評論
打印
The sixth scam of Christmas is the drive-by download
路過式下載
Sadly you do not have to agree to download software from a malicious site for it to happen. There are ways in which malware can be wheedled on to your machine just by visiting a site.We all roam randomly around the internet, especially when looking for presents, so it is hard to avoid such sites. However, try to watch for a trail that leads you into totally uncharted waters. It's difficult, but think before you click.
令人沮喪的是，即便你不同一個惡意網站下載軟件，騙子也能得逞。路過式下載（drive-by download）是一個在未經你同意或你不知情的情況下自動下載到計算機上的程序。
And, keep your virus checker and your browser up to date. Both increasingly afford some protection again this type of scam.
這種情況很難避免，因此點擊前一定要三思。此外，保持病毒檢查程序和瀏覽器的更新也是一種有效的防護措施。
The seventh scam of Christmas is the fake free wi-fi
假的免費wi-fi
For those who do venture out you will doubtless take refuge at some point in somewhere like a coffee shop, and often it appears to have free wi-fi.Such wi-fi connections should be considered insecure, so you should not visit any site where you need to enter credentials, card details or the like.All of that might be visible to others who can monitor your insecure connection to the free wi-fi.
這種wi-fi很可能會出現在咖啡廳等地方，這種連接是很不安全的。你輸入的憑據、卡的信息等重要資料都會被騙子獲悉。
The eighth scam of Christmas is the wi-fi probe
wi-fi探測
Something few realise is that when we connect our mobile phone to a wi-fi, it keeps a record of the connection.Thereafter if the device is not connected to a hotspot, it continues to send out requests to connect to all the previous networks to which it had linked.These can be read and we are revealing all wi-fis we have previously joined.In effect, your movements can be tracked and often your home network will even reveal where you live just by the name you have given it.Don't give scammers information they might use against you in some form of con.
當我們把手機連接到wi-fi，就有了連接記錄。以后手機如果沒有連接到新的無線熱點（Hotspot），它就會繼續向此前連接過的網絡發送請求。這些連接記錄都是可以讀取的，這就意味著可以追蹤你的行動甚至是住址。
The ninth scam of Christmas is a combination of the last two
免費wi-fi&wi-fi探測
If you keep your mobile wi-fi turned on there are methods whereby, as your mobile sends out a request to connect to a hotspot, a scammer can then pretend to be that very wi-fi. Your mobile is relieved to have found a connection it knows and so attempts to create a link, potentially giving away your wi-fi password.
如果手機wi-fi是開著的，手機會向無線熱點發送連接請求，這時候虛假的wi-fi就可以趁虛而入，“假裝”自己就是你所要連接的那個wi-fi。
Worse still, your mobile might think it has a secure connection and start to send other data that can be picked up by the scammer.
這種情況下可能會泄露你的wi-fi密碼。更糟糕的是，手機以為自己在安全網絡中，它會傳輸一些數據，而這些數據又會被騙子截獲。
This and the two previous scams can all be stopped by simply turning off your wi-fi on your mobile's settings when not on a hotspot you trust.
所以如果身處一個無法信任的無線熱點，請關閉手機的wi-fi設置。
The 10th scam of Christmas is the insecure website
不安全網站
Whether intentional or not, some websites still ask you for your credit card details - and much other valuable personal data - without offering a secure connection.
一些網站會要求你給出信用卡的詳細信息和其他有價值的個人數據，卻無法提供安全連接。
Know how your browser tells you that you have a secure connection - look for the padlock symbol or change of coloured address bar or whatever it is.If you don't have a secure connection don't trust that site with your details.
要確定連接是否安全，可以查看掛鎖標識和地址欄顏色的改變。
They either can't be bothered, in which case they don't deserve your custom, or they're a fake.Even if it is a secure connection make sure you click on the padlock symbol or similar to check that the site is registered to who you think it is.
如果認為連接不可靠，不要給出詳細資料。即便連接是安全的，也要確保點開的網站就是你所要上的那個網站。
The 11th scam of Christmas is the Man In The Middle (MiTM)
中間人
A Man in the Middle add-on may be watching over everything you are doing. There is no point in having a secure connection to your bank or shopping site if there is a piece of software sitting on your machine that can read all of the data before it is secured for transmission.A particularly common MiTM scam is for a "helper" application that has been installed to make your life easier when using your browser.This helper may be helping itself to anything you enter on the screen.The safest way to avoid this is to ensure that you have no "add-ins" running.If you know how, you can try this by manually configuring your browser but there are tools available, often from the banks free of charge, to do this for you.
如果你的電腦里有一個軟件可以在安全傳輸前讀取所有的數據，那么銀行或者購物網站的安全連接就毫無意義了。常見的“中間人”（MiTM）騙局就會將一個“Helper”軟件安裝到電腦里，讓你使用瀏覽器時更加簡單。但是這個軟件可以訪問你輸入的任何東西，為了避免它的干擾，最好確保沒有“插件”運行。
The 12th scam of Christmas is the nastiest of them all: the phone call
來電不善
It is worth being sceptical about whether the person calling you is who they say they are. You're having trouble with that new laptop you bought as a present. You've just about got it running but you can't quite figure out how to finish it off.All of a sudden the phone rings and a voice says: "This Microsoft/Apple/Google/Dell/HP we see that you have managed to connect to the internet using one of our machines/software but look like you could do with some support. We're here to help you. All we need is your username and password…"These scammers work on the principle that eventually they will find someone in exactly that position and upon receiving such a call the frustrated user is very likely not to question but rather welcome the caller.All this caller is trying to do is help themselves to your login details and steal valuable data from your machine.Sadly, there are more than 12 scams to watch out for, but be particularly aware of those scams that take advantage of the time of year.Context is everything to the successful scam. If it appears relevant, useful or personal it is much more likely to succeed.
想象一下，你買了一臺新的筆記本電腦，剛剛讓它開始運行，但是無法上網。這時一個電話打進來，告訴你他們可以提供幫助，只要你提供用戶名和密碼。事實上，騙子是想獲得你的登錄信息，并從你的電腦中竊取有用數據。
