This Christmas looks like being a bumper one for online shopping but not everyone is filled with the festive spirit and some have already set online traps they hope you will fall into. Here are twelve cyber-scams to watch out for this Christmas: The first scam of Christmas is phishing They've been around for years and we've all received a version. Fraudsters send you a message and attempt to make you click on a link to a fake site or open some malware that infects your machine. They may be old but they have evolved and some are very cleverly targeted (known as spear phishing). Imagine you are placing orders on a well-known website for gifts. Suddenly you receive an email - apparently from that very site - saying that there is a problem with your last order and can you please "click here" to attend to the problem. Logos, email addresses, even the link might look genuine but you'll get more than you bargained for if you do as the email asks. Check twice and click once. The second scam of Christmas is the fake virus checker You search for that elusive gift, and finally you're led to a site that appears to sell just what your nearest and dearest want. But wait, a message flashes up saying that your machine is infected… but don't worry just download the free virus check shown and your problem will be solved. By downloading it you will actually be infecting your machine and your problems will only just have begun. Install a good virus checker before you go online. The third scam of Christmas is the fake upgrade As the Christmas spirit gets going we all send each other links to jokes and videos, on Facebook, by email and via Twitter. Now imagine you arrive at one of these sites and it tells you that you don't have the latest Flash Player so you can't watch that funny video, but not to worry click here and you can get your upgraded player immediately. Not only will this "upgrade" be malware but that malware will go on to send messages to all your friends telling them to go see the "funny" video. The fourth scam of Christmas is the "current news scam" People will use major world events to scam you out of money, regardless of how sad the event may have been. We saw it with Typhoon Haiyan in the Philippines. Difficult to believe in a season of goodwill but before the aid agencies had reached the poor people affected there were already scam emails and associated websites asking you to donate. They look genuine but don't be fooled. The money goes nowhere but to the scammers. The fifth scam of Christmas is the illegal "cracked" download Many will be buying laptops or other computing devices for under the tree. They are expensive and there are many tempting offers to buy incredibly cheap operating systems, office products or other tasty goodies. There are even more tempting opportunities to download "free" copies of "cracked" pirated software. However, not only are you likely to find that the download is an illegal copy - and may not actually run or has an invalid key - but also that it comes with a hidden present: malware. Buy from reputable sites and remember if it's too good to be true then it probably is. The sixth scam of Christmas is the drive-by download Sadly you do not have to agree to download software from a malicious site for it to happen. There are ways in which malware can be wheedled on to your machine just by visiting a site. We all roam randomly around the internet, especially when looking for presents, so it is hard to avoid such sites. However, try to watch for a trail that leads you into totally uncharted waters. It's difficult, but think before you click. And, keep