Asusun imel da aka yi hacked: ɓoye ƙa'idodin turawa da farfadowa¶

Babban asusun imel ɗinku shine maɓalli na kwarangwal na dijital, kuɗi, da ainihin shaidar ku. Ba kamar bayanin martabar kafofin watsa labarun da aka lalata ko shigar da yawo ba, Gmel da aka yi wa kutse, Microsoft Outlook / Microsoft 365, Yahoo, Apple iCloud Mail, ko asusun ProtonMail yana ba maharin ikon danna "Mata Kalmar wucewa" akan asusun bankin ku, musayar cryptocurrency, dillalan ritaya, tashoshin haraji, da abubuwan girgije. Mafi haɗari, ** kawai canza kalmar sirri ta imel da kunna Tabbatar da Factor Two-Factor (2FA) da wuya ya kori wani ƙwararren maharin daga cikin akwatin saƙo mai shiga da aka yi kutse. ., .., ko [Blank] wanda ke matsar da kalmar sirri-sake saitin imel kai tsaye zuwa ga Trash ko RSS Feeds babban fayil don kada ku taɓa ganin su), ** Tallafin Aikace-aikacen OAuth na ɓangare na uku** (eM Client, Thunderbird, ko karya Google Docs Ka'idodin da ke riƙe cikakken damar karanta/rubutu API ba tare da buƙatar kalmar sirrinku ba), ** Izinin Akwatin Wasiƙa da aka wakilta*, ** Kalmomin sirri na App (IMAP/SMTP**, da ** Canja-canjen Imel / Lambar Waya ta Farko.

Idan sulhuntawar imel ta ƙunshi barazanar tashin hankali nan da nan na cin zarafi, cin zarafi, cin zarafi na gida, ko ƙwace ƙarami, kira lambar gaggawa ta gida (911 a Amurka da Kanada, 112 a fadin Tarayyar Turai, 999 a Ƙasar Ingila) ko tuntuɓi littafin mu na duniya lambobin gaggawa nan take. Ga duk masu amfani da akwatin saƙo na kamfani, aiwatar da tsarin kawar da matakai 6 a ƙasa daidai tsari.

