Konte LinkedIn Hacked walla Hello Sosiyetee Hacked: Woppude fenaande Recruiter e heɓtude naatgol Admin¶

Yiytude wonde golloowo kulɓiniiɗo nanngii golloowo hoolkisaaɗo, injenieer lowre, walla golloowo sosiyetee LinkedIn, walla ƴettii Super Admin jokkondire e LinkedIn Company Page maa laawɗuɗo, ko huunde jaawnde wonande kisal sosiyetee e innde marke. Nanduɗo e hacks enternet njulaagu casual, ƴettugol konte LinkedIn (ATO) ina kuutoree e nder hojomaaji seeɗa e pelle yuɓɓinaaɗe e nder internet (Lazarus Group / Contagious Interview, cirƴam golle fenaande, e sinndikaaji fenaande faktiir B2B) ngam jolnude fenaande "Remote $120k Balloowo / Developer" limtooji golle ɗi njiylotoo ɗaɓɓooɓe e ƴeewndorɗe koɗki trojanized, ɗaɓɓude yoɓde ƴeewndo background njoɓdi ko adii, walla ustude ujunnaaje ujunnaaje dolaar e LinkedIn Campaign Manager (Ads) njaltin e kartal maa njulaagu.

So tawii ƴettugol ngol ina waɗi ƴaañgal, kulhuli toowɗi e kisal ɓanndu, walla fenaande mawnde e kaalis, noddu polis nokku maa walla limoore emergency (911 to Amerik e Kanadaa, 112 e nder Dental Orop, 999 to Dental Dowlaaji Amerik; ƴeew limooje caɗtuɗe) e waɗde ciimtol bonanndeeji siber ko yaawi. Cross-reference men banndiraaɓe ardotooɓe on ƴettugol konte enternet e hacking, phishing e nder laylayti renndo e fenaande mbayliigu, e kanaal tagoowo oo, ko kripto scam ƴetti ɗum e laylayti renndo no kuutorto-ɗaa lowre LinkedIn tigi-rigi e porotokolle ƴellitgol Hello Sosiyetee les ɗoo.

Waɗde ɗum jooni¶

1. Ƴeewto so tawii kala "Super Admin" sehil mo wuuri ina jogii haa jooni naatde e Hello Sosiyetee maa LinkedIn (0 to 2 minutes). Hello Sosiyetee LinkedIn alaa innde kuutortooɗo e konngol mum ceertungol; ɗum jokkondirta ko e jokkondire tuugiiɗe e doole jokkondirɗe e nate LinkedIn keertiiɗe gollotooɓe gooto gooto. So hay gollodiiɗo GOOTO mo alaa ko jokkondiri ina jogii haa jooni... Super Admin role, yo ɓe uddit Hello Sosiyetee oo ɗoon e ɗoon -> ɓuɗɗu e Cuɓe (Ikon Gear) -> Njuɓɓudi admins, e ɓuɗɗu e Trash Can (Remove) icon sara innde hooreejo/golloowo hacked AND kala rogue Super Admins mo anndaaka hacker ɓeydi.
2. Freesde kaayitaaji njulaagu walla konte banke jokkondirɗe e gardiiɗo kampaañ LinkedIn (linkedin.com/campaignmanager) e Ƴeewndotooɗo LinkedIn (Recruiter Corporate / Lite) ɗoon e ɗoon. Ko adii fof ko ƴaañooɓe LinkedIn jogiiɓe kaalis ko udditaade Campaign Manager ngam udditde $5,000-per-day kampaañuuji yeeynorɗe kripto/malware fawaade e kartal maa Amex/Visa sosiyetee keɓaaɗo, walla yaltinde denndaangal domen kanndidaaji maa e nder LinkedIn Recruiter.
3. So tawii haa jooni aɗa naati feccere e konte maa LinkedIn keertiiɗe e app telefoŋ maa, yah to Settings -> Sign in & security -> Where you're signed in e tap End all sessions KO ADDI waylude password maa. So tawii hacker oo wujjii maa... li_at kuutorɗe joɗnde feerorde rewrude e malware infostealer walla Gaño-e-hakkunde (AiTM) hello phishing, waylude konngol maa tawa a joofnaani jokkondire kuutorteeɗe sahaa e sahaa fof ina addana toɓɓe mobiil/API goodɗe ɗee wuurde.
4. Lartol Settings -> Sign in & security -> Email addresses e Phone numbers ngam ƴeewde so tawii hacker oo ɓeydii heen iimeel burner ɗiɗaɓo (@rambler.ru, @firstmail.ltd, @proton.me, @outlook.com) e waɗde ɗum Primary. So tawii ƴaañoowo oo wayliima tawo iimeel gadano oo, udditii Hoolkiso mum Ɗiɗi (2SV), WOTO sos konte LinkedIn kese e iimeel golle maa (sosde konte kese e adres imeel gooto ina taƴa jokkorde domen backend LinkedIn e UID lowre maa ɓooynde). E nder heen, yah to **Formaasiyoŋ keɓgol ID laamu LinkedIn e nder feccere 1 les ɗoo.
5. Waɗtu Jeertinaango Fenaande Jaaynde ko yaawi e nder lowre maa laawɗunde, X/Twitter, e golloowo guurɗo LinkedIn feeds jeertinaango ɗaɓɓooɓe golle WOTO ƴettu fiiluuji, yoɓde njoɓdi kaɓirɗe, walla neldude kaayitaaji diwooje/SSNs e kala golle ɗe konte maa njuɓɓinaa. Ngam ɗaɓɓooɓe jolngo e konte maa njuumtuɗe.** Ngam ɗaɓɓooɓe jolngo e goonga a hoolkisaama "Recruiting at [Company]" badge, kala waktu deƴƴuɗo ina addana ɗaɓɓooɓe golle sappo e jeegom foolde e innde sosiyetee maa.
6. Ƴeewto nokku gollorɗo mo njiyloto-ɗaa oo ngam yiytude mboros Infostealer (RedLine, Lumma, Stealc) walla ɓeydagol Chrome bonngol (fake AI LinkedIn scrapers / ChatGPT outreach extensions). Ko ɓuri 65 percent e ƴettugol LinkedIn gollotooɓe e gollotooɓe e golle ɗee, wonaa sabu kuutortooɗo oo winndi konngol mum e nder lowre njulaagu, kono ko sabu ɓe mbaɗi heen jokkorgal Chrome fenaande fotngal "Jinngugol ardiiɓe LinkedIn otomaatik / Yiylotooɗo Imeel" mo silminaaka e nder nguurndam li_at cookie hoolkiso session kala nde ɓe udditi linkedin.com.

