Ingabe lesi sixhumanisi siphephile? Indlela yokwazi ngaphambi kokuchofoza

Impendulo emfushane: Isixhumanisi siphephile uma sivela kumthumeli othenjwayo, sikhomba isizinda osilindele, sisebenzisa i-HTTPS, futhi singabonisi izimpawu zokuphuthuma noma zenkohliso. Uma ungaqiniseki, ungachofozi. Kunalokho, hlola i-URL ngesandla noma usivule endaweni ehlukanisiwe lapho kungekho okungafinyelela edivayisini yakho.

Lo mhlahlandlela ukuqondisa endleleni yokufunda i-URL nokubona izimpawu zengozi — ngaphambi kokuba isikhombisi sakho sisondele.

Kungani izixhumanisi ziyindlela evame kunazo zonke yokuhlasela

Wonke umkhankaso wokuphishing, ukudonswa kwe-malware, nokuzama ukweba imininingwane yokungena kuqala ngendlela efanayo: umuntu uchofoza isixhumanisi. Isixhumanisi siyindlela yokulethwa. Umsebenzi womhlaseli ukwenza sibukeke sivamile ngokwanele ukuze ungacabangi kabili.

Umsebenzi wakho ukwehla imizuzwana emibili bese ufunda lokho okukhona ngempela.

Izimpawu ezibomvu ku-URL uqobo

Awudingi amathuluzi akhethekile ukubona isixhumanisi esisolisayo. Iningi lezimpawu zengozi liyabonakala uma wazi ukuthi ubheka ini.

Izizinda ezifanayo nezenziwe zafana ngamaphutha okuthayipha

Abahlaseli babhalisa izizinda ezibukeka njengezimpawu ezithenjwayo lapho ubuka ngokushesha. Amaphethini avamile:

Ukushintshaniswa kwezinhlamvu: paypa1.com (uhlamvu u-l lushintshelwe ngenombolo u-1), arnazon.com
Amagama engeziwe: amazon-secure-login.com, apple-id-verify.net
I-TLD engalungile: netflix.com.co, google.com.ph uma uhlala kwenye indawo futhi ungalindele ukuqondiswa kabusha kwesifunda

Funda isizinda ngokucophelela, kusuka kwesobunxele kuya kwesokudla. Ingxenye engaphambi komdwebo owodwa wokuqala iyi-host yangempela.

Izizinda ezingaphansi ezikhohlisayo

Lena ngenye yamaqhinga asebenza kakhulu futhi engenakwa kunazo zonke. Cabanga:

paypal.com.login-verify.net

Isizinda sangempela lapha yi-login-verify.net. Ingxenye ethi paypal.com iyisizinda esingaphansi nje. Kuzwakala kunegunya. Akunjalo. Iziphequluli zibonisa i-URL egcwele — iso lakho livame ukuma egameni lomkhiqizo elijwayelekile bese lweqa okunye.

Umthetho: funda kusuka ohlangothini lwesokudla lwesizinda ubuyele emuva kuze kufike ichashazi lokuqala elibalulekile.

Izinciphisi ze-URL ezifihla lapho ziya khona

bit.ly/x7Kq2, t.co/abc123, tinyurl.com/something — konke kuvamile ngokuphelele ezindaweni zezokuxhumana, konke kufihla ngokuphelele lapho kuya khona. Isixhumanisi esinciphisiwe ku-imeyili noma umyalezo ongalindelekile siyimpawu ebomvu okufanele uyithathele phezulu.

Ungakwazi ukwelula iziphuphi eziningi ngaphandle kokuchofoza: namathisela i-URL emfushane esevisini efana ne-CheckShortURL noma ungeze u-+ ekugcineni kwesixhumanisi se-Bit.ly (bit.ly/x7Kq2+) ukuze ubone ikhasi lokubuka kuqala. Okwengeziwe ngalokho esigabeni esilandelayo.

Izinhlamvu ze-punycode ne-homograph

I-Unicode ivumela izinhlamvu ezivela emibhalweni engeyona eyesiLatini ezibukeka zifana ncamashi nezinhlamvu zesiLatini. аmazon.com ne-amazon.com zingabukeka zifana emzimbeni womyalezo — enye isebenzisa u-"а" wesiCyrillic. Iziphequluli zivame ukubonisa lezi njenge-punycode (xn--mazon-3ve.com), kodwa ama-app emiyalezo namakhasimende e-imeyili angase abonise isifaniso esibonakalayo.

Uma isixhumanisi sibukeka silungile kodwa sizwakala singalungile, kopisha isizinda usifake ebharini lekheli lesiphequluli sakho bese ufunda lapho sithola khona.

I-HTTP vs i-HTTPS — nokuthi kungani ukhiye ungenele

I-HTTPS isho ukuthi uxhumo lubethelwe. Ayisho ukuthi isayithi elingaphesheya lithembekile. Amasayithi okuphishing asebenzisa i-HTTPS futhi abonise ukhiye njalo. Ukuthola isitifiketi se-TLS akubizi lutho futhi kuthatha imizuzu.

