QR Hijacking (QRLJacking) le WhatsApp, Dzesi, Masɔmasɔ, kple Telegram dzi¶

Ne èkpɔe be ame aɖe le wò gbedasi siwo woɣla tso nuwuwu vaseɖe nuwuwu xlẽm le ɣeyiɣi ŋutɔŋutɔ me alo le ametafatafa gbedasiwo ɖom ɖa tso wò WhatsApp, Signal, Discord, Telegram, alo Line akɔnta me esime wò smartphone gakpɔtɔ le dɔ wɔm nyuie le asiwò eye mèdo le eme kpɔ o nye Linked-Device QR Code Hijacking (QRLJacking / . Ghost Pairing). To vovo na a SIM ƒe asitɔtrɔ alo a carrier star-code (*72) kple gbeɖiɖimɔ̃ ƒe PIN xɔxɔ (siwo tsɔa wò telefon xexlẽdzesi vevitɔ yia asitelefon yeye dzi eye wòɖea wò fon tso WhatsApp alo Signal dzi enumake), Linked-Device QR Hijack meka asi wò telefon gbãtɔ ƒe ŋkɔ ŋɔŋlɔ ŋu kura o. Ke boŋ amedzidzela la blea wò be nàlé ŋku ɖe Companion Device Pairing QR Code si le agbe si amedzidzela la ŋutɔ wɔ la ŋu WhatsApp Web, . Signal Desktop, . Discord, alo Telegram Desktop browser window (si wotsɔ ɣla ɖe phishing ƒe axa dzi abe "Ðo kpe wò ƒexɔxɔ/amegbetɔ ƒe QR code dzi", "Scan be nàge ɖe WhatsApp/Telegram ƒuƒoƒo sia si nye ame ŋutɔ tɔ me", "Scan for free Discord Nitro / Steam skin", alo "Dɔbiame / package delivery verification"). Zi alesi nèwɔ scan QR-dzesi ma le wò dɔwɔnua ƒe scanner me ko la, wò fon ɖea mɔ na amedzidzela la ƒe kɔmpiuta le nya ɣaɣla me be wòanye Linked Companion Device si dzi woka ɖo, si wɔnɛ be wò gbedasi ŋutinya si nèŋlɔ nyitsɔ laa kple gbedasi ɖesiaɖe si gbɔna kple esi dona le etsɔme la wɔa ɖeka kple amedzidzela la ƒe screen le ɣeyiɣi ŋutɔŋutɔ me esime wòtoa SMS 2FA, Registration Lock PINs, kple password ƒe biabiawo ŋu keŋkeŋ. Ne ètsɔ wò telefon fotoɖemɔ̃ si nèzãna edziedzi si ʋu gaxɔgbalẽvi ƒe ameflunyawo ƒe nyatakakadzraɖoƒe aɖe tsɔ scan QR-dzesi ŋutɔŋutɔ si le ʋutɔɖoƒe mita alo nuɖuɖudzraƒe ƒe kplɔ̃ dzi boŋ la, ke kpɔ míaƒe mɔfiame si ku ɖe QR code phishing (quishing) kple ʋutɔɖoƒe mita decals. Ne èdze ŋgɔ gaxɔgbalẽvi, amedzidzedze, alo ŋutilãmefɔku la, ƒo ka na wò nutoa me ƒe xexlẽdzesi kpata (911 le United States kple Canada, . 112 le Europa Dukɔwo ƒe Habɔbɔa katã me la, . 999 le United Kingdom) alo nàlé ŋku ɖe míaƒe dukɔwo dome nyatakakawo ƒe nyatakakadzraɖoƒe ŋu xexlẽdzesi siwo wozãna kpata.

