Recently, many users have continuous reported about receiving fake emails ending with the same name as large enterprises. Therefore, with no sign emails "strange" as the attached link, downloaded the file ... users should be careful calling for confirmation before making the request.

Fake Tassteel Email

The more well-known enterprises, the more number of phishing e-mail
Recently, at the Security World 2013 conference, Nguyen Minh Duc - Director of Cyber ​​Security Division Bkav said that in 2013 a popular type of attack of the spyware is fake email large companies and attach malicious .doc file. As a customer case reflects received an email from a major telecommunications business. However, when carefully analyzed the sender address, we can see the IP address, the email is actually sent and hackers impersonating email address major telecommunications businesses to trick users to download the file to install malicious code. After you have access to a victim's computer, the malicious code that acts as a record keylog manipulation of the user typing characters, crawl, sneak screen capture, sound recording or video recording ...

Dated 07.04.2013, on the forums, many members reflected on the emergence of e-mail sent to impersonate BKAV some Gmail address in Vietnam with the title "Free BKAV copyrighted" content notification is to be awarded 6 months free use for clients BKAV Pro luck and attach 2 Bkav Pro file download link, Bkav LicPromo. However, if you check the user will see the return address to be implemented through a service provider's mail system such third smtp2.flowerscanada.com not sent through the server system Bkav. Although antivirus software then announced on the forums about the spoofed email and advising users to delete the email immediately and do not follow the instructions in it, but we also have members were "trapped" by hacker.

Talking to reporters ICTnews, Mr German said that the email spoofing of businesses, banks, Internet service providers are relatively common and occurs as soon as the unit begins to email notifications customers. "Enterprises increasingly popular yet, the number of fake emails appear as much," Mr. German said.

There are three common forms of fake email, the first email account is set up similar to the email addresses of well-known enterprises such as Microsoft, Google, Yahoo ... Form No. 2 is bad guys take advantage of interstitial security gap in the recipient's e-mail system, domain name businesses to send out an email that ends identical to well-known corporate email. Finally, an unusual form was forged hackers use is through the tools to impersonate business email (fake emails) similar cases are impersonating message communications mentioned in 2010. "Not to mention the emails" genuine "users stolen and used by hackers to spread malicious code," Mr. German said.

Users should call to verify information
According to Nguyen Minh Duc, form bad guys take advantage of the company email famous very popular and will continue strongly in the coming period. Thus, when users receive email promotions, service announcements, change the password of the bank, now ... have to look closely sender's email address. If the email including attachments, links or reset user account ... be careful to follow the instructions and it is best to call the company to verify the information. "And now to turn the query system, check the email address domain name to prevent hackers taking advantage of email spoofing," Mr. German said.

The same point, Mr. Tran Van Hoa - Deputy Director General of Police, Crime using high technology (Ministry of Public Security) warning, one of the trends of high tech crime will focus on the increasing use use of spyware, remote control to attack political aims, economic targeted at government agencies, banks, large enterprises (theft, sabotage of data, especially data data relating to national security, defense). "Therefore, the state agency officials, big business when things get weird and suspicious emails, you should call back to confirm," said Hoa concluded.

Internet sources