Ɔsoafo Nsoromma-Kɔde (*72) Frɛ Forwarding Hijacks ne Voicemail PIN a Wɔfa¶

Wobɛhunu sɛ wɔfaa wo WhatsApp, Signal, Telegram, Google, anaa sikakorabea akontaabuo no ara pɛ berɛ a wo mobile phone da so ara wɔ 5G anaa LTE signal bars a ɛyɛ ma, ɛnte sɛ atetesɛm SIM a wɔde sesa nneɛma baabi a wo fon no kɔ fam mpofirim kɔ "No Service / SOS Only", ne Carrier Star-Code (*72 / . *21*) Frɛ Forwarding Hijack anaa Default Voicemail PIN Akontaabu a Wogye. Mobile network dwumadie biara a ɔwɔ Asase so boa Supplementary Service (SS / USSD) dialer codes a ɛyɛ agyapadeɛ a wɔanya afiri telefon a ɛwɔ asase so switches mu (*72, . *71, . *90, . *92 wɔ Amerika Atifi fam CDMA/bell-style network ahorow te sɛ Verizon so, ne **21*, . **61*, . **62*, . **67* wɔ wiase nyinaa GSM/3GPP ntam nkitahodi te sɛ AT&T, T-Mobile, Vodafone, O2, Rogers, ne Telstra so). Sɛ wobɔ a, saa mmara yi kyerɛ wo cellular carrier no core network switch, ansa na ɔfrɛ bi adu wo handset so da, sɛ ɔmfa wo nne frɛ a ɛba (anaasɛ frɛ a wonnyaa ho mmuae/a wonni adagyew) nkɔ telefon nɔma biara a ɛwɔ akyi a wɔakyerɛ wɔ koodu no akyi no so komm.

Ntuafo de saa nkwammoaa mu nsɛnkyerɛnne nhyehyɛe yi di dwuma denam agoru abien a ɛnyɛ den a ɛyɛ hu so. Wɔ Play #1 (Social-Engineered Star-Code Dialing) mu no, ɔdaadaafo bi a ɔyɛ ne ho sɛ sikakorabea nsisi dwumadibea, obi a ɔde nneɛma kɔma nkurɔfo, obi a ɔhwɛ nneɛma a wɔde di dwuma so, anaa Google Voice adetɔfo daadaa wo ma wofrɛ *72 anaasɛ **21* ɛno akyi no, nɔma a ɛwɔ digit 10 (a ɛyɛ atoro sɛ ɛyɛ "security verification code", "badge ID", anaa "call merging code"), a ɛde wo telefon so frɛ a ɛba no ɔha biara mu nkyem 100 kɔ ɔtowhyɛfo no fon a ɛhyew so ntɛm ara. Wɔ Play #2 (Nighttime Voicemail Box Takeover) mu no, ɔtowhyɛfo no ne wo nkasa mpo da: wɔ 03:00 AM bere a woada (anaasɛ bere a wode spam frɛ ahyɛ wo screen so ma enti wobɔ "Decline"), ɔtowhyɛfo no kanyan "Frɛ Me Mmom" automated voice verification option wɔ WhatsApp, Signal, Telegram, anaa email provider bi so. Esiane sɛ wummua nti, nne robɔt a ɛyɛ adwuma a ɛkenkan wo login code a ɛwɔ digit 6 no kɔ wo carrier voicemail box no mu tẽẽ, na afei ɔtowhyɛfo no de caller-ID spoofing frɛ kɔ akyirikyiri (SpoofCard / SIP trunking) anaa wo carrier no default factory voicemail PIN (0000, . 1234, anaa wo fon nɔma no digit 4 a etwa to) de abɔ nea wɔakyere agu hama so no na woagye wo akontaabu no.

Sɛ wowɔ honam fam asiane mu ntɛm ara anaasɛ worehyia apoobɔ a, frɛ wo mpɔtam hɔ nɔma a egye ntɛmpɛ (911 wɔ United States ne Canada no, . 112 wɔ Europa Aman Nkabom no nyinaa mu, . 999 wɔ United Kingdom) anaa hwɛ yɛn international directory no mu nɔma ahorow a egye ntɛmpɛ. Di ntɛm ara carrier forwarding cancellation ne account recovery anammɔn a ɛwɔ aseɛ ha no akyi.

