Anti-phishing contact person adding safety control method, client and a system

Abstract

The invention discloses an anti-phishing contact person adding safety control method, a client and a system, and relates to the technical field of network safety. The method comprises the following steps: collecting an application request of a user for adding friends or adding a chat group through an instant messaging tool; acquiring identity attribute information of the user to judge whether the user belongs to a sensitive user type or not; when judging that the user belongs to the sensitive user type, acquiring preset anti-phishing associated contact information, and establishing an anti-phishing group together with the user based on the anti-phishing associated contact; and sending the application request information to the anti-phishing group for auditing. According to the method, the network communication environment of sensitive users can be effectively supervised, the network security awareness of the users is improved, and the phishing fraud of the users is effectively prevented.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a security control method, client and system for anti-phishing adding contacts. Background technique [0002] While the Internet greatly facilitates people's lives, it also brings some unsafe factors to people. For example, the existence of some phishing websites endangers the safety of people's property and private information. Among them, Business Email Compromise (BEC) has always been a major mainstream of malicious fraud methods in the world. [0003] Fraudsters register domain names close to customer subjects, send related emails, and use social engineering techniques to carry out counterfeiting and fraudulent activities. In the specific implementation process of BEC attack, according to different scenarios, the attacker may pretend to be the manager of the enterprise or the insider of the authoritative organization, obtain the sensitive information of the victim t...

AI Technical Summary

Problems solved by technology

However, in the case that illegal emails cannot be effectively filtered, the existing technology does not have further remedial measures. Once a person who receives an email containing phishing information has weak security awareness or is negligent for a while, he may be successfully phished

Images