Last night I got an email from a former colleague who I hadn’t heard from in a while. The email didn’t have a subject line and simply read “Here’s the summary for Monday” and a PDF was attached. My Spidey Senses were triggered and I deleted the email without viewing the PDF. Obviously, his old email account was compromised. Unfortunately, this kind of attack works too often which is why nefarious characters keep using them.
There are at least three lessons to take away from the email that I received last night and the ones like them that land in inboxes everywhere every day. First, if you have an email account that you no longer use, close it. Second, use secure, complex passwords passphrases. Third, if you get an email that you think is suspicious, delete it.
How Easy It Is To Crack Your Password
This is a video in which Kevin Mitnick explains why your “clever” use of “@” in place of “a” in your password isn’t fooling anyone. He demonstrates how quickly hackers can crack passwords and explains why you should use passphrases along with two-factor authentication.
Beware of Social Engineering