Dishima dia diambuluisha dia malu a ordinatere ne diumusha dia bintu bia mudimu bidi kabiyi bianyishibue¶

Padi tshibuelelu tshia ordinatere tshiebe tshijika mu tshimpitshimpi mu tshibuelelu tshikunze anyi tshia bule tshidi tshiamba ne: "Windows Defender Security Center: Trojan.Spyware Detected, Call Microsoft Support Immediately at 1-800-..." (anyi tshiamu tshia Apple macOS tshidi tshiamba ne: konte yebe ya iCloud ne ya ku banke idi mibunda), udi utangila **Support Technologie. Nansha mudi tshibuelelu tshileja bimanyinu bia mbulamatadi, tshienza dîyi dikole dia sirene anyi dia robo ku diambuluisha dia biamu biebe bia kuakula nabi, ne tshikanga tshiamu tshiebe tshia mouse bua wewe kubenga kutua pa X butone, ordinatere webe kena ne virus to. I anu dibeji dia ku Enternete dibi didi dienza mudimu bibi ne Full-Screen API (F11), Pointer Lock API, ne Web Audio loop bua kukutshinyisha bua kubikila tshibambalu tshia dibikila dia bena tshinyangu.

Ino, njiwu idi ilua milelela dîba diudi ubikila nimero ya telefone idi pa tshibuelelu ne ulekela "mumanyi" bua kuteka tshiamu tshia mudimu tshia Remote Monitoring and Management (RMM) anyi tshiamu tshia mudimu tshia ku bule, bu mudi AnyDesk, TeamViewer, ConnectWise ScreenConnect, UltraViewer, RustRecue, ZogMesk, anyi A Diambuluisha dia lukasa. Paudi ubuela munda mua ordinatere webe, bena tshinyangu badi bafiika tshiamu tshiebe tshia ordinatere ("badi bateka tshintu tshia bukubi"), banzulula mot de passe yebe ya tshikebelu tshiudi mulame ne bikondo bia banke ya ku Enternete, bashintulula HTML wa dibeji dia ku Enternete dia banke bua kumueneka bu ne: mbakupingajile makuta 40 000 ku mpukapuka, ne bateka Unattended Access Windows Services bua bobu kupingana mu ordinatere webe panyima pa 30:00 wa dinda. kukanga telefone. Mukanda ewu udi ukuleja mua kupatuka mu tshibuelelu tshia tshikebelu tshia tshiamu tshia mashinyi mu masekonde 5, kujikija diakamue malanda a ku bule, kumbusha midimu ya RMM misokoka, ne kukanga konte yebe ya makuta.

