Fake Tech Support Pop-Up zamba da Cire Kayan aikin Nesa mara izini mara izini¶

Lokacin da allon kwamfutarka ba zato ba tsammani ya kulle cikin faɗakarwa, ja mai cikakken allo ko shuɗi yana da'awar "Cibiyar Tsaro ta Tsaro ta Windows: Trojan.Spyware Gano, Kira Tallafin Microsoft Nan da nan a 1-800-..." (ko Apple macOS daidai da iCloud da asusun ajiyar ku na banki suna ƙarƙashin harin), kuna kallon Fake Tech Support Pop-Up Scam. Ko da yake allon yana walƙiya tambura na hukuma, yana kunna ƙarar siren ko muryar mutum-mutumi ta cikin lasifikan ku, kuma yana daskare siginan linzamin kwamfuta don haka ba za ku iya danna maɓallin ba. X maballin, kwamfutarka bata da virus. Kawai shafin yanar gizon mugunta ne da ke cin zarafin API ɗin ** Cikakkiyar allo (F11, ** Kulle Kulle API, da Madauki Audio na Yanar Gizo don firgita ku cikin kiran cibiyar kiran masu laifi.

Koyaya, haɗarin ya zama ainihin lokacin da kuka kira lambar wayar akan allo kuma ba da izinin “masanin fasaha” don shigar da halaltaccen Kulawa da Kulawa na Nisa na kasuwanci (RMM) ko kayan aikin tebur mai nisa, kamar ** AnyDesk, TeamViewer, ConnectWise ScreenConnect, UltraViewer, RustDesk, LogMeIn Rescue, Zoho Assist, ko Taimako Mai Sauri**. Da zarar kun shiga cikin kwamfutarku, masu zamba suna rufe bayananku ("installing a security patch"), buɗe kalmar sirrin burauzar ku da kuma zaman banki na kan layi, kuyi amfani da HTML ɗin gidan yanar gizonku don ya zama kamar sun "maido muku" dala 40,000 da gangan, sannan su shigar da ci gaba Ba a kula da Windows Services ta yadda za su iya dawowa cikin kwamfutarku bayan kun tashi sama da karfe 3:00 na safe. Wannan jagorar yana nuna muku yadda ake fita daga daskararre allon burauza a cikin daƙiƙa 5, raba hanyoyin sadarwa mai aiki nan da nan, share hidimomin bangon RMM na ɓoye, da kulle asusun ku na kuɗi.

