Reddit, Discord, ko 4chan Brigading, Doxxing, da Deepfake Harassment Campaign: Kulle Subreddits, AutoMod Regex, da Cloudflare Karkashin Harin Yanayin¶

Gano cewa an buga sunan ku, al'ummarku, ko ƙananan kasuwancinku azaman zaren manufa akan allon hoton da ba'a san sunan ku ba, dandalin hari, ko ƙungiyar taɗi mai ma'ana babban haɗari na dijital da aminci na jiki. A cikin mintuna kaɗan na zaren da aka yi niyya, ɗaruruwan asusun haɗin gwiwar suna aiwatar da hare-haren giciye lokaci guda: ambaliya uwar garken Discord tare da raƙuman ruwa-hannun bot da ɓarna mai ɓarna, ƙaddamar da al'ummar ku Reddit tare da magudin zaɓe da ɓatanci, loda abubuwan da ba su yarda da AI ba, buga adireshin gidan ku da lambobin wayar ku na HTTP7, ƙaddamar da rukunin yanar gizon yanar gizo na HTTP-dox. Idan wani a cikin gidan ku ya fuskanci barazanar jiki nan take, cin zarafi da makami, ko kuma wanda ake zargi da yin kira, buga sabis na gaggawa na gida nan da nan ta amfani da duniyarmu ta duniya. lambobin gaggawa directory, kuma haɗa wannan jagorar kullewar fasaha tare da mu cin zarafin kan layi, doxxing, da cin zarafi ta yanar gizo, zargin karya na kwayar cuta, soke taron jama'a, da kullewar dijital, kuma Discord uwar garken ko dawo da harin al'umma jagorori.

Tsayar da kai farmakin dandali da yawa yana buƙatar canzawa daga daidaitawar ɗan adam zuwa ƙin yarda da kewaye mai sarrafa kansa a cikin mintuna 15 na farko. Ƙungiya mai daidaitawa ta ɗan adam ba za ta iya danna maɓallan hanawa cikin sauri fiye da rubutun Python mai jujjuya wakilai na zama da asusun da za a iya zubar da su ba. Ta hanyar shigar da Kariyar Raid na asali na Discord da tacewa AutoMod regex, kulle Subreddit ɗinku zuwa Masu Amfani da Mahimmanci tare da tsattsauran Gudanarwar Crowd, sanya wuraren yanar gizon ku a bayan Cloudflare's "Ina Ƙarƙashin Hari" JavaScript da ƙalubalen Jujjuya, da ɗaukar shaidar sirrin da kotu ta yarda da ita (WARC rumbun yanar gizo da SHA-256 digests) kafin maharan su goge zaren daidaitawar su, kuna kawar da fa'idar aikin su kuma ku kare lafiyar jikin ku.

Yi wannan yanzu¶

1. Kulle uwar garken Discord ɗinku a cikin daƙiƙa 15 ta amfani da "Dakata Gayyata" da "Dakata DMs." Danna ** Sunan uwar garken** a saman hagu na Discord -> zaɓi ** Ayyukan Tsaro** (ko ** Saitunan Sabar -> Saitin Tsaro -> Kariyar Raid ) -> duba duka ** Dakatar da Gayyata *** 4 gayyata *** 4. Na gaba, je zuwa ** Saitunan uwar garken -> Matsayi -> Izini na asali (@everyone kuma kunna KASHE Send Messages, Send Messages in Threads, Attach Files, Embed Links, Add Reactions, Create Public/Private Threads, kuma Mention @everyone, @here, and All Roles.
2. ** Canza al'ummar ku ta Reddit (Subreddit) zuwa "Ƙuntata" ko "Private" kuma saita Gudanar da Crowd zuwa "Maƙasudi."** Buɗe ** Kayan aikin Mod -> Nau'in Al'umma** kuma zazzage mai zaɓi daga ** Jama'a ** zuwa ** Ƙuntata *** (masu amfani da izini kawai za su iya yin post ko sharhi) ko ** Masu zaman kansu *** (masu amfani da izini kawai za su iya duba al'umma) don yanke iskar oxygen. Nan da nan buɗe ** Kayan aikin Mod -> Filters Safety -> Sarrafa Jama'a** kuma saita duka ** Matsayin Post *** da ** Matsayin Sharhi ** zuwa ** Matsakaicin Matsakaicin *, kuma kunna Ban Evasion Filter da ** Filter Harassment.
3. ** Kunna Cloudflare "Karƙashin Yanayin Hari" kuma toshe haɗin tushen IP kai tsaye akan gidan yanar gizon ku na sirri ko na kasuwanci.** Shiga cikin Cloudflare Dashboard, zaɓi yankin ku, kuma kunna **Karƙashin Yanayin Hari Wannan yana tilasta kowane baƙo don ƙaddamar da lissafin JavaScript na tsaka-tsaki da ƙalubalen amincin mai bincike kafin isa sabar gidan yanar gizon ku, dakatar da HTTP mai sarrafa kansa. POST su zama spam, sharar fage, da gajiyawar bandwidth sun mutu a cikin waƙoƙinsu.
4. Kira ofishin 'yan sanda na yankinku don sanya "Swatting / Premise Alert" mai aiki a adireshinku na zama. Idan maharan sun buga adireshin gidan ku akan dandalin tattaunawa ko allon hoto, kira sashin gudanarwa na 'yan sanda na yankinku ko layin aika gaggawar gaggawa. Yi bayanin cikin nutsuwa cewa kai ne wanda aka azabtar da kai harin doxxing na kan layi da cin zarafi kuma ka nemi ** Bayanan Bayanin Tarihi / Shawarar Shawarwari** akan adireshi na zahiri da ke buƙatar masu aikawa don tabbatar da duk wani garkuwa da 911/999/112 da aka yi garkuwa da su ko harbin kira a gidanka ta lambar wayar hannu kafin a tura ƙungiyoyin dabara.
5. Ajiye zaren daidaita maharan ta amfani da Archive.today, Browsertrix / ReplayWeb.page (WARC), kuma SHA-256 Hashing cryptographic KAFIN a ba da rahoton su don shafewa. Zaren allo (4chan, Soyjak, Kiwi Farms, dan damfara tashoshi Telegram) auto-prune (404) ko share ta masu aiki da zarar an ruwaito. Ɗauki PDFs masu cikakken shafi, albarkatun tushen HTML, masu amsan HTTP, da WARC rumbun adana bayanai nan da nan sannan a shigar da su SHA-256 shigar da hashes don haka jami'an tsaro da lauyoyin farar hula su sami tabbataccen shaidar sarkar tsarewa.
6. ** Kulle bayanan martaba na kafofin watsa labarun ku, soke jerin jerin adireshi na jama'a, kuma ba da damar Maganar Amintaccen Iyali na Verbal.** Saita Instagram, X (Twitter), Facebook, TikTok, da asusun LinkedIn zuwa ** Masu zaman kansu / Kulle**, ɓoye jerin abokanka da masu bi, kuma ba wa iyayenku, abokin tarayya, da ma'aikata sirrin sirrin kiran waya na AI. imel da ke iƙirarin fitowa daga gare ku.

