Hacked Meta Business Suite alo Google Ads Account: Dzudzɔ Boblododowo ƒe Gazazã si Ŋu Womeɖe Mɔ Na O Kple Admins Ameflulawo¶

Esi nèkpɔe be ŋɔdzidonamewɔla aɖe ge ɖe wò Meta Business Suite (business.facebook.com) alo Google ƒe Boblododowo (ads.google.com) akɔnta, do wò gbesiagbe fexexe ƒe dzidzenu ɖe ​​dzi, eye wòle ga zãm fifia $1,000 va ɖo $10,000 le gaƒoƒo ɖeka me tsɔ do kɔmpiutadziɖoɖo vɔ̃ɖiwo ƒe kɔpiwɔwɔ, aʋatso awu dzeaniwo, alo duta tsatsadada ƒe nyatakakadzraɖoƒewo ɖe ŋgɔ le wò dɔwɔƒe ƒe gaxɔgbalẽvi alo PayPal akɔnta si do ƒome kplii dzi nye ganyawo kple Internet dzi dedienɔnɔ ƒe nɔnɔme kpata si zɔna kabakaba ŋutɔ. Ne èdze ŋgɔ ga fifi enumake alo gadodo le gadzraɖoƒe si ŋu womeɖe mɔ ɖo o la, ƒo ka na wò gadzraɖoƒe ƒe ametafatafa dɔwɔƒea enumake alo nàbia míaƒe... xexlẽdzesi siwo wozãna kpata directory, tsɔ kpe ɖe míaƒe mɔfialawo ŋu le hadomenyatakakadzraɖoƒewo xɔxɔ kple wo xɔxɔ, . gaxɔgbalẽviwo ƒe fexexe kple ACH ƒe nyaʋiʋli siwo ŋu womeɖe mɔ ɖo o, kple wɔla ƒe mɔ̃ si woxɔ le amewo si to crypto scam livestreams dzi.

To vovo na ame ŋutɔ ƒe nyatakakawo ƒe nyagbe ɣaɣlawo dzi dada dzrowo la, egbegbe Meta Business Portfolio kple Google Ads ƒe amedzidzedze siwo wu 85 le alafa me dzɔna to silent browser session-cookie fififi me (Lumma Stealer, . RedLine, . StealC, . Raccoon, alo Chrome ƒe kekeɖenudɔ vɔ̃ɖiwo) alo OAuth ƒe dzesi ƒe ametafatafa si woɖo taɖodzinu na dɔwɔla, hadomenyatakakadzraɖoƒe dzikpɔla, alo gotagome asitsatsa dɔwɔƒe. Ne amedzidzela la nya tsɔ session cookie si ŋu woɖo kpee va antidetect virtual browser dzi ko la, womewɔa boblododowo tso wò profile vevitɔ dzi ko o. Ke boŋ, wowɔa megbeʋɔtru si nɔa anyi ɖaa si me ƒuƒoƒo geɖe le: wowɔa Meta System Users si womekpɔna o, doa ka kple gotagome Partner Business ID, alo wowɔa Google Ads Script / Manager Account si wowɔna le wo ɖokui si (MCC) link si gbugbɔa aʋatsokakawo wɔa dɔ le ɖoɖoezizi me eye wògawɔa fexexe ƒe dɔwɔwɔ ne ètrɔ wò ŋutɔ wò nyagbe ɣaɣla vɔ gɔ̃ hã. Mɔfiame sia kplɔa wò toa ga si dona le wò gadzraɖoƒea nutsitsi le aɖabaƒoƒo ʋɛ aɖewo ko me, etsoa dɔdzikpɔƒe ƒe megbeʋɔtru ɣaɣlawo evɔ màgblẽ wò ŋutinya me gagbugbɔɖoɖo ƒe agbalẽdzikpɔkpɔ ƒe mɔnu o, eye nàtsɔ ʋɔnudrɔ̃ƒe ƒe nuŋlɔɖi siwo tututu Meta Advertising Support kple Google Ads Compromised Account Investigations bia la aɖo ɖa be woatsɔ atrɔ dɔlar akpe geɖe siwo wogblẽ le ametafatafa me.

