Email Compromise

Protecting Your Personal Email Account

Email accounts are increasingly being compromised by cybercriminals. Every day, news outlets report on data breaches by cybercriminals. These data breaches are used by thieves to compromise email accounts. With an increase recently in these attacks, RRCU would like to share the importance of safeguarding your personal email account. Here is some helpful advice to safeguard your account against unauthorized access as well as insights on what to look out for on email compromise.

Potential Consequences of Email Compromise

• Scam Emails and Embarrassing Messages: If a hacker has your password and email address, they can send scam emails to your contacts or even pretend to be you and trick others. Extortion for confidential or sensitive data is common practice.
• Account takeover: Using your compromised email account, attackers may attempt to access social media accounts by resetting the password.
• Financial Risks: attackers may use your email account as a means of obtaining access to your bank or credit card information, which could result in financial loss. 

Protecting Your Email Account

• Avoid using the same password for several accounts: Instead, use unique, strong passwords. Make complex passwords with at least 14 characters, a combination of uppercase and lowercase letters, symbols, and numbers. Do not use easily guessable personal details.
• Be Wary of Links: Only click on links in emails if you know and trust the sender and if you were anticipating the link. Links that are fraudulent can take you to counterfeit websites made for collecting your personal data.
• Two-Factor Authentication (2FA): Activate 2FA for any account that supports it on any platform. 2FA provides an additional layer of security by requiring a secondary verification of identity, typically given to your smartphone, in addition to your password. Always avoid Email if possible. 

Some vendors do not demand password updates. Any account can eventually be compromised. Change your passwords regularly.

Identifying a Compromised Email Account

• Issues with Logging In: If you are having trouble logging into your email account and are receiving notifications that say your username or password is incorrect, it may mean that a hacker has changed your account password. Verify now you have a secondary or back account set up.
• Irregular Emails/Folders: Check your sent messages folder for any strange emails you didn't send. On the other hand, if you don't delete any sent messages yet your sent messages folder is empty, it can be a sign that someone else has access to your account without your permission.
• Attempted Password Reset: If you receive alerts or emails on attempted password resets. Threat actors will likely attempt to gain access to as much of your data as possible. If you receive an attempted password reset you did not initiate, immediately reset your passwords.

Responding to a Compromised Email Account

• Change Your Credentials: By updating your username and password, you can regain access to your email account. Make a strong, unique password and update your security questions. Your account is still vulnerable until your password is changed.
• Examine and Secure Account Settings: Examine your email account settings for any unauthorized changes. Remove any unusual URLs from your email signature and make certain that your emails are not automatically forwarded.
• Never respond to or engage with anyone claiming to be in control of your account. They will deceive you into demanding money. Always be sure that any support you contact during recovery is accessed directly from the company's website. They will never request that you install software!

Future Prevention Measures

• Stay Vigilant: Be cautious when interacting with emails, links, and attachments. Regularly review and strengthen your account security measures.
• Leverage third party tools: Password management tools are a great way to enforce complexity and uniqueness in password requirements. 

By following these guidelines, you can minimize the risk of email compromise and protect your personal information from falling into the hands of cybercriminals.