Yi wannan yanzu¶

1. *KADA KA canza kalmar sirri daga Windows PC ko Mac iri ɗaya idan kuna zargin ƙwayar cuta ta Infostealer *: Idan an yi hacking imel ɗin ku ko da yake kun riga kun kunna Tabbacin Factor Biyu (2FA), wataƙila kwamfutar ku tana da * Infostealer malware kamuwa da cuta ** (kamar Lumma Stealer, RedLine, ko Atomic macOS Satar Kukis) ko wani tsawaita zaman sata mai bincike.SAPISID/SID a Google ko ESTSAUTH na Microsoft). Ɗauki ** wayo mai tsafta (iOS ko Android) don aiwatar da canjin kalmar wucewa da tsabtace tsaro a yanzu.
2. ** Bincika kuma mayar da Imel ɗin Maido da Asusu, Lambar Wayar Maidawa, da na'urorin Tabbatarwa na MFA KAFIN canza kalmar wucewa (ko a cikin daƙiƙa 30 bayan)**: Maharan nan da nan suna ƙara lambar wayar su mai ƙonewa, adireshin imel da za a zubar, ko ƙa'idar Authenticator na ɗan damfara zuwa saitunan tsaro na ku. Idan kun canza kalmar sirrinku ba tare da goge wayar dawo da maharin ba ko kuma kalmar wucewa ta ɗan damfara, maharin zai danna "Forgot Password" kawai bayan dakika 10 kuma ya kulle you na dindindin.
3. ** Tilasta dakatar da duk zaman shiga mai aiki, kukis na bincike mai tsayi, da Kalmomin sirri na App na duniya**: Canja kalmar sirri ba koyaushe take kashe alamun IMAP ta hannu ko kukis ɗin zaman gidan yanar gizo mai aiki ba. Kai tsaye danna "Fita daga duk na'urori / soke duk zaman" a cikin Google, Microsoft, Yahoo, ko Apple dashboard tsaro, kuma share kowane hali 16 ** Kalmar wucewa ta App** akan asusun.
4. Buɗe gidan yanar gizo na tebur (ba aikace-aikacen saƙon hannu ba) kuma share duk ƙa'idodin Akwatin saƙo mai ɓoye, Tace, Masu Gabatar da Kai, da Dokokin sharewa: Aikace-aikacen saƙon hannu (Gmail ko Outlook akan iOS/Android) akai-akai suna ɓoye ƙa'idodin tuƙi na gefen uwar garken. Bude saitunan saƙon gidan yanar gizon ku a cikin mai binciken tebur kuma bincika ** Tace da adiresoshin da aka toshe **, ** Gabatarwa da POP/IMAP ***, da ** Dokoki / Shara ***. Share duk wata doka da ke tura wasiku a waje ko kuma motsa saƙon imel ta atomatik mai ɗauke da kalmomi kamar "bank", "code", "reset", "security", "wire", "invoice", ko "crypto" cikin cikin Trash, Archive, ko RSS Feeds babban fayil.
5. Rushe duk Apps na Haɗin OAuth na ɓangare na uku da Wakilan Akwatin Wasiƙa: Kewaya zuwa Abubuwan Abubuwan Hulɗa da Sabis na ɓangare na uku** (Google) ko ** Aikace-aikace da Sabis ɗin da kuka ba da damar** (Microsoft/Yahoo) sannan ku soke kowane app tare da Mail.Read, Mail.ReadWrite, ko Gmail API izini, da duba Ba da damar shiga Asusunku (Wakila) don haka maharin ba zai iya karanta akwatin saƙon shiga ta wata alama ta OAuth wacce ke watsi da canje-canjen kalmar sirri gaba ɗaya.
6. ** Duba ku Trash (Bin), Sent, kuma Spam manyan fayiloli nan da nan don ganin wane asusun kuɗi ko crypto wanda maharin ya riga ya sake saitawa ***: Mahara suna share faɗakarwar tsaro masu shigowa daga bankin ku, Coinbase/Binance, Amazon, PayPal, ko Steam seconds bayan sun karɓi lambar tabbatarwa mai lamba 6. Bude naku Trash kuma Sent manyan fayiloli a yanzu: kowane imel-sake saitin kalmar sirri zaune a cikin ku Trash asusun ne wanda maharin ya rigaya ya keta ko yayi yunƙurin karyawa.

Bishiyar yanke shawara: maido da iko da kuma kawar da dagewar bayan gida¶

Bi wannan bishiyar bishiyar mataki-mataki ko har yanzu kuna da damar shiga akwatin saƙon saƙonku ko kuma wanda maharin ya kulle ku gaba ɗaya:

flowchart TD
    A["Waɗanda ake zargi ko Tabbatar da Amincewa da Asusun Imel"] --> B{"Shin za ku iya shiga cikin asusun imel ɗinku a yanzu?"}
    B -->|"Ee: Har yanzu ina da dama"| C["Canja zuwa Waya Tsabtace (Kauce wa PC mai yuwuwar kamuwa da cuta)"]
    C --> D["1. Cire Wayar Farfadowa ta Attacker, Email farfadowa da na'ura & MFA Passwords"]
    D --> E["2. Canja kalmar wucewa zuwa keɓaɓɓen kalmar wucewar 20+ Char Passphrase & Kunna 2FA mai juriya"]
    E --> F["3. Danna 'Sign Out of All Devices' & Share All 16-Char App Passwords"]
    F --> G["."]
    G --> H["5. Soke OAuth Apps na ɓangare na uku & Bincika Shara/Aika Jakunkuna don Watsa Labarai na Waje"]
    B -->|"A'a: Maharin ya canza kalmar sirri da wayar dawo da/MFA"| I{"Wane nau'in asusun imel ne aka kulle?"}
    I -->|"Aiki / Makaranta / Yankin Kamfanin (@company.com)"| J["Tuntuɓi Admin IT Nan da nan: Admin na iya Sake saita MFA, Muryar Alamu & Dawo da shiga cikin daƙiƙa 60 ta hanyar Console Admin"]
    I -->|"Gmail na sirri / Outlook.com / Yahoo / iCloud"| K["Gudanar da Fom ɗin Maido da Asusu Na atomatik daga Gidan Wi-Fi na Gidan ku na Tarihi da Mai Binciken Bincike/Wayar Sani"]
    K --> L["Nan da nan Kira Bankunanku, Mai ɗaukar Waya & Musanya Crypto ta Waya don Daskare Asusun da ke ƙulla Imel ɗin."]