Wɔ esia fifia¶

1. Tsɔ wò gaxɔgbalẽvi si do ƒome kplii, debit card, gadzraɖoƒe ƒe ACH akɔnta, kple PayPal Automatic Payments le gadzikpɔƒe ƒe ɖoɖo nu GBÃTƆ (mèlala Meta alo Google ƒe kpekpeɖeŋu o). Togbɔ be hacker le dɔdzikpɔhawo wɔm vevie le high-threshold automatic billing dzi la, Meta kple Google xɔa ga le wò card dzi ɣesiaɣi si ga si susɔ la ɖo wò fexexe ƒe dzidzenu gbɔ (zi geɖe $500, . $900, alo $2,000 miniti 15 ɖesiaɖe). Ʋu wò gadzraɖoƒe ƒe dɔwɔnua fifia be tu kaɖi ŋutɔŋutɔ/nyateƒetɔ, ge ɖe PayPal -> Ðoɖowo -> Fexexe -> Fexexe le ɖokuiwò si me eye nàte fli ɖe "Meta Platforms, Inc.", "Facebook", kple "Google LLC" me, eye nàƒo ka na wò gadzraɖoƒe ƒe asitsatsa me ametafatafa ƒe kplɔ̃ be nàxe mɔ na asitsala ƒe fexexe ŋuti nuŋlɔɖia hena ɣeyiɣi aɖe.
2. Tsɔ kɔmpiuta si ŋu dɔlélea le la ɖa le Wi-Fi kple Ethernet ŋu enumake, eye nàwɔ hayahaya katã tso smartphone dzadzɛ alo kɔmpiuta si dzi womeɖe mɔ ɖo o dzi. Ne wò alo dɔwɔla aɖe mieɖe alakpa "Nutata ƒe Gomenɔamesi Dzidada Ŋuti Nyatakaka" nyitsɔ laa. .zip file, "Meta Verified Policy Appeal" PDF executable, alo aɖaŋudɔwɔnu si wofi le Windows PC alo Mac dzi, infostealer alo Hidden VNC si le dɔ wɔm (HVNC) trojan le dɔ wɔm le mɔ̃ ma dzi fifia. Ne ège ɖe wò gadzraɖoƒe alo nègbugbɔ ɖo nyagbewo tso kɔmpiuta ma dzi la, etsɔa wò session token yeyeawo dea asi na amedzidzela la tẽ.
3. Tɔ boblodododɔ siwo katã le dɔ wɔm la ŋu eye nàda wò Akɔntabubu ƒe Gazazã ƒe Seɖoƒe na $0.01 (alo $1.00) le Meta Ads Manager kple Google Ads me. Ne ègakpɔtɔ le boblododo ƒe akɔnta me la, mègatutu dɔdzikpɔha siwo nye ameflunyawo o (dɔdzikpɔhawo tutu gblẽa ʋɔnudrɔ̃ƒe ƒe boblododo ŋuti nuŋlɔɖi si Meta kple Google bia be woawɔ dɔ tso wò gagbugbɔɖoɖoa ŋu). Ke boŋ, trɔ asi le dɔdzikpɔdɔawo ŋu be Tsi / Tɔtɔ, yi Meta Billing & Payment Settings -> Account Spending Limit, eye nàɖo hard cap la ɖe decimal si bɔbɔ wu si ŋu woɖe mɔ ɖo ($0.01 alo $1.00).
4. Ŋlɔ wò Meta Ad Account ID si tso xexlẽdzesi 15 va ɖo 16 ɖi (act_XXXXXXXXXXXXXXX), Asitsanyawo ƒe Dɔwɔƒe ƒe ID, kple Google Ads ƒe Asitsalawo ƒe ID si ƒe xexlẽdzesi nye xexlẽdzesi 10 (XXX-XXX-XXXX) hafi hacker la nya wò do goe. Ne amedzidzela la ɖe wò ŋutɔ wò akɔnta dzi kpɔtɔ tso Full Control / Admin va ɖo No Access la, wò boblododo akɔnta abu le wò dashboard dzi le sɛkɛnd ʋɛ aɖewo ko me. Kpɔ wò Asitsatsa ƒe Ðoɖowo ƒe axaa ƒe URL tututu, tsɔ screenshot Billing Transaction History si fia be... FBADS alo GOOGLE*ADS invoice IDs, eye nàwɔ screenshot na dɔdzikpɔla alakpatɔwo ƒe ŋkɔwo fifia.
5. Dzro agbalẽ me eye nàkɔ persistence layers eneawo katã ŋu: Amewo, Habɔbɔwo, System Users, kple Connected Apps. Hackers nya be amesiwo ŋu wowɔ nuvevii la léa ŋku ɖe Amewo ƒe xexlẽdzesi gbãtɔ ŋu gbã, eyata woɣlaa megbeʋɔtruwo ɖe eme Meta Business Settings -> Users -> System Users, Partners (Business Asset Sharing), kple Nuwo ƒe Ðekawɔwɔ -> Dɔwɔnu Siwo Do Ƒome Kplii, alo le eme Google Ads -> Dɔwɔnuwo & Ðoɖowo -> Mɔɖeɖe kple dedienɔnɔ -> Dɔdzikpɔlawo (MCC) kple Nuwɔna gbogbo aɖewo -> Scripts.
6. File "Compromised Ad Account / Unauthorized Charges" tikiti si dziɖuɖua da asi ɖo na Meta kple Google HAFI nàwu gaxɔgbalẽvi ƒe fexexe sesẽ nu. Ne ède se na wò gaxɔgbalẽvi nala be wòazi gaxɔgbalẽvi si wogbugbɔ xɔ tegbee dzi le Meta Platforms alo Google LLC ŋu evɔ mèɖe mɔ gbã be woƒe Hijacked Ad Account ƒuƒoƒo ememetɔ naɖe asi le gaxɔgbalẽvi siwo nye ametafatafa ŋu eye wòaxɔ ga le wo si o la, bots siwo wowɔna le wo ɖokui si siwo tsia tre ɖe ametafatafa ŋu la axe mɔ ɖe wò Dɔwɔƒea nu tegbee Portfolio, Facebook Page, Instagram Business Account, and Google Merchant Center for "Suspicious Payment Activity / Unpaid Balance."** Bia wò gadzraɖoƒea be wòaxe mɔ ɖe fetu yeyewo nu enumake esime nèle fe siwo fifi siwo le lalam/siwo woda ɖe Internet dzi la dem ɣeyiɣi kpui aɖe ƒe ametafatafa ŋuti numekuku te esi nèle wò platform ƒe nugblẽfexexe ŋuti nyatakaka ɖom ɖa.

Nyametsotso ƒe ati: Triage na Meta Business Suite si wogbã vs. Google Ads akɔntabubuwo¶

Dze alɔdzedɔwɔƒe sia si wɔa dɔ enumake la yome le boblododomɔnu si ŋu wogblẽ nu le kple nenye be amedzidzela la te fli ɖe wò dɔdzikpɔkpɔdɔa me xoxo nu.

flowchart TD
    Start["Wokpɔ Boblododowo Zazã si Ŋu Womeɖe Mɔ Na O alo Admin Vɔ̃ɖitɔ"] --> BankFreeze["ATA 1: Do Gaxɔgbalẽvi / Debit Card le Gadzraɖoƒe App + Te fli ɖe Meta / Google le PayPal Autopay"]
    BankFreeze --> IsolatePC["ATA 2: Ðe PC si Wosusu be Dɔlékui Le Eme la ɖa le Wi-Fi/Ethernet ŋu; Trɔ ɖe Telefon/Tablɛt Dzadzɛ ŋu"]
    IsolatePC --> PlatformCheck{"Ad Platform Kae Wogblẽa Nu Le?"}
    PlatformCheck -->|"Meta Asitsaƒe ƒe Aƒe / Facebook ƒe Boblododowo"| MetaAccess{"Ðe Admin Mɔnukpɔkpɔ Gakpɔtɔ Le Asiwò Ðe Asitsatsa ƒe Dɔwɔƒe / Ad Account la Mea?"}
    MetaAccess -->|"Ẽ: Egakpɔtɔ nye Admin"| MetaLive["Dzudzɔ Rogue Dɔwɔnawo (Mègatutui o) -> Ðo Akɔntabubu ƒe Gazazã ƒe Seɖoƒe na $0.01 -> Kɔ Ame Vlo, Dɔwɔhatiwo, & Dɔwɔɖoɖo Zãlawo ŋu"]
    MetaAccess -->|"AO: Woɖee ɖe anyi wòzu Dɔwɔla alo Wonyae le Dɔme"| MetaLocked["Ƒo Ad Account ID (act_...), Business ID, Axa URL, & Gadzraɖoƒe ƒe Invoice IDs -> Ðo Meta 'Hacked Business Account' & 'Nyaʋiʋli ƒe Fexexe' ƒe Dzidziɖedzi"]
    PlatformCheck -->|"Google Ads (Di / YouTube / Fiafia) ."| GoogleAccess{"Ðe Àte Ŋu Agate Ŋu Akpɔ Google Ads ƒe Asitsalawo ƒe ID (XXX-XXX-XXXX) la Kokokoa?"}
    GoogleAccess -->|"Ẽ: Egakpɔtɔ nye Admin"| GoogleLive["Dzudzɔ Aʋawɔʋuwo -> Ðe Kadodo le Rogue Manager (MCC) ƒe Akɔntabubuwo ɖa -> Tutu Google Ads Scripts & Se Siwo Wowɔ Le Wo Ðokui Si Womeɖe Mɔ Na O"]
    GoogleAccess -->|"AO: Woɖee le Google Ads Account me"| GoogleLocked["Google Dɔwɔƒe/Gmail si Te Dedie -> Ðo Google Ads ƒe ‘Akɔntabubu Dɔwɔna si Ŋu Womeɖe Mɔ Ðe O’ ƒe Agbalẽvi si me Xexlẽdzesi 10 ƒe Asitsalawo ƒe ID le"]
    MetaLive --> RefundFlow["Submit Platform Compromised Billing Ticket Gbã + Teƒe Gadzraɖoƒe Lé ɖe Fe siwo Wole Lalam"]
    MetaLocked --> RefundFlow
    GoogleLive --> RefundFlow
    GoogleLocked --> RefundFlow

Akpa 1: Ganyawo ƒe ʋuʋu nutsitsi le miniti 10 gbãtɔwo me (Gadzraɖoƒe, Kpekpeɖeŋugbalẽvi, kple PayPal ƒe ɖoɖowo) .¶

Ad-account hijackers kpɔa ga le account siwo wofi me to Threshold Billing Abuse zazã me. Asitsatsa si le se nu si zã ga $25,000 ƒe etɔ̃ kple edzivɔ le Facebook alo Google Ads dzi la, zi geɖe la, fexexe ƒe dzidzenu si wowɔna le wo ɖokui si si nye ** .$900 le Meta** alo ** dzi.$500 to $1,000 le Google Ads** dzi, tsɔ kpe ɖe ɣleti sia ɣleti ƒe fexexe ƒe fli ŋu. Ne amedzidzela la xɔ ŋusẽ la, wodzea boblododo 20 va ɖo 50 siwo wogbugbɔ wɔ la ɖe go le $2,000/day gazazãwo ŋuti ɖoɖowo. Boblodododɔwɔƒea ƒe fexexe ƒe mɔ̃ si wowɔna le wo ɖokui si la xɔa ga le wò Visa, Mastercard, American Express, alo PayPal akɔnta si do ƒome kplii la ta le miniti 10 va ɖo 20 ɖesiaɖe vaseɖe esime wò gaxɔgbalẽvi ƒe seɖoƒe nawu enu.