Lokho i-HTTPS ekutshela khona: idatha oyithumelayo ihamba ibethelwe. Lokho engakutsheli: ubani onikeza iseva eyamukelayo.

Isixhumanisi se-HTTP (asikho ukhiye) siyimpawu ebomvu eyengeziwe, ikakhulukazi kunoma yini ekucela ukuthi ungene noma ufake imininingwane yokukhokha. Kodwa ukhiye wodwa akuyona indawana eluhlaza.

Ukuqondiswa kabusha okweqile namapharamitha okulandelela

Ama-URL amade agcwele amapharamitha e-redirect=, url=, noma r= angahamba ngezindawo eziningi ngaphambi kokufika endaweni ethile. Ukugxuma ngakunye kuyithuba lokufihla indawo yokugcina. I-URL efundeka njengeketanga lokulandelela — ikakhulukazi eqedela esizindeni ongasazi — ifanele ihlolwe.

Ukuphuthuma okuyisicupho emyalezweni ozungezile

I-URL iyingxenye kuphela yesithombe. Umyalezo osiphethe nawo ubalulekile. Izimpawu zakudala:

"I-akhawunti yakho izomiswa emahoreni angu-24"
"Unokulethwa okusalindile — qinisekisa manje"
"Kutholakale ukungena okungajwayelekile — qinisekisa ngokushesha"

Ukuphuthuma kunqamula ukucabanga ngokucophelela. Yilokho okuyinhloso. Uma umyalezo uhlola ukuqaphela kwakho ngengcindezi, yehla.

Indlela yokuhlola isixhumanisi ngaphandle kokusichofoza

Beka isikhombisi ukuze ubuke kuqala

Kudeskithophu, beka isikhombisi sakho phezu kwesixhumanisi ngaphandle kokuchofoza. I-URL yangempela iyavela ebharini lesimo phansi kwesiphequluli sakho noma ikhasimende le-imeyili. Iqhathanise nalokho okushiwo umbhalo we-anchor. Uma umbhalo obonakalayo uthi "Chofoza lapha ukuze ungene ebhange lakho" kodwa i-URL ikhomba enye indawo, lokho kungukungqubuzana okucacile.

Yelula ama-URL anciphisiwe

Ngaphambi kokuchofoza noma yisiphi isixhumanisi esifushane:

Sebenzisa ithuluzi lokwelula umnciphisi ukuze uveze indawo yokugcina egcwele.
Funda i-URL eyeluliwe ngendlela efanayo noyenza kwenye — bheka isizinda sangempela, uhlole amaphethini angenhla.
Uma indawo eyeluliwe isabukeka ingajwayelekile, siphathe njengesisolisayo.

Hlola ukuthi isixhumanisi sivelaphi

Umongo ubufakazi. Zibuze:

Ubuwulindele lo myalezo kulo muntu?
Uqalise noma yikuphi okuzokwenza kuvele lesi sixhumanisi (ukusetha kabusha iphasiwedi, ukulethwa, irisidi)?
Ingabe ikheli le-imeyili lomthumeli noma inombolo yocingo yilona onalo?

Isixhumanisi esingalindelekile esivela kothintana naye owaziwayo sisafanele sihlolwe — ama-akhawunti ayangenwa, futhi abahlaseli baqamba amakheli abathumeli.

Imikhawulo yezihloli ze-URL ezingaguquki

Izihloli ze-URL ezifana ne-VirusTotal noma i-Google Safe Browsing zihlola isixhumanisi kumasizindalwazi amasayithi anonya aziwayo. Ziwusizo futhi kufanele zisetshenziswe. Zinabo futhi ubuthaka bobumbeka: zithembela kudatha yedumela esalela ngemuva kwezinsongo zangempela.

Isizinda sokuphishing esibhaliswe namuhla ekuseni asikabi nedumela. Ngeke sivele kunoma yiluphi uhlu lokuvimba. Isihloli esisihlolayo manje sizobuyisela sihlanzekile — hhayi ngoba siphephile, kodwa ngoba sisha.

Ukuze ubuke ngokujulile ukuthi kungani izihloli ezingaguquki zisilela nokuthi wenzeni esikhundleni, funda umhlahlandlela wesihloli sezixhumanisi esiphephile ku-Tempbrowser. Uhlanganisa isithombe esiphelele sokuthi ukuphishing kubalekela kanjani ukutholwa okusekelwe kudumela nokuthi ukuhlolwa okuguqukayo kwenza kubonakale ini kuwe.

Inketho engenangozi: siyivule kusiphequluli samafu esilahlayo

Uma usuqedile ukuhlola ngesandla futhi usangaqiniseki — noma uma isixhumanisi sivela endaweni ekwenza ungazizwa kahle ngempela — isinyathelo esiphephile ukusivula endaweni okungeyona idivayisi yakho.

I-Tempbrowser isiphequluli esilahlayo efwini. Unamathisela i-URL. Ivula ngaphakathi kwekhompyutha ebonakalayo yesikhashana, egeleziswa esikrinini sakho. Ikhasi lisebenza lapho, hhayi lapha. Ayikho ikhodi eke yathinta ikhompyutha yakho.