Wɔ esia fifia¶

1. Ʋu wò gbedasiwo ɖoɖoɖa dɔwɔnu ƒe "Linked Devices / Active Sessions" ƒe screen FIFIA eye nàdzudzɔ kplɔ̃dzi alo browser ƒe ɣeyiɣi ɖesiaɖe si womede dzesii o:
2. Le WhatsApp dzi (iPhone & . Android): Zi Nɔnɔmewo (alo Dzesi Etɔ̃ ƒe Menu) > Mɔ̃ Siwo Do Ƒome Kplii dzi. Kpɔ xexlẽdzesi si le Dɔwɔnu ƒe Nɔnɔme (Google Chrome (Windows), . Mac OS, . Firefox (Linux), . WhatsApp Desktop). Zi mɔ̃ ɖeka ɖesiaɖe si mède dzesii le alafa me o dzi eye nàzi Do Do dzi.
3. Le Dzesi (iPhone & . Android): Zi wò Profile Icon (tame le miame) > Ðoɖowo > Mɔ̃ siwo do ƒome kple wo nɔewo dzi. Zi kɔmpiutadziɖoɖo ɖesiaɖe si womede dzesii o dzi (Signal Desktop) eye nàtia Unlink.
4. Le Telegram dzi (iPhone & . Android): Zi Ðoɖowo > Mɔ̃wo (Active Sessions). Zi Terminate All Other Sessions dzi enumake (eye nàto xexlẽdzesi siwo le ete la me: ne amedzidzela la do ƒome kple woƒe session mede gaƒoƒo 24 o eye Telegram gblɔ be "Mɔ̃ yeyewo mateŋu atso session xoxowo nu gaƒoƒo 24 o" la, wɔ ɖe míaƒe emergency session-kill bypass dzi le Phase 1 si le ete me).
5. Le Masɔmasɔ (iOS & . Android): Zi Wò (ete ɖusime) > Ðoɖowo (Gear Icon) > Devices -> zi Do le Mɔ̃ Siwo Katã Wonya (eye nàtrɔ wò Discord ƒe nyagbe ɣaɣla enumake, si ana Discord ƒe kpeɖodzidzesi siwo katã le dɔ wɔm la megale dɔ wɔm o).
6. Kpɔ wò gbedasi siwo nèɖo ɖa, dzeɖoɖo siwo wodzra ɖo ɖe nudzraɖoƒe, kple "Trash / Recently Deleted" ɖa be nàkpɔ nusi amedzidzela la ɖo ɖa alo ɖo ɖa esime woƒe Linked Device la do ƒome:
7. Amedzidzela siwo xɔa amewo le amewo si a WhatsApp Web, . Telegram, alo Discord session via QR code enumake léa ŋku ɖe Archived Chats (wodzraa dzeɖoɖoawo ɖo le afisi wole gbedasi ɖom ɖe xɔ̃wòwo alo dɔtɔ si le ga biam ale be dzeɖoɖo mawo nanɔ ɣaɣla ɖe wò dzeɖoɖo vevitɔwo ƒe xexlẽdzesi me) eye nàdi wò dzeɖoɖo ŋutinya me nyawo "password", . "seed", . "bank", . "passport", . "tax", . "SSN", alo "code".
8. Ðe ka ɖesiaɖe si wodzra ɖo ɖe WhatsApp/Telegram me si mènya o la ɖa fifia be nàkpɔ amesi amedzidzela la ɖo gbedasi tso wò akɔnta me.
9. Ne woxɔ wò Discord akɔnta to "Fake Verification / Free Nitro QR Code" ametafatafa dzi la, te fli ɖe wò Discord Auth Token me enumake to wò nyagbe ɣaɣla tɔtrɔ me EYE nàlé ŋku ɖe wò Billing / Gift Inventory ŋu:
10. QR-dzesi aɖe si le Discord Mobile App (Scan QR Code) menye zɔhɛ nukpɔla koe doa ka kplii o: etsɔa wò full master account authentication token dea asi na amedzidzela la, si wɔnɛ be woate ŋu aƒle Discord Nitro Gifts ƒe dɔlar alafa geɖe to wò gaxɔgbalẽvi si nèdzra ɖo alo PayPal kple DM malware kadodo siwo yi wò serverwo katã dzi la zazã me.
11. Kpɔe ɖa be amedzidzela la hã ble wò be nàŋlɔ "8-Character Pairing Code" (Link with Phone Number Instead) le WhatsApp dzi:
12. Tsɔ kpe ɖe QR-kɔdawo ŋu la, WhatsApp doa alɔ zɔhɛ web-browser ƒe kadodo fifia to ŋɔŋlɔdzesi 8-ŋɔŋlɔdzesiwo ƒe kɔpi ŋɔŋlɔ me (XXXX-XXXX) le wò telefon dzi ("Enter code to link new device"). Ameflulawo ɖoa aʋatso dedienɔnɔ ƒe pop-upwo ɖa be "Enter verification code." A7K9-M2P4 le WhatsApp me be nàɖo kpe wò akɔnta dzi", si wɔa ɖoɖoezizi ma ke tututu WhatsApp Web companion hijack abe QR code aɖe skan ene. Mɔ̃ siwo katã do ƒome kple wo nɔewo ƒe nuwuwu le Afɔɖeɖe 1 me wua QR-kadodo kple 8-ŋɔŋlɔdzesi-kɔda-kadodo ƒe ɣeyiɣiwo siaa enumake.
13. Xlɔ̃ nu wò kadodowo kple ƒuƒoƒo me dzeɖoɖowo be ameflunya aɖe ge ɖe wò akɔnta me ɣeyiɣi kpui aɖe:
14. Ðo nɔnɔme yeye alo gbedasi si me kɔ ɖe ame ɖesiaɖe si amedzidzela la ɖo ɖa ale be ame aɖeke nagazi ameflunyawo ƒe kadodo aɖe dzi, awɔ QR-dzesi evelia ƒe scan, alo aɖo ga ɖe ame to Zelle, Venmo, Revolut, alo crypto dzi o.
15. Trɔ nyagbe ɖesiaɖe, cryptocurrency nuku ƒe nyagbewo, alo foto vevi siwo nɔ anyi ɖe wò "Message Yourself / Saved Messages" dzeɖoɖoa me:
16. Ame miliɔn geɖe zãa WhatsApp "Message Yourself (You)", Telegram "Saved Messages", Signal "Note to Self", alo ame ŋutɔ ƒe Discord Server abe ame ŋutɔ ƒe nuŋlɔɖigbalẽ ene tsɔ dzraa nyagbewo, ʋukugbalẽvi/mɔzɔgbalẽwo ƒe fotowo, adzɔxexe ƒe PDFwo, kple crypto gbugbɔgaxɔ ƒe nyagbewo ɖo. Zi alesi amedzidzela aɖe tsɔ QR-dzesi dzi do ka kple eƒe zɔhɛ desktop browser la, dzeɖoɖo gbãtɔ si woƒe scripts ƒe kɔpi le wo ɖokui si nye ** .Saved Messages / . Note to Self / . You**.

--- .

Nyametsotsoti: ŋkuléle ɖe Linked-Device QR Hijack (QRLJacking) .¶

Dze nyametsotsoti sia yome be nàde dzesi alesi amedzidzela la do ka kple wò akɔnta eye nàtso woƒe mɔɖeɖea keŋkeŋ:

flowchart TD
    Symptom["Gbedasi Siwo Woɖo Ðe Ame Siwo Womeɖe O, Dzeɖoɖo Siwo Wodzra Ðo Ðe Nudzraɖoƒe, Xɔxɔgbalẽvi Siwo Woxlẽ, Alo Dɔwɔɖoɖo Wɔdɔɖeamedzi le Desktop dzi Le QR Code ƒe Scanning alo 8-Char Code ŋɔŋlɔ vɔ megbe"] --> AppType{"Gbedasɛɖoɖomɔnu Kae Woɖo Tae?"}

    AppType -->|"WhatsApp (QR Code ALOO Ŋɔŋlɔdzesi 8 'Kadodo kple Telefon Xexlẽdzesi' Code)"| WAPath["ATA 1A: Ʋu WhatsApp -> Ðoɖowo -> Mɔ̃ siwo do ƒome kplii -> Zi Mɔ̃ ɖesiaɖe si woŋlɔ ɖi dzi -> Zi 'Do go' dzi."]

    AppType -->|"Dzesi (Dzesi si wotsɔ ka ɖe kplɔ̃dzi QR) ."| SigPath["ATA 1B: Ʋu Dzesi -> Ðoɖowo -> Mɔ̃ siwo do ƒome kplii -> Zi Desktop si womede dzesii o dzi -> Zi 'Unlink' dzi."]

    AppType -->|"Telegram (QR Geɖe / Dɔwɔwɔ ƒe Ɣeyiɣi) ."| TGPath["ATA 1C: Ʋu Telegram -> Ðoɖowo -> Mɔ̃wo -> Zi 'Tɔ Ɣeyiɣi Bubu Bubuwo Katã' dzi + Na Afɔɖeɖe 2 ƒe Kpeɖodzinyagbegbe Nawɔ dɔ"]

    AppType -->|"Discord (‘Scan QR Code’ Nitro / Server ƒe Nyateƒetoto ƒe Ametafatafa)"| DiscPath["ATA 1D: Ʋu Discord -> Settings -> Devices -> 'Do le Mɔ̃ Siwo Katã Wonya Me' + Trɔ Discord Password Enumake (Resets Master Auth Token) + Ðe Fexexegbalẽvi Siwo Wodzra ɖo la ɖa"]

    WAPath --> AuditSaved["ATA 2: Lé ŋku ɖe ‘Message Yourself / Saved Messages / Note to Self’ kple ‘Archived Chats’ ŋu be nàkpɔ Nyatakaka Kawoe Amedzidzela la Ðe alo Ðo"]
    SigPath --> AuditSaved
    TGPath --> AuditSaved
    DiscPath --> AuditSaved

