USPS package smishing kple aʋatso redelivery ametafatafa¶

To asitelefon dzi nyatakaka kpata aɖe xɔxɔ si gblɔ be womate ŋu atsɔ United States Posudɔwɔƒe ƒe agbalẽvi aɖe vɛ o le ablɔdzi adrɛs si mede blibo o ta nye Internet dzi ŋɔdzidoname siwo bɔ wu le asitelefonwo dzi la dometɔ ɖeka fifia. Gbedasi kpuiwo ƒe dɔwɔƒe (SMS) ƒe amedzidzedze siawo siwo woyɔna be smishing, ɖea posu ƒe dzeside ŋutɔŋutɔ, flidzidzedze ƒe dzeside siwo wowɔ abe ɖe wole mɔ kpɔm ene, kple gbegbɔgblɔ si dziɖuɖua zãna fiana. Gbedasi la fiaa mɔ wò yia nyatakakadzraɖoƒe aɖe si ƒe dzedzeme le abe alakpatɔe ene afisi wobia tso asiwò be nàɖo kpe wò aƒe ƒe adrɛs dzi le eye nàxe fe sue aɖe si woxena ɖe egbugbɔɖoɖo ta, zi geɖe la, edea 0.30 USD va ɖo 3.00 USD, to wò debit alo credit card xexlẽdzesi, ŋkeke si dzi wòawu enu, dedienɔnɔ ƒe dzesi, kple fexexe ŋuti nyatakakawo ŋɔŋlɔ me.

Fe sue si woxena ɖe nudɔdɔwo gbugbɔgaɖo ta nye ameflumɔnu aɖe si ŋu wotrɔ asi le be wòalé wò gaxɔgbalẽvi ŋuti nyatakaka bliboa kple wò ame ŋutɔ ƒe dzesidegbalẽviwo ɖe asi ko. Ne wonya tsɔe ɖo ɖa ko la, nuvlowɔhawo dzea asitsatsa siwo ŋu womeɖe mɔ ɖo o gɔme enumake le Internet dzi, woŋlɔa wò kaɖia ɖe nudɔdɔ siwo wowɔna le ametafatafa me enuenu me, alo tea akɔnta xɔxɔ kpɔ to ɣeyiɣi ŋutɔŋutɔ me mɔ̃ siwo xea mɔ na nyagbe ɣaɣlawo zazã zi ɖeka. Le go aɖewo me le Android-mɔ̃wo dzi la, ne èzi kadodo vɔ̃ɖi la dzi la, eʋãa gadzraɖoƒewo ƒe trojan dɔwɔɖoɖo siwo léa ŋku ɖe safuiwo ƒoƒo ŋu eye woxea mɔ na nu geɖe ƒe kpeɖodzinana ƒe kɔpiwo ƒe kɔpi le ɖoɖoezizi me. Ne èwɔ afɔɖeɖewo enumake tsɔ xe mɔ ɖe wò fexexe ƒe agbalẽvi, asitelefon, kple gaxɔgbalẽviwo dzi la, ate ŋu aɖe ga si nàbu la ɖa eye wòaxe mɔ ɖe ame ƒe ŋkɔ fifi ɣeyiɣi didi nu.

Wɔ esia fifia¶

Ne èzi aʋatso posu ƒe kadodo aɖe dzi alo nètsɔ fexexe ŋuti nyatakakawo ɖo ɖe nyatakakadzraɖoƒe aɖe si wogbugbɔa nuawo ɖona ɖe amewo la, wɔ afɔɖeɖe ade siawo enumake:

1. Do fexexegbalẽvi si ŋu wogblẽ nu le la alo te fli ɖe eme fifia:
   • Ʋu wò asitelefon dzi gadzraɖoƒe ƒe dɔwɔnu alo nàzã ametafatafa kpata ƒe xexlẽdzesi si wota ɖe wò kaɖia ƒe megbe atsɔ aƒo ka na amesi na kaɖia.
   • Zã app card controls nàtsɔ atrɔ wò card ƒe nɔnɔme enumake wòazu "Locked" alo nàgblɔ be card la gblẽ.
   • Bia be woatsɔ agbalẽvi si woatsɔ aɖɔlii enumake si me xexlẽdzesi wuiade ƒe akɔntabubu yeye kura le, ŋkeke si dzi wòawu enu, kple CVV ƒe dedienɔnɔ ƒe dzesi.
2. To asitsatsa siwo le lalam me eye nàʋli nya le ametafatafa ƒe fewo ŋu:
   • Kpɔ wò asitsatsa ŋutinya si nèwɔ nyitsɔ laa ɖa be nu suesuesue siwo mènya o alo asitsalawo ƒe mɔɖeɖe siwo ŋu womeɖe mɔ ɖo o siwo le lalam hã.
   • De se na wò gadzraɖoƒe be wòagbe mɔɖeɖe siwo katã woxɔna be woawɔ nudɔdɔ enuenu eye wòana ga si woagbugbɔ axɔ le se nu le dukɔa ƒe nuƒlelawo takpɔkpɔ ƒe sewo nu.
   • Gblɔ na ametafatafa teƒenɔla la tẽ be: "Meŋlɔ nye kaɖi ŋuti nyatakakawo ɖe nyatakakadzraɖoƒe aɖe si wotsɔa ametafatafa wɔe si wɔ abe ɖe meɖoe ɖe amewo to posu dzi ene."
3. Dzro wò asitelefon dzi kpɔ be dɔwɔnu alo ameŋunyatakaka siwo ŋu womeɖe mɔ ɖo o hã li:
   • Le Android dzi la, ʋu Settings -> Apps eye nàlé ŋku ɖe dɔwɔnu siwo mènya o siwo nèda ɖe wò kɔmpiuta dzi nyitsɔ laa ŋu (abe aʋatso package trackers alo Flash players ene).
   • Le iPhone dzi la, ʋu Settings -> General -> VPN & Device Management eye nàkpɔe ɖa be womede asitelefon dzi dɔwɔnuwo dzikpɔkpɔ (MDM) ƒe ɖoɖowɔɖi ƒe nɔnɔmetata alo dɔwɔƒe ƒe ɖaseɖigbalẽ aɖeke si ŋu womeɖe mɔ ɖo o la eme o.
   • Ne wokpɔ dɔwɔnu alo ɖoɖowɔɖi ƒe nɔnɔmetata aɖe si mènya o la, ɖee ɖa enumake eye nàgbugbɔ adze mɔ̃a gɔme.
4. Miɖo nyatakaka gbegblẽa ɖe ame si ɖoe ɖa:
   • Kpɔ text message ƒe ŋutilã ƒe kɔpi eye nàɖoe ɖe universal carrier spam shortcode 7726 (si ŋlɔa SPAM) tẽ.
   • Miɖo gbedasi la kple ame si ɖoe ɖa la ŋuti nyatakakawo ɖe United States ƒe Posudɔwɔƒe le le spam@uspis.gov.
   • Ðe text message kple nyatakakadzraɖoƒea ƒe URL ƒe screenshot hafi nàtutu dzeɖoɖoa ƒe ka la ɖa.
5. Ta wò ameŋunyatakakawo ta ne ètsɔ adrɛs bliboa kple ameŋunyatakakawo ɖo ɖa:
   • Ne ameflugbalẽvia bia wò Hadomegbenɔnɔ ƒe Dedienɔnɔ ƒe xexlẽdzesi, dzigbezã, alo dadaa ƒe ɖetugbuiyɔvi ŋkɔ la, bu wò dzesideŋkɔ abe alesi woɖee ɖe go ene.
   • De ɣeyiɣi kpui aɖe ƒe ametafatafa ŋuti nuxlɔ̃amewo alo dedienɔnɔ ƒe tsikpe blibo ɖe wò gaxɔgbalẽviwo dzi le Equifax, Experian, kple TransUnion.
   • Lé ŋku ɖe wò gaxɔgbalẽviwo ŋu edziedzi be nàbia nya siwo ŋu womeɖe mɔ ɖo o alo asitsaƒe yeye siwo woʋu.
6. Ka nya ta tso smishing portal ŋu na dukɔa ƒe cybersecurity databases:
   • Tsɔ nya ɖe internet dzi nuvlowɔwɔ ŋu le FBI ƒe Internet dzi Nuvlowɔwɔ Ŋuti Nyatoƒoetoto Dɔwɔƒe le ic3.gov.
   • Mitsɔ ameflunya vɔ̃ɖi ƒe URL la ɖo ɖe Google Safe Browsing kple Internet Dzi Dedienɔnɔ Kple Dɔwɔƒewo ƒe Dedienɔnɔ Dɔwɔƒe (CISA) be wòakpɔ nuƒlela bubuwo ta.
   • Ka nya ta tso asitsatsa ƒe ameflunuwɔna sia ŋu na Dukɔa ƒe Asitsahabɔbɔ le reportfraud.ftc.gov.

