Asusun LinkedIn da aka yi wa satar ko Shafin Kamfanin da aka sace: Dakatar da zamba na masu daukar ma'aikata na jabu da dawo da shiga Admin¶

Gano cewa ɗan wasan barazanar ya sace wani tabbataccen jami'in gudanarwa, injiniyan software, ko ma'aikacin ma'aikacin LinkedIn profile, ko kuma ya karɓe ikon Super Admin na jami'in ku LinkedIn Shafi na Kamfanin, babban tsaro na kamfani ne mai saurin gaske da kuma sanannen gaggawa. Ba kamar na yau da kullun na masu amfani da kafofin watsa labarun hacks, LinkedIn account takeovers (ATO) ƙungiyoyin masu aikata laifuka ta yanar gizo sun yi amfani da su cikin mintuna kaɗan.Lazarus Group / Contagious Interview, zoben aikin yi na jabu, da kuma B2B daftarin zamba) don buga zamba " nesa $120k Mataimaki / Mai Haɓakawa" jerin ayyuka ** wanda ke cutar da masu nema tare da ƙididdigar ƙima da ƙima, neman biyan kuɗi na gaba-gaba, ko zubar da dubun dubatan daloli a cikin mara izini ** LinkedIn Campaign Manager (Ads* kashe kan katin kiredit na kamfani.

Idan kwace ya shafi satar kudi, barazanar kai tsaye ga lafiyar jiki, ko zamba na waya na kudi, kira 'yan sanda na gida ko lambar gaggawa (911 a Amurka da Kanada, 112 a cikin Tarayyar Turai, 999 a Burtaniya; duba lambobin gaggawa) da kuma shigar da rahoton laifukan yanar gizo nan take. Takaitaccen bayani kan 'yan uwanmu jagora akan Social media account takeover da hacking, kafafen sada zumunta na yanar gizo da zamba da zamba, kuma Tashar mahaliccin da aka sace ta hanyar zamba ta livestreams yayin da kuke aiwatar da ainihin bayanan martaba na LinkedIn da ka'idojin dawo da Shafin Kamfanin da ke ƙasa.

Yi wannan yanzu¶

1. ** Bincika ko duk wani "Super Admin" mai rai na abokantaka yana da damar shiga Shafin Kamfanin LinkedIn na ku (0 to 2 minutes).** Shafin Kamfanin LinkedIn ba shi da sunan mai amfani da kalmar sirri daban; Ana sarrafa shi ta hanyar samun tushen rawar da aka haɗe zuwa bayanan martaba na LinkedIn na kowane ma'aikata. Idan ** ko da wani abokin aikin da ba shi da ra'ayi har yanzu yana riƙe da Super Admin rawar**, sa su buɗe Shafin Kamfanin nan da nan -> danna ** Saitunan (Gear Icon) -> Sarrafa admins**, sannan danna ** Sharar Shara (Remove** icon kusa da sunan jami'in gudanarwa/ma'aikaci da aka yi wa kutse da duk wani dan damfara Super Admins wanda ba a gane shi ba.
2. ** Daskare katin kiredit na kamfani ko asusun banki da ke haɗe zuwa Manajan Yaƙin neman zaɓe na LinkedIn (linkedin.com/campaignmanagerda kuma LinkedIn Recruiter (Recruiter Corporate / Lite) nan take.** Yunkurin farko na masu satar kuɗi na LinkedIn yana buɗewa ** Manajan Kamfen** don ƙaddamar da shi. $5,000-per-day Kamfen ɗin talla na crypto/malware da aka biya zuwa katin Amex/Visa na kamfani da aka adana, ko fitar da duk bayanan ɗan takarar ku daga LinkedIn Recruiter.
3. Idan har yanzu kuna shiga cikin asusun LinkedIn na sirri akan aikace-aikacen wayar hannu, je zuwa Settings -> Sign in & security -> Where you're signed in kuma danna End all sessions KAFIN canza kalmar sirrin ka. Idan hacker ya sace ka li_at Kuki na zaman mai lilo ta hanyar infostealer malware ko abokin gaba-in-da-Tsakiya (AiTM) Shafin phishing, canza kalmar wucewa ba tare da katse zaman aiki ba wani lokacin yana barin alamun wayar hannu/API da ke da rai.
4. ** Duba Settings -> Sign in & security -> Email addresses kuma Phone numbers don ganin idan dan gwanin kwamfuta ya kara imel ɗin mai ƙonawa na biyu (@rambler.ru, @firstmail.ltd, @proton.me, @outlook.comKuma suka mai da shi Primary.** Idan maharin ya riga ya musanya imel ɗin farko kuma ya kunna nasu Tabbacin Mataki Biyu.2SV), KADA KA ƙirƙiri sabon asusun LinkedIn tare da imel ɗin aikinka (ƙirƙirar sabon asusu akan adireshin imel ɗin yana karya hanyar haɗin bayanan bayanan LinkedIn zuwa tsohon bayanin martaba na UID). Madadin haka, je kai tsaye zuwa LinkedIn Persona ID na gwamnati na Farko a cikin Sashe na 1 na ƙasa.
5. ** Sanya Gargaɗi na Zamba na Jama'a kai tsaye a cikin gidan yanar gizon ku na hukuma, X/Twitter, da ma'aikaci mai tsira LinkedIn yana ciyar da masu neman aiki gargadi KADA su zazzage fayiloli, biyan kuɗin kayan aiki, ko aika lasisin tuki/SSNs zuwa kowane aiki da aka buga ta asusun da aka lalata. "Recruiting at [Company]" baji, kowane sa'a na shiru yana ba da dama ga masu neman aiki damfara da sunan kamfanin ku.
6. ** Bincika wurin aikin ma'aikacin da aka lalata don Infostealer malware (RedLine, Lumma, Stealc) ko tsawaitawa na Chrome (fake AI LinkedIn scrapers / ChatGPT outreach extensions).** Sama 65 percent na masu daukar ma'aikata da zartarwa na masu daukar ma'aikata na LinkedIn suna faruwa ba saboda mai amfani ya rubuta kalmar sirrin su a cikin rukunin yanar gizo na phishing ba, amma saboda sun shigar da wani ɗan damfara na Chrome yana ba da alƙawarin "Mai sarrafa Jagorar LinkedIn Mai sarrafa kansa / Mai Neman Imel" wanda ke ba da rai a cikin shiru li_at kuki tantance zaman duk lokacin da suka bude linkedin.com.