    AuditSaved --> SecretsExposed{"Ðe Wodzra Nyagbewo, Nuku ƒe Nyagbewo, API Safuiwo, alo ID Fotowo Ðo Ðe Wò Dzeɖoɖo Ŋutinya Mea?"}

    SecretsExposed -->|"Ẽ: Wodzrae ɖo ɖe ‘Gbedasi Siwo Wodzra ɖo’ alo Dzeɖoɖo Siwo Wodzra Nyitsɔ Laa Me"| RotateSecrets["KPƆKPƆ: Trɔ Nyagbewo/Safui Siwo Katã Woɖe Ðe Go, Tsɔ Crypto Yi Nuku ƒe Nyagbe Yeye Me, eye nàtsi Credit Ne ID/SSN Woɖe Ðe Go"]
    SecretsExposed -->|"Ðaseɖigbalẽ Vevi aɖeke Mele Dzeɖoɖowo Me O"| NotifyContacts["ATA 3: Ðe Dzeɖoɖo Ɣlawo Ðe Nudzraɖoƒe, Tutu Ametafatafa Gbedasɛwo Na Amesiame, eye Xlɔ̃ nu Kadodowo Be Woagazi Kadodowo Dzi O"]

    RotateSecrets --> NotifyContacts

--- .

Alesi QRLJacking ("Ghost Pairing") Dɔwɔwɔ le megbe¶

Nukatae QRLJacking (Quick Response Code Login Jacking) va zu amedzidzedze ƒe mɔ̃ si ŋkutsalaha siwo dziɖuɖua doa alɔe (APT28, . Star Blizzard, . UNC4221) kple ganyawo ŋuti ametafatafala siwo tɔa ŋku nyadzɔdzɔŋlɔlawo, dɔdzikpɔlawo, kple gbesiagbe ezãlawo? Elabena to dedienɔnɔdzikpɔkpɔ ɖesiaɖe si wozãna tsã le wò akɔnta me ŋu keŋkeŋ:

1. Nusita SMS 2FA, Afɔɖeɖe Eve ƒe Kpeɖodzi ƒe PIN, kple Ŋkɔ ŋɔŋlɔ ƒe Gaƒoɖokui MELE DƆM O QRLJacking¶

Ne amedzidzela aɖe di be yeafi wò WhatsApp, Signal, alo Telegram akɔnta le mɔ xoxoa nu (to wò telefon xexlẽdzesi ŋɔŋlɔ ɖe telefon yeye me) la, woƒoa gli eve: 1. Ele be woaxe xexlẽdzesi 6 ƒe SMS alo gbeɖiɖi kaƒoƒo si woɖo ɖe wò asitelefon dzi dɔwɔƒea. 2. Ne woxe mɔ na SMS ma hã la, woƒoa wò Afɔɖeɖe Eve ƒe Kpeɖodzi PIN / Registration Lock PIN.

** ** .QRLJacking zɔna ƒoa xlã gli eveawo tututu** to mɔ si dzi nège ɖo la tɔtrɔ me: 1. Afɔɖeɖe 1 (Attacker Generates a Live Pairing Socket): Amedzidzela ƒe automated Node.js / Playwright server ʋua ta manɔmee ŋutɔŋutɔ ƒe browser ɖe web.whatsapp.com, . discord.com/login, alo web.telegram.org. Dɔwɔƒe ma si dziɖuɖua da asi ɖo la wɔa agbe, si trɔa asi le nya ɣaɣlawo ƒe ƒoƒo ƒe QR code ŋu (si wɔa dɔ hena sɛkɛnd 20 va ɖo 60, wowɔa wo yeyee ɣesiaɣi to WebSocket dzi). 2. Afɔɖeɖe 2 (Amedzidzela la tsɔa QR Code si le agbe la yia Lure Page dzi): Amedzidzela la tsɔa WebSocket QR nɔnɔmetata ma si le agbe la dea nyatakakadzraɖoƒe si nye ameflunyawo ƒe axa si ŋu kakaɖedzi le la me: - "Cloudflare / WhatsApp Dedienɔnɔ Ŋuti Kpɔkpɔ: Scan QR code sia le WhatsApp (Settings > Linked Devices) be nàɖo kpe wò akɔnta dzi eye nàxe mɔ ɖe etɔtrɔ nu." - "Nutoa me Ƒuƒoƒo tɔxɛ Kpe: Scan kple WhatsApp be nàge ɖe VIP的投资/Crypto/Nutoa me Ƒuƒoƒoa me." - "Masɔmasɔ." Wick / . Captcha.bot Server Verification: Scan QR code sia kple Discord Mobile App be nàʋu channel siwo katã le server sia me." - "WhatsApp 8-Ŋɔŋlɔdzesiwo ƒe Kɔdamɔnu Lure (Link with Phone Number)": Le esi teƒe be amedzidzela la naɖe QR code afia kura la, ezi "Link with phone number" dzi le woƒe... web.whatsapp.com screen, ŋlɔa wò telefon xexlẽdzesi, xɔa ŋɔŋlɔdzesi 8 ƒe kɔpi (G4M9-K2L8), eye wòaɖe gbedasi aɖe afia wò be: "Be nàɖo kpe edzi be amegbetɔe nènye / RSVP na wɔna sia la, ŋlɔ kɔda." G4M9-K2L8 ne WhatsApp do ɖe wò fon dzi." 3. Afɔɖeɖe 3 (Wò Telefon Dea Asi Amedzidzela ƒe Dutoƒo Safui Le Cryptographically): Esi nèle QR code la skan (alo nèle ŋɔŋlɔdzesi 8 ƒe code la ŋlɔm) tso wò telefon gbãtɔ si ŋu woɖo kpee xoxo la me ta la, WhatsApp/Signal/Telegram/Discord wɔa nu ɖe ​​esia ŋu abe èɖoe koŋ tsɔ wò ŋutɔ wò kɔmpiutadziɖoɖoa ƒo ƒui ene. Wò telefon la wɔa mɔ̃ geɖe ƒe dzesideŋkɔ ƒe safui yeye, dea asi amedzidzela la ƒe dutoƒo safui te (Curve25519), eye wòƒoa wò gbedasi siwo nèŋlɔ nyitsɔ laa ƒe ŋutinya si wotsɔ nya ɣaɣlawo ŋlɔe nu ƒu enumake hedaae ɖe amedzidzela la ƒe web-browser dzi tẽ.

2. Platform Comparison: Nusi Amedzidzela Xɔna Ne È Scan Woƒe Login QR Code¶

--- .