your virus checker and your browser up to date. Both increasingly afford some protection again this type of scam. The seventh scam of Christmas is the fake free wi-fi For those who do venture out you will doubtless take refuge at some point in somewhere like a coffee shop, and often it appears to have free wi-fi. Such wi-fi connections should be considered insecure, so you should not visit any site where you need to enter credentials, card details or the like. All of that might be visible to others who can monitor your insecure connection to the free wi-fi. The eighth scam of Christmas is the wi-fi probe Something few realise is that when we connect our mobile phone to a wi-fi, it keeps a record of the connection. Thereafter if the device is not connected to a hotspot, it continues to send out requests to connect to all the previous networks to which it had linked. These can be read and we are revealing all wi-fis we have previously joined. In effect, your movements can be tracked and often your home network will even reveal where you live just by the name you have given it. Don't give scammers information they might use against you in some form of con. The ninth scam of Christmas is a combination of the last two If you keep your mobile wi-fi turned on there are methods whereby, as your mobile sends out a request to connect to a hotspot, a scammer can then pretend to be that very wi-fi. Your mobile is relieved to have found a connection it knows and so attempts to create a link, potentially giving away your wi-fi password. Worse still, your mobile might think it has a secure connection and start to send other data that can be picked up by the scammer. This and the two previous scams can all be stopped by simply turning off your wi-fi on your mobile's settings when not on a hotspot you trust. The 10th scam of Christmas is the insecure website Whether intentional or not, some websites still ask you for your credit card details - and much other valuable personal data - without offering a secure connection. Know how your browser tells you that you have a secure connection - look for the padlock symbol or change of coloured address bar or whatever it is. If you don't have a secure connection don't trust that site with your details. They either can't be bothered, in which case they don't deserve your custom, or they're a fake. Even if it is a secure connection make sure you click on the padlock symbol or similar to check that the site is registered to who you think it is. The 11th scam of Christmas is the Man In The Middle (MiTM) A Man in the Middle add-on may be watching over everything you are doing There is no point in having a secure connection to your bank or shopping site if there is a piece of software sitting on your machine that can read all of the data before it is secured for transmission. A particularly common MiTM scam is for a "helper" application that has been installed to make your life easier when using your browser. This helper may be helping itself to anything you enter on the screen. The safest way to avoid this is to ensure that you have no "add-ins" running. If you know how, you can try this by manually configuring your browser but there are tools available, often from the banks free of charge, to do this for you. The 12th scam of Christmas is the nastiest of them all: the phone call It is worth being sceptical about whether the person calling you is who they say they are You're having trouble with that new laptop you bought as a present. You've just about got it running but you can't quite figure out how to finish it off. All of a sudden the phone