrog kev dag tus neeg xa khoom los ntawm kev hloov kho cov lus headers kom nws tshwm sim los ntawm lwm qhov chaw. Raws li cov kws tshaj lij cybersecurity piav qhia, tus neeg tawm tsam hloov kho thaj chaw xws li "Los ntawm" lossis kab lus kom pom tias yog ib tus neeg koj ntseeg - txawm tias koj tus kheej - yam tsis tau nkag mus rau koj tus account.

Qhov no tuaj yeem ua tau vim tias SMTP raws tu qauv, uas tswj hwm kev xa email, tsis tas yuav tsum tau lees paub tus neeg xa khoom ntawm nws tus kheej. Yog li, nrog cov cuab yeej yooj yim lossis APIs, leej twg tuaj yeem teeb tsa "Los ntawm:" chaw nyob lawv xav tau; cov servers xa cov lus, thiab lub header pom hauv koj lub inbox qhia qhov chaw nyob tus neeg tawm tsam nkag, txawm tias nws tsis yog qhov tseeb.

Cov headers technical ntawm email (tag nrho cov headers) qhia txog txoj kev tseeb ntawm cov lus, Txij li thaum lawv teev txhua lub plhaw ntawm cov servers hauv thaj teb xws li Tau Txais:, cov neeg siv feem ntau tsis kuaj cov teb no ua ntej cuam tshuam nrog cov ntsiab lus.

Ntxiv rau qhov From: teb, scammers siv "Reply-To" rau redirect teb rau lwm tus account lawv tswj, Yog li txawm tias email zoo li xa los ntawm koj lossis tus neeg sib cuag, cov lus teb mus txog tus neeg tawm tsam.

Yuav ua li cas cov kev dag ntxias no ua haujlwm: los ntawm fake "hacking" mus rau sextortion

Ib qho ntawm cov qauv feem ntau yog email sextortion: tus neeg tawm tsam hais tias muaj tus kab mob, kaw, lossis tswj koj lub koob yees duab thiab hem kom faib cov yeeb yaj kiab sib raug zoo yog tias koj tsis them nyiaj hauv 48 teev, feem ntau hauv Bitcoin. Cov lus no feem ntau hais tias lawv tau saib xyuas koj rau lub lis piam lossis lawv siv software uas "tig koj lub microphone."

INCIBE qhia meej tias, hauv hom phiaj xwm no, tus neeg tawm tsam tsis tau nkag mus rau koj cov khoom siv lossis tsis muaj cov yeeb yaj kiab tiag tiag, thiab hais tias lub hom phiaj tseem ceeb yog kom ntshai koj kom tau txais kev them nyiaj lossis koj cov ntaub ntawv. OCU ntxiv tias lawv kuj nrhiav kev faib cov malware los ntawm cov kab mob txuas lossis txuas.

Lwm qhov sib txawv yog cov lus ceeb toom cuav "Pegasus" lossis lwm yam "muaj zog" malware, nrog rau kev thov tias tag nrho koj cov cuab yeej raug cuam tshuam thiab tsuas yog them nyiaj tam sim ntawd yuav tiv thaiv qhov tshwm sim loj. Nws yog ib qho piv txwv classic ntawm social engineering raws li qhov ceev thiab ntshai.

Attackers ua si ntawm txaj muag rau siab rau koj, Lawv feem ntau thov cryptocurrency vim nws nyuaj rau taug qab. Qee zaum lawv suav nrog cov passwords xau hauv cov ntaub ntawv ua txhaum cai kom lawv muaj kev ntseeg siab dua, txawm tias qhov no tsis tau txhais hais tias lawv yeej muaj kev tswj hwm koj cov nyiaj.

Cov cim qhia kom pom blackmail thiab phishing emails

Saib rau cov cim qhia: kev xav tau nyiaj txiag ceev (tshwj xeeb tshaj yog hauv cryptocurrencies), hem kom tshaj tawm cov ntsiab lus zoo, thiab 24-48 teev sijhawm. Cov kev ntxhov siab uas tshwm sim no yog cov cim qhia ntawm phishing thiab blackmail.

