«

谷歌AI搜索可能会推荐你联系骗子

qimuai 发布于 阅读:25 一手编译


谷歌AI搜索可能会推荐你联系骗子

内容来源:https://lifehacker.com/tech/googles-ai-search-might-recommend-you-call-a-scammer?utm_medium=RSS

内容总结:

【科技观察】谷歌AI搜索曝重大漏洞:误推诈骗电话致用户财产受损

尽管AI技术已深度融入日常生活,但其可靠性问题正引发业界担忧。近日,美国科技媒体《Digital Trends》披露,谷歌最新推出的"AI概览"功能在提供企业客服电话时,多次将诈骗号码置顶推荐,导致多名用户遭受财产损失。

诈骗号码竟成"官方推荐"
典型案例显示,用户Alex Rivlin通过谷歌搜索皇家加勒比邮轮24小时客服电话时,AI直接推送了伪装在虚假政府网站(simpler.grants.gov)上的诈骗号码。诈骗分子冒充客服套取用户信用卡信息后,立即实施跨国盗刷。更令人震惊的是,即便涉事网站已关闭,谷歌仍持续引用其过期数据,并在自动结果中标注该号码属于皇家加勒比邮轮。

类似事件频发:

技术缺陷还是监管漏洞?
分析指出,谷歌AI的底层逻辑存在先天不足:

  1. 无法识别虚假政府网站等钓鱼载体
  2. 缺乏信息真伪校验机制,曾将红迪段子当作权威答案(如"用胶水粘牢披萨奶酪")
  3. 诈骗分子针对性优化话术,利用长尾关键词提高AI误判率

专家建议
科技记者特别提醒中国用户:

目前谷歌尚未就具体案例作出回应。该事件再次引发对AI技术应用边界的讨论——当搜索引擎开始"代劳"思考时,用户更需保持清醒判断。

中文翻译:

尽管人工智能技术已快速渗透到日常生活的方方面面,但它远非完美。虽然生成式AI看似无所不知,但它可能犯错,甚至完全捏造信息。正因如此,作为科技记者,我深感忧虑的是:企业正将AI技术植入人们高度依赖且视为理所当然的工具中。

搜索引擎正是这类工具之一。自上世纪90年代末起,我们已习惯依赖搜索结果获取信息。对多数人而言,这意味着打开谷歌、输入关键词,然后采信首页结果——有时甚至只看前两条。如今随着谷歌"AI概览"占据搜索结果顶部,许多人会不假思索地采信AI生成的内容。

这种新模式存在诸多问题,但今日最值得关注的是:据《数字趋势》报道,当用户搜索企业电话号码时,谷歌的AI概览乃至AI模式可能会推荐诈骗号码。

诈骗者正在"黑入"谷歌AI
《数字趋势》列举了四个典型案例。首例是Alex Rivlin在Facebook分享的经历:他试图联系皇家加勒比游轮客服预订接驳车,却在官网上找不到客服电话。于是他像常人一样搜索"皇家加勒比24小时美国客服电话",拨通了AI概览显示的号码。

通话中,"客服"表现专业,但当对方索要出生日期时(皇家加勒比本应掌握该信息),Rivlin起疑挂断。查看信用卡账单后,他发现一笔从未交易过的境外公司扣款,随后又出现向美国癌症协会的小额捐款,最终不得不注销信用卡。

截至发稿,该诈骗号码在谷歌自动结果中仍显示属于皇家加勒比——数据源自仿冒政府官网simplegrants.gov的钓鱼网站。虽然链接已失效,谷歌仍调取网站存续时的数据。由此可见,诈骗者通过在虚假网站发布号码,诱使谷歌抓取数据。当AI在.gov域名网站看到"皇家加勒比"与某号码关联,便误判其真实性并呈现给用户。

第二个案例来自Reddit论坛r/ScamNumbers:用户搜索"西南航空更正姓名拼写错误"时,AI概览提供了诈骗号码。该用户或因知晓正规客服电话,通过比对识破了骗局。搜索该虚假号码可见"Document360"链接及说明文字:"如需修改西南航空机票姓名,请致电客服+1-855-234-9795"。这再次证实诈骗者通过精准匹配搜索关键词提升行骗成功率。

《数字趋势》还提到两起已删除的Reddit案例:一位用户险些被外卖平台虚假客服电话诈骗;另有一位男子因拨打Swiggy外卖平台显示的诈骗号码,损失超3400美元。

切勿轻信AI答案
谷歌AI概览并非蓄意作恶,而是存在技术缺陷。其底层技术难以辨别信息真伪,无法识别仿冒政府官网的钓鱼网站。这与去年AI概览灾难性上线如出一辙——当时系统甚至将Reddit玩笑帖当作可靠信源(比如"用胶水粘牢披萨奶酪"这种谬论)。