1. Alesi woatso fexexe ƒe ketekemɔwo evɔ womahe mɔxexe ɖe nuƒolanɔƒe nu si womate ŋu atrɔ o vɛ o¶

2. Nusita wòle be nàɖo "Akɔntabubu ƒe Gazazã ƒe Seɖoƒe" ɖe boblododo ƒe mɔ̃a me le ɣeyiɣi ɖeka me¶

Ne ète fli ɖe wò gaxɔgbalẽvia me ko esime nèle hacker la ƒe dɔdzikpɔdɔwo gblẽm le Meta Ads Manager alo Google Ads me la, mɔ̃a ayi edzi anɔ hacker la ƒe boblododowo subɔm vaseɖe esime wò Billing Threshold ($500 be $2,000) ɖo, le ɣeyiɣi sia me la, fe si woxena la dzi ɖena kpɔtɔna eye wò boblododo ƒe akɔnta gena ɖe "Akɔntabubu ƒe Vodada: Susu si Womekpɔ O / Nuwɔametɔe na Fexexe si Do kpo nu." - Le Meta Ads Manager me: Yi https://business.facebook.com/billing_hub/payment_settings -> tia wò Ad Account tso nusiwo le fli dzi -> yi Account gazazã ƒe seɖoƒe -> zi Three Dots (...) -> Ðo seɖoƒe (alo Trɔ) -> ƒomevi ** .0.01** (alo 1.00, le ga suetɔ nu) -> zi Dzra ɖo dzi. Enumake ga si nèzãna fifia wu $0.01, Meta ƒe boblodododɔwɔƒea tɔa te boblododowo katã ɖoɖo ɖe dɔdzikpɔha ɖesiaɖe si le akɔnta ma me, ne ŋɔŋlɔdzesi alakpatɔ aɖe gaʋu dɔdzikpɔƒea ƒe tɔtrɔ ake gɔ̃ hã. - Le Google Ads me: Ne wò akɔnta zãa asifexexe alo dɔdzikpɔha ƒe gazazãwo la, tia dɔdzikpɔhawo katã -> zi Trɔ asi le -> Trɔ gazazãwo -> ɖo ɖe ** .$0.01/day**, eye nàtɔ te dɔdzikpɔhawo katã.

--- .

Akpa 2: Meta Business Suite me ƒe megbeʋɔtru ɣaɣlawo kɔklɔ (business.facebook.com) .¶

Ne infostealer gblẽ Facebook ƒe nɔnɔmetata si si dɔdzikpɔkpɔ ƒe gomenɔamesi le ɖe Meta Business Portfolio (si woyɔna tsã be Facebook Business Manager) ŋu la, amedzidzela la wɔa scripted persistence playbook to Meta Graph API dzi le sɛkɛnd 15 teti me. Ne èlé ŋku ɖe Asitsatsa ƒe Ðoɖowo -> Amewo ŋu ko eye nèɖe ŋkɔ wɔnuku si nèkpɔ la ɖa la, hacker la akpɔ ŋusẽ ɖe wò boblododo akɔnta dzi kokoko le miniti 5 megbe.

Ele be nàdzro xɔ adeawo katã me ahakɔ wo ŋu le Meta Asitsatsa ƒe Ðoɖowo (https://business.facebook.com/settings):

1. Akpa 1: Asitsanyawo ƒe Dɔwɔƒe "Zãlawo -> Amewo" (Kple Amekpekpe Siwo Le Lalam)¶

1. Ʋu Asitsatsa ƒe Ðoɖowo -> Zãlawo -> Amewo.
2. Zi ame ɖekaɖeka ɖesiaɖe si woŋlɔ ŋkɔ na dzi eye nàkpɔe ɖa be:
3. Woƒe email adrɛs: Amedzidzelawo kpea email si ɖi wo nɔewo (abe... support-meta-verify@hotmail.com alo wò dɔwɔhati ƒe ŋkɔ si woŋlɔ vodadatɔe vie) si ŋu Full Control (Business Admin) ƒe mɔɖeɖewo le.
4. Kpekpeɖeŋu siwo le lalam: Zi Pending filter tab si le Amewo ƒe xexlẽdzesiwo tame dzi. Hackers wɔa amekpekpe ƒe kadodo 2 alo 3 ɣesiaɣi (fb.me/...) ɖo ɖe burner emails ale be ne ètutu woƒe active admin account la, ɖeko woazi pending invite link dzi le gaƒoƒo 2 megbe eye woagawɔ ɖeka abe Full Admin ene. Te fli ɖe amekpekpe ɖesiaɖe si le lalam la me enumake.
5. Wò Ŋutɔ ƒe Dɔ: Kpɔ egbɔ be wò ŋutɔ wò akɔnta gakpɔtɔ le Dziɖuɖu Blibo -> Dzra toggled ON. Ne hacker la wɔ profile evelia si dze abe ɖe wòle se nu ene eye wòɖiɖi wò ɖe Partial Access (Basic) la, màkpɔ "Remove" ƒe dzesi si le woƒe ŋkɔ xa o vaseɖe esime Meta Support gbugbɔ wò admin hierarchy ɖo anyi.

2. Akpa 2: "Zãlawo -> Dɔwɔɖoɖo Zãlawo" (The #1 Invisible API Backdoor)¶

Esiae nye megbeʋɔtru si me afɔku le wu eye woŋea aɖaba ƒua edzi le Meta Business Suite: - Nusi Meta System User nye: Meta ɖe mɔ na asitsalawo be woawɔ virtual, non-human accounts si woyɔna be System Users (le Business Settings -> Users -> System Users te) be woana servers kple software nakpɔ boblododowo dzi to API token siwo nɔa anyi didi dzi evɔ mahiã be woa ŋutɔwo nawɔ Facebook ƒe gege ɖe eme alo 2FA o. - Alesi hackers zãnɛ le mɔ gbegblẽ nu: Ne amedzidzela la nya xɔ wò web-browser ƒe ɣeyiɣia ko la, wowɔa Admin System User (si woyɔna zi geɖe be nane si me afɔku mele o abe "Shopify Pixel Sync", "Meta Conversions API", "Catalog Manager", alo "Business Integration"), dea dɔ asi na wò Ad Account (Full Control: Manage Campaigns & View Performance) kple Facebook Page abe nunɔamesiwo na System User ma ene, eye nàzi Generate New Token dzi. - Nusita wòwua ame: Ne èɖe hacker la ɖa le Amewo me, trɔ wò Facebook nyagbegbɔgblɔ, eye nèʋu hardware security key hã la, System User API ƒe dzesi ma gakpɔtɔ le dɔ wɔm 100% le hacker la ƒe server eye wòɖea mɔ na wo be woawɔ campaigns, ado gazazãwo ɖe dzi, eye woatsɔ admin yeyewo akpe ɖe eŋu le didiƒe to Graph API dzi. - Alesi woawɔ akɔ eŋu: 1. Yi Asitsatsa ƒe Ðoɖowo -> Zãlawo -> Dɔwɔɖoɖo Zãlawo. 2. Tia System User ɖesiaɖe si mède dzesii tẽ o -> zi Revoke Tokens dzi le ɖusime le etame -> ɖe Assigned Assets (Ad Accounts, Pages, Pixels) katã ɖa -> tutu alo ɖe mɔɖeɖewo ɖa le System User la si.