Bishiyar yanke shawara: Zartar da haɗin gwiwar kai hari da yaƙin cin zarafi¶

Yi amfani da wannan bishiyar bambance-bambancen aiki a cikin mintuna 15 na farko don keɓe kowane filin hari cikin tsari mai fifiko: aminci ta jiki ta farko, dandamalin al'umma na biyu, kayan aikin yanar gizo na uku, da shaidar bincike ta huɗu.

flowchart TD
    RaidAlert["Haɗin Raid, Zaren Doxxing, ko An Gano Harin Zurfi"] --> PhysicalCheck{"An Doxxed Adireshin Gidanku, Wayarku, ko Wurin Aiki?"}
    PhysicalCheck -->|"Ee: Adireshin Jiki ko An Nufin Iyali"| PoliceAlert["Mataki na 1: Kira Layin Gaggawa na Yansanda na Gida don Sanya Faɗakarwar Farko na Swatting -> Daskare Ofishin Kiredit -> Gargaɗi Mai Aiki HR & Iyali Tare da Safe-Kalma"]
    PhysicalCheck -->|"A'a: Dandalin Dijital & Al'ummomi Kawai"| PlatformTriage["MATAKI 1: Gano dandali da aka yi niyya (Discord, Reddit, Domain Web, Social Media)"]
    PoliceAlert --> PlatformTriage
    PlatformTriage --> DiscordNode["SERVER DISCORD: Kunna 'Dakata Gayyata' & 'Dakata DMs' -> Tsage @Kowa ya Aika/Haɗe/ Haɗa / Rukunin Yanar Gizo -> Sanya AutoMod Regex & Tabbatar da Waya Mafi Girma"]
    PlatformTriage --> RedditNode["REDDIT SUBREDDIT: Saita Al'umma zuwa Ƙuntatacce/Mai zaman kansa -> Ikon Jama'a zuwa Madaidaici -> Aika AutoMod Account-Shekaru/ Ƙofar Karma & Regex Slur/Tacewar Doxx"]
    PlatformTriage --> WebNode["Yanar Gizo na sirri / Kamfanin: Kunna Cloudflare 'Karƙashin Yanayin Hari' -> Ƙara WAF Geo/ASN/Dokokin Iyakan Iyaka -> Juya Asalin Sabar IP & Kulle Fom ɗin Tuntuɓi"]
    DiscordNode --> DeepfakeCheck{"Shin Maharan Suna Buga Zurfafan Fake ko Hoto marasa Imani?"}
    RedditNode --> DeepfakeCheck
    WebNode --> DeepfakeCheck
    DeepfakeCheck -->|"Ee: Sinthetic NCII ko Kwaikwaya"| NCIITakedown["Hotunan Hash a StopNCII.org / TakeItDown.ncmec.org -> Fayil na Gaggawa DMCA & Platform NCII Takedowns -> Rahoton 'Yan Sanda"]
    DeepfakeCheck -->|"A'a: Spam, ɓata suna, ko DDoS"| EvidenceLock["Ɗauki Rubutun WARC, Hotunan Cikakkun Shafi, & SHA-256 Hashes na Zaren Raid na Tushen Kafin Bayar da Rahoto don Cirewa"]
    NCIITakedown --> EvidenceLock

Sashe na 1: Kulle uwar garken Discord a cikin dakika 15 (Yanayin Raid, AutoMod Regex, da Wick)¶

Lokacin da zaren hoto ya zubar da hanyar haɗin gayyata ta Discord ko ta kai hari ga uwar garken al'umma, maharan suna amfani da hanyoyi guda biyu: maharan da ke haɗawa don sanya hotuna masu ban tsoro, bayanan doxxing, ko ƙayyadaddun ƙa'idodin Sabis na ƙarya, da kayan aikin hari na Python/Golang mai sarrafa kansa yana harba buƙatun 50 a sakan daya ta hanyar wakilai na zama.