Bishiyar yanke shawara: Hacked keɓaɓɓen bayanin martaba na LinkedIn vs. Shafin Kamfanin LinkedIn da aka yi garkuwa da shi¶

Bi wannan tsarin aikin reshe don maido da sarrafawa bisa wane kadara aka lalata.

flowchart TD
    A["Gaggawa Tsaro na LinkedIn"] --> B{"Wane kadari na LinkedIn ya lalace?"}
    B -->|"Bayanin Bayanin Babban Jami'in Gudanarwa / Mai daukar ma'aikata (An kulle shi, an canza imel/2FA)"| C["KADA KA yi rajistar sabon asusun LinkedIn tare da tsohon imel ɗinka -> Buɗe LinkedIn 'Rahoton Asusun Lalacewa' / Gudun Tabbatarwar ID na Mutum"]
    C --> D["Duba wayar NFC / kamara tare da Fasfo na Gwamnati ko Lasisin Direba ta hanyar Persona -> LinkedIn Trust & Safety strips email hacker/2FA & aika hanyar sake saiti a cikin 24-72h"]
    B -->|"An Sace Shafi na Kamfanin LinkedIn na hukuma (masu aika aika ko masu satar bayanai)"| E{"Shin KOWANE abokin aiki mai rai har yanzu yana da damar 'Super Admin' akan Shafin Kamfanin?"}
    E -->|"Ee: Akalla tsaftataccen Super Admin 1 ya rage"| F["Surviving Super Admin nan da nan ya buɗe Shafin Kamfani -> Saituna -> Sarrafa Admins -> Cire ma'aikacin da aka yi kutse da duk Admins da ba a san su ba -> Yana goge bayanan zamba & Jerin Ayyuka"]
    E -->|"NO: Dan Dandatsa ya kori dukkan halaltattun Super Admins"| G["Daskare katin kiredit na kamfani da ke haɗe zuwa Manajan Yaƙin neman zaɓe -> Gabatar da 'LinkedIn Shafi Mai Gudanarwa / Buƙatar Rigima' daga tabbataccen imel na @companydomain.com"]
    B -->|"Bayanan Bayanan 'Ghost' Mai ɗaukar Ma'aikata na Ƙarya suna iƙirarin yin Aiki a Kamfanin ku (Ba a yi kutse ba, amma yin kwaikwayon)"| H["Shin Super Admin Babban Shafi na Kamfanin ya buɗe shafin 'Shafi -> Mutane / Ma'aikata' shafin -> Ba da rahoton bayanan martaba mara izini da ke da'awar aiki + fayil ƙetare Alamar Ciniki"]
    D --> I["Binciken kari na Chrome don dan damfara LinkedIn scrapers (satar kuki 'li_at') -> Juya SSO/Password kalmomin shiga -> Buga gargadin ɗan takarar jama'a"]
    F --> I
    G --> I
    H --> I

Sashe na 1: Farfadowa mataki-mataki lokacin da aka kulle ku daga asusun LinkedIn na sirri¶

Lokacin da mai kai hari ya keta bayanan martaba na LinkedIn, suna bin littafin wasan kwaikwayo na 90 na biyu: suna shiga (ta hanyar sata) li_at cookies ko phishing proxy), ƙara nasu adireshin imel ɗin da za a iya zubar da su, tabbatar da shi, inganta imel ɗin su zuwa Primary, share ainihin aikinku da adiresoshin imel na sirri, kuma kuyi rijistar nasu ** Authenticator App (2SV)** akan asusunku.

