Ethical Hacking 简明教程

Ethical Hacking - Email Hijacking

Email Hijacking, or email hacking, is a widespread menace nowadays. It works by using the following three techniques which are email spoofing, social engineering tools, or inserting viruses in a user computer.

Email Spoofing

In email spoofing, the spammer sends emails from a known domain, so the receiver thinks that he knows this person and opens the mail. Such mails normally contain suspicious links, doubtful content, requests to transfer money, etc.

example

Social Engineering

Spammers send promotional mails to different users, offering huge discount and tricking them to fill their personal data. You have tools available in Kali that can drive you to hijack an email.

social engineering

Email hacking can also be done by phishing techniques. See the following screenshot.

phishing

The links in the email may install malware on the user’s system or redirect the user to a malicious website and trick them into divulging personal and financial information, such as passwords, account IDs or credit card details.

网络罪犯广泛地使用 Phishing attacks ，因为欺骗某人单击电子邮件中的恶意链接比试图突破计算机防御系统要容易得多。

Phishing attacks are widely used by cybercriminals, as it is far easier to trick someone into clicking a malicious links in the email than trying to break through a computer’s defenses.

Inserting Viruses in a User System

黑客可以劫持电子邮件帐户的第三种技术是通过使用病毒或任何其他类型的恶意软件感染系统。在病毒的帮助下，黑客可以窃取你的所有密码。

The third technique by which a hacker can hijack your email account is by infecting your system with a virus or any other kind of malware. With the help of a virus, a hacker can take all your passwords.

How to detect if your email has been hijacked?

  1. The recipients of spam emails include a bunch of people you know.

  2. You try to access your account and the password no longer works.

  3. You try to access the “Forgot Password” link and it does not go to the expected email.

  4. Your Sent Items folder contains a bunch of spams you are not aware of sending.

Quick tips

如果你认为你的电子邮件被劫持了，那么你需要采取以下措施 −

In case you think that your email got hijacked, then you need to take the following actions −

  1. Change the passwords immediately.

  2. Notify your friends not to open links that they receive from your email account.

  3. Contact the authorities and report that your account has been hacked.

  4. Install a good antivirus on your computer and update it.

  5. Set up double authentication password if it is supported.