Yɛ eyi mprempren¶

1. Bue wo fon no keypad dialer no MPREMPREN na frɛ amansan carrier cancellation codes no na kum Unconditional ne Conditional Call Forwarding nyinaa: Mfa wo ho nto wo iPhone anaa Android Settings menu nkutoo so, a ɛtaa ntumi nkyerɛ carrier-level CDMA anaa conditional (Busy / . No Answer / . Unreachable) mmara a ɛfa forwarding ho. Bue wo Phone app na frɛ abiɛsa nyinaa a wɔtwa mu nnidiso nnidiso yi nnidiso nnidiso, mia Frɛ bɔtn a ɛyɛ ahabammono no wɔ emu biara akyi na twɛn sikani 5 ma ɛnne a wɔde si so dua anaa pop-up no:
2. Twe frɛ ##002# na mia Call: Amansan nyinaa 3GPP/GSM master erasure code (ɛyɛ adwuma wɔ AT&T, T-Mobile, Rogers, Bell, Vodafone, EE, O2, Orange, Telstra, Optus, ne amanaman ntam GSM ntam nkitahodi so) a ɛpopa ne nyinaa Unconditional (*21*) ne Nsɛm a Wɔahyehyɛ ( .*61*, . *62*, . *67*) frɛ forwarding mmara bere koro mu.
3. Twe frɛ *73 na mia Call: Twa Call Forwarding a Ɛnyɛ Ahyɛde (*72) ne Ɔfrɛ a Wɔde Kɔ Aman a Wɔde Ahyɛ Mu (*71) wɔ Verizon Wireless, UScellular, Spectrum Mobile, Xfinity Mobile, Visible, ne Amerika Atifi fam telefon a ɛwɔ asase so/kable ntam nkitahodi so.
4. Twe frɛ *93 na mia Call (na *91 sɛ ɛho hia a): Twɛ Busy/No-Mmuae Call Forwarding (*90 / . *92) wɔ Amerika Atifi fam akwantufo a ɛtetew nsoromma mmara a ɛwɔ tebea bi mu fi *73.
5. Ntɛm ara audit nɔma a na wɔde wo frɛ no rekɔ denam dialing so *#21# na *#61# na *#62# na *#67# (wɔ GSM carriers so) anaasɛ worehwɛ wo online carrier portal: Ansa na wobɛpopa mmara no anaa bere a woawie pɛɛ no, wobɛfrɛ *#21# (Ahyɛde biara nni mu) ne *#67# (Forward When Busy) bɛkyerɛ MMI screen bi a ɛkyerɛ sɛ ebia Voice, Data, anaa SMS forwarding reyɛ adwuma mprempren ne telefon nɔma a ɛyɛ atoro bɛn na na ɛregye wo frɛ ahorow no.
6. Sesa wo carrier Voicemail PIN ntɛm ara kɔ random 6-to-8-digit code, na OFF "Voicemail Password Skip from Own Phone" (Direct-to-Voicemail Caller ID Bypass): Frɛ kɔ wo voicemail system no mu mprempren ara (anaasɛ bue wo carrier no app: My Verizon, myAT&T, T-Life/T-Mobile) na sesa wo voicemail PIN akyirikyiri fi wo fon nɔma no digit 4 a etwa to no ho, . 0000, anaasɛ 1234. Nea ɛho hia titiriw no, wɔ wo voicemail ahobammɔ nhyehyɛe mu no, hwehwɛ PIN no mpo bere a worefrɛ afi w’ankasa telefon nɔma so: anyɛ saa a, ɔtowhyɛfo biara a ɔbɔ wo fon nɔma no atoro sɛ wɔn outbound Caller ID (ANI/CLI spoofing) no, wo carrier no voicemail switch no hu no sɛ "wo frɛ fi w'ankasa wo nsa so" na wɔtow gu wo voicemail inbox mu tẽẽ a wɔmmisa PIN da.
7. San kyerɛw wo WhatsApp, Signal, anaa Telegram akontaabu a woafa no ntɛm ara wɔ wo fon so, na ma in-app Two-Step Verification PIN (Registration Lock):
8. Bue WhatsApp (Settings > Account > Two-step verification), Nsɛnkyerɛnne (Settings > Account > Registration Lock), ne Telegram (Settings > Privacy and Security > Two-Step Verification).
9. Seesei a wɔagyae call forwarding na wɔasesa wo voicemail PIN no, bisa SMS anaa Voice verification code foforo wɔ wo fon so na wode ahoɔden abɔ ɔtowhyɛfo no afi wo fon nɔma so, afei ntɛm ara ma 6-digit in-app Two-Step Verification / Registration Lock PIN no nyɛ adwuma sɛnea ɛbɛyɛ a obiara rentumi mfa voicemail anaa SMS code nkutoo nkyerɛw wo fon nɔma bio da.
10. Bɔ w’abusua, wo nnamfo, ne adwumayɛfo a wo ne wɔn di nkitaho no kɔkɔ denam ɔkwan foforo so sɛ wɔkyeree wo WhatsApp/Telegram bere tiaa bi: Wɔ sikani 60 mu bere a woagye WhatsApp anaa Telegram akontaabu denam voicemail so anaa *72 frɛ a wɔde kɔ anim, nsisifo nkra wo nnansa yi nkitahodi ne abusua kuw nkɔmmɔbɔ a wɔsrɛ sɛ "bɔ bosea $500 denam Zelle, Venmo, Cash App, anaa Apple Cash so kosi ɔkyena" anaasɛ fa link ahorow a enye mena. Fa kɔkɔbɔ bi fa SMS, iMessage, anaa nne frɛ so to hɔ sɛnea ɛbɛyɛ a obiara mfa sika nkɔma ɔdaadaafo no.
11. Hwɛ wo Google Voice (voice.google.com), Apple ID, ne sikakorabea akontaabu a ɛfa nɔma ahorow a wɔde kɔma afoforo a wɔmma ho kwan ho: Ade biako nti a nsisifo taa daadaa wɔn a wɔayɛ wɔn basabasa no ma wɔfrɛ wɔn *72 anaasɛ telefon so frɛ a ɛwɔ digit 6 a wobɛgye no yɛ sɛ wode w’ankasa mobile nɔma bɛka ho sɛ nɔma a wɔagye atom sɛ wode bɛkɔ Google Voice akontaabu foforo koraa a ɔsisifo no di so mu. Di yɛn akyi Google Voice verification code scam sanba anammɔn ase hɔ na woasan anya wo nɔma.

--- .

