이메일 보안에 대한 일반적인 위협
이메일 보안에 대한 가장 큰 위협은 다음과 같습니다.
피싱
피싱 공격은 이메일 보안에 대한 가장 잘 알려진 일반적인 위협입니다. 피싱 공격은 형편없는 문법과 믿을 수 없는 구실로 유명한 나이지리아 프린스 스캠과 같은 공격으로 시작되었습니다. 시간이 지남에 따라 이러한 공격은 공격자가 더 그럴듯한 구실로 훨씬 더 세련된 이메일을 보내면서 더욱 정교해졌습니다.
The modern phishing attack can be general or targeted. These targeted attacks, also called spear phishing attacks, are highly researched and designed to trick a particular person or group.
비즈니스 이메일 침해(BEC)
One example of a common spear phishing attack is business email compromise (BEC). In a BEC attack, the target is tricked into sending sensitive data — or more commonly money — to the attacker. BEC attacks have become one of the most significant and expensive phishing attacks that companies face. According to the Internet Crime Complaint Center (IC3), BEC attacks between the years 2013 and 2022 caused an estimated loss of $50 billion.
멀웨어
Email is an ideal delivery mechanism for malware. Malware can be attached directly to an email or embedded in documents that are shared as attachments or via cloud-based storage. And once installed on a computer, malware may steal sensitive information or encrypt a user’s files.
데이터 손실
이메일 계정은 많은 민감한 정보에 액세스할 수 있습니다. 이메일을 통해 직접 전송되는 데이터 외에도 이러한 계정은 클라우드 기반 인프라 및 기타 온라인 서비스에 액세스하는 데에도 사용됩니다.
An attacker with access to these email accounts can gain access to all of this sensitive information, making email account credentials a common target of attack. Additionally, this information can be leaked by employees who accidentally include an unauthorized party on an email chain or fall for a phishing attack.
악성 링크
악성 링크는 사이버 범죄자가 이메일을 무기화하는 가장 일반적인 방법 중 일부입니다. 공격자는 이메일에 포함된 링크를 사용하여 수신자를 공격자가 제어하는 웹 페이지로 안내할 수 있습니다.
These phishing pages can be used for a variety of different purposes. Phishing pages can be designed to steal user credentials or deliver malware. Regardless, they can cause serious damage to an organization.
Account Takeover
In an account takeover (ATO) attack, a cybercriminal gains access to a user’s email or other online account. This is usually accomplished by stealing the user’s login credentials via phishing, credential stuffing, malware, or similar means.
Once an attacker has control over a user’s email account, they can abuse it in various ways. For example, the user’s email might be used in a spear phishing attack, to send out spam, or to gain access to other accounts by requesting password reset emails to be sent to the compromised account.
Spam
Spam is unwanted email sent out via mass mailers. Spam can be used for various purposes, ranging from marketing efforts by legitimate companies to attempts to infect the target computer with malware.
Quishing
Quishing is a form of phishing attack that uses QR codes. Emails will contain an image of a QR code, which, if scanned, will direct the user to a phishing site designed to harvest login credentials or infect their computer with malware.
Quishing attacks are designed to take advantage of the fact that a user is likely to scan the code presented in an email using the camera on their mobile device. Since personal smartphones are likely unmanaged by the company, this provides a means for the attacker to bypass the organization’s security controls.
체크 포인트를 사용한 Email Security
Cybercriminals understand how vital email is to modern business, making an email security solution capable of detecting phishing, data loss, and other email-related threats, an absolute necessity.
Check Point Harmony Email & Collaboration provides state-of-the-art protection against common and emerging email threats. To learn more about its capabilities, request a demo. You’re also welcome to try it out for yourself with a free trial.
피드백