Yi wannan yanzu¶

1. Cire kebul na Ethernet, kashe Wi-Fi akan kwamfutarku, ko cire Wi-Fi Router na gida daga tashar wutar lantarki a yanzu. Idan kun riga kun kira lambar wayar ko bari wani ya haɗa da kwamfutar ku, ** kada ku ɓata lokaci kuna jayayya da mai zamba akan wayar ko ƙoƙarin rufe tagar su da linzamin kwamfuta ** (za su iya kulle linzamin kwamfuta kuma su rufe allo). Cire filogi a zahiri akan na'ura mai ba da hanya tsakanin hanyoyin sadarwa na Wi-Fi ko rike maɓallin wuta ta zahiri na kwamfutarka na tsawon daƙiƙa 10 har sai ya kashe ya raba zaman sarrafa nesa nan take.
2. Idan baku kira lambar ba kuma kuna makale a kan babbar murya, tana walƙiya allon "Virus Alert", danna ka riƙe. Alt + F4 (ko Ctrl + Shift + Esc don kashe mai lilo a cikin Task Manager) akan Windows, ko latsa Command + Option + Escape don Tilasta Bar Safari/Chrome akan Mac. Har yanzu ba a yi muku hacking ba. Ƙararrawa shafin yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizon yanar gizo kawai yana gudana a cikin yanayin kiosk mai cikakken allo. Da zarar ka tilasta barin browser, sake buɗe shi kuma ** KADA KA danna "Restore Pages"**, kuma kwamfutarka tana da tsabta 100%.
3. Idan kun bar mai kiran ya haɗa zuwa kwamfutarku ko wayoyinku, kira bankin ku, ƙungiyar kuɗi, da sassan dillalan zamba daga wata wayar daban nan da nan. Ko da ba ku rubuta kalmar sirri ta banki ba yayin da suke kallo, 'yan damfara suna gudanar da rubutun atomatik akan AnyDesk/ScreenConnect tashoshi masu canja wurin fayil waɗanda ke kwafi na burauzar ku **Login Data kalmomin sirri da aka adana *** da ** kukis ɗin zama masu aiki *** a cikin ƙasa da daƙiƙa 10, ko fara canja wurin ACH/Zelle/Wire mara ganuwa a bayan allon labule na "Sabuntawa na Windows". Ku biyo mu jagorar karya asusun banki a yanzu.
4. Buga kwamfutarku da Wi-Fi da Ethernet GABA DAYA (ko a cikin Yanayin Tsaro na Windows) kafin cire AnyDesk, TeamViewer, ScreenConnect, ko UltraViewer. Kawai danna maɓallin. X akan AnyDesk ko TeamViewer ba ** ba** cire hanyar da za'a iya amfani da ita idan sun saita "Ba tare da kulawa ba" ko shigar da shiru ConnectWise ScreenConnect (ScreenConnect.ClientService* Sabis na bayanan Windows. Ajiye kwamfutar ba tare da layi ba yayin da kuke cire kowane kayan aikin nesa da aka kirkira a yau kuma ku kashe Sabis ɗin Windows / macOS LaunchDaemon ta amfani da matakan da ke ƙasa.
5. **Kada ku taɓa siyan katunan kyauta, cire tsabar kuɗi na zahiri, cak ɗin ajiya, ko aika cryptocurrency ko canja wurin waya don "juyar da kuɗaɗen biyan kuɗi na bazata." F12 (Kayan Haɓaka Burauza) yayin shiga cikin asusun bankin ku, gyara rubutun HTML na ma'auni na ku daga $2,500 ku $42,500, kuma suka yi kuka a firgice suna iƙirarin sun buga kwatsam $40,000 maimakon $400 a kan fom ɗin dawo da kuɗin ku kuma za a kore shi sai dai idan kun yi waya ko aikawa da ƙarin $39,600" Ba a saka ko sisin guda ɗaya a cikin asusunku ba; ko dai sun gyara lambobin akan allonku ko kuma sun canza sheka. $40,000 daga asusun ajiyar ku/HELOC zuwa asusun ajiyar ku.
6. Idan dan damfara ya yi iƙirarin cewa suna aika "ma'aikatan tarayya" ko "masu aika" zuwa gidanku don karɓar kuɗi ko sandunan zinare, kira 'yan sanda da gaggawa. Matsawa daga magudin waya zuwa aika ma'aikacin alfadari na zahiri zuwa ƙofar gidanku babban laifi ne da ke gudana. Kulle ƙofofin ku kuma kira lambar gaggawa ta gida (911 a Amurka da Kanada, 112 a cikin Tarayyar Turai, 999 a cikin United Kingdom, ko duba mu). lambobin gaggawa directory).

Tech goyon bayan zamba & hanya mai nisa yanke shawara¶

flowchart TD
    Root["Haɗu da Faɗakarwar Tallafin Fasaha, Imel ɗin daftari na Karya, ko Zamba mai Nisa"] --> DidConnect{"Shin Kun Kira Lambar Ko Kun Bar Wani Haɗa zuwa Kwamfuta/Wayarku?"}

    DidConnect -->|"A'a: Sai kawai ya ga allon faɗowa mai ƙarfi mai walƙiya a cikin burauza"| BrowserKill["1. Windows: Danna Ctrl+Shift+Esc -> Ƙarshen Aiki akan Chrome/Edge/Firefox <br/>2. Mac: Danna Cmd+Option+Esc -> Tilasta Bar Safari/Chrome <br/>3. Sake buɗe mai bincike BA TARE da danna 'Mayar da Shafukan' -> Share cache & toshe sanarwar rukunin yanar gizo<br/>(An shigar da sifilin malware; kuna lafiya 100%)"]

