Security breaches at linkedIn and eHarmony have highlighted an escalation in attacks on social networks from hackers seeking to exploit personal data, according to security firms. 一些安全公司表示，专业交流网站linkedIn和约会网站eHarmony的安全漏洞突显出，寻求盗取个人数据的黑客加强了针对社交网站的攻击力度。 The professional networking and dating sites have both confirmed that some of their userspasswords have been stolen.They have not disclosed how many but security experts said hackers have posted a total of 8m encrypted passwords online, the bulk of which came from linkedIn. 上述两家网站都已证实，“部分”用户的密码被盗。它们没透露遭窃数目，但安全专家表示，黑客在网上贴出了800万条加密密码，其中多数来自linkedIn。 LastFM, a UK-based social network focused on music owned by CBS, also said yesterday some of its userspasswords had been stolen. Like linkedIn and eHarmony,it advised users to change passwords. 昨日，CBS旗下、总部坐落于英国的音乐社交网站LastFM也表示，部分用户密码遭窃。与linkedIn与eHarmony一样，该网站建议用户修改密码。 Experts called the linkedIn hack one of the largest weve seen and said it was a sign that cybercriminals are showing an increasing preference for targeting social networks, including Facebook, Twitter and Pinterest. Now theyve switched over to social networks,said Graham Cluley,senior technology consultant at Sophos, a security research firm.The anti-spam features on these sites are nowhere near as mature as places like Hotmail and Gmail. 专家表示，linkedIn遭黑客攻击是“大家所见到的规模最大的攻击之一”，他们表示，这是一个迹象，表明互联网罪犯愈加喜欢攻击Facebook、Twitter和Pinterest等社交网站。安全研究企业Sophos的资深技术顾问格雷厄姆克鲁利表示：“目前黑客转移到了社交网站，而这类网站的反垃圾邮件机制远远不如Hotmail和Gmail等网站成熟。” In April, social networks replaced financial organisations as the TOP target of phishing attacks, according to data from Kaspersky Lab. 卡巴斯基实验室的数据显示，4月，社交网站取代金融机构，成为钓鱼攻击的头号目的。 Phishing campaigns are spoof emails or spoof social networking messages that impersonate a business like linkedIn to trick people into handing over email addresses, passwords and other personal information. 钓鱼攻击用欺诈邮件或欺诈性社交互联网信息，假扮成linkedIn之类的企业，欺骗大家交出邮箱地址、密码和其他个人信息。 Kaspersky estimates social networks accounted for 28.8 per cent of phishing attacks in April, a 6 per cent increase from March, due mainly to a surge of attacks on Facebook users. 卡巴斯基估计，4月份的钓鱼攻击中，28.8%发生在社交互联网，比3月增加了6%，主如果因为针对Facebook用户的攻击猛涨。 The cause of this weeks hacks are still unknown. linkedIn has since added enhanced security features to its encryption process, a move Mr Cluley said they should have been doing earlier. Mr Cluley also said that the openness of social networks to external programmers that develop applications left them more vulnerable to hackers. 本周黑客攻击是什么原因尚不明朗。遭到攻击后，linkedIn已经加大了加密过程的安全设置，克鲁利称，linkedIn“早就应该这么做了”。克鲁利还表示，社交网站对外部技术员开放，允许他们开发应用，这也使网站更容易遭到黑客攻击。 In addition, the personal nature of social networks makes it easier for criminals to impersonate someone, using their name and photo to contact friends and work colleagues.If I get a message from someone who is a linkedIn contact of mine, Im much more likely to respond,said David Emm, senior security researcher at Kaspersky Lab. 除此之外，社交网站的个人性质使罪犯更容易假装成某人，用他们的名字和照片联系朋友和同事。卡巴斯基实验室的资深安全研究员戴维埃姆表示：“假如我收到了我在linkedIn上联系人的信息，我更大概做出回话。” Cybercrime on social networks is turning into its own industry, said Jim Walter, manager for McAfee Threat Intelligence Service, as criminals hire underlings to generate more traffic and even ad revenue from these sites through automated botnets, collection of compromised computers. 迈克菲互联网威胁情报服务经理吉姆沃尔特表示，针对社交互联网的犯罪正在进步为一个产业。罪犯雇佣人手，通过自动僵尸互联网（即很多已被侵入的电脑），在这类网站上制造流量，甚至产生广告收入。 Theres a whole underground economy around linkedIn bots, Pinterest bots, Facebook bots, you name it,he said. 沃尔特表示：“围绕着linkedIn僵尸、Pinterest僵尸、Facebook僵尸等等，存在着一个完整的地下经济。”
相关文章推荐