Kuj tseem nrhiav cov ntawv sau tsis zoo, kev sau ntawv yuam kev lossis "cov lus txawv txawv" uas qhia txog kev siv tshuab hluav taws xob lossis kev txhais lus tsis zoo, nrog rau cov neeg xa ntawv tsis pom lossis chaw nyob uas tsis sib haum rau lub koom haum raug cai.

Ceev faj ntawm kev thov rau tus kheej lossis cov ntaub ntawv hauv tuam txhab nyiaj hauv email, txuas rau "tsim koj tus as khauj," lossis rub tawm software, tshwj xeeb tshaj yog tias cov lus zoo li txawv txav lossis ua rau koj lub txhab nyiaj, tus neeg muag khoom, lossis kev sib cuag nrog tsev neeg. Ib txwm paub meej los ntawm cov nom channel.

Yog tias koj tau txais cov lus qhia los ntawm lub koom haum paub zoo (xws li lub tuam txhab xa khoom) thov kom them nyiaj lossis hloov kho tshiab ntawm qhov txuas, Nco ntsoov tias cov tsev kawm raug cai tsis thov cov ntaub ntawv tsis pub lwm tus paub los ntawm email lossis xa cov ntawv txuas ua tiav.

Yuav ua li cas txheeb xyuas qhov twg email tiag los ntawm

Kev tshuaj xyuas tag nrho cov header ntawm email tso cai rau koj kom paub meej tias nws cov keeb kwm tiag tiag thiab txoj hauv kev uas nws coj mus. Sib piv cov kev ua haujlwm nrog cov ntaub ntawv pom hauv "Los ntawm:".

• Gmail: Qhib cov lus, coj mus rhaub peb cov kab ntsug, thiab xaiv "Qhia thawj." Koj yuav pom cov code tiav thiab kab Los ntawm: qhabnias, Ntxiv nrog rau kev txheeb xyuas qhov tseeb.
• Outlook: qhib cov lus, txoj nyem thiab "Xaiv lus xaiv". Kos "Internet Header" kom paub tseeb tias Tau txais:, Los ntawm:, Teb-Rau:, thiab luam lub header yog tias koj xav tau parse nws.
• Yahoo Mail: Qhib cov lus, coj mus rhaub rau peb lub dots thiab xaiv "Saib cov ntawv xov xwm." Tshawb xyuas qhov Txais: nkag thiab tus neeg xa ntawv thawj tus IP txhawm rau txheeb xyuas qhov tsis sib xws.

Outlook qhia "?" ntawm tus xa daim duab thaum nws tsis tuaj yeem txheeb xyuas tus kheej, qhia kom ceev faj. Yog tias qhov kev sib cuag tsis tu ncua feem ntau tsis tshwm sim nrog lub cim ntawd thiab tam sim ntawd ua, lawv yuav raug nyiag.

Lwm cov lus qhia yog tias yog qhov "Los ntawm:" qhov chaw nyob txawv ntawm ib qho hauv header, Koj yuav tuaj yeem pom tus neeg xa ntawv tiag tiag hauv qab, pab koj txheeb xyuas email cuav.

Yuav ua li cas yog tias koj tau txais email "los ntawm koj tus kheej email"

1) Tsis txhob teb, nyem rau ntawm qhov txuas, lossis qhib cov ntawv txuas. Teb tau lees paub tias koj lub thawv xa ntawv tau ua haujlwm thiab tuaj yeem pab txhawb kev tawm tsam yav tom ntej. Them tsuas yog fuels lub blackmail tsis tau daws dab tsi.

2) Rho tawm lossis kos cov lus raws li spam. Qhov no yuav pab txhim kho koj tus neeg muab kev pabcuam cov lim dej thiab txo qhov pom ntawm cov phiaj xwm zoo sib xws.

3) Txhim khu kev ruaj ntseg ntawm koj cov nyiaj: hloov koj tus password mus rau qhov muaj zog, tshwj xeeb, thiab qhib ob-kauj ruam pov thawj. Yog tias koj siv tib lo lus zais ntawm ntau lub platform, hloov nws ntawm txhua tus kom tsis txhob ua txhaum cai dhau los.

