Dangerous emails

Most viruses and malicious programs infect computers via email.  The simplest way to infect a computer with your evil program, document or link is to send it to a user and convince them to execute/click it.  This can lead to damage, erasure or exfiltration of department files, login information or other private information by actors who definitely do not have your best interest in mind.

Scam emails can be convincing but a few good habits can raise your email safety level.

 

Keep your computer patched

The vast majority of malicious software depends on pieces of the computer operating system that contain programing flaws that have not been repaired.  Computer updates constantly repair the flaws in software as they are discovered.  As updates appear for your computer, allow them to install as soon as possible.  They are your first line of defence.

 

Just don't!

Apply a who - what - were smell test.  If you do not know who the apparent sender of an email is and were not explicitly expecting an attachment or a link, assume the worst.  Leave the mail alone.  Seek help desk advice to investigate the email further.

 

Fake senders

Always keep in mind the sender of an email can be forged. Even if you know the sender, did you expect an email with an attachment/link?

 

Understanding links in email

Our browsers help us remove one layer of obfuscation that senders can apply to links in an email.  Get in the habit of noting the link info as presented at the bottom of your browser as you hover your mouse over tinted links in an email.  If they are not the same the sender is trying to fool you. In most cases this is not a good thing.

 

What if?

If you have a suspicious email or have clicked on a link or document in an email that seems suspicious contact the help desk right away.