Lokacin da kake ƙoƙarin danna "Mantawa Password," LinkedIn ko dai ya ce "Ba za mu iya samun asusu tare da wannan imel ɗin ba" ko kuma ya nemi lambar auhenticator mai lamba 6 mai lamba 2SV wanda ke kan wayar ɗan hacker. Anan ne ainihin hanyar wucewa ta hukuma don mayar da asusun ku:

Hanyar 1: Haɓaka "Tabbatar da Identity tare da Mutum" 2SV / Imel Juye Juyin Juya (Mafi Sauri)¶

Idan har yanzu imel ɗinka yana aiki (ko kuma ka danna mahadar "Maida wannan canjin imel" a cikin imel ɗin gargaɗin kai tsaye LinkedIn da aka aika zuwa akwatin saƙo naka lokacin da ɗan hacker ya canza imel ɗinka), amma ɗan hacker ya kunna ** Tabbatar da Mataki Biyu (2SV)** don toshe ku: 1. Akan mai binciken kwamfutoci na tebur ** (hanyar kawar da ainihi tana yawan ɓoyewa akan masu binciken wayar hannu), je zuwa linkedin.com/login. 2. Shigar da imel da kalmar wucewa (ko danna Manta kalmar sirri? kuma shigar da lambar da aka aika zuwa imel ɗin ku). 3. Lokacin da LinkedIn ya tsayar da ku akan allon yana tambayar ** 6-lambobi Authenticator App code** (wanda dan gwanin kwamfuta ke sarrafa), duba kai tsaye ƙarƙashin akwatin lambar kuma danna: "Verify using another method"ko"Can't access your authenticator app? Verify your identity". 4. LinkedIn zai ƙaddamar da abin da aka haɗa ** Tabbatar da Shaida na Mutum ** QR code / gudana kamara: - Duba lambar QR tare da kyamarar wayar ku. - Hoton gaba da baya na ** ID ɗin Hoto da Gwamnati ta bayar* (Fasfo, Lasisin Direba, ko Katin ID na ƙasa; idan fasfo ɗinka yana da guntun NFC, Mutum na iya bincika guntuwar sirri ta hanyar mai karanta NFC na wayarka don tabbatarwa cikin sauri) kuma kammala binciken rayuwa mai kusurwa 3 kai tsaye. 5. Me zai faru na gaba: Da zarar Persona ya tabbatar da cewa cikakken suna na doka akan ID na gwamnati ya dace da Cikakken Sunan tarihi akan bayanin martabar LinkedIn, tsarin dawo da kai tsaye na LinkedIn ** yana hana Tabbatar da Mataki Biyu na dan gwanin kwamfuta ta atomatik (2SV** kuma ya aiko muku da hanyar shiga kai tsaye a cikin mintuna 15 zuwa awanni 48.

Hanyar 2: Lokacin da hacker ya riga ya goge adireshin imel ɗin ku daga asusun (No-Access Form)¶

Me zai faru idan mahadar "Mayar da canjin imel" a cikin akwatin saƙo naka ya ƙare (ko kuma ɗan hacker ɗin ya lalata akwatin saƙon imel ɗin ku kuma ya share faɗakarwa), don haka buga imel ɗin ku a cikin LinkedIn yana cewa "Ba a sami Account ba"? 1. Bude hukuma LinkedIn No-Login Compromised Account Recovery Form: linkedin.com/help/linkedin/ask/TS-RHA (kolinkedin.com/help/linkedin/ask/TS-F-APPEAL). 2. Cika filayen tare da madaidaicin aikin tiyata don haka mai ba da hanya tsakanin hanyoyin sadarwa mai sarrafa kansa ya aika tikitin ku kai tsaye zuwa ** Farfado da Asusu / ATO Queue : - Adreshin imel inda zamu iya samun ku: Shigar da adireshin imel mai tsafta, amintaccen amintaccen adireshin imel @yourcompany.com adireshin imel wanda ya dace da mai aiki na yanzu da aka jera akan tarihin aikin ku na LinkedIn). - URL na bayanin martabar ku na LinkedIn: Manna ainihin URL ɗin banzar bayanin martabar ku (misali, https://www.linkedin.com/in/firstname-lastname-12345/). (Idan dan gwanin kwamfuta ya canza sunan bayanin martaba ko URL ɗin banza, nemo asalin URL ɗinku a cikin tsohon tarihin burauza, sa hannun imel, ko cache na Google). - Adireshin imel a baya mai alaƙa da asusunku: Shigar da ainihin adireshin imel ɗin da yake Farko akan asusun ku na LinkedIn kafin harin. - Bayanin matsalar: > "An sace asusun LinkedIn na ([Profile URL]) ta hanyar shiga ba tare da izini ba a [Lokaci]. Maharin ya cire adireshin imel ɗina na farko ([Tsohon Email]), ya ƙara adireshin imel mara izini, kuma ya kunna 2SV mara izini. Imel ɗin kamfani na ya dace da ma'aikaci na na yanzu da aka tabbatar akan bayanin martaba, kuma a shirye nake in kammala tantancewar Persona. 3. Amintattun LinkedIn & Tsaro za su ba da amsa ga imel ɗin tuntuɓar ku tare da hanyar haɗin tabbatar da ID na mutum ɗaya na musamman. Da zarar kun ƙaddamar da ID na gwamnati ta wannan hanyar haɗin yanar gizon, za su cire imel ɗin ɗan hacker kuma su dawo da ainihin adireshin imel ɗin ku.