rings and a voice says: "This Microsoft/Apple/Google/Dell/HP we see that you have managed to connect to the internet using one of our machines/software but look like you could do with some support. We're here to help you. All we need is your username and password…" These scammers work on the principle that eventually they will find someone in exactly that position and upon receiving such a call the frustrated user is very likely not to question but rather welcome the caller. All this caller is trying to do is help themselves to your login details and steal valuable data from your machine. Sadly, there are more than 12 scams to watch out for, but be particularly aware of those scams that take advantage of the time of year. Context is everything to the successful scam. If it appears relevant, useful or personal it is much more likely to succeed. |
據(jù)英國(guó)廣播公司報(bào)道,圣誕節(jié)是很多人的購(gòu)物盛宴,同時(shí)也是很多騙子活躍的高峰時(shí)期。如今網(wǎng)絡(luò)騙局層出不窮,不過(guò)萬(wàn)變不離其宗,其中12種特別值得警惕。 ***網(wǎng)絡(luò)釣魚(yú) “網(wǎng)絡(luò)釣魚(yú)”盛行多年。騙子給你發(fā)送信息,讓你點(diǎn)擊一個(gè)虛假網(wǎng)站或者打開(kāi)惡意軟件。 這種把戲并不新穎,但是騙子們也在“創(chuàng)新”,他們學(xué)會(huì)針對(duì)特定目標(biāo)人群,這就是所謂的“魚(yú)叉式網(wǎng)絡(luò)釣魚(yú)”。比如你在一個(gè)知名網(wǎng)站下訂單,突然收到一封郵件,乍看是這個(gè)網(wǎng)站發(fā)送的,郵件稱你的訂單有問(wèn)題,可以“點(diǎn)擊這里”解決。 ***虛假病毒檢查程序 想象一下你上網(wǎng)給親友挑選禮物,突然彈出一個(gè)消息框稱你的電腦受到了病毒感染,需要下載一個(gè)免費(fèi)的病毒檢查程序解決問(wèn)題。 事實(shí)上,如果你下載了這個(gè)軟件,電腦才會(huì)真正的受到感染。對(duì)此,我們應(yīng)該在上網(wǎng)前安裝好病毒檢查程序。 ***虛假升級(jí)軟件 我們習(xí)慣在圣誕節(jié)給親朋友好友發(fā)送笑話和視頻鏈接。想象一下,你登錄一個(gè)社交網(wǎng)站,它提示你沒(méi)有最新的Flash播放器,無(wú)法觀看搞笑視頻,“點(diǎn)擊這里”就可以升級(jí)播放器。 而這里的“升級(jí)軟件”本身就是惡意軟件,它還會(huì)發(fā)送信息給你的朋友,讓他們也來(lái)看這個(gè)有“埋伏”的搞笑視頻。 ***慈善騙局 騙子們還會(huì)用一些大的災(zāi)難來(lái)騙你的錢(qián)。很難想象,在臺(tái)風(fēng)“海燕”肆虐菲律賓后,竟有詐騙郵件和相關(guān)網(wǎng)站騙取人們的捐款。 它們看上去很真實(shí),但實(shí)際上這些錢(qián)只會(huì)流進(jìn)騙子的口袋里。 ***非法的“破解”軟件下載 筆記本電腦及其相關(guān)設(shè)備都比較昂貴,騙子們就會(huì)提議你去購(gòu)買便宜的操作系統(tǒng)軟件、office辦公產(chǎn)品等,并稱你可以下載“破解”的盜版軟件的“免費(fèi)”副本。 然而,不僅該軟件是非法的副本,而且可能隱藏有惡意軟件。 因此,我們應(yīng)該從有信譽(yù)的網(wǎng)站購(gòu)買相關(guān)產(chǎn)品。 ***路過(guò)式下載 令人沮喪的是,即便你不同一個(gè)惡意網(wǎng)站下載軟件,騙子也能得逞。路過(guò)式下載(drive-by download)是一個(gè)在未經(jīng)你同意或你不知情的情況下自動(dòng)下載到計(jì)算機(jī)上的程序。 這種情況很難避免,因此點(diǎn)擊前一定要三思。此外,保持病毒檢查程序和瀏覽器的更新也是一種有效的防護(hù)措施。 ***假的免費(fèi)wi-fi 這種wi-fi很可能會(huì)出現(xiàn)在咖啡廳等地方,這種連接是很不安全的。你輸入的憑據(jù)、卡的信息等重要資料都會(huì)被騙子獲悉。 ***wi-fi探測(cè) 當(dāng)我們把手機(jī)連接到wi-fi,就有了連接記錄。以后手機(jī)如果沒(méi)有連接到新的無(wú)線熱點(diǎn)(Hotspot),它就會(huì)繼續(xù)向此前連接過(guò)的網(wǎng)絡(luò)發(fā)送請(qǐng)求。 這些連接記錄都是可以讀取的,這就意味著可以追蹤你的行動(dòng)甚至是住址。 ***免費(fèi)wi-fi&wi-fi探測(cè) 如果手機(jī)wi-fi是開(kāi)著的,手機(jī)會(huì)向無(wú)線熱點(diǎn)發(fā)送連接請(qǐng)求,這時(shí)候虛假的wi-fi就可以趁虛而入,“假裝”自己就是你所要連接的那個(gè)wi-fi。 這種情況下可能會(huì)泄露你的wi-fi密碼。更糟糕的是,手機(jī)以為自己在安全網(wǎng)絡(luò)中,它會(huì)傳輸一些數(shù)據(jù),而這些數(shù)據(jù)又會(huì)被騙子截獲。 所以如果身處一個(gè)無(wú)法信任的無(wú)線熱點(diǎn),請(qǐng)關(guān)閉手機(jī)的wi-fi設(shè)置。 ***不安全網(wǎng)站 一些網(wǎng)站會(huì)要求你給出信用卡的詳細(xì)信息和其他有價(jià)值的個(gè)人數(shù)據(jù),卻無(wú)法提供安全連接。 要確定連接是否安全,可以查看掛鎖標(biāo)識(shí)和地址欄顏色的改變。 如果認(rèn)為連接不可靠,不要給出詳細(xì)資料。即便連接是安全的,也要確保點(diǎn)開(kāi)的網(wǎng)站就是你所要上的那個(gè)網(wǎng)站。 ***中間人 如果你的電腦里有一個(gè)軟件可以在安全傳輸前讀取所有的數(shù)據(jù),那么銀行或者購(gòu)物網(wǎng)站的安全連接就毫無(wú)意義了。 常見(jiàn)的“中間人”(MiTM)騙局就會(huì)將一個(gè)“Helper”軟件安裝到電腦里,讓你使用瀏覽器時(shí)更加簡(jiǎn)單。 但是這個(gè)軟件可以訪問(wèn)你輸入的任何東西,為了避免它的干擾,最好確保沒(méi)有“插件”運(yùn)行。 ***來(lái)電不善 想象一下,你買了一臺(tái)新的筆記本電腦,剛剛讓它開(kāi)始運(yùn)行,但是無(wú)法上網(wǎng)。這時(shí)一個(gè)電話打進(jìn)來(lái),告訴你他們可以提供幫助,只要你提供用戶名和密碼。 事實(shí)上,騙子是想獲得你的登錄信息,并從你的電腦中竊取有用數(shù)據(jù)。 相關(guān)閱讀 俄羅斯國(guó)家杜馬通過(guò)大赦令 影響2萬(wàn)多人 女外交官在美被捕激怒印度 美國(guó)務(wù)卿出面表“遺憾” 巴西拒絕斯諾登避難請(qǐng)求 稱無(wú)意對(duì)抗美國(guó) 美參議院要求中情局提交“強(qiáng)化審訊”內(nèi)部報(bào)告 (玉潔 編輯:信蓮) |