Gyinaesi dua: star-code anaa voicemail hijack a wɔhwehwɛ na wogyae¶

Fa adwuma nhyehyɛe yi kyerɛ sɛnea ɔtowhyɛfo no retwa wo verification codes bere a wo SIM card da so ara yɛ adwuma wɔ wo nsam no:

flowchart TD
    Symptom["Attacker Hijacked WhatsApp / Signal / Bank 2FA (Anaasɛ Wo Gyae sɛ Wobɛgye Calls) Bere a Wo Phone Da so Wɔ Cellular Bars"] --> DialCheck{"So Obi Daadaa Wo Nnansa Yi Ma Wobɛfrɛ *72, *71, *90, *92, anaa **21* Na Telefon Nɔma Di Akyi?"}

    DialCheck -->|"Yiw: Star-Code Forwarding yɛ adwuma"| KillForward["ANAMMƆN 1: Dial ##002# (Press Call), AFEI Dial *73 (Press Call), AFEI Dial *93 (Press Call) na Purge Carrier Forwarding Nyinaa"]

    DialCheck -->|"Dabi: Mfrɛ Star Code Da"| VoicemailVector["Attack Vector Is Either: (A) Akyirikyiri Voicemail Adaka PIN / Caller-ID Spoofing Hack, ANAA (B) Conditional Forwarding (* 61/*62/*67) Set Mfiase"]

    VoicemailVector --> KillForward

    KillForward --> LockVM["ANAMMƆN 2: Sesa Carrier Voicemail PIN kɔ Random 6-8 Digit Code + Ma 'Hweɛ PIN Bere a Worefrɛ Fi W'ankasa Nɔma Mu' no nyɛ adwuma."]

    LockVM --> ReclaimApp{"Akontaabu Bɛn na ɔtowhyɛfo no De Nne a Wɔkyeree no Frɛe?"}

    ReclaimApp -->|"WhatsApp / Nsɛnkyerɛnne / Telegram"| ReReg["ANAMMƆN 3A: Bisa Fresh SMS/Voice Code na San Fa Nɔma -> Ntɛm ara Ma 2-Anamɔn Verification / Registration Lock PIN nyɛ adwuma"]
    ReclaimApp -->|"Google Voice (‘Fa Telefon So Di Dwuma’ Nsisi)"| ReclaimGV["ANAMMƆN 3B: Kɔ voice.google.com -> Fa Voice Call so Fa Wo Nɔma no bata ho na Yi Fi Scammer no Akontaabu mu"]
    ReclaimApp -->|"Sikakorabea / Email / Apple / Google"| RevokeSess["ANAMMƆN 3C: Twa Active Sessions Nyinaa mu, Yi Rogue Trusted Phone Numbers, na Sesa 2FA Fi Voice/SMS so kɔ Authenticator/Passkey so"]

--- .

Sɛnea wɔte ase *72 / GSM MMI codes ne voicemail hacks yɛ adwuma¶

Wɔn a wɔde telefon a wokura kyin di dwuma dodow no ara susuw sɛ sɛ wɔn honam fam SIM kaad anaa eSIM no nnsesae denam carrier adwumayɛfo a ɔyɛ ɔkwasea so a, obiara ntumi nnye frɛ anaa 2FA koodu a wɔde bɛkɔ ne telefon nɔma so. Nokwarem no, Public Switched Telephone Network (PSTN) ne cellular SS7 / IMS networks ma frɛ-redirection features abien a wɔasisi mu a ɛhwehwɛ sɛ zero kyɛfa biara mfi carrier store adwumayɛfo hɔ:

1. Nsoromma Mmara a Ɛnyɛ Ahyɛde vs. Ahyɛde a Ɛfa Soafo Nsoromma Mmara (*72 vs. *71 / . *90 / . *92 / . *61* / . *62* / . *67*) .¶

Mobile phone line biara wɔ ** call-forwarding slots anan a ɛsono emu biara** a wɔde asie wo carrier no Home Location Register (HLR) anaa Home Subscriber Server ( .HSS): .

Nea enti a wɔde Conditional Call Forwarding (*71 / . *90 / . *92 / . **61* / . **67*) yɛ anifere saa: - Sɛ ɔtowhyɛfo bi daadaa wo ma wode Unconditional Forwarding (*72 anaasɛ **21*), wuhu wɔ da koro ntam sɛ wo fon no agyae bɔ koraa. - Nanso, sɛ ɔtowhyɛfo bi daadaa wo ma frɛ Conditional Forwarding code (*71<Number>, . **67*<Number>#, anaasɛ **61*<Number>#), anaasɛ ɔde ne nsa ka wo fon a wɔantow no bere tiaa bi sikɔne 5 wɔ bar anaa office bi mu de frɛ **67*<AttackerNumber>#, wo fon kɔ so bɔ koraa sɛnea ɛsɛ da biara. Forwarding trap no tra wo carrier switch no mu a ɛda hɔ adapɛn anaa asram kosi sɛ ɔtowhyɛfo no besi gyinae sɛ ɔbɛbɔ: wɔ 03:00 AM no, wɔfrɛ wo fon no fi nɔma a wɔasiw ano (a ɛma wo line no yɛ "Busy") na bere koro no ara mu no wɔkanyan password reset anaa WhatsApp nne verification call. Esiane sɛ wo line no nni adagyew anaasɛ wonnyaa mmuae nti, wo carrier no de verification call no kɔ komm kɔ attacker no fon so sen sɛ ɛde wo voicemail bɛkɔ.

