How is Email Phishing & Spoofing Hurting Your Business?

www.mithi.com

Surge in Use of Emails

www.mithi.com

Rise & Rise of Email Traffic

www.mithi.com

Email Phishing Phenomena - Worldwide

www.mithi.com

Email Phishing & Business Risks

www.mithi.com

What is Email Spoofing/Phishing?

www.mithi.com

Email Spoofing Tactics

www.mithi.com

Examples of Spoofed Email that Can Affect The Security:

• Email claiming to be from a system administrator requesting users to change their

passwords to a specified string and threatening to suspend their account if they do

not do this.

• A user receives an email that appears to have originated from one source when it

actually was sent from another source.

• Email claiming to be from a person in authority requesting users to send them a

copy of a password file or other sensitive information.

Why Does Email Spoofing Happen?

www.mithi.com

• Email envelope addresses are very easy to fake that the user can’t know who is

sending the mails.

• The basic SMTP protocol does not provide a mechanism to authenticate users.

• Its difficult for the user to track the record of sender who is sending mails to their

server until and unless he/she is having reliable authentication of the clients.

• Users cannot rely on the sender's email address as an identification.

How to Detect Email Spoofing?

www.mithi.com

Prevent Email Spoofing - 1

www.mithi.com

Prevent Email Spoofing - 2

www.mithi.com

Recognize and Report Email Phishing Scams

www.mithi.com

How Does Mithi SkyConnect Prevent Email Spoofing?

www.mithi.com

• Mithi Connect XF gives the solution by prevention of spoofing by users on the same

domain by default configuration to accept only authenticated SMTP.

• SMTP authentication has the capability of rejecting SMTP connections with sender

whose login is mismatched within a domain, which helps users to deny access if the

sender is sending mails without explicit permission.

With Mithi Connect XF, Prevent Email Spoofing

www.mithi.com

• Considering all the systems deployed by Mithi SkyConnect or Mithi Connect XF,

there is near zero chance of a spoof mail making it through the network

• Other references:

– http://www.mithi.com/connectxf-datasheet-mailpolicy/131.html

– http://www.mithi.com/support-internalspamattacks.html

– http://luxsci.com/blog/the-case-for-email-security.html

– http://www.mithi.com/product-productdatasheet.html#Security

– http://www.mithi.com/blog/2014/01/how-does-connect-xf-or-mithi-

skyconnect-prevent-email-spoofing/

Image Credits…

• http://cdn.toptenreviews.com/rev/misc/articles/5530/phishing-for-1.jpg• http://howtotech.org/wp-content/uploads/2014/06/What-is-Phishing-Scams-How-to-

Avoid-them.jpg• http://1.bp.blogspot.com/-

jWuAgbDzL_Y/USefkhv_QQI/AAAAAAAAUqs/r3NrV8L0U2c/s1600/Twitter+now+using+DMARC+to+prevent+email+phishing.jpg

• http://photos.appleinsider.com/Android.Fake.ID.072914.png• http://www.slideshare.net/jorges/email-phishing-and-

countermeasures?qid=61b8c855-1765-45e2-8e7b-7ce742028118&v=qf1&b=&from_search=1

www.mithi.com