Sashe na 2: Mai da Shafin Kamfanin LinkedIn da aka sace da kuma tsarkake Super Admins na dan damfara¶

Fahimtar yadda LinkedIn's ** Admin Architecture** ke aiki yana da mahimmanci yayin wani lamari: - A LinkedIn Shafin Kamfanin (linkedin.com/company/your-brand* ba shi da shiga shi kadai. Madadin haka, ana ba da bayanan martaba na LinkedIn na sirri ɗaya daga cikin ayyuka masu gudanarwa da yawa: ** Super Admin **, ** Admin Content ***, Curator, Analyst, ko Postered Content Poster (da Biyan Mai Gudanar da Watsa Labarai a cikin Manajan Kamfen). - Super Admin ne kawai ke da ikon ƙarawa/cire wasu Admins, gyara bayanan shafi, ko kashe shafin, kuma duk wani Super Admin zai iya cire WANNE Super Admin tare da dannawa ɗaya (babu wani rawar "Shafi Mai ƙirƙira / Tushen" mai canzawa a daidaitattun Shafukan LinkedIn sai dai idan an sarrafa ta ta Manajan Kasuwancin kamfani).

Kwatanta Shafukan Kamfanoni guda biyu suna daidaita al'amuran kuma aiwatar da ainihin hanyar dawowa:

Sashe na 3: Dakatar da zamba na aiki na jabu, mai daukar ma'aikata InMails, da bayanan fakewa na "Ma'aikacin Karya"¶

Ko da lokacin da ba a yi kutse a shafin Kamfanin ku ba, masu aikata laifuka ta yanar gizo suna amfani da yanayin yanayin aikin buɗe LinkedIn ta hanyoyi biyu waɗanda ke lalata alamar ku da cutar da masu neman aikin:

1. Tsabtace bayan an yi sulhu LinkedIn Recruiter wurin zama ko aika aikin karya¶

Idan maharin ya sami damar shiga Shafin Kamfanin ku ko na ma'aikaci LinkedIn Recruiter (Recruiter Corporate / Recruiter Lite* lasisi: 1. Rufewa da Share Duk wani Rubutun Ayyuka na Zamba Nan da nan: - Je zuwa linkedin.com/my-items/posted-jobs/ (ko bude ** Mai daukar Ma'aikata -> Ayyuka *** / ** Shafi na Kamfanin -> Ayyuka ***), buɗe kowane jerin ayyukan da ba a ba da izini ba, danna ** Sarrafa aiki -> Rufe aiki *, kuma tuntuɓi kowane mai nema wanda ya nemi wannan jeri tare da gargaɗin tsaro nan da nan: > * "SANARWA TSARO: An buga wannan jerin ayyukan ba tare da izini ba yayin sasantawa a cikin asusu na ɓangare na uku. [Sunan Kamfanin] ba zai taɓa tambayar ku don saukar da ma'ajin software/code ba kafin kiran HR na hukuma, ba za ku taɓa yin tambayoyin rubutu kawai akan Telegram/WhatsApp ba, kuma ba za ku taɓa neman biyan kuɗi ko bayanan banki don kayan aiki ba. Da fatan za a share duk fayilolin da aka sauke. 2. Sake Matsakaicin Ƙimar Ciki a Cibiyar Gudanar da Ma'aikata ta LinkedIn: - Mai daukar ma'aikata Ma'aikacin Lasisi yakamata ya bude nan take LinkedIn Recruiter -> Saitunan Admin -> Sarrafa Masu amfani, nemo wurin zama na daukar ma'aikata, sannan danna Lasin Park / Sake Samun damar don haka nan take ana korar maharin daga na'urar daukar hotan takardu koda kuwa har yanzu suna rike da bayanan martaba na mai amfani. 3. ** Fitar da Ayyukan Ma'aikata & Saƙon Sabis na Saƙon Saƙon: - Bincika 'yan takarar da maharin ya aika sako ta InMail ko fitar dashi zuwa .csv yayin da taga warwarewa don haka Jami'in Kariyar bayanan ku (DPO) na iya kimanta kowane ɗan takara PII fallasa (duba da gangan imel ɗin biyan kuɗi na sirri ko fayil na HIPAA).

2. Yadda ake cire "Ma'aikatan Karya / Masu daukar Ma'aikata na Karya" wadanda ke jera sunayen kamfanonin ku a bayanansu ba tare da izini ba.¶

Domin LinkedIn yana ba da damar kowane sabon asusu don bugawa "Technical Recruiter at [Your Company Name]" a cikin sashin Kwarewarsu ba tare da tabbatar da yanki ta hanyar tsoho ba, zoben zamba suna ƙirƙirar bayanan ma'aikata na bogi da ke daure da tambarin Shafin Kamfanin ku don zamba a mafarautan aiki akan Telegram da WhatsApp.