Enza nunku mpindieu¶

1. KULUKA tshiamu tshieba tshia Ethernet, kujima Wi-Fi mu ordinatere webe, anyi kumbusha routeur webe wa Wi-Fi wa ku nzubu ku tshibuelelu tshia nzembu mpindieu. Shi ukadi mubikile nomba wa telefone anyi mulekela muntu mukuabu ubuela mu ordinatere webe, kujimiji dîba dia kuela mpata ne muena tshinyangu ku telefone anyi kuteta bua kukanga dididishi diabu ne mouse webe (udi mua kukanga tshiamu tshiebe tshia nzembu ne kuenza bua tshiamu tshiebe tshikale tshifiike). Kukoka tshiamu tshia Wi-Fi routeur webe anyi kulama butone bua ordinatere webe mu tusunsa 10 too ne padiye ujima bidi bipangisha mudimu wabu wa dilombola dia ku bule diakamue.
2. Biwikala kuyi muanji kubikila nimero ne udi anu mulamate ku tshiamu tshia "Virus Alert" tshidi ne dîyi dikole, fina ne kulama Alt + F4 (anyi Ctrl + Shift + Esc bua kushipa tshiamu tshia mudimu mu Task Manager) pa Windows, anyi fina Command + Option + Escape bua kulekela Safari/Chrome ku bukole pa Mac. Kuena muanji kubuela mu tshinyangu to. Alarme i anu tshitupa tshia tshiamu tshia ku Enternete tshidi tshienza mudimu mu mushindu wa kiosk wa tshiamu tshijima. Paudi umbuka ku bukole mu tshiamu tshia kutangila natshi bintu, utshiunzulule kabidi ne KUENJI KUFIKA pa "Restore Pages", ne ordinatere webe udi mukezuke 100 pa lukama.
3. Wewe mulekele muntu udi ukubikila bua kubuela mu ordinatere webe anyi mu telefone webe wa bianza, bikila banke webe, tshisumbu tshia bafidi ba makuta, ne tshibambalu tshia malu a dishima ku telefone mukuabu diakamue. Nansha wewe kuyi mufunde mot de passe webe wa banke pavuabu batangila, bena tshinyangu batu benza mudimu ne scripts ya automatique ku diambuluisha dia AnyDesk/ScreenConnect file-transfer channels udi ukopolola ** browser webeLogin Data mêyi a tshisokomenu adibu balame** ne cookies ya tshikondo tshia mudimu mu masekonde 10, anyi kutuadija dituma dia ACH/Zelle/Wire didi kadiyi dimueneka panyima pa tshilamba tshia "Windows Update" tshidi tshifiike. Londa wetu bulombodi bua dishipa dia konte wa ku banke mpindieu mpindieu.
4. Tula tshiamu tshiebe tshia mudimu ne Wi-Fi ne Ethernet BIDI BIPISHA (anyi mu Windows Safe Mode) kumpala kua kumbusha AnyDesk, TeamViewer, ScreenConnect, anyi UltraViewer. Tuta anu pa X pa AnyDesk anyi TeamViewer kena umbusha bukenji bua muena tshinyangu pikalabu balongolole "Unattended Access" anyi bateke ConnectWise ScreenConnect (ScreenConnect.ClientService) Mudimu wa panyima pa Windows. Lama ordinatere kayi pa lutanda lua Internet paudi umbusha tshiamu tshionso tshia ku bule tshidibu bafuke lelu ne ukanga Windows Service / macOS LaunchDaemon ku diambuluisha dia malu adi kuinshi eku.
5. Kusumbi nansha kakese karte ka dipa, kupatula makuta a ku mubidi, kuela tsheke, anyi kutuma makuta a tshiamu tshia mashinyi anyi makuta a ku Enternete bua ku "pingaja makuta a bungi adibu bafute ku mpukapuka." Tshilele tshia bena tshinyangu tshia diambuluisha dia malu a tekinoloji ntshia kufina F12 (Browser Developer Tools Tools) paudi mubuela mu konte webe wa ku banke, shintulula mêyi a HTML a makuta audi mufute ku $2,500 bua $42,500, ne badila mu buôwa bamba mudibu "bafunda ku mpukapuka" $40,000 pamutu pa $400 pa dibeji diebe dia dipingaja dia makuta ne nebakuipate ku mudimu anu wewe mutume ku telefone anyi ku poste bua kupingaja makuta makuabu $39,600." Kakuena nansha santime nansha umue uvuabu bateke mu konte webe; bavua bashintulule nomba idi pa tshiamu tshiebe anyi bashintulule $40,000 ku konte webe wa makuta/HELOC mu konte webe wa makuta.
6. Bikala muena tshinyangu wamba ne: udi utuma "bena mudimu ba mbulamatadi" anyi "muena mudimu" ku nzubu kuebe bua kuangata makuta anyi or, ubikile bampulushi diakamue. Kumbuka ku dishima dia telefone bua kutuma muena mudimu wa makuta ku tshiibi tshiebe mbualu bubi budi buenda buenzeka. Kanga biibi biebe ne ubikile nimero ya njiwu ya muaba unudi (911 mu États-Unis ne Canada, 112 mu Union européenne mujima, 999 mu Royaume-Uni, anyi tangila nimero wetu nomba ya tshimpitshimpi tshilaminu).

Tshiamu tshia dishima tshia diambuluisha dia malu a tekiniki ne mutshi wa mapangadika a dikanda dia dibuela dia ku bule¶

flowchart TD
    Root["Tupeta Pop-Up wa diambuluisha dia malu a tekinoloji, e-mail wa facture wa dishima, anyi dishima dia dibuela ku bule"] --> DidConnect{"Uvuaku mubikile nimero anyi uvua mulekele muntu mukuabu ukulamakaja ne ordinatere anyi telefone webe anyi?"}

    DidConnect -->|"NO: Ndi mumone anu tshiamu tshia tshikebelu tshidi tshikenka bikole mu tshikebelu"| BrowserKill["1. Windows: Fina Ctrl+Shift+Esc -> End Task on Chrome/Edge/Firefox<br/>2. Mac: Fina Cmd+Option+Esc -> Force Quit Safari/Chrome<br/>3. Kangula tshiamu tshia kutangila natshi bintu KUYI mufina pa 'Kupingaja mabeji' -> Kumbusha tshisokomenu ne kanga mamanyisha a site<br/>(Kuena ne programe mibi miteka to; udi mu bukubi 100%)"]

