Digital Shield reported:
"I'm on vacation" or "Out of Office" are automatic email messages that should be eliminated to prevent a cyberattack against the company. These types of responses, common during the summer, provide relevant clues about absence calendars, names and contacts of substitutes, positions or departments, and even information about the internal structure of an organization.
The automatic response itself is not the problem. The danger comes from the amount of information that may be provided. For example, if it is indicated that the financial director will be away during specific dates and that transactions can be handled by someone else, it provides the cybercriminal with a scenario on which they can build a fairly credible impersonation attack platform.
The automatic response itself is not the problem. The danger comes from the amount of information that may be provided. For example, if it is indicated that the financial director will be away during specific dates and that transactions can be handled by someone else, it provides the cybercriminal with a scenario on which they can build a fairly credible impersonation attack platform.
Find the original article here.
Key Takeaway: Eliminate out of office notifications for external emailers. If you must use, then remove specific information such as names, titles and contact for individuals which could be used to identify hierarchy, use generic contact information only.
Enroll in Training Sessions: Last Thursday of Every Month is Training on Frauds and New Scam Alerts and How to Combat
Enroll in Training Sessions: Last Thursday of Every Month is Training on Frauds and New Scam Alerts and How to Combat