钓鱼邮件攻击态势和技术发展

Phishing Email Attack Trends and Technology Development

基于当前电子邮件技术发展现状,总结梳理我国邮件安全总体态势及面临的风险隐患。从社会工程学视角出发,研究近年来主流网络钓鱼邮件攻击的方式、类型和使用技术,介绍邮件恶意附件常用的恶意木马、自解压文件、动态链接库侧加载等攻击技术的工作原理。分析生成式AI机器人、多片段程序编码混淆等新型信息技术加剧钓鱼邮件攻击的风险隐患,并结合理论和现实情况,就如何防范应对新型钓鱼邮件攻击提出对策建议。

Based on the status quo of email technology development,this paper summarizes and reviews the overall situation and hidden risks of email security in China.From the perspective of social engineering,it studies the methods,types and application techniques of mainstream phishing email attacks in recent years,and introduces the working principles of malicious Trojan horse,self-extracting file and dynamic link library side loading and other attack techniques commonly used in malicious attachments to emails.This paper analyzes the risks and hidden dangers of phishing email attacks aggravated by new information technologies such as generative AI robot and multi-fragment program coding confusion,and puts forward countermeasures and suggestions on how to prevent and deal with the new phishing emailattacks based on theory and reality.