Social Engineering Social Engineering
• I don’t recognize the sender’s email address as someone I ordinarily communicate with.
FROM FROM
• I don’t recognize the sender’s email address as someone I ordinarily communicate with.
• This email is from someone outside my organization and it’s not related to my job responsibilities.
• This email is from someone outside my organization and it’s not related to my job responsibilities.
• This email was sent from someone inside the organization or from a customer, vendor, or partner and is very unusual or out of character.
• This email was sent from someone inside the organization or from a customer, vendor, or partner and is very unusual or out of character.
• Is the sender’s email address from a suspicious domain (like
micorsoft-support.com)?
• Is the sender’s email address from a suspicious domain (like
micorsoft-support.com)?
• I don’t know the sender personally and they were not vouched for by someone I trust.
• I don’t know the sender personally and they were not vouched for by someone I trust.
• I don’t have a business relationship nor any past communications with the sender.
• I don’t have a business relationship nor any past communications with the sender.
• This is an unexpected or unusual email with an embedded hyperlink or an attachment from someone I haven’t communicated with recently.
• This is an unexpected or unusual email with an embedded hyperlink or an attachment from someone I haven’t communicated with recently.
• I was cc’d on an email sent to one or more people, but I don’t personally know the other people it was sent to.
TO TO
• I was cc’d on an email sent to one or more people, but I don’t personally know the other people it was sent to.
• I received an email that was also sent to an unusual mix of people. For instance, it might be sent to a random group of people at my organization whose last names start with the same letter, or a whole list of unrelated addresses.
• I received an email that was also sent to an unusual mix of people. For instance, it might be sent to a random group of people at my organization whose last names start with the same letter, or a whole list of unrelated addresses.
• I hover my mouse over a hyperlink that’s displayed in the email message, but the link-to address is for a different website. (This is a big red flag.)
HYPERLINKS HYPERLINKS
• I hover my mouse over a hyperlink that’s displayed in the email message, but the link-to address is for a different website. (This is a big red flag.)
• I received an email that only has long hyperlinks with no further information, and the rest of the email is completely blank.
• I received an email that only has long hyperlinks with no further information, and the rest of the email is completely blank.
• I received an email with a hyperlink that is a misspelling of a known web site. For instance,
www.bankofarnerica.com — the “m” is really two characters — “r” and “n.”
• I received an email with a hyperlink that is a misspelling of a known web site. For instance,
www.bankofarnerica.com — the “m” is really two characters — “r” and “n.”
© 2017 KnowBe4, LLC. All rights reserved. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies.
© 2017 KnowBe4, LLC. All rights reserved. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies.
Red Flags DATE
Red Flags DATE
• Did I receive an email that I normally would get during regular business hours, but it was sent at an unusual time like 3 a.m.?
• Did I receive an email that I normally would get during regular business hours, but it was sent at an unusual time like 3 a.m.?
• Did I get an email with a subject line that is irrelevant or does not match the message content?
SUBJECT SUBJECT
• Did I get an email with a subject line that is irrelevant or does not match the message content?
• Is the email message a reply to something I never sent or requested?
• Is the email message a reply to something I never sent or requested?
• The sender included an email attachment that I was not expecting or that makes no sense in relation to the email message. (This sender doesn’t ordinarily send me this type of attachment.)
ATTACHMENTS ATTACHMENTS
• The sender included an email attachment that I was not expecting or that makes no sense in relation to the email message. (This sender doesn’t ordinarily send me this type of attachment.)
• I see an attachment with a possibly dangerous file type. The only file type that is always safe to click on is a .txt file.
• I see an attachment with a possibly dangerous file type. The only file type that is always safe to click on is a .txt file.
• Is the sender asking me to click on a link or open an attachment to avoid a negative consequence or to gain something of value?
CONTENT CONTENT
• Is the sender asking me to click on a link or open an attachment to avoid a negative consequence or to gain something of value?
• Is the email out of the ordinary, or does it have bad grammar or spelling errors? • Is the sender asking me to click a link or open up an attachment that seems odd or illogical?
• Is the email out of the ordinary, or does it have bad grammar or spelling errors? • Is the sender asking me to click a link or open up an attachment that seems odd or illogical?
• Do I have an uncomfortable gut feeling about the sender’s request to open an attachment or click a link?
• Do I have an uncomfortable gut feeling about the sender’s request to open an attachment or click a link?
• Is the email asking me to look at a compromising or embarrassing picture of myself or someone I know?
• Is the email asking me to look at a compromising or embarrassing picture of myself or someone I know?
Mar/Apr | The Retailer Magazine | 13
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36
