search.noResults

search.searching

dataCollection.invalidEmail
note.createNoteMessage

search.noResults

search.searching

orderForm.title

orderForm.productCode
orderForm.description
orderForm.quantity
orderForm.itemPrice
orderForm.price
orderForm.totalPrice
orderForm.deliveryDetails.billingAddress
orderForm.deliveryDetails.deliveryAddress
orderForm.noItems
Social Engineering Social Engineering


• I don’t recognize the sender’s email address as someone I ordinarily communicate with.


FROM FROM


• I don’t recognize the sender’s email address as someone I ordinarily communicate with.


• This email is from someone outside my organization and it’s not related to my job responsibilities.


• This email is from someone outside my organization and it’s not related to my job responsibilities.


• This email was sent from someone inside the organization or from a customer, vendor, or partner and is very unusual or out of character.


• This email was sent from someone inside the organization or from a customer, vendor, or partner and is very unusual or out of character.


• Is the sender’s email address from a suspicious domain (like micorsoft-support.com)?


• Is the sender’s email address from a suspicious domain (like micorsoft-support.com)?


• I don’t know the sender personally and they were not vouched for by someone I trust.


• I don’t know the sender personally and they were not vouched for by someone I trust.


• I don’t have a business relationship nor any past communications with the sender.


• I don’t have a business relationship nor any past communications with the sender.


• This is an unexpected or unusual email with an embedded hyperlink or an attachment from someone I haven’t communicated with recently.


• This is an unexpected or unusual email with an embedded hyperlink or an attachment from someone I haven’t communicated with recently.


• I was cc’d on an email sent to one or more people, but I don’t personally know the other people it was sent to.


TO TO


• I was cc’d on an email sent to one or more people, but I don’t personally know the other people it was sent to.


• I received an email that was also sent to an unusual mix of people. For instance, it might be sent to a random group of people at my organization whose last names start with the same letter, or a whole list of unrelated addresses.


• I received an email that was also sent to an unusual mix of people. For instance, it might be sent to a random group of people at my organization whose last names start with the same letter, or a whole list of unrelated addresses.


• I hover my mouse over a hyperlink that’s displayed in the email message, but the link-to address is for a different website. (This is a big red flag.)


HYPERLINKS HYPERLINKS


• I hover my mouse over a hyperlink that’s displayed in the email message, but the link-to address is for a different website. (This is a big red flag.)


• I received an email that only has long hyperlinks with no further information, and the rest of the email is completely blank.


• I received an email that only has long hyperlinks with no further information, and the rest of the email is completely blank.


• I received an email with a hyperlink that is a misspelling of a known web site. For instance, www.bankofarnerica.com — the “m” is really two characters — “r” and “n.”


• I received an email with a hyperlink that is a misspelling of a known web site. For instance, www.bankofarnerica.com — the “m” is really two characters — “r” and “n.”


© 2017 KnowBe4, LLC. All rights reserved. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies.


© 2017 KnowBe4, LLC. All rights reserved. Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies.


Red Flags DATE


Red Flags DATE


• Did I receive an email that I normally would get during regular business hours, but it was sent at an unusual time like 3 a.m.?


• Did I receive an email that I normally would get during regular business hours, but it was sent at an unusual time like 3 a.m.?


• Did I get an email with a subject line that is irrelevant or does not match the message content?


SUBJECT SUBJECT


• Did I get an email with a subject line that is irrelevant or does not match the message content?


• Is the email message a reply to something I never sent or requested?


• Is the email message a reply to something I never sent or requested?


• The sender included an email attachment that I was not expecting or that makes no sense in relation to the email message. (This sender doesn’t ordinarily send me this type of attachment.)


ATTACHMENTS ATTACHMENTS


• The sender included an email attachment that I was not expecting or that makes no sense in relation to the email message. (This sender doesn’t ordinarily send me this type of attachment.)


• I see an attachment with a possibly dangerous file type. The only file type that is always safe to click on is a .txt file.


• I see an attachment with a possibly dangerous file type. The only file type that is always safe to click on is a .txt file.


• Is the sender asking me to click on a link or open an attachment to avoid a negative consequence or to gain something of value?


CONTENT CONTENT


• Is the sender asking me to click on a link or open an attachment to avoid a negative consequence or to gain something of value?


• Is the email out of the ordinary, or does it have bad grammar or spelling errors? • Is the sender asking me to click a link or open up an attachment that seems odd or illogical?


• Is the email out of the ordinary, or does it have bad grammar or spelling errors? • Is the sender asking me to click a link or open up an attachment that seems odd or illogical?


• Do I have an uncomfortable gut feeling about the sender’s request to open an attachment or click a link?


• Do I have an uncomfortable gut feeling about the sender’s request to open an attachment or click a link?


• Is the email asking me to look at a compromising or embarrassing picture of myself or someone I know?


• Is the email asking me to look at a compromising or embarrassing picture of myself or someone I know?


Mar/Apr | The Retailer Magazine | 13


Page 1  |  Page 2  |  Page 3  |  Page 4  |  Page 5  |  Page 6  |  Page 7  |  Page 8  |  Page 9  |  Page 10  |  Page 11  |  Page 12  |  Page 13  |  Page 14  |  Page 15  |  Page 16  |  Page 17  |  Page 18  |  Page 19  |  Page 20  |  Page 21  |  Page 22  |  Page 23  |  Page 24  |  Page 25  |  Page 26  |  Page 27  |  Page 28  |  Page 29  |  Page 30  |  Page 31  |  Page 32  |  Page 33  |  Page 34  |  Page 35  |  Page 36