Skip to content

Venmo 安全性：威脅與防禦指南

Venmo 是一個實用的工具，但其易用性也使其成為詐騙者的主要目標。了解您所面臨的具體威脅，是建立堅實防禦的第一步。以下將為您剖析相關風險，以及您可以採取哪些行動來保護您的帳戶。

第一部分：主要的 Venmo 安全威脅

社交工程詐騙

這是最常見的威脅。詐騙者會操縱您的信任，誘騙您自願匯款。手法包括：

  • 「匯錯款」詐騙： 詐騙者使用盜來的信用卡匯款給您，然後要求您用自己的錢退還給他們。
  • 「假冒朋友」詐騙： 冒名者建立一個模仿您朋友的個人檔案，並以假冒的緊急情況為由向您要錢。
  • 「超額付款」詐騙： 「買家」超額支付商品款項給您，並要求您在他們的詐欺性付款被撤銷前提早退還差額。

帳戶盜用攻擊

其目標是完全取得您帳戶的存取權。

  • 網路釣魚 (Phishing)： 您會收到一封看似由「Venmo」寄發的假冒電子郵件或簡訊，內含一個連至詐欺性登入頁面的連結，旨在竊取您的密碼。
  • 密碼強度不足／重複使用： 如果您使用簡單的密碼，或重複使用在其他遭駭服務中用過的密碼，您的帳戶將十分脆弱。

交易詐騙

這通常發生在買賣商品時。Venmo 對於個人帳戶之間的付款幾乎不提供任何保障。如果您向陌生人付款購買演唱會門票後對方卻消失無蹤，您的錢就拿不回來了。

隱私洩露

Venmo 的公開社交動態可能會洩露您的聯絡人、消費習慣和個人日常活動，這些資訊可能被犯罪份子利用。

第二部分：您的多層次防禦策略

強化您的帳戶

增加技術上侵入您帳戶的難度。

  • 啟用多重要素驗證 (MFA)、PIN 碼和生物辨識： 在 Venmo 應用程式的設定中，啟用所有可用的安全功能。這是您對抗未經授權存取的最強防線。
  • 使用獨特且高強度的密碼： 建立一個難以猜測且未在其他地方使用過的密碼。像 NordPass 這樣的密碼管理器可以毫不費力地為您建立和管理這些密碼。

養成智慧的使用習慣

您的個人行為是安全防護中至關重要的一環。

  • 只付款給您認識且信任的人： 這條規則能預防絕大多數的詐騙。
  • 驗證所有不尋常的請求： 如果朋友突然向您要錢，請打電話向他們確認。如果有陌生人匯款給您，請直接聯繫 Venmo 客戶支援。切勿與對方互動。
  • 將您的動態設為私人： 進入您的隱私設定，確保未來所有的交易都只對您和收款人可見。

保護您的連線安全

在資料傳輸過程中保護您的資料。

  • 避免使用公共 Wi-Fi： 切勿在不安全的網路上使用金融相關應用程式。
  • 使用 VPN： 如果您必須使用公共 Wi-Fi，像 NordVPN 這樣的 VPN 可以加密您的連線，讓駭客無法窺探。

透過了解這些威脅並主動實施防禦措施，您可以將 Venmo 從一個潛在的風險，轉變為一個安全又便利的工具。

關於 NordLayer
NordLayer 是現代企業的自適應性網絡存取安全解決方案，來自世界上其中一個最值得信賴的網絡安全品牌 Nord Security。致力於幫助 CEO、CIO 和 IT 管理員輕鬆應對網絡擴展和安全挑戰。NordLayer 與零信任網絡存取（ZTNA）和安全服務邊緣（SSE）原則保持一致，是一個無需硬件的解決方案，保護公司企業免受現代網絡威脅。通過 NordLayer，各種規模的公司企業都可以在不需要深入專業技術知識的情況下保護他們的團隊和網絡，它易於部署、管理和擴展。

關於Version 2

Version 2 Digital 是立足亞洲的增值代理商及IT開發者。公司在網絡安全、雲端、數據保護、終端設備、基礎設施、系統監控、存儲、網絡管理、商業生產力和通信產品等各個領域代理發展各種 IT 產品。透過公司龐大的網絡、通路、銷售點、分銷商及合作夥伴，Version 2 提供廣被市場讚賞的產品及服務。Version 2 的銷售網絡包括台灣、香港、澳門、中國大陸、新加坡、馬來西亞等各亞太地區，客戶來自各行各業，包括全球 1000 大跨國企業、上市公司、公用事業、醫療、金融、教育機構、政府部門、無數成功的中小企及來自亞洲各城市的消費市場客戶。

Keepit appoints Jan Ursi to drive global success in the expanding channel ecosystem

This press release announces that Keepit, the only vendor-independent cloud for SaaS data protection, has appointed Jan Ursi as its new Vice President of Business Development. This move is part of the company’s strategy to expand its global reach and strengthen its channel partnerships.