    DidConnect -->|"EYOWA: Ndi muele programe, ndi mufunde kode wa nomba 9, anyi mubueje URL uvuabu bampeshe"| CutNet["MUSHINDU 1: Umbusha diakamue Wi-Fi ne umbusha tshiamu tshia Ethernet (anyi umbusha routeur)"]

    CutNet --> BankLock["MUSHINDU 2: Ku telefone mukezuke, bikila tshibambalu tshieba tshia banke/tshibambalu tshia malu a dishima bua kukanga konte, kumbusha karte, ne kukanga nshinga"]

    BankLock --> PurgeRMM["TSHIPA 3: Padi PC kayi pa lutanda lua Internet, umbusha AnyDesk, TeamViewer, UltraViewer, RustDesk NE shipa midimu ya ScreenConnect / GoTo misokoka"]

    PurgeRMM --> AuditSys["MUSHINDU 4: Umbusha bena mudimu ba Windows Admin ('muena mudimu wa net'), umbusha midimu ya ntuadijilu, umbusha 'syskey' anyi mateyi a BitLocker, ne enza mudimu ne Defender Offline Scan"]

    AuditSys --> RotateCreds["MUSHINDU 5: Ku tshiamu tshikezuke, shintulula meyi a tshisokomenu a ku Enternete, ku banke ne ku tshilaminu tshia meyi a tshisokomenu ne tuaku pa 'Kupatuka mu bisangilu bionso'"]

Tshitupa 1: Mushindu kayi wa kukanga tshibuelelu tshia "Virus Alert" tshidi tshishala tshikole (biwikala kuyi mubabikile to)¶

Bua tshinyi didimuija dia dishima dia Microsoft anyi dia Apple didi dikanga tshimanyishilu tshiebe tshia mbeba ne dibenga kukuanyishila bua kufina butone bua kukanga? Paudi muele tshiala pa tshitupa tshidi ne bilema bia kufunda (bu mudi youtbe.com anyi espnn.com) anyi dishintulula dia njila wa dimanyisha dia malu mabi, dibeji dia ku Enternete diakajula API isatu ya HTML5 mu tshijengu tshia lukasa tshia 10-millisecond: 1. Element.requestFullscreen(): Udi ulengeja dibeji dia ku Enternete pa tshiamu tshiebe tshijima, usokoka kazubu kebe ka mudimu ka Windows, Mac Dock, ne tabs ya navigateur. 2. Element.requestPointerLock(): Udi ukuata tshiamu tshieba tshia mbeba munda mua kazubu ka 1-pixel kadi katshiyi kamueneka (tshivua tshienza bua manaya a 3D bu mudi Minecraft), wenza bua se: mbeba webe mmukole. 3. window.onbeforeunload + window.print() dialog loops: Udi upatula tuzubu tua diyukidilangana katuyi ne ndekelu nunku patudi tufina Esc diakamue udi upingaja tshibuelelu tshijima.

How to kill the pop-up in 10 seconds on Windows, macOS, Chromebook, and iPad¶

1. On Windows 10 and Windows 11:
2. Press Ctrl + Shift + Esc on your keyboard (this opens Windows Task Manager directly over top of the frozen browser).
3. (If your mouse cursor is still trapped, use the Down Arrow key on your keyboard to highlight Google Chrome, Microsoft Edge, or Mozilla Firefox, and press the Delete key or Alt + E to click End Task).
4. Important step when reopening your browser: When you open Chrome or Edge again, a small bubble in the top-right corner will ask: " Chrome didn't shut down correctly. [Restore]". DO NOT click Restore (clicking Restore reopens the malicious tab). Click the X to dismiss the bubble.
5. On Apple macOS (MacBook / iMac):
6. Press Command (⌘) + Option (⌥) + Escape on your keyboard to open the Force Quit Applications window.
7. Select Safari or Google Chrome and click Force Quit.
8. Hold down the Shift key on your keyboard while clicking the Safari or Chrome icon in your Dock to launch it. Holding Shift during launch forces macOS to open a clean blank window without restoring the previous session's locked tabs.
9. Eliminate Recurring Desktop Notification Pop-Ups ("McAfee: 5 Viruses Found" in bottom-right corner):
10. If you are seeing virus warnings slide out of the bottom-right corner of your Windows taskbar (or top-right corner of your Mac screen) even when you are on a normal website, you accidentally clicked "Allow" on a browser Push Notification prompt days ago.
11. In Chrome: Copy and paste chrome://settings/content/notifications into the address bar. Look under the "Allowed to send notifications" list, click the three dots (⋮) next to every unfamiliar website, and select Remove / Block.
12. In Microsoft Edge: Open edge://settings/content/notifications and remove all unrecognized sites under Allow.
13. In Apple Safari (macOS): Open Safari > Settings > Websites > Notifications and select Deny or Remove for every unfamiliar website.

