>> Hey, everyone. Welcome back to the course.
In the last module,
we wrapped up our discussion on malware.
In this video, we're going to talk about email crimes.
Just a quick pre-assessment question,
The CAN-SPAM Act sets
rules for sending commercial emails.
Is that true or false?
That's true. The CAN-SPAM Act
is a main thing that you'll hear
people talking about as you
get different emails from businesses,
and that's why you also see that
on unsubscribe button in those emails.
Just some basics on email.
For example, I send you an email,
so it goes through my email server first,
and then it goes to your email server,
and then from there, it goes to you.
That's a very simplistic definition,
but that's essentially how email works.
We have different types of email crime,
so things like spamming,
phishing, mail bombing, spoofing,
identity fraud, and chain letter.
Some of these work hand-in-hand.
For example, a chain letter could
be involved in phishing.
Also, spamming emails can be part of phishing.
Even a spoofing is part of phishing,
they're trying to hide their identity.
A lot of these correlated with each other,
but you'll just want to know these as
individual items for the exam.
Spamming. So as the name implies,
this is unsolicited email, it's a whole lot of it,
and I think the last figure I had read was somewhere
>> around 60-70 percent of all email is spam,
>> which is pretty accurate, I think still.
Then, of course, you know, as I mentioned,
the CAN-SPAM Act that covers commercial email.
For example, it also covers like if I wanted to spam
a bunch of people, I could
>> be held accountable under that law,
>> but specifically,
it's designed for businesses that are sending emails,
>> and in that light, a non-transactional email.
>> You go to Amazon, and you buy something,
they send you an email saying,
>> hey, you bought something,
>> that's generally not covered under CAN-SPAM Act.
>> However, you sign up
for my email list to get my newsletter,
and then you unsubscribe, and
I keep sending you to the newsletter,
I keep sending emails trying to sell you stuff,
>> that would be considered spam.
>> Phishing. Obviously, this is
a very popular social engineering attack nowadays.
The goal here is to get
some sensitive information or
potentially get a transaction done,
they might be a situation where they're
trying to harvest your username or password,
trying to get banking information from you,
whatever the case might be.
Or also, the attacker might be trying to
get you to like wire them money,
and that's what we see most commonly
in the business world,
is that an attacker says, "Hey,
is this a CEO, traveling abroad quickly,
send me $10 million to this bank account."
It's maybe not that much,
but you get the idea.
They're trying to get money sent to
different account that doesn't exist and use
some sense of urgency to do so,
and in the interim, what they're doing is
spoofing the identity of some individual of authority.
Mail Bomb. As the name implies,
it's sending a large amount of emails.
The goal here is to either
overflow the email box or overwhelm the email server.
Spoofing, as I mentioned,
is used a lot of times in
phishing emails, so basically,
the attacker is forging the email header.
>> They're saying, "Hey, this is John Doe."
>> Instead, it's really coming from
>> Amy Bolden for example.
>> Again, just trying to hide their identity,
so that way you will actually be more inclined to
open that email and take some action on it.
Identity Fraud. So as the name applies here, and again,
these are pretty easy, the name gives it away.
Someone else's identity,
we're using someone else's identity to do something,
so that might be like performing a crime
>> or even defrauding,
>> and actually, identity fraud can occur
>> without identity theft.
Let's say you got a boyfriend,
girlfriend, inadvertently,
you gave them your date of birth or
something to pay the
electric bill or whatever the case might be,
so they can pay a bill
in your name while you're at work or something
>> because they need to identify with the vendor.
>> Then that individual then
takes your date of birth and uses it
to open accounts and stuff
>> in your name as well and elsewhere,
>> so that would be identity fraud,
but they didn't necessarily steal
your identity because you gave it to them,
you gave them the information they needed.
Chain letters. You still see these to some capacity.
>> Most of the time they just go to your spam email.
>> They're generally designed
to either defraud you.
This is the most popular thing,
like, hey, you're
going to earn a lot of money if you do this.
Or urban legends like,
oh, did you hear about this or that happened,
>> and then you forward it to your friends, etc.,
>> and those are designed just to waste your time.
>> Electronic Records Management.
Some benefits of this organizations:
it helps you better
follow legal mandates for protection and data;
>> also can help prevent against unauthorized access;
>> prevent against statement manipulation;
it that can reduce the retrieval costs;
and then also allows you to
treat information on-demand.
For example, if you were in the healthcare industry
and regulatory body came by and said,
"Hey, I want to see that patient record,"
with electronics records,
you can just pull it up almost
instantaneously, in some cases,
there are some paper records you still
would have to request,
but for the most part,
you can pull it up electronically
and show it right there to the investigator.
Just a quick post-assessment question here.
An email bomb involves
a small amount of
email messages being sent.
>> Is that true or false?
>> We know that's false. As the name implies,
it's a bomb, it's a whole lot of stuff going on.
In this video, we talked about different email crimes.
In the next video, we're going to go over
Microsoft Exchange email logs.