1. Makulli na Gaggawa na Gaggawa na Biyu 15¶

Aiwatar da waɗannan madaidaitan dannawa don rufe kewayen uwar garken nan da nan:

+-------------------------------------------------------------------------+
|               DISCORD 15-SECOND EMERGENCY RAID LOCKDOWN                 |
+-------------------------------------------------------------------------+
| [00:03s] Server Name -> Security Actions -> [X] Pause Invites (24h)     |
|                                          -> [X] Pause DMs (24h)         |
| [00:08s] Server Settings -> Safety Setup -> Verification Level: HIGHEST |
|          (Requires Verified Phone Number on Discord Account)            |
| [00:12s] Server Settings -> Roles -> @everyone -> Clear Permissions     |
|          (Toggle OFF: Send Messages, Attach Files, Embed Links,         |
|           Add Reactions, Create Threads, Mention @everyone)             |
| [00:15s] Server Settings -> Integrations -> Webhooks -> Delete Unknown  |
+-------------------------------------------------------------------------+

1. ** Sadarwa Pause Invites kuma Pause DMs:**
2. Dakatar da gayyatar yana hana kowane lambar gayyata ta dindindin, hanyar haɗin ɗan lokaci, da al'adar Sabar Sabar 3 ɗinku ** URL ɗin banza ** (discord.gg/yourname) lokaci guda ba tare da share hanyoyin ba. Mahara suna danna hanyar haɗin kan allon hoton suna karɓar nan take "Invites are currently paused for this server" kin amincewa.
3. Dakatar da DMs yana hana asusu waɗanda suka zame cikin uwar garken kafin kullewa daga aika saƙonnin kai tsaye waɗanda ba a buƙata ba waɗanda ke ɗauke da malware, gore, ko adiresoshin mazauni ga membobin yankin ku.
4. Kulle Tashoshi-Takamaiman Izinin Hakuri (The #general Override Trap::
5. Idan tashar kamar #general yana da alamar * Green Checkmark na gida (Allow*** saita don @everyone kan Send Messages, canje-canjen rawar duniya ba za su kashe wannan tashar ba. Danna kan tashar dama -> ** Shirya tashar -> Izini -> @everyone, danna Ja X (Deny) na Send Messages, Send Messages in Threads, kuma Add Reactions, kuma saita Slowmode zuwa ** 6 Hours.
6. ** Kashe ɓacin rai (Add Reactions & Use External Emoji::**
7. Mahara sukan rubuta slurs ko doxxing baƙaƙe a ƙarƙashinsa #announcements rubuce-rubuce ta amfani da haruffa emojis lokacin da aka kulle taɗi. Tabbatar duka biyu Add ReactionskumaUse External Emoji ana kunna ** KASHE** @everyone duniya da ciki #announcements soke.

2. Kwafi-Manna Discord AutoMod Regex Filters (Blocking Doxxing, Slurs, and Raid Links)¶

'Yan asalin Discord AutoMod (Saitunan Sabar -> Saitin Tsaro -> AutoMod) yana kimanta saƙonni akan sabobin bayan Discord kafin suna yin taɗi. Ko da asusun mai barci yana da izinin yin magana, AutoMod yana toshe saƙon a matakin ƙofa, yana yin rajistar ƙoƙarin zuwa na sirri. #mod-log Tashoshi, kuma yana aiki da atomatik ** Lokaci na awa 24**.

Ƙirƙirar al'ada ** Keyword AutoMod & Dokokin Regex ** (ta amfani da maganganun Rust-flavor na yau da kullun) don waɗannan ɓarna huɗu na hare-hare:

Hakanan saita ginanniyar Discord a ciki ** Toshe Ambaton Spam *** a cikin ** Saitin Tsaro -> AutoMod ***: saita iyaka zuwa ** 3 keɓaɓɓun ambaton kowane saƙo ** tare da ** Toshe Saƙon + Lokacin Sa'a 24 **.

3. Saita Ƙofar Tabbatarwa da Bots Anti-Nuke (Wick, DoubleCounter, ko Ƙwararren Ƙwararren Ƙwallon Ƙasa)¶

Idan dole ne ku sake buɗe uwar garken Discord ɗinku yayin da ake ci gaba da yaƙin cin zarafi a hankali na tsawon makonni: 1. ** Sanya duk sabbin asusun da aka haɗa cikin keɓewar Keɓewa / Yankin Tabbatarwa:** - Tabbatar da @everyone rawar zai iya ganin ** sifili ** tashoshin al'umma. - Ana buƙatar sabbin membobi su wuce ko dai ɗan asalin Discord Tabbataccen Waya + Dokokin Sabar Sabar ko bot ɗin tabbatarwa na anti-alt/anti-proxy (irin su Wick ko DoubleCounter, waɗanda ke gano VPN/matsakaicin ASN proxies da tuta alamar sawun yatsa alt-accounts) @Member rawar. 2. Kada ku amince da faɗakarwar "Tabbatar lambar QR": Tunatar da membobin ku ta hanyar sanarwar da aka saka cewa halalcin bots ɗin ba zai taɓa tambayar masu amfani da su bincika lambar QR tare da ƙa'idar wayar hannu ta Discord.

Sashe na 2: Kulle al'ummar Reddit (Subreddit) da brigading da doxxing¶

Lokacin da subreddit (r/YourCommunity) yana da alaƙa daga wani shafi na waje, abokin hamayyar subreddit, ko ƙungiyar taɗi na waje, maharan sun mamaye. new yin layi tare da gore, zurfafa zurfafa, ko bayanan sirri yayin jefa kuri'a na halal da kuma cin zarafin "Reddit Cares" (u/RedditCareResources* Maɓallin rahoton cutar kansa don musgunawa masu daidaitawa.

