|
马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。
您需要 登录 才可以下载或查看,没有帐号?FreeOZ用户注册
x
这个骗术是通过给你发邮件共享文件,比如google drive文件共享, 然后你点击链接,熟悉的google登陆界面,你没有多想输入用户名和密码登陆了google drive,一切都很正常。但你的用户名和密码已经被盗了,骗子做的虚假网站,记录你的登录信息同时,再将你登录目的网站。不留意的话,比较难察觉。
以后大家登陆邮箱,银行等网站前多留意URL地址,看是否是官方地址。陌生人发的文件共享啥,不要点。
There's A New Scam To Steal Your Gmail Info, And It's Hard To Catch
Warning: If you receive an email with the subject "Documents," and it directs you to a webpage that looks like a Google Drive sign-in page, do not enter your information.
It's likely a new phishing scam, in which a thief creates a fake portal that asks for people's private information and then steals it. (Netflix recently faced a similar issue.)
This one uses a fake Google Drive landing page to get your Gmail address and password, cyber security company Symantec's official blog reported last Thursday. You're meant to think that the documents you'll be viewing are on Google Docs and that you need to sign in to see them. Remember, though, it's all a scam.
"We've removed the fake pages and our abuse team is working to prevent this kind of spoofing from happening again," a representative from Google tells The Huffington Post. "If you think you may have accidentally given out your account information, please reset your password."
Think you're smart enough to tell the difference between a fake Google Drive sign-in page and the real one? OK, which one of these two photos is of the real one?
Choice #1:
Choice #2:
The real Google page is the second, but be honest and admit you couldn't tell.
If you were to put your Gmail address and password in the fake login, your credentials would be stolen, but you'd be taken to a real document on Google Docs, so you might not even know you'd been scammed, Symantec says.
With access to your Gmail account, scammers can make purchases on Google Play, use your Google+ account, access your Google Drive documents and more.
As always, the easiest way to protect yourself from phishing scams is to not click on unknown links and not open emails from unknown senders. Also, don't type your password anywhere that you're not 100 percent sure is real.
[h/t Gizmodo]
This post has been updated to include a comment from Google. |