找回密码
 FreeOZ用户注册
查看: 1210|回复: 7
打印 上一主题 下一主题

[生活tip] 留心账户安全 多留意URL地址

[复制链接]
跳转到指定楼层
1#
发表于 19-3-2014 22:50:40 | 只看该作者 回帖奖励 |倒序浏览 |阅读模式

马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。

您需要 登录 才可以下载或查看,没有帐号?FreeOZ用户注册

x
这个骗术是通过给你发邮件共享文件,比如google drive文件共享, 然后你点击链接,熟悉的google登陆界面,你没有多想输入用户名和密码登陆了google drive,一切都很正常。但你的用户名和密码已经被盗了,骗子做的虚假网站,记录你的登录信息同时,再将你登录目的网站。不留意的话,比较难察觉。

以后大家登陆邮箱,银行等网站前多留意URL地址,看是否是官方地址。陌生人发的文件共享啥,不要点。



There's A New Scam To Steal Your Gmail Info, And It's Hard To Catch

Warning: If you receive an email with the subject "Documents," and it directs you to a webpage that looks like a Google Drive sign-in page, do not enter your information.

It's likely a new phishing scam, in which a thief creates a fake portal that asks for people's private information and then steals it. (Netflix recently faced a similar issue.)

This one uses a fake Google Drive landing page to get your Gmail address and password, cyber security company Symantec's official blog reported last Thursday. You're meant to think that the documents you'll be viewing are on Google Docs and that you need to sign in to see them. Remember, though, it's all a scam.

"We've removed the fake pages and our abuse team is working to prevent this kind of spoofing from happening again," a representative from Google tells The Huffington Post. "If you think you may have accidentally given out your account information, please reset your password."

Think you're smart enough to tell the difference between a fake Google Drive sign-in page and the real one? OK, which one of these two photos is of the real one?

Choice #1:

                               
登录/注册后可看大图



Choice #2:


                               
登录/注册后可看大图


The real Google page is the second, but be honest and admit you couldn't tell.

If you were to put your Gmail address and password in the fake login, your credentials would be stolen, but you'd be taken to a real document on Google Docs, so you might not even know you'd been scammed, Symantec says.

With access to your Gmail account, scammers can make purchases on Google Play, use your Google+ account, access your Google Drive documents and more.

As always, the easiest way to protect yourself from phishing scams is to not click on unknown links and not open emails from unknown senders. Also, don't type your password anywhere that you're not 100 percent sure is real.

[h/t Gizmodo]

This post has been updated to include a comment from Google.

评分

参与人数 4威望 +170 收起 理由
dreamcat + 50 谢谢分享!
cynthiawu + 50 谢谢分享!
周星星1832 + 50 你太有才了!
ubuntuhk + 20 谢谢分享!

查看全部评分

回复  

使用道具 举报

2#
发表于 19-3-2014 23:27:45 | 只看该作者
现在的骗子真是防不胜防,一不小心就要上当吃亏。
回复  

使用道具 举报

3#
发表于 20-3-2014 00:01:13 | 只看该作者
这种钓鱼的最讨厌
回复  

使用道具 举报

4#
发表于 20-3-2014 00:28:21 | 只看该作者
假的看上去只是 清晰度和真的不同?
回复  

使用道具 举报

5#
发表于 20-3-2014 01:49:59 | 只看该作者
太恶心
回复  

使用道具 举报

6#
发表于 20-3-2014 09:39:08 | 只看该作者
回复  

使用道具 举报

7#
 楼主| 发表于 20-3-2014 20:31:37 | 只看该作者
cynthiawu 发表于 20-3-2014 00:28
假的看上去只是 清晰度和真的不同?

假的和真的看上去一样,也一样能登陆,只是一开始的URL不一样,但你的登录信息已经被盗了。
回复  

使用道具 举报

8#
发表于 20-3-2014 21:07:17 | 只看该作者
大尾巴甩甩 发表于 20-3-2014 20:31
假的和真的看上去一样,也一样能登陆,只是一开始的URL不一样,但你的登录信息已经被盗了。

界面都一样,网址是相似~钓鱼?

评分

参与人数 1威望 +50 收起 理由
大尾巴甩甩 + 50 高级钓鱼,因为你登录假链接后会最终会转入.

查看全部评分

回复  

使用道具 举报

您需要登录后才可以回帖 登录 | FreeOZ用户注册

本版积分规则

小黑屋|手机版|Archiver|FreeOZ论坛

GMT+11, 16-10-2026 12:54 , Processed in 0.036742 second(s), 24 queries , Gzip On, Redis On.

Powered by Discuz! X3.2

© 2001-2013 Comsenz Inc.

快速回复 返回顶部 返回列表