Lekki kuulal: Hacked lowre LinkedIn neɗɗo vs¶

Rewrude e ngool laawol gollal branching ngam heɓtude ɗowgol tuugnaade e hol ngalu bonngu.

flowchart TD
    A["LinkedIn Kisal Kisal"] --> B{"Hol ngalu LinkedIn mo ŋakkiraa?"}
    B -->|"Profaayiil gardiiɗo / golloowo neɗɗo Hacked (Ko udditaa, email/2FA waylaama)"| C["WOTO winndito konte LinkedIn kese e iimeel maa ɓooyɗo -> Uddit LinkedIn 'Habrirde Konte Ɓooyɗe' / Doggol Hoolkiso ID Persona"]
    C --> D["Skannde telefoŋ cinndel NFC / kamera e paaspoor laamu walla kaayitaaji diwooje e laawol Persona -> LinkedIn Hoolaare & Kisal ina itta iimeel hacker/2FA & nelda jokkorde reset e nder 24-72h"]
    B -->|"Hello sosiyetee LinkedIn laawɗuɗo ƴettaa (binndanɗe fenaande walla Admin hacked)"| E{"Mbele KALA gollodiiɗo mo wuuri ina jogii haa jooni 'Super Admin' e Hello Sosiyetee oo?"}
    E -->|"EEY: Ko famɗi fof Super Admin laaɓɗo 1 ina heddii"| F["Surviving Super Admin udditta ɗoon e ɗoon Hello Sosiyetee -> Cuɓe -> Njuɓɓudi Admins -> Ittude golloowo hacked & denndaangal Admins ɓe nganndaaka -> Mumtude binndanɗe fenaande & Limlebbi golle"]
    E -->|"ALAA: Hacker riiwi denndaangal Super Admins laawɗuɗi"| G["Fulɓe kaayitaaji njulaagu jokkondirɗi e Gardiiɗo Kampaañ -> Neldu 'Recovery Admin Page / Ɗaɓɓaande Luural' ummoraade e iimeel @companydomain.com hoolkisaaɗo"]
    B -->|"Profaayiiluuji 'Ghost' Recruiter fenaande ina mbiya ina ngolloo e sosiyetee maa (Wonaa hacked, kono ina nanndi)"| H["Haa Sosiyetee Hello Super Admin uddita 'Hello -> Yimɓe / Gollotooɓe' tab -> Ciimtol porofaayiiluuji ɗi njaɓaaka ina mbiya golle + fiilde ƴettugol ƴaañgol maande njulaagu"]
    D --> I["Ƴeewto ɓeydagol Chrome ngam ƴoƴre LinkedIn fenaande (wujjude kukiiji 'li_at') -> Waylu konte SSO/Imeel -> Jokku jeertinaango kanndidaa renndo"]
    F --> I
    G --> I
    H --> I

Feccere 1: Ƴellitaare Ɗatal-e-Ɗatal nde a udditaa e konte LinkedIn keertiiɗe hacked¶

So ñaawoowo bonnii lowre LinkedIn neɗɗo, ɓe njokka e deftere pijirlooji 90 leƴƴannde : ɓe naata (rewrude e wujjaaɗo). li_at cookie walla proxy phishing), ɓeydu adrees imeel maɓɓe keeriiɗo, hoolkiso ɗum, ƴellit imeel maɓɓe e Primary, momta adreesuuji imeel golle maa asliije e adreesuuji imeel keeriiɗo, e winnditaade Authenticator App (2SV) maɓɓe e konte maa.

