"May 1" holiday safe online shopping for everyone

With the beginning of the "May Day" holiday, every netizen has already figured out what to do? Or travel, or play games and chat online. In short, the holiday arrangements will be quite substantial. But we can't be "too happy", "safety first" is the most important! The security I am talking about here does not refer to "general" security. The security I mean refers to "network security". For example, your game account, QQ password, or even game account. The editor is a worm for many years. According to my personal experience, the problem of network security is more prominent than usual every holiday. This year's "May Day" will be no exception, especially pay attention to "phishing".

1. "Internet Banking Users" Prevent "Phishing"

"May Day" Golden Week is not only the peak period of tourism, but also the peak period of online shopping. As China's online shopping program is slowly improving, the online shopping team is also expanding. All major e-commerce sites will also launch various discounts and promotions in a timely manner to attract consumers to participate. At this time, this is precisely the time for rampant "phishing" activities. They usually post some false information on the sale of fake webpages or some forums, using low prices as bait, waiting for users to hook.

In recent years, there have been more and more "phishing" security incidents. Many well-known websites, major banking systems, Tencent, Taobao, eBay, etc. have all been impersonated. Fraudsters are using some consumers to have weak security awareness. The coveted psychology of small and cheap, through the slight differences to deceive consumers and obtain illegal benefits. Online shopping should focus on preventing fake e-commerce websites built by online scammers, or forging well-known e-commerce websites, and posing as online banking systems to commit fraud.

From the perspective of network technology, "phishing" is closely related to the vulnerabilities of IE browsers, especially the spoofing of information in the address bar and downloading of controls, etc. It is also a common trick used by network scammers. In this regard, in addition to updating IE security patches in a timely manner, increasing the security level, and prohibiting the automatic running of scripts and automatic downloading of controls, it is particularly important to install a software that prevents Trojan viruses (for example, the Trojan defense line is a relatively targeted software) .

2. Pay attention to the chat software spread Trojan

I don't know if you have noticed that many viruses broke out before and after some festivals, such as "Mid-Autumn Mooncake", "Shockwave" and "Shockwave". Virus spreaders usually use the name of the festival to send some blessings or messages with interests to the majority of users. This includes some uniquely named files and some tempting text descriptions to lure users to visit a malicious website. If you encounter suspicious emails, web page links, and messages sent through chat software in this May Day section, you need to increase your vigilance!

To be honest, this type of Trojan virus has no technical content at all, and most of the information transmission is done through commonly used instant chat tools, such as Tencent QQ, MSN, Google Talk, Yahoo Messenger, etc., have been used by a large number of virus Trojans. History. The virus uses the trust relationship between friends, plus some tempting or deceptive text, to deceive, induce users to visit malicious websites, receive and execute malicious files. When these actions occur, viruses and Trojans will infect the user's host, steal some sensitive information, or open a remote control channel to wait for the attacker to connect.

3. Operating system vulnerabilities

Some time ago, Microsoft was constantly releasing security update patches, most of which were aimed at the IE browser and some desktop application software, such as Office and OutLook. These vulnerabilities are related to buffer overflow caused by browsing "malformed" pictures, memory errors caused by opening malicious files, and IE content spoofing. It can be seen that vulnerabilities are more and more inclined to users' commonly used software. Such vulnerabilities are often easily inadvertently triggered by users, and users are likely to be unaware when they are compromised. Through these buffer overflows, memory errors, IE spoofing, or serious vulnerabilities to automatically download and execute files, an attacker can harm the user's system through different channels (IE browser, Office files, malicious mail, etc.) and gain control of the system Authority or steal user's confidential information.