New Leadership for a Growing Market

Jan Ursi brings over two decades of experience in the IT and cybersecurity sectors, with a strong background in channel development and leadership. His past roles have involved building and managing global partnerships, which aligns with Keepit’s mission to enhance its channel-first go-to-market strategy. Ursi will be responsible for leading the company’s business development efforts, fostering new alliances, and expanding its presence in key markets.

Strategic Vision and Company Growth

According to the press release, the addition of Ursi to the leadership team is a significant step in reinforcing Keepit’s commitment to its partners and customers. His expertise will be crucial in helping the company scale its operations and deliver its unique data protection solution to a broader audience. Keepit’s platform is designed to offer simple, secure, and vendor-independent backup and recovery for a wide range of SaaS applications, helping organizations ensure business continuity and compliance.

Download the report

 

Defining data governance and data classification

So, what is data governance and how does it relate to cyber resilience?

Existing under the broad umbrella of data management, data governance is a program — implemented via policies and standards — intended to ensure the availability, quality, and security of an organization’s data in accordance with applicable regulations and obligations (e.g., adhering to industry standards, fulfilling requirements for certifications, etc.).

Within data governance, data classification is the process of separating and organizing data into relevant groups (“classes”) based on their shared characteristics, such as the level of sensitivity, risks they present, and the compliance regulations that protect them.

Data governance underpins cyber resilience plans

An intelligent data governance program delivers several beneficial outcomes for organizations:

  • It helps to ensure the availability, quality, and security of an organization’s data, making it a foundational pillar of business continuity.
  • Data governance helps improve overall data accuracy and impacts outcomes based on that data — which can range from comparatively simple day-to-day business decisions and operations to more complex, forward-looking initiatives including AI-focused programs.
  • It helps to support organizational efforts to comply with regulations and other obligations, making it a cornerstone of compliance.
  • An effective data governance program also permeates the entire organization, increasing data literacy, data accessibility, and data scalability.

Do you know where your data is?

Of course, disaster recovery planning cannot start without a clear understanding and mapping of your data and its significance to your business. What data is crucial for us to continue running our operations? Who needs access to which data to do their job? Where do we store all of this critical data?

Knowing the answers to these questions will start your journey towards ensuring continuity in cases of data loss or cyberattacks. This is achieved through an efficient and effective data governance framework.

I hope that, with our new report in hand, CISOs and CIOs will be able to future-proof their modern, data-driven enterprises through effective data governance.

About Keepit’s new report, “Intelligent data governance: Why taking control of your data is key for operational continuity and innovation.”

Our report takes a practical approach to data governance by offering a resource to organizations for creating or adopting a framework that works best for them.

Key takeaways from the report:

-Major trends shaping enterprise IT

-The importance of “always-on” data

-Resilience against data loss and corruption

-Data governance as an investment

-A practical approach to data governance

-10 questions for board discussions

Get the full report

Data governanceCyber resilienceData protectionIT leadership

About Keepit
At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

ESET 重要更新：Password Manager 即將終止服務 但是更強大的防護即將到來

在 ESET，我們的任務是提供強大且相關的防護。為了應對不斷演變的數位威脅，我們經常會評估和更新我們的功能。 

我們現在正式發出通知，Password Manager 即將於 2025 年 10 月終止服務。

如今，安全的密碼管理已內建於許多的現代作業系統、瀏覽器和應用程式中，為使用者提供可靠的密碼管理方式。此功能退役之後，我們可以著重於在最重要的領域開發更加有效的防護。我們理解這次變動可能會為用戶帶來不便，因此已準備了詳細的資料匯出指南，協助用戶輕鬆地備份其重要資料。

如何從 ESET Password Manager 匯出您的密碼和其他資料

以下步驟適用於從版本 3.x 匯出資料：

1. 開啟 ESET Password Manager 瀏覽器擴充功能，點擊選單圖示，然後點擊設定。


圖 1-1

2. 向下捲動至資料部分，然後點擊匯出資料。


圖 1-2

3. 請參閱下方的說明並選擇一種匯出格式。如果您選擇受密碼保護的檔案，您必須輸入檔案保護密碼。輸入您的主密碼，然後點擊匯出資料。

選擇受密碼保護的檔案以建立 .json 格式的密碼管理器資料庫加密備份。
選擇 CSV 以建立 .csv 格式的未加密檔案。由於 CSV 格式未經加密，我們不建議您使用它來儲存密碼或個人資料。


