Mukanda wa e-mail mushipa: mikenji ya dituma dia bintu misokoka ne dipingaja dia bintu¶

Your primary email account is the skeleton key to your entire digital, financial, and legal identity. Unlike a compromised social media profile or streaming login, a hacked Gmail, Microsoft Outlook / Microsoft 365, Yahoo, Apple iCloud Mail, or ProtonMail account gives an attacker the power to click "Forgot Password" on your bank accounts, cryptocurrency exchanges, retirement brokerages, tax portals, and cloud drives. Most dangerously, merely changing your email password and turning on Two-Factor Authentication (2FA) rarely kicks a sophisticated attacker out of a hacked inbox. Within 30 seconds of breaking into an email account, modern attackers plant five layers of silent persistence backdoors: hidden Inbox Sweep and Forwarding Rules (often named ., .., or [Blank] that silently move password-reset emails straight to the Trash anyi RSS Feeds folder so you never see them), Third-Party OAuth Application Grants (eM Client, Thunderbird, or fake Google Docs apps that retain full API read/write access without needing your password), Delegated Mailbox Permissions, App Passwords (IMAP/SMTP), and Recovery Email / Phone Number swaps.

If an email compromise involves immediate threats of physical violence, stalking, domestic abuse, or extortion against a minor, call your local emergency number (911 in the United States and Canada, 112 across the European Union, 999 in the United Kingdom) or consult our directory of international nomba ya tshimpitshimpi right away. For all consumer and corporate inbox takeovers, execute the 6-step eradication sequence below in exact order.

Enza nunku mpindieu¶

1. Do NOT change your password from the same Windows PC or Mac if you suspect an Infostealer virus: If your email was hacked even though you already had Two-Factor Authentication (2FA) turned on, your computer likely has an Infostealer malware infection (such as Lumma Stealer, RedLine, or Atomic macOS Stealer) or a malicious Chrome/Edge extension that steals live authenticated browser session cookies (SAPISID/SID on Google or ESTSAUTH on Microsoft). Pick up a clean smartphone (iOS or Android) to perform your password change and security cleanup right now.
2. Audit and revert your Account Recovery Email, Recovery Phone Number, and MFA Authenticator devices BEFORE changing your password (or within 30 seconds after): Attackers immediately add their own burner phone number, disposable email address, or rogue Authenticator app to your security settings. If you change your password without deleting the attacker's recovery phone or rogue passkey, the attacker will simply click "Forgot Password" 10 seconds later and lock you out permanently.
3. Force-terminate all active login sessions, persistent browser cookies, and App Passwords globally: Changing a password does not always immediately kill existing mobile IMAP tokens or active web session cookies. Explicitly click "Sign out of all devices / Revoke all sessions" in your Google, Microsoft, Yahoo, or Apple security dashboard, and delete every 16-character App Password on the account.
4. Open a desktop web browser (not a mobile mail app) and delete all hidden Inbox Rules, Filters, Auto-Forwarders, and Sweep Rules: Mobile mail apps (Gmail anyi Outlook pa iOS/Android) misangu ya bungi usokoka mikenji ya dilombola dia ku luseke lua tshiamu tshia mudimu. Kangula mishindu yebe ya meyi a ku Enternete mu tshikebelu tshia ku biro ne tangila Filtre ne Adresse mikandika, Dituma ne POP/IMAP, ne Mikenji / Dikomba. Supula mukenji wonso udi utuma mesaje pambelu anyi udi utuma mesaje adi ne miaku bu mudi "bank", "code", "reset", "security", "wire", "invoice", or "crypto" mu Trash, Archive, or RSS Feeds tshilaminu.
5. Umbusha programe yonso ya OAuth idi milamakaja ne bafidi ba mikanda mu kazubu ka mikanda: Enda ku App ne midimu ya bantu bakuabu (Google) anyi App ne midimu iudi mupeshe bukenji (Microsoft/Yahoo) ya mu konte webe ne umbusha programe yonso udi ne Mail.Read, Mail.ReadWrite, or Gmail API bukenji, ne tangila Pesha bukenji bua kubuela mu konte webe (difila) bua muntu udi ukubunda kayi mua kubala kazubu kebe ka mesaje ku diambuluisha dia tshimanyinu tshia OAuth tshidi katshiyi tshitaba dishintuluka dia meyi a tshisokomenu to.
6. Tangila Trash (Bin), Sent, ne Spam tuzubu tua bintu diakamue bua kumona konte kayi ya mfranga anyi ya crypto idi muena tshibawu mumane kupingaja: Bantu badi bakubunda badi bumbusha mamanyisha a bukubi adi afumina ku banke webe, Coinbase/Binance, Amazon, PayPal, anyi Steam tusunsa tukese panyima pa bamane kupeta code wa dijadika wa nomba 6. Kangula Trash ne Sent bipese bia mikanda mpindieu: e-mail yonso wa dipingaja dia mot de passe udi mu tshibejibeji tshiebe Trash i konte udi muena tshinyangu mumane kunyanga anyi mutete bua kunyanga.