Akpa 1: Nuƒolanɔƒe ɖesiaɖe ƒe Dɔwɔƒe Kpata ƒe Nuléle & Ʋɔnudrɔ̃ƒe¶

1. WhatsApp: Auditing & Purging Kadodo Mɔ̃wo (Eye Dzudzɔ 8-Ŋɔŋlɔdzesiwo Code Amedzidzedze)¶

1. Ʋu WhatsApp le wò smartphone vevitɔ dzi.
2. Zi Settings (le ete le ɖusime le iPhone) alo Three-Dot Menu (le etame le ɖusime le Android) -> zi Linked Devices dzi.
3. Hafi nàzi "Log Out" dzi le mɔ̃ aɖe si mènya o dzi la, ɖe screenshot si le... Linked Devices screen ne èhiã kpeɖodzi na dɔwɔƒe, amedzidzedze, alo kpovitɔwo ƒe numekuku:
4. Zi mɔ̃a ƒe nuŋɔŋlɔ si mènya o dzi (Google Chrome (Windows) alo Mac OS): WhatsApp aɖe ɣeyiɣi ƒe dzesi mamlɛtɔ si le dɔ wɔm eye ɣeaɖewoɣi la, du/teƒe si gogo si le ɣeyiɣi ma me la afia.
5. Zi Log Out dzi le mɔ̃ ɖesiaɖe si woŋlɔ ɖi dzi (ne ɖeka dze abe "Google Chrome" ene gɔ̃ hã la, do le wo katã me ale be nàka ɖe edzi 100% be amedzidzela la ƒe browser socket gblẽ; àte ŋu agbugbɔ aƒo ka na wò ŋutɔ wò kɔmpiuta ŋutɔŋutɔ emegbe).
6. Kpɔ wò WhatsApp "Archived" ƒe agbalẽdzraɖoƒea ɖa enumake:
7. Yi wò Chats ƒe xexlẽdzesi ƒe tame tututu eye nàzi Archived dzi.
8. Ameflula siwo xɔa WhatsApp Nyatakakadzraɖoƒe aɖe ɣesiaɣi kloe la, Archive kple Mute xɔlɔ̃/ƒometɔ siwo wole ametafatafa wɔm vevie la ƒe dzeɖoɖowo ale be ne xɔ̃wòa ɖo eŋu be "Kakaɖedzitɔe la, nukae nye wò Zelle/gadzraɖoƒe ƒe akɔnta?" la, nyatakaka aɖeke mado ɖe wò telefon ƒe screen dzi o.
9. Ʋu dzeɖoɖo ɖesiaɖe si wodzra ɖo ɖe nudzraɖoƒe, tutu ameflunya ɖesiaɖe si amedzidzela la ɖo ɖa (Zi edzi eye nàlée ɖe asi > Tutu > Tutu na Amesiame), eye nàƒo ka alo nàde dzesi kadodo mawo enumake.
10. TSI "Kadodo kple Telefon Xexlẽdzesi" Push Prompts to aɖabaŋeŋe ƒu kɔda siwo womebia o dzi:
11. Ne èxɔ push notification si mèbia tso asiwò o tso WhatsApp gbɔ kpɔ be "Èle agbagba dzem be yeatsɔ mɔ̃ aɖe aɖo kadodo mea? Enter code..." esime menye ɖeko nèbia code le wò ŋutɔ wò kɔmpiuta dzi o la, zi Dismiss / Cancel dzi enumake; ame aɖe ŋlɔ wò telefon xexlẽdzesi ɖe eme web.whatsapp.com kple mɔkpɔkpɔ be àŋlɔ woƒe kɔpi.

2. Telegram: Nukae Nàwɔ Ne Telegram Xe Mɔ Na Wò Màdzudzɔ Hacker ƒe Dɔwɔna (The 24-Hour New Device Rule) .¶

Dedienɔnɔ ƒe se xɔŋkɔ aɖe le Telegram si: Dɔwɔɣi yeye si ge ɖe eme mateŋu atso ɣeyiɣi * xoxo siwo le dɔ wɔm nu o vaseɖe esime woge ɖe ɣeyiɣi yeyea me gaƒoƒo 24*. - Nɔnɔme A (Wò fon la ge ɖe Telegram me XƆXƆ hafi amedzidzela la lé ŋku ɖe QR code la ŋu): Esi wò fon nye xoxo ƒe ɣeyiɣi eye amedzidzela ƒe QR-linked browser nye yeye ɣeyiɣi ta la, wò fon ate ŋu atso amedzidzela ƒe ɣeyiɣia nu enumake kple zero wait. Yi Settings > Devices, zi amedzidzela ƒe ɣeyiɣia dzi, eye nàzi Terminate Session dzi (alo zi Terminate All Other Sessions dzi). - Nɔnɔme B (Amedzidzela la lala gaƒoƒo 24 le woƒe QR-dɔwɔwɔ ƒe kadodo vɔ megbe, edzudzɔ wò telefon ƒe ɣeyiɣia, eye ɖeko nègage ɖe wò fon dzi egbea ko): Fifia wobu wò telefon be enye "mɔ̃ yeye (si mexɔ gaƒoƒo 24 haɖe o)", eyata ne èzi amedzidzela la ƒe ɣeyiɣi dzi be yeadzudzɔe la, Telegram ado vodada aɖe si gblɔ be: "Le dedienɔnɔ ta la, màte ŋu atso ɣeyiɣi xoxowo nu tso mɔ̃ yeye si wodo ka kplii dzi o. Taflatse lala gaƒoƒo 24." Alesi woawɔ aɖu gaƒoƒo 24 ƒe mɔxexeɖedɔ ma dzi enumake enye si: 1. Kpɔe ɖa be mɔ̃ xoxo bubu aɖe gakpɔtɔ le asiwò hã (abe iPad, telefon xoxo, alo wò aƒeme PC si le asiwò ene Telegram Desktop) si ge ɖe wò Telegram akɔnta me wu gaƒoƒo 24; ʋu Settings > Devices le ma mɔ̃ xoxoa dzi eye nàdzudzɔ amedzidzela la enumake. 2. Enumake yi Settings > Privacy and Security > Two-Step Verification (Cloud Password) eye nàna Cloud Password nawɔ dɔ alo nàtrɔ wò Cloud Password + Recovery Email si li xoxo ale be amedzidzela la mate ŋu axe mɔ na wò o. 3. Ðo Dɔwɔɖoɖowo > Mɔ̃wo > Trɔ Ɣeyiɣi Xoxoawo Nu le Ðokuisi ɖe dometsotso kpuitɔ kekeake dzi (1 week), nɔ wò me Settings > Devices screen right ne gaƒoƒo 24 ƒe ɣeyiɣidzidzenu la wu enu (alo kpɔ amedzidzela si le agbagba dzem be yeadzudzɔ wò ɣeyiɣi yeyea), eye nàzi Terminate All Other Sessions dzi enumake gaƒoƒo 24 ƒe fesrea kɔ.