So aɗa etoo ɓuɗɗude "Yejjitii Password," LinkedIn ina wiya "Min mbaawaano yiytude konte e oon iimeel" walla ina naamnoo kodde 2SV 6-digit gonɗe e telefoŋ hacker oo. Ko ɗoo woni laawol laaɓtungol ngam artirde konte maa:

Laawol 1: Sosde "Hoolkiso mbaydi maa e Persona" 2SV / Imeel Override Flow (Ɓurɗo yaawde)¶

So tawii imeel maa ina golloo haa jooni (walla a ɓuuɓtii jokkorde "Wartir ndee waylo imeel" nder imeel jeertinaango otomatik mo LinkedIn neldi e kees maa nde hacker oo wayli imeel maa), kono hacker oo huɓɓii Hoolkiso Ɗiɗi (2SV) ngam haɗde ma: 1. E nder feerorde ordinateer desktop (jokkorde identity-override ina heewi suuɗde e feerorɗe portaabe), yah to linkedin.com/login. 2. Naatnu imeel maa e konngol maa (walla ɓuɗɗu e Yejjitii konngol maa?, winndu kod nelaaɗo e imeel maa). 3. So LinkedIn dartinii ma e ekran naamnaade kode App Authenticator 6-digit (mo hacker oo jogori huutoraade), ƴeewto-ɗaa les ɗoo e kaɓirgol kod ngol, ɓuɗɗu: "Verify using another method" walla "Can't access your authenticator app? Verify your identity". 4. LinkedIn maa yaltin Hoolkiso mbaydi neɗɗo kod QR / doggol kameraaji gonɗi e nder mum: - Skannde kode QR e kamera smartphone maa. - Foto yeeso e caggal ID Foto mo laamu yaltini (Paspor, Kaayitaaji Sofereeɓe, walla Kartal ID Ngenndiwal; so tawii paaspoor maa ina jogii ƴoogirde NFC, Persona ina waawi ƴeewndaade ƴoogirde kriptogaraafi ndee e janngirde NFC telefoŋ maa ngam hoolkisaade ko ɓuri yaawde) e timminde ƴeewndo nguurndam selfie 3-angle. 5. Ko jogori aroyde: So Persona tabitinii wonde Innde Timmunde sariya e ID laamu maa ina yahdi e Innde Timmunde daartol gonnde e lowre LinkedIn, njuɓɓudi reentaade otomaatik LinkedIn ina haɗa otomaatik hoolkisaade hacker oo e Ɗaɗi ɗiɗi (2SV) e neldude ma jokkorde naatgol toownde e nder hojomaaji 15 haa waktuuji 48.

Laawol 2: Nde hacker oo momti adrees imeel maa e konte (No-Access Form)¶

Hol ko woni so tawii jokkorde "Revert email change" e nder kees maa joofiima (walla hacker oo kadi bonnii kees maa imeel, momti jeertinaango ngoo), so winndude imeel maa e LinkedIn wiyi "Konte tawaaka"? 1. Uddit Formaasiyoŋ keɓgol konte ɗe ngalaa naatgol e LinkedIn laawɗuɗo: linkedin.com/help/linkedin/ask/TS-RHA (mala linkedin.com/help/linkedin/ask/TS-F-APPEAL). 2. Hebbin fannuuji ɗii e laaɓal seppo ngam router triage otomaatik nelda tikket maa to Recovery Account / ATO Queue: - Adres imeel ɗo mbaaw-ɗen yettaade ma: Winndu adres imeel laaɓɗo, kisal (ina moƴƴi ko sosiyetee maa hoolkisaa @yourcompany.com adres imeel nannduɗo e golloowo jooni oo limtaaɗo e daartol golle maa LinkedIn). - URL lowre maa LinkedIn: Jokkondira e URL lowre maa (yeru, https://www.linkedin.com/in/firstname-lastname-12345/). (So hacker oo waylii innde lowre maa walla URL vanity, yiytu URL maa asliijo e nder daartol feerorde ɓooynde, siynooji imeel, walla kaɓirgol Google). - Adres imeel jokkondirɗo e konte maa ko adii: Winndu adres imeel tigi-rigi mo wonnoo Primary e konte maa LinkedIn ko adii njangu nguu. - Detaayuuji haala kaa: > "Konte am LinkedIn ([URL Profile]) ƴettaa ko e jokkondire ɗe njaɓaaka ñalnde [ñalngu] e [waktu]. Ñaawoowo oo ittii adrees imeel am gadano ([Imeel ɓooyɗo]), ɓeydi heen adrees imeel mo yamiraaka, kadi softinii 2SV mo yamiraaka. Imeel am gollorde ina nanndi e profile am hoolkisaaɗo jooni oo e IDna I am fulla on the hoolkiso ɗoon e ɗoon." 3. LinkedIn Trust & Safety maa jaabto iimeel jokkondirɗo maa e jokkorde hoolkiso ID Persona keeriiɗo sahaa gooto. So a neldii ID maa laamu e oon jokkorde, ɓe ƴetta iimeel hacker oo, ɓe ngartira adrees imeel maa asliijo.