Mutshi wa mapangadika: kupingaja bukokeshi ne kujikija lukunukunu¶

Londa mutshi wa tshikebelu etshi nansha wewe utshidi ne mushindu wa kubuela mu kazubu kebe ka mesaje anyi muikale mukanga kudi muntu udi ukubunda:

flowchart TD
    A["Badi bela meji anyi bajadike ne: mbanyange konte wa e-mail"] --> B{"Utshidiku mua kubuela mu konte webe wa email mpindieu anyi?"}
    B -->|"Eyowa: Ntshidi anu ne mushindu"| C["Shintulula ku telefone wa bianza mukezuke (epuka ordinatere udi mua kuikala ne disama)"]
    C --> D["1. Umbusha telefone wa muena lukuna, e-mail wa dipingaja ne tuishi tua MFA tua dishima"]
    D --> E["2. Shintulula meyi a tshisokomenu bua kuikala ne 20+ Char Passphrase ne wenzeja 2FA udi kayi mua kunyanga malu a tshinyangu"]
    E --> F["3. Fina pa 'Patuka mu biamu bionso' ne umbusha meyi onso a tshisokomenu a 16-Char"]
    F --> G["4. Fungula mesaje a ku Enternete: Sumbusha dituma dia malu masokoka, bipetu, mikenji ya dikosa ne bafidi ba ngenyi"]
    G --> H["5. Kumbusha programe ya OAuth ya bantu bakuabu ne kutangila bipese bia bintu bia bukoya anyi bia bintu bidibu batume bua kupeta konte ya pambelu idibu bashipe"]
    B -->|"Tòo: Muntu udi uluisha mmushintulule mot de passe ne telefone wa dipingaja/MFA"| I{"Mmushindu kayi wa konte wa email udi mukanga?"}
    I -->|"Mudimu / Tshilongelu / Tshitupa tshia mudimu (@company.com)"| J["Udi mua kubikila mulombodi wa IT diakamue: Mulombodi udi mua kupingaja MFA, kumbusha bimanyinu ne kupingaja mushindu wa kubuela mu tusunsa 60 ku diambuluisha dia Console wa mulombodi"]
    I -->|"Gmail wa muntu nkayende / Outlook.com / Yahoo / iCloud"| K["Enza mudimu ne formilere wa dipingaja dia konte ku nzubu webe wa kale wa Wi-Fi IP ne tshiamu tshieba tshia ku telefone/telefone"]
    K --> L["Diakamue, bikila banke yebe, muena mudimu wa telefone ne wa dishintakaja dia makuta ku telefone bua kukanga konte idi milamakaja ku e-mail au"]

Tshitupa 1: Dikonkonona dia malu adi kaayi malelela kudi mufidi wa mikanda ya e-mail (Gmail, Outlook/M365, Yahoo, iCloud)¶

Muntu yonso udi ufila mikanda ya e-mail udi ulama mikenji ya dituma dia bintu, bipetu, bimanyinu bia OAuth, ne bantu badi bafila mikanda mu menu mishilangane. Nansha wewe wenza mudimu ne Apple Mail anyi Outlook Desktop mu ordinatere webe, udi ne bua kubuela mu tshibuelelu tshia webmail tshia muena mudimu mu tshiamu tshia ordinatere** (anyi kulomba "Site wa ordinatere" mu tshiamu tshiebe tshia telefone) bua kumona malu adibu balongolole ku luseke lua tshiamu tshia ordinatere.