Anan ga yadda Shafin Kamfani Super Admin zai iya cire tambarin kamfanin ku da da'awar aiki daga bayanan bayanan karya: 1. Yi amfani da Shafin Kamfanin "Mutane / Abokan Haɓaka" Kayan Aikin Cire: - Bude Shafin Kamfanin ku a matsayin Super Admin -> danna maɓallin Mutane akan kallon jama'a -> duba cikin jerin bayanan martaba waɗanda ke da'awar yin aiki a ƙungiyar ku. - Danna ** Digogi Uku (...** a kan bayanan karya -> danna Rahoto / Block -> Rahoton wannan bayanin -> Suna yin kamar wani ne ko wakiltar kamfanin da ba sa aiki (Fake profile / Not an employee). 2. ** Ƙaddamar da Alamar Kasuwanci ta Haɓaka / Samar da Ƙirar Ƙirar (Fastest Bulk Removal::** - Idan masu damfara sun ƙirƙiri asusun daukar ma'aikata na jabu da yawa ta amfani da sunan alamar kasuwanci mai rijista da tambarin kamfanin ku don gudanar da zamba, ƙaddamar da LinkedIn Ciniki Alamar Ciniki / Sanarwa na Zamba ** a linkedin.com/help/linkedin/answer/a1336378 daga adireshin imel ɗinku na doka/na kamfani da ke jera duk URLs na bayanan martaba masu laifi. Teamungiyar Takedown Legal Legal na LinkedIn galibi tana goge ingantattun zoben daukar ma'aikata na karya a cikin awanni 12 zuwa 24.

Sashe na 4: Me yasa naku li_at An sace kuki na zaman (Kuma yadda ake kulle LinkedIn har abada)¶

Idan ma'aikacin da aka yi sulhu yana da Tabbatarwa ta Mataki Biyu (2SV) sun kunna kuma basu taba rubuta kalmar sirrin su a cikin imel ɗin phishing ba, yaya mai ɗan fashin ya shiga cikin asusun LinkedIn ɗin su?

Duk lokacin da ka shiga www.linkedin.com akan Chrome, Edge, ko Brave, sabobin LinkedIn sun saita kuki na HTTP mai suna li_at (yana aiki har zuwa kwanaki 365). Duk wanda ya mallaki wannan aure li_at Zaren rubutu na iya liƙa shi a cikin nasu DevTools Storage tab kuma nan da nan shiga LinkedIn a matsayin ku, ketare kalmar sirrin ku da 2SV Authenticator App.

Akwai ** hanyoyin farko guda uku na ku li_at ana sace kuki**: 1. ** Daruruwan kari na Chrome na damfara ("LinkedIn Automation / AI Scrapers"):** Daruruwan kari na uku na Chrome da aka tallata ga masu daukar ma'aikata da masu siyarwa ("Nemi Imel na kowa akan LinkedIn", "Auto-Connect Bot", "AI Comment Generator") karanta a bayyane li_at kuki daga linkedin.com kuma aika shi zuwa uwar garken waje don haka bot ɗin girgijen su zai iya goge LinkedIn a ƙarƙashin ainihin ku. Lokacin da aka yi kutse (ko sayar da bayanan mai amfani), ana sace dubunnan asusun masu daukar ma'aikata cikin dare. 2. AiTM Reverse-Proxy PhishingEvilginx Faɗakarwar LinkedIn na karya): Saƙon imel da ke cewa "Kuna da sabon InMail guda 1 daga manajan haya" ko "An taƙaita shafin LinkedIn ɗinku" yana kaiwa ga wani yanki mai kama da wanda ke wakiltar lambar ku ta 2SV ta gaske kuma tana ɗaukar hoto. li_at. 3. ** Mai ba da labari Malware (Lumma / Vidar) Daga Fake Resumes:**Mai hari ya aika ma'aikaci a "Resume_John_Doe.zip" rumbun adana bayanai a .lnk ko .exe fayil ɗin da aka canza tare da alamar PDF.

Lissafin Mahimman Bayanan Ƙarfafa LinkedIn Mai Maki 5¶

Aiwatar da waɗannan tsare-tsare guda biyar a kan kowane zartarwa, mai daukar ma'aikata, da Admin Shafi na Kamfani a yau:

• 1. Hana Duk "LinkedIn Scraper / Automation" kari na Chrome & Juyawa li_at Ta Dannawa Sign Out:
  • Bude chrome://extensions (ko edge://extensions) da cire duk wani aiki na LinkedIn na ɓangare na uku, mai neman imel, ko tsawaita sharewa. Sai ka danna Ni -> Sign Out a cikin LinkedIn sannan ka koma ciki (danna Sign Out yana karyata tsoho karara. li_at kuki akan sabar LinkedIn, yayin da kawai rufe shafin burauza ya bar kuki da aka sace yana aiki).
• 2. Ana Bukatar Tabbataccen Tambarin Imel (Aiki)Confirmed Work Email+ CLEAR / Lambar ID na Gwamnatin Mutum akan Duk Bayanan Bayanan Gudanarwa & Mai daukar Ma'aikata:
  • Ka sa kowane ma'aikacin da ya cancanta ya cika Tabbacin Imel na Aiki* DA Tabbacin Imel na Mutum/Bayyana don bayanin martabar su ya nuna jami'in Tabbataccen Bajin Garkuwa. Sannan bayyana karara akan na kamfanin ku Careers shafin yanar gizon: "Dukkan halaltacce [Kamfanin] daukar ma'aikata suna nuna Ingantacciyar alama ta Wurin Aiki akan LinkedIn kuma za su yi muku imel kawai daga @ourcompany.com."
• 3. Kunna LinkedIn Single Sign-On (SSO) don Ma'aikata Recruiter, Sales Navigator, da Campaign Manager Kujeru:
  • A cikin LinkedIn Cibiyar Gudanarwa -> Saituna -> Saitunan Duniya -> Sa hannu guda ɗaya (SSO), haɗa duk kujerun LinkedIn na kamfani da aka biya zuwa ** Okta / ID na Microsoft Entra ID / Google Workspace SAML SSO** wanda aka tilasta shi tare da phishing mai jurewa ** FIDO2 Passwords / YubiKeys***.
• 4. Shafin Kamfanin Audit Super Admins Kowane wata ("Mafi ƙanƙanta 3, Matsakaicin 4" Doka):
  • Rike 3 zuwa 4 amintattun Super Admins akan Shafin Kamfanin ku (don haka mutum ɗaya yana barin ko kullewa bai taɓa tubalin shafin ba), kuma nan da nan ya rage mawallafin kafofin watsa labarun yau da kullun da hukumomin tallace-tallace na waje zuwa Content AdminkoSponsored Content Poster rawar (wanda ke ba da damar buga posts da tallan talla ** ba tare da izini ba don fitar da Super Admins).
• 5. Horar da Ma'aikata Ba za a taɓa buɗewa ba .zip, .rar, .iso, .lnk, ko Kariyar Kalmar wucewa "Resume / Portfolio" Links:
  • Masu daukar ma'aikata sune makasudin #1 a cikin kamfani don abubuwan da aka makala na malware saboda aikinsu shine budewa baki' ci gaba duk rana. Sanya ƙofofin imel na kamfani don toshewa .zip / .rar / .lnk / .exe / .scr abubuwan da aka makala da kuma umurci masu daukar ma'aikata su duba kawai .pdf kuma .docx ya sake komawa cikin mai duba gidan yanar gizon girgije.

Lambobin gaggawa na yanki da ka'idojin hukumar¶

Lokacin da asusun LinkedIn ko Shafi na Kamfani ya haifar da zamba na ayyukan zamba da aka yi niyya ga jama'a, cajin kuɗi na B2B mara izini, ko bayyanar ɗan takara PII, bayar da rahoto ga hukumomin da suka dace ta yanar gizo na ƙasa da hukumomin zamba:

Amurka da Kanada¶

• Aikin 'Yan sandan Gaggawa (Barazanar Jiki na Nan da nan / Swatting): Kira 911.
• Tarayya Laifukan Intanet & Rahoton Zamba Aiki:
  • Amurka: Shigar da rahoto tare da FBI Internet Complaint Centre (FBI)ic3.gov (musamman ambaton Kasuwancin Imel / Cin Haɗin Kuɗi na Kasuwanci ko Zamba na Ma'aikata na Ƙarya) da ** Hukumar Ciniki ta Tarayya (ReportFraud.ftc.gov)**. Idan jihar ta dauki nauyin Contagious Interview an rarraba malware ga injiniyoyi ta asusun ku da aka sace, sanar da CISA (cisa.gov/report).
  • Kanada: Rahoto zuwa ** Cibiyar Yaki da Zamba ta Kanada (CAFC, antifraudcentre-centreantifraude.ca ko 1-888-495-8501*** da ** Cibiyar Tsaro ta Intanet ta Kanada (Cibiyar Tsaro ta Intanet).cyber.gc.ca)**.

Ƙasar Ingila¶

• Aikon Yansandan Gaggawa: Kiran 999.
• ** Laifukan Cyber, Zagi na daukar Ma'aikata & Rahoto Cewar GDPR:**
  • Bayar da rahoton karɓar asusun kamfanoni da zamba na daukar ma'aikata zuwa ** Zambaactionfraud.police.uk ko 0300 123 2040** kuma tuntuɓi ** National Cyber ​​Security Center (NCSC*** shiriya.
  • ** Aiki (Aiki)jobsaware.co.uk):** Tashar tashar sa-kai ta gwamnatin Burtaniya mai goyon bayan gwamnati (wanda ke aiki tare da 'yan sanda na Biritaniya da SAFERjobs) don ba da rahoton buga ayyukan LinkedIn na karya da zamba na daukar ma'aikata.
  • ** UK ICO (ico.org.uk):** Idan aka yi sulhu da LinkedIn Recruiter wurin zama ya fallasa CVs, lambobin waya, da bayanin kula, tantance ko ana buƙatar rahoton GDPR na awanni 72 na UK 33** ga Ofishin Kwamishinan Watsa Labarai.

Tarayyar Turai¶

• Lambar Gaggawa ta Pan-Turai: Kira 112.
• ** GDPR & EU Digital Services DokarDSA) Tashin hankali:**
  • Idan wani maharin ya sami isa ga CV ɗin ɗan takara ko bayanan sirri a cikin ma'aikacin LinkedIn, sanar da Hukumar Kula da Kariyar Bayanai ta ƙasa (DPC Ireland shine jagoran ƙungiyar EU Unlimited Company na LinkedIn Ireland, tare da na gida CNIL / BfDI / AEPD) a cikin awanni 72* ƙarƙashin GDPR Article 33.
  • Ƙarƙashin Dokar Sabis na Dijital na EU DSA, Kasuwancin Turai da ɗaiɗaikun mutane kuma na iya haɓaka yaudarar dandali da ba a warware ba da abubuwan zamba ta hanyar LinkedIn sadaukarwa **EU Ba bisa ka'ida ba.