这并非全盘否定AI答案的准确性。技术仍能调取优质信源提供正确结果,但其固有缺陷使得依赖AI存在风险。若不愿翻阅传统链接列表,至少应核查AI答案的资料来源。若来源可疑,答案亦然。

对于企业联络方式,建议始终通过官方渠道获取。若官网未公示电话号码,请尝试其他官方联系方式。诈骗手段层出不穷,开放网络信息已不足为信。

英文来源:

Despite its rapid integration in nearly every facet of daily life, AI technology is not perfect. While it might seem like generative AI knows everything, it can make mistakes, or make up information entirely. That's why it's concerning to tech reporters like myself that companies are adding AI tech to tool so many people rely on and take for granted.
Search is one of those tools. Since the late 90s, we've been conditioned to rely on search results to find the information we're looking for. For many of us, that means loading up Google, entering a search, and accepting the first page of results, sometimes the first result or two alone. Now, with Google's AI Overviews taking over the top of most search results, many of us simply glance at the AI-generated result and take it at face value.
There are many issues with this new approach, but there's one key issue to focus on today: As reported by Digital Trends, when you search for a company's phone number, Google's AI Overviews and even AI Mode might recommend a scammer's phone number instead.
Scammers are "hacking" Google's AI
Digital Trends highlights four examples of this situation in action. First, there's Alex Rivlin, who posted on Facebook about his experience of trying to contact Royal Caribbean's customer experience. Rivlin wanted to book a shuttle through the service, but couldn't find the company's support number on their website. So, like many of us, Rivlin googled "royal caribbean customer service phone number 24 hours usa," and called the number that appeared in the AI Overview.
When Rivlin called, the "customer service" experience seemed above board, and the "rep" was very knowledgeable. Rivlin provided his credit card information to pay for the shuttle, but was concerned once the rep started asking for his date of birth. Since Royal Caribbean already had that info, it seemed suspicious, so after hanging up the phone, Rivlin checked his credit card statement, and noticed a charge from a foreign company he'd never dealt with before. After that, he noticed a small charge to the American Cancer Society, and called the credit card company to cancel the card.
As of this article, if you ask Google who that spam number belongs to, the automated result (not even the AI Overview, mind you) will say Royal Caribbean. That's pulling from a website that appears to be impersonating the official simpler.grants.gov site. If you click the link, the page is dead, but Google is still pulling the information that existed while the site was still up. Based on this, it appears scammers are listing fake numbers on fraudulent websites, and tricking Google into sourcing that data. Google's AI then sees "Royal Caribbean" next to this phone number on a .gov site, thinks it's legit, and surfaces it in an AI-generated result.
Digital Trends then highlighted this example from a Redditor posting to r/ScamNumbers. The Redditor was googling "how to fix a misspelled name on Southwest," which lead them to an AI Overview result with a scam number. This user appears to have either already known the legitimate Southwest number, or perhaps located the real number to compare to the one from this result, and saw through the scam without calling.
If you google the phony phone number, you can see a link to "Document360," as well as the following snippet: "To correct a passenger's name or Change Name on an Southwest Airlines Flight Ticket, reach out to Southwest Airlines customer support. Call +1-855-234-9795." This is, again, a tactic to trick Google into presenting the scam number in its results. This time, the scammers are phishing for users searching for this specific issue, which increases the chances Google will deliver this result for this specific search.
Digital Trends also highlights a since-deleted post on Reddit, one user came close to getting scammed when googling the customer support number for a food delivery service. Similarly, in a final example, one man lost over $3,400 when he called the number that appeared for the food delivery service Swiggy's.
Don't assume the AI answer is correct
Google's AI Overviews isn't malicious; rather, it's flawed. The underlying tech can struggle to distinguish between legitimate and false information. It lacks the awareness to understand that a site impersonating a government page can host a number and claim it to be a certain business: To the AI, that means that's the business' number, and, as such, it includes it in the results. It's the same flaw that lead to Google's disastrous rollout for AI Overviews last year. Back then, the model was even worse, pulling jokes from Reddit as legitimate sources. (No, glue does not actually make your cheese stick to your pizza.)
That's not to say that the AI answer will always be wrong. The technology can still pull from high-quality sources and return results that are accurate. But there are flaws here that make AI answers too risky to count on. If you'd rather not scroll down to check out the traditional list of links yourself, at least click through the AI answer's sources to see where it's pulling the information from. If the source is sketchy, assume the answer is too.
When it comes to company contact information, I'd recommend always going directly to the source. If the company doesn't list the phone number on their website, assume it doesn't exist, and try to find a different contact method directly through the company. Scammers are too clever to rely on the open web for this information.

LifeHacker

文章目录


    扫描二维码,在手机上阅读