2. Sɛnea Akyirikyiri Voicemail Adaka PIN & Caller-ID Spoofing no Di Dwuma (Qakbot / . WhatsApp Nighttime Hijack) Adwuma¶

Sɛ mpo woanfrɛ nsoromma koodu da a, telefon a wokura kyin biara wɔ Conditional Call Forwarding (*61* / . *62* / . *67*) a wɔde ahyɛ wo carrier no Voicemail Pilot Number so default so. Ntuafo de wo voicemail adaka no di dwuma wɔ anammɔn abiɛsa mu: 1. Triggering the Automated Voice OTP at 03:00 AM: Ɛkame ayɛ sɛ adetɔfo app biara a ɛde telefon-nɔma ahotoso di dwuma (WhatsApp, Signal, Telegram, Instagram, Google, Microsoft, PayPal, ne sikakorabea ahorow) de fallback link bi ma wɔ login screen no so a ɛkenkan sɛ "So woannya SMS no? Frɛ me de code bi mmom." Bere a ɔtowhyɛfo no klik "Call me" bere a woada no, ɔsom no de telefon frɛ a ɛyɛ adwuma a ɛka digit 6-digit verification code no den na egyaw sɛ voicemail nkrasɛm a wɔakyere agu hama so wɔ wo inbox mu. 2. Wo Voicemail a Wobɛfrɛ no Akyirikyiri: Cellular carrier biara wɔ gyinapɛn Akyirikyiri Voicemail Access Feature: - Wofrɛ nea wɔayɛ no bɔne no telefon nɔma, twɛn ma voicemail nkyia no fi ase bɔ, na mia ** .* (Nsoromma)** anaa ** .# (Pound)** bere a wɔrekyia no sɛ wobebue Remote Owner Login Prompt ("Please enter your password"). - Anaasɛ wofrɛ carrier no regional voicemail pilot deposit/retrieval nɔma no tẽẽ na wokyerɛw nea wɔayɛ no bɔne no telefon nɔma a ɛwɔ digit 10. 3. Wɔfa Factory Defaults anaa Caller-ID so twa Voicemail PIN no ho (ANI) Nsɛm a wɔde di dwuma wɔ ɔkwan a ɛyɛ nwonwa so: - Ɔkwan A (Default PINs): Nnipa ɔpepem pii a wɔakyerɛw wɔn din no anhyehyɛ anaasɛ wɔansakra wɔn carrier voicemail PIN da, na wogyaw no sɛ carrier no default (0000, . 1111, . 1234, . 9999, anaa telefon nɔma no ankasa mu nkyerɛwde 4 a etwa to). - Ɔkwan B (Caller-ID / SIP Spoofing Bypass): Sɛnea wɔahyɛ no wɔ carrier pii so no, sɛ wofrɛ wo voicemail system fi w’ankasa mobile phone so a, switch no hwɛ wo Caller ID (Calling Party Number) na ohuruw PIN prompt no sɛnea ɛbɛyɛ a ɛbɛyɛ mmerɛw. Ntuafoɔ de VoIP SIP trunk anaa caller-ID spoofing service di dwuma de hyehyɛ wɔn outbound Caller ID to wo telefon nɔma a ɛwɔ digit 10, frɛ wo carrier no voicemail access number, na ntɛm ara wɔma wɔn kwan koraa sɛ wɔbɛbɔ wo voicemail nkrasɛm foforɔ a wonnim wo PIN koraa.

--- .

Ɔfa 1: Anamɔn biara Carrier Call Forwarding & Voicemail Lockdown a Ɔdemafo no de ma¶

Mfa no sɛ mmirikatu no ##002# nkutoo na wosiesiee biribiara, efisɛ reset conditional forwarding wɔ GSM carriers binom so (##002#) nso betumi asiesie wo voicemail deposit ho mmara a ɛfata kosi sɛ wɔbɛsan afi ase, na CDMA-agyapade akwantufo hwehwɛ nsoromma mmara pɔtee bi. Di akwankyerɛ pɔtee a ɛfa wo carrier ho a ɛwɔ ase ha no akyi:

1. Amansan GSM MMI Nhwehwɛmu & Reset Adeyɛ (AT&T, T-Mobile, Rogers, Bell, Telus, Vodafone, EE, O2, Abiɛsa, Telstra, Optus)¶

1. Anamɔn A (Audit Mprempren Forwarding Targets Di kan):
2. Bue wo Phone dialer, kyerɛw ** .*#21#**, na mia Frɛ so. Kenkan MMI screen a ɛyɛ fitaa a ɛbɛpue no: sɛ line biara ka sɛ "Voice Call Forwarding: Enabled" a telefon nɔma a wunnim di akyi a, twa screenshot sɛ adanse.
3. Fa ** san yɛ bio.*#61#** (Mmuae biara nni hɔ), *#62# (Wɔntumi nkɔ hɔ), ne ** .*#67#** (Bere a Adagyew Nni Mu). (Hyɛ no nsow: Wɔ akontaabu a ɛyɛ daa so no, *#61#, . *#62#, na *#67# ɛsɛ sɛ ɛkyerɛ wo carrier no official Voicemail Pilot Number; sɛ wunnim sɛ ebia nɔma a wɔakyerɛ no yɛ wo carrier no voicemail pilot nɔma anaasɛ hacker nɔma a, kɔ Anammɔn B.)
4. Anamɔn B (Popa Forwarding Mmara Nyinaa):
5. Dial ** .##002#** na mia Frɛ (twɛn "Call Forwarding Erasure was successful").
6. Hwɛ wo smartphone no kurom menu nso:
   • Wɔ iPhone so: Kɔ Nsiesiei > Apps > Phone > Call Forwarding na hwɛ sɛ toggle no yɛ OFF.
   • Wɔ Android so: Bue Phone app > Three-dot menu > Settings > Calling accounts (anaasɛ Supplementary services) > Call forwarding na hwɛ sɛ Bere nyinaa forward yɛ Off, na sɛ Bere a wonni adagyew / Bere a wonnyaa mmuae / Bere a wuntumi nkɔ no twe adwene si wo carrier no default voicemail nɔma nkutoo so.