Feccere 2: Heɓtude Hello Sosiyetee LinkedIn mo njiylotoɗen e laɓɓinde Super Admins fenaande¶

Famde no Arsitektuur Admin Page LinkedIn gollortoo ina tiiɗi e nder kewu: - A Hello Sosiyetee jokkondirɗo (linkedin.com/company/your-brand) alaa ko woni e mum. E nder ɗuum, porofaayiiluuji LinkedIn keertiiɗi ina ndokkee gooto e golle Admin keewɗe : Admin mawɗo, Admin loowdi, Kurator, Analyst, walla Poster loowdi ballitooɗo (ina heen Admin Media yoɓaaɗo e nder Gardiiɗo Kampaañ). - Ko Super Admin tan jogii baawɗe ɓeydude/ittude Admin goɗɗo, waylude nate hello ngoo, walla ustude hello ngoo, kadi kala Super Admin ina waawi ittude KALA Admin Super goɗɗo e doggol gootol (alaa darnde "Tagɗo hello / Joom Root" mo waylaaka e nder njuɓɓudi LinkedInd Business gonndi e njuɓɓudi).

Yerondirde e senaareeji ɗiɗi ɗi Company Page compromis e huutoraade laabi moƴƴitingol laaɓtuɗi:

Feccere 3: Woppude fenaande golle fenaande, Recruiter InMails fenaande, e "Golloowo fenaande" nate mbaylaandi¶

Hay so tawii Hello Sosiyetee maa ngoo hackaaka, bonnooɓe e nder internet ina kuutoroo ekosistem gollal udditiingal LinkedIn e laabi ɗiɗi bonɗi, bonɗi marke maa, bonna ɗaɓɓooɓe golle :

1. Laɓɓinde caggal nde jokkere enɗam waɗi LinkedIn Recruiter jooɗorde walla posto golle fenaande¶

So tawii ñaawoowo heɓii naatde e Hello Sosiyetee maa walla LinkedIn Recruiter (Recruiter Corporate / Recruiter Lite) yamiroore: 1. Uddit e momtu kala binndanɗe golle fenaande ɗoon e ɗoon: - Yah to linkedin.com/my-items/posted-jobs/ (walla udditaa Recruiter -> Golle / Hello Sosiyetee -> Golle), udditaa kala doggol golle ngol yamiraaka, ɓuɗɗu Njuɓɓudi golle -> Uddit golle, jokkondir e kala ɗaɓɓoowo ɗaɓɓuɗo oon doggol e jeertinaango kisal ko yaawi: > "TEŊKERE KISAL: Ngal doggol golle yaltinaama tawa yamiraaka e nder jokkondire konte tataɓere. [Innde Sosiyetee] MEƊƊAANI naamnaade ma ngam ƴettude lowre/kode restoraaji ko adii noddaango HR laawɗungo, MEƊƊAANI waɗde yeewtere binndol tan e Telegram, pay bank for NEVppA/What wills kaɓirɗe, momtu kala fiilde ƴettaande e ndee doggol." 2. Woppu Joɗnde Ɓooynde E nder Catal Admin Rekruter LinkedIn: - Rekruter gonɗo Njuɓɓudi Lisaas ina foti udditaade ɗoon e ɗoon LinkedIn Rekruter -> Cuɓe Admin -> Njuɓɓudi Huutortooɓe, yiytude jooɗorde liiseeji gonɗi e ŋakkere, e ɓuɗɗude Park Liiseeji / Revoke Access ngam ñaawoowo oo yaltinee ɗoon e ɗoon lowre LinkedIn keeriinde kuutortooɗo. 3. Yaltin golle ƴettuɗo & Doggol ƴeewndo InMail: - Ƴeewto hol kanndidaaji ɗi ñaawoowo oo neldi e InMail walla ɗi njaltini .csv e nder windo ƴaañgol so Ofisee maa toppitiiɗo ndeenka (DPO) ina waawi ƴeewtaade kala ƴeewndo PII kanndidaa (ƴeew njoɓdi sirlu walla fayndaare HIPAA neldaama e aksidaa).

2. No ittirtaa "Gollooɓe fenaande / Recruteurs fenaande" limtooɓe sosiyetee maa e nder profil mum en tawa aɗa heɓa yamiroore¶

Sabu LinkedIn ina addana kala konte kese winndude "Technical Recruiter at [Your Company Name]" e nder taƴre maɓɓe Experience tawa hoolkiso domen alaa e sago, cirƴam fenaande ina sosa defte keewɗe e fenaande, jokkondirɗe e logo Sosiyetee maa Page ngam fenaande dogooɓe golle e Telegram e WhatsApp.