1. Garkuwan Gaggawa na Mataki na 4 Subreddit¶

1. ** Juya Nau'in Al'umma zuwa Restricted ko Private (Mod Tools -> General Settings -> Community Type::**
2. An taƙaita: Kowa na iya karanta rubuce-rubucen da ke akwai, tare da hana maharan yin iƙirarin sun ƙwace al'ummar ku, yayin da Masu Amince kawai za su iya gabatar da sabbin posts ko sharhi.
3. Mai zaman kansa: Yana ɓoye duk rubuce-rubuce, sharhi, da sunayen masu amfani da masu daidaitawa a kan labarun gefe daga asusun da ba a yarda da su ba.
4. ** Saita Crowd Control zuwa Mafi Girma (Mod Tools -> Safety Filters -> Crowd Control::**
5. Kunna Ikon Jama'a don Rubuce-rubuce da Sharhi a matakin Maƙasudi, sa'annan kunna ON ** Rike maganganun da mutane ke sarrafa su don bita**. Wannan yana ɗaukar gabatarwa ta atomatik daga asusu tare da karma mara kyau, sabbin asusun Reddit, da masu amfani waɗanda basu shiga cikin subreddit ɗin ku ba.
6. ** Kunna Harassment Filter kuma Ban Evasion Filter (Mod Tools -> Safety Filters::**
7. Saita Ban Tacewar Kaura zuwa ** Babban + Amincewa mai matsakaici (Within the last year** kuma zaɓi ** Tace (Rike a Mod Mod Queue)** don kama haramtattun mahara suna jujjuya alt asusu ta hanyar Reddit's gefen na'urar sabar sabar da IP telemetry.

2. Kwafi-Manna Reddit AutoModerator Dokokin Yakin Gaggawa na YAML¶

Bude https://www.reddit.com/r/YOURSUBREDDIT/about/wiki/config/automoderator kuma liƙa waɗannan tubalan YAML a saman tsarin daidaitawar ku:

---
# RULE 1: EMERGENCY BRIGADE LOCKDOWN GATE (Blocks non-established accounts)
type: any
author:
    account_age: "< 60 days"
    comment_karma: "< 100"
    combined_subreddit_karma: "< 15"
    is_contributor: false
    satisfy_any_threshold: true
action: filter
action_reason: "RAID LOCKDOWN: New account or low karma [{{match}}]"
---
# RULE 2: ANTI-DOXXING & RAID LINK INTERCEPTOR (Silent Removal + Modmail Alert)
type: any
title+body (regex, includes):
    - '\b(?:\+?1[-.\s]?)?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b'
    - '(?i)\b(?:victim_last_name|victim_street_name|victim_employer)\b'
    - '(?i)(?:kiwifarms|4chan\.org|4channel\.org|soyjak|t\.me/)'
action: remove
action_reason: "DOXXING / RAID LINK INTERCEPTED: [{{match}}]"
modmail_subject: "URGENT: AutoMod Blocked Doxxing / Raid Link by /u/{{author}}"
modmail: "Removed {{kind}} by /u/{{author}} matching [{{match}}]. Permalink: {{permalink}}"
---
# RULE 3: MASS-REPORT BRIGADE PROTECTION (Prevents auto-removal of mod announcements)
type: any
reports: 5
author:
    is_moderator: false
action: filter
action_reason: "High report volume (5+ reports) held for review"
---
# RULE 4: SHADOW-FILTER KNOWN TROLL ACCOUNTS WITHOUT TIPPING THEM OFF
type: any
author:
    name: ["RaiderAccountOne", "RaiderAccountTwo"]
action: remove
action_reason: "Silent shadow-filter on active raid account"
---

3. Dakatar da "Reddit Cares" Cin Zarafi da Haɗuwa zuwa r/ModSupport¶

• Katangewa u/RedditCareResources Cin Zarafi: Bude sakon daga u/RedditCareResources, danna Raba wannan saƙon (wanda ke nuna asusun ɗan rahoton karya don rahoton cin zarafi), sannan a ba da amsa. STOP.
• ** Haɓakawa zuwa Reddit Admins:** Aika Modmail zuwa r/ModSupport (https://www.reddit.com/message/compose?to=/r/ModSupport&subject=Active+External+Brigade+and+Doxxing+Emergency) tare da rukunonin hanyoyin haɗin kai zuwa zaren hari na waje, 10 zuwa 20 brigading usernames/permalinks, da lokacin farawa na UTC don haka Reddit's Safety team zai iya amfani da garkuwar brigade subreddit da kuma dakatar da gungu na sockpuppet.

Sashe na 3: Kare gidan yanar gizon ku na keɓaɓɓu ko na kasuwanci tare da Cloudflare "Karƙashin Hari" da dokokin WAF¶

Lokacin da hari ya kai hari ga mahalicci mai zaman kansa, ɗan jarida, mai buɗaɗɗen tushe, ko ƙaramar kasuwanci, maharan kusan koyaushe suna yin amfani da gidan yanar gizon keɓaɓɓen mutum ko na kamfani (yourdomain.com). Suna bin manufofi guda uku: 1. ** Asalin Ganowar IP & DDoS: *** Kunna rukunin yanar gizonku ta layi ta hanyar ambaliya ta HTTP ko tara manyan kuɗaɗen bandwidth mara sabar / girgije (Kin Wallet) akan dandamali kamar AWS, Vercel, Firebase, ko Netlify. 2. Tsarin tuntuɓar / Sharhi / Bincika Wasikun Wasiƙu: Ambaliyar akwatin saƙon imel ɗin ku, sharhin WordPress, ko madaidaicin wurin biya (hare-haren gwajin katin da ke sa an dakatar da asusun Stripe ɗin ku don ƙi na yaudara). 3. WHOIS & Binciken Tarihin DNS: Cire bayanan rajistar yankinku na tarihi (WHOIS) ko rikodin MX/TXT don nemo adireshin gida ko adireshin Gmail na sirri.

