IT Security Awareness Tips - Email Hack

Dear All,

请注意！今天又发生了一件有黑客冒用ShaShin的名字发出一份邮件索要个人信息。

切勿在未确认发件人身份的邮件地址上回复或透露个人信息！

BE AWARE! Another hacker used Shashin’s name to send an email to one of our colleagues and asked for personal information.

Please DO NOT reply this mail or give out any personal information before the confirmation of the sender’s identity.

邮件内容如下

The mail is as follows,

我们很庆幸于用户的高度安全意识，今天黑客没有获取任何个人信息或公司机密文件。

Fortunately, there is no leakage of any information or confidential files due to end user’s high level of Security Awareness.

明天就是国庆节了，Sinokap希望您在享受假日的同时，也要注意自己各类软件上的信息安全。

Since the National Day is coming, we hope that you can enjoy the holiday meanwhile keep your information secure on apps.

以下我们模拟了几种黑客在节假日的欺骗手段。

Here are several deception methods used by hackers during holidays.

场景1， 假装人在国外，无法访问公司邮箱，从而索取报价等机密文件

Dear XXX, I am out of China with No Phone and cannot access company email. There is VIP Customer waiting for the quotation or confidential files. Pls. send me immediately. Thank you.

场景2， 假装人在旅游途中遭遇偷盗，从而索取钱财或银行账号

Dear XXX, I am in travel and No Phone No Money, pls. send me transfer some money for XXX and I will appreciate your kindness in this urgent case and back to you after holiday. Thank you.

场景3， 假装人在旅游途中，无法访问公司邮箱，从而索取邮箱账号密码

Dear XXX, I am in travel and I need my company email password immediately, I need reply the VIP email NOW!!! Thank you.

我们处理这些事情的应对方法是：

Our suggestions are as follows,

A. 在确认身份前，千万不要给出他邮件中要求的内容！

DO NOT give out ANY information that is required in the mail before confirming the identity.

B. 直接拨打对方的手机，确认事件的真实性。

Directly contact the person to confirm the authenticity of the incident.

C. 让对方拨打你的手机，如果他用各种理由搪塞，不需要理他。

Directly ask the sender to contact you. We can assume you and the sender are in a business relationship, the sender should have your contact, in addition to email. If the sender makes excuses to refuse directly call you, you may ignore it.

一旦发现该邮件，请立即联系Sinokap IT，我们会第一时间阻止该邮件避免任何信息损失。

Once you find out this email is fake, please immediately inform Sinokap IT and we will block it at the first time in case any information lost.

如果您在假期中遇到此类问题，请联系gusto-luxe-support@sinokap.com。

If you’re having problems , please contact gusto-luxe-support@sinokap.com.

请重视此类钓鱼邮件对您的重要资料所带来的威胁。Sinokap IT一直保障您的IT安全。

Please pay attention to the damage caused by phishing email.

Sinokap IT always supports you and your workplace with a Secured IT Environment.

Sinokap IT安全意识培训

Related IT Security Awareness Training:

Sinokap Website: https://it-support-china.com/it-blogs/

Sinokap WeChat Article：https://mp.weixin.qq.com/s/uUDfClJNKPYZoRf8W87ODA