Nudzɔdzɔwo ƒe vovototodedeameme ƒe ɖoɖowɔɖi¶

Wɔ ɖe nyametsotsowɔwɔ ƒe mɔnu sia dzi afɔɖeɖe ɖesiaɖe be nàda alesi gbegbe nèɖea fu na wòe kpɔ, axe mɔ ɖe kaɖi dzi ametafatafa si ate ŋu adzɔ nu, eye nàna wò asitelefon dzi asitelefon nanɔ dedie:

flowchart TD
    A["Woxɔ SMS si gblɔ be Posuɖoɖo Me Do kpo Nu"] --> B{"Ðe nèzi nyatakakadzraɖoƒea ƒe kadodo si le nuŋɔŋlɔa me dzia?"}
    B -->|"Ao: Text koe woxɔ"| C["Miɖo SMS ɖe 7726 kple spam@uspis.gov, tutu gbedasi, xe mɔ na xexlẽdzesi"]
    B -->|"Ẽ: Zi kadodoa dzi"| D{"Ðe nèŋlɔ kaɖia ŋuti nyatakakawo, nyagbe ɣaɣla, alo ame ŋutɔ ƒe nyatakakawoa?"}
    D -->|"Ao: Wotu browser la enumake"| E["Klɔ asitelefon dzi nyatakakadzraɖoƒe ƒe cache kple cookies, kpɔ mɔ̃a ɖa be faɛl siwo nèɖe ɖe go hã"]
    D -->|"Ẽ: Wotsɔ agbalẽvi alo nyatakaka aɖe ɖo ɖa"| F["Yɔ Kpekpeɖeŋugbalẽvi Nala ƒe Ametafatafa Dɔwɔƒe Enumake Be Tete Ðe Kpekpeɖeŋugbalẽvia Me"]
    F --> G["Nyaʋiʋli si Wole Lalam Be Woatsɔ Nu Siwo Woxɔ Ðe Ame Ŋu Eye Woaɖe Mɔɖeɖe Siwo Woxɔna Enuenu Me"]
    G --> H{"Ðe nètsɔ Hadomegbenɔnɔ ƒe Dedienɔnɔ ƒe xexlẽdzesi alo dzigbezã ɖo ɖaa?"}
    H -->|"Ẽ: Woɖe amenyenye bliboa ɖe go"| I["De Dedienɔnɔ ƒe Tsitsetsewo Ðe Equifax, Experian, kple TransUnion"]
    H -->|"Ao: Kpekpeɖeŋugbalẽvi koe woŋlɔ ɖe eme"| J["Lé ŋku ɖe gadzraɖoƒe ƒe nyatakakawo ŋu ŋkeke 60, ɖo kpe gaxɔgbalẽviwo dzi"]
    I --> K["Ka nya ta le Fishing URL ŋu na FBI IC3, FTC, kple CISA"]
    J --> K

Alesi posu me smishing dɔwɔwɔwo wɔa dɔe¶

Menye modzakaɖela siwo ɖe wo ɖokui ɖe aga ye wɔa smishing to posu dzi o; Internet dzi nuvlowɔwɔ ƒe habɔbɔ siwo ŋu wowɔ ɖoɖo ɖoe zãa nyatakaka gbegblẽwo ƒe mɔ̃ siwo woma, reverse proxy phishing kit, kple gadodo ƒe mɔ̃ siwo wowɔna le wo ɖokui si.

+-----------------------------------------------------------------------------+
|                     POSTAL SMISHING ATTACK ARCHITECTURE                     |
+-----------------------------------------------------------------------------+
|                                                                             |
|  1. Mass SMS Blast             SIM farms and compromised iMessage botnets   |
|     (Millions daily)           send automated texts to sequential numbers.  |
|                                                                             |
|  2. Spoofed Redelivery URL     Victim clicks lookalike domain               |
|     (Reverse proxy kit)        (e.g., usps-redeliver-tracking-hub.com).     |
|                                                                             |
|  3. Fake Tracking Interface    Page displays realistic USPS branding,       |
|     (Address verification)     simulated tracking status, and address form. |
|                                                                             |
|  4. Card Harvesting Trap       Page demands $0.35 redelivery fee;           |
|     (CVV, expiration, ZIP)     captures complete payment credentials.       |
|                                                                             |
|  5. Real-Time OTP Intercept    Scammer attempts Apple Pay provisioning;     |
|     (Adversary-in-the-Middle)  tricks victim into typing bank SMS code.     |
|                                                                             |
+-----------------------------------------------------------------------------+

Nusiwo woama le agbɔsɔsɔ gã me ƒe xɔtuɖoɖowo: SIM agblewo kple botnetwo¶

Nuvlowɔlawo ƒe habɔbɔwo zãa mɔ̃ɖaŋunu tɔxɛwo tsɔa gbedasi miliɔn geɖe siwo le ɣli dom na asitelefon zãlawo gbesiagbe le nuto bliboa me:

• Hardware SIM Farms (GSM Modems): GSM modem siwo me mɔ̃ geɖe le ƒe agbalẽdzraɖoƒe siwo me asitelefon SIM kaɖi alafa geɖe siwo woxe do ŋgɔ siwo woƒle kple ga si wofi alo wowɔ dɔ le aʋatso ŋkɔwo te le. Mɔ̃ siawo trɔa telefon xexlẽdzesiwo le wo ɖokui si be woato mɔ̃ siwo tsɔa nyatakaka gbegblẽwo ƒe mɔ̃wo ŋu.
• iMessage kple RCS Botnet siwo gblẽ: Amedzidzelawo zãa kɔmpiutadziɖoɖowo tsɔ xɔa Apple iMessage kple Google RCS akɔntabubuwo, si wɔnɛ be woate ŋu aɖo gbedasi siwo ƒe amadede nye blue-bubble alo RCS nuŋɔŋlɔ siwo wotsɔ nya ɣaɣlawo ŋlɔ ɖe amesiwo ŋu wowɔ nuvevii la tẽ to nyatakakadzraɖoƒewo dzi, eye wotoa asitelefon dzi SMS dzodoƒewo ŋu keŋkeŋ.
• Smishing-as-a-Service (SmaaS): Viviti me nyatakakadzraɖoƒe ƒe ŋɔdzidonamewɔlawo dzraa turn-key smishing kits siwo me asitelefon xexlẽdzesi siwo le dɔ wɔm ƒe xexlẽdzesi yeyewo, SMS gateway API siwo wowɔna le wo ɖokui si, kple posu ƒe nɔnɔmetata siwo woxɔ do ŋgɔ le hena nudɔdɔ ƒe fetu.

