"Bad email"

Submitted by Dan White on February 13, 2015 - 3:38pm

 

There appears to be a resurgence in "bad email" at the moment, so it seems an appropriate time to go over the rules for Sensible Computing.

While spam filters can filter out the vast majority of spam, no system is perfect. Spam filters can be gotten around by various methods such as using a known persons account, sending correctly formed email and acting like a "real email server" and so-on.

My advice is to never follow links from an email or open an attachment, without being completely sure that the email is legitimate.

  • Look for the language and tone used in the email - think "could this be automated" or does this sound like a real person, that I know?
  • Are you expecting this link or attachment in an email?
  • If unsure, email the person back and ask for confirmation it is legitimate.

Examples below:-

BAD EMAIL

From: Dan White [mailto:dan@runpcrunmail.com]
Sent: 13 February 2015 11:32
Subject: Dan White shared docs(via Google drive) I've shared an item with you.

To Access (http://platynimbus.com.ng/marr-dc-azzr/index.htm)
Open (http://playnimbus.com.ng/marr-dc-azzr/index.htm)

Google Drive: create, share, and keep all your stuff in one place.

Note the lack of personalisation, and the strange links which are not Google links as they as they purport to claim they are "Google Drive" - (remember it may also be an attachment instead)

GOOD EMAIL 

From: Dan White [mailto:dan@runpcrunmail.com]
Sent: 13 February 2015 11:32
Subject: Dan White shared docs(via Google drive)

Hi Tony,

As discussed on the phone regarding the Heinrich project, there is a problem with the sale and I've spoken to the client regarding this.

This spreadsheet has the latest information.

Of course, speak to me or Harry about this if you have any questions.

I've shared an item with you.

To Access (https://docs.google.com/a/runpcrunmail.com/spreadsheets/d/124F84niUWZuXNv2zHVGjwTcHc28nXjdH4fKRAmKXxGA/edit#gid=0)
Open (https://docs.google.com/a/runpcrunmail.com/spreadsheets/d/124F84niUWZuXNv2zHVGjwTcHc28nXjdH4fKRAmKXxGA/edit#gid=0)

Google Drive: create, share, and keep all your stuff in one place.

Note the sender is speaking about people and projects that you are aware of, also the links sent make sense, they purport to be Google Drive links and the links addresses start "docs.google.com" also if downloaded they are doc or xls files and not zip,hta,cmd or exe files