Ko nii Hello Sosiyetee Super Admin waawi ittude logo sosiyetee maa e ɗaɓɓaande golle e dow nate fenaande: 1. Hutoro Hello Sosiyetee "Yimɓe / Terɗe Jokkondirɗe" Kuutorgal Ittugol: - Uddit Hello Sosiyetee maa hono Super Admin -> ɓuɗɗu e tabalde Yimɓe e yiyngo renndo -> ƴeew doggol nate wiyooɓe ina ngolloo e fedde maa. - Ɓoɗɗu Toɓɓe tati (...) e dow nate fenaande -> ɓuɗɗu Habrirde / Haɓde -> Habrirde ndee nate -> Ɓe mbaɗata ko goɗɗo walla ɓe lomtoo sosiyetee mo ɓe ngollotaako (Fake profile / Not an employee). 2. Njokkude maande njulaagu / marke mbaydi Takedown (Fastest Bulk Removal): - So tawii fenaande en mbaɗii konte keewɗe fenaande ngam huutoraade innde e logo sosiyetee maa binnditiiɗo ngam dogginde fenaande gollal, neldu Notice de infraction / Scams Trademark LinkedIn to linkedin.com/help/linkedin/answer/a1336378 gila e adrees imeel maa sariya/sosiyatee limtoowo denndaangal URL-ji porofaylaaji bonɗi. Goomu LinkedIn ngam ƴettude sariyaaji ina heewi laɓɓinde jokkere enɗam hoolkisaande e nder waktuuji 12 haa 24.

Feccere 4: Ko waɗi maa... li_at cookie session wujjaama (E no LinkedIn udditirtee haa abada)¶

So tawii golloowo gonɗo e majjere oo ina joginoo Hoolkiso Ɗiɗi (2SV) ON ɓe meeɗaa winndude password maɓɓe e iimeel phishing, hol no hacker oo naatiri e nder konte maɓɓe LinkedIn?

Kala nde naatir-ɗaa www.linkedin.com e Chrome, Edge, walla Brave, serweeji LinkedIn mbaɗii kuutorgal HTTP ina wiyee li_at (ina jogori huutoreede haa balɗe 365). Kala jogiiɗo oon single li_at binndol string ina waawi jokkondirde e tab DevTools Storage feerorde mum en, ɗoon e ɗoon naata e LinkedIn no maa nii, tawa aɗa woppa konngol maa e App maa 2SV Authenticator.

Won laabi tati teskinɗi maa li_at kukiiji ɗii ngujjaama: 1. Ekstensiyonji Chrome fenaande ("Otomaasiyoŋ LinkedIn / AI Scrapers"): Teemedde ekstensiyoŋaaji Chrome goɗɗi yeeyeteeɗi e gollotooɓe e yeeyooɓe ("Yiytu Imeel kala neɗɗo e LinkedIn", "Jokkondirde e Bot", "Yeewnude miijooji AI") li_at kukiiji ummoraade linkedin.com e neldude ɗum e serwer yaajɗo mbele bot maɓɓe cloud ina waawa ƴettude LinkedIn e les njiimaandi maa. So oon yeeyoowo ekstensiyoŋ heɓi hacked (walla yeeyde lowre mum kuutortooɗo), ujunnaaje ujunnaaje konte recruteurs ina hacked e nder jamma gooto. 2. AiTM Fishing-Proxy (Evilginx Fake LinkedIn Alerts): Imeel wiyoowo "Aɗa jogii InMail keso 1 ummoraade e gardiiɗo gollorde" walla "Hello maa LinkedIn ina haɗaa" ina addana domen lookalike mo proxy maa 2SV goonga e nanngude li_at. 3. Malware wujjoowo kabaruuji (Lumma / Vidar) Gila e Resumeeji fenaande: Ñaawoowo neldata ko recruter a "Resume_John_Doe.zip" arsiif ina waɗi a .lnk walla .exe fiilde ɓuuɓnde e ikon PDF.

Doggol ƴeewndo tiiɗtingol LinkedIn toɓɓe 5¶

Huutoro ɗeen defte joy e nder kala golloowo, golloowo, e njuɓɓudi hello sosiyetee hannde:

• 1. Haɗ Denndaangal "LinkedIn Scraper / Otomaasiyoŋ" Yaajde Chrome & Yirlo li_at E Ɓoɗɗude Sign Out:
  • Mabbiti chrome://extensions (walla edge://extensions) e ittude kala otomaasiyoŋ LinkedIn tataɓo, imeel-finder, walla ɓeydaare ƴoogirde. Ndeen ɓuɗɗu Miin -> Yaltu nder LinkedIn, naataa kadi (ɓuɗɗude Yaltu ina laaɓti ina bonna ɓooyɗo oo li_at cookie e serweeji LinkedIn, tawi noon uddude tan tab feerorde ndee ina addana cookie wujjaaɗo oo sellude).
• 2. Eɓɓoore Badge Imeel Golle Hoolkiso (Confirmed Work Email) + CLEAR / Persona Badge ID laamu e denndaangal nate gollorde & gollorde:
  • Haa kala golloowo e golloowo laawɗuɗo timmina LinkedIn Hoolkiso Imeel Golle E Hoolkiso Persona / CLEAR Identity ngam nate maɓɓe kollita Badge Shield Hoolkiso laawɗuɗo. Ndeen haala laaɓndal e dow sosiyetee maa Careers webpage: "Denndaangal gollotooɓe [Sosiyetee] laawɗuɓe ina kollita baaji nokku gollorɗo hoolkisaaɗo e LinkedIn, maa neldu ma iimeel TAN ummoraade e." @ourcompany.com."
• 3. Softina LinkedIn Naatgol Gootol (SSO) ngam Joɗnde Recruteur Enterprise, Navigateur Sales, e Gardiiɗo Kampaañ:
  • E nder Catal njuɓɓudi LinkedIn -> Cuɓe -> Cuɓe winndere -> Naatgol gootol (SSO), jokkondir e denndaangal jooɗorɗe LinkedIn gollorɗe yoɓaaɗe e Okta / ID Microsoft Entra / nokku gollorɗo Google SAML SSO kuutorteeɗo e Kuutorɗe FIDO2 / Kuutorɗe Yubi ɗe njiyataa.
• 4. Hello Sosiyetee ƴeewndo Super Admins Lewru (Kuulal "3 ɓurngal famɗude, 4 ɓurngal mawnude"):
  • Waɗde 3 haa 4 Super Admins hoolaare e Hello Sosiyetee maa (hono neɗɗo gooto yaltuɗo walla heɓde coktirgal meeɗaa brikde hello ngoo), e ɗoon e ɗoon ustude binndooɓe lowre enternet e njuɓɓudi yeeyirde yaajndi to Content Admin walla Sponsored Content Poster darnde (ko addanta yaltinde binndanɗe e dogginde jeeyngal tawa yamiroore riiwtude Super Admins).
• 5. Recruteurs jannguɓe meeɗaa udditaade .zip, .rar, .iso, .lnk, walla Jokkorɗe "Resume / Portfolio" ɗe konngol reennaa:
  • Recruiters ko #1 target e nder sosiyetee ngam jokkondire malware sabu golle maɓɓe ko udditaade resumeeji hoɗdiiɓe ñalnde kala. Feewnit damal imeel maa gollorde ngam haɗde .zip / .rar / .lnk / .exe / .scr jokkondire e yamirde recruteurs yo ƴeew tan .pdf e .docx fuɗɗotoo ko e nder yiylorde web ruulde.

Limooje emergency diiwaan e porotokolle agence¶

So tawii konte LinkedIn walla ƴettugol Hello Sosiyetee ina addana fenaande golle fenaande, tawa ina fawii e dow jamaanu, njoɓdi kaalis B2B ndi yamiraaka, walla PII kanndidaa, humpit ɗum to juɓɓule ngenndiije jowitiiɗe e bonanndeeji e nder internet e fenaande golle :

Leyɗeele dentuɗe Amerik e Kanadaa¶

• Nuldu Poliis (Kuuɓal ɓanndu / Swatting) : Noddu 911.
• Ciimtol fedde nde ko feewti e bonanndeeji e golle fenaande:
  • Leyɗeele dentuɗe Amerik: Fiilde ciimtol to Centre wullitaango FBI e internet (ic3.gov) (teeŋti noon e siftinde Imeel/Konte njulaagu walla fenaande ƴettugol golle) e Komisiyoŋ njulaagu fedde (ReportFraud.ftc.gov). So tawii ko dowla-ballitoowo Contagious Interview malware renndinaama e injiniyankooɓe rewrude e konte maa ƴaañiiɗe, humpit CISA (cisa.gov/report).
  • Kanada: Rajo feewde e Centre Kanadaa ngam haɓaade fenaande (CAFC, antifraudcentre-centreantifraude.ca walla 1-888-495-8501) e Centre Kanadaa ngam Kisal Siber (cyber.gc.ca).

Leydi Biritaan¶

• Neldu polis e nder njuɓɓudi: Noddu 999.
• Bonanndeeji nder internet, fenaande e ƴettude gollotooɓe & habrirde ŋakkeende GDPR:
  • Habrirde ƴettugol konte sosiyetee e fenaande ƴettugol gollotooɓe to Action Fraud (actionfraud.police.uk walla 0300 123 2040) e jokkondirde e Nokku ngenndiijo kisal siber (NCSC) ardorde.
  • Annduɓe Golle (jobsaware.co.uk): Portal laawɗungal laamu Angalteer ngal alaa ko toppitii so wonaa ngalu (gollirteengal e Poliis Metropolitan e SAFERjobs) ngam humpitaade binndanɗe golle LinkedIn fenaande e fenaande ƴettugol gollotooɓe.
  • ICO leydi Angalteer (ico.org.uk): So tawii jooɗorde LinkedIn Recruiter nde ŋakkaani feeñninii CV, limooje telefoŋaaji, e binndanɗe ɗaɓɓooɓe golle to leydi Angalteer, ƴeewto so tawii ciimtol kuulal 33 GDPR to leydi Angalteer ngol waktuuji 72 to Biro Komisariyaa Kabaaru ina ɗaɓɓiree.

Dental Orop¶

• Limoore Ƴellitaare Pan-Orop: Noddu 112.
• GDPR & Sariya UE jowitiingal e sarwisaaji dijital (DSA) Ɓeydagol:
  • So tawii CV-ji kanndidaaji walla dokke neɗɗo nder LinkedIn Recruiter keɓaama e juuɗe ƴaañoowo, humpit Hukuuma ngenndiijo toppitiiɗo ndeenka dokke (DPC Irlande ko Sosiyetee LinkedIn Irlande mo alaa keerol woni hooreejo UE, e sara nokku maa CNIL / BfDI / AEPD) e nder 72 waktuujile GD33 Article.
  • E nder Sariya UE jowitiiɗo e sarwisaaji dijital (DSA), njulaagu e yimɓe Orop ina mbaawi kadi ɓeydude mbayliigu platform mo laaɓtaani e loowdi fenaande ndi rewaani laawol rewrude e LinkedIn, Flow Reporting Content Illegal UE.