1. Kunna Cloudflare "Karƙashin Harin Yanayin" (UAM) a cikin dakika 10¶

Idan masu sabar DNS na yankin ku suna nuni zuwa Cloudflare (har ma akan Shirin Kyauta na $0): 1. Shiga cikin dash.cloudflare.com kuma zaɓi yankin ku. 2. A hannun dama ** Ayyukan gaggawa *** mashigin labarun gefe na shafin Dubawa, kunna Karƙashin Yanayin Harin zuwa ** ON** (ko je zuwa ** Tsaro -> Saituna -> Matsayin Tsaro -> Ina Karkashin Hari**). 3. Abin da wannan ke yi nan da nan: Duk baƙon da ke neman kowane shafi akan yankinku ana katse shi a cibiyar sadarwar gefen duniya ta Cloudflare (300+ cities) kuma ya yi amfani da tsaka-tsaki ** Gudanar da Kalubale / Shafi na Hujja na JavaScript ** na tsawon daƙiƙa 3 zuwa 5 kafin fakiti ɗaya ya taɓa asalin sabar gidan yanar gizon ku. Rubutun Python na asali, curl ambaliya, ƙwanƙwasa mara kai, da masu taya DDoS masu arha sun kasa wannan ƙalubalen a gefen, suna sauke nauyin asalin uwar garken CPU zuwa kusa da sifili.

2. Muhimman Dokokin Kwastam na WAF Cloudflare Uku da Iyakokin Rate (Tier Kyauta)¶

Je zuwa ** Cloudflare Dashboard -> Tsaro -> WAF -> Dokokin Custom -> Ƙirƙiri Doka** kuma tura waɗannan kariya ta tiyata guda uku:

Na gaba, buɗe **Tsaro -> WAF -> Dokokin iyakance ƙimar -> Ƙirƙiri doka **: - Idan buƙatun shigowa sun dace: URI Path contains "/" (Dukkan zirga-zirga) ko Request Method equals POST. - Lokacin da adadin ya wuce: 30 requests per 10 seconds kowane adireshin IP. - Sai a dauki mataki: Katange (ko ** Kalubalen Gudanarwa) na daƙiƙa 10 (Shirin Kyauta) ko 1 Hour (Shirin Pro).

3. The "Asali IP Leak" Audit (Me ya sa Cloudflare kasa idan maharan sun san Your Real Server IP)¶

Sanya Cloudflare a gaban gidan yanar gizon ku (Orange Cloud Proxied* icon a cikin DNS) yana ɓoye ainihin adireshin IP na sabar gidan yanar gizon ku a bayan Cloudflare's anycast IPs. Duk da haka, idan gidan yanar gizon ku a baya yana gudana * ba tare da * Cloudflare ba, kayan aikin kamar SecurityTrails, CensyskumaShodan** kuna da tarihin dindindin na ainihin asalin adireshin IP na sabar gidan yanar gizon ku. Mahara suna duba IP ɗin ku na tarihi kuma suna aika zirga-zirgar DDoS ** kai tsaye zuwa uwar garken IP ɗin ku *, suna ƙetare Cloudflare gaba ɗaya. - Yadda ake rufe Asalin uwar garken ku har abada: 1. ** Tabbatar da kowa A, AAAA, kuma CNAME rikodin a cikin Cloudflare DNS yana da Orange Cloud (Proxied) kunna. Share duk wani wanda ba shi da wakili (Grey Cloud) subdomains kamar direct.yourdomain.com, ftp.yourdomain.com, ko mail.yourdomain.com wannan yana nuna IP iri ɗaya da sabar gidan yanar gizon ku. 2. Nemi sabon adireshin IP na roba / mai iyo daga mai gidan yanar gizon ku *** (AWS EC2, DigitalOcean, Linode, Hetzner, Vultr, ko cPanel host) kuma sanya sabon IP zuwa sabar ku, sabunta A rikodin cikin Cloudflare.aboda sabon IP ɗin yana da bayanan tarihin DNS a ciki SecurityTrails, maharan ba za su iya gano shi ba. 3. Ka saita Tacewar zaɓi na uwar garke (ufw, iptables, ko AWS Tsaro Groups) zuwa ALLOW tashar jiragen ruwa 80 kuma 443 KAWAI daga Cloudflare na hukuma IPv4/IPv6 CIDR jeri (cloudflare.com/ips) (ko kunna ** Cloudflare Ingantattun Asalin Ja mTLS**) da ** DROP ** duk sauran hanyoyin haɗin gwiwa masu shigowa akan tashar jiragen ruwa 80/443.

Sashe na 4: Tsira Zurfin Hargitsi da Hoton Rubuce-rubucen da Ba Na Jiha ba (NCII)¶

Hare-haren ta'addanci na zamani suna ƙara yin amfani da samfuran rarraba tushen tushen-bude-bude, software na canza fuska, da injunan ƙarar murya don kera: - ** Hotunan Ƙaƙwalwar Ƙarƙashin Ƙarƙashin Ƙarƙashin ƘiraDeepfake Pornography / NCII*** an buga shi zuwa allon hotuna, Reddit, X, da Telegram; - ** Fabriced Voice Recordings ko Fake Chat Screenshots** da'awar wanda aka azabtar ya yi ba bisa ka'ida ba ko maganganun aiki, waɗanda ke satar imel ɗin jama'a ga ma'aikaci ko masu tallafawa.

1. Sauke Hotunan Deepfake Nan take (StopNCII.org & TakeItDown)¶

Idan maharan sun ƙirƙira ko suka yi barazanar buga zurfafan zurfafa jima'i: 1. ** Ƙirƙirar zantan hoton sirri na gida a StopNCII.org (manyan 18+) ko TakeItDown.ncmec.org ( kasa da 18): *** - Duk tsarin biyu suna aiwatar da fayil ɗin ** a cikin gida a cikin burauzar gidan yanar gizon ku *** (ba a taɓa loda shi zuwa sabar waje ba) don samar da sawun yatsa mai fahimta (PDQ / TMK hash) watsawa zuwa dandamali masu shiga (Meta, Reddit, TikTok, OnlyFans, Pornhub, RedGIFs, Snapchat), suna toshe abubuwan da suka dace ta atomatik a duniya. 2. Yi amfani da Dedicated Platform "NCII" Portals Gaggawa: - Kowane babban dandamali yana kiyaye fifiko ** NCII-hour 24 & Bututun Cire Kafofin Watsa Labarai** (duba mu Bidiyon ɓoyayyiyar ɓoyayyiya, hoto mara daidaituwa, da DMCA cirewa jagora). 3. ** Yi fayil ɗin Bincike na Google "Bayyanawa / Abubuwan Abun Ciki na Doxxed" Neman Ƙarfafa Fihirisa:** - Ƙaddamar da URLs masu karɓar zurfafan karya ko bayanan tuntuɓar doxxed zuwa Google's Cire bayanan sirri na zahiri ko doxxed portal (support.google.com/websearch/troubleshooter/9685456) da Cire abun ciki na Bing.