Phase 2: Complete removal of scammer Remote Access Tools (RMM Purge Protocol)¶

If you called the scammer and followed their instructions to visit a website (such as anydesk.com, ultraviewer.net, help.me, fastsupport.com, or a custom link like support247.screenconnect.com) and ran a downloaded file, keep your computer completely disconnected from the internet (Wi-Fi OFF, Ethernet unplugged) while you audit and remove every remote access backdoor.

Why scammers install two or three different remote access tools at once¶

As soon as a scammer connects to your PC via AnyDesk or Windows Quick Assist, their very first silent background move (while distracting you on the phone) is to install a second, invisible enterprise Remote Monitoring & Management (RMM) agent, most commonly ConnectWise ScreenConnect (ScreenConnect Client), Atera, Syncro, MeshCentral, SimpleHelp, or Tactical RMM. - Why? Because even if you get suspicious, hang up the phone, and uninstall AnyDesk from your desktop, ScreenConnect runs as a hidden NT AUTHORITY\SYSTEM Windows background service (ScreenConnect Client (xxxx)) with no desktop icon. The moment your PC reconnects to Wi-Fi, the scammer still has 100 percent silent, unattended root access to your machine.

Master lookup table of Remote Access & RMM tools abused by scammers¶

Tshiamu tshia PowerShell tshia kulonda, kuimanyika, ne kumbusha midimu yonso ya RMM misokoka (Windows)¶

While your Windows PC is offline, right-click the Start button -> click Terminal (Admin) or PowerShell (Admin), and run this diagnostic and neutralization script to reveal and disable every remote access service installed on your computer:

# 1. List all running or installed Windows Services matching common RMM / Remote Access tools:
Get-Service | Where-Object {
    $_.DisplayName -match "AnyDesk|TeamViewer|ScreenConnect|ConnectWise|UltraViewer|RustDesk|Zoho|LogMeIn|GoTo|Supremo|SimpleHelp|Mesh Agent|Atera|Syncro|Splashtop" -or
    $_.Name -match "AnyDesk|TeamViewer|ScreenConnect|UltraViewer|RustDesk|Zoho|LMI|GoTo"
} | Select-Object Status, Name, DisplayName

# 2. Immediately STOP and DISABLE every matched remote access service so it can never start again:
Get-Service | Where-Object {
    $_.DisplayName -match "AnyDesk|TeamViewer|ScreenConnect|ConnectWise|UltraViewer|RustDesk|Zoho|LogMeIn|GoTo|Supremo|SimpleHelp|Mesh Agent|Atera|Syncro|Splashtop"
} | ForEach-Object {
    Stop-Service -Name $_.Name -Force -ErrorAction SilentlyContinue
    Set-Service -Name $_.Name -StartupType Disabled -ErrorAction SilentlyContinue
    Write-Host "Stopped and Disabled Service: $($_.DisplayName)"
}

# 3. Check for any software or folders created or modified in the last 72 hours in Program Files & ProgramData:
Get-ChildItem -Path "C:\Program Files", "C:\Program Files (x86)", "C:\ProgramData", "$env:APPDATA", "$env:LOCALAPPDATA" -Directory -Force -ErrorAction SilentlyContinue |
  Where-Object { $_.CreationTime -gt (Get-Date).AddDays(-3) } |
  Select-Object CreationTime, FullName

After stopping the services in PowerShell: 1. Press Win + R, type appwiz.cpl, ne fina Enter to open the classic Programs and Features control panel. 2. Click the "Installed On" column header to sort all installed programs from Newest to Oldest. 3. Umbusha programe yonso miteka pa dituku dia tshinyangu (kusangisha ne AnyDesk, TeamViewer, UltraViewer, RustDesk, ScreenConnect Client, Zoho Assist, GoTo Opener, anyi " antivirus / driver cleaners" ya dishima). 4. Delete leftover ScreenConnect & AnyDesk folders: In File Explorer, delete C:\Program Files (x86)\ScreenConnect Client*, C:\ProgramData\AnyDesk, ne %APPDATA%\AnyDesk (deleting C:\ProgramData\AnyDesk\service.conf destroys the scammer's saved unattended password hash and AnyDesk ID).

