Email anatomy: headers, links, attachments
Dissecting transport routing paths, verifying Sender Policy Framework (SPF) flags, and analyzing attachment type hazards.
Section 3
Topic 9: Email and Browser Security
Advanced Indicators of Compromise in Phishing
Training users to look for contextual discrepancies, high-risk operational requests, and anomalous cross-channel updates rather than simple surface typos.
Browser safety settings and extension risks
Restricting broad extension execution rights, auditing sandbox tracking layers, and enforcing site privilege guidelines.
Safe downloads, copy/paste habits, and clipboard risks
Managing hidden text injection variations, clipboard scraping malware, and script container execution.
Website trust signals and certificate basics
Reviewing cryptographic validation levels, inspecting certificate authorities, and recognizing expired TLS handshakes.
The Emergence of Quishing (QR Code Phishing)
Analyzing how malicious hyperlinks are embedded into high-density matrix barcodes to bypass standard secure email gateways, forcing the security perimeter to shift onto unmonitored mobile endpoints.
Knowledge Check
Why do malicious QR codes present a specialized challenge to corporate secure email filters?
Because traditional filters scan inbound text links and code scripts; an image-based QR code can bypass static scanners, shifting the execution risk to a separate personal mobile device.
« Previous: Data Protection, Encryption, and Backups — Next: Web and Application Security Basics »