Tshienzedi tshia kumpala: Kumbusha konte wa Google / Gmail uvuabu bashipe¶

Paudi usukula konte wa Gmail anyi wa Google Workspace udi munyanguke, enza mudimu ne bitupa muanda mutekete ebi kuyi upua muoyo nansha umue:

1. Audit Security & Passkeys (myaccount.google.com/security):
   • Fina pa Passkeys ne security keys: Bena tshinyangu badi bafunda diakamue passkey anyi tshiamu tshia kujadika natshi malu mu tshiamu tshiabu tshia mudimu bua bobu kumona mua kupingana kabayi ne mot de passe nansha umue ne SMS nansha umue. Butula tshintu tshionso tshiudi kuyi mumanye ne dishindika dia 100 pa lukama.
   • Fina pa 2-Step Verification -> tangila Authenticator, Google Prompt devices, Recovery phone, ne Backup codes. Fina pa Generate new codes bua kujimija diakamue kode yonso ya 8 idi muena tshinyangu muangate.
2. Kubutula meyi a tshisokomenu a mudimu (myaccount.google.com/apppasswords):
   • App Password i code wa maleta 16 udi wambuluisha muena mudimu wa IMAP (bu mudi Thunderbird anyi script wa Python wa muena tshinyangu) bua kuangata kazubu kebe ka meyi onso bua kashidi eku kayi wenza mudimu ne 2-Step Verification. Butula Mot de passe yonso wa App udi mufunda.
3. Kumbusha malanda a OAuth a muntu muisatu (myaccount.google.com/connections):
   • Keba programe yonso udibu banyishile bua kubuela mu Gmail, Google Drive, anyi Google Contacts (batu batamba kuenza mudimu ne mail clients badi bamueneka bu badi ne bukenji bu mudi eM Client, Newton Mail, Cleanfox, anyi mikanda ya OAuth misungula). Fina pa app -> Umbusha malanda onso audi nawu ne [App Name].
4. Tangila Gmail Accounts and Import Tab (Mail Delegation & Reply-To Kukuata):
   • Mu Gmail pa ordinatere wa pa mesa, tuaku pa Tshimanyinu tshia tshiamu tshia mudimu -> Tangila bionso bidi bilongolola -> Makonte ne dibueja dia bintu.
   • Muinshi mua Leja bukenji bua kubuela mu konte webe, ikala mujadike ne: ZERO adrese ya e-mail idi mifunda. Muntu udibu bapeshe mudimu udi mua kubala, kutuma ne kubutula mikanda yebe ya e-mail kayi mumanye mot de passe webe to.
   • Muinshi mua Tuma mukanda bu, tuaku pa shintulula ngumu ku luseke lua dina diebe ne ujingulule ne: muntu uvua mukubutule kavua mubueje bualu busokoka to Specify a different "reply-to" address (tshilejilu, kuteka diandamuna diebe ku yourname.company@gmail.com anyi domaine udi umueneka bu muena tshinyangu bua se: dîba dionso didi muntu wandamuna ku e-mail yebe ya bushuwa, diandamuna diende diye kudi muena tshinyangu pamutu pa wewe).
5. Tangila Gmail Filters and Blocked Addresses Tab:
   • Tangila bimpe tshintu tshionso tshidi tshifila bintu. Bantu badi babunda batu misangu ya bungi benza bipese bidi bipetangana from:(a|e|i|o|u) anyi size > 0 anyi has:attachment anyi miaku bu mudi invoice, wire, bank, security, alert, code ne tshienzedi Skip the Inbox (Archive it), Mark as read, Delete it, anyi Forward it to:. Supula tshintu tshionso tshiudi kuyi mumanye.
6. Tangila Gmail Forwarding and POP/IMAP Tab:
   • Tangila ne: Dituma nditeka pa Disable forwarding, umbusha adrese yonso wa dituma udi kayi mumanyike mu liste udi utuluka, ne teka IMAP access pa Disable IMAP (pa kumbusha wewe wenza mudimu ne tshiamu tshia ordinatere tshidi ne bukubi).
7. Tangila Google Drive Trash & Google Takeout History:
   • Bantu badi baluisha batu misangu ya bungi benza Google Takeout (takeout.google.com) tshilaminu tshia bintu bua kuangata .zip wa mikanda yebe yonso ya e-mail, foto ya Google, ne mikanda ya Google Drive, kusangisha ne mikanda ya bitadi ne liste ya meyi a tshisokomenu. Tangila takeout.google.com mpindieu: wewa mumone tshintu tshidi tshienzeka anyi tshijika tshiuvua kuyi mulombe, tuaku pa Cancel export ne umone menemene mishindu ya malu ivuabu balongolole.