圖 1-3

4. 檔案將會下載到您的 Windows 檔案總管。


圖 1-4

我們衷心感謝您對 ESET 產品的長期支持。如在資料匯出過程中遇到任何問題，或需要進一步的協助，請隨時聯絡我們的技術支援團隊。

技術支援聯絡方式：
熱線： (852) 2893 8186
電郵地址： support@eset.hk

關於ESET
ESET成立於1992年，是一家面向企業與個人用戶的全球性的電腦安全軟件提供商，其獲獎產品 — NOD32防病毒軟件系統，能夠針對各種已知或未知病毒、間諜軟件 （spyware）、rootkits和其他惡意軟件為電腦系統提供實時保護。ESET NOD32佔用 系統資源最少，偵測速度最快，可以提供最有效的保護，並且比其他任何防病毒產品獲得了更多的Virus Bulletin 100獎項。ESET連續五年被評為“德勤高科技快速成長500 強”（Deloitte’s Technology Fast 500）公司，擁有廣泛的合作夥伴網絡，包括佳能、戴爾、微軟等國際知名公司，在布拉迪斯拉發（斯洛伐克）、布裏斯托爾（英國 ）、布宜諾斯艾利斯（阿根廷）、布拉格（捷克）、聖地亞哥（美國）等地均設有辦事處，代理機構覆蓋全球超過100個國家。

關於 Version 2 Digital
Version 2 Digital 是立足亞洲的增值代理商及IT開發者。公司在網絡安全、雲端、數據保護、終端設備、基礎設施、系統監控、存儲、網絡管理、商業生產力和通信產品等各個領域代理發展各種 IT 產品。透過公司龐大的網絡、通路、銷售點、分銷商及合作夥伴，Version 2 提供廣被市場讚賞的產品及服務。Version 2 的銷售網絡包括台灣、香港、澳門、中國大陸、新加坡、馬來西亞等各亞太地區，客戶來自各行各業，包括全球 1000 大跨國企業、上市公司、公用事業、醫療、金融、教育機構、政府部門、無數成功的中小企及來自亞洲各城市的消費市場客戶。

Hidden Risks in Your Network: IoT Peripherals and DNS Layer Blind Spots

This article explores the often-overlooked vulnerabilities that exist within modern corporate networks, particularly concerning unmanaged IoT devices and gaps in DNS security. It highlights how these blind spots can be exploited by attackers, leading to data breaches and other security incidents.

The Threat from IoT Peripherals

Many organizations focus their security efforts on traditional devices like laptops and servers, while ignoring the growing number of IoT peripherals connected to their networks. These devices, which can range from smart printers to video conferencing equipment, often have weak default security settings and are not regularly patched. They can serve as an easy entry point for attackers to gain a foothold in the network and launch further attacks.

The DNS Layer Blind Spot

The DNS (Domain Name System) layer is a critical part of a network’s infrastructure, yet it is frequently a blind spot for security. Many security tools, including next-generation firewalls, are not designed to inspect DNS traffic, allowing attackers to use it for data exfiltration, command-and-control communications, and other malicious activities. This stealthy method of attack can bypass even the most advanced security defenses.

Closing the Gaps

To address these hidden risks, the article recommends a multi-layered security strategy that includes:

  • Comprehensive Visibility: Gaining full visibility into all devices on the network, including IoT peripherals, is the first step.
  • DNS Security: Implementing a dedicated DNS security solution that can inspect and filter DNS traffic to block malicious queries and prevent data theft.
  • Zero Trust Architecture: Adopting a zero trust model where every device and user is verified before being granted access to network resources.
  • Employee Training: Educating employees about the risks associated with unmanaged devices and phishing attacks that exploit DNS vulnerabilities.

By proactively addressing these vulnerabilities, organizations can significantly strengthen their overall security posture and protect themselves from sophisticated, hard-to-detect threats.

About SafeDNS
SafeDNS breathes to make the internet safer for people all over the world with solutions ranging from AI & ML-powered web filtering, cybersecurity to threat intelligence. Moreover, we strive to create the next generation of safer and more affordable web filtering products. Endlessly working to improve our users’ online protection, SafeDNS has also launched an innovative system powered by continuous machine learning and user behavior analytics to detect botnets and malicious websites.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

Enterprise Security Veteran Matt Dircks Joins Portnox Board of Directors

September 16, 2025

Portnox, a leader in cloud-native zero trust access control and cybersecurity solutions, has announced the appointment of Matt Dircks to its Board of Directors. The addition of Dircks is a significant step for Portnox as it looks to scale its platform and expand its global presence to help organizations secure their networks and applications with unified access control.

Dircks brings over 25 years of experience in leading high-growth software companies through periods of innovation and expansion. His notable past roles include serving as CEO of BeyondTrust for eight years, where he helped the company become a global leader in Privileged Access Management (PAM) and expand its product portfolio.

Denny LeCompte, CEO of Portnox, stated that Dircks’ deep understanding of the cybersecurity landscape and proven track record make him a valuable asset. He believes Dircks’ guidance will help the company navigate its next phase of growth and continue to deliver simple, scalable, and effective security solutions for IT teams with limited resources.

Dircks expressed his excitement to join the Portnox team at a pivotal point in its journey, noting the company’s focus on delivering modern, cloud-native zero trust access control. He looks forward to helping accelerate Portnox’s mission to bring its capabilities to more businesses worldwide.

About Portnox
Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.