4) Saib xyuas kev nkag mus tsis ntev los no thiab kev ua haujlwm ntawm koj tus lej tseem ceeb. Yog tias koj tsis pom muaj qhov tsis txaus ntseeg nkag mus, nws yog qhov kev dag ntxias yam tsis muaj kev cuam tshuam tiag tiag.

5) Yog tias koj twb tau them nyiaj lossis muab cov ntaub ntawv, sau cov ntaub ntawv pov thawj (cov duab thaij duab, kev hloov pauv, cov lus) thiab ceeb toom rau cov tub ceev xwm, xws li Tub Ceev Xwm lossis Tub Ceev Xwm. Tsis txhob koom nrog kev sib txuas lus txuas ntxiv nrog tus neeg tawm tsam thiab khaws tag nrho cov pov thawj ntawm kev sim ua phem.

Yuav qhia li cas, lim, thiab thaiv raws li koj qhov kev pabcuam

Gmail: Kos ua phishing / spam thiab thaiv

Hauv Gmail, koj tuaj yeem tshaj tawm cov lus ua spam lossis phishing thiab thaiv tus neeg xa khoom kom tsis txhob xa email tsis xav tau yav tom ntej. Thaum xa email mus rau Spam, Google tau txais daim ntawv theej los txhim kho kev tshawb pom tag nrho.

• Kos ua spam hauv lub vev xaib: xaiv cov lus, nyem rau ntawm "!" icon, lossis siv Shift + 1; Gmail yuav lees paub qhov kev txiav txim.
• Hauv mobile: Xaiv cov lus, coj mus rhaub peb cov dots, thiab xaiv "Qhia raws li spam." Koj tuaj yeem siv lub app ntawm Android lossis iOS.
• Block sender: Qhib tus email, coj mus rhaub "Ntxiv" (peb lub cim) thiab xaiv "Block". Optionally, kuj cim raws li spam.
• Lim: hauv Chaw> Lim thiab chaw nyob thaiv> Tsim lim. Txhais cov cai tswj lossis cais qee cov emails.

Outlook / Hotmail: Tswj spam thiab thaiv cov neeg xa khoom

• Mark as "Spam": xaiv cov lus thiab nyem rau ntawm "Spam". Koj tuaj yeem txiav txim siab seb yuav qhia qhov no rau Microsoft lossis tsis; tus email yuav raug xa mus rau koj daim ntawv spam.
• Block sender: Hauv cov lus, nyem "Spam" thiab tom qab ntawd "Block Sender." Txhawm rau thim qhov thaiv, mus rau Cov Cuab Yeej> Tsis Txaus Nyiam.
• Txhim kho spam lim: nyob rau hauv Chaw> Saib tag nrho cov chaw> Xa ntawv> Junk mail. Qhib cov kev xaiv los thaiv cov kab txuas uas tsis txaus ntseeg, txuas, lossis cov duab.

Apple Mail thiab iCloud

• Los ntawm iPhone/iPad: Qhib email, coj mus rhaub tus chij, thiab xaiv "Txiv mus rau Junk." Koj tuaj yeem thaiv kev sib cuag los ntawm Chaw> Xa Ntawv> Thaiv.
• Nyob rau Mac: Xaiv cov lus thiab coj mus rhaub "Junk Mail" lossis luag nws mus rau lub nplaub tshev tsim nyog. Teeb cov ntxaij lim dej hauv Preferences> Spam.
• Nyob rau iCloud.com: Qhib cov lus thiab coj mus rhaub tus chij, tom qab ntawd "Txuag mus rau Junk" lossis rub nws mus rau lub nplaub tshev ntawd.

Thunderbird

• Qhib cov kev tiv thaiv spam: Cov ntawv qhia zaub mov> Kev Xaiv> Cov Nqi Them Nqi> "Spam Chaw". Tshawb xyuas "Qhib cov tswj".

