How to spoil attackers' plans by email

How to spoil attackers' plans by email: switch off automatic resource downloads

Emails are one of the most common methods cybercriminals use to spread malware and steal sensitive data. One trick many attackers use is loading external resources, such as images or tracking pixels, as soon as the email is opened. But there is a simple yet effective defence: switching off the automatic download of external content in your email client.

Why resource downloads are a security risk

External resources in emails can identify you and potentially even locate you by being loaded automatically. As soon as you open the email, a connection to the attacker's server is established, which tells them that your email address is active. This can lead to further targeted phishing attempts or malicious advertising.

There is also the risk that malicious code is transferred via downloaded content, a proven method for attacks that specifically exploit vulnerabilities in email clients.

The solution: switch off automatic resource downloads

By switching off the automatic loading of external content, you can make sure your device does not make any unwanted connections, so your privacy stays protected. Most email clients offer this function:

• Outlook: Go to File > Options > Trust Center > Trust Center Settings > Automatic Download and make sure pictures are not downloaded automatically ("Don't download pictures automatically in standard HTML email messages or RSS items" must be ticked).
• Apple Mail: Open Mail Settings, go to Viewing > Load remote content in messages and deactivate this option.
• Gmail: Go to Settings > General > Images and select "Ask before displaying external images" or "Always block external images".

The benefit: security and fewer distractions

By preventing attackers from knowing when and where you read emails, you make it much harder for them to launch targeted attacks. You also protect yourself from potentially harmful resources. And you benefit from fewer distractions from advertising content in emails.

Conclusion

Deactivating automatic resource downloads is a simple step towards more control over your emails and towards fending off potential attackers. Increase your security and protect yourself from data snoopers: a small click that can make a big difference.