    DidConnect -->|"EE: An shigar da software, buga lambar lambobi 9, ko shigar da URL da suka ba ni"| CutNet["Mataki 1: Nan da nan Cire haɗin Wi-Fi & Cire kebul na Ethernet (ko Cire na'ura mai ba da hanya tsakanin hanyoyin sadarwa)"]

    CutNet --> BankLock["Mataki na 2: Daga tsaftataccen waya, kira Bankin ku / Brokerage Fraud Dept don daskare asusu, soke katunan, da toshe wayoyi"]

    BankLock --> PurgeRMM["Mataki na 3: Yayin da PC ke KYAUTA, cire AnyDesk, TeamViewer, UltraViewer, RustDesk DA kashe sabis ɗin ScreenConnect / GoTo."]

    PurgeRMM --> AuditSys["Mataki na 4: Share masu amfani da Windows Admin datti ('mai amfani da yanar gizo'), cire ayyukan farawa, gyara 'syskey' ko tarkon BitLocker, sannan gudanar da Scan na kan layi"]

    AuditSys --> RotateCreds["Mataki 5: Daga na'ura mai tsabta, juya Imel, Banki, da kalmomin shiga Mai sarrafa kalmar wucewa & danna 'Sign Out of All Sessions'"]

Mataki na 1: Yadda ake rufe daskararre, cikakken allo mai fafutuka "Jijjigar Kwayar cuta" (Idan ba ka kira su ba)¶

Me yasa gargadin Microsoft ko Apple na karya ya kulle siginan linzamin kwamfuta kuma ya ƙi barin ku danna maɓallin kusa? Lokacin da kuka danna kan yankin da aka buga da gangan (kamar youtbe.com ko espnn.com) ko madaidaicin hanyar sadarwar talla, shafin yanar gizon ya haifar da halaltattun APIs HTML5 masu bincike a cikin madaidaicin madaidaicin miliyon daƙiƙa 10: 1. Element.requestFullscreen(): Yana shimfiɗa shafin yanar gizon akan gaba ɗaya mai saka idanu, yana ɓoye aikin Windows ɗinku, Mac Dock, da shafukan burauza. 2. Element.requestPointerLock(): Yana ɗaukar siginan kwamfuta na linzamin kwamfuta a cikin akwatin 1-pixel marar ganuwa (wanda aka ƙirƙira shi da farko don wasannin burauzar 3D kamar Minecraft), yana sa alama cewa linzamin kwamfuta ya daskare. 3. **window.onbeforeunload + window.print() madaukakan maganganu ***: Buga akwatunan maganganu marasa iyaka don dannawa Esc nan da nan ya sake kunna cikakken allo.

Yadda ake kashe pop-up a cikin daƙiƙa 10 akan Windows, macOS, Chromebook, da iPad¶

