Counterfeit checking and processing method and device for mails

Abstract

The embodiment of the invention discloses a counterfeit checking and processing method and device for mails. The method comprises the steps of if a new mail is received, obtaining key information andenterprise contacts of the mailbox locally; carrying out counterfeit checking on the new mail according to the key information, the enterprise contacts and checking rules; and if the new mail is checked to be a counterfeiting mail, obtaining and displaying target information of the new mail. The embodiment of the invention carries out counterfeit checking on the local key information and enterprise contacts of the mailbox according to the checking rules, thereby realizing enterprise customized counterfeit checking. In addition, appropriate checking rules can be formulated according to the actual situation so as to realize personalized checking and obtain an accurate counterfeiting mail reminder.

Description

technical field [0001] The embodiment of the present invention relates to the technical field of communications, and in particular to a method and device for checking and processing email counterfeit. Background technique [0002] With the rapid development of Internet technology, network attack incidents also occur frequently, especially for mailboxes that are frequently used in daily office and life, counterfeit emails emerge in endlessly. Phishers will obtain the target's common contact information through information theft, such as email contact addresses, and then "tailor-made" a sender's email address that is extremely difficult to identify. Targeted attacks, such as changing passwords. This kind of attack is extremely difficult for ordinary users to identify, and it is difficult to be discovered by traditional security detection systems, which poses a huge network threat to users. [0003] Counterfeiting checks in the prior art are based on the detection of email co...

AI Technical Summary

Problems solved by technology

This kind of attack is extremely difficult for ordinary users to identify, it is difficult to be discovered by traditional security detection systems, and it poses a huge network threat to users

[0003] Counterfeiting checks in the prior art are based on the detection of email content, attachments, and metadata, and identify whether an email is malicious through methods such as black and white lists, feature matching, and behavior detection, but it is not possible to determine whether the email has a targeted attack nature. However, the use of uniform rules cannot be customized according to the specific conditions of the enterprise, resulting in inaccurate reminders of counterfeit results and easily misleading users.

Images