Tshikoso tshia 2: Kumbusha konte wa Microsoft Outlook.com / Hotmail / Microsoft 365 munyanguke¶

Makonte a Microsoft (@outlook.com, @hotmail.com, @live.com, @msn.com, ne Microsoft 365 Exchange Online mailboxes) badi na miaba ya bungi ya kusokomena idi bena tshinyangu benza nayi mudimu padibu benza mudimu ne e-mail wa mudimu (BEC) ne padibu bashipa bantu badi basumba bintu:

1. Tshisokome RSS Feeds ne Conversation History Buteyi bua tshilaminu:
   • Mu Outlook, bena tshinyangu kabatu batamba kutuma mikanda ya e-mail misuika mu tshiamu tshinene to Deleted Items tshilaminu bualu bena mudimu badi batangila Deleted Items. Pamutu pa nanku, badi benza mukenji wa Outlook udibu babikila ne: . anyi 1 udi ufila mikanda ya e-mail idi ibuela mu RSS Feeds, Archive, anyi Conversation History tshilaminu ne udi utshiteka bu tshibala. Tangila kazubu konso kadi ku dia bakaji, nangananga RSS Feeds, mpindieu.
2. Audit Both Rules NE Sweep mu Outlook Web (outlook.live.com anyi outlook.office.com):
   • Fina pa Settings Gear (kuulu ku dia balume) -> Mail -> Rules. Supula mukenji wonso uudi kuyi mufuke.
   • Tangila kazubu kadi kuinshi kua mukenji wa muena lukuna: Stop processing more rules. Bantu badi baluisha badi bafunda kazubu aka pa mikenji yabu ya ku mutu bua mikenji yebe nansha umue kayiyi yenza mudimu to.
   • Pashishe, tuaku pa Mail -> Sweep ne Mail -> Junk email -> Blocked senders and domains. Baluishi batu batamba kusakidila @microsoft.com, @google.com, @apple.com, @chase.com, @bankofamerica.com, ne @coinbase.com ku liste webe wa Bantu badibu bakanga ne ba domaine bua mamanyisha a bukubi apatuke anyi aye mu tshimpitshimpi ku Junk. Umbusha liste webe wa bafidi ba mikanda badibu bakandike wa kumpanyi yonso idi mijalame.
3. Tangila Mail -> Forwarding and IMAP:
   • Ikala mujadike ne: Enable forwarding ki mmumanyike to. Shi adrese wa e-mail wa muntu udi uluisha udi mu kazubu ne "Keep a copy of forwarded messages" kakuyi tshimanyishilu, mukanda wonso uvuabu bakutumina uvua uya kudi muena tshinyangu ne uvua ujimijibua mu kazubu kebe ka mikanda kumpala kua kufikaye mu kazubu kebe ka mikanda.
4. Bua balombodi ba Microsoft 365: Enza mudimu ne PowerShell bua kupeta mikenji ya MAPI / Inbox mibi misokoka (MFCMAPI):
   • Bena mudimu ba BEC badi benza mudimu ne Exchange Web Services (EWS) API anyi MFCMAPI bua kuenza mikenji ya Inbox minyanguke misokoka (pa kumbusha PR_RULE_MSG_NAME ne PR_RULE_MSG_PROVIDER Bintu bia MAPI) bidi kabiyi bimueneka nansha kakese mu Outlook Web GUI anyi mu Exchange Admin Center.
   • Mulombodi wa IT udi ne tshia kulamakaja Exchange Online PowerShell ne kuenza:

     Get-InboxRule -Mailbox victim@yourdomain.com -IncludeHidden | Format-List Name,Enabled,Description,ForwardTo,ForwardAsAttachmentTo,RedirectTo,DeleteMessage,MoveToFolder
     

   • Kusakidila -IncludeHidden dibendele didi dileja mikenji ya MAPI misokome mu kazubu ka mikanda (FAI), udi mua kujimijibua ku diambuluisha dia Remove-InboxRule -Mailbox victim@yourdomain.com -Identity "<RuleID>" anyi pa kutuadija outlook.exe /cleanrules.
   • Tangila kabidi Mikenji ya dishintakaja dia bintu (mikenji ya dienda dia mikanda) ku diambuluisha dia Get-TransportRule: shi muena tshinyangu uvua munyange konte wa Exchange Administrator, badi mua kuikala benze mukenji wa dienda dia mikanda ya bulongolodi bujima pamutu pa mukenji wa kazubu ka mikanda ka muntu nkayende.