Ostarali e Nuwel Selannde¶

• Neldugol : Noddu 000 to Ostarali walla 111 to Nuwel Selannde.
• Habrirde bonanndeeji e fenaande:
  • Ostraali: Habrirde ƴettugol konte gollorɗe e laawol cyber.gov.au (ReportCyber / ACSC) e humpitaade fenaande ƴettugol gollotooɓe to ACCC Scamwatch (scamwatch.gov.au). So tawii kaayitaaji diwooje walla paaspooruuji ɓiɓɓe leydi Ostarali ɗaɓɓiraama ko recruteur fenaande waɗoowo marke maa, jokkondir e IDCARE (idcare.org walla 1800 595 160).
  • Selannde: Ciimtol feewde e CERT NZ (cert.govt.nz) e Netsafe (netsafe.org.nz walla 0508 NETSAFE).

Indiya e Asii-Pacifik¶

• Inndo: Noddu 1930 (Telefoŋ ballal ngenndiwal ngam haɓaade bonanndeeji nder internet) walla wullitaango e cybercrime.gov.in les ministeer nder leydi (I4C) ngam fenaande golle fenaande e njulaagu enternet e nder gollorɗe, e humpitaade geɗe kisal gollorɗe to CERT-In (cert-in.org.in) e nder waktuuji 6.
• Singapuur & Japon: To Singapuur, noddu 999 (Emergency) walla Kaɓirgal ballal ngam haɓaade fenaande (1799) e fiilde e-ciimtol polis Singapuur (police.gov.sg). To leydi Japon, jokkondir e Biro toppitiiɗo ko fayti e bonanndeeji e nder internet (#9110).

Naamne keewɗe naamneede¶

Mbele ina moƴƴi ƴeewndaade Passport am walla Licence am e nder ekran hoolkiso "Persona" e LinkedIn ngam heɓtude konte am hacked?¶

Eey, so tawii a fuɗɗiima safrude to bannge ofisee `linkedin.com` domen (walla rewrude e jaagorde `@linkedin.com` jokkorde tikket ballal). LinkedIn huutortoo ko **Anndinde Neɗɗo, Inc.** (e **CLEAR** to Amerik worgo) ngam wonde gollodiiɗo mum laawɗuɗo, SOC 2 Tipe II e ISO 27001 seedtinaaɗo hoolkiso-anndinde. So a ƴeewtindiima ID laamu maa, a ƴettii selfie gonɗo e Persona e nder doggol ƴellitgol konte LinkedIn, Persona ina hoolkisa e nder kriptogaraafi wonde innde maa e yeeso maa ina nanndi e joom konte maa, ina hollira LinkedIn Trust & Safety ngam ittude adrees imeel hacker oo e seedantaagal 2SV. Hoto meeɗ neldude JPEG raw e paaspoor maa hono jokkorde imeel nde siforaaka e adrees imeel ranndo; tan neldu ɗum e nder wideyoo Persona laawɗuɗo sifiraaɗo.

Hol no neɗɗo ɓeydiri koye mum "Super Admin" e Hello men Sosiyetee LinkedIn tawa CEO men heɓaani jeertinaango?¶

Sabu Kelle Sosiyetee LinkedIn kuutortoo ko yamiroore Super Admin peer-to-peer, **kala golloowo gooto jogiiɗo darnde Super Admin** e Kelle Sosiyetee maa ina waawi ɓeydude Super Admin keso e ittude denndaangal Super Admins goɗɗi gonɗi ɗii e nder leƴƴanɗe 10. Ko famɗi fof e kala jolngo Sosiyetee Page, jolngo ngoo jolnaani "serwooɓe LinkedIn" ; e nder ɗuum, ɓe mbonnii konte LinkedIn keertiiɗe gardiiɗo yeeyirde gooto jooni walla gonnooɗo, gollodiiɗo e agence yaajɗo, walla sosɗo mo haa jooni yejjitii martabaaji Super Admin e Hello Sosiyetee maa, kuutoriima jonnde oon neɗɗo ngam ɓeydude konte burner hono Super Admin keso, caggal ɗuum ɓe ndartini ekipaaji maa e hello ngoo.