Cov kev coj ua zoo los txo spam thiab tsis txhob poob rau hauv cov cuab yeej

Xav tias ua ntej koj qhia koj tus email thiab tsis txhob tshaj tawm nws ntawm cov chaw qhib lossis cov rooj sib tham, qhov twg bots thiab spammers tuaj yeem sau tau. Siv cov npe npe lossis cov nyiaj pov tseg rau cov ntawv sau npe tsis ntseeg.

Tsis txhob cuam tshuam nrog cov lus tsis txaus ntseeg: tsis txhob qhib cov ntaub ntawv, nyem rau ntawm qhov txuas, lossis tshem tawm cov email uas tsis txaus ntseeg, Qhov no lees paub tias koj tus email chaw nyob yog nquag thiab tuaj yeem ua rau qhov teeb meem loj dua. Rau cov ntawv xov xwm raug cai, yog, koj tuaj yeem tso npe tau txhua lub sijhawm.

Khaws koj lub kaw lus, browser thiab daim ntawv thov hloov tshiab, thiab siv cov tshuaj tiv thaiv kab mob nrog lub vev xaib thiab email tiv thaiv, tiv thaiv kev rub tawm cov ntaub ntawv tsis zoo thiab nkag mus rau qhov chaw dag.

Qhib ob-kauj ruam authentication ntawm koj cov kev pabcuam tseem ceeb, yog li ntawd txawm hais tias tus password raug xau, lawv tuaj yeem nkag tsis tau yam tsis muaj koj qhov thib ob ntawm kev ruaj ntseg.

Yog tias koj lis ntau cov ntawv xa tuaj, xav txog kev txhim kho spam ntxiv, uas muab txheej thib ob ntawm kev tiv thaiv cov lus tsis xav tau.

Yuav ua li cas paub yog tias koj cov ntaub ntawv lossis tus password tau raug nthuav tawm

Xyuas seb koj tus email account lossis passwords tau raug tso tawm hauv pej xeem xau, siv cov chaw ntseeg zoo li muaj hasibeenpwned.comYog tias koj pom qhov raug, hloov cov passwords cuam tshuam thiab pab MFA.

Yog tias koj ntseeg tias cov ntsiab lus rhiab nrog koj lub npe tau nthuav tawm hauv cov vev xaib lossis network, tshawb nrhiav koj cov ntaub ntawv thiab, yog tias koj pom cov khoom uas ua txhaum koj tus kheej, thov nws tshem tawm ntawm lub platform. Hauv European Union, koj muaj txoj cai kom tsis nco qab thiab tuaj yeem thov kom tshem tawm thaum tsim nyog.

Kev txheeb xyuas kev sib txuas lus los ntawm cov koom haum hauv paus

Qee lub tuam txhab tau siv kev tiv thaiv kev dag ntxias, xws li cov lej pov thawj ntawm lawv lub vev xaib raug cai. Yog tias koj tau txais email tsis txaus ntseeg los ntawm lub tuam txhab parcel thov kev them nyiaj lossis cov ntaub ntawv, validate cov ntaub ntawv nyob rau hauv lawv official lub website los yog hu rau cov neeg muab kev pab.

Nco ntsoov: Cov koom haum ntseeg siab tsis nug cov ntaub ntawv pov thawj, cov ntaub ntawv hauv tuam txhab nyiaj, lossis cov ntaub ntawv ua tiav ntawm email lossis SMS, Thiab yog tias koj tsis xav tias yuav xa khoom, qhov kev nyab xeeb tshaj plaws ua yog tsis quav ntsej thiab tshem tawm cov lus tsis txaus ntseeg.

Yuav ua li cas txheeb xyuas spam zoo dua nrog cov lus qhia tswv yim no

Thov txheeb xyuas tus neeg xa ntawv qhov chaw nyob, tsis yog lub npe uas tshwm hauv qhov pom, txhawm rau txheeb xyuas qhov txawv txav lossis cov uas tsis sib xws rau qhov chaw tshaj tawm.

Ceev faj ntawm cov lus nrog "Zoo" lossis "kev txiav txim tam sim" lub suab, nrog rau cov lus zoo xws li "Nyob Zoo Cov Neeg Siv Khoom." Cov lus raug cai feem ntau siv koj lub npe thiab ua kom muaj suab nrov dua.