I-Tempbrowser analyzer yengeza ungqimba phezulu: ithatha izifinyezo zesikrini njengoba ikhasi lilayisha, ukuze ubone lokho elikwenza ngempela — okulibonisayo, ukuthi liqondisa kabusha ngokushesha yini, ukuthi libonisa ifomu lokungena elizenza okunye yini — ngaphandle kokuba noma yikuphi kwalowo msebenzi kwenzeka emshinini wakho.

Uma iseshini iphela, yonke indawo iyasulwa. Awukho umlando. Awukho amakhukhi. Alukho uphawu.

Uhlelo lwe-Mahhala aludingi ukubhalisa noma ikhadi lesikweletu. Uthola ukuqalisa okumi-3 ngamahora angu-24 ngamaseshini ahlala imizuzu embalwa — ngaphezu kokwanele ukubona ukuthi isixhumanisi esisolisayo senzani ngempela. Uma udinga amaseshini amade noma ukuqalisa okungenamkhawulo, i-Pro ingu-$4.99 ngenyanga ekhishwa ngonyaka ngamaseshini emizuzu engu-60.

Kuhambisana kahle nokuqonda ukuthi iziphequluli ezilahlayo ziyini ngempela — uma lowo mqondo umusha kuwe, leyo posti ichaza imisebenzi.

FAQ

Kwenzekani uma ngichofoza isixhumanisi sokuphishing?

Kuncike kulokho ikhasi elikwenzayo. Amanye amakhasi okuphishing amafomu okuvuna imininingwane yokungena kuphela — abangela umonakalo kuphela uma ufaka igama lokusebenzisa nephasiwedi. Amanye azama ukusebenzisa ubuthakathaka besiphequluli ukufaka i-malware ngokuzenzakalela (okubizwa ngokulanda okuzenzakalelayo). Ingozi iyahluka, kodwa ukucabanga okuphephile ukuthi ukuchofoza isixhumanisi esingaziwa kudivayisi yakho yangempela kunengozi engempela.

Ingabe isixhumanisi singatheleleka efonini yami ngokuvula nje?

Yebo, kungenzeka. Iziphequluli zeselula azivikelekile ekuhlaselweni okusekelwe ekusebenziseni ubuthakathaka. Empeleni, iningi lokuphishing okuqondiswe efonini lihlose ukweba imininingwane yokungena ngamakhasi okungena angamanga kunokufaka i-malware — kodwa ukusetshenziswa kobuthakathaka kwe-zero-click nokuzenzakalelayo kweziphequluli zeselula kukhona, ikakhulukazi kumadivayisi angalungisiwe. Ukugcina i-OS nesiphequluli sakho kubuyekeziwe kuwumvikelo oyisisekelo.

Ingabe izihloli zezixhumanisi zinembile?

Izihloli zezixhumanisi ezisekelwe kudumela zinembile ezinsongweni ezaziwayo futhi aziwusizo kwezintsha. Isizinda esibhaliswe emahoreni edlule sizodlula kuzo zonke izihloli sihlanzekile. Lokho akusenzi siphephe. Sebenzisa izihloli njengophawu olulodwa phakathi kwezimbalwa, hhayi njengesinqumo sokugcina.

Ngisihlola kanjani isixhumanisi kuselula?

Iselula yenza lokhu kube nzima kakhulu. Alukho ukubuka kuqala ngokubeka isikhombisi, futhi ukucindezela isikhathi eside ukuze ukopishe isixhumanisi kuthatha umzuzwana. Izinyathelo ezisizayo:

Cindezela isikhathi eside isixhumanisi bese ukhetha "Kopisha isixhumanisi" kunokusithepha.
Namathisela ku-app yamanothi bese ufunda i-URL egcwele ngokucophelela.
Sisebenzise kumnciphisi wokwelula uma singesixhumanisi esifushane.
Uma usangaqiniseki, vula tempbrowser.app/zu/analyzer esipheqululini sefoni yakho, namathisela i-URL lapho, bese uvumela ibhokisi lesihlabathi lilayishe esikhundleni sedivayisi yakho.

Kuthiwani uma isixhumanisi sibukeka silungile kodwa i-imeyili isazizwa ingalungile?

Thembela kulowo muzwa. Inhlanzeko ye-URL luphawu olulodwa; umongo olunye. Uma umyalezo ufike ungalindelekile, usebenzisa ulimi olungajwayelekile, noma ucela ukuthi wenze okungajwayelekile, qinisekisa ngesiteshi esihlukile — shayela umthumeli, ngena enkonzweni ngqo ngokuthayipha i-URL wena, noma xhumana nabasekelayo. Ungasebenzisi noma yiluphi ulwazi lokuxhumana olunikezwe emyalezweni osolisayo ngokwawo.

Ukugcina

Ukufunda i-URL kuthatha imizuzwana emibili. Ukululama ku-akhawunti eyingozi noma idivayisi enegciwane akukwenzi. Yehla, hlola isizinda, hlola umongo, futhi uma uphawu lungacacile — sivule endaweni okungeyona ikhompyutha yakho.

Ukuchofoza okukodwa. Kungalahlwa. Zama i-Tempbrowser analyzer — akudingeki ukubhalisa.