2. Verizon Wireless, Nea Wotumi Hu, UScellular, Spectrum Mobile & Xfinity Mobile¶

Efisɛ Verizon nne ntam nkitahodi titiriw no de Amerika Atifi fam nsoromma mmara di dwuma sen sɛ wɔde GSM bedi dwuma # MMI nhama, . ##002# bɛsan de mfomso bi aba anaasɛ ɛrenyɛ hwee wɔ Verizon so. Sɛ anka: 1. Bue Phone dialer no, frɛ ** .*73, na mia Frɛ so. Tie confirmation beep anaa dawurubɔ a ɛkyerɛ sɛ wɔagyae call forwarding no, afei to telefon no. 2. Dial ** .*93 na mia Frɛ (sɛ wobɛhwɛ sɛ wɔayi No-Answer/Busy forwarding biara a ɛyɛ soronko no afi hɔ). 3. Bue Me Verizon app (anaasɛ kɔ mu verizon.com wɔ browser a ɛho tew so) -> kɔ Account > My Plan > Blocks / Call Forwarding (anaasɛ hwehwɛ Call Forwarding wɔ app no ​​mu) na hwɛ sɛ forwarding nɔma biara nni hɔ a ɛyɛ adwuma wɔ line biara so wɔ w’abusua nhyehyɛe no so.

3. Locking Down Wo Carrier Voicemail Adaka Tia Akyirikyiri & Spoofed Access¶

Yɛ saa anammɔn a ɛyɛ ahyɛde a ɛma nne nkra yɛ den yi wɔ telefon nhama biara a ɛwɔ wo fie so:

--- .

Ɔfã 2: WhatsApp, Signal, anaa Telegram Akontaabu a wɔafa no a wɔbɛsan anya¶

Bere a ɔtowhyɛfo bi de di dwuma no *72 frɛ forwarding anaa anadwo voicemail PIN hack, wɔn #1 botae ne wo WhatsApp, Signal, anaa Telegram akontaabu. Esiane sɛ saa apps yi de wo fon nɔma di dwuma sɛ wo root identity nti, sɛ wotwa nne frɛ biako a ɛwɔ digit 6 a, ɛma ɔtowhyɛfo no kyerɛw wo fon nɔma wɔ wɔn mfiri so, na ɛno ma wo fon no fi mu ntɛm ara.

1. WhatsApp a Wɔbɛsan Anya Ntɛm ara ("Your phone number is no longer registered with WhatsApp on this phone") .¶

Di anammɔn pɔtee yi akyi wɔ simma kakraa bi akyi bere a woahwere kwan no: 1. Di kan wie Phase 1 (##002# + *73 + sesa Voicemail PIN): Sɛ wo bisa WhatsApp code ansa na woatwa mu a *72 call forwarding, code foforo no bɛkɔ attacker no nkyɛn bio kɛkɛ. 2. Bue WhatsApp wɔ wo fon so, hyɛ wo fon nɔma, na bisa verification code foforo a ɛwɔ digit 6 denam SMS (anaasɛ Voice Call) so: - Esiane sɛ wowɔ SIM card / eSIM ankasa wɔ honam fam na woaprapra call forwarding nti, afei SMS anaa nne frɛ no bɛba wo fon so. - Ntɛm ara a wobɛkyerɛw saa 6-digit code no, wɔde ahoɔden fi wo WhatsApp akontaabu mu. 3. Na sɛ ɔtowhyɛfo no danee WhatsApp "Two-Step Verification (6-digit PIN)" wɔ wo akontaabu so de tow wo mu nso ɛ? - Ɛkame ayɛ sɛ bere nyinaa na ntuafo de wɔn ankasa 6-digit Two-Step Verification PIN si wo WhatsApp mu bere a wɔafa no akyi pɛɛ. - DO NOT PANIC: Sɛ mpo screen no bisa wo attacker no 6-digit Two-Step Verification PIN a wunnim a, sɛ wode SMS/Voice code a ɛwɔ Anammɔn 2 no mu no di wo fon nɔma no ho adanse ara kwa a, woagye ɔtowhyɛfo no afi mu DIDA. Ɔtow hyɛ no so no ntumi nkenkan anaasɛ ɔmfa nkra bio bere a wo akontaabu no te saa PIN screen no so no. - Hwɛ Anamɔn Abien Verification PIN prompt screen no: - Sɛ woadi kan de email address a wode bɛsan agye aka ho (anaasɛ sɛ ɔtowhyɛfo no werɛ fii sɛ ɔbɛhyehyɛ biako / wankyerɛ bi): Klik "Wo werɛ afi PIN?" -> "Send Email" na woasan de PIN no asi hɔ ntɛm ara. - Sɛ ɔtowhyɛfo no de wɔn ankasa email address kaa ho (anaasɛ wɔanhyehyɛ email biara): Klik "Wo werɛ afi PIN?" -> "Reset" na twɛn nnafua 7 ahobammɔ cooldown bere a ɛyɛ ahyɛde. Wɔ saa nnafua 7 no mu no, ɔtow hyɛ no so no, wɔatwa wo WhatsApp akontaabu no mu koraa na ontumi mfa nkra anaa nkenkan nkɔmmɔ. Nnafua 7 pɛpɛɛpɛ akyi no, WhatsApp ma wo tap "Reset Account" na woakɔ wo akontaabu mu a PIN zero na ɛho hia. 4. Sɛ wosan kɔ WhatsApp mu pɛ a, yɛ saa nneɛma 3 yi ntɛm ara: - Kɔ Settings > Linked Devices na pia Log out wɔ WhatsApp Web, Windows, anaa Mac companion sessions biara a wonnim a ɔtowhyɛfo no de link bae wɔ window a na wɔwɔ kwan no mu. - Kɔ Settings > Account > Two-step verification -> hyehyɛ w'ankasa 6-digit PIN na kyerɛw wo din w'ankasa email address a ahobammɔ wom. - Kɔ Settings > Account > Email address na hwɛ sɛ attacker email biara nka ho.