Australia da New Zealand¶

• Aikon Gaggawa: Kira 000 a Ostiraliya ko 111 a New Zealand.
• Rahoton Laifukan Cyber ​​& Zamba:
  • Ostiraliya: Ba da rahoto game da karɓar asusun kamfanoni ta hanyar cyber.gov.au (ReportCyber / ACSC) da bayar da rahoton zamba na daukar ma'aikata na karya ga ACCC Scamwatch (scamwatch.gov.au). Idan an nemi lasisin tuƙi ko fasfo na ƴan Australiya daga wani ma'aikacin ma'aikata na karya da ke nuna alamar ku, tuntuɓi IDCARE (idcare.org ko 1800 595 160).
  • New Zealand: Rahoton zuwa CERT NZ (cert.govt.nz* da ** Netsafe (netsafe.org.nz ko 0508 NETSAFE)**.

Indiya da Asiya-Pacific¶

• Indiya: Kira 1930 (Layin Taimakon Laifukan Intanet na Kasa) ko shigar da ƙara akan cybercrime.gov.in a karkashin Ma'aikatar Harkokin Cikin Gida (I4C) don zamba na aiki na karya da satar kafofin watsa labarun kamfanoni, da bayar da rahoto game da lamuran tsaro na kasuwanci ga CERT-In (cert-in.org.in* a cikin 6 hours.
• Singapore & Japan: A cikin Singapore, kira 999 (Gaggawa) ko Layin Taimakon Anti-Scam1799** da kuma shigar da rahoton e-report na Rundunar 'yan sanda ta Singapore (police.gov.sg). A cikin Japan, tuntuɓi Ofishin Tuntuɓar Laifukan Intanet na Yan Sanda ** Prefectural Police Consultation Desk#9110)**.

Tambayoyin da ake yawan yi¶

Shin yana da lafiya don bincika Fasfo na ko Lasisin Direba a cikin allon tabbatarwa na "Mutum" akan LinkedIn don dawo da asusuna da aka yi kutse?¶

Ee, muddin kun fara dawo da kai tsaye akan jami'in `linkedin.com` domain (ko ta hanyar hukuma `@linkedin.com` hanyar haɗin tikitin tallafi). LinkedIn yana amfani da **Shaidancin Mutum, Inc.** (da **CLEAR** a Arewacin Amurka) a matsayin jami'in sa, SOC 2 Nau'in II da ISO 27001 ƙwararrun abokin aikin tabbatar da ainihi. Lokacin da kuka bincika ID na gwamnatin ku kuma ku ɗauki hoton kai tsaye ta hanyar Persona a lokacin dawo da asusun LinkedIn, Persona yana tabbatar da ɓoye a ɓoye cewa sunan doka da fuskarku sun yi daidai da mai asusun kuma suna sigina LinkedIn Trust & Safety don cire adireshin imel na dan gwanin kwamfuta da ingantaccen 2SV. Kada ku taɓa yin imel ɗin ɗanyen JPEG na fasfo ɗinku azaman abin da aka makala imel ɗin da ba a ɓoye ba zuwa adireshin imel ɗin bazuwar; loda shi kawai a cikin widget din Persona na hukuma.

Ta yaya wani ya ƙara kansu a matsayin "Super Admin" zuwa Shafin Kamfanin namu na LinkedIn ba tare da Shugabanmu ya sami faɗakarwa ba?¶

Saboda Shafukan Kamfanin LinkedIn suna amfani da izini na Super Admin na peer-to-peer, **kowane ma'aikaci ɗaya wanda ke riƙe da Super Admin role** akan Shafin Kamfanin naku zai iya ƙara sabon Super Admin kuma ya cire duk sauran Super Admins da ke cikin daƙiƙa 10. A kusan kowane satar Shafin Kamfanin, maharin bai yi kutse ba "Sabar LinkedIn"; maimakon haka, sun lalata asusun LinkedIn na mutum na yanzu ko tsohon manajan tallace-tallace, ɗan kwangila na waje, ko wanda ya kafa wanda har yanzu ya manta gata na Super Admin akan Shafin Kamfanin ku, ya yi amfani da zaman mutumin don ƙara asusun ƙonawa azaman sabon Super Admin, sannan ya kori ƙungiyar ku daga shafin.

Shin zan ƙirƙiri sabon bayanin martaba na LinkedIn tare da imel ɗin aiki na yayin da nake jiran Tallafin LinkedIn don dawo da bayanin martaba na da aka sace?¶

A'a, **Kada ku taɓa ƙirƙirar sabon asusun LinkedIn ta amfani da adireshin imel iri ɗaya ** wanda aka haɗa a baya zuwa bayanan bayanan ku da aka yi kutse yayin murmurewa. A cikin bayanan bayanan baya na LinkedIn, adireshin imel za a iya ɗaure shi da UID Memba ɗaya kawai a lokaci guda. Idan dan gwanin kwamfuta ya cire imel ɗin ku daga ainihin bayanan ku na ɗan shekara 10 kuma nan da nan kun yi amfani da wannan imel ɗin da aka 'yantar don yin rajistar sabon asusun ajiya, injiniyoyin dawo da LinkedIn ba za su iya jujjuya bayanan asalin ku ta atomatik zuwa wannan adireshin imel ɗin ba har sai kun fara rufewa da goge kwafin asusun ajiyar ku, ƙara kwanakin jinkiri ga dawo da ku.