3. Akpa 3: "Zãlawo -> Dɔwɔhatiwo" (Asitsatsa ƒe Dɔwɔƒe si le egodo ƒe Kadodo) .¶

1. Yi Asitsatsa ƒe Ðoɖowo -> Zãlawo -> Dɔwɔhatiwo.
2. Kpɔ "Hɔwɔhati siwo woama nunɔamesiwo kplii te." Amedzidzelawo wɔa woawo ŋutɔ ƒe Asitsatsa ƒe Dɔwɔƒe si woate ŋu atsɔ aƒu gbe ɖe akɔnta si wofi dzi eye wotsɔa woƒe Habɔbɔ ƒe Asitsa ID doa ka kple wò Asitsanyawo ƒe Dɔwɔƒe, si naa woƒe gotagome dɔwɔƒea kpɔa ŋusẽ blibo ɖe wò Boblododo ƒe Akɔntabubu kple Facebook Axa dzi.
3. Zi Partner Business ɖesiaɖe si womede dzesii o dzi -> zi Trash Can / Remove Partner ƒe dzesi dzi be nàtso nunɔamesi ƒe tɔdzisasrãa enumake.

4. Xɔ 4: Direct Ad Account "Non-Asitsatsa" Admins (Accounts -> Ad Accounts) .¶

Meta ɖe mɔ be woatsɔ ame ɖekaɖekawo ƒe Facebook nyatakakawo akpe ɖe Ad Account ŋu tẽe ne womenye dziwòla ƒe Asitsanyawo ƒe Dɔwɔƒe me tɔwo o gɔ̃ hã: 1. Yi Asitsatsa ƒe Ðoɖowo -> Akɔntabubuwo -> Boblododo ƒe Akɔntabubuwo -> tia wò Boblododo ƒe Akɔntabubu. 2. Kpɔ Amewo ƒe tab si le ɖusime eye nàɖe zãla ɖesiaɖe si womenya o si si Manage Ad Account alo Manage Campaigns ƒe mɔɖeɖewo le la ɖa. 3. Azɔ hã ʋu classic Ads Manager ƒe Ðoɖowo (https://adsmanager.facebook.com/adsmanager/manage/accounts/settings) -> yi Ad Account Roles, afisi ame ŋutɔ ƒe nyatakaka siwo wokpe to Facebook Xɔlɔ̃ ƒe kadodo xoxowo dzi la adze le, eye nàzi **Ðe ** ɖa le amedzro ɖesiaɖe xa.

5. Akpa 5: Se Siwo Wowɔna Le Wo Ðokui Si (Ads Manager -> Automated Rules) .¶

Nukatae ameflunya siwo wotɔ vie la trɔa wo ɖokui ɖe megbe ON le ŋdi ga 3:00 me le akunyawɔwɔ me? - Amedzidzelawo wɔa Automated Rule le Meta Ads Manager me (https://adsmanager.facebook.com/adsmanager/rules/manage) si wowɔ ɖoɖo ɖe eŋu kple nɔnɔme si nye: - Ne Wotɔ te Dɔwɔna ƒe Nɔnɔme -> Afɔɖeɖe: Trɔ Dɔwɔna & Dzi Gbesiagbe Gazazã Dzi Ðe Edzi 50%, Du Aɖabaƒoƒo 30 Ðesiaɖe. - Ʋu Automated Rules le Ads Manager me eye Tutu se ɖekaɖeka ɖesiaɖe si wowɔ le nugblẽfexexe ƒe fesrea me.

6. Akpa 6: Ame ŋutɔ ƒe Facebook Nyatakaka "Asitsatsa ƒe Ðekawɔwɔ" & Active Sessions¶

Elabena wotoa wò ŋutɔ wò Facebook nyatakaka dzi kpɔa wò Meta Business Portfolio: 1. Ʋuʋu https://www.facebook.com/settings?tab=business_tools (Ðoɖowo -> Asitsatsa ƒe ƒoƒo ɖekae), ɖe OAuth dɔwɔɖoɖo ɖesiaɖe si womede dzesii o ɖa kple manage_ads alo ** .business_management** mɔɖeɖewo, eye nàdo le kplɔ̃dzi ɣeyiɣi siwo katã mènya o me le Meta Accounts Center (accountscenter.facebook.com/password_and_security/login_activity).

--- .

Akpa 3: Mekɔklɔ le megbeʋɔtru ɣaɣlawo me le Google Ads me (ads.google.com) .¶

Ne ŋɔdzidonamewɔla aɖe gblẽ Google Ads ƒe akɔnta me (zi geɖe la, be wòawɔ boblododo siwo dia aʋatsonuwo NordVPN, . Ledger Live, . Zoom, . AnyDesk, alo QuickBooks phishing downloads zã wò boblodolawo ƒe akɔtagbalẽvi si ŋu woɖo kpee), wotsɔa kutrikuku dea teƒe ene koŋ Google Ads ƒe ŋgɔdonya me:

1. Kpɔ "Access kple Dedienɔnɔ -> Zãlawo" KPL "Dzikpɔlawo (MCC)" .¶

1. Le Google Ads me la, zi Admin (alo Dɔwɔnuwo kple Ðoɖowo) -> Mɔɖeɖe kple dedienɔnɔ dzi.
2. Tab 1 lia (Users): Kpɔ e-mail adrɛs ɖesiaɖe si woŋlɔ ɖe Zãlawo te eye nàde dzesi "Pending invitations" le etame. Te fli ɖe zãla ɖesiaɖe si womede dzesii o alo amekpekpe si le lalam la me enumake.
3. Tab 2 lia (Managers - Google Ads Backdoor #1): Zi Managers ƒe tab si le Zãlawo xa tututu dzi.
4. Amedzidzelawo doa ka kple woawo ŋutɔ ƒe Google Ads Manager Account (MCC - Nye Asitsaƒe) abe wò Google Ads akɔnta ƒe Dɔdzikpɔla ene.
5. Zãla si léa ŋku ɖe... Users tab kpɔa woawo ŋutɔ ƒe e-mail adrɛs ko eye wòtsɔnɛ be akɔntabubua le dzadzɛ, evɔ hacker ya kpɔa akɔnta bliboa dzi tso... Managers tab.
6. Zi Remove access (Unlink) dzi le Manager Account ɖesiaɖe si womede dzesii o xa enumake.
7. Tab 3 lia (Security -> Allowed Domains): Kpɔe ɖa be amedzidzela la tsɔ domain alakpatɔ aɖe kpee hã (abe @mail.ru, . @proton.me, alo domenyinyi si woate ŋu atsɔ aƒu gbe) yi wò Domenyinyi Siwo Ŋu Woɖe Mɔ Ðe ƒe xexlẽdzesi me.