Trɔ proxy phishing kit kple domenyiŋusẽfianu siwo ɖi wo nɔewo¶

Ne amesi ŋu wowɔ nuvevii la zi kadodo si le gbedasi la me dzi la, nyatakakadzraɖoƒea tsɔa reverse proxy phishing framework deŋgɔ aɖe (abe Modlishka, Evilginx, alo custom postal kits ene) dea eme:

• Domain Typosquatting: Amedzidzelawo ŋlɔa domenyiŋusẽfianu siwo ɖi wo nɔewo siwo srɔ̃a dziɖuɖua ƒe dɔwɔnawo, abe usps-tracking-support-redelivery.com, post-office-portal-us.com, alo usps-update-delivery-info.org.
• Dynamic Geotargeting: Fishing server la léa ŋku ɖe amedzro si gbɔna la ƒe IP adrɛs ŋu. Ne amedzroa le United Kingdom la, dɔwɔƒea trɔa wo yia aʋatso Royal Mail ƒe nɔnɔmetata aɖe dzi; ne èle Canada la, yi Canada Post ƒe aʋatso nyatakakadzraɖoƒe aɖe; eye ne ele United States la, yi aʋatso USPS ƒe axa si dzi woɖoa nyatakakawo ɖo la dzi.
• Bot kple Crawler Cloaking: Server la dea dzesi nyatakakadzraɖoƒe si ŋlɔa nu tso crawlers, cybersecurity numekulawo, kple ŋɔdzidoname scanning bots ŋu le eɖokui si, eye wòsubɔa axa ƒuƒlu si me afɔku mele o alo vodada 404 na wo esime wòle phishing ƒe nɔnɔmetata vɔ̃ɖi la tsɔm na asitelefon dzi smartphone zãla vavãwo ɖeɖeko.

Fexexe ƒe mɔ̃ si nye futɔ si le titina le ɣeyiɣi ŋutɔŋutɔ me¶

Edze abe fexexe ƒe axaa wɔa dɔ tso fe si mehiã o ŋu, abe 0.35 USD, 1.20 USD, alo 2.99 USD ene, le "dɔdzikpɔkpɔ ƒe fetu si wogbugbɔna tsɔna vɛ" alo "nubablɛwo léle ɖe asi ƒe fetu bubu" ƒe atsyɔ̃ɖoɖo te:

• Ne èŋlɔ wò kaɖi ŋuti nyatakakawo eye nèzi "Submit" dzi la, phishing kit la mewɔa dɔ tso 0.35 USD ƒe fetu ŋu o.
• Ke boŋ bot aɖe si wɔa dɔ le eɖokui si le megbe la xɔa wò kaɖi ƒe xexlẽdzesi si nye xexlẽdzesi wuiade, CVV-kɔda, kple fexexe ƒe ZIP-kɔda eye wòdzea agbagba enumake be yeabla wò kaɖia ɖe asitelefon dzi gakotoku (abe Apple Pay, Google Wallet, alo Samsung Pay ene) ŋu le amedzidzela ƒe asitelefon dzi.
• Ne wò gadzraɖoƒea kpɔ gakotoku yeyea ƒe ŋkɔ ŋɔŋlɔ la, ewɔa SMS ƒe kpeɖodzinya vavãtɔ si woɖona ɖe wò fon dzi tẽ.
• Enumake aʋatso posu ƒe nyatakakadzraɖoƒea ɖea agble aɖe si dze abe nyateƒe ene fiana si xlẽ be: "Ne èdi dedienɔnɔ la, ŋlɔ xexlẽdzesi 6 ƒe kpeɖodzinya si wò gadzraɖoƒe ɖo ɖa."
• Ne èŋlɔ kɔpi ma ɖe nyatakakadzraɖoƒea la, amedzidzela la ƒe nuŋɔŋlɔa atsɔe aɖo ɖe wò gadzraɖoƒe, eye wòtsɔa wò kaɖia kpena ɖe woƒe asitelefon ŋutɔŋutɔ ŋu dzidzedzetɔe. Fifia ametafatafakala ate ŋu aƒle nu siwo seɖoƒe meli na o le fiasewo me kadodo aɖeke manɔmee vaseɖe esime wò kaɖi ƒe seɖoƒe nawu enu.

De dzesi aʋatso nyatakaka siwo woɖona ɖe amewo to posu dzi¶

Posudɔwɔƒe siwo dziɖuɖua ɖo la wɔna ɖe dijitaal kadodomɔnu sesẽwo dzi. Ne ède dzesi vovototo siwo le nyatakaka siwo le se nu kple gbedasi siwo wotsɔa ametafatafa ŋlɔna le ɖoɖo nu dome la, enaa nète ŋu kpɔa ŋɔdzidonamewo enumake.

Asitelefon dzi nugblẽfexexe: ameflunyawo tsɔtsɔ sɔ kple gadzraɖoƒe ƒe trojans¶

Togbɔ be amedzidzedze akpa gãtɔ siwo me woɖea nu le le posu me la dia gaxɔgbalẽvi ŋuti nyatakakawo kple amenyenye ŋuti nyatakakawo to nyatakakadzraɖoƒe ƒe agbalẽviwo dzi hã la, dɔdzikpɔha aɖewo zãa asitelefon dzi kɔmpiutadziɖoɖo gbegblẽ siwo ŋu wotrɔ asi le be woatsɔ aɖo asitelefonwo dzi atraɖii.

+-----------------------------------------------------------------------------+
|                     SMARTPHONE THREAT VECTOR MATRIX                         |
+-----------------------------------------------------------------------------+
|                                                                             |
|  Device Platform       Attack Vector                  Technical Impact      |
|  -------------------------------------------------------------------------  |
|  Apple iOS             Web Phishing Form              Harvests card, CVV,   |
|  (iPhone)              (No APK installation)          and billing address   |
|                                                                             |
|  Apple iOS             Malicious MDM Profile          Installs rogue root   |
|  (iPhone)              (Prompt to install profile)    certificates and VPN  |
|                                                                             |
|  Google Android        Web Phishing Form              Harvests card, CVV,   |
|  (Samsung, Pixel)      (No APK installation)          and billing address   |
|                                                                             |
|  Google Android        Malicious APK Download         Deploys banking       |
|  (Sideloaded App)      (TeaBot, FluBot, Anatsa)       trojan with keylogger |
|                                                                             |
+-----------------------------------------------------------------------------+

Apple iOS: asitelefon dzi ɖoɖowɔɖi ƒe nɔnɔmetatawo kple Safari phishing¶

Le Apple-mɔ̃ siwo zãa iOS dzi la, asitelefon dzi dɔwɔɖoɖoa xe mɔ ɖe dɔwɔɖoɖoa ƒe ɖoɖowɔwɔ tẽ nu le App Store si dziɖuɖua da asi ɖo godo negbe ɖe wolɔ̃ ɖe dɔwɔƒe ƒe asitelefon dzi dɔwɔnuwo dzikpɔkpɔ ŋuti nyatakaka aɖe dzi:

• Ne Safari me koe nèyi nyatakakadzraɖoƒea eye nèŋlɔ wò fexexe ŋuti nyatakakawo la, ke kɔmpiutadziɖoɖo vɔ̃ɖi aɖeke mele wò iPhone ŋutɔŋutɔ me o. Nyatakaka siwo nèɖo ɖe agbalẽvia dzi koe nugblẽfexexea le.
• Gake ne nyatakakadzraɖoƒea bia tso asiwò be nàwɔ "USPS Security Certificate" alo "Delivery Profile" ƒe kɔpi eye wòfia mɔ wò yi Settings me be nàde ɖoɖowɔɖi ƒe profile la, gbe biabia la enumake.
• MDM ƒe nɔnɔmetata vɔ̃ɖi aɖe ɖea mɔ na amedzidzela be wòato wò internet dzi nyatakakawo katã dzi to proxy server alakpatɔ aɖe dzi, eye wòaxe mɔ na nyagbe ɣaɣlawo kple nyatakaka siwo womeɣla o.
• Ne èdi be yeakpɔe ɖa be ameflunyawo le yeƒe iPhone dzi la, ʋu Settings -> General -> VPN & Device Management. Ne profile aɖe si mènya o dze la, zi edzi eye nàtia Ðe Dɔwɔnyawo ɖa.

Google Android: APK gadzraɖoƒe trojans siwo wotsɔ axadzi¶

Le Android-mɔ̃wo dzi la, ametafatafalawo dzea agbagba enuenu be yewoable ezãlawo be woawɔ kɔmpiutadziɖoɖo vɔ̃ɖi (APK) ƒe faɛlwo ƒe kɔpi ahade wo eme:

• Nyatakakadzraɖoƒea ɖea nuxlɔ̃ame aɖe fiana be: "Ne èdi be yeakpɔ wò agbalẽvi la le ɣeyiɣi ŋutɔŋutɔ me la, wɔ USPS Asitelefon Dzi Kpɔkpɔ ƒe Kpeɖeŋutɔ si dziɖuɖua da asi ɖo la ƒe kɔpi."
• Browser la ɖea faɛl aɖe si ŋkɔe nye USPS_Track.apk or Package_Service.apk.
• Ne èzi faɛl si nèɖe la dzi eye nèto Android ƒe dedienɔnɔ ŋuti nuxlɔ̃amewo ŋu (abe mɔɖeɖe ɖe eɖoɖo tso teƒe siwo mènya o ene) la, àde gadzraɖoƒe ƒe trojan sesẽ aɖe (abe TeaBot, FluBot, alo Anatsa ene) ɖe wò kɔmpiuta dzi.

• Ne amesi ŋu wowɔ nuvevii ɖe mɔ le vo me be woaɖo APK si wotsɔ de axadzi la, kɔmpiutadziɖoɖo vɔ̃ɖi la biaa mɔ enumake be yeana Android Accessibility Services nawɔ dɔ. Wotrɔ asi le mɔnukpɔkpɔ siawo ŋu gbã be woakpe ɖe ezãla siwo nye ŋutilã me nuwɔametɔwo ŋu to nuŋɔŋlɔ siwo le screen dzi xexlẽ sesĩe alo asiwɔwɔ ɖe nya dzi le wo ɖokui si me. Gake gadzraɖoƒewo ƒe trojanwo wɔa mɔ si dzi woate ŋu age ɖo ŋudɔ tsɔ ɖoa dɔdzikpɔkpɔ ƒe dziɖuɖu blibo ɖe asitelefon dzi dɔwɔɖoɖoa dzi:

• Ɣeyiɣi Ŋutɔŋutɔ ƒe Keylogging kple Screen Scraping: Megbenyawo ƒe dɔwɔƒe vɔ̃ɖi la ŋlɔa ŋɔŋlɔdzesi ɖesiaɖe si woŋlɔ ɖe keyboard la dzi, eye wòléa zãla ƒe ŋkɔwo, nyagbe veviwo, kple ame ŋutɔ ƒe dzeside xexlẽdzesiwo le dɔwɔnuawo katã me.

• Malicious Screen Overlays: Ne amesi ŋu wowɔ nuvevii ʋu gadzraɖoƒe alo cryptocurrency dɔwɔɖoɖo si le se nu la, trojan la dea dzesi dɔwɔnua ƒe gɔmedzedze eye enumake wòwɔa aʋatso gegeɖe screen si me kɔ alo si sɔ pɛpɛpɛ le dɔwɔnua dzi tẽ. Ne èŋlɔ wò ɖaseɖigbalẽwo la, woɖoa wo ɖe amedzidzela ƒe dɔwɔƒea esime dɔwɔnua le gbagbãm alo wòɖea agbatsɔtsɔ ƒe screen si wowɔ abe ɖe wòle ene fiam.
• Automated SMS Interception: Trojan la xea mɔ na SMS nyatakaka siwo gbɔna siwo me zi ɖeka ƒe passcodes siwo gadzraɖoƒewo ɖo ɖa le, etutua nyatakakaawo le ɖoɖoezizi me ale be màgakpɔ wo gbeɖe o, eye wòɖoa ɖaseɖiɖi ƒe kɔdaawo ɖe ameflula la le milisekɔnd ʋɛ aɖewo ko me.

Afɔɖeɖe ɖesiaɖe ƒe mɔxexeɖedɔléle nu ƒe ɖoɖowɔɖi na fexexegbalẽvi siwo ŋu wogblẽ nu le¶

Ne woŋlɔ fexexe ŋuti ɖaseɖigbalẽwo ɖe nyatakakadzraɖoƒe si wotsɔa ametafatafa gbugbɔa nuawo yinae la, afɔɖeɖe vevi aɖe wɔwɔ kple wò gadzikpɔƒea tɔa te fe siwo ŋu womeɖe mɔ ɖo o.

flowchart TD
    A["Kpekpeɖeŋugbalẽvi Ŋuti Nyatakaka Siwo Woŋlɔ Ðe Aʋatso Gbugbɔgaɖoanyi ƒe Axa Dzi"] --> B["Ʋu Asitelefon dzi Gadzraɖoƒe ƒe Dɔdamɔnu kple Lock Card Enumake"]
    B --> C["Call Card Nala 24/7 Ametafatafa Dɔwɔƒe"]
    C --> D["Bia be Tete Ðe Kpekpeɖeŋugbalẽvia Me Bliboe eye Nàgbugbɔe Ana"]
    D --> E["Dzro Asitsatsa Katã me Tso Gaƒoƒo 72 Mamlɛawo Me"]
    E --> F{"Ðe nutsotso siwo ŋu womeɖe mɔ ɖo o alo nusiwo woatsɔ alé wo ɖe te la li?"}
    F -->|"Ẽ"| G["Dze Sedede Z / E Nuƒlelawo ƒe Nyaʋiʋli gɔme le Nusiwo Woflu"]
    F -->|"Ao: Wolée hafi wotsɔ nya ɖe eŋu"| H["Kpɔe ɖa be Wometsɔ Digitál Gakotoku (Apple/Google Pay) aɖeke Kpe Ðe Eŋu O"]
    G --> I["Te fli ɖe Tokenized Nudɔdɔwo Katã Siwo Do Ƒome Kple Kpekpeɖeŋugbalẽvi Si Wofi"]
    H --> I
    I --> J["Kpɔ Checking Account kple Credit Card dzi Ŋkeke 60 sɔŋ"]

