Shopify账户保�；；；；； ；；ず吞岱�
保�；；；；； ；；つ恼嘶馐芡绱孤诠セ�
网络垂纶一词指涉及虚伪网站和电子邮件或其他新闻的身份偷窃诈骗。。。。。 。网络垂纶攻击的目的是获取您的账户和敏感信息的会见权限。。。。。 。攻击者可能模拟声誉优异的网站来建设自己的网站，，，，，， ，或向您发送似乎来自可靠泉源的新闻。。。。。 。网络垂纶新闻可能来自虚伪账户或已被黑客攻击的账户。。。。。 。
备注：若是您以为自己通过可疑渠道共享了小我私家信息，，，，，， ，并且您的信息和身份面临危害，，，，，， ，请遵照政府指南执行操作。。。。。 。
网络垂纶邮件可能会要求您完成以下使命：
会见链接。。。。。 。
下载文件。。。。。 。
翻开附件。。。。。 。
恶意软件 — 蠕虫、木马程序、僵尸程序和病毒等恶意软件 — 会在您执行任何以上操作时熏染您的盘算机或移动装备。。。。。 。熏染装备后，，，，，， ，入侵者便可以会见您的小我私家信息。。。。。 。
网络垂纶诈骗可能还包括直接请求小我私家信息（如银行账户凭证）。。。。。 。
网络垂纶诈骗可能会要求您提供以下小我私家信息：
通过电子邮件或其他新闻传送系统。。。。。 。
通过表格。。。。。 。
诓骗性的电话号码。。。。。 。
通过伪造的真实地点。。。。。 。
纵然要求您输入电子邮件地点和重置密码也可能是危险的。。。。。 。
备注：将您收到的任何网络垂纶邮件转发至 Shopify 的清静收件箱，，，，，， ，地点为 safety@shopify.com。。。。。 。通过建设商家所受攻击的纪录，，，，，， ，Shopify 可以更好地保�；；；；； ；；つ湍男畔�。。。。。 。
熟悉忠言标记
您可以通过相识忠言标记来提防网络垂纶。。。。。 。无论显示的发件人是谁，，，，，， ，都要仔细阅读邮件；；；；；； ；；无论网站看起来何等熟悉，，，，，， ，都要仔细检查。。。。。 。
过于笼统的语言
虽然网络垂纶可能经由深入研究并针对您和您的企业举行定制，，，，，， ，但笼统的语言是网络垂纶诈骗的标记。。。。。 。若是邮件看似来自您信托的组织可是以模糊的语句开头，，，，，， ，好比尊重的账户持有者，，，，，， ，请坚持小心。。。。。 。
同样，，，，，， ，若是某封邮件向您允许有千载一时的商业或财务时机，，，，，， ，但却未提供足够的详细信息让您能够确认发送者熟悉您，，，，，， ，那么这也可能是诈骗：
我是 Frederick，，，，，， ，一名银行家。。。。。 。请尽快就可能已故支属的遗产与我联系。。。。。 。我无法通过短信分享太多信息。。。。。 。请通过以下地点给我发送电子邮件。。。。。 。
小我私家账户中的商业信息
履历富厚的攻击者可以通过您的在线营业网络富足的信息，，，，，， ，从而建设看似来自真实联系人的邮件：
批发价钱更新
您好，，，，，， ，Georgia，，，，，， ，我想向您提供最新资讯。。。。。 。这是我们目今批发价钱的电子表格：fabric-prices-2016-oct.xls
希望您对上一批衬衫知足!若是您有任何问题或疑虑，，，，，， ，请与我们联系。。。。。 。
--
Julia Chan
客户司理
示例形式
为发送攻击，，，，，， ，他们会侵入您的联系人的企业账户或建设虚伪的小我私家账户。。。。。 。例如，，，，，， ，若是您的联系人 Julia 的小我私家电子邮件用户名为 juliachan3857，，，，，， ，攻击者可能会使用用户名为 juliachan9665 的账户发送电子邮件。。。。。 。这种攻击形式依赖于两方面的因素：
人们会不小心用过失的账户发送电子邮件。。。。。 。
纵然您知道 Julia 的小我私家电子邮件地点，，，，，， ，但您也许不会仔细审查。。。。。 。
拼写过失、语法过失、样式多变
犯法分子并不像专业的网络内容撰稿人那样认真看待内容气概指南。。。。。 。除了拼写过失和语法过失，，，，，， ，在一个页面中泛起以下类别的转变形式也可能批注是诓骗网站：
拼写。。。。。 。
大写。。。。。 。
编号。。。。。 。
标点。。。。。 。
名堂。。。。。 。
危言耸听或过于激动的语气
留神时间紧迫的请求，，，，，， ，这些请求妄想通过威吓使您不假思索地接纳行动。。。。。 。例如，，，，，， ，Shopify 不会向您发送包括以下内容的新闻：
我们遇到了异常严重的效劳器故障。。。。。 。在 24 小时内回复您的用户名和密码，，，，，， ，不然您将永世无法会见您的市肆。。。。。 。
同样，，，，，， ，注重那些看起来好得令人难以置信的优惠信息，，，，，， ，例如只有您连忙加入才华获得旅游公司 90% 的折扣。。。。。 。
看起来不准确的 URL
网络垂纶实验可能包括看起来正当的 URL，，，，，， ，不仔细审查将无法发明。。。。。 。许多网络垂纶实验使用居心选择的 URL，，，，，， ，它们类似于您熟悉的 URL。。。。。 。如下表所示，，，，，， ，若是您通常通过正当 URL 从 Example Apparel 购置游泳衣，，，，，， ，并且您收到一封带有虚伪 URL 链接的电子邮件，，，，，， ，您便可区分出这是一次网络垂纶实验。。。。。 。
真实的 URL 会将您指导至属于 Example Apparel 的域名 example-apparel.com 中的网站，，，，，， ，而虚伪 URL 会将您指导至可能为犯法分子所有的域名 com-aquatic.net 中的恶意网站。。。。。 。
| 正当 URL | 虚伪 URL |
|---|---|
| example-apparel.com/aquatic/swimmies | example-apparel.com-aquatic.net/swimmies |
使用其他相同方法提出疑虑
亲自对话或通过电话与可能发送可疑信息的人攀谈，，，，，， ，并通过与组织中的某人攀谈来解决对网页的担心。。。。。 。
若是您通过电话联系发件人，，，，，， ，请拨打已存档的号码或泛起在多个信誉优异的在线泉源上的号码。。。。。 。例如，，，，，， ，若是您通过电子邮件收到来自税务署理机构的可疑信息请求，，，，，， ，请拨打去年纳税申报表上的电话号码。。。。。 。请勿拨打可疑网站或电子邮件中显示的号码。。。。。 。
Shopify商户官网原文详情：
Protect your account against phishing
The term phishing describes identity theft scams involving phony websites and emails or other messages. The goal of a phishing attack is to gain access to your account and sensitive information. An attacker can create their own website that mimics a reputable one or send you a message that seems to come from a trusted source. Phishing messages can come from a fake account or an account that has been hacked.