Mataki na 1: Tsabtace tsaftataccen bincike ta hanyar mai ba da imel (Gmail, Outlook/M365, Yahoo, iCloud)¶

Kowane babban mai ba da imel yana adana ƙa'idodin aikawa, masu tacewa, alamun OAuth, da wakilan akwatin wasiku a cikin menus daban-daban. Ko da kuna amfani da Apple Mail ko Desktop na Outlook akan kwamfutarku, dole ne ku shiga cikin cibiyar sadarwar gidan yanar gizon mai bayarwa a cikin mai binciken tebur* (ko buƙatar "Shafin Desktop" a cikin burauzar wayarku) don ganin waɗannan saitunan gefen uwar garken.

Cikakkun Taimako Na 1: Cire Asusun Google/Gmail da Hacked¶

Lokacin tsaftace asusun Gmel ko Google Workspace da aka lalata, yi aiki ta waɗannan shafuka bakwai daidai ba tare da tsallake guda ɗaya ba:

1. ** Tsaron Audit & Passkeys (myaccount.google.com/security***:
   • Danna Maɓallan maɓallan tsaro da maɓallan tsaro: Nan take maharan suna yin rajistar maɓalli mai daidaitawa ko ingantaccen mai tabbatarwa akan nasu burauzar don su iya shiga tare da kalmar sirrin sifili da saƙon SMS. Share duk wani maɓalli da baku gane ba tare da tabbacin kashi 100.
   • Danna Tabbatar Mataki 2 -> duba Matabbaci, Google Prompt Devices, Wayar Farko, da Lambobin Ajiyayyen. Danna ** Ƙirƙirar sababbin lambobi *** don ɓata kowane lambobi 8 nan da nan wanda maharin ya yi hoton.
2. ** Rusa Kalmomin Aikace-aikace masu aiki (myaccount.google.com/apppasswords***:
   • ** Kalmar wucewa ta App** lambar wucewa ce mai haruffa 16 wacce ke bawa abokin ciniki IMAP mail (kamar Thunderbird ko rubutun Python dan gwanin kwamfuta) zazzage dukkan akwatin saƙon shiga har abada ** yayin da ya ketare Tabbacin Mataki 2 gaba ɗaya. Share kowane App Password da aka jera.
3. ** soke Haɗin OAuth na ɓangare na uku (myaccount.google.com/connections***:
   • Nemo duk wani aikace-aikacen da aka ba da damar zuwa Gmail, Google Drive, ko Lambobin Google (masu kai hari galibi suna amfani da abokan cinikin wasiku na halal kamar su. eM Client, Newton Mail, Cleanfox, ko rubutun OAuth na al'ada). Danna app -> ** Share duk haɗin da kuke da shi tare da [Sunan App]**.
4. Duba Gmail Accounts and Import Tab (Tawagar Wasiku & Reply-To Kashe):
   • A cikin Gmel akan kwamfutar tebur, danna alamar Gear* -> Duba duk saitunan -> Asusu da Shigowa.
   • Karkashin Ba da damar shiga asusunka, tabbatar da cewa an jera adiresoshin imel ZERO**. Mai amfani da aka wakilta zai iya karantawa, aikawa, da share imel ɗinku ba tare da sanin kalmar sirrin ku ba.
   • Karkashin Aika wasiku kamar, danna edit info kusa da sunan ku kuma tabbatar da cewa maharin bai saka wani sirri ba Specify a different "reply-to" address (misali, saita Amsa-To ga yourname.company@gmail.com ko yanki mai kama da maharin ta yadda duk lokacin da wani ya ba da amsa ga halaltattun imel ɗinku, amsarsu tana zuwa ga hacker maimakon ku).
5. *Duba Gmail Filters and Blocked Addresses Tab:
   • Duba da kyau a kowace tace. Mahara sukan ƙirƙira madaidaicin tacewa from:(a|e|i|o|u) ko size > 0 ko has:attachment ko keywords kamar invoice, wire, bank, security, alert, code da aiki Skip the Inbox (Archive it), Mark as read, Delete it, koForward it to:. Share kowane tacewa wanda ba a sani ba.
6. *Duba Gmail Forwarding and POP/IMAP Tab:
   • Tabbatar da an saita An ƙaddamar da turawa zuwa Kashe turawa, cire duk wani adireshin tura da ba a gane ba daga jerin zaɓuka, sannan saita ** IMAP damar zuwa ** Kashe IMAP** (sai dai idan kuna amfani da amintaccen abokin ciniki na tebur).
7. A duba Sharar Google Drive & Tarihin Takeout na Google:
   • Masu kai hari akai-akai suna haifar da Google Takeout (takeout.google.com* Archive don saukewa a .zip na duk imel ɗinku, Hotunan Google, da takaddun Google Drive, gami da dawo da haraji da lissafin kalmar sirri. Ziyarci takeout.google.com a yanzu: idan kun ga fitarwa mai aiki ko kammala ba ku nema ba, danna Cancel fitarwa kuma duba ainihin nau'ikan bayanan da aka tattara.