2. Kare Ayyukanku da Masu Tallafawa Akan Fabricated Audio/Screenshots ("Brigading Employer")¶

Lokacin da zaren kai hari ya shirya wani kamfen na imel "Mai Aiki / Mai Tallafawa Imel," maharan suna kiran sashen HR na kamfanin ku, suna mamaye bita na Google Maps tare da ƙimar taurari 1 (duba haɗe-haɗe 1-star review extortion da haɓaka dandamali), da imel ɗin ƙirƙira hotunan kariyar kwamfuta ko shirye-shiryen sauti na AI zuwa ga manajan ku. - Tsarar da brigade tare da kwantar da hankali, jimla 4 na HR / bayanin shari'a KAFIN isowar imel ɗin maharan: - Haɗu da gaggawa tare da HR, Tsaro na Kamfanin, da Mai Kula da Kai Kai tsaye. - Bayar da taƙaitaccen abin da ya faru mai shafi 1 mai ɗauke da: (1) Lamban faɗakarwar 'yan sanda/Lambar faɗakarwa, (2) Sake hotunan hotunan maharan da ke ba da umarni ga membobin su "kira shugabansu / aika hotunan karya," da (3) Neman IT ta keɓe imel ɗin waje na ɗan lokaci da ke ɗauke da sunan ku kuma cire tsawaita ku daga bayanan jama'a.

Sashe na 5: Kiyaye shaidar da kotu ta yarda da itaWARC archives da SHA-256 hashes)¶

Ba da rahoton zaren hari don sharewa kafin ɗaukar bayanan bincike, ko ɗaukar hotunan kariyar kwamfuta kawai, yana raunana sammacin nan gaba saboda lauyoyin masu tsaro suna jayayya cewa za a iya canza hotunan kariyar kwamfuta ta hanyar bincike. Inspect Element. Bi wannan ** Mataki na 3 Digital Forensics Preservation Protocol ** kafin zaren hari 404s:

1. Ɗauki RFC-Compliant WARC (ARCive na Yanar Gizo) Fayil a Gida¶

A .warc ko .wacz fayil (ISO 28500 daidaitaccen) yana yin rikodin buƙatun HTTP mai sauƙi, masu kan amsawa, sarkar takardar shedar TLS, DOM, da kafofin watsa labarai da aka haɗa a cikin tambarin bayyananne: 1. Sanya tushen budewa ArchiveWeb.page tsawaita ta Webrecorder (webrecorder.net) a cikin Chromium/Chrome. 2. Fara yin rikodi, loda zaren hari (ta hanyar VPN don haka IP ɗin gidanku ba zai taɓa shiga ta hotuna da aka haɗa ba), gungura sama zuwa ƙasa don duk sharhi da nauyin watsa labarai, sannan danna ** Tsaya -> Fitarwa azaman .wacz ko .warc.gz**. 3. Ajiye madubi mai zaman kansa na ɓangare na uku akan archive.today (archive.ph* da*web.archive.org/save.

2. Ƙirƙira da tambarin lokaci a SHA-256 Cryptographic Digest¶

Nan da nan lissafta SHA-256 cryptographic hash na ku .wacz rumbun adana bayanai, bugu na PDF mai cikakken shafi, da albarkatun Audit: - ** Linux / macOS: *** sha256sum raid_evidence.wacz full_thread.pdf > evidence_hashes.txt - Windows PowerShell: *** Get-FileHash .\raid_evidence.wacz -Algorithm SHA256 - Imel evidence_hashes.txt da kanka ta hanyar mai bada da ke sanya hannu tare da DKIM (kamar Gmail ko Proton Mail) don tabbatarwa na biyu lokacin da ainihin haruffa 64 SHA-256 narkewa ya wanzu.

3. Cire ID na Asusun Platform Dindindin (Ba Sunayen Nuni ba)¶

Koyaushe yin rikodin abubuwan gano bayanan bayanai marasa canzawa: - Discord: Kunna ** Saitunan Mai amfani -> Na ci gaba -> Yanayin Haɓakawa**, danna dama-dama mahara da saƙonni, sannan danna ** Kwafi ID ɗin mai amfani *** / ** Kwafi ID na saƙo *** (18-to-19-digit Snowflake ID). - ** Reddit:** Ajiye cikakken sharhi permalink da /u/username kafin cire post din. - ** Yan damfara: *** Tambaya lookup.icann.org don gano ** Magatakardar yanki ** (abuse@namecheap.com, abuse@tucows.com) da ** Mai Ba da Baƙi *** don ƙa'idodin Sabis na Doxxing Takedowns.