2. Tsɔ "Google Ads Scripts" kple "Automated Rules" vɔ̃ɖiwo ɖa.¶

Google Ads ƒe akpa aɖewoe nye JavaScript ƒe nuwo wɔwɔ le wo ɖokui si ƒe mɔ̃ sesẽ aɖe si woyɔna be Google Ads Scripts: 1. Yi Dɔwɔnuwo kple Ðoɖowo (alo Nuwɔna gbogbo aɖewo) -> Scripts. 2. Hackers tsɔa JavaScript payload si ƒe fli 40 dea Scripts si woɖo be wòawɔ dɔ Gaƒoƒo ɖesiaɖe me. Script ma ɖea woƒe ameflunyawo ɖa le eɖokui si, etutua wò nya vevi gbegblẽwo, doa wò gbesiagbe gazazã ɖe dzi va ɖoa... $5,000, eye ate ŋu azã Google tɔ gɔ̃ hã UrlFetchApp be nàtsɔ wò akɔnta ƒe nɔnɔme aɖo gotagome sedede kple dziɖuɖu ƒe dɔwɔƒe. 3. Tɔwɔ nu eye nàtutu ŋɔŋlɔdzesi ɖesiaɖe si womede dzesii o, emegbe nàʋu Nuwɔna Agbɔsɔsɔ -> Sewo (Se Siwo Wowɔ Le Wo Ðokui Si) eye nàtutu se ɖesiaɖe si woɖo be wòana dɔdzikpɔdɔwo nawɔ dɔ alo atrɔ gazazãwo.

3. Kpɔ "Ad Customizers, Account-Level Tracking Templates, kple Google Asitsalawo ƒe Dɔwɔƒe ƒe Kadodowo".¶

Ne amedzidzela aɖe mewɔ dɔ yeye aɖeke kura o hã la, dɔwɔƒe siwo do ƒome kplii deŋgɔwo wɔa "Silent URL Hijack" ɖe wò fifi dɔdzikpɔha siwo le se nu dzi: 1. Yi Admin / Settings -> Account Settings -> Tracking eye nàlé ŋku ɖe Tracking template kple Final URL suffix ŋu. Amedzidzelawo doa mɔfiame ƒe script ɖe afisia ale be ne wozi wò adzɔnu ƒe boblododo siwo le se dzi dzi la, etrɔa mɔ na ezãlawo le ɖoɖoezizi me to affiliate lander alo malware drop vɔ̃ɖi aɖe dzi. 2. Kpɔ Nyatakakawo Dzikpɔla / Akɔntabubu Siwo Do Ƒome Kplii (Google Merchant Center, . YouTube, . Google Analytics 4) eye nàɖe kadodo ɖa le duta Asitsalawo ƒe Dɔwɔƒe ƒe nuɖuɖu ɖesiaɖe si amedzidzela si kpe ɖe eŋu la ŋu be wòawɔ Asiƒleƒe ƒe boblododo siwo me ameflunyawo le.

--- .

Akpa 4: Alesi woawɔ axɔ admin ƒe mɔɖeɖe eye woagbugbɔ ga 100% tso Meta kple Google gbɔ¶

Nenye be èganye Admin si le ŋku lém ɖe eŋu $8,000 le fe siwo ŋu womeɖe mɔ ɖo o me alo wonya wò le wò ŋutɔ wò Meta Business Portfolio / Google Ads akɔnta me keŋkeŋ, wò gagbugbɔɖoɖo ƒe mɔɖeɖe nɔ te ɖe ʋɔnudrɔ̃ƒe ƒe agbalẽvi si woɖo ɖe ɖoɖo nu si ɖo kpe edzi be gazazãa dzɔ tso ɣeyiɣi si me wogblẽ nu le me tsɔ wu be wòanye dɔwɔla ƒe vodada me.

1. Ʋɔnudrɔ̃ƒe ƒe kpeɖodziwo ƒe kplɔ̃ si wobia (Ƒo esia nu ƒu hafi nàtsɔ wò tikiti aɖo ɖa) .¶

2. Official Meta Business Suite nugblẽfexeɖoɖo & gagbugbɔɖoɖo escalation mɔwo¶

Le wò mɔɖeɖe ƒe seƒe si nèle fifia nu la, zã Meta ƒe dzidziɖedzimɔ siawo siwo dziɖuɖua da asi ɖo (mègaka ɖe ame etɔ̃lia ƒe "gaxɔlawo" dzi gbeɖe le nyaŋuɖoɖo alo DMwo me o):

1. Mɔ A (Ne Ègakpɔtɔ Kpɔ Meta Business Account Alo Ad Account Aɖeke):
2. Ʋu Meta Asitsatsa Kpekpeɖeŋunaƒe (https://www.facebook.com/business/help/support), yi anyime, eye nàzi Ka Ðe Boblododo Kpekpeɖeŋunana dzi. Tia wò Ad Account (act_...), tia "Wogbã nye boblododo ƒe akɔnta / fe siwo ŋu womeɖe mɔ ɖo o le asinye", eye nàʋu Dze dzeɖoɖo kple teƒenɔla alo Email Kpekpeɖeŋu.
3. Ʋu Meta Billing Hub hã (https://business.facebook.com/billing_hub/transactions), zi ametafatafa ƒe adzɔxegbalẽvi ƒe asitsatsa ID ɖesiaɖe dzi, eye nàtia "Nya nya ta tso kuxi aɖe ŋu / Tsitre le fe sia ŋu -> Dɔwɔna si ŋu womeɖe mɔ ɖo o alo esi woge ɖe eme."
4. Mɔ B (Ne Hacker la Nya Wò Le Wò Dɔwɔƒe ƒe Dɔwɔƒe Kple Facebook Axa):
5. Gbã la, ƒu du personal account compromise workflow le https://www.facebook.com/hacked ne woda le wò ŋutɔ wò nyatakakawo dzi.
6. Evelia, ʋu Meta Business Support Pro Chat tso dɔwɔhati alo dɔwɔƒe aɖe ƒe hadɔwɔla ƒe akɔnta si tsi agbe me eye nàgblɔ Admin Takeover (ATO) le wò Dɔwɔƒe ƒe Dɔwɔƒe ƒe ID, Axa ID, kple Ad Account ID (act_...). Tsɔ PDF nyatakaka si wode asi ete la kpe ɖe dɔwɔƒea ƒe lɛta ƒe ta ŋu (si me dziɖuɖu ƒe ID kple asitsadɔ ƒe dɔwɔnu/ŋkɔŋlɔɖi si sɔ kple Asitsatsa ƒe Kpeɖodzi) si me woŋlɔ aƒetɔ si le se nu ƒe Facebook Profile URL kple e-mail si woagbugbɔ aɖo abe Full Admin ene.
7. Mɔ C (Ne Wofi Wò Gaxɔgbalẽvi Eye Wozãe Le Amedzro aɖe ƒe Meta Ad Account Me):
8. Ne èkpɔe FACEBK *XXXXXXXXXX fe siwo woxena ɖe wò kaɖi ƒe nyatakaka dzi la, lé ŋku ɖe wò ŋutɔ wò Meta Ads Manager ŋu gbã. Ne wò ŋutɔ wò Ad Account ɖee fia $0.00 zãe la, wofi wò kaɖi ƒe xexlẽdzesi ŋutɔ eye wotsɔe do ƒome kple amedzro aɖe ƒe Facebook Ad Account me. Tsɔ nya ɖe nutsotsoawo ŋu enumake be wonye Stolen Card Fraud kple wò gadzraɖoƒe eye nàtsɔ ŋɔŋlɔdzesi 10 la aɖo ɖa FACEBK * code si le Meta ƒe Fexexe Siwo Meɖe Mɔ Na O ƒe Agbalẽvi (https://www.facebook.com/help/contact/1937556639801443).