Cikakkun Tafiya na 2: Cire Hacked Microsoft Outlook.com / Hotmail / Microsoft 365 Account¶

Asusun Microsoft (@outlook.com, @hotmail.com, @live.com, @msn.com, da Akwatunan Saƙo na Musanya Kan Layi na Microsoft 365) suna da wuraren ɓoye na musamman waɗanda maharan ke amfani da su yayin Amincewar Imel na Kasuwanci (BEC) da hack ɗin mabukaci:

1. Mai Boye RSS Feeds kuma Conversation History Tarkon Jaka:
   • A cikin Outlook, masu kai hari ba safai suke shigar da saƙon imel ɗin da aka danne su zuwa cikin babba ba Deleted Items babban fayil saboda masu amfani duba Deleted Items. Madadin haka, suna ƙirƙirar Dokokin Outlook mai suna . ko 1 wanda ke motsa imel masu shigowa cikin RSS Feeds, Archive, koConversation History babban fayil kuma yi musu alama kamar yadda aka karanta. Duba kowane babban fayil a gefen hagu na gefen hagu, musamman RSS Feeds, yanzu.
2. ** Audit Biyu Rules KUMA Sweep a cikin Outlook Web (outlook.live.com ko outlook.office.com***:
   • Danna ** Saitunan Gear ** (saman dama) -> **Mail *** -> ** Dokokin ***. Share duk wata doka da ba ku ƙirƙira ba.
   • Yi la'akari da akwati a kasan dokar maharin: Stop processing more rules. Mahara suna duba wannan akwatin akan babban ƙa'idarsu don kada ɗaya daga cikin halaltattun ka'idodin ku ya gudana.
   • Na gaba, danna ** Wasiƙar *** -> ** Share *** da ** Wasiƙa *** -> ** imel ɗin junk *** -> ** An toshe masu aikawa da yanki ***. Maharan suna ƙarawa akai-akai @microsoft.com, @google.com, @apple.com, @chase.com, @bankofamerica.com, kuma @coinbase.com zuwa jerin abubuwan da aka katange ** Masu aikawa da Domains ** don haka faɗakarwar tsaro ta billa ko tafi shiru zuwa Junk. Share jerin sunayen masu aikawa da aka toshe na kowane halaltattun kamfanoni.
3. ** Duba Mail -> Forwarding and IMAP**:
   • Tabbatar cewa ** Kunna turawa ** ba a duba shi ba. Idan adireshin imel na maharin yana zaune a cikin akwatin tare da "Keep a copy of forwarded messages" ba tare da tantancewa ba, duk imel ɗin da aka aiko maka ana tura shi zuwa ga hacker kuma ana share shi daga akwatin wasiƙarka kafin ya taɓa akwatin saƙon saƙo naka.
4. Don Masu Gudanar da Microsoft 365 na Kamfanin: Gudu PowerShell don Gano Dokokin Akwatin saƙo na MAPI na Boye.MFCMAPI*:
   • Ƙwararrun ƴan wasan barazanar BEC suna amfani da API ɗin Exchange Web Services (EWS) ko MFCMAPI don ƙirƙirar ** ɓoyayyun ƙa'idodin Akwatin saƙo mai shiga** (ta cirewa PR_RULE_MSG_NAME kuma PR_RULE_MSG_PROVIDER Kaddarorin MAPI) waɗanda ** ba sa nunawa kwata-kwata a cikin Gidan Yanar Gizon Yanar Gizo na Outlook ko daidaitaccen Cibiyar Gudanar da Musanya **.
   • Mai Gudanar da IT yakamata ya haɗa zuwa ** Musanya PowerShell akan layi** kuma yayi aiki:

     Get-InboxRule -Mailbox victim@yourdomain.com -IncludeHidden | Format-List Name,Enabled,Description,ForwardTo,ForwardAsAttachmentTo,RedirectTo,DeleteMessage,MoveToFolder
     

   • Ƙara da -IncludeHidden Tuta ta fallasa ƙa'idodin MAPI da ke ɓoye a cikin Teburin Abubuwan Abubuwan Hulɗa na Akwatin Wasiƙa (FAI), wanda za'a iya wanke ta ta hanyar Remove-InboxRule -Mailbox victim@yourdomain.com -Identity "<RuleID>" ko ta hanyar ƙaddamarwa outlook.exe /cleanrules.
   • Hakanan duba ** Dokokin Sufuri na Matsayin Mai haya (Dokokin Gudun Wasiku)** ta Get-TransportRule: idan maharin ya ɓata asusun Mai Gudanarwa na Musanya, ƙila sun ƙirƙiri tsarin tafiyar da saƙo mai faɗin ƙungiyoyin duniya maimakon dokar akwatin saƙo ɗaya.

Mataki na 2: Abin da za ku yi idan an kulle ku gaba ɗaya (Mai hari ya canza kalmar sirri & 2FA)¶

Idan maharin sun riga sun canza kalmar sirrin ku, sun maye gurbin lambar wayar dawo da nasu, kuma sun kunna nasu Authenticator app ko maɓalli na hardware, kowane minti daya yana da ƙima saboda maharin yana satar bayanan da aka haɗa ku yayin da ake kulle ku.

Mataki 1: Yanke Taimakon Kuɗi na Farko (minti 15 na Farko)¶

Kada ku shafe sa'o'i uku suna yaƙar fom ɗin dawo da imel mai sarrafa kansa yayin da ɗan gwanin kwamfuta ke zubar da asusun ajiyar ku ta banki ta amfani da akwatin saƙo na sata da aka sace:

1. **Kira Bankunanku, Masu Ba da Katin Kiredit, da Dillalan Zuba Jari ta Waya ***:
   • Faɗa wa Sashen Zamba: "Adireshin imel ɗina na farko [your@email.com] an ɓata kuma a halin yanzu an kulle ni. Sanya kalmar sirri ta fi'a / daskarewar tsaro nan da nan a kan bayanan martaba na, soke zaman yanar gizo / wayar hannu mai aiki, sannan cire adireshin imel ɗin daga sake saitin kalmar sirri ta sabis ɗin kai."
2. **Kulle Asusun Mai ɗaukar Wayarku ta Hannu akan Canjawar SIM na Biyu ***:
   • A cikin akwatin saƙon saƙo na ku da aka yi kutse, maharin na iya karanta AT&T, Verizon, T-Mobile, Rogers, Vodafone, ko O2 lissafin kowane wata, yana ba su lambar asusun wayar hannu da adireshin lissafin ku. Kira dillalin ku nan da nan don tabbatar da ** Canja wurin lamba PIN / Daskare tashar tashar jiragen ruwa ** kuma an kulle lambar wucewar Asusu.
3. ** Daskare Asusun Canjin ku na Cryptocurrency (Coinbase, Binance, Kraken, Gemini***:
   • Yawancin manyan musanya suna ba da dannawa ɗaya ko wayar gaggawa ** Kulle Account *** idan imel ɗin ku ya lalace (misali, kiran Coinbase makullin gaggawa ta atomatik a +1 (888) 908-7930 a Amurka/International ko +44 808 168 4635 a cikin UK).
4. **Canja Adireshin Imel Mai Rijista akan Kowane Asusu Zaku Iya Shiga ciki har yanzu ***:
   • Wataƙila ** har yanzu kuna shiga *** zuwa Amazon, PayPal, Venmo, Steam, Discord, Apple ID, da manajan kalmar wucewa akan app ɗin wayoyinku a yanzu. Ƙirƙiri sabon-sabon, asusun imel na gaggawa mai tsabta (misali, akan ProtonMail ko sabobin Gmel da aka kulla tare da maɓalli na hardware) kuma nan da nan ku shiga cikin saitunan ƙa'idodin ƙa'idodin da har yanzu kuna shiga don canza imel ɗin tuntuɓar su daga adireshin da aka yi kutse kafin maharin ya sake saita su.

Mataki na 2: Yadda ake Ƙaddamar da Algorithms na Farko (Google, Microsoft, Yahoo)¶

Don asusun imel na mabukaci kyauta (@gmail.com, @outlook.com, @hotmail.com, @yahoo.com), an hana wakilan tallafin ɗan adam ta hanyar sarrafa injiniyoyi daga sake saita kalmomin shiga da hannu ko ketare 2FA ta wayar (don hana aikin injiniyan zamantakewa). Madadin haka, farfadowa yana sarrafa ta atomatik ** Hadarin & Injin Buga Shaida ***. Don haɓaka ƙimar amintaccen cryptographic ɗin ku kuma kunna ɓoyayyun "Rayuwar 7 / Kwanaki 30 Tsaro Riƙe":

