加密货币历史上最大的一起盗窃案，始于许多网民常犯的小错误。与朝鲜有关的黑客组织最近从加密货币交易所币安窃取了63亿美元。这次行动手法高明，涉及虚假求职面试和恶意代码。
The biggest heist in cryptocurrency history began with small mistakes many internet users make. A hacking group tied to North Korea recently stole $6.3 billion from the crypto exchange Binance. The operation was sophisticated, involving fake job interviews and malicious code.
我们在数字探究集团工作，这是一个非营利机构，研究人们如何评估网络信息，并创建免费的、基于证据的课程，帮助人们决定信任什么。
We work at the Digital Inquiry Group, a nonprofit that researches how people evaluate online information and creates free, evidence-based curriculum that helps people decide what to trust.
在超过十年的研究中，我们发现，人们经常从事一些让自己更容易被骗的网络行为。两种简单的策略可以帮助你更好地应对当今的信息环境，从传统的网络钓鱼到误导性社交帖子，再到人工智能伪造内容。具体做法如下。
In over a decade of research, we've found that people frequently engage in online behavior that makes them more likely to get duped. Two simple strategies can help you better navigate today's information landscape, from traditional phishing to misleading social posts to AI fakes. Here's how.
在线搜索时，第一个结果不一定是最好的，也不是最安全的。币安盗窃案始于该公司一名工程师下载了被篡改的软件。据路透社对这次黑客攻击的调查，这名工程师点击了一个赞助搜索结果，该结果在搜索页面上排在更前面，并将其引向了恶意代码。
When searching online, the first result is not always the best or the safest The Binance heist began when one of the company's engineers downloaded compromised software. That engineer, according to the Reuters investigation of the hack, clicked on a sponsored search result that appeared higher on the results page and directed them to the malicious code.
数字探究集团的研究表明，网络用户经常表现得好像第一就是最好的。他们点击看到的第一个东西。他们错误地将更高的排位与经过审核的内容联系起来，把判断权让给了科技公司的算法。学生们甚至告诉我们，“谷歌几乎从不出错”或“人工智能总是正确的”。专业事实核查人员通常会实跅点击克制。他们明白，无论你是在互联网上搜索，还是向聊天机器人提问，第一个结果不一定是最好的。
Our research at the Digital Inquiry Group suggests internet users frequently behave as if first is best. They click on the first thing they see. They incorrectly associate a higher placement with vetted content, ceding judgment to tech company algorithms. Students have gone so far as to tell us "Google is almost never wrong" or "AI is always right." Professional fact-checkers commonly practice click restraint. They understand that whether you're searching on the internet or querying a chatbot, first isn't always best.
如果你在研究一个组织，第一个链接通常会指向它自己的网站，而该网站几乎不太可能披露自身存在的任何问题。
If you're researching an organization, the first link will often be to its own site, which is hardly likely to disclose anything that's wrong with it.
所以下次你在网上搜索东西时，要警惕指向你正在调查的组织，或任何人都能发帖且信息未经核实的开放平台（如Quora或Reddit）的链接。阅读每个链接下方的简短摘要，做出更明智的选择，决定打开什么。
So the next time you search for something online, be wary of links to , the organization you're investigating, or to open platforms where anyone can post and information isn't verified, such as Quora or Reddit. Read the brief snippets beneath each link, and make a more informed choice about what to open.
始终问自己：这条信息背后是谁？是什么让他们可信？寻找在相关主题上拥有直接专业知识的人和组织，或拥有确保信息准确性流程的机构，例如雇佣编辑和事实核查人员的新闻媒体。
Always ask yourself: Who is behind this information? What makes them credible? Look for people and organizations that have direct expertise on the topic at hand, or have processes to ensure the accuracy of information, such as news outlets that employ editors and fact-checkers.
“互联网是个危险的地方”——务必进行外部核实。币安称其发现了第一个恶意下载，更换了设备并更改了密码。但后来，另一名工程师下载了被篡改的代码，以为这是求职面试的一部分，其中包括与一家假公司的所谓首席执行官进行的虚拟会议。
'The internet is a precarious place'—always get external verification Binance says it caught that first malicious download, replaced the device and changed passwords. But later, another engineer downloaded compromised code as part of what they thought was a job interview, which included a virtual meeting with the supposed CEO of a fake company.
很容易认为这名工程师本应发现异常。但互联网是个危险的地方，因为不法分子懂得如何让内容看起来合法。币安称，其员工被一名冒充人力资源代表的黑客诱捕，该黑客“与他共享社交媒体账号，包括在平台上发布的个人照片和视频，以建立信任”。当专业事实核查人员遇到不熟悉的内容时，他们不仅仅是仔细阅读——他们会进行横向阅读。
It's tempting to think that the engineer should have seen something was off. But the internet is a precarious place because bad actors know how to make content feel legitimate. Binance says its employee was snared by a hacker posing as an HR rep who "shared a social media account with him, including personal photos and videos posted on the platform, in order to build trust." When they encounter a piece of unfamiliar content, professional fact-checkers don't just read it closely — they read laterally.
他们会打开新的浏览器标签页，查看其他可信来源怎么说。事实核查人员知道，不法分子能在自己的主场包装自己，但在整个互联网上伪造良好声誉却要困难得多。
They open new browser tabs to see what other, credible sources have to say. Fact-checkers know that bad actors make themselves look good on their home turf, but that it's a lot harder to fake a good reputation across the internet.
下次你在网上遇到不熟悉的内容时，寻找能对相关人员或组织提供线索的权威来源。你可能会找到一篇证实你正在调查的说法的新闻文章，或一份将一个表面中立的来源标记为有偏见的报告。
The next time you encounter something unfamiliar online, look for authoritative sources that can shed light on the person or organization. You might find a news article that confirms the claim you're looking into, or a report that identifies a supposedly neutral source as biased.
在某些情况下，你可能什么也找不到，而这本身就是一个信号：如果你查询一家联系过你的公司，却找不到其存在的任何外部证据，那应该立即引起警惕。
In some cases, you may find nothing at all, which is a signal in itself: if you look up a company that reached out to you and find no external confirmation of its existence, that should be an immediate red flag.
如果那位第一位币安工程师在点击时保持谨慎并核实软件来源，他们本可以避免下载恶意软件。如果那位第二位员工花时间寻求关于所谓人力资源代表的外部验证，而不是信任一个精心打造的社交媒体个人资料，他们本可能意识到有些不对劲。
Had that first Binance engineer engaged in click restraint and verified the source of the software, they might have avoided the malicious download. Had that second employee taken time to seek external verification about the supposed HR rep, rather than trusting a polished social media profile, they might have realized that something didn't add up.
互联网和人工智能让我们更难判断所见内容是否真实。但它们也让我们比以往任何时候都更容易调查在网上遇到的人或事。花点时间停下来核实总是值得的。前期花几秒钟，可以为我们所有人节省日后大量的时间、痛苦和金钱。
The internet and AI have made it harder to know whether what we see is authentic. They've also made it easier than ever before to investigate who or what we encounter online. It's always worth pausing to check. A few seconds up front can save us all a lot of time, grief and money later on.
纳达夫·齐夫是数字探究组的研究员。乔尔·布雷克斯通是数字探究组的联合创始人兼执行主任。
Nadav Ziv is a researcher at the Digital Inquiry Group. Joel Breakstone is co-founder and executive director of the Digital Inquiry Group.