Step-by-step removal of Remote Access LaunchDaemons on Apple macOS¶

On a Mac (with Wi-Fi turned OFF), scammers install persistent background agents inside /Library/LaunchDaemons ne /Library/LaunchAgents. Open Terminal (Applications > Utilities > Terminal) and run:

# 1. Inspect all third-party background LaunchDaemons and LaunchAgents for remote access tools:
ls -la /Library/LaunchDaemons /Library/LaunchAgents ~/Library/LaunchAgents

# 2. Unload and delete any ScreenConnect, AnyDesk, TeamViewer, Zoho, or LogMeIn persistence plists:
sudo launchctl bootout system /Library/LaunchDaemons/*screenconnect* 2>/dev/null
sudo launchctl bootout system /Library/LaunchDaemons/*anydesk* 2>/dev/null
sudo launchctl bootout system /Library/LaunchDaemons/*teamviewer* 2>/dev/null
sudo rm -rf /Library/LaunchDaemons/*screenconnect* /Library/LaunchAgents/*screenconnect* /opt/screenconnect*
sudo rm -rf /Applications/AnyDesk.app ~/.anydesk /Library/LaunchDaemons/*anydesk* /Library/LaunchAgents/*anydesk*
sudo rm -rf /Applications/TeamViewer.app /Library/LaunchDaemons/*teamviewer* /Library/LaunchAgents/*teamviewer*

Phase 3: Reversing "Scammer Retaliation Locks" (msconfig Safe Boot Lock, net user Password Lock, and BitLocker traps)¶

When a tech support scammer realizes you are refusing to pay them or hanging up the phone, they frequently spend their final 15 seconds on your computer trying to lock you out of Windows so they can extort you for a "unlock password":

1. Reversing the msconfig "Safe Boot with No Network" Lockout Trap¶

Scammers love to press Win + R -> type msconfig -> check Safe boot (Minimal) -> change your local Windows user account password via net user -> and force a reboot. When your PC reboots into offline Safe Mode, your normal Windows Hello PIN is disabled and Windows asks for the password the scammer just set. - How to break out: 1. At the Windows login screen, hold down the Shift key while clicking the Power icon -> Restart to enter the blue Windows Recovery Environment (WinRE) -> Troubleshoot > Advanced options > Command Prompt. 2. If the scammer disabled normal boot in bcdedit (safeboot minimal), run this command to restore normal boot immediately:

bcdedit /deletevalue {default} safeboot

net user

2. Checking if the Scammer Stole Your Saved Browser Passwords (Login Data / iCloud Keychain)¶

While your screen was blacked out by TeamViewer or ScreenConnect's "Black Monitor" feature, did the scammer export your passwords? - Open Google Chrome (chrome://password-manager/settings) or Microsoft Edge (edge://wallet/settings). Scammers routinely click "Export passwords" (or copy your %LOCALAPPDATA%\Google\Chrome\User Data\Default\Login Data SQLite file and Local State DPAPI key) mu tusunsa 30 tua disangisha. - Tuangate ne: dina dionso dia muena mudimu ne meyi a tshisokomenu adibu balame mu tshiamu tshiebe tshia ku Enternete mmakopibue kudi muena tshinyangu. Enza mudimu ne ordinatere anyi telefone wa bianza udi kayi ne tshintu bua kushintulula meyi ebe a ku Enternete, a ku banke, a dipanyishila bintu, a bitadi, a Amazon ne a ku Enternete, ne kumbusha bikondo biudi wenza mudimu ku diambuluisha dia tshikebelu tshietu dikuata dia tshimanyishilu tshia tshisangilu ne dijimija dia tshisangilu tshia buloba bujima mulombodi.

