In the integration trend, the strengthening of trade cooperation with foreign partners is growing for many businesses. Therefore, many Vietnamese businesses have been caught in the trap of fraudulent emails from the International Hacker Organization.
Many tricks of fake email are increasingly sophisticated because Hackers can penetrate the mail servers of both sides of the business to steal information, fake transaction contents to request money transfer. their account or spreading malicious code onto a user’s computer.
The FBI organization has also warned of phishing scams with cross-border phishing emails. Every year, cybercriminals pocket more than $ 214 million from victims in 45 countries.
The 2 most dangerous types of business-spoof emails
1. The fake email is exactly like a real business email
Fraudulent email scams usually involve the following basic steps: hackers send fake invoice emails to businesses that do business with foreign suppliers, impersonate suppliers to request The enterprise makes payments via bank transfer.
The fake corporate email usually looks very similar to the official email, so when looking at the familiar company name, logo, and email address, users can easily fall into the trap of cybercriminals and make money transfers. But then, they called to ask the partner to ship the goods to know that the partner really did not receive any money. Those fake email addresses can differ by exactly one period (.).
2. Fake email has malicious code
In cases of fake emails containing malicious links or attachments, phishing emails often entice users to unzip and open the attachment or click on a link in the email. The malicious code will be activated automatically and all user data will be encrypted, they will receive a request to pay a ransom to decrypt the data.
Hackers can also steal information and encrypt all of the data on the infected machine and the corporate mail server system, causing many serious consequences.
A typical example of a fake email at the National University of Ho Chi Minh City contains a virus
The real story about fake email
In a sharing session with People magazine at the end of February 2020, with just a fake email, the fraudster stole nearly $ 400,000 of female billionaires participating in Shark Tank America. That is Mrs. Barbara Corcoran, one of the big investors of Shark Tank America.
The hacker sent her an email with a receipt requesting payment of the cost of a real estate remodeling activity. As usual, Barbara’s assistant would send the bill to the accountant. But that day, the billionaire did not pay close attention to the email address of the sender. She did not doubt the contents of the bill and the recipient’s bank account, because she had many investments in real estate.
Barbara’s accountant also received an email about the bill and she believes it is an email from Barbara’s assistant, so she spent the money on the bill.
No one noticed the anomaly until the accountant sent an email to the assistant’s real email address to announce the payment was completed. Barbara’s assistant was shocked to see her name in the email address. No one can see that there is an incorrect word on the email address of the assistant. That is a tactic commonly used by hackers.
A fake email stole nearly $ 400,000 of a billionaire female billionaire joining Shark Tank America
The cause of fake emails is increasing
Due to the lack of dedicated email security solutions for businesses today, hackers can easily break into employee email accounts, track and capture transaction information such as documents, sale contract.
The overwhelming benefits of corporate email attacks have motivated the hacker team to expand and become more sophisticated.
People’s awareness of network security is still very limited, and the importance of network security to businesses has not been properly assessed.
Cybersecurity solutions are either not good enough, or too expensive to access, causing many difficulties for cybersecurity protection.
How to Prevent Fake Mail, Spam & Virus Mail
Businesses need to educate their employees about the dangers of cyberspace.
Train employees skills to identify fake email, cyber attack tricks, and forms of the fake email will arise from time to time.
Raise awareness of prevention, self-defense, and use advanced email security solutions to effectively protect the mail server system of the enterprise.
Register to use Mail Gateway SECUECloud with AI technology (artificial intelligence)
at Hotline: (028) 7306 8789 or email: email@example.com
We provide dedicated email security solutions suitable for every business from SMEs to Enterprises.