关于加强防范钓鱼邮件的通知 Notification on Strengthening Anti-Phishing Measures

Notification on Strengthening Anti-Phishing Measures

Recently, our ECHEMI platform has received feedback from suppliers that some users have used the ECHEMI inquiry and quotation notification reply email (as shown in the case below) to guide suppliers to click on attached link for account login. After verification, this email is not official content of ECHEMI platform.

Please ignore the content of this email to avoid important information stolen. Please do not click on the attachment link to log in to the account.

If you have clicked the email link, please modify your account password to prevent phishing attacks. ECHEMI platform has frozen the user account of the illegal phishing activities.

Email fraud (phishing email) is frequently increased, and criminals use disguised official ECHEMI email addresses or domain names to deceive email recipients. The fraudsters may attempt to direct your payments to their own bank account, or may attempt to access confidential information about your account balance, business records, etc.

Here are several common phishing email risk signals and check tips:

1.  Require for emergency action

Be cautious about an email requiring that the recipient must immediately click, call, or open an attachment. Please check the content of the email and the sender of the email and check whether the sender's contact name, domain name are correct.

2.  Unusual email sender

When receiving email or information from unknown people, be alert and cross-confirm the accuracy of the information.

3.  Hover over the link to check content

Hover the mouse over the link before clicking it (Do not click the link to enter). Check the complete URL displayed in the lower left corner of the screen. If the URL displayed does not match the domain name displayed in the email content, please be alert. (as follows)

4.  Be wary of spelling and grammar errors

If an email has a clear spelling or grammar error, then this is most likely a fraud. For example, tamper with the correct support@echemi.com to support@echemi.com.

5.  Guard against short URL link

Short links are often used to hide the real destination of malicious links. Users should be careful when receiving short links. You can view the full link through using the URL extender.

6.  Check the domain name

Fishers often add seemingly legitimate company names to the URL, but the actual domain name is for the attacker. Users should carefully check the actual domain name and be alert for abnormally long or complex domain names.

If you suspect you may have been accidentally phishing, you should do these things:

1.  Change the password for all affected accounts immediately.

2.  If the phishing attack has caused you property damage, or caused any loss due to identity theft, please report it to your local law enforcement department immediately.

* If you encounter an email suspected to be sent by the ECHEMI platform, please contact our official customer support in time to confirm the authenticity of the email, beware of being cheated.

Official Customer Support Email: una@echemi.com

关于加强防范钓鱼邮件的通知

近期平台收到供应商反馈有用户通过ECHEMI询盘报价通知回复邮件（如下图案例展示），引导供应商点击附件链接后进行账号登录。经核实，该邮件非ECHEMI平台官方内容。

为避免被窃取重要信息，请忽略此邮件内容，不要点击附件内链接登录账号。

若您已经点击邮件内链接，请及时修改您的账号密码谨防钓鱼攻击！

ECHEMI平台已对有该违法行为用户进行账号冻结清退处理！

电子邮件诈骗（钓鱼邮件）频繁增加，不法分子会将邮件发信人伪装为ECHEMI平台官方邮箱或者域名，通过这种方式，欺诈者可能会试图将您的付款定向到他们自己的银行账户，或者可能试图访问贵司账户余额、商业记录等机密信息。

以下是几种常见的网络钓鱼电子邮件的风险信号以及检查技巧：

1.要求紧急行动

对声称必须立即单击、呼叫或打开附件的电子邮件保持谨慎，请仔细查看邮件或消息的发信人，确认发信人的联系人名称、域名是否正确。

2.不常见的发信人

当收到来自不认识人的电子邮件或信息，请保持警惕，交叉确认信息的准确性。

3.悬停链接检查内容

在点击链接之前，先悬停鼠标在链接上（注意不要直接点击链接进入！），查看屏幕左下角显示的完整的URL，如果显示的URL与邮件内容显示的域名不符，此时应该警惕！（如下所示）

4.警惕拼写和语法错误

如果电子邮件有明显的拼写或语法错误，则可能是诈骗。比如篡改我们平台域名或者人名为（support@echemi.com 篡改为 support@echemii.com）。

5.防范URL短链接

短链接常被用于隐藏恶意链接的真实目的地，用户在收到短链接时应谨慎点击，可以使用URL扩展器查看完整链接。

6.检查域名

钓鱼者常在URL中加入看似合法的公司名称，但实际域名是攻击者的，用户应仔细检查实际域名，警惕异常长或者复杂的域名。

如果您怀疑自己可能无意中受到了钓鱼攻击 ，您应该做这几件事：

1.立即更改所有受影响的账户的密码。

2.如果您已经损失了钱，或成为身份盗窃的受害者，请不要犹豫，向当地执法部门报告。

*如果您碰到疑似冒充ECHEMI平台发送的邮件，请及时与我们官方客服联系并确认邮件真实性，谨防上当受骗

官方客服热线：400-660-1110    邮箱：evelyn@echemi.com