Mbele miɗo foti sosde tan lowre LinkedIn hesere e iimeel am golle tawa miɗo fadi Ballal LinkedIn ngam heɓtude lowre am hacked?¶

Alaa, **woto meeɗ sosde konte LinkedIn kese kuutortooɗe adrees imeel gooto** jokkondirɗo e lowre maa hacked nde reentaade ina jokki. E nder lowre backend LinkedIn, adrees imeel ina waawi jokkondirde tan e UID tergal gootol e sahaa gooto. So tawii hacker oo ittii iimeel maa e nate maa goonga ɗe duuɓi 10, aɗa huutoroo ɗoon e ɗoon oon imeel rimɗinaaɗo ngam winnditaade konte kese ɗe ngalaa, innjiniyankooɓe LinkedIn mbaawataa otomatikk ruttaade nate maa asliije ɗee e oon adrees imeel haa nde udditaa e laɓɓinde konte maa ɗe ngalaa, ɓeyda heen balɗe leeltugol reco maa.

Hol ko waɗi defte keewɗe fenaande ina limta koye mum en ɗoon e ɗoon "HR Recruiter" e sosiyetee amen to LinkedIn, kadi mbele eɗen mbaawi haɗde hoɗɓe wiyde ina ngolloo ɗoo ?¶

E nder taariindi, LinkedIn ina addana kala kuutortooɗo winndude kala innde sosiyetee e nder feccere "Experience" e nder lowre mum tawa o ɗaɓɓaani jaɓgol ko adii e Admin Page Company. Sindikaaji gollal-scam bonɗi ina kuutoroo ɗum e ƴellitde nate sockpuppet limtooje sosiyetee maa no golloowo maɓɓe jooni nii ngam logo sosiyetee maa laawɗuɗo feeña sara innde maɓɓe so ɓe neldii mesaas victims. So tawii a waawaa adii haɗde fannu Experience e nder winndere ndee, Super Admins Hello Sosiyetee maa ina foti ƴeewtaade sahaa kala tab **Yimɓe** e hello Sosiyetee maa, hollirde porofaayiiluuji ɗi ngalaa yamiroore rewrude e **Ciimtol -> Wonaa golloowo**, e ɗaɓɓude e denndaangal gollotooɓe goonga ɓee yo uddit LinkedIn's **Badge Imeel Golle Hoolkisaaɗe ɗe ɓe kollirta** (w `@yourcompany.com` kees).

So hacker dogi $10,000 e jeeyngal fenaande e nder gardiiɗo kampaañ men LinkedIn huutortoo kartal men njulaagu sosiyetee keɓtinaangal, mbele LinkedIn ina yoɓa kaalis oo?¶

Eey, so a habrii ƴettugol konte ɗe njaɓaaka ɗoon e ɗoon rewrude e ballal LinkedIn e dokkoowo kaayitaaji maa, Goomu Ad Fraud & Billing Team LinkedIn ina jokki e woppude walla yoɓde njoɓdi yeeyirde nde yamiraaka e nder windo ƴettugol tabitinaaɗo. Hoto fuɗɗo tan yoɓde kartal njulaagu wumre hade maa udditaade **Konte LinkedIn Ɓooyɗe & Ticket Ad Spend mo yamiraaka**, sibu yoɓde nde anndaaka ina waawi addande otomaatik haɗde duumiinde konte yeeyirde Hello Sosiyetee maa; e nder heen, ɓuuɓnu kaayitaaji ɗii e njoɓdi *kesiri* nde mbaɗ-ɗaa luural facciro ATO laawɗungal e LinkedIn.

Fuɗɗoode e ardorde laawɗunde¶

• LinkedIn Hoolaare & Kisal / Nokku Ballal: Habrirde e heɓtude konte LinkedIn ɗe njuumtaani (linkedin.com/help/linkedin/ask/TS-RHA), Hoolkiso mbaydi maa e Persona ngam heɓtude naatgol, Njuɓɓudi Admins Kelle LinkedIn (Super Admin Kisal Darnde), e Haalde Profaayiiluuji fenaande e fenaande golle.
• Biro fedde toppitiinde wiɗtooji (FBI IC3) & Fedde kisal siber e kisal gollorɗe (CISA, leyɗeele dentuɗe Amerik): Bayyinaango gollordu laamu ko faati e fenaande e nder golle, ƴeewndorɗe koɗki ƴellitooɓe Trojanized (Contagious Interview / Skeemaaji gollotooɓe IT RDC), e ƴettugol konte lowre enternet e nder gollorɗe.
• Google Mandiant & Hakkille kulɓiniiɗo: Ƴeewndo gujjugol kuutorɗe (li_at Exfiltration cookies e laawol Ekstensiyoŋaaji Navigateur Malicious e Infostealers) Yiytude gollotooɓe e gollotooɓe e nder gollorɗe.
• Goomu njulaagu fedde nde (FTC, leyɗeele dentuɗe Amerik) & UK JobsAware / Action Fraud: Ardorde golloowo e ɗaɓɓoowo golle ko faati e fenaande golle e fenaande kaɓirɗe ɗe njoɓata ko adii.

Ardiiɓe jokkondirɓe¶

• Konte enternet ƴettugol e hacking
• Phishing e fenaande e nder laylayti renndo
• Laabi Tagɗo ɗi fenaande kripto ƴetti
• Brigading online targeted, noddaali ƴattooje gollotooɓe, e udditgol perimeter dijital
• E aksidaa, neldu-ɗaa imeel njoɓdi sirlu walla fiilngo HIPAA to keɓoowo mo moƴƴaani
• Limooje emergency