Holidays are here and so are spammers / phish artists. As expected, the first wave of attack has been launched – an email of Easter greetings is making rounds. No spelling mistakes, a beautiful image and an equally dangerous link.
This will be a small blog – helping you to summarize the dos and donts – something similar to last minute revision during exams.
1: Disable remote images in your email client.
2: Do not click on Links contained in any of the greeting emails.
3: Visit a known e-greeting website and send a greeting – if you really want to reply a greeting with another.
Or better option would be – create a new mail and then compose your reply. Under any circumstances DO NOT PRESS Reply / Reply All button – why? well, there’ s a Click Me Link and someone might click. Secondly – I have seen strangers fighting over comments in Reply All – better enjoy the holidays.
4: Best of luck .
Now for the technical stuff: Driveby Downloads and Flash 0-day exploit will be used.
If you are an admin then change the passwords and ensure that your IDS notification system is up and running.