Email hacking

Source: Wikipedia, the free encyclopedia.
OPSEC
warning military personnel not to use email accounts with weak security.

Email hacking is the unauthorized access to, or manipulation of, an account or email correspondence.[1][2]

Overview

Email is a very widely used communication method. If an email account is hacked, it can allow the attacker access to the personal, sensitive or confidential information in the mail storage; as well as allowing them to read new incoming and outgoing email - and to send and receive as the legitimate owner. On some email platforms, it may also allow them to set up automated email processing rules. All of these could be very harmful for the legitimate user.

Attacks

There are a number of ways in which a

hacker
can illegally gain access to an email account.

Virus

A virus or other malware can be sent via email, and if executed may be able to capture the user's password and send it to an attacker.[3]

Phishing

Phishing involves emails that appear to be from legitimate sender but are

scams which ask for verification of personal information, such as an account number, a password, or a date of birth. If unsuspecting victims respond, the result may be stolen accounts, financial loss, or identity theft.[3]

Prevention measures

Email on the internet is sent by the

ISP or government agency and the contents can be read by passive monitoring.[4]
For higher security, email administrators can configure servers to require encryption to specified servers or domains.

Domain-based Message Authentication, Reporting and Conformance (DMARC). Setting all these in place is technically challenging, and not visible to the end user, so implementation progress has been slow. A further layer, Authenticated Received Chain
(ARC), allows mail flow through intermediate mail servers such as mailing lists or forwarding services to be better handled - a common objection to implementation.

Businesses typically have advanced

pen test" in order to find any gaps in security.[6]

Although companies may secure its internal networks, vulnerabilities can also occur through home networking.[6] Email may be protected by methods, such as, creating a strong password, encrypting its contents,[7] or using a digital signature.

If passwords are leaked or otherwise become known to an attacker, having

two-factor authentication
enabled may prevent improper access.

Cases of email hacking

Notable cases of email hacks include:

References

  1. ^ .
  2. ^ McCullagh, Declan (21 June 2013). "How Web mail providers leave door open for NSA surveillance". c|net. Retrieved 2 October 2018.
  3. ^ a b "Online security: Hacking". New Media Age: 8–9. 24 March 2005.
  4. ^ "All Projects - PRISM Break". prism-break.org.
  5. ^ James Cusick; Ian Burrell (20 January 2012), "We hacked emails too – News International", The Independent, London
  6. ^ Tony Dyhouse (25 October 2011), Email hacking victim Rowenna Davis tells her story, BBC
  7. ^ Verhoeven, Beatrice (11 November 2015). "Greatest Hits of Leaked Sony Emails". TheWrap. Retrieved 3 October 2018.
  8. ^ "Hacker exposes ex-US President George H W Bush emails". BBC News. 8 February 2013. Retrieved 10 February 2013.[permanent dead link]
  9. ^ Franceschi-Bicchierai, Lorenzo (October 20, 2016). "How Hackers Broke Into John Podesta and Colin Powell's Gmail Accounts". Motherboard. Retrieved August 13, 2018.
  10. ^ Stein, Jeff. "What 20,000 pages of hacked WikiLeaks emails teach us about Hillary Clinton". Vox. Retrieved October 21, 2016.