Note
If you believe you have shared personal information through a suspicious channel and your information and identity is at risk, then follow government guides.
A phishing message might ask you to complete the following tasks:
Visit a link.
Download a file.
Open an attachment.
Malware — malicious software such as worms, trojans, bots, and viruses — can infect your computer or mobile device if you take any of these actions. After your device is infected, an intruder can gain access to your personal information.
Phishing scams can also include direct requests for personal information, such as your bank account credentials.
Phishing scams might ask you to provide the following personal information:
By email or another messaging system.
Through a form.
At a fraudulent phone number.
At a phony physical address.
Even a request for you to enter your email address and reset your password can be dangerous.
Note
Forward any phishing messages that you receive to Shopify's safety inbox at safety@shopify.com. By building a record of attacks directed at merchants, Shopify can work to better protect you and your information.
Know the warning signs
You can protect yourself against phishing by understanding the warning signs. Read messages carefully no matter who they appear to come from and scrutinize websites no matter how familiar they seem.
Overly general language
Although phishing can be well researched and tailored to you and your business, general language is a hallmark of phishing scams. Be wary of messages that seem to come from an organization you trust but that open with vague statements such as Dear account holder.
Likewise, if a message promises an important business or financial opportunity but doesn't include enough detail for you to confirm that the sender knows you, then it might be a scam:
I am Frederick, a banker. Pls contact me asap regarding a possible late relative's inheritance. Can't share much via sms. Email me at the address below.
Business messages from personal accounts
Sophisticated attackers can gather enough information from your online presence to create a message that could plausibly come from a real contact:
Wholesale Pricing Update
Hi Georgia, I just wanted to update you. Here is a spreadsheet of our current wholesale prices: fabric-prices-2016-oct.xls
I hope you were satisfied with the last batch of shirts! Please let me know if you have any questions or concerns.
--
Julia Chan
Account Manager
Example Fabrics
To send an attack, they can hack into your contact's business account or create a phony personal account. For example, if the username for your contact Julia's personal email is
juliachan3857, then an attacker might send an email from an account with the usernamejuliachan9665. This form of attack depends on two factors:
People send emails from the wrong account by mistake.
Even if you know Julia's personal email address, then you might not look too closely.
Misspellings, poor grammar, and style variations
Criminals don't take content style guides as seriously as professional web content writers. As well as typos and grammar errors, variations in the following categories within a single page can show that a website is fraudulent:
spelling.
capitalization.
numbers.
punctuation.
formatting.
Alarmist or overexcited tone
Watch for time-sensitive requests that try to scare you into acting without thinking. For example, Shopify won't send you a message saying:
We've had a catastrophic server failure. Respond with your username and password in the next 24 hours or you'll lose access to your store permanently.
Similarly, watch for messages making offers that seem too good to be true, such as a 90% discount from a travel company available only if you act now.
URLs that don’t look right
Phishing attempts can include URLs that appear legitimate if you don't look too closely. Many phishing attempts use URLs that have been deliberately chosen to resemble a URL that you're already familiar with. As shown in the table below, if you normally buy swimming attire from Example Apparel at the legitimate URL and you receive an email with a link to the fake URL, then you can tell that it's a phishing attempt.
The real URL directs you to a site at the domain
example-apparel.com, which is owned by Example Apparel, and the phony URL directs you to a malicious site at the domaincom-aquatic.net, which is likely owned by criminals.
Legitimate URL Phony URL example-apparel.com/aquatic/swimmies example-apparel.com-aquatic.net/swimmies Raise concerns using another mode of communication
Speak to the supposed sender of a suspicious message in person or over the phone and resolve concerns about a webpage by talking to someone at the organization.
If you contact the sender by phone, then use a number you have on file or that appears on multiple reputable online sources. For example, if you receive a suspicious request for information from your tax agency by email, then call the agency at the number on last year's tax return. Don't call a number that appears on a suspicious website or email.
文章内容泉源：Shopify商户官方网站