Tshitupa 2: Tshia kuenza shi udi mupangile (Muena lukuna mmushintulule mot de passe ne 2FA)¶

Shi muntu udi ukubunda ukadi mushintulule meyi eba a tshisokomenu, mupingaje nimero yebe ya telefone ya dipingaja dia bintu, ne muele programe wende wa Authenticator anyi tshifungu tshia tshiamu, minite yonso udi ne mushinga bualu muntu udi ukubunda udi unyanga konte yebe idi milamakaja paudi mukanga.

Tshitupa 1: Kosa bukole bua makuta bua muena lukuna kumpala (minite 15 ya kumpala)¶

Kupitshishi meba asatu mu diluisha formilere wa dipingaja dia e-mail padi muena tshinyangu ujimija konte webe wa ku banke ku diambuluisha dia kazubu kebe ka mesaje kadibu bakuate to:

1. Bikila banke yebe, bafidi ba karte ka mfranga, ne bafidi ba makuta ku telefone:
   • Ambila tshibambalu tshia malu a tshinyangu ne: "Adrese wanyi wa kumpala wa e-mail [your@email.com] mmunyanguke ne mpindieu ndi mupangile bua kubuelamu. Teka diakamue mot de passe / dikanga dia bukubi mu profil wanyi, umbusha bisangilu bia ku Enternete anyi bia ku telefone, ne umbusha adrese wa e-mail au mu dipingaja dia mot de passe kudi muntu nkayende."*
2. Kangula konte webe wa telefone wa ku bianza bua kubenga kushintulula SIM:
   • Mu kazubu kebe ka mesaje kadibu bakuate, muena tshibawu udi mua kubala bitadi biebe bia ngondo yonso bia AT&T, Verizon, T-Mobile, Rogers, Vodafone, anyi O2, ubapesha nomba wa konte webe wa telefone ne adrese wa bitadi. Bikila muena mudimu webe diakamue bua kujadika ne: Number Transfer PIN / Port Freeze ne Account Passcode mbikanga.
3. Kukanga konte yebe ya dishintakaja dia makuta a tshianana (Coinbase, Binance, Kraken, Gemini):
   • Mashinyi manene a bungi adi afila telefone wa tshimpitshimpi anyi wa tshimpitshimpi Account Lock pikala e-mail webe munyanguke (tshilejilu, kubikila Coinbase automated emergency lock ku +1 (888) 908-7930 mu US/International anyi +44 808 168 4635 mu UK).
4. Shintulula adrese wa e-mail mufunda pa konte yonso uudi mua kubuela:
   • Udi mua kuikala utshidi mubuele mu Amazon, PayPal, Venmo, Steam, Discord, Apple ID, ne tshilaminu tshieba tshia meyi a tshisokomenu mu tshiamu tshiebe tshia telefone mpindieu. Enza kazubu ka e-mail kapiakapia, ka tshijila (tshilejilu, pa ProtonMail anyi pa Gmail mupiamupia mulama ne tshifungu tshia tshiamu) ne diakamue ubuele mu mishindu ya programe ya programe yebe idi anu mibuele bua kushintulula e-mail wabu wa dimanyishangana nende kule ne adrese udibu bashipe kumpala kua muntu udi ukubunda kubapingaja.

Tshitupa 2: Mushindu kayi wa kupitshisha mishindu ya dipingaja dia konte (Google, Microsoft, Yahoo)¶

Bua kupeta konte ya e-mail ya tshianana (@gmail.com, @outlook.com, @hotmail.com, @yahoo.com), bena mudimu ba diambuluisha dia bantu badi bakandike bikole kudi balombodi ba malu a enzenjiere bua kupingaja meyi a tshisokomenu ku bianza anyi kupitshila ku 2FA ku telefone (bua kupangisha dienza dia malu a nsombelu). Pamutu pa nanku, dipingaja dia bintu didi dilombodibua kudi tshiamu tshia Risk & Identity Scoring Engine tshidi tshienza mudimu nkayatshi. Bua kubandisha tshipiminu tshieba tshia ditabuja dia malu a tshisokomenu ne kuenza mudimu ne "7-Day / 30-Day Security Hold Override":