3. Official Google Ads nugblẽfexeɖoɖo & gagbugbɔɖoɖo escalation mɔ¶

1. Kpe Google ƒe Akɔntabubu ƒe Dedienɔnɔ Ŋuti Numekuku (https://myaccount.google.com/security-checkup), te fli ɖe mɔ̃ siwo womenya o me le myaccount.google.com/device-activity, eye nàtu 2-Step Verification ɖe wò telefon si le dzadzɛ la dzi.
2. Miɖo Google ƒe Google Ads Account Escalation Form si woɖo ɖi (https://support.google.com/google-ads/answer/9355975 -> "Gblɔ akɔntabubu ƒe dɔwɔna si ŋu womeɖe mɔ ɖo o").
3. Ʋu Admin -> Trɔ ŋutinya (ads.google.com/aw/changehistory), tsɔ CSV si ɖe ɣeyiɣi ƒe dzesi si tututu fia esime wotsɔ dɔdzikpɔha, gazazã, alo zãla siwo ŋu womeɖe mɔ ɖo o kpee la ɖe duta, eye nàtsɔe akpe ɖe wò tikiti ŋu. Google ƒe Account Security & Billing Trust Team atɔ te akɔntabubua hena ɣeyiɣi aɖe hena ametakpɔkpɔ, akɔ amedzidzela ƒe dɔdzikpɔhawo ŋu, akɔ ɖoɖo ɖesiaɖe si wowɔ le sedzidadaa me ɖa, eye wòana Compromised Account Credit / Refund le dɔwɔŋkeke 3 va ɖo 10 me.

--- .

Akpa 5: Dɔwɔƒewo dzadzraɖo kple wo sesẽ ɖe boblododo ƒe akɔntabubuwo xɔxɔ le etsɔme ŋu¶

Zi geɖe la, wodzea asitsatsa dɔwɔƒewo kple gɔmeɖolawo dzi zi evelia le gaƒoƒo 72 megbe le wo gbugbɔgaɖoanyi megbe elabena wometutu infostealer malware la ɖa le Windows PC alo Mac si me wofi session cookie le la dzi kpɔ o.

1. Alesi "Aʋatso Meta Nutata ƒe Gomenɔamesi Nyatakaka / Ðoɖowo Dzi Dada" Mɔxexeɖedɔa wɔa dɔe¶

Afɔku ƒe ƒuƒoƒo siwo le taɖodzinu ɖom ɖe Meta Business Suite (Ducktail, . NodeStealer, . VietCredCare, . Lumma Stealer) ɖo gbedasi kpata siwo gblɔ be woatutu wò Axa alo Boblododo ƒe Akɔntabubu le gaƒoƒo 24 megbe ɖe Nunya ƒe Nuwo Dzi Dada ta, atsɔ aɖo kadodo ɖe nudzraɖoƒe si wotsɔ nyagbe ɣaɣla ta (Case_ID_883920.zip). Le eme la, woate ŋu awɔ nusi woɣla (Copyright_Evidence.pdf.exe alo .scr) alo futɔ-si-le-titina (Evilginx) megbedede-teƒenɔla ƒe kadodo. Ne wonya wɔe ko la, malware la ɖea Chrome/Edge SQLite ƒe ɣeyiɣi ƒe cookies kple Facebook Graph API ƒe dzesiwo (EAAB...), biabia graph.facebook.com/v19.0/me/adaccounts enumake be woaɖe tsi le dɔwɔƒewo ƒe agbalẽvi siwo ŋu seɖoƒe lolo le ŋu.

2. The 4-se dɔwɔƒe ad-akɔnta ɖekaɖeka xɔtuɖaŋu¶

1. Clean OS Reinstall on Infected Workstations: PC alo Mac ɖesiaɖe si ʋu ɖikeke aɖe .zip, . .rar, . .exe, alo .dmg ele be woawɔ eƒe ʋua ƒe ɖoɖo eye woagbugbɔ Windows/macOS aɖo ɖe eme tso USB ʋu dzadzɛ si wowɔ ɖe mɔ̃ bubu dzi.
2. Dedicated Virtual Credit Cards With Hard Daily Caps: Mègatsɔ dɔwɔƒe ƒe gaxɔgbalẽvi alo gaxɔgbalẽvi gbãtɔ si ŋu womede se ɖo o la do ƒome kple Meta alo Google Ads tẽ gbeɖe o. Na Virtual Credit Card si wotu ɖe asitsala gbɔ (Ramp, . Brex, . Wise, . Amex Virtual, . Privacy.com) ƒe seɖoƒe na wò gbesiagbe boblododo ƒe gazazã si sɔ pɛpɛpɛ kpe ɖe 20 le alafa me ŋu. Ne wò dɔwɔƒea zãa ga $200/day, a $250/day hard card cap la tɔ te a $10,000/hour hack le $251 le eɖokui si.
3. "Vault Admin" vs. "Daily Media Buyer" Dɔwɔwɔ ƒe Mamã: Na Full Admin / Ganyawo Dzikpɔkpɔ nanɔ Vault akɔnta eve tɔxɛ siwo wotsɔ FIDO2 hardware dedienɔnɔ safui ŋutɔŋutɔwo dedie (YubiKey) si megena ɖe gbesiagbedɔwo ƒe kɔmpiutadziɖoɖowo dzi gbeɖe o. Na gbesiagbe dɔwɔlawo ƒe akɔntabubuwo ko Manage Campaigns (Standard) mɔɖeɖewo ale be cookie si wofi mate ŋu atsɔ admins akpe ɖe eŋu alo atrɔ fexexe o.
4. Browser ƒe nɔnɔmetata si woɖo ɖi si me kekeɖenudɔ zero le: Ge ɖe Meta Business Suite kple Google Ads me le Chrome/Edge ƒe nɔnɔmetata si woɖo ɖi si me ame etɔ̃lia ƒe VPN, PDF, alo AI ƒe kpeɖeŋutɔ zero le la me.

--- .