1. *** A kan Windows 10 da Windows 11 ***:
2. Latsa Ctrl + Shift + Esc akan madannai naka (wannan yana buɗe Mai sarrafa Task ɗin Windows kai tsaye saman daskararre mai bincike).
3. (Idan siginan linzamin kwamfuta naka har yanzu yana makale, yi amfani da Down Arrow maɓalli *** akan madannai don haskaka Google Chrome, Microsoft Edge, ko Mozilla Firefox, sannan danna Delete key orAlt + E don danna Karshen Aiki
4. Muhimmin mataki lokacin sake buɗe burauzar ku: Lokacin da kuka sake buɗe Chrome ko Edge, ƙaramin kumfa a kusurwar sama-dama zai tambaya: " Chrome bai rufe daidai ba. [Maida]". KADA KA danna Mayarwa (danna Mayar yana sake buɗe malicious tab). Danna X don watsar da kumfa.
5. ** A kan Apple macOS (MacBook / iMac) ***:
6. Latsa Command (⌘) + Option (⌥) + Escape akan madannai don buɗe taga Force Quit Applications.
7. Zaɓi Safari ko Google Chrome kuma danna Tilasta Cigaba.
8. Rike da Shift maɓalli *** akan madannai lokacin da kake danna alamar ** Safari ko Chrome a cikin Dock ɗinka don ƙaddamar da shi. Rike Shift yayin ƙaddamarwa yana tilasta macOS don buɗe taga mara kyau mai tsabta ** ba tare da maido da shafuka na kulle na baya ba**.
9. ** Kawar da Faɗakarwar Faɗin Faɗin Desktop ("McAfee: An samo ƙwayoyin cuta guda 5" a kusurwar ƙasa-dama)**:
10. Idan kuna ganin gargadin ƙwayoyin cuta suna zamewa daga ** kasa-kusurwar dama na taskbar Windows ɗinku ** (ko kusurwar dama na allo na Mac ɗinku) koda lokacin da kuke kan gidan yanar gizon al'ada, da gangan kun danna "Ba da izini" akan mai binciken Tura sanarwar kwanaki da suka wuce.
11. ** A cikin Chrome ***: Kwafi da liƙa chrome://settings/content/notifications cikin address bar. Duba ƙarƙashin jerin "An ba da izinin aika sanarwa", danna dige guda uku (⋮) kusa da kowane gidan yanar gizon da ba a sani ba, kuma zaɓi ** Cire / Toshe **.
12. ** A cikin Microsoft Edge ***: Buɗe edge://settings/content/notifications kuma cire duk rukunin yanar gizon da ba a gane su ba ƙarƙashin ** Izinin **.
13. ** A cikin Apple Safari (macOS): Buɗe ** Safari> Saituna> Yanar Gizo> Fadakarwa** kuma zaɓi ** musun *** ko ** Cire ** ga kowane gidan yanar gizon da ba a sani ba.

Mataki na 2: Cikakkun cire kayan aikin Nesa na scammer (RMM Tsaftace Protocol)¶

Idan ka kira mai zamba kuma ka bi umarninsu don ziyartar gidan yanar gizo (kamar anydesk.com, ultraviewer.net, help.me, fastsupport.com, ko hanyar haɗin yanar gizo kamar support247.screenconnect.com) kuma gudanar da fayil ɗin da aka zazzage, ** kiyaye kwamfutarka gaba ɗaya ta katse daga intanit (Wi-Fi OFF, Ethernet unplugged)** yayin da kake dubawa da cire duk wata hanyar shiga ta baya.

Me yasa 'yan damfara suke shigar biyu ko uku kayan aikin shiga nesa daban-daban lokaci guda¶

Da zaran dan damfara ya haɗu da PC ɗinku ta hanyar AnyDesk ko Taimakawa Mai Saurin Windows, motsin bayanan su na farko na shiru (yayin da ke ɗauke da hankalin ku akan wayar) shine shigar da wakilin ** na biyu, ma'aikacin saka idanu na nesa & Gudanarwa (RMM), galibi ** ConnectWise ScreenConnect (ScreenConnect Client**, Atera, Syncro, MeshCentral, Taimako Mai Sauki, ko Dabaru RMM. - Me yasa? Domin ko da kun sami shakku, ajiye wayar, sannan ku cire AnyDesk daga tebur ɗinku, **ScreenConnect yana gudana azaman ɓoye. NT AUTHORITY\SYSTEM Windows bango sabis (ScreenConnect Client (xxxx)) ba tare da alamar tebur ba ***. Lokacin da PC ɗinku ya sake haɗawa da Wi-Fi, mai zamba har yanzu yana da shiru 100 bisa ɗari, samun damar tushen injin ku.

Teburin duba Jagora na Nesa Samun damar & kayan aikin RMM da masu zamba suka zagi¶

Rubutun PowerShell mataki-mataki don ganowa, tsayawa, da kawar da duk ayyukan RMM da aka ɓoye (Windows)¶

Yayin da Windows PC ɗin ku ke ** offline ***, danna maɓallin Fara *** danna-dama -> danna ** Terminal (Admin) ko PowerShell (Admin), kuma gudanar da wannan binciken bincike da rubutun tsaka-tsaki don bayyanawa da kashe kowane sabis na shiga nesa da aka sanya akan kwamfutarka:

# 1. List all running or installed Windows Services matching common RMM / Remote Access tools:
Get-Service | Where-Object {
    $_.DisplayName -match "AnyDesk|TeamViewer|ScreenConnect|ConnectWise|UltraViewer|RustDesk|Zoho|LogMeIn|GoTo|Supremo|SimpleHelp|Mesh Agent|Atera|Syncro|Splashtop" -or
    $_.Name -match "AnyDesk|TeamViewer|ScreenConnect|UltraViewer|RustDesk|Zoho|LMI|GoTo"
} | Select-Object Status, Name, DisplayName

# 2. Immediately STOP and DISABLE every matched remote access service so it can never start again:
Get-Service | Where-Object {
    $_.DisplayName -match "AnyDesk|TeamViewer|ScreenConnect|ConnectWise|UltraViewer|RustDesk|Zoho|LogMeIn|GoTo|Supremo|SimpleHelp|Mesh Agent|Atera|Syncro|Splashtop"
} | ForEach-Object {
    Stop-Service -Name $_.Name -Force -ErrorAction SilentlyContinue
    Set-Service -Name $_.Name -StartupType Disabled -ErrorAction SilentlyContinue
    Write-Host "Stopped and Disabled Service: $($_.DisplayName)"
}

# 3. Check for any software or folders created or modified in the last 72 hours in Program Files & ProgramData:
Get-ChildItem -Path "C:\Program Files", "C:\Program Files (x86)", "C:\ProgramData", "$env:APPDATA", "$env:LOCALAPPDATA" -Directory -Force -ErrorAction SilentlyContinue |
  Where-Object { $_.CreationTime -gt (Get-Date).AddDays(-3) } |
  Select-Object CreationTime, FullName

Bayan dakatar da ayyukan a cikin PowerShell: 1. Latsa Win + R, irinappwiz.cpl, kuma danna Enter don buɗe classic **Shirye-shiryen da Features *** kula da panel. 2. Danna maɓallin *"Shigar da Akan" *** don daidaita duk shirye-shiryen da aka shigar daga Sabo zuwa Tsofaffi. 3. ** Cire duk wani shirin da aka shigar akan ranar zamba ** (ciki har da * AnyDesk, TeamViewer, UltraViewer, RustDesk, ScreenConnect Client, Zoho Assist, GoTo Opener, ko karya" masu tsabtace riga-kafi / direba"). 4. ** Share ragowar ScreenConnect & AnyDesk manyan fayiloli **: A cikin Fayil Explorer, share C:\Program Files (x86)\ScreenConnect Client*, C:\ProgramData\AnyDesk, kuma %APPDATA%\AnyDesk (sharewa C:\ProgramData\AnyDesk\service.conf yana lalata kalmar sirrin da ba a kula da shi ba da kuma AnyDesk ID).

Cire mataki-mataki na LaunchDaemons na Samun Nesa akan Apple macOS¶

A kan Mac (tare da kunna Wi-Fi ** KASHE ***), 'yan damfara suna shigar da wakilai na baya a ciki /Library/LaunchDaemons kuma /Library/LaunchAgents. Bude ** Terminal *** (Applications > Utilities > Terminal) da gudu:

# 1. Inspect all third-party background LaunchDaemons and LaunchAgents for remote access tools:
ls -la /Library/LaunchDaemons /Library/LaunchAgents ~/Library/LaunchAgents

# 2. Unload and delete any ScreenConnect, AnyDesk, TeamViewer, Zoho, or LogMeIn persistence plists:
sudo launchctl bootout system /Library/LaunchDaemons/*screenconnect* 2>/dev/null
sudo launchctl bootout system /Library/LaunchDaemons/*anydesk* 2>/dev/null
sudo launchctl bootout system /Library/LaunchDaemons/*teamviewer* 2>/dev/null
sudo rm -rf /Library/LaunchDaemons/*screenconnect* /Library/LaunchAgents/*screenconnect* /opt/screenconnect*
sudo rm -rf /Applications/AnyDesk.app ~/.anydesk /Library/LaunchDaemons/*anydesk* /Library/LaunchAgents/*anydesk*
sudo rm -rf /Applications/TeamViewer.app /Library/LaunchDaemons/*teamviewer* /Library/LaunchAgents/*teamviewer*

