内容

谨防落入网钓陷阱

Don’t  fall prey to phishing scams

当杰克收到两封从加拿大皇家银行发来的电子邮件,他立刻将其删掉。鉴于最近的心脏出血病毒以及其它恶意的网络钓鱼陷阱,他认定这两个邮件也是骗人的。他还立即给皇家银行打电话通知了有关邮件的事情。

 

When Jack received two emails from Royal Bank of Canada he deleted them immediately. In lieu of the recent Heartbleed bug and other malicious phishing scams, he assumed the emails were fraudulent. He immediately called RBC to notify them of the emails.

 

出乎意料的是,这两个邮件是真的。“我怎么知道它是不是真的?”他问到,同时告诉银行说他从来就不习惯银行利用电子邮件与顾客进行联络。

 

To his surprise, the emails were actually legitimate. “How could I know it’s legitimate?” he asked, noting that he isn’t used to banks using email to communicate with customers in the first place.

 

皇家银行的一位发言人Dickson先生表示, Jack所收到的这一电邮与罗渣士等机构所发出的广告性电邮没有实质性区别。

 

Royal Bank of Canada representative Ciaran Dickson said the emails Jack received were no different from promotional emails sent by a company such as Rogers.

 

Dickson先生表示:“除非一则重要示警,我们通常不会通过电子邮件联络别人。这些邮件之一属于银行网上服务新项目,与一条促销广告没什么区别。”

 

“We generally wouldn’t reach out by email to contact someone unless it was an alert,” Mr. Dickson says. “One of those emails was a new online banking feature, so it wasn’t asking for anything from anyone.”

 

尽管杰克对网上潜伏的骗子保持警惕避免了上当,可很多人没有能够区分合法的还是欺骗性的邮件。网钓陷阱,即骗子发出看起来很正规的、带公司标志的电子邮件,引诱客户到看似很正规的网页上使用自己的账号信息进行登录,已成为银行业的一大毒瘤。

 

Even though Jack exercised caution and has not fallen prey to lurking cyber-goons, many fail to differentiate between legitimate and fraudulent emails.Phishing scams, in which fraudulent parties send official-looking emails with company logos asking customers to sign onto equally official-looking websites using their online account information, have long been a bane of the banking industry.

 

当英国记者Jane Corbin200912月的一个晚上急着赶时间交工时,她在自己的雅虎信箱里收到了一条报警消息。这条消息宣称Corbin女士的账号面临关闭,除非她立刻证实自己的各种信息细节,包括她的密码。极度担心害怕的Jane立刻把自己最私人的信息交了出去。

 

When British journalist Jane Corbin was rushing to meet a deadline one evening in December 2009, she received an alarming message from Yahoo in her email inbox. The message claimed Ms. Corbin’s account would be shut down unless she confirmed her details, including her password. Fearing for the worst, she immediately offered up her most private details.

 

“它看起来和真的一样,”她在20101月在英国《卫报》上写到。“那图案、文字、还有底下的免责声明……甚至我的账号的一些细节也是准确的。”

 

“It looked authentic,” she wrote in January 2010 in the Guardian. “The graphics, the text, and the disclaimer at the bottom... even some of the details about my account were accurate.”

 

就在她输入私人信息几秒钟后,她的屏幕就黑了,随后她的通讯录上的所有人包括英国政府官员都接到了一封电子邮件,说她被陷在西班牙,继续往她的账户上汇款1500英镑。


Within seconds after entering her information, the screen went blank and everyone in her address book – including British government officials – received an e-mail saying that she was trapped in Spain and urgently needed 1500 pounds wired to her bank account.