Fexexegbalẽvi siwo ŋu wogblẽ nu le la tutu kple wo gbugbɔgadzɔ¶

Mègalala be yeakpɔe ɖa be nya aɖe si ŋu womeɖe mɔ ɖo o adze le wò nyatakakaa dzi hã o. Zi ale si nèkpɔe be nyatakakadzraɖoƒea mele se nu o la, dze kaɖia tetre gɔme:

• Ge ɖe wò gadzraɖoƒe ƒe asitelefon dzi dɔwɔnua me eye nàdi kaɖia ƒe dedienɔnɔ ƒe ɖoɖowo. Zi Lock Card alo Freeze Card dzi be nàxe mɔ ɖe mɔɖeɖe ƒe agbagbadzedzewo le ɣeyiɣi ŋutɔŋutɔ me nu.
• Zã telefonxexlẽdzesi si wotre ɖe wò agbalẽvi ŋutɔŋutɔ ƒe megbekpa dzi nàtsɔ aƒo ka na gadzraɖoƒe si naa amea ƒe ametafatafa ƒe dɔwɔƒe 24/7.
• Gblɔe eme kɔ be: "Meŋlɔ nye kaɖi ƒe xexlẽdzesi, ŋkeke si dzi wòawu enu, kple CVV-kɔda vodadatɔe ɖe nyatakakadzraɖoƒe aɖe si nye ameflunyawo gbɔgblɔ le Internet dzi. Mehiã be woate fli ɖe kaɖi sia me enumake eye woatsɔ akɔnta ƒe xexlẽdzesi yeye ana ɖe eteƒe."
• Ðo kpe edzi kple eteƒenɔla be gadzraɖoƒea wɔa asitsalawo ƒe nyatakaka yeye siwo wotsɔ dzesi wɔe la nuwɔametɔe. Gaxɔgbalẽvi nana dɔwɔƒe geɖe kpɔa gome le gaxɔgbalẽvi yeyewo ɖɔliɖɔli ƒe dɔwɔna siwo wowɔna le wo ɖokui si siwo naa wò gaxɔgbalẽvi ƒe xexlẽdzesi yeyea asitsalawo le wo ɖokui si ne wogbugbɔ gaxɔgbalẽvi ɖe go; bia tẽ be gadzraɖoƒea natso asitsalawo ƒe kadodo siwo katã li enuenu siwo li fifia la me.

Nyaʋiʋli le asitsatsa siwo me ameflunyawo le ŋu le dukɔa ƒe nuƒlelawo ƒe se nu¶

Ne amedzidzelaawo te ŋu tsɔ nya siwo ŋu womeɖe mɔ ɖo o hafi nètu kaɖia la, ke dukɔa ƒe gadzraɖoƒe ƒe sewo ɖo seɖoƒe na wò ŋutɔ wò ganyawo ƒe agbanɔamedzi:

• Fair Credit Billing Act (FCBA, 12 CFR Part 1026 / Regulation Z): Le gaxɔgbalẽvi ƒe asitsatsa gome la, wò se ƒe agbanɔamedzi gãtɔ kekeake le dukɔa ƒe se nu ɖe fe siwo ŋu womeɖe mɔ ɖo o tae nye 50 USD. Kpekpeɖeŋunala gã akpa gãtɔ (Visa, Mastercard, American Express, Discover) léa agbanɔamedzi zero ƒe ɖoɖo siwo ɖea asi le 50 USD ƒe fe sia ŋu keŋkeŋ ne èka nya ta tso ametafatafa ŋu enumake.
• Electronic Fund Transfer Act (EFTA, 12 CFR Part 1005 / Regulation E): Le debit card ƒe asitsatsa siwo do ƒome kple gaxɔgbalẽviwo gome la, ɣeyiɣia le vevie ŋutɔ. Ne èna wò gadzraɖoƒe nya le dɔwɔŋkeke eve me tso esime nèse nu tso nugblẽfexexea ŋu la, woɖoa wò agbanɔamedzia ƒe seɖoƒe na 50 USD. Ne èka nya ta tso ɣletigbalẽ dzi ŋkeke eve va ɖo blaade le wò ɣleti sia ɣleti ƒe nyatakaka ɖoɖoɖa vɔ megbe la, wò agbanɔamedzia dzina ɖe edzi va ɖoa 500 USD. Le ŋkeke blaade megbe la, àde afɔku me be ga siwo katã wofi le wò gakɔnta me la abu.
• Ŋlɔ dzeɖoɖo ɖesiaɖe si nèɖo kple wò gadzraɖoƒea le telefon dzi, si me ŋkeke, gaƒoƒo, teƒenɔla ƒe ŋkɔ, kple nyaʋiʋli ƒe xexlẽdzesi hã le.

Asitelefonwo ƒe ɖiƒoƒo ɖeɖeɖa kple dedienɔnɔ ƒe sesẽ¶

Wò asitelefon ŋu kɔklɔ kple eƒe sesẽ xea mɔ na ŋkuléle ɖe eŋu atraɖii, ɖaseɖigbalẽwo ŋeŋe, kple nyatakaka gbegblẽwo ƒe amedzidzedze enuenu.

+-----------------------------------------------------------------------------+
|                     SMARTPHONE DECONTAMINATION CHECKLIST                    |
+-----------------------------------------------------------------------------+
|                                                                             |
|  [X] Clear Mobile Browser Cache: Purge Safari, Chrome, or Firefox cache,    |
|      cookies, and website data to remove cached phishing sessions.          |
|                                                                             |
|  [X] Audit Installed Applications: Inspect all apps, removing any unknown  |
|      software, especially apps installed outside official app stores.       |
|                                                                             |
|  [X] Audit Accessibility Permissions (Android): Revoke accessibility       |
|      access for any third-party app not explicitly trusted.                |
|                                                                             |
|  [X] Remove Enterprise MDM Profiles (iOS): Delete unfamiliar device        |
|      management certificates under Settings -> VPN & Device Management.     |
|                                                                             |
|  [X] Enable Spam Filtering: Activate native carrier and operating system    |
|      spam call and message filters (Silence Unknown Callers / Spam Shield). |
|                                                                             |
+-----------------------------------------------------------------------------+

Asitelefon dzi nyatakakadzraɖoƒe ƒe cache kple session storage kɔklɔ¶

Phishing nyatakakadzraɖoƒewo dzraa tracking scripts, session tokens, kple local cache objects ɖo ɖe wò asitelefon dzi web-browser me be woakpɔ amedzrowo ƒe ŋuɖoɖowo:

• iOS Safari: Ʋu Nɔnɔmewo -> Safari -> Klɔ Ŋutinya kple Nyatakakadzraɖoƒe ƒe Nyatakakawo ɖa. Tia "Ŋutinya Katã" eye nàɖo kpe edzi. Esia tua web-browser ƒe tab siwo katã le ʋuʋu ɖi eye wòtutua cookies siwo wodzra ɖo, nɔnɔmetata siwo wodzra ɖo ɖe cache me, kple teƒea ƒe web database me nyawo ɖa.
• Android Google Chrome: Ʋu Chrome, zi dzesi etɔ̃ siwo le ɖusime ƒe dzogoe si le etame dzi, tia Settings -> Privacy and security -> Clear browsing data. Tia "Ɣeyiɣi katã," de dzesi "Cookies kple site data" kple "Cached images and files," eye nàzi Clear data dzi.