2. Nsɛnkyerɛnne & Telegram a Wɔsan Yɛ¶

• Signal: San fa SMS so kyerɛw wo fon nɔma wɔ wo handset so, kɔ Settings > Account > Registration Lock ntɛm ara na dan no ON (wɔkyekyere no wɔ wo Signal PIN so), na hwɛ Settings > Linked Devices na yi desktop nhyiam biara a ɛyɛ atoro.
• Telegram: San kɔ mu denam wo fon nɔma so, bue ntɛm ara Nsiesiei > Mfiri -> Twa Nhyiam Afoforo Nyinaa (efisɛ Telegram ma mfiri pii kɔ mu bere koro mu gye sɛ woakyerɛ pefee sɛ woagyae nhyiam ahorow), na ma Nsiesiei > Kokoamsɛm ne Ahobammɔ > Anamɔn Abien Nhwehwɛmu (Cloud Password) nyɛ adwuma.

--- .

Ɔfã 3: Sɛ wobɛsan anya ahoɔden afi "Google Voice Linked Number" Hijack no mu¶

Sɛ ɔhɔho bi a ɔwɔ Facebook Marketplace, Craigslist, OfferUp, dating app, anaa afieboa a wayera flyer so bisa sɛ ɔmfrɛ wo (anaasɛ ɔka kyerɛɛ wo sɛ frɛ wo *72 anaasɛ wɔkyɛ 6-digit code "de kyerɛ sɛ woyɛ onipa ankasa na ɛnyɛ bot"), ɛkame ayɛ sɛ wɔkyeree wo fon nɔma de hwɛɛ Google Voice (voice.google.com) akontaabu sɛnea ɛbɛyɛ a wobetumi asisi afoforo a wɔayɛ wɔn basabasa no afi U.S. telefon nɔma a wontua hwee so.

Sɛnea wobɛyi w’ankasa mobile nɔma afi ɔsisifo no Google Voice akontaabu mu wɔ nea ennu simma 3 mu ni: 1. Nea edi kan no, hwɛ hu sɛ wɔatwa call forwarding mu (##002# na *73). 2. Wɔ desktop browser anaa wo fon so no, kɔ ** .voice.google.com** de w’ankasa Google/Gmail akontaabu bedi dwuma. 3. Sɛ woanhyehyɛ Google Voice da a, klik Toa so, hwehwɛ kurow/mpɔtam koodu biara a wɔanhyɛ da, na paw Google Voice nɔma biara a wontua hwee na kɔ w'anim kɔ "Link a phone number" nokwaredi anammɔn no so. (Sɛ wowɔ Google Voice akontaabu dedaw a, kɔ Nsiesiei (Gear Icon) > Akontaabu > Nnɔmba a wɔde abɔ mu > + Nɔma foforo a wɔde abɔ ho.) 4. Hyɛ W’ankasa mobile nɔma (nea ɔsisifo no wiaa) na paw Verify by phone call anaa SMS. 5. Google Voice bɛda kɔkɔbɔ pop-up bi adi a ɛkyerɛ sɛ: "Telefon nɔma yi wɔ abusuabɔ dedaw wɔ Google Voice akontaabu foforo ho. Wopɛ sɛ wogye no ma saa akontaabu yi mmom?" 6. Klik Yiw / Claim so. Hyehyɛ 6-digit code a wɔde akɔ wo fon so no. Wei twa wo fon nɔma no mu ntɛm ara na ɛyi fi ɔsisifoɔ no Google Voice akontaabuo mu.

--- .

Ɔfã 4: Wo Carrier Akontaabu ne 2FA a Wobɛma Ayɛ Den wɔ Phone-Number Ntua Nyinaa Ho¶

Sɛ wopopa star-code call forwarding mmara nyinaa na wosan gye wo akontaabu ahorow no wie a, fa nhyehyɛe anum yi sɛnea ɛbɛyɛ a ɔtowhyɛfo biara rentumi mfa wo fon nɔma anaa wo nne nkra adaka no nni akode bio da:

• Ma Carrier Number Lock / Port-Out Protection nyɛ adwuma NA Set a Carrier Account Passcode: Wɔ voicemail PINs akyi no, kɔ wo carrier app (Verizon Number Lock, AT&T Wireless Account Lock, T-Mobile Port Out Protection / SIM Protection) mu na dane SIM / Port Lock sɛnea ɛbɛyɛ a ɔtowhyɛfo ntumi mfi voicemail hack mu nkɔ a ayɛ ma SIM a wɔde sesa nneɛma.
• Yi Voice Call & SMS 2FA fi hɔ Baabiara a Wɔboa Passkeys, Hardware Keys, anaa Authenticator Apps: Hwɛ wo email titiriw (Gmail, Outlook, Proton), password manager, Apple ID, ne sikasɛm akontaabu mu. Yi wo mobile fon nɔma sɛ Voice/SMS 2FA fallback baabiara a ɛbɛyɛ yiye na dan kɔ Passkeys, FIDO2 Hardware Keys (YubiKey), anaa TOTP Authenticator Apps so. Kae sɛ nhyehyɛe a ɛwɔ nneɛma abien no mu yɛ den te sɛ nea ɛyɛ mmerɛw sen biara a ɛsan kɔ akyi: sɛ wowɔ YubiKey a wɔahyɛ no den wɔ akontaabu bi a ɛda so ara ma kwan sɛ wobɛbɔ "Sɔ ɔkwan foforo hwɛ -> Frɛ me fon nɔma" a, wo akontaabu no da so ara yɛ mmerɛw sɛ a *72 anaasɛ voicemail ntua.
• Susuw Ho sɛ Wobɛma Carrier Voicemail Agyae Koraa (Anaasɛ Wobɛkyerɛ Conditional Forwarding to a Dead Number): Sɛ ɛntaa mfa wo ho nto legacy carrier voicemail so efisɛ nkurɔfo text anaa message wo bere a woapa ɔfrɛ bi a, wɔfrɛ wo carrier (611) sɛ yi Voicemail afã no fi wo line no so koraa yi akyirikyiri voicemail OTP ntua no ani nyinaa fi hɔ daa.
• Turn ON "Silence Unknown Callers" Carefully, or Disable Lock Screen Voice Transcripts: Hu sɛ iOS Silence Unknown Callers de nɔma biara a enni wo Contacts mu no kɔ voicemail so ntɛm ara, a ɛkyerɛ sɛ sɛ ɔtowhyɛfo bi kanyan automated bank anaa WhatsApp voice verification call fi nɔma a wonnim a wontua hwee so a, wo iPhone bɛyɛ tow saa verification call no gu wo voicemail box no mu komm a wommɔ wo fon mpo. Hwɛ sɛ wɔato wo voicemail adaka PIN ne Auto-Login Skip mu ansa na wode Silence Unknown Callers adi dwuma.
• Tete Abusua muni Biara wɔ "Never Dial" no so *72 anaasɛ **21*" Mmara: Ka kyerɛ awofo a wɔn mfe akɔ anim, mmabun, ne mfɛfo adwumayɛfo sɛ sikakorabea, adwumakuw a wɔde nneɛma kɔma, polisifo dwumadibea, anaa tech support agent biara nni hɔ a ɛfata sɛ wobɛka akyerɛ wo da sɛ frɛ code bi a efi ase *72, . *71, . *90, . *92, anaasɛ **21* na telefon nɔma di akyi. Kood biara a efi ase wɔ saa prefixes no yɛ call-forwarding command.

--- .

Nsɛm a wɔtaa bisa¶

Ɛyɛɛ dɛn na obi faa me WhatsApp 3:00 AM bere a na mada na me fon te me nightstand so pɛɛ a na signal ayɛ no ma?¶

Bere a woada no, ɔtowhyɛfo no kyerɛw wo fon nɔma guu WhatsApp so wɔ wɔn mfiri no so na ɔbɔɔ so "Fa Telefon Frɛ so Di adanse". mmom sen sɛ wode SMS bedi dwuma. Esiane sɛ woansɔre na woammua telefon so frɛ a ɛbae a ɛyɛ adwuma ankasa no nti, wo mobile carrier no de ɔfrɛ a wɔamma ho mmuae no kɔɔ wo voicemail adaka no mu, faako a WhatsApp nne nhyehyɛe a ɛyɛ adwuma ankasa no kyeree digit 6 verification code no sɛ voicemail nkrasɛm. Sikɔne bi akyi no, ɔtowhyɛfo no frɛɛ wo voicemail system no wɔ akyirikyiri na ɔsusuu wo default carrier voicemail PIN (mpɛn pii no 0000 na ɛwɔ hɔ, . 1234 mu, anaa wo fon nɔma no digits 4 a etwa to) anaasɛ wode Caller-ID spoofing dii dwuma de maa wo carrier no voicemail system no susuwii sɛ wɔrefrɛ fi w’ankasa wo nsa so, na ama wɔatumi atie nea wɔakyere agu hama so no na wɔakɔ wo WhatsApp mu.

Dɛn nti na "Call Forwarding" a midum wɔ me iPhone anaa Android Settings menu mu no amma ɔtowhyɛfo no annya me frɛ ahorow no?¶

Nea wɔasisi wɔ mu no Nsiesiei > Telefon > Frɛ a Wɔde Kɔ Aman toggle wɔ iPhones ne Android mfiri pii so nkutoo controls Ɔfrɛ a Wɔde Kɔ Aman a Ɛnyɛ Ahyɛde (*21*) . wɔ GSM ntam nkitahodi ahorow a wɔahyɛ da ayɛ so. Mpɛn pii no, entumi nkyerɛ anaasɛ entumi mfi hɔ Mmara a ɛfa Call Forwarding ho a ɛwɔ tebea bi mu (Kɔ Anim Bere a Wonni Adagyew *67*/ .*90, Forward Bere a Mmuae Biara Nni Hɔ *61*/ .*92, ne Forward Bere a Wontumi Nkɔ *62*) na ɛnhwɛ Amerika Atifi fam nsoromma a wɔde fa nneɛma so (*72 / . *71) wɔ Verizon anaa CDMA-agyapade ntam nkitahodi ahorow so. Dialing nkutoo ##002# (wɔ GSM akwantufo so) ne *73 / . *93 (wɔ Verizon ne North America carriers so) kyerɛ cellular network switch no tẽẽ sɛ ɔnpopa forwarding slots nyinaa.