 

网钓邮件常有一些关键词,引诱读者上当。这些吸引眼球的词汇能够制造出一种急迫感,其目的在于震惊或者恐吓目标读者,比如威胁或者警告说你的银行账户要被关闭或者冻结啦,还有神秘的转账示警,或是企图引起你注意的虚假安全警报等等。而打开网钓邮件还会导致恶意软件安装到用户的计算机上,这些软件能够在用户使用银行网络服务时盗取密码。

 

Phishing emails contain catchphrases, which may easily dupe the reader. These catch phrases,which create a sense of urgency and are constructed to shock or terrify intended targets, include threats or warnings that your bank account will close or be frozen, mysterious money transfer alerts, or phantom security alerts designed to grasp your attention.   Opening phishing emails can also result in malware being installed on a user's computer that can steal passwords when doing online banking.

 

除了向你索取密码和账户号码,欺骗性的网钓邮件往往语法不通,拼写错误。

Besides asking for passwords and account numbers, signs of phishing scams often include bad grammar and misspelled words.

 

 

Corbin女士的两难处境并非孤立事件,网钓陷阱大有上升之势。实际上,根据防毒软件制造商Symantec在十月份的一份报告,网络犯罪包括网钓陷阱去年给加拿大人造成超过30亿元的损失。

 

Ms. Corbin’s dilemma was not an isolated event, and Phishing scams are on the rise. In fact, according to an October report by antivirus software maker Symantec, cybercrime – including phishing scams – cost Canadians more than $3 billion last year.

 

根据CBC的一份报告,全球每天发送约有1.56亿封网钓邮件。在一份Visa Canada进行的调查的受访者中有三分之一承认上过当。在这次调查中,总共有84%的受访者表示经常收到网钓邮件,三分之二表示他们会去报告,如果他们知道如何报告的话。

 

According to a CBC report, there are 156 million phishing emails sent out globally every day, and about a third of the respondents to a Visa Canada survey admitted to having fallen prey to phishing scams.Overall, 84 per cent of the respondents in this survey said they frequently received phishing scams and two-thirds said they would report them if they knew how.

 

 

大多数网钓陷阱的捕猎对象为年轻人和老年人。尤其是,今天的技术上老道但人很单纯的一代人,经常成为骗子的猎物。一家国际咨询公司PwC的一份调查发现,年龄35岁以下的受访者有92%承认受到过网钓邮件的攻击。

 

Most phishing scams target youths and seniors. Specifically, today’s tech savvy but naïvegeneration have been the favored preys of fraudsters. A survey PwC, a global consulting firm found that 92 per cent of respondents under age 35 confirmed they had been targeted by phishing scams.

 

尽管大多数银行和公司会给予赔偿、反转、或者取消欺骗性的交易,顾客们仍应对网钓邮件保持警惕。

 

Even though most banks and organizations will compensate, reverse, or cancel fraudulent transactions, customers must remain vigilant in responding to phony emails.

 

正如皇家银行所说,他们从来不会在发给你的示警邮件中加上银行网络服务的链接。虽然这类邮件不要打开,但也别删掉,直到你转发给执法部门,包括“加拿大防止诈骗中心 antifraudcentre.caVisa公司的phishing(at)visa.com 或者reportphishing (at)apwg.org

 

As RBC states, banks never include a link to an online service nor will they send you alerts through email. While emails shouldn't be opened, they shouldn't be deleted until after they're forwarded to law enforcement, the Canadian Anti-Fraud Centre at info(at)antifraudcentre.ca; Visa's phishing(at)visa.com or reportphishing(at)apwg.org.

 

实际上,不到一秒钟的决定就足以让你保护自己的网上私人信息,避免成为网络骗子的牺牲品。

 

In fact, a split second decision can guard your online privacy and avoid of being victimized by the cyber predators.

 

“适当的怀疑不会有任何坏处,”杰克说。

 

“A healthy level of skepticism never does any harm,” said Jack.

 

 

我们鼓励所有读者在我们的文章和博客上分享意见。We are committed to maintaining a lively but civil forum for discussion, so we ask you to avoid personal attacks, and please keep your comments relevant and respectful. Visit the FAQ page for more information.

验证码
请输入验证码