Android-dɔdamɔnu vɔ̃ɖiwo ɖeɖeɖa¶

Ne èɖe dɔwɔnu aɖe ƒe faɛl tso ameflunyawo ƒe kadodo aɖe me le Android-telefon dzi hedae ɖe wò kɔmpiuta dzi la, ɖe ŋɔdzidonamea ɖa enumake:

• Gbugbɔ dze wò Android smartphone gɔme le Safe Mode (le mɔ̃ akpa gãtɔ me la, zi Power ƒe dzesi dzi eye nàlée ɖe asi, emegbe nàka asi "Power off" ƒe dzesi si le screen la dzi eye nàlée ɖe asi vaseɖe esime "Reboot to safe mode" ƒe nyabiasea nadze). Dedienɔnɔ ƒe Nɔnɔme xea mɔ na ame bubuwo ƒe malware dɔwɔɖoɖowo be woagawɔ dɔ le megbe o.
• Ʋu Nɔnɔmewo -> Dɔwɔɖoɖowo -> Kpɔ dɔwɔɖoɖowo katã.
• Yi xexlẽdzesiawo me nàdi dɔwɔnu siwo ŋu ɖikeke le siwo me dɔwɔƒe ƒe dzesi nyuiwo mele o, dɔwɔnu siwo ƒe ŋkɔwo sɔ (abe "Package Service," "System Update," "Flash Player," alo "USPS Assist"), alo dɔwɔnu siwo woda ɖe wò kɔmpiuta dzi gbesigbe nudzɔdzɔa dzɔ.
• Tia dɔwɔnu si ŋu ɖikeke le, zi Force Stop dzi, emegbe nàzi Uninstall dzi.
• Ne "Uninstall" ƒe dzesi la le ɣie la, ke malware la xɔ Device Administrator ƒe mɔnukpɔkpɔwo. Ʋu Settings -> Security -> Device admin apps, di app vɔ̃ɖi la, trɔ eƒe dɔdzikpɔla ƒe mɔɖeɖewo, eye nàyi edzi aɖee ɖa.

Gbedasɛ siwo le gbegblẽm la ɖeɖeɖa le dɔwɔɖoɖoa ƒe ɖoɖo nu¶

Dɔwɔnu siwo wotu ɖe Apple iOS kple Google Android siaa dzi be woatsɔ atɔ te nyatakaka siwo mèbia tso asiwò o tso xexlẽdzesi siwo womedzra ɖo ɖe wò kadodowo me o dzi:

• Apple iOS: Ʋu Settings -> Messages, yi anyime yi "Message Filtering," eye nàtrɔ ɖe Filter Unknown Senders dzi. Esia wɔa tab ɖeka ɖe vovo le wò Gbedasɛwo ƒe dɔwɔnua me na nuŋɔŋlɔ siwo va tso xexlẽdzesi siwo mènya o gbɔ, si naa gbeƒãɖeɖe ƒe gbeɖiɖiwo zi ɖoɖoe eye wònana kadodo vɔ̃ɖiwo megakpɔa nu vevitɔ o.
• Google Android (Google Messages): Ʋu Google Messages, zi wò profile avatar dzi le ɖusime le etame, zi Messages settings -> Spam protection dzi, eye nàtrɔ ɖe Enable spam protection ŋu. Amehawo ƒe ahɔhɔ̃mekawo ɖeɖeɖa mɔ̃ sia dea dzesi nuŋɔŋlɔ siwo wosusu be wole ƒoƒom la le eɖokui si eye wòɖoa wo ɖe wò "Spam & Blocked" agbalẽdzraɖoƒea evɔ meʋuʋua wò fon o.

Nyatakakamɔnu siwo dziɖuɖua ɖo kple posu ƒe sedzikpɔlawo¶

Ametafatafa ŋuti nyatakaka tsitotsito ɖoɖo ɖe dziɖuɖudɔwɔƒewo kpena ɖe posudɔwɔƒewo ŋu be woawɔ nɔnɔmetata na nyatakaka gbegblẽwo ƒe habɔbɔwo, woxɔa ametafatafa ƒe domenyiŋusẽfianuwo, eye woɖea nuvlowɔlawo ƒe dɔwɔƒewo ƒe dɔwɔnuwo ɖa.

+-----------------------------------------------------------------------------+
|                      OFFICIAL FRAUD REPORTING DIRECTORY                     |
+-----------------------------------------------------------------------------+
|                                                                             |
|  Organization             Contact Channel           Purpose                 |
|  -------------------------------------------------------------------------  |
|  Carrier Spam Service     Forward SMS to 7726       Triggers carrier-wide   |
|                           (Universal shortcode)     spam block              |
|                                                                             |
|  US Postal Inspection     spam@uspis.gov            Federal criminal        |
|  Service (USPIS)          1-877-876-2455            investigation of fraud  |
|                                                                             |
|  FBI Internet Crime       ic3.gov                   Transnational cyber-    |
|  Complaint Center (IC3)                             crime tracking          |
|                                                                             |
|  Federal Trade            reportfraud.ftc.gov       Consumer deceptive trade|
|  Commission (FTC)                                   practice reporting      |
|                                                                             |
|  Google Safe Browsing     safebrowsing.google.com/  Submits malicious URL   |
|                           safebrowsing/report_phish for browser blocking    |
|                                                                             |
+-----------------------------------------------------------------------------+

Nyatakaka nana United States ƒe Posudɔwɔƒe¶

United States ƒe Posudɔwɔƒee nye dukɔa ƒe sedzikpɔlawo ƒe dɔwɔƒe si ƒe dɔe nye be wòaku nu me le posu me ametafatafa, posu me aʋatsokaka, kple amedzidzedze siwo wowɔna le mɔ gbegblẽ nu siwo woɖo taɖodzinu na USPS ƒe asisiwo ŋu:

• Miɖo nyatakaka si le smishing la ɖe spam@uspis.gov.
• Le wò e-mail ƒe akpa gãtɔ me la, ŋlɔ nyatakaka si woŋlɔ ɖe e-mail la ƒe screenshot si ɖe telefon xexlẽdzesi si me nètso, ŋkeke kple gaƒoƒo si nèxɔ, kple nyatakakadzraɖoƒea ƒe URL si tututu woɖe fia le gbedasi la me fia.
• USPIS ƒe Internet dzi numekulawo wɔa nu aduadu kple domenyiŋusẽfianu ƒe ŋkɔŋlɔlawo, amedzrodzeƒedɔwɔƒewo, kple dukɔa ƒe senyalawo be woaxɔ domenyiŋusẽfianu siwo me ameflunyawo le eye woatɔ te ameflunyawo.

Nyatakaka nana asitelefon dzi kadododɔwɔƒewo to 7726 dzi¶

Xexeame katã ƒe xexlẽdzesi kpui si nye 7726 (si ŋɔŋlɔa SPAM le telefon ƒe safui si wozãna ɖaa dzi) nye esi asitelefon dɔwɔƒewo léna ɖe asi le xexeame katã (siwo dometɔ aɖewoe nye AT&T, Verizon, T-Mobile, Vodafone, kple EE):

• Kpɔ gbedasi si me ameflunyawo le la ƒe nuŋɔŋlɔ.
• Wɔ nyatakaka yeye si do go si woɖo ɖe 7726 eye nàtsɔ nuŋɔŋlɔa akpe ɖe eŋu.
• Wò dɔwɔƒe si tsɔa nyatakakawo ɖoa eŋu enumake kple nyabiase si woawɔ le eɖokui si abia telefon xexlẽdzesi alo e-mail adrɛs si tso eme si ɖo nyatakaka gbegblẽa ɖa.
• Tsɔ amesi ɖoe ɖa la ƒe telefon xexlẽdzesi ɖo eŋu.
• Adzɔhawo ƒe ŋɔdzidoname ŋuti numekuku dɔwɔƒewo zãa nyatakaka siawo siwo woƒo ƒu tsɔ trɔa asi le SMS dzodoƒe siwo le ɣeyiɣi ŋutɔŋutɔ me ŋu, eye woxea mɔ na gbedasi siwo sɔ hafi woɖoa nudɔla miliɔn geɖe bubuwo gbɔ.