Bɛtumi ##002# anaasɛ *72 nso fa me SMS text messages a ɛba no kɔ hacker fon so?¶

Wɔ nnɛyi ɔmanfo aguadi telefon so nkitahodibea ahorow so no, nsoromma mmara a wɔde di dwuma wɔ ɔkwan a ɛfata so ( .*72, . **21* na ɛyɛ., . **61* na ɛyɛ., . **67* na ɛyɛ.) kɔ anim nkutoo circuit-switched/IMS nne frɛ a wɔde frɛ, ɛnyɛ SMS text messages (ɛwom mpo sɛ 3GPP MMI nkyerɛkyerɛmu a ɛyɛ agyapadeɛ no de tele-service code ka ho de 16. Ɔde ne nsa kyerɛɛ ne so wɔ SMS ho no, ɛkame ayɛ sɛ adetɔfo a wɔde nneɛma kɔ no nyinaa siw SMS a wɔde kɔma a wɔn a wɔakyerɛw wɔn din no afi ase no kwan wɔ switch level no so). Nanso, enhia sɛ ntuafo de wo SMS nkrasɛm no kɔ efisɛ ɛkame ayɛ sɛ platform titiriw biara (WhatsApp, Signal, Telegram, Google, Microsoft, ne sikakorabea ahorow) de a "Frɛ me de verification code mmom sen sɛ wobɛkyerɛw text". button no wɔ login screen no so pɛɛ, na ɛdane nne-frɛ a wɔde kɔ anim hijack ma ɛbɛyɛ 2FA bypass ntɛm ara.

Sɛ me frɛ a, dɛn na ɛba ##002# wɔ AT&T, T-Mobile, anaa Europa/UK/Australia GSM carrier so: so me voicemail a metaa yɛ no bɛda so ara ayɛ adwuma?¶

Ɛfiri ##002# popa nyinaa mmara a ɛfa forwarding a ɛwɔ tebea ne nea enni mu wɔ GSM networks so, wɔ carriers binom so no ebetumi nso asiesie conditional forwarding pointers no (*61*, . *62*, . *67*) a ɛtaa de frɛ a wɔannye no kɔ wo carrier no voicemail adaka mu. Bere a wɔatu mmirika awie no ##002# sɛ wobɛpam attacker bi rogue forwarding number, sɔ wo mobile number a wobɛfrɛ no afiri fon foforɔ so ahwɛ na woapo frɛ no: sɛ ɛka sɛ "Call cannot be completed" mmom sen sɛ wobɛkɔ wo voicemail so a, bue Phone > Nsiesiei > Frɛ a Wɔde Kɔ Aman (anaasɛ frɛ *#61# / contact your carrier) na woasan de wo carrier no official default voicemail pilot number no aba, anaasɛ gyae conditional forwarding off ahyɛ da sɛnea ɛbɛyɛ a obiara rentumi nto verification call nkɔ wo voicemail mu bio.

--- .

Sources a wɔhwɛɛ mu¶

• Ɔman Nkitahodi Bagua (FCC) (United States): Adetɔfo Akwankyerɛ: Frɛ a Wɔde Kɔ Amannɔne Nsisi, SIM Sesa, Port-Out Nsisi, ne Caller ID Spoofing Ahobammɔ.
• Intanɛt so Ahobammɔ ne Nneɛma a Wɔde Yɛ Adwuma Ahobammɔ Dwumadibea (CISA) & FBI IC3 (United States): Ɔmanfoɔ Nnwuma ho Amanneɛbɔ a ɛfa Automated Voicemail OTP Interception (Qakbot / Anadwo WhatsApp & Account Takeover Ɔsatu ahorow) ne MFA Hardening.
• Europa Telefon so Nkitahodi Gyinapɛn Asoɛe (ETSI) & 3GPP Mfiridwuma ho Nkyerɛkyerɛmu TS 22.030 / . TS 22.082: Man-Machine Interface (MMI) a ɛwɔ User Equipment (UE) ne Frɛ a ɛde Nnwuma a Wɔde Ka Ho (*21*, . *61*, . *62*, . *67*, . ##002#).
• Ɔman Intanɛt so Ahobammɔ Asoɛe (NCSC) (United Kingdom) & Ofcom: Nkrasɛm Akontaabu (WhatsApp, Signal, Telegram) a wɔbɔ ho ban fi Voicemail PIN a Wɔde Di Dwuma ne Akwankyerɛ a Wɔde Di Dwuma a Ɛfa Anamɔn Abien Ho.
• Amerika Atifi fam Nnɔmba Ho Nhyehyɛe Dwumadibea (NANPA): Ɔsom Mmara a Ɛgyina Hɔ (*72, . *73, . *90, . *91, . *92, . *93) Mfiridwuma ho Nkyerɛkyerɛmu.

--- .

Akwankyerɛ ahorow a ɛfa ho¶

• SIM swapping: sɛnea wobɛhunu, agyae, na woanya ahoɔden afiri SIM hijack mu
• MFA phishing ne Ɔtamfo-wɔ-Mfinimfini (AiTM) bypass
• MFA lockout ne authenticator a wɔsan nya
• Email account hacked, forwarding mmara, ne sanba
• Stalkerware, spyware, ne keylogger detection wɔ fon so
• Nnɔmba a egye ntɛmpɛ sɛnea ɔman biara te