Mataki na 3: Komawa "Makullai masu ɗaukar fansa" (msconfig Makullin Boot mai aminci, net user Kulle kalmar sirri, da tarkon BitLocker)¶

Lokacin da mai damfarar fasaha ya gane cewa kuna ƙin biyan su ko kuma kuna rataye wayar, yawanci suna kashe daƙiƙa 15 na ƙarshe akan kwamfutar ku suna ƙoƙarin ** kulle ku daga Windows ** don su iya kwace ku don "buɗe kalmar sirri":

1. Juyawa da msconfig "Safe Boot Tare da Babu hanyar sadarwa" Tarkon Kulle¶

Masu zamba suna son dannawa Win + R -> rubuta msconfig -> duba Safe boot (Mafi ƙarancin) -> canza kalmar wucewar asusun mai amfanin Windows na gida ta net user -> kuma tilasta sake yi. Lokacin da PC ɗin ku ya sake yin aiki zuwa Yanayin Tsaro na kan layi, Windows Hello PIN ɗinku na yau da kullun ba shi da rauni kuma Windows ta nemi kalmar sirri da ɗan zamba ya saita. - Yadda ake kamuwa da cuta: 1. A allon shiga Windows, riƙe ƙasa Shift maɓalli *** yayin danna alamar ** Powerarfin wuta -> Sake kunnawa *** don shigar da shuɗi ** Muhallin farfadowa da Windows (WinRE) -> ** Shirya matsala> Zaɓuɓɓuka na ci gaba> Saƙon Umurni **. 2. Idan scammer ya kashe al'ada boot a ciki bcdedit (safeboot minimal), gudanar da wannan umarni don mayar da boot ɗin al'ada nan da nan:

bcdedit /deletevalue {default} safeboot

net user

2. Dubawa idan Scammer ya Saci Kalmomin Mabuɗin Mabuɗin Ku da Aka Ajiye (Login Data / iCloud Keychain)¶

Yayin da TeamViewer ya rufe allonku ko fasalin "Black Monitor" na ScreenConnect, shin mai zamba ya fitar da kalmomin shiga? - Bude ** Google Chrome (chrome://password-manager/settings*** ko ** Microsoft Edge (edge://wallet/settings). Masu zamba suna danna "Fitar da kalmomin shiga" (ko kwafi na ku %LOCALAPPDATA%\Google\Chrome\User Data\Default\Login Data SQLite fayil kuma Local State Maɓallin DPAPI) a cikin daƙiƙa 30 na haɗawa. - A ɗauka kowane sunan mai amfani da kalmar sirri da aka adana a cikin burauzar gidan yanar gizon ku, ɗan damfara ne ya kwafi. Yi amfani da ** dabam, tsaftataccen kwamfuta ko wayowin komai da ruwanka don canza imel, banki, dillali, haraji, Amazon, da kalmomin shiga na kafofin watsa labarun, da soke zaman binciken mu ta amfani da mu. Satar alamar zaman taro da soke zaman duniya jagora.

3. Auditing da Cire Nesa Access Apps da aka sanya akan Android ko iPhone (AnyDesk / TeamViewer QuickSupport)¶

Haɓaka, tallafin fasaha da karya "Geek Squad / Amazon / Norton Refund" masu zamba suma suna tilasta waɗanda abin ya shafa su sanya AnyDesk Remote Control ko TeamViewer QuickSupport akan iPhone ko Android smartphone* don haka mai zamba zai iya karanta saƙonnin banki mai shigowa 6-lambobi SMS 2FA kai tsaye a kashe wayar ta kwamfutar tafi-da-gidanka. - A kan Android: Kunna ** Yanayin Jirgin sama**, buɗe ** Saituna> Aikace-aikace> Duba duk aikace-aikacen**, sannan cirewa AnyDesk, TeamViewer QuickSupport, Zoho Assist, ko kowane "AdControl / plugin"* kunshin taimako. Bayan haka, buɗe ** Saituna> Samun dama -> Abubuwan da aka zazzage** kuma tabbatar da cewa babu kayan aikin nesa da ke riƙe da gata na Dama. - ** A kan iPhone / iPad ***: A kan iOS, AnyDesk da TeamViewer ba za su iya motsa yatsanka kai tsaye ba, ** amma suna jera allon iPhone ɗinku kai tsaye (gami da banners na SMS 2FA mai shigowa) ta hanyar fadada Watsawar allo ta Apple **. Dokewa ƙasa daga kusurwar dama ta sama don buɗe ** Cibiyar Kulawa **, tabbatar da ja ** Rikodin allo / Maɓallin Watsawa Allon ** an kashe, share AnyDesk ko TeamViewer app daga allon Gida, sannan duba ** Saituna> Gaba ɗaya> VPN & Gudanar da Na'ura ** don share duk bayanan bayanan sanyi da ba a san su ba.