3. Masɔmasɔ: Gbɔdzɔ tso "Scan QR Code / Aʋatso Ðaseɖiɖi Bot / Free Nitro" Hijack¶

Nusita Discord QR ƒe amedzidzedze nye afɔku tɔxɛ: To vovo na WhatsApp Web (afisi QR scan naa zɔhɛ ƒe ɣeyiɣi si seɖoƒe li na si mate ŋu atrɔ wò akɔnta ƒe nyagbegbɔgblɔ alo telefon xexlẽdzesi o), Discord ƒe gege ɖe QR code (Settings > Scan QR Code) tsɔa full master user authentication token dea asi na amedzidzela ƒe web-browser. Le sɛkɛnd 5 me tso esime nèwɔ scan la, amedzidzela la ƒe bot script si wowɔ le eɖokui si: - Checks ** .users/@me/billing/payment-sources** eye wòƒlea 10x $9.99 alo $99.99 Discord Nitro Gift Subscriptions to wò Visa, Mastercard, alo PayPal si nèdzra ɖo la zazã me (eɖoa Nitro nunana ƒe kadodo siwo woate ŋu axɔ la ɖe hacker la). - Eɖoa phishing DM ("Bro check out this game I'm testing" alo "Free $50 Steam gift card") na ame ɖesiaɖe si le wò Xɔlɔ̃wo ƒe Ŋkɔwo me kple Discord server ɖesiaɖe si me nèle. - Drops a madzudzɔmadzudzɔe ** .Discord Backup Code alo trɔa asi le wò app.asar desktop client** nenye be wowɔ malware hã.

Discord Gbugbɔgadzɔ ƒe Afɔɖeɖewo Tutu: 1. Ʋu Discord -> Zãla ƒe Ðoɖowo (Gear Icon) > Nye Akɔntabubu > Trɔ Nyagbe. Wò Discord ƒe nyagbe ɣaɣla tɔtrɔ ɖea ɖaseɖiɖi ƒe dzesi ɖesiaɖe si li fifia le mɔ̃wo kple ŋɔŋlɔdzesiwo katã dzi ɖa enumake, si wɔnɛ be amedzidzela la dzona le sɛkɛnd si mede 1 o me. 2. Yi Zãla ƒe Ðoɖowo > Mɔ̃wo eye nàzi Do le Mɔ̃ Siwo Katã Wonya me hena dzidzenu nyui. 3. Yi Zãla ƒe Ðoɖowo > Nye Akɔntabubu > Nu Geɖewo ƒe Dzesidede: - Zi View Backup Codes > Generate New Codes dzi (elabena amedzidzela ƒe script la tsɔ wò Discord backup code xoxo siwo me xexlẽdzesi 8 le ƒe kɔpi le eɖokui si ne èwɔ QR code la ƒe kɔpi). - Ðe Security Keys / Passkeys alo SMS Backup Auth xexlẽdzesi ɖesiaɖe si amedzidzela la tsɔ kpe ɖe eŋu si womede dzesii o ɖa. 4. Yi Zãla ƒe Ðoɖowo > Fexexe kple Nudɔdɔwo / Nunanawo Ŋuti Nuŋlɔɖi: - Tutu gaxɔgbalẽvi siwo katã nèdzra ɖo kple PayPal kadodowo ɖa. - Ne amedzidzela la ƒle Discord Nitro Gifts si ŋu womeɖe mɔ ɖo o le wò kaɖi dzi la, MÈGADE gaxɔgbalẽvi ƒe gaxɔgbalẽvi ɖe wò gadzraɖoƒe gbã o (Discord ƒe fexexe ƒe ɖoɖo si wowɔna le wo ɖokui si xea mɔ na Discord ƒe akɔnta ɖesiaɖe si axɔ ga le gadzraɖoƒe ƒe gaxɔgbalẽvi la tegbee). Ke boŋ, tsɔ Discord Trust & Safety / Unauhorized Transaction Refund Ticket ɖo ɖa enumake le dis.gd/billing gbɔgblɔ be wogblẽ wò akɔnta me to QR phishing dzi; Discord Support ate ŋu aɖe Nitro nunana siwo womexɔ o la ɖa eye wòagbugbɔ wò kaɖia ana evɔ maxe mɔ ɖe wò akɔnta nu o.

--- .

Akpa 2: Nyatakakawo ɖeɖeɖa tso "Gbedasi Siwo Wodzra ɖo" / "Gbedasi Wò ŋutɔ" me gbɔ kpɔkpɔ.¶

Ne ènya nya amedzidzela la le Linked Devices me ko la, zã miniti 10 tsɔ lé ŋku ɖe nyatakaka vevi siwo woɖe ɖe go le wò dzeɖoɖo ŋutinya me ŋu:

1. Ʋu wò ɖokuiwò ƒe dzeɖoɖo (Message Yourself le WhatsApp dzi, . Saved Messages le Telegram dzi, . Note to Self le Dzesi dzi):
2. Ðe nèɖo nyagbegbɔgblɔ, gadzraɖoƒe ƒe mɔfiame xexlẽdzesi, wò gaxɔgbalẽvi ƒe foto, wò mɔzɔgbalẽ/ʋukugbalẽvi ƒe foto, adzɔxegbalẽvi, SSH safui, alo nya 12/24 ƒe crypto nuku ƒe nyagbe ɖe ɖokuiwò kpɔa?
3. Wowɔe le wo ɖokui si QRLJacking ɖoɖowɔɖiwo ( .EvilQr, . QRLJacker, kple Telegram/WhatsApp-dumper siwo wowɔ ɖe ɖoɖo nu) wowɔ ɖoɖo be woate ŋu awɔ wò ŋutɔ wò dzeɖoɖomɔnu kple nyatakakawo ƒe alafa memama 100 ƒe kɔpi le QR scan la ƒe sɛkɛnd 15 gbãtɔwo me.
4. Ne wotsɔ crypto nuku ƒe nyagbe alo ame ŋutɔ ƒe safui aɖe de wò dzeɖoɖo ŋutinya me alo ɖe fotoe kpɔ la, bu eŋu be wogblẽe fifia eye nàdze mía tɔ yome cryptocurrency gakotoku ƒe tsidzɔƒe kple nuku-nyagbɔgblɔ ƒe nugblẽfexexe mɔfiala.
5. Ne wò Hadomegbenɔnɔ ƒe Dedienɔnɔ ƒe Kpekpeɖeŋugbalẽvi, Ʋukugbalẽvi, alo Mɔzɔgbalẽ ƒe foto aɖe nɔ wò dzeɖoɖo ŋutinya me la, ke tsɔ gaxɔgbalẽvi ƒe mɔxexeɖedɔa nu ƒu femaxee le Equifax, Experian, kple TransUnion to míaƒe... amenyenye fifi ƒe ŋuɖoɖo mɔfiala.
6. Di Wò Chat Bar hena Nya Vevi Siwo Me Afɔku Gã Le:
7. Le WhatsApp, Signal, Telegram, alo Discord ƒe didiƒe si le etame la, di ɖekaɖeka:
   • password / . passcode / . PIN
   • login / . account
   • bank / . routing / . IBAN
   • seed / . phrase / . wallet / . 0x
8. Trɔ ɖaseɖigbalẽ ɖesiaɖe si adze le nyatakaka mawo me.