Takpɔkpɔ tso USPS Informed Delivery ƒe akɔnta xɔxɔ kple posu ƒe mɔɖeɖe ɖe nu ŋu me¶

Afɔku ƒe mɔnu evelia si nye posu me smishing lɔ akɔntabubu wɔwɔ le ametafatafa me le USPS Informed Delivery ƒe mɔnu si le se nu dzi. Ne amedzidzelawo ŋe wò ŋkɔ bliboa, ablɔdzi adrɛs ŋutɔŋutɔ, kple fexexegbalẽvi ŋuti nyatakakawo la, wodzea agbagba ɣeaɖewoɣi be yewoade akɔnta si ŋu womeɖe mɔ ɖo o la agbalẽ me le wò ŋkɔ me usps.com:

• Informed Delivery Feature Abuse: Informed Delivery na nutoa me tɔwo te ŋu kpɔa lɛta siwo ƒe lolome le abe lɛta ene siwo va la ƒe dijitaal nɔnɔmetata siwo le amadede ɣi me do ŋgɔ eye woléa ŋku ɖe agbalẽvi siwo woɖo be woaɖo woƒe adrɛs dzi ŋu. Ne Internet dzi nuvlowɔla aɖe zã wò adrɛs tsɔ de akɔntabubu aɖe agbalẽ me la, woate ŋu akpɔ gadzraɖoƒegbalẽvi siwo va, adzɔxexe ŋuti nuŋlɔɖiwo, gaxɔgbalẽvi ɖɔliɖɔli ƒe lɛtawo, kple dziɖuɖua ƒe lɛtawo ƒe nɔnɔmetata siwo woɖe ɖe mɔ̃ dzi hafi lɛtaawo naɖo wò lɛtaɖaka ŋutɔŋutɔ me.
• Adrɛs ƒe Tɔtrɔ si Ŋu Womeɖe Mɔ Ðe O (COA): Amedzidzelawo ate ŋu azã ameŋunyatakaka siwo woŋe atsɔ aɖo elektrɔnik Adrɛs Tɔtrɔ ƒe biabiawo ɖe to posudɔwɔƒea dzi, atrɔ wò lɛta ŋutɔŋutɔwo ayi aƒe si me ame aɖeke mele o, agbalẽviwo tsɔtsɔ yi teƒe bubu, alo asitsaƒe si xɔa lɛtawo. Ne wonya trɔ wò lɛtawo ko la, nuvlowɔlawo léa gaxɔgbalẽvi yeye siwo nèna, gaxɔgbalẽvi siwo woatsɔ aɖɔli wo, kple ga ŋuti nuŋlɔɖi veviwo le wò manyamanya me.
• Akɔntabubu ƒe Nɔnɔme ƒe Kpeɖodzi: Sasrãkpɔ usps.com, yi Informed Delivery ƒe nyatakakadzraɖoƒea, eye nàdze agbagba age ɖe eme alo awɔ akɔnta aɖe kple wò nyatakakawo. Ne mɔ̃a ɖee fia be akɔnta aɖe li xoxo na wò adrɛs le e-mail adrɛs si mènya o te la, ke te ɖe USPS ƒe asisiwo ƒe dɔwɔƒea ŋu enumake.
• Ame ŋutɔ ƒe Dzesidede Ame Ŋuti Ðoɖowɔwɔ: Ne wowɔ akɔnta si ŋu womeɖe mɔ ɖo o la, yi posudɔwɔƒe si le mia gbɔ ƒe alɔdzedɔwɔƒea kple dziɖuɖu ƒe dzesidegbalẽvi eve kple adrɛs ƒe kpeɖodzi. Bia be posudɔwɔlawo natso dijitaal akɔnta si ŋu womeɖe mɔ ɖo o la nu eye woatsɔ ametafatafa ƒe mɔxenu ade wò adrɛs ŋutɔŋutɔ si dzi nèɖoe ɖo la dzi be woaxe mɔ ɖe elektrɔnik adrɛs ƒe tɔtrɔ nu.

Nuteɖeamedzi dzi ɖuɖu kple lãmesẽ me tsonuwo¶

Zi geɖe la, ne ame dze ametafatafa le Internet dzi me la, ehea seselelãme ƒe nuteɖeamedzi sesẽ, fɔbubu ame ɖokui, kple seselelãme be yeate ŋu agblẽ nu le ame ŋu vɛ. Ne èkpɔe be asiƒoƒo bɔbɔe aɖe le wò telefon dzi tsɔ wò gaxɔgbalẽvi ƒe xexlẽdzesi alo ame ŋutɔ ƒe dzesidegbalẽvi de asi na nuvlowɔlawo ate ŋu ana ŋutilã natsi dzodzodzoe, alɔ̃madɔmadɔ, ʋu ƒe sisi nayi dzi, eye wòatsi dzimaɖi.

De dzesii be nuvlowɔlawo ƒe ƒuƒoƒo siwo wɔa nyateƒe si wònye be ame miliɔn geɖe nɔa agbalẽviwo lalam gbesiagbe lae wɔa dɔ nyuie le posu me gbedasi siwo wotsɔna ƒoa ɖi ame. Ne gakuxi aɖe ƒe nuteɖeamedzi na akɔta tena, gbɔgbɔtsixe tsia ƒo, ʋuʋu sesẽ, alo vɔvɔ̃ na wò la, yi atikewɔƒe enumake. Bu kpekpeɖeŋunana gbãtɔ, CPR, kple susuŋutinunya ƒe kpekpeɖeŋunadɔ gbãtɔ ƒe hehexɔxɔ si ŋu woɖo kpee to Atitsoga Dzĩ Habɔbɔ, St John Ambulance, alo nutoa me dɔwɔƒe aɖe si naa kpekpeɖeŋu ame dzi be yeatu kakaɖedzi kple ŋutete ŋutɔŋutɔ ɖo le ŋutilã me dzidziƒoame kple lãmesẽkuxi sesẽwo gbɔ kpɔkpɔ me le ƒomea ƒe nɔnɔme kpatawo me.

Frequently asked questions¶

Ðe United States ƒe Posudɔwɔƒea ɖoa nyatakaka siwo ku ɖe agbalẽviwo ɖoɖo ɖe amewo ŋu to asitelefon dzi kpɔa?¶

United States ƒe Posudɔwɔƒea ɖoa nyatakaka siwo woŋlɔ ɖe asitelefon dzi ɖe asisi siwo ŋlɔ ŋkɔ tẽ be yewoakpɔ nyatakaka yeyewo le nyatakakadzraɖoƒe si dziɖuɖua da asi ɖo (usps.com) hena xexlẽdzesi aɖe koŋ si woatsɔ akplɔe ɖo, alo amesiwo ŋlɔ ŋkɔ ɖe Nyatakakawo Ðoɖoɖa me ko. Nyatakaka siwo woɖona ɖe wo ɖokui si le se nu tso USPS gbɔ la tsoa xexlẽdzesi atɔ̃ ƒe xexlẽdzesi kpui si dziɖuɖua da asi ɖo si nye 28777 (USPS) ɖeɖeko gbɔ eye kadodo siwo fiaa mɔ ezãlawo be woawɔ adrɛs ŋuti nyatakakawo yeyee alo axe fe siwo woxena ɖe wo gbugbɔɖoɖo ɖe wo ta la menɔa wo me gbeɖe o. Posudɔwɔƒea meɖoa nyatakaka siwo womebia tso ame si o be woabia ame ŋutɔ ƒe nyatakakawo alo gaxɔgbalẽvi ƒe xexlẽdzesiwo be woatsɔ aɖe agbalẽvi aɖe ɖe go gbeɖe o.