Lambobin gaggawa na yanki da ka'idojin tilasta doka¶

Lokacin da brigading kan layi ya ƙaru zuwa ** doxxing, barazanar swatting, barazanar kisa mai gaskiya, batsa mai zurfi mara yarda (NCII), ko kwace**, shigar da waɗannan hukumomin hukuma:

• Amurka: Kira 911 don haxarin jiki nan take. Kira 'yan sanda na gida ** lambar aika aika gaggawar** don sanya ** Faɗakarwar Farko / Gargaɗi * * akan adireshin mazaunin ku a cikin su. CAD database. Yi fayil ɗin cyberstalking na tarayya (18 U.S.C. § 2261Ada DDoS (18 U.S.C. § 1030) korafin da FBI Internet Complaint Centre (FBI)ic3.gov*, kuma bayar da rahoton cin gajiyar ƙarancin shekaru zuwa NCMEC CyberTipline (report.cybertip.org, 1-800-843-5678).
• Kanada: Kira 911 don gaggawar gaggawa ko layin gaggawar 'yan sanda na birni don Tutar Adireshin Swatting**. Bayar da rahoton cin zarafi (* Criminal Code* s. 264) da hotuna na sirri (s. 162.1) ga 'yan sanda na gida da ** Cibiyar Yaki da Zamba ta Kanada (1-888-495-8501)**.
• United Kingdom: Kira 999 a cikin gaggawa ko 101 ('yan sanda ba na gaggawa ba) don shigar da hargitsi ko Dokar Tsaro ta Kan layi 2023 laifin zurfafa. Bayar da rahoton DDoS/karɓar kuɗi zuwa ** Zambaactionfraud.police.uk, 0300 123 2040*** kuma tuntuɓi ** Layin Taimakon Batsa Mai ɗaukar fansa (0345 6000 459*** ko ** Layin Taimakon Taimakon Kaya (National Stalking Helpline)0808 802 0300)**.
• ** Tarayyar Turai:** Kira 112 don amsa gaggawa. Ƙaddamar da abubuwan da ke cikin hanzari ba bisa ƙa'ida ba da sanarwa na cyberstalking a ƙarƙashin ** EU Digital Services Act (DSA)** kuma ku kai rahoto ga sashin binciken yanar gizo na 'yan sanda na kasa.
• ** Ostiraliya da New Zealand:** A Ostiraliya, kira 000 (gaggawa) ko 131 444 (ba da gaggawar 'yan sanda ba), shigar da ƙarar cirewa na sa'o'i 24 tare da * Kwamishinan Tsaro (eSafety Commissioner).esafety.gov.au*, da kuma bayar da rahoton hare-haren cyber zuwa ReportCyber (1300 292 371). A cikin New Zealand, kira 111 (gaggawa), 105 (ba gaggawa ba), kuma tuntuɓi ** Netsafe (netsafe.org.nz, 0508 638 723).
• Asia-Pacific: A Indiya, kira 112 (gaggawa) ko 1930 (layin taimakon cybercrime) kuma yi fayil a cybercrime.gov.in. A cikin Singapore (999) da Japan (110), tuntuɓi sassan yanar gizo na 'yan sanda na ƙasa; duba cikakken littafin mu a lambobin gaggawa.

Tambayoyin da ake yawan yi¶

Me yasa bazan taba ziyarta ko ba da amsa ga allon hoto ko zaren dandalin da ke damun ni ba?¶

Ziyarci ko ba da amsa ga zaren hari na maƙiya yana yin illa ga matsayin ku na dabara da amincin ku na fasaha. Na farko, al'ummomin da suka kai hari suna aiki ne akan tattalin arzikin mai hankali: duk wani matsayi na tsaro, fushi, ko roƙo yana tabbatar da harin yana aiki kuma yana ɗaukar ƙarin mahalarta da dama don tsawaita kamfen na tsawon watanni. Na biyu, da yawa daga cikin dandalin hare-hare na ɓangare na uku da zaren allon hoto sun haɗa pixels na bin diddigin waje ko sa hannun taron da aka shirya akan sabar masu sarrafa maharan; loda shafin daga gidan Wi-Fi na gida ba tare da VPN nan da nan yana fallasa adireshin IP na zama, ISP, da sawun yatsa ga mai sabar sabar.

Ta yaya zan kare gidana daga harin "Swatting" idan adireshin jikina ya fito akan layi?¶

Kira lambar aikewa da gaggawa na sashin 'yan sanda na gida a yau kuma nemi magana da mai kula da aika sako ko Kwamandan Watch. Bayyana a sarari cewa kwanan nan ƙungiyar masu cin zarafi ta yanar gizo ne suka buga asalin ku da adireshin ku akan layi sannan ku nemi a haɗa “Swatting Advisory / Premise Alert Note” zuwa adireshin ku a cikin bayanansu na Aiki-Aided Dispatch (CAD). Bayar da lambar wayar hannu da lambar tuntuɓar gida ta biyu ta yadda idan mai kiran da ba a san sunansa ba yana amfani da hanyar sadarwa ta VoIP ya yi iƙirarin halin garkuwa ko harbi yana faruwa a adireshin ku, masu aikawa sun san su fara kiran wayar da aka tabbatar da farko kuma su sanar da jami'an da ke ba da amsa kafin ku kusanci.

Menene bambanci tsakanin saita Subreddit zuwa "Ƙuntata" tare da "Private" yayin farmaki?¶

Saita subreddit zuwa "Ƙuntata" yana kiyaye duk rubuce-rubucen da ke akwai da kuma sharhi a bainar jama'a kowa zai iya karantawa ga kowa akan intanit, yayin da yake toshe duk wanda baya cikin jerin Masu amfani da aka Amince (ko wanda ya kasa tacewar AutoModerator) daga ƙirƙirar sabbin posts ko sharhi. Saita subreddit zuwa "Private" gaba ɗaya yana kulle ƙofar ta yadda masu amfani waɗanda ba a yarda da su ba su ga allon saukowa kawai kuma ba za su iya duba posts, sharhi, ko jerin sunayen masu amfani da masu daidaitawa a kan labarun gefe ba. Zaɓi "Ƙuntata" idan kuna son abubuwan taimako na al'ummarku su zauna akan layi yayin da masu satar ke fama da yunwa na ikon yin rubutu, ko zaɓi "Private" idan maharan suna goge zaren ku suna niyya ga kowane membobi da masu gudanarwa ta sunan mai amfani.