1. MUYUKI WA MUSHINDU: Tuma formilere wa dipingaja bintu ku tshiamu tshieba tshia kale, ku tshikebelu tshieba, ne ku adrese webe wa Wi-Fi wa ku nzubu:
   • Kunyemi nansha kakese accounts.google.com/signin/recovery anyi account.live.com/acsr ku dididishi dipiadipia dia tshikebelu tshia malu a mu telefone anyi kupitshila ku VPN.
   • Wenza mudimu ne portable, desktop, anyi smartphone ne navigateur (ne cookies/tshilaminu tshia muaba uudi musombele) muaba uudi mubuele mu konte wa e-mail au dituku dionso mu tshidimu tshishale, paudi mubuela mu routeur webe wa Wi-Fi wa ku nzubu anyi wa ku biro (ASN ne dipetangana dia muaba). Algorithme wa dipingaja udi ne bujitu bua bungi bua bimanyinu bia munu bia tshiamu (DeviceID) ne IP ya kale.
2. Google / Gmail Recovery (accounts.google.com/signin/recovery):
   • Nansha mudi muntu udi ukubunda mushintulule telefone webe wa dipingaja ne e-mail wa dipingaja kukadi masekonde makese, Google udi ulama nimero webe wa telefone wa dipingaja ne adrese webe wa e-mail wa dipingaja bu bintu bia dipingaja bidi bikumbane bua matuku 7 menemene (mêba 168) panyima pa muena tshinyangu mumane kubishintulula.
   • Padibu bamulomba mu tshikondo tshia signin/recovery, tuaku pa "Teta mushindu mukuabu" too ne padiye ukulomba bua kutuma kode ku nimero webe wa telefone wa ntuadijilu anyi ku adrese webe wa e-mail wa ntuadijilu wa dipingaja, anyi ukulomba telefone/iPhone webe wa Android uvuabu bafunde kumpala ku diambuluisha dia Google Prompt.
   • Wewe mudifundishe ku Google One (Paid Cloud Storage) anyi ku YouTube Premium / YouTube Channel:
     • Bantu badi bafutshila Google One badi ne mushindu wa kupeta Google One Support (one.google.com/support) udi mua kubandisha konte mikanga munda.
     • Shi kazubu kebe ka Google kadibu bakuate kadi ne YouTube Channel, bikila @TeamYouTube pa X (Twitter wa kale) patoke diakamue. Bishilangane na Gmail wa pa tshibidilu, @TeamYouTube Dikuatshisha dia bafuki didi difila Formu wa dikolesha dia konte munyanguke mulongolola kudi bena mudimu ba Google badi bajadika dianyisha diebe dia kumpala Channel ID (UC..).
3. Microsoft Outlook / Hotmail / Xbox Account Recovery (account.live.com/acsr):
   • Tshia kumpala, teta kubuela ne kututa pa "Tshiena ne nansha tshimue tshia ku bintu ebi to" ku tshibuelelu tshia 2FA: shi udi ne 25-character Microsoft Recovery Code mulame pauvua mulongolole konte webe, kubuejamu kudi kukuambuluisha bua kupingaja malu a bukubi a muena tshibawu (bilondeshile mikenji ya Microsoft ya **matuku 30 a bukubi bua kupingaja, tshidi mua kuikala kabidi mu tshikondo tshia dibunda udi mukanga shi udi muele tshimanyishilu ku konte).
   • Paudi ukumbaja Formilere wa dipingaja dia konte wa Microsoft (account.live.com/acsr) ku nzubu kuebe Wi-Fi IP:
     • Fila milongo ya malu malelela ya mikanda 3 to ne ku 4 iudi mutume matuku mashale aa (lomba balunda anyi bena mu dîku bua kutangila mu kazubu kabu ka mesaje ne bakubadile milongo ya malu malelela a mikanda iudi mubatumine matuku mashale aa).
     • Fila adrese ya e-mail ya bantu baudi mutumine e-mail matuku mashale aa.
     • Fila Xbox Console Hardware webe LiveDeviceID / Nomba wa mulongo shi uvua mubuele mu Xbox ne konte wa Microsoft, ne nomba 4 ya ndekelu ne dituku dia ndekelu dia karte ka mfranga kadibu benze nadi mudimu mu Microsoft Store / Skype / Office 365.

Tshitupa 3: Dilombola dia malu masokoka adi mu meyi eba a kale¶

Paudi ukanga muntu udi ukubunda ne ujikija mikenji yonso ne bimanyinu bia OAuth, udi ne bua kutantamena bualu budi bukemesha: bikala muntu udi ukubunda ne IMAP, OAuth anyi mushindu wa kubuela mu kazubu kebe ka mikanda nansha mu minite 15, ela meji ne: uvua muenze tshikebelu tshia miaku ya pa muanda mu tshibutshilu tshiebe tshia mikanda ya kale.