Ua tib zoo saib cov ntawv sau lossis cov cim cim, thiab cov kab lus tsis zoo, uas feem ntau yog tshuab txhais cov cim lossis cov qauv siv tsis siv neeg.

Ceev faj heev nrog tsis paub txuas lossis txuas luv luv. Hover dhau cov kev sib txuas mus xyuas qhov chaw, lossis luam tawm thiab txheeb xyuas qhov URL hauv lub koob npe nrov yam tsis tau nyem los ntawm cov lus.

Feem ntau: "Lawv sau ntawv rau kuv ntawm kuv tus email thiab tseem teb rau kuv."

Cov neeg siv nrog Outlook lossis Hotmail cov nyiaj tau txais email uas tshwm sim los ntawm "Pegasus" lossis cov phiaj xwm kev quab yuam uas xav tau cryptocurrency, Thiab xav tsis thoob, qee cov neeg tau teb rau cov lus teb, txawm tias lawv tsis tas yuav muaj kev tswj hwm tus account.

Yog tias koj muaj kev pov thawj ob-kauj ruam tau qhib thiab koj lub cav ua haujlwm tsis pom kev nkag mus tau zoo, Nws yog lub cim qhia tias lawv tsis tau nkag mus rau koj tus account. Nws yog qhov zoo tshaj kom tsis txhob teb, kos npe spam, ntxiv dag zog rau koj tus password, thiab ua kom MFA nquag. Tsis tas li ntawd, ib qho tshiab antivirus ntxiv kev tiv thaiv tawm tsam cov ntaub ntawv tsis zoo.

Vim li cas email tso cai rau cov kev dag ntxias no thiab tus neeg siv yuav tiv thaiv koj li cas

Cov txheej txheem SMTP, siv rau kev xa email, tau tsim los tsis muaj kev lees paub tus neeg xa ntawv muaj zog, tso cai rau tus neeg xa ntawv tsis zoo los teeb tsa qhov kev txiav txim siab "Los ntawm:" chaw nyob uas servers lees txais thiab xa mus.

Ntawm txhua lub hops ntawm servers, lub cev ntawm cov lus raug kaw nyob rau hauv "Tau Txais": ntawm lub header technical, ua kom yooj yim rau kev taug qab ntawm tus thawj qhov chaw rau forensic tsom xam lossis nrhiav pom tus neeg tsis raug.

Cov neeg siv niaj hnub no, xws li Outlook, tso saib cov ntawv ceeb toom thaum lawv tsis paub meej tias tus neeg xa khoom yog tus kheej, Piv txwv li, ib lo lus nug cim lossis qhov sib txawv ntawm qhov chaw nyob, los pab peb txheeb xyuas cov neeg xa ntawv cuav.

Thaum twg thiab yuav ua li cas nce qhov teeb meem

Yog tias koj tau txais kev hem thawj uas ntseeg tau, cov ntsiab lus tshwj xeeb txog koj, lossis kev sim ua yuam kev cuam tshuam nrog cryptocurrency, khaws tag nrho cov pov thawj (headers, captures thiab muas) thiab ceeb toom rau tub ceev xwm.

Kuj ceeb toom qhov xwm txheej no rau koj tus kws kho mob email thiab lub chaw ua haujlwm cuav (bank, courier, thiab lwm yam), muab tag nrho cov ntaub ntawv khaws tseg.

Tus yuam sij rau kev tiv thaiv koj tus kheej yog kom paub txog phishing, tsis quav ntsej blackmail, thiab qhib cov txheej txheem tiv thaiv uas tsim nyog: kos npe spam, thaiv cov neeg xa ntawv, txheeb xyuas cov headers, ntxiv dag zog rau cov passwords, tswj MFA, thiab siv tshuaj tiv thaiv kab mob. Yog tias koj xav kawm ntxiv txog kev coj ua zoo li no kom tsis txhob poob rau nws, peb xav kom nyeem lwm cov ntawv, xws li qhov no txog Yuav ua li cas tshem malware ntawm kuv lub xov tooj ntawm tes.