Me yasa gidan yanar gizona har yanzu ya ragu bayan na kunna Cloudflare "Karƙashin Hari"?¶

Idan gidan yanar gizon ku ya ci gaba da yin ɗorewa bayan kunna Cloudflare "Karƙashin Yanayin Hari," masu iya kai hari suna iya ƙetare Cloudflare gaba ɗaya ta hanyar aika zirga-zirga kai tsaye zuwa sabar gidan yanar gizon ku ta asali adireshin IP na asali (wanda suka samo a cikin bayanan DNS na tarihi akan TsaroTrails ko Shodan, ko ta hanyar da ba ta dace ba. `mail.` ko `dev.` subdomain). Don dakatar da hare-haren kai tsaye zuwa asali, tabbatar da cewa kowane rikodin DNS da ke nuni ga uwar garken yana da ikon Orange Cloud (Proxied), tambayi mai ba da sabis don sanya sabon adireshin IP zuwa sabar ku, kuma saita Tacewar zaɓi na uwar garken ku (`ufw` ko ƙungiyoyin tsaro) don sauke duk hanyoyin haɗin yanar gizo masu shigowa akan tashar jiragen ruwa 80 da 443 ban da kewayon IP na hukuma na Cloudflare (`cloudflare.com/ips`).

Shin Discord ko Reddit za su iya gano lokacin da aka dakatar da maharan ya ƙirƙiri sabon asusun alt akan VPN?¶

Ee, lokacin da kuka kunna mafi girman matakan tsaro na dandamali. A kan Discord, saita Matsayin Tabbatarwa zuwa "Mafi Girma (Dole ne a sami ingantacciyar waya akan asusun Discord ɗin su)" yana dakatar da samar da botnet na tushen VPN saboda kowane asusu yana buƙatar lambar SIM ta musamman wacce ba ta VoIP ba, kuma haɗa wannan tare da bots na anti-alt kamar DoubleCounter ko Wick yana kama hannun hannu masu bincike/hardware. A kan Reddit, kunna "Ban Evasion Filter" a cikin Mod Tools -> Safety Filters yana amfani da lambar wayar abokin ciniki na Reddit, ID na shigarwa na aikace-aikacen, da sawun yatsa mai bincike don yin alama ta atomatik da riƙe sharhi daga sabbin asusun da aka ƙirƙira mallakar masu amfani da aka dakatar a baya ko da lokacin da suka canza adiresoshin IP.

Ta yaya zan tabbatar wa 'yan sanda ko kotu cewa hotunan zaren da aka goge na gaskiya ne kuma ba jabu ba ne?¶

Maimakon dogaro da hotuna masu sauƙi da aka yanke, ɗauki zaren kai hari ta amfani da mabuɗin Webrecorder. `ArchiveWeb.page` browser tsawo, wanda fitar da wani ISO-standard `.wacz` / `.warc` Rumbun da ke ɗauke da ɗanyen kanun martani na HTTP, sa hannun TLS sabar sabar, da kadarorin DOM da ba a canza ba. Nan da nan gudu `sha256sum` (ko `Get-FileHash -Algorithm SHA256` a kan Windows) `.wacz` fayil da cikakkun bugu na PDF, yi imel da sakamakon hash mai haruffa 64 zuwa kanka ta hanyar mai ba da imel mai sa hannun DKIM don kafa tambarin lokutan da ba za a iya canzawa ba, sannan kuma adana madubi na ɓangare na uku akan. `archive.today`.

Jagora masu alaƙa¶

• Sabar Discord ko hari na al'umma: Alamar bot ɗin da aka yi la'akari, spam na yanar gizo, da dawo da rajista-log
• Cin zarafin kan layi, doxxing, da cin zarafi ta yanar gizo
• Zargin karya na kwayar cuta, soke taron jama'a, brigading na ma'aikata, da kullewar dijital
• Bidiyon ɓoyayyiyar ɓoyayyiyar cuta, hoto na kusa da mara yarda, da saukar DMCA
• Ba da rahoton abubuwan da ba bisa doka ba da cutarwa akan layi
• Lambobin gaggawa

Tushen da jagorar hukuma¶

• ** Cibiyar Tsaro ta Discord (discord.com/safety):** Kare Sabar Ku Daga Raids (Safety Setup, Pause Invites & DMs, Verification Levels, kuma AutoMod Rust Regex Takardun).
• ** Cibiyar Taimako ta Reddit (support.reddithelp.com):** Sarrafa Ƙwararrun Ƙwararru da Birgediya (Birged)Crowd Control, Ban Evasion Filter, Harassment Filter, kuma AutoModerator Cikakkun Maganar YAML).
• ** Takardun Cloudflare (developers.cloudflare.com):** Mayar da martani ga hare-haren DDoS (Under Attack Mode, Dokokin Kwastam na WAF, Dokokin Iyakancin Rate, da Kare Sabar Asali Tare da Ingantattun Abubuwan Jawo).
• StopNCII.org (SWGfL / Layin Taimakon Batsa na Fansa na Burtaniya) & NCMEC Take It Downtakeitdown.ncmec.org): Tsarin Hashing Protocol na Abokin Hulɗa don Hotunan Ƙarfafa Ƙarfafawa da Ƙarfafa Zurfafawa.
• Cybersecurity and Infrastructure Security Agency (CISA) & FBI Internet Crime Complaint Centeric3.gov): Rarraba Hare-Haren Rarraba Rashin Sabis (DDoS), Tsaron Doxxing, da Kiyaye Shaidar Forensic na Dijital (ISO 28500 WARC & FIPS 180-4 SHA-256).