Nutome ƒe xexlẽdzesi siwo ku ɖe nudzɔdzɔ kpatawo ŋu kple dɔwɔƒea ƒe ɖoɖowo¶

Ne boblododo ƒe fe siwo ŋu womeɖe mɔ ɖo o na wò dɔwɔƒe ƒe gakɔntawo me tsi la, gblɔ kɔmpiuta dzi nuvlowɔwɔa na wò dukɔa ƒe sedzikpɔlawo ƒe nyatakakadzraɖoƒe be nàwɔ Kpovitɔwo / Internet dzi Nuvlowɔwɔ Ŋuti Nuŋlɔɖi Xexlẽdzesi si dziɖuɖua da asi ɖo na wò gadzraɖoƒe kple mɔ̃dzikpɔƒe ƒe dzidziɖedzi:

• United States: Tsɔ nya ɖe FBI Internet dzi Nuvlowɔwɔ Ŋuti Nyatoƒoetoto Dɔwɔƒe (ic3.gov) kple FTC (ReportFraud.ftc.gov). Yɔ Dukɔa ƒe Dzɔdzɔmenuwo Dzraɖoƒe ƒe Sedede E (12 CFR § 1005.6) na nuƒlelawo ƒe debit/ACH ƒe tsidzɔƒewo alo Fair Credit Billing Act (FCBA, . 15 U.S.C. § 1666) na gaxɔgbalẽviwo; le dɔwɔƒewo ƒe ACH debits gome la, bia enumake R29 tɔtrɔgbɔ si ŋu womeɖe mɔ ɖo o le gaƒoƒo 24 me le NACHA ƒe Dɔwɔɖoɖowo nu. Xexlẽdzesi kpata: 911.
• Canada: Nyatakaka na Canada ƒe Ametafatafa Ŋuti Dɔwɔƒe (antifraudcentre-centreantifraude.ca, . 1-888-495-8501) kple Canada ƒe Internet Dzi Dedienɔnɔ Dɔwɔƒe (cyber.gc.ca). Xexlẽdzesi kpata: 911.
• United Kingdom: Nyatakaka na Action Fraud (actionfraud.police.uk, . 0300 123 2040) eye nàdze Dukɔa ƒe Internet Dzi Dedienɔnɔ Dɔwɔƒe (ncsc.gov.uk) mɔfiame. Yɔ UK Fexexe Dɔwɔƒe ƒe Sedede 2017 kple wò gadzraɖoƒe hena asitsatsa ƒe ga si ŋu womeɖe mɔ ɖo o ƒe gagbugbɔɖoɖo enumake. Xexlẽdzesi kpata: 999 alo 112 (kpovitɔ siwo menye kpata o: 101).
• Europa Dukɔwo ƒe Habɔbɔ: Ka nya ta na wò dukɔa ƒe CERT / CSIRT kple kpovitɔwo ƒe Internet dzi nuvlowɔwɔ ƒe dɔwɔƒe, eye nàyɔ EU Revised Payment Services Directive (PSD2, Mɔfiame (EU) 2015/2366, Se 73) si bia tso fexexe ƒe dɔwɔƒewo si be woagbugbɔ ga na asitsatsa siwo ŋu womeɖe mɔ ɖo o hafi dɔwɔŋkeke si kplɔe ɖo nawu enu (T+1). Xexlẽdzesi kpata: 112.
• Australia kple New Zealand: Le Australia la, ka nya ta to Australia Internet dzi Dedienɔnɔ Dɔwɔƒe (cyber.gov.au / ReportCyber, . 1300 292 371). Le New Zealand la, ka nya ta na CERT NZ (cert.govt.nz, . 0800 237 869) kple Netsafe (netsafe.org.nz). Xexlẽdzesi siwo woxɔna le nudzɔdzɔ kpatawo me: 000 (Australia), 111 (New Zealand).
• India kple Asia-Pacific: Le India la, ka nya ta tso ganyawo ƒe Internet dzi tsiwo ŋu enumake le cybercrime.gov.in alo nàƒo ka na ** .1930** le dɔwɔŋkeke 3 me le RBI Zero-Liability Circulars te. Le Singapore la, te ɖe SPF ƒe Ameflunyawo Gbɔkpɔƒe (1800-722-6688) kple SingCERT (csa.gov.sg). Kpɔ ɖa xexlẽdzesi siwo wozãna kpata.

--- .

Nya siwo wobiaa amewo enuenu¶

Nukatae wòle be malala atsɔ gaxɔgbalẽvi axɔ le gaxɔgbalẽvi dzi le se nu ne nye Meta alo Google Ads akɔnta nye tɔnye vevie?¶

Ne ède se na wò gadzraɖoƒe be wòazi gaxɔgbalẽvi dzi gaxɔgbalẽvi le se nu le Meta Platforms alo Google LLC si ɖe fe siwo woxe le wò ŋutɔ wò Asitsahabɔbɔ alo Google Ads akɔnta si le dɔ wɔm me ta la, mɔ̃a ƒe afɔkumɔ̃ si wowɔna le wo ɖokui si la bua wò asitsahabɔbɔa abe gagbugbɔgaxɔ ƒe afɔku ene eye wòwɔa wò Ad Account, Business Portfolio, Facebook Page, Instagram Shop, alo Google Merchant Center nuwɔametɔe enumake. Ne ètu wò kaɖia be nàtɔ te fe yeyewo gbã, nàna wò gadzraɖoƒea nanya be yele asitsalawo ƒe ametafatafa ƒe gaxɔgbalẽvi lalam, eye nètsɔ Compromised Ad Account tikiti si dziɖuɖua tsɔ de asi na Meta alo Google Support tẽ la, mɔ̃a ƒe dedienɔnɔ ƒe ƒuƒoƒoa ɖea ga si susɔ si womexe o la ɖa eye wògbugbɔa ga si nèxe la na wò esime nèle wò gakɔntawo dzi kpɔm. Ne mɔ̃a gbe wò nugblẽfexexe ƒe nya alo ne wozã wò kaɖia le amedzro aɖe ƒe akɔnta si menye tɔwò o me ko hafi nàgaxɔ ga le gadzraɖoƒea tegbee.

Aleke amedzidzela la wɔ tsɔ admin alakpatɔ kpe ɖe nye Meta Business Suite ŋu esime meʋu Two-Factor Authentication?¶

Le egbegbe nɔnɔme ɖesiaɖe kloe me la, amedzidzela la mezã wò ŋkɔ kple nyagbe si nèzãna tsɔ ge ɖe eme o. Ke boŋ wò alo dɔdzikpɔla bubu si le wò Asitsanyawo Gbɔkpɔƒe la wɔ infostealer faɛl aɖe si wotsɔ ɣla abe PDF alo zip attachment ene le Windows alo Mac kɔmpiuta dzi, ède Chrome ƒe kpeɖeŋutɔ si ŋu wogblẽ nu le la wò kɔmpiuta dzi, alo nège ɖe futɔ si le titina ƒe ameflunyawo ƒe kadodo aɖe me. Esi wònye be wò web-browser dzraa session cookie si ŋu woɖo kpee ɖo ne èto 2FA me vɔ ta la, cookie ma fifi ana amedzidzela la te ŋu yɔa Meta tɔ `business_users` alo `system_users` nuwuƒe si meʋã 2FA ƒe nyabiase yeye aɖeke o.

