Shulou(Shulou.com)06/01 Report--

As the saying goes, "it is easier to rob openly than to avoid hidden arrows". If spam and viruses attack openly from an external account, it is easy to identify and guard against them; but if they come from internal accounts, it is hard to avoid "domestic thieves". You need to deal with it mentally. Foreign cases can be used for reference:

According to a recent report released by the famous FBI, the number of frauds caused by hacking of corporate emails has increased by 270% since January 2015, causing economic losses of $2.3 billion since 2013. FBI has received reports of successful fraud using corporate mail in more than 79 countries, and more than 17642 companies have been hurt as a result.

The new generation of information crime is highly concealed and deceptive.

Criminals often succeed because of several factors: first, the cost of committing a crime is low, and some * peddle software and secret theft services on the black market, which can be implemented with a staggering return of millions of dollars a day; second, the amount of each sum is not large, and daily expenses of tens of thousands of dollars are common to large international enterprises, but a small number of small ones make criminals happy about it. Third, different from the previous methods of committing crimes, secret elements are more covert, often specious "falsify" internal employee accounts to cause the illusion. Although many employees have received security training, they tend to think that the * on the contrary, "the fortress is often breached from within," making it harder to detect false internal accounts.

For example: if the company CEO sends an email to the accountant asking for a remittance, and if the accountant receives a bank transfer request outside the company, the employee will realize that this is a scam. So criminals first steal and enter CEO's e-mail account, learn the words and sentences of TA, simulate the tone of TA, and then send their account number to the accounting staff, who will not question it and are unlikely to call CEO to confirm the payment (after all, CEO daily ten thousand computers, the money is not large), and the money is transferred.

To explain the key points of secret theft in detail, U-Mail email gateway can prescribe the right remedy to the case.

The key to the success of the crime is to crack the password of the CEO account. The common methods are: buy a domain name, which looks very similar to the target company, and then forge an account similar to the target account, such as using "1" instead of the letter "I" or "L" to send an email to the target account with malicious links. After the recipient clicks, the virus breaks out (all computer office documents will be damaged and encrypted), and the target account password will be intercepted; another way is to forge the same account as the target account, but not sent by the authorized server IP. Of course, if you use the U-Mail email Security Gateway, it has a "golden eye", using SPF records to accurately query and identify users who forge email addresses, and remind users that the address is a fake address, and that the software is better than people for round-the-clock monitoring.

In addition, the U-Mail mail gateway can also identify and filter extortion emails to ensure the security of users. Compared with ordinary corporate mailboxes that cannot filter illegal emails, U-Mail email Gateway can automatically block hidden email addresses and prevent them from being transmitted. U-Mail mail gateway and filter some spam through the following rules:

The 1.U-Mail mail gateway can handle more than 150000 mail messages per hour. CDN accelerates the link to ensure that the incoming mail is fast and stable.

two。 With email temporary storage function, if your server is powered off, disconnected or down, and the external mail is not lost, temporarily store it on the U-Mail mail anti-spam gateway, and immediately deliver the mail to the mail server after the internal system is restored.

3. Multi-mode anti-virus scanning technology is used to provide comprehensive anti-virus protection for SMTP communication.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.