Mataki na 4: Haɗin kuɗi idan kun biya, shiga bankin ku, ko ID ɗin da aka ɗora¶

Idan mai zamba ya gan ka shiga cikin bankinka, ya tabbatar maka da ka biya kuɗin "sanarwar Firewall na shekara 5," ko kuma ya yaudare ka da "ramawar ƙarin biyan kuɗi $40,000" HTML gyara:

1. **Idan ka shiga Bankin Kan layi yayin da aka haɗa mai zamba ***:
2. Kira bankin ku ** Sashen Zamba** nan take. Faɗa musu: "Ni ne aka azabtar da wata zamba ta tallafin fasaha ta nesa inda wani mai laifi ya mallaki kwamfuta ta ta AnyDesk/ScreenConnect yayin da na buɗe taron banki na kan layi."
3. Tambayi bankin zuwa:
   • Rufe lambobin asusun ajiyar ku da aka fallasa sannan ku buɗe sabbin lambobin asusu (saboda masu zamba suna buɗe bayanan PDF ɗinku na wata-wata a cikin tashar bankin ku don kwafi cikakken **Lambar Rubutu da Lambar Asusu *** don zamba na ACH na gaba).
   • ** Soke duk wani canja wurin ACH, biyan kuɗin Zelle, cak ɗin Biyan kuɗi, ko canja wurin waya**.
   • Bincika idan mai zamba ya aika kuɗi tsakanin asusun ajiyar ku na ciki (misali, motsi $25,000 daga Savings ko Layin Daidaiton Gida a cikin asusunka na Dubawa don karya "mayar da biyan kuɗi" ta karya).
   • ** Shake duk alamun tara OAuth mai aiki** (Plaid, Yodlee, Finicity) kuma sake saita sunan mai amfani na banki na kan layi, kalmar sirri, da tambayoyin tsaro.
4. ** Idan ka sayi Target, Apple, Razer Gold, Lowe's, Depot Home, ko Katin Kyautar Steam ***:
5. Ko da kun riga kun karanta lambobin PIN ɗin da ke bayan katunan kyauta ga mai zamba, **kira lambar katin kyauta na hukuma / lambar sabis na abokin ciniki a bayan katin zahiri nan da nan ** tare da rasidin kati a hannu. Manyan masu fitar da (Apple, Target, Home Depot, Lowe's, Walmart) na iya daskare sauran ma'auni da ba a kashe ba akan lambobin katin kyauta da aka sata kuma su mayar da ku idan an kama ku kafin dillalin katin kyauta na dan zamba ya shafe su.
6. **Idan kun mika Lambar Tsaron Jama'a, lambar Medicare, ko hoton lasisin tuƙi / fasfo ɗinku ***:
7. Sanya nan take, ** Daskare Tsaro ** akan rahoton ku na kuɗi a ** Equifax, Experian, da TransUnion ** (da ChexSystems don asusun banki) ta amfani da mu Amsa sata na ainihi da dawo da bashi jagora.