Meɖe hacker la ɖa le "Amewo" me le Meta Business Settings me, eyata nukatae ametafatafa yeyewo gakpɔtɔ le dzedzem?¶

Ðeko amedzidzela la ɖeɖe ɖa le Amewo ƒe tab la me la, ɖeko wòtutua woƒe ame ŋutɔ ƒe nyatakakawo ƒe zikpui si wokpɔna. Amedzidzelawo léa dziɖuɖu si nɔa anyi ɖaa me ɖe asi to megbeʋɔtru etɔ̃ ɣaɣla siwo le Meta Asitsatsa ƒe Ðoɖowo me dzi: gbãtɔ, **Zãlawo -> Dɔwɔɖoɖo Zãlawo**, afisi wowɔa API ƒe mɔɖeɖe ƒe dzesi si womekpɔna o si ƒe ɣeyiɣia mede o si wode asi na wò Ad Account; evelia, **Zãlawo -> Dɔwɔhatiwo**, afisi woama wò Ad Account ƒe nunɔamesiwo kple gotagome Partner Business ID si dzi wokpɔna; eye etɔ̃lia, **Akɔntabubuwo -> Boblododowo ƒe Akɔntabubuwo -> Amewo**, afisi woate ŋu atsɔ ame ŋutɔ ƒe nɔnɔmetata akpe ɖe boblododo ƒe akɔnta ŋu tẽ le Asitsanyawo ƒe Dɔwɔƒe ƒe xexlẽdzesi vevitɔa godo. Ele be nàkɔ teƒe etɔ̃awo katã ŋu eye nàtutu Se siwo wowɔ le wo ɖokui si ɖesiaɖe si le Ads Manager me la ɖa.

Hacker la ƒe boblododowo da le "Circumventing Systems" ƒe ɖoɖowo dzi eye wòna wodzudzɔ nye akɔnta. Ðe mate ŋu axɔ mɔxexeɖedɔa nua?¶

Ẽ, ne ètsɔ nyagbugbɔgadrɔ̃ to Akɔntabubu si Wogblẽ ƒe dɔwɔwɔ ƒe ɖoɖoa dzi tsɔ wu be nàtsɔ nyagbugbɔgadrɔ̃ si ku ɖe ɖoɖo si wowɔna le mɔ gbadza nu ŋu aɖo ɖa ko. Ne amedzidzela aɖe do boblododo siwo nye ameflunyawo alo kɔmpiutadziɖoɖo gbegblẽwo ɖe wò akɔnta si nèxɔ le amewo si la, bot siwo wowɔna le wo ɖokui si la tɔa akɔntabubua enumake ne woda le ɖoɖowo dzi. **Akɔntabubu Dɔwɔna si Ŋu Womeɖe Mɔ Na O / Asitsanyawo ƒe Akɔntabubu si Woge Ðe Eme** ƒe agbalẽvi si dzi UTC ƒe gege ɖe eme ƒe ɣeyiɣi ƒe dzesi siwo sɔ ɖo la ɖoɖo ɖa la, eɖoa wò tikiti ɖe Akɔntabubu ƒe Dedienɔnɔ ƒe ƒuƒoƒoa gbɔ gbã; ne Security nya ɖo kpe edzi be woda le sea dzi ko la, woɖea ɖoɖoa ƒe mɔxexeɖedɔa ɖa eye wogbugbɔa wò akɔntabubua ɖoa anyi.

Ke ne mekpɔe ya ɖe FACEBK * alo GOOGLE *ADS fe siwo woxena ɖe nye gadzraɖoƒegbalẽvi dzi, gake boblododo ƒe akɔnta mele asinye oa?¶

Ema fia be wofi wò kaɖi ƒe xexlẽdzesi ŋutɔŋutɔ alo esi wowɔna ŋutɔŋutɔ le gotagome sedzidada aɖe me eye ametafakala aɖe tsɔe do ƒome kplii le woawo ŋutɔ ƒe Facebook alo Google Ads akɔnta si me ameflunyawo le me. Esi wònye be wometsɔ wò dɔwɔƒe kple wò ŋutɔ wò nyatakakawo kpe ɖe fiafitɔa ƒe boblododo ƒe akɔnta ŋu o ta la, ƒo ka na wò gadzraɖoƒe ƒe ametafatafa dɔwɔƒea enumake be nàte fli ɖe kaɖia me, tsɔ ga si nèxɔ tso wo zazã si ŋu womeɖe mɔ ɖo o la ɖo enumake le Zero Liability te, eye nàtsɔ ŋɔŋlɔdzesi 10 ƒe asitsatsa ŋuti kɔpi la aɖo ɖe Meta alo Google ƒe fexexe ƒe agbalẽvi si womede dzesii o la dzi.

--- .

Mɔfiame siwo do ƒome kplii¶

• Hadomegbenɔnɔ ƒe nyatakakadzraɖoƒewo ƒe akɔntabubu kple wo xɔxɔ
• Wɔla ƒe mɔ̃ si woxɔ le amewo si to crypto scam livestreams dzi
• Hadomegbenɔnɔ ƒe nyatakakadzraɖoƒewo ƒe ametafatafa kple ameɖokuiwɔwɔ ƒe ametafatafa
• Nyaʋiʋli siwo ku ɖe gaxɔgbalẽviwo ƒe fexexe ŋu, ACH ƒe gaxɔgbalẽvi siwo ŋu womeɖe mɔ ɖo o, kple Sedede E
• Xexlẽdzesi siwo woatsɔ awɔ nudzɔdzɔ kpatawoe

--- .

Dzɔtsoƒewo kple dziɖuɖumegãwo ƒe mɔfiame¶

• Meta Asitsahawo ƒe Kpekpeɖeŋunaƒe (Meta Platforms, Inc.): Dze Meta Asitsanyawo ƒe Dɔwɔƒe si Wogblẽ Nu le Kple Boblododo ƒe Akɔntabubu Ta (facebook.com/business/help), Dzra Dɔwɔɖoɖo Zãlawo Dzi eye Trɔ Asi Le Mɔɖeɖe Dzesiwo Me le Asitsatsa ƒe Ðoɖowo Me, kple Kuxiwo Gbɔkpɔkpɔ si Womede dzesii O FACEBK Nutsotsowo.
• Google Ads Kpekpeɖeŋu & Google Dedienɔnɔ Mɔ̃ɖaŋudɔwɔƒe (Google LLC): Na Wò Google Ads Akɔntabubu Nanɔ Dedie: Nyatakaka nana Akɔntabubu ƒe Dɔwɔna Siwo Ŋu Womeɖe Mɔ Na O (support.google.com/google-ads/answer/9355975) kple Mɔkpɔkpɔ ƒe Dzidzenuwo Dzikpɔkpɔ, Dɔwɔƒedzikpɔla ƒe Akɔntabubuwo (MCC), kple Google Ads Scripts ƒe agbalẽwo.
• Internet dzi Dedienɔnɔ Kple Dɔwɔƒewo ƒe Dedienɔnɔ Dɔwɔƒe (CISA, United States) & FBI IC3: Session-Cookie Fififi, Futɔ-le-Titina (AitM) Phishing, kple Dɔwɔƒewo ƒe Asitsatsa ƒe Akɔntabubuwo Xɔxɔ.
• Nuƒlelawo ƒe Ganyawo Takpɔha (CFPB) & Dukɔa ƒe Asitsahabɔbɔ (FTC, United States): Nyateƒe le Gadodo ƒe Se (Sedede Z / Gadodo ƒe Fexexe Dzɔdzɔe ƒe Se) kple Elektrɔnik Gaɖoɖoɖa Se (Sedede E) Takpɔkpɔ na Fexexe si Ŋu Womeɖe Mɔ Na O.
• Dukɔa ƒe Internet Dzi Dedienɔnɔ Dɔwɔƒe (NCSC, United Kingdom): Nu Geɖewo ƒe Dzesidede, OAuth Token Dzadzɛnyenye, kple Hadomegbenɔnɔ Ŋuti Nyatakakadzraɖoƒewo Kple Alilikpo me Asitsatsa Ŋuti Akɔntabubu Siwo Wogblẽ Ðe Edzi Gbugbɔgaxɔ.