1. ** MUHIMMAN DOKAR: Ƙaddamar da Fom ɗin Farfaɗo daga Na'urar Tarihi, Mai Binciken Bincike, da Adireshin IP na gida Wi-Fi ***:
   • Kar a taba gudu accounts.google.com/signin/recovery ko account.live.com/acsr daga sabuwar tagar incognito mai bincike akan bayanan salula ko ta hanyar VPN.
   • Yi amfani da ** ainihin kwamfutar tafi-da-gidanka, tebur, ko wayowin komai da ruwan ka ** da ainihin mai bincike (tare da kukis masu inganci / ma'ajiyar gida)** inda kuka shiga cikin wannan asusun imel ɗin kowace rana don shekarar da ta gabata, yayin da kuka haɗa ta ** gida ko ofishi na yau da kullun Wi-Fi na'ura mai ba da hanya tsakanin hanyoyin sadarwa *** (ASN da kuma daidaita yanayin yanayi). Algorithm na farfadowa yana ɗaukar nauyin alamar yatsa na na'ura (DeviceID) da kuma tarihin IP subnets.
2. Mayar da Google / Gmail (accounts.google.com/signin/recovery*:
   • Ko da maharin ya canza wayar dawo da imel ɗinka na dawo da daƙiƙa da suka wuce, Google yana riƙe lambar wayarka ta baya da adireshin imel ɗin dawo da na baya a matsayin ingantattun abubuwan dawo da daidaitattun kwanakin kalanda 7 (awa 168) bayan maharin ya gyara su.
   • Lokacin da aka sa lokacin signin/recovery, danna "Kwarai wata hanya" har sai tayi tayin aika lamba zuwa lambar waya ta asali ko ainihin adireshin dawo da adireshin imel, ko kuma tura wayar Android/iPhone ɗinka da aka yiwa rajista ta hanyar Google Prompt.
   • **Idan Kayi Biyan Kuɗi zuwa Google One (Ajiyayyen Cloud) ko YouTube Premium / Channel na YouTube ***:
     • Biyan kuɗi Google One masu biyan kuɗi suna da damar samun ɗan adam mai rai ** Tallafin Google One (one.google.com/support*** wanda zai iya tayar da makullin asusu a ciki.
     • Idan Google Account ɗin ku da aka yi wa kutse ya mallaki YouTube Channel, tuntuɓi @TeamYouTube akan X (tsohon Twitter) jama'a kai tsaye. Ba kamar daidaitaccen Gmel ba, @TeamYouTube Taimakon Mahalicci yana ba da keɓancewar ** Fom ɗin Hacked Account ** wanda injiniyoyi masu aminci da aminci na Google suka gwada su waɗanda suka tabbatar da asalin ku. Channel ID (UC..), AdSense ID, da loda tarihin IP don cire maɓallan maɓalli/MFA na maharin a zahiri kuma a maido da duk asusun Google/Gmail cikin sa'o'i 24 zuwa 72.
3. ** Microsoft Outlook / Hotmail / Xbox Account farfadowa da na'ura (account.live.com/acsr***:
   • Da farko, gwada shiga da danna "Ba ni da ɗaya daga cikin waɗannan" a allon 2FA: idan kuna da 25-halayen Microsoft Recovery Code adana lokacin da kuka kafa asusunku na asali, shigar da shi zai ba ku damar maye gurbin bayanan tsaro na maharin (batun da Microsoft ta tilas ** 30-days tsaro bayanan bayanan maye gurbin lokacin jiran aiki za a iya toshe ku a lokacin harin).
   • Lokacin cike fom ɗin dawo da Asusun Microsoft account.live.com/acsr* daga gida Wi-Fi IP:
     • Samar da ** ainihin Layukan Jigo *** na imel ɗin kwanan nan guda 3 zuwa 4 da kuka aiko (tambayi abokai ko dangi su duba cikin akwatin saƙon saƙo na kansu kuma su karanta muku ainihin layukan jigo na imel ɗin da kuka aiko musu kwanan nan).
     • Samar da ainihin adiresoshin imel na lambobin da kuka aiko da imel kwanan nan.
     • Samar da Xbox Console Hardware LiveDeviceID / Serial Number idan kun taɓa shiga cikin Xbox tare da wannan asusun Microsoft, da lambobi 4 na ƙarshe da ranar ƙarewar kowane katin kiredit da aka taɓa amfani da su akan Shagon Microsoft / Skype / Office 365.

Mataki na 3: Sarrafa lalata ga asirin da aka fallasa a cikin tsoffin imel ɗinku¶

Da zarar kun kulle maharin kuma ku tsaftace duk ƙa'idodi da alamun OAuth, dole ne ku fuskanci gaskiya mai cike da tunani: idan maharin yana da IMAP, OAuth, ko yanar gizo zuwa akwatin saƙon ku har tsawon mintuna 15, ɗauka cewa sun gudanar da binciken maɓalli mai sarrafa kansa a duk tarihin imel ɗinku na tarihi.

