Background
Phishing emails are widespread. In some cases, attackers steal corporate mailbox passwords due to weak security measures and use the compromised accounts to send phishing emails to other employees within the organization.
Real-world case
Related report: https://news.cctv.com/2022/05/26/ARTID5lk0rj9jcbOQaSrqGNg220526.shtml
If an employee in your organization receives a similar phishing email, the administrator can revoke the email. Follow these steps:
1. Log on to Alibaba Mail with an administrator account and go to the domain administration page. Choose Mailbox Tools > Mail Revocation. Enter the sender, recipient, or subject, and then click the Search button. The subject search supports fuzzy queries. Carefully select the correct emails to avoid revoking them accidentally.
2. Alibaba Mail lets you revoke a single email or multiple emails in a batch.
3. For more information, see How to revoke an email as a mailbox administrator.
Alibaba Mail security recommendations
1. Administrator sends email reminders to domain users
Dear colleagues,
Phishing emails are on the rise. Attackers often use them to steal sensitive user information or critical company data. Reports show that phishing emails are responsible for 90% of ransomware attacks.
For emails from unknown senders or emails in your spam folder, first verify the sender's identity. Do not reply to the email or click any attachments or links. If you find a suspicious email, report it as phishing and notify the mailbox administrator.
Follow these best practices to protect your account and prevent password theft:
Always use multiple methods to verify requests that involve money or sensitive information. Be extra cautious with emails claiming to be from official organizations or from your boss asking for money transfers or sensitive company data.
Treat any email asking for your account password with caution. Do not trust it. Confirm with an administrator. To verify an email's authenticity, manually type the company's website URL into your browser instead of clicking embedded links.
Use complex passwords and change them regularly. Do not use simple passwords.
Remember that any email asking for your password, or telling you to scan a QR code or visit an external link, could be a phishing attempt. Do not trust it. Handle it with caution and report it to an administrator. Avoid exposing your email address on public websites to prevent hackers from targeting your account.
XXXX Company
2. Enable phone number binding and two-factor authentication
3. Enable app-specific passwords for third-party clients
For more information about mailbox security solutions, see https://help.aliyun.com/document_detail/446574.html