Nukae wòle be mawɔ ne meŋlɔ nye gaxɔgbalẽvi ŋuti nyatakakawo gake metu nyatakakadzraɖoƒea hafi tsɔe ɖo ɖa?¶

Egbegbe reverse proxy phishing kits zãa automated form-tracking scripts zi geɖe, abe keyloggers alo real-time websocket connections ene, siwo léa keystrokes ne èle wo ŋlɔm ɖe input box ɖekaɖekawo me, ne mèzi "Submit" alo "Continue" ƒe dzesi mamlɛtɔ dzi gbeɖe o gɔ̃ hã. Esi wònye be ɖewohĩ woɖo wò kaɖia ƒe xexlẽdzesi, ŋkeke si dzi wòwu enu, kple CVV-kɔda ɖe wò le ɣeyiɣi ŋutɔŋutɔ me ta la, ele be nàbu kaɖia be enye nusi ŋu wogblẽ nu le. Te ɖe wò gadzikpɔƒea ŋu enumake be nàdo gaxɔgbalẽvia ahaɖɔlii.

Nukatae ametafatafalawo biaa fe sue aɖe ko abe 0.35 USD ene ɖe dɔlar alafa geɖe teƒe?¶

Ameflulawo ɖonɛ koŋ biaa fetu sue aɖe si le 0.30 USD kple 3.00 USD dome elabena ƒã hafi nuƒlelawo hea ɖe megbe le ga sue aɖe zazã atsɔ akpɔ agbalẽvi si tsi megbe gbɔ. Dollar ƒe ga home sue sia toa amegbetɔwo ƒe ɖikeke ŋu eye wòƒoa asa na gadzraɖoƒewo ƒe ametafatafa ƒe se siwo wowɔna le wo ɖokui si siwo léa ŋku ɖe asitsatsa siwo ŋu asixɔxɔ gã le ŋu nyuie la hehe vɛ. Ne ameflula la nya lé kaɖia ƒe ɖaseɖigbalẽ bliboa ko la, wozãa nyatakaka siwo wofi la tsɔ ŋlɔa wò kaɖia ɖe asitelefon dzi gakotokuwo me alo dzea asitsadɔ siwo ŋu womeɖe mɔ ɖo o siwo xɔa dɔlar geɖe gɔme.

Ðe ametafatafalawo ate ŋu afi nye ga ne ɖeko mezi kadodoa dzi gake nyemeŋlɔ nyatakaka aɖeke oa?¶

Ne ɖeko nèzi kadodoa dzi le Safari, Chrome, alo asitelefon dzi nyatakakadzraɖoƒe bubu si wozãna ɖaa me eye nètu tab la enumake evɔ mèɖo nyatakakawo ɖa o, mède dɔwɔnu aɖe ɖe wò kɔmpiuta dzi o, alo mède ɖoɖowɔɖi aɖe ƒe kɔpi o la, ke wò ganyawo ƒe akɔntabubuwo gakpɔtɔ le dedie. Egbegbe asitelefon dzi dɔwɔɖoɖowo ɖea nyatakakadzraɖoƒe ƒe tabwo ɖe vovo le sandbox siwo le dedie me, si wɔnɛ be nyatakakadzraɖoƒewo mete ŋu ɖea nyagbe ɣaɣla alo fexexegbalẽvi siwo wodzra ɖo la ɖa evɔ wo zãlawo mewɔa nu kpli wo o. Klɔ wò web-browser ƒe cache kple nyatakakadzraɖoƒea ƒe nyatakakawo ɖa abe dedienɔnɔ ƒe afɔɖeɖe si wozãna ɖaa ene.

Vovototo kae le USPS ƒe xexlẽdzesi ŋutɔŋutɔ si wotsɔ léa ŋku ɖe nu ŋu kple xexlẽdzesi si wotsɔ léa ŋku ɖe ame ŋu aʋatso si le nuŋɔŋlɔ aɖe me dome?¶

USPS ƒe xexlẽdzesi vavã siwo wotsɔ kplɔa ame ɖo la léna ɖe ɖoɖo siwo wowɔ ɖe ɖoɖo nu nu, zi geɖe la, xexlẽdzesi 20 va ɖo 22 siwo dzea egɔme kple 9 (na dukɔa me agbalẽviwo), alo ŋɔŋlɔdzesi 13 siwo dzea egɔme kple ŋɔŋlɔdzesi eve, eye xexlẽdzesi enyi kplɔe ɖo, eye wowua enu kple US (na dukɔwo dome agbalẽviwo). Zi geɖe la, ŋɔŋlɔdzesi kple xexlẽdzesi siwo wowɔ le vome ƒe ka siwo wowɔ keŋkeŋ la nɔa nyatakaka siwo wotsɔ ɖoa ​​asitelefon dzi me, alo woɖea xexlẽdzesi si wotsɔ léa ŋku ɖe wo yome la ɖa keŋkeŋ esime wole mɔ fiam wò be nàzi kadodo aɖe dzi. Àte ŋu aɖo kpe xexlẽdzesi ɖesiaɖe si wotsɔ léa ŋku ɖe ame ŋu dzi dedie ne èyi usps.com tẽ eye nèŋlɔ kɔdasia ɖe kplɔkplɔ ƒe didiƒe si dziɖuɖua ɖo la me.

Sources checked¶

• United States Posu Dɔwɔƒe (USPIS, United States): Dukɔa ƒe Nyanyanana Aɖaŋuɖoɖo: Smishing Package Delivery Scams kple Posu Phishing (uspis.gov).
• Federal Trade Commission (FTC, United States): Nuƒlelawo ƒe Nuxlɔ̃ame: Aʋatso Package Delivery Text Messages kple Smishing Amedzidzedze (consumer.ftc.gov).
• Internet dzi Dedienɔnɔ Kple Dɔwɔƒewo ƒe Dedienɔnɔ Dɔwɔƒe (CISA, United States): Aʋawɔwɔ kple Asitelefon dzi Fishing kple Smishing ƒe ŋɔdzidonamewo: Mɔfiame na Nuƒlelawo kple Habɔbɔwo (cisa.gov).
• Dukɔa ƒe Kadododzikpɔha (FCC, United States): Nuƒlelawo ƒe Mɔfiame: Robotexts, Smishing, kple Package Delivery Scams (fcc.gov).
• Dukɔa ƒe Internet Dzi Dedienɔnɔ Dɔwɔƒe (NCSC, United Kingdom): Phishing kple Smishing Ametafatafa: De dzesi SMS Gbedasi Vɔ̃ɖiwo Hegblɔ Wo Ŋu Nyawo (ncsc.gov.uk).
• Canada ƒe Ameflunyawo Gbɔkpɔƒe (CAFC, Canada): Ametafatafa Nutsitsi: Package Delivery kple Courier Smishing Schemes (antifraudcentre-centreantifraude.ca).

Mɔfiame siwo do ƒome kplii¶

• Data breach response and password leaks
• MFA phishing kple futɔ-le-titina bypass
• QR code phishing kple quishing ametakpɔkpɔ
• Package theft and porch piracy
• Ametafatafa kple ametafatafa