Me yasa da yawa daga cikin 'yan damfara ba zato ba tsammani suna lissafin kansu a matsayin "Ma'aikata na HR" a kamfaninmu akan LinkedIn, kuma zamu iya toshe baki daga iƙirarin suna aiki a nan?¶

Ta hanyar ƙira ta tarihi, LinkedIn yana bawa kowane mai amfani damar buga kowane sunan kamfani cikin sashin "Kwarewa" na bayanin martabarsu ba tare da buƙatar amincewar farko ba daga Mai Gudanarwar Shafin Kamfanin. Masu aikata laifuka-scam syndicates suna cin zarafin wannan ta hanyar zazzage bayanan martaba na sockpuppet waɗanda ke jera kamfanin ku a matsayin ma'aikacin su na yanzu don haka tambarin kamfanin ku ya bayyana kusa da sunan su lokacin da suke saƙon waɗanda abin ya shafa. Duk da yake ba za ku iya riga-kare filin Ƙwarewa a duniya ba, Super Admins na Kamfanin ku ya kamata ya duba shafin **Mutane** a kan Shafin Kamfanin ku, tuta bayanan martaba mara izini ta hanyar ** Rahoton -> Ba ma'aikaci ba ***, kuma yana buƙatar duk masu daukar ma'aikata na gaske su kunna lambar * Tabbataccen Imel na Aiki na LinkedIn*** (wanda ke tabbatar da cryptographically cewa suna sarrafa wani sirri `@yourcompany.com` inbox).

Idan dan gwanin kwamfuta ya gudu $10,000 na tallace-tallacen zamba a cikin Manajan Yakin namu na LinkedIn ta yin amfani da ajiyar katin kiredit na kamfani, shin LinkedIn zai dawo da kuɗin?¶

Ee, idan kun bayar da rahoton karɓo asusun da ba a ba da izini ba nan da nan ta hanyar Tallafin LinkedIn da mai ba da katin kiredit na kamfani, LinkedIn Ad Fraud & Billing Team kullum yana ɓarna ko mayar da kuɗin tallace-tallace mara izini da aka samar a lokacin da aka tabbatar da taga satar mutane. Kada kawai a fara dawo da cajin katin kiredit makaho kafin buɗe cikakken **LinkedIn Compromised Account & Ticket Spend mara izini**, kamar yadda cajin da ba a sanar ba zai iya haifar da dakatarwar dindindin ta atomatik na asusun talla na Kamfanin ku; maimakon haka, daskare katin akan *sabon* tuhume-tuhume yayin shigar da takaddamar lissafin kuɗi ta ATO tare da LinkedIn.

Tushen da jagorar hukuma¶

• LinkedIn Trust & Safety / Cibiyar Taimako: Rahoto da Maido da Asusun LinkedIn da aka Lamuncelinkedin.com/help/linkedin/ask/TS-RHA, Tabbatar da Shaidar ku tare da Persona don Mai da Samun shiga, * Sarrafa Manajan Shafukan LinkedIn (Super Admin Tsaron Matsayi)*, da Bayar da Bayanan Bayanan Karya da zamba a Aiki.
• ** Ofishin Bincike na Tarayya (FBI IC3) & Tsaro ta Intanet da Hukumar Tsaro ta Kayan Aiki (CISA, Amurka):** * Sanarwa da Sabis na Jama'a akan zamba, Ƙididdigar Ƙididdigar Ƙididdigar Ƙwararrun Ƙwararrun Ƙwararru (Contagious Interview / DPRK IT Ma'aikata Tsare-tsare), da Gudanar da Asusun Social Media na Kamfanin*.
• Manyan Google & Hankalin Barazana: Bincike Satar Kuki na Zama ((li_at Faɗakarwar Kuki ta hanyar Ƙwararren Mai Rarraba Mai Haɓaka da Ƙwararrun Ƙwararrun Ƙwararrun Ƙwararrun Ƙwararrun Ƙwararrun Ƙwararrun Ƙwararrun Ƙwararrun Ƙwararru da Masu Gudanarwa.
• Hukumar Ciniki ta Tarayya (FTC, Amurka) & UK JobsAware / Zamba: Jagorancin Ma'aikaci da Mai Neman Aiki akan Zamban Ayuba da Zamban Kayan Aikin Gaba.

Jagora masu alaƙa¶

• Social media account takeover da hacking
• Kafofin watsa labarun phishing da zamba
• Tashar mahaliccin da aka sace ta hanyar zamba ta livestreams
• Birgediya kan layi da aka yi niyya, kiran cin zarafin ma'aikata, da kulle kewayen dijital
• Ba zato ba tsammani an aika imel ɗin biyan kuɗi na sirri ko fayil na HIPAA ga mai karɓa ba daidai ba
• Lambobin gaggawa