Rigakafin: Yadda ake zamba-tabbatar da kwamfutarku da kare iyaye ko dangi da suka tsufa¶

Idan kuna tsaftace kwamfutar don kanku, iyaye, ko kakanni bayan zamba na goyon bayan fasaha, yi amfani da waɗannan hanyoyin tsaro guda huɗu a cikin mintuna biyar don haka mai zamba ba zai sake haɗawa ba:

• ** Shigar da Ad & Malvertising Blocker (uBlock Origin / uBlock Origin Lite) a cikin kowane browser ***: Fiye da kashi 90 na jabu na fage-fagen fafutuka na Microsoft da Apple virus ana ba da su ta hanyar musanya tallan talla akan labarai, girke-girke, kalmomin shiga, ko gidajen yanar gizo da aka buga. Shigar da ** uBlock Origin *** yana toshe kashi 99.9 na rukunin yanar gizo na goyan bayan fasahar karya kafin su taɓa yin lodawa.
• ** Canza na'ura mai ba da hanya tsakanin hanyoyin sadarwa na gida ko mai bincike na DNS zuwa Malware-Blocking DNS Resolver (1.1.1.2 ko 9.9.9.9: Saita kwamfuta ko na'ura mai ba da hanya tsakanin hanyoyin sadarwa DNS zuwa ** Cloudflare don Iyalai (1.1.1.2 kuma 1.0.0.2 ko ** Quad9 (9.9.9.9***, wanda ke toshe sabbin hanyoyin tallafin fasaha ta atomatik a Layer DNS.
• ** Ƙirƙiri ƙuntatawar Software na Windows / AppLocker ko Katange Dokokin Wuta AnyDesk.exe, ScreenConnect, kuma UltraViewer: A kan kwamfutar dangin da ba ta taɓa yin amfani da kayan aikin tebur mai nisa na ɓangare na uku ba, suna canza asusun Windows ɗin su na yau da kullun daga asusun Mai Gudanarwa zuwa asusun ** Standard User (ajiya daban, asusun Gudanarwa mai kariya ta kalmar sirri don kula da IT na iyali) don haka ba za su iya yin shuru ba. SYSTEMSabis na matakin RMM ba tare da PIN mai gudanarwa ba.
• Tambaya alamar tunatarwa ta zahiri zuwa saman bezel na kwamfuta: Rubuta a sarari akan ƙaramin lakabin: "Microsoft, Apple, Geek Squad, da Bankin ku ba za su taɓa buga lambar waya akan allo ba ko tambayar ku da ku shigar da AnyDesk/UltraViewer. Danna Ctrl+Shift+Esc don rufewa."

Tambayoyin da ake yawan yi¶

Jagora masu alaƙa¶

• Malware, ransomware, da ciwon leƙen asiri
• Satar alamar zame, ɓarna malware, da soke maɓallin wucewa
• Ware asusun banki da canja wurin waya mara izini
• Amsa sata na ainihi da dawo da bashi
• Kulle mai sarrafa kalmar sirri da dawo da vault na gaggawa
• Deepfake murya clone da zamba na AI
• Jagorar lambobin gaggawa

An duba tushe¶

• Hukumar Ciniki ta Tarayya (FTC) (Amurka): Yadda ake Hange, Gujewa, da Ba da Rahoton Tallafin Tallafin Fasaha (Gargadin Pop-Up, Zamba na Maimaituwa akan Biyan Kuɗi, da Zamban Katin Kyauta).
• Cibiyar Tsaro ta Yanar Gizo da Tsaro ta Lantarki (CISA), FBI, da NSA Haɗin gwiwar Shawarar Tsaro ta Intanet (AA23-025A) (Amurka): * Kare Mummunan Amfani da Kulawa da Gudanarwa (RMM) Software (ConnectWise ScreenConnect da AnyDesk Abuse)*.
• Cibiyar Tsaro ta Intanet ta Kasa (NCSC) & Zamba (United Kingdom): * Ma'amala da Kiran Tallafin Fasaha na Shakku da Cire Samun Nesa mara izini*.
• Cibiyar Amsa Tsaro ta Microsoft & Tsaron Platform Apple: Jagorar hukuma akan zamba ta Tallafawa Fasaha (support.microsoft.com/security), Cikakkun Fuskar Mai Binciken Mai Binciken/Cikin Zagi/PointerLock, da Cire Bayanan Bayanan Kanfigareshan Mara izini.