--- .

Akpa 3: Ametakpɔnu Mavɔwo Tsi Tre Ðe QR Code & Companion Device Hijacking Ŋu¶

Ðo ametakpɔnu atɔ̃ siawo ŋudɔ egbea ale be womate ŋu aflu wò alo ƒomea me tɔ aɖeke gbeɖe be nàtsɔ zɔhɛ mɔ̃ vɔ̃ɖi aɖe aƒo ƒui o:

• 1. Se Vovototo Si Le Wò Telefon ƒe Fotoɖemɔ̃ si Wozãna Edziedzi Kple "Link a Device" Scanner si Le Dɔwɔnua Me Do Dome gɔme:
• QR Code siwo sɔ (nuɖuɖudzraƒe ƒe nuɖuɖuwo, wɔnawo ƒe tikitiwo, Wi-Fi codewo, dutoƒo kadodowo, alo WhatsApp/Telegram si le se nu wa.me / . t.me ƒuƒoƒo ƒe amekpekpe ƒe kadodowo) la, wotsɔa wò iPhone alo Android Camera dɔwɔnu si sɔ, si kpɔa URL la do ŋgɔ (https://...).
• Le-App "Ka Ðe Mɔ̃ aɖe Ŋu" Scanners (WhatsApp > Settings > Linked Devices > Link a Device, . Signal > Linked Devices, . Discord > Scan QR Code) nye kompiuta evelia ŋɔŋlɔ ɖe wò akɔnta me. Mègaʋui gbeɖe o Settings > Linked Devices negbe ɖe nèbɔbɔ nɔ wò ŋutɔ wò kɔmpiuta si nèʋu teti koe nye ema la ŋgɔ ŋutɔŋutɔ hafi web.whatsapp.com le ɖokuiwò dzi.
• 2. Na Biometric App Lock & Passkeys nawɔ dɔ le WhatsApp, Dzesi, kple Telegram dzi:
• Togbɔ be WhatsApp hiã Face ID / Touch ID / Fingerprint xoxo hafi ʋu... Link a Device fotoɖemɔ̃, ʋu App Lock (Settings > Privacy > App Lock / Screen Lock) xea mɔ na amesi do wò telefon si womeʋu o hena sɛkɛnd 15 le kplɔ̃ɖoƒe, ahadzraƒe, alo ɔfis kplɔ̃ dzi be wòagaʋu WhatsApp eye wòawɔ QR-dzesi aɖe le eya ŋutɔ ƒe telefon dzi be yeakpɔ wò gbedasiwo le ɖoɖoezizi me le ŋkeke 14 siwo gbɔna me o.
• (De dzesii: Aƒeme toɖoɖo to WhatsApp Web / . Signal Desktop / . Telegram Web, si me zɔhɛ alo dɔwɔhati aɖe si ʋãa ŋu léa wò telefon si womeʋu o la sɛkɛnd 10 esime nèle nugododeƒe eye wòléa ŋku ɖe QR-dzesi aɖe ŋu le woƒe kɔmpiuta dzi la nye ŋkutsala siwo bɔ wu le amewo dome la dometɔ ɖeka.)
• 3. Dɔdzikpɔkpɔ Settings > Linked Devices Zi ɖeka le Ɣletia me le Gbedasɛɖoɖo Dɔwɔɖoɖowo Katã dzi:
• Na wòanye numame na wò ɣleti sia ɣleti be nàʋu Linked Devices / . Active Sessions le WhatsApp, Signal, Telegram, Discord, kple Google/Apple ID me be woatsɔ akpɔe ɖa be zero ye wotsɔ browser alo desktop siwo womenya o kpe ɖe eŋu.
• 4. TƆ Afɔɖeɖe Eve ƒe Kpeɖodzinya (Registration Lock / . Cloud Password):
• Togbɔ be Afɔɖeɖe Eve ƒe Kpeɖodzi mexea mɔ o hã QRLJacking (elabena QRLJacking dzɔna tso wò telefon si nège ɖe eme xoxo la me), ne èʋu Afɔɖeɖe Eve ƒe Dzesidede le WhatsApp (Settings > Account > Two-step verification), Dzesi (Settings > Account > Registration Lock), kple Telegram (Settings > Privacy and Security > Two-Step Verification) xea mɔ na amedzidzela be wòagadzi zɔhɛ ƒe ɣeyiɣi aɖe ɖe edzi wòazu telefonxexlẽdzesi gbãtɔ xɔxɔ bliboe o.
• 5. Mègadzra Nyagbe Siwo Me Woŋlɔ Nu Gbagbewo, Nukunyawo, alo ID Fotowo Ðo Ðe "Gbedasi Siwo Wodzra Ðo" alo "De dzesii na Ðokuiwò"** Me Gbeɖe O:
• Tsɔ nyagbe ɣaɣlawo, gaxɔgbalẽvi ƒe fotowo, kple nuku ƒe nyagbewo katã ɖa le wò gbedasiwo ɖoɖoɖa dɔwɔnuwo me egbea (Delete for Everyone) eye nàtsɔ wo ayi nyagbe ɣaɣlawo dzikpɔla si woɖo ɖi, si me sidzedze zero mele o (Bitwarden, 1Password, KeePassXC, alo Apple Passwords) me.

--- .

Nutome ƒe xexlẽdzesi siwo ku ɖe nudzɔdzɔ kpatawo ŋu kple dɔwɔƒea ƒe ɖoɖowo¶

Mɔɖeɖe ɖe ame ŋutɔ ƒe gbedasiwo ƒe akɔntabubuwo ŋu si ŋu womeɖe mɔ ɖo o to QRLJacking alo zɔhɛ kple mɔ̃wo ƒe kadodo le ɖoɖoezizi me nye nuvlowɔwɔ le kaƒoƒo, amedzidzedze, kple kɔmpiuta zazã le mɔ gbegblẽ nu ƒe sewo nu le xexeame katã:

• United States kple Canada:
• Dɔwɔƒe Kpata: Ƒo ka 911 ne akɔntabubua ƒe amedzidzedzea ku ɖe aƒeme amedzidzedze, gbɔdɔdɔ ƒe agbegbegblẽnɔnɔ, alo ŋɔdzidoname na ŋutilã me dedienɔnɔ enumake ŋu.
• FBI ƒe Internet dzi Nuvlowɔwɔ Ŋuti Nyatoƒoetoto Dɔwɔƒe (IC3) & CISA: Ka nya ta tso QR-code akɔntabubuwo xɔxɔ kple ganyawo ƒe ameɖokuiwɔwɔ ƒe ametafatafa ŋu le ** .ic3.gov** (CISA kple FBI ɖo aɖaŋu tɔxɛ aɖewo ɖe Russia/APT ŋu Signal kple WhatsApp linked-device QR phishing si woɖo taɖodzinu na dziɖuɖu, asrafowo, kple nyadzɔdzɔŋlɔlawo ƒe akɔntabubuwo).
• Canada ƒe Ametafatafa Ŋuti Dɔwɔƒe (CAFC): Nyatakaka le antifraudcentre-centreantifraude.ca alo ** .1-888-495-8501**.
• Fiaɖuƒe Ðeka:
• Dɔwɔƒe Kpata: Ƒo ka 999 (alo 101 na kpovitɔ siwo menye nudzɔdzɔ kpatawo o).
• Action Fraud & NCSC: Ka nya ta tso gbedasiwo ƒe akɔntabubu si ŋu womeɖe mɔ ɖo o ƒe gege ɖe eme ŋu le Kɔmpiuta Zazã Masɔmasɔ Se 1990 te le actionfraud.police.uk (0300 123 2040) eye nàgblɔ QR phishing URL vɔ̃ɖiwo na NCSC le ** .ncsc.gov.uk**.
• Europa Dukɔwo ƒe Ðekawɔha:
• Dɔwɔƒe Kpata: Ƒo ka 112 le EU-dukɔwo katã me.
• Dukɔa ƒe Internet Dzi Nuvlowɔwɔ Dɔwɔƒewo & ENISA: Nyatakaka to Europol ƒe Internet dzi Nuvlowɔwɔ ƒe nyatakakadzraɖoƒe (europol.europa.eu/report-a-crime/report-cybercrime-online).
• Australia kple New Zealand:
• Dɔwɔƒe Kpata: Ƒo ka 000 le Australia alo ** .111** le New Zealand.
• Nyatakaka le Internet dzi (ACSC) & Scamwatch (Australia): Ka nya ta tso WhatsApp/Telegram "Hi Mum / Impersonation" kple QR akɔnta xɔxlɔ̃ ŋu le cyber.gov.au (1300 CYBER1) alo ** .scamwatch.gov.au**.
• CERT NZ (New Zealand): Nyatakaka le cert.govt.nz.
• India kple Asia-Pacific:
• India Dukɔa ƒe Internet Dzi Nuvlowɔwɔ Ŋuti Nyatakaka Dɔwɔƒe: Ƒo ka 1930 alo nàgblɔ WhatsApp/Telegram ƒe amedzidzedze le cybercrime.gov.in.
• Singapore Kpovitɔwo ƒe Dɔwɔƒe (SPF Dɔwɔƒe si Tsi Tre Ðe Ametafatafa Ŋu) & CSA: Yɔ 1799 (ScamShield) alo ** .1800-722-6688** (Singapore to aʋatso "Singpass / Tiatia / Numekuku" WhatsApp Web QR-kadodo ƒe ametafatafa ƒe ƒutsotsoe gãwo me).

--- .

Nya siwo wobiaa amewo enuenu¶

Aleke ame aɖe awɔ axlẽ nye WhatsApp alo Signal gbedasiwo le woƒe kɔmpiuta dzi esime WhatsApp kple Signal nye "End-to-End Encrypted"?¶

Nya ɣaɣlawo tsɔtsɔ ɣla tso nuwuwu vaseɖe nuwuwu (`E2EE`) fia be wotsɔa nyatakaka ɣaɣlawo ɣlana ɖe wò akɔnta ƒe mɔ̃ siwo ŋu woɖe mɔ ɖo kple wò amesi xɔe ƒe mɔ̃ siwo ŋu woɖe mɔ ɖo dome ale be telefonkadododɔwɔƒewo alo gbedasiwo ƒe dɔwɔƒea ŋutɔ mate ŋu axlẽ wo le mɔzɔzɔ me o. Gake ne èwɔ scan na amedzidzela aɖe tɔ `WhatsApp Web` alo `Signal Desktop` QR code si zãa wò fon tɔ Mɔ̃ Siwo Do Ƒome Kple Wo Nɔewo scanner (alo ne ame aɖe si si mɔ ŋutɔŋutɔ le be wòakpɔ wò fon si womeʋu o la le eya ŋutɔ ƒe kɔmpiutadziɖoɖo ƒe screen dzi kpɔm), wò fon la tsɔa nya ɣaɣlawo dea dzesi amedzidzela la ƒe kɔmpiuta be WÒ zɔhɛ nuwuƒe siwo wotsɔ nya ɣaɣlawo ŋlɔ tso nuwuwu vaseɖe nuwuwu siwo dziɖuɖua da asi ɖo la dometɔ ɖeka. Tso ɣemaɣi vaseɖe esime nàzi "Do go" dzi le Mɔ̃ Siwo Do Ƒome Kplii me la, wò fon tsɔa gbedasi ɖesiaɖe ƒe kɔpi ɣlana ɖe amedzidzela la ƒe web-browser safuia koŋ ta.

Vovototo kae le QR code scan kple nye iPhone/Android Camera app vs. scanning le WhatsApp/Signal/Discord ƒe "Linked Devices" scanner me dome?¶

Ne èzã wò **iPhone alo Android Camera dɔwɔnu si wozãna ɖaa** tsɔ skan QR-kɔda aɖe la, zi geɖe la, nyatakakadzraɖoƒe ƒe kadodo aɖe nɔa QR-kɔda la me (`https://...`), si ate ŋu ana woaɖo ameflunyawo gbɔ kpɔƒe ([quishing](qr-code-phishing-quishing-parking-meter-decals-and-malicious-redirects.md)) si bia tso asiwò be nàŋlɔ nyagbe alo gaxɔgbalẽvi ƒe xexlẽdzesi, **gake ne ètsɔ wò fotoɖemɔ̃ ƒe dɔwɔnu si sɔ la lé ŋku ɖe nyatakakadzraɖoƒe ƒe URL ŋu ko mate ŋu atsɔ WhatsApp Nyatakakadzraɖoƒe alo Signal Desktop ƒe ɣeyiɣi aɖe aɖo kadodo me le eɖokui si o**. To vovo na ema la, ne ametafatafala aɖe na nèka ɖe edzi be yeaʋu **WhatsApp / Signal / Telegram / Discord -> Settings -> Linked Devices -> Link a Device** eye nàfia asi *ma* in-app scanner ɖe woƒe QR code dzi (alo aŋlɔ woƒe 8-character pairing code) la, ke èle cryptographic device-pairing handshake wɔm tẽ si ana amedzidzela la nate ŋu age ɖe wò akɔnta me enumake evɔ mèkpɔe kpɔ o nyagbe aɖe ŋɔŋlɔ.