Bantu badi bakubunda kabatu babala mikanda yebe ya kale 50,000 ku bianza to. Ma script abu adi enza mudimu nkayawu adi akeba diakamue mu kazubu kebe ka mikanda bua kupeta miaku dikumi eyi ya mushinga mukole ne wangata mesaje onso adi apetangana ne PDF:

1. "seed", "mnemonic", "recovery phrase", "24 words", "wallet", "Coinbase", "Binance", "Ledger": Shi uvua mudifundile foto, mukanda, anyi zip wa tshiambilu tshia cryptocurrency anyi code wa 2FA, ela meji ne: tshibuta atshi ntshinyanguke diakamue ne utume makuta onso mu tshibutshilu tshipiatshipia tshia bintu.
2. "tax", "1040", "W-2", "1099", "SSN", "Social Security", "passport", "driver license", "mortgage", "closing": Dilomba dia mfranga, difutshila dia nzubu, ne mikanda ya CPA idi munda mua kazubu kebe ka mikanda idi ne PDF idi ne nomba webe wa Social Security (anyi ID wa ditunga), dituku diudi muledibue, ne foto wa mukanda wa diendesha mashinyi. Teka diakamue Dikanga dia mfranga ne Equifax, Experian, ne TransUnion (tangila bulombodi buetu pa diandamuna dia buivi bua bumuntu).
3. "password", "login", "credentials", "welcome to", "backup codes": Kimba miaku eyi mu kazubu kebe ka mikanda password ne backup code, kumbusha meyi a njiwu adi kaayi malelela kunyima kua wewe mumane kushintulula mot de passe yonso udibu batelemu.
4. "invoice", "ACH", "wire", "routing", "escrow", "closing costs", "docusign": Shi udi munkatshi mua kusumba nzubu, kufuta muena mudimu, anyi kulombola mudimu, muntu udi ukubunda udi mpindieu ne kopi ya mikanda yebe ya bushuwa ne ya njila ya ku banke ne neatete bua kudifuanyikija bu wewe anyi kumpanyi webe wa nzubu bua kuiba makuta a ku banke. Bikila tshiapu tshieba tshia nzubu ne madimi, muena mudimu wa tshilaminu tshia bintu, anyi bantu badi basumba bintu ku telefone diakamue bua kubadimuija.

Nkonko itubu bela misangu ya bungi¶

Miaba mifumina¶

• Cybersecurity and Infrastructure Security Agency (CISA, United States): Protection Against Business Email Compromise (BEC), OAuth Application Abuse, and Phishing-Resistant MFA Guidance (cisa.gov/MFA ne cisa.gov).
• Microsoft Security Response Center & Defender Threat Intelligence (United States): Responding to a Compromised Email Account in Microsoft Defender for Office 365 (Hidden Inbox Rules -IncludeHidden, OAuth Consent Grants, ne Session Revocation) (learn.microsoft.com/en-us/defender-office-365/responding-to-a-compromised-email-account).
• Bukubi bua konte wa Google ne diambuluisha dia mulombodi wa muaba wa mudimu (États-Unis): Lama konte wa Google munyanguke anyi munyanguke, malanda a OAuth ne bantu bakuabu, ne programe wa bukubi bua pa mutu (support.google.com/accounts/answer/6294825).
• Tshibambalu tshia bukubi tshia ku Enternete tshia ditunga (NCSC, Royaume-Uni): Kupingaja konte wa e-mail munyanguke ne dipepeja dia mikenji ya dituma dia e-mail (ncsc.gov.uk).
• Federal Trade Commission (FTC, United States): Tshia kuenza pikalabu bakuate kazubu kebe ka e-mail (consumer.ftc.gov).
• Tshibambalu tshia bukubi bua ku Enternete tshia mu Australie (ACSC / ASD, Australie): Kulama konte ya ku Enternete ne kujingulula mikenji ya kazubu ka mikanda idi kayiyi mianyishibue (cyber.gov.au).

Malu adi apetangana¶

• Phishing and compromised accounts
• MFA phishing ne adversary-in-the-middle bypass
• MFA lockout ne authenticator recovery
• Data breach response and password leaks
• Disama dia programe mibi, ransomware, ne spyware
• Dishintakaja dia SIM