Maharan ba sa karanta tsoffin imel ɗinku 50,000 da hannu. Rubutun su mai sarrafa kansa nan da nan ya bincika akwatin saƙon saƙon ku don waɗannan mahimman kalmomi masu daraja guda goma kuma zazzage kowane saƙon da ya dace da abin da aka makala PDF:

1. "seed", "mnemonic", "recovery phrase", "24 words", "wallet", "Coinbase", "Binance", "Ledger": Idan kun taɓa aika wa kanku imel ɗin hoto, bayanin kula rubutu, ko ɓoyayyen zip na jumlar iri na cryptocurrency ko lambar ajiyar kuɗi ta 2FA, la'akari da waccan walat ɗin ya lalace nan da nan kuma matsar da duk kuɗi zuwa sabon jakar kayan masarufi.
2. "tax", "1040", "W-2", "1099", "SSN", "Social Security", "passport", "driver license", "mortgage", "closing": Aikace-aikacen lamuni, hayar gida, da imel ɗin CPA a cikin akwatin saƙo naka kusan tabbas sun ƙunshi PDFs tare da Lambar Tsaron Jama'a (ko ID na ƙasa) da ba a gyara ba, ranar haihuwa, da hoton lasisin tuƙi. Sanya sauri ** Daskare Kudi *** tare da ** Equifax, Experian, da TransUnion** (duba jagorarmu akan amsa sata na ainihi).
3. "password", "login", "credentials", "welcome to", "backup codes": Bincika akwatin saƙo naka a yanzu don kalmomin password kuma backup code, share waɗancan saƙon imel na fili masu haɗari bayan an juya kowane kalmar sirri da aka ambata a cikinsu.
4. "invoice", "ACH", "wire", "routing", "escrow", "closing costs", "docusign": Idan kuna tsakiyar siyan gida, biyan dan kwangila, ko gudanar da kasuwanci, maharin yanzu yana da kwafi na ainihin daftarin ku da bayanan hanyar banki kuma zai yi ƙoƙarin yin kwaikwayon ku ko kamfanin ku don satar hanyar sadarwar waya. Kira kamfanin mallakin ku, jami'in escrow, ko abokan ciniki akan tarho nan da nan don faɗakar da su.

Tambayoyin da ake yawan yi¶

An duba tushe¶

• Cybersecurity and Infrastructure Security Agency (CISA, United States): Karfafa Karɓar Imel ɗin Kasuwanci (BEC), Cin zarafin Aikace-aikacen OAuth, da Jagorar MFA mai jure wa masu sihiri (cisa.gov/MFA kuma cisa.gov).
• Cibiyar Amsar Tsaro ta Microsoft & Sirrin Barazana Mai Karewa (Amurka): Mayar da Amsa ga Matsalolin Imel ɗin da aka Cimma a cikin Mai Tsaron Microsoft na Office 365 (Dokokin Akwatin saƙo mai ɓoye). -IncludeHidden, Tallafin Izinin OAuth, da Sake Zama) (learn.microsoft.com/en-us/defender-office-365/responding-to-a-compromised-email-account).
• ** Tsaron Asusun Google & Taimakon Mai Gudanarwa Aiki (Amurka)**: Kaddamar da Asusun Google da aka yi wa Hacking ko Cin Hanci, OAuth Haɗin Sashe na Uku, da Babban Tsarin Kariya (support.google.com/accounts/answer/6294825).
• ** Cibiyar Tsaro ta Intanet ta Kasa (NCSC, United Kingdom)**: Mayar da Asusun Imel ɗin da aka Lamunce da Rage Doka da Juriya na Isar da Imel (ncsc.gov.uk).
• Hukumar Ciniki ta Tarayya (FTC, Amurka): Abin da Za A Yi Idan An Sace Kutse A Email (consumer.ftc.gov).
• ** Cibiyar Tsaro ta Intanet ta Ostiraliya (ACSC / ASD, Ostiraliya) ***: Kare Asusun Imel da Gano Dokokin Akwatin saƙo mara izini (cyber.gov.au).

Jagora masu alaƙa¶

• Fitar da asusun ajiyar kuɗi
• MFA phishing da maƙiyi-a-tsakiyar wucewa
• Makullin MFA da dawo da mai tantancewa
• Martanin warwarewar bayanai da yaɗuwar kalmar sirri
• Malware, ransomware, da ciwon leƙen asiri
• Canja wurin SIM