Email, Web, and File Sharing Security

Why It Matters

Much of modern business relies on email, web browsers, and shared files—and that is precisely how most malware makes its way in.

Fundamentals

Email attachments: Never open unexpected attachments. Macro-enabled Office documents, .zip, .iso, .exe, .js files, and double extensions like "invoice.pdf.exe" are particularly risky. If you are unsure, you can analyze the file on virustotal.com (never upload confidential documents).
Links: Check the address bar: is the domain name correct? The padlock icon (https) only means the connection is encrypted; it does not mean the website is trustworthy. Fraudulent sites use https too.
Fake websites: Watch out for typosquatted or lookalike domains, "too good to be true" deals, and e-commerce storefronts that accept payment only via wire transfer.
File sharing: Using the "anyone with the link can view" setting makes a file publicly accessible the moment the link falls into the wrong hands. Restrict sharing to specific individuals and set expiration dates.
Removable media: Never plug in an unknown USB drive. Attackers still drop flash drives labeled "payroll" or "salaries" in parking lots.
Social media: Birthdays, pet names, schools, and workplace photos provide raw material for guessing security questions and crafting targeted phishing attacks.

A Real-World Scenario

A project file is shared using the "anyone with the link" permission. The link leaks outside an internal chat group. Months later, the sensitive document turns up indexed in a search engine.

Action Items

Review your active shared links monthly and revoke access once no longer needed.
Keep your browser and extensions updated; never install unfamiliar extensions.
Never share photos of employee badges, internal screenshots, or corporate documents on social media.

Keep in mind: The padlock icon indicates "encrypted," not "trustworthy."

*This article is part 6 of the 14-part Cybersecurity Awareness series.* Next up: Malware: viruses, spyware, and ransomware