Ðe amedzidzela si do ƒome kple a WhatsApp Web alo Signal Desktop session gakpɔtɔ xlẽa nye gbedasiwo le esi mezi "Log Out / Unlink" dzi le Linked Devices me vɔ megbea?¶

Ao, menye na gbedasi yeye aɖeke si woɖo ɖa le esi nèɖe kadodoa ɖa vɔ megbe o. Ɣeyiɣi si me nèƒo asi ɖe edzi Do go / Ðe kadodoa ɖa le ete Ðoɖowo > Mɔ̃ Siwo Do Ƒome Kplii, wò asitelefon vevitɔ te fli ɖe zɔhɛ mɔ̃ ma ƒe nya ɣaɣlawo ƒe dzesideŋkɔ ƒe safui si le dɔwɔƒea eye wòtrɔa mɔ̃ geɖe ƒe amedɔdɔ ƒe safuiwo (`Sender Key` ratchets) kple wò kadodowo katã kple ƒuƒoƒo me dzeɖoɖowo. Amedzidzela ƒe web-browser la tsoa kadodoa me enumake eye mate ŋu aɖe gbedasi bubu si va alo esi dona la me gbeɖe o, togbɔ be woléa gbedasi xoxo ɖesiaɖe si woƒe web-browser ɖe xoxo le fesre si me wodo ka kplii la me ɖe asi hã.

Aleke zɔhɛ alo srɔ̃tɔ ŋuʋãla aɖe xlẽ nye WhatsApp alo Telegram gbedasiwo katã evɔ mede ŋkutsala dɔwɔnu aɖeke nye telefon dzi o?¶

Mɔnu #1 si aƒeme toɖolawo zãna tsɔ xlẽa zɔhɛ ƒe WhatsApp, Signal, Telegram, alo iMessage dzeɖoɖowo bia zero spyware le wò fon dzi: ne èle alɔ̃ dɔm alo le tsileƒe la, amea ʋua wò telefon la (enya wò screen passcode si tso xexlẽdzesi 4 va ɖo 6), ʋua `WhatsApp > Settings > Linked Devices > Link a Device`, eye wowɔa QR-dzesi si le woawo ŋutɔ ƒe kɔmpiuta alo tablɛt dzi (`web.whatsapp.com`). Esi wò fon wɔa dɔ nyuie keŋkeŋ le esia megbe ta la, zi geɖe la, amesiwo ŋu wòku ɖo la yia edzi ɣleti geɖe evɔ womenya be zɔhɛ web-browser aɖe le gbedasi ɖesiaɖe xɔm le ɖoɖoezizi me o. Kpɔe ɖa ɣesiaɣi `Settings > Linked Devices` le gbedasiwo ɖoɖoɖa ƒe dɔwɔnuwo katã me la, trɔ wò fon ƒe screen unlock passscode, eye nàʋu biometric **App Lock** le WhatsApp, Signal, kple Telegram me.

Nukatae WhatsApp do gbeƒãɖeɖe aɖe si bia tso asinye be "Enter code to link new device" esime nyemeʋu WhatsApp Web kpɔ o?¶

WhatsApp tsɔ dɔwɔnu aɖe kpee si woyɔna be "Kadodo kple telefon xexlẽdzesi boŋ". edzi `web.whatsapp.com` na ezãla siwo ƒe telefon fotoɖemɔ̃wo gblẽ. Elabena amesiame si nya wò asitelefon xexlẽdzesi si nye xexlẽdzesi 10 ate ŋu aŋlɔ wò telefon xexlẽdzesi ɖe eme `web.whatsapp.com` eye nàzi "Next" dzi, amedzidzela ateŋu aʋu pop-up notification ma le wò fon dzi ɣesiaɣi esime wòle ka ƒom alo le text message ŋlɔm na wò abe WhatsApp Support alo delivery driver aɖe le biabiam tso asiwò be "wòaŋlɔ 8-character code la." `XXXX-XXXX` be nàɖo kpe wò akɔnta dzi". Mègaŋlɔ ŋɔŋlɔdzesi 8 ƒe kɔpi ɖe WhatsApp me gbeɖe o negbe ɖe wò ŋutɔ nèbiae le wò ŋutɔ wò kɔmpiuta ƒe screen dzi sɛkɛnd 5 enye sia hafi.

--- .

Mɔfiame siwo do ƒome kplii¶

• QR code phishing (quishing), ʋutɔɖoƒe ƒe mita ƒe dzesiwo, kple mɔfiame gbegblẽwo
• Carrier star-code (*72) yɔyɔ yi ŋgɔe hijacks kple voicemail PIN xɔxlɔ̃
• SIM swapping: alesi woawɔ ade dzesi, atɔ te, eye woahaya tso SIM ƒe amedzidzedze me
• Stalkerware, spyware, kple keylogger detection le telefonwo dzi
• OAuth ƒe lɔlɔ̃nu faa ameflunyawo, ame etɔ̃lia ƒe dɔwɔɖoɖo ƒe kpekpeɖeŋunana vɔ̃ɖiwo, kple API ƒe dzesiwo ɖeɖeɖa
• Xexlẽdzesi siwo woxɔna kpata le dukɔwo nu

--- .

Dzɔtsoƒewo kple dziɖuɖumegãwo ƒe mɔfiame¶

• Internet Dzi Dedienɔnɔ Kple Dɔwɔƒewo ƒe Dedienɔnɔ Dɔwɔƒe (CISA), Dukɔa ƒe Dedienɔnɔ Dɔwɔƒe (NSA);QRLJacking / . Ghost Pairing)*.
• Ʋu Xexeame Katã ƒe Dɔdamɔnu Dedienɔnɔ Dɔwɔɖoɖo (OWASP): QRLJacking (Quick Response Code Login Jacking) Amedzidzedze ƒe Ðoɖowɔɖi kple Session Hijacking ƒe Tsitretsitsi.
• Dukɔa ƒe Internet Dzi Dedienɔnɔ Dɔwɔƒe (NCSC) (United Kingdom) & Singapore ƒe Internet Dzi Dedienɔnɔ Dɔwɔƒe (CSA): Dukɔa ƒe Nuxlɔ̃amewo le WhatsApp Web QR Code Phishing Dɔwɔnawo, 8-Ŋɔŋlɔdzesiwo Ƒoƒu Code Hadomegbenɔnɔ, kple Linked-Device Auditing.
• WhatsApp Dedienɔnɔ Ŋuti Nyatakaka Gbãtɔ (Meta) & Dzesi ƒe Ðoɖowɔɖi ƒe Nɔnɔmewo: *Multi-Device End-to-End Encryption Architecture, Kpeɖeŋutɔ Device Key Revocation, kple Sender Key Ratcheting *.