3. Kukonkonona ne kumbusha programe ya dibuela dia ku bule idi miteka pa Android anyi iPhone (AnyDesk / TeamViewer QuickSupport)¶

Kuvulangana, diambuluisha dia malu a tekinoloji ne bena tshinyangu ba dishima ba "Geek Squad / Amazon / Norton Refund" badi kabidi benzeja bantu badibu bashima bua kuteka AnyDesk Remote Control anyi TeamViewer QuickSupport ku iPhone anyi Android smartphone yabu bua muena tshinyangu au amone mua kubala mesaje a SMS 2FA a nomba 6 adi afumina ku banke padiye utuadija kutuma mesaje a banke buludiludi ku telefone portable: - Pa Android: Ela Airplane Mode, kangula Settings > Apps > See all apps, ne umbusha AnyDesk, TeamViewer QuickSupport, Zoho Assist, anyi tshintu tshionso tshia "AdControl / plugin" tshia diambuluisha. Pashishe, kangula Settings > Accessibility -> Downloaded apps ne ikala mushindike ne: kakuena tshiamu tshia kulombola natshi mudimu tshidi ne bukenji bua kuenza mudimu to. - Pa iPhone / iPad: Pa iOS, AnyDesk ne TeamViewer kabena mua kunyunguluja minu yebe buludiludi to, kadi badi baleja tshiamu tshiebe tshia iPhone (kusangisha ne bimanyinu bia SMS 2FA bidi bibuela) ku diambuluisha dia tshiamu tshia Apple tshia Screen Broadcast. Ela panshi kumbukila ku ditumba dia kuulu dia dia balume bua kukangula Control Center, tangila Screen Recording / Screen Broadcast button mutoke, umbusha AnyDesk anyi TeamViewer app ku Écran webe wa kumpala, ne tangila Settings > General > VPN & Device Management bua kujimija mishindu yonso idi kayiyi mimanyike.

Tshitupa 4: Dikanda dia makuta shi uvua mufute, mubuele mu banke webe, anyi muele ID¶

Bikala muena tshinyangu mukumone mubuela mu banke webe, mukufikishe ku difuta "5-year firewall subscription," anyi mukushime ne "$40,000 overpayment refund" HTML edit:

1. Shi uvua mubuele mu banke wa ku Enternete patshivua muena tshinyangu mubuele mu tshisumbu:
2. Bikila Tshibambalu tshia malu a dishima tshia banke webe diakamue. Ubambile ne: "Mvua muena tshibawu tshia dishima dia diambuluisha dia ku bule muvua muena tshibawu uvua ne bukokeshi pa ordinatere wanyi ku diambuluisha dia AnyDesk/ScreenConnect pavua tshisangilu tshianyi tshia banke tshia ku Enternete tshiunzulula."
3. Lomba banke bua:
   • Fanga nomba ya konte yebe ya tshilaminu ne ya makuta ne kangula nomba ya konte mipiamipia (bualu bena tshinyangu badi banzulula mikanda yebe ya ngondo yonso ya PDF munda mua tshibuelelu tshiebe tshia banke bua kukopa Nomba ya njila ne nomba ya konte yebe yonso bua dishima dia ACH dia matuku atshilualua).
   • Umbusha makuta onso adi kaayi malelela a ACH, makuta a Zelle, tsheke ya Bill Pay, anyi makuta a ku Enternete.
   • Tangila ni muena tshinyangu uvua mutume makuta pankatshi pa konte yebe ya munda (tshilejilu, dienda $25,000 ku tshibutshilu tshiebe tshia makuta anyi tshia ku nzubu mu tshibutshilu tshiebe tshia makuta bua kuenza "dipingaja dia makuta mapite bungi").
   • Umbusha bimanyinu bionso bia OAuth bidi bienza mudimu (Plaid, Yodlee, Finicity) ne pingaja dina diebe dia mudimu, mot de passe, ne nkonko ya bukubi.
4. Shi uvua musumbe Target, Apple, Razer Gold, Lowe's, Home Depot, anyi Steam Gift Cards:
5. Nansha wewe mumane kubala nomba ya PIN idi kunyima kua karte ka dipa kudi muena tshinyangu, bikila nomba wa Gift Card Fraud / Customer Service udi kunyima kua karte ka mubidi diakamue ne mukanda wa karte mu tshianza. Bantu banene badi bafila bintu (Apple, Target, Home Depot, Lowe's, Walmart) badi mua kuimanyika makuta adi mashale adi kaayi mafute ku nomba ya karte ka dipa kadibu bibe ne kukupingajila makuta padibu bakukuata kumpala kua muena tshinyangu udi wenza mudimu wa dishima dia karte ka dipa bua kubishipa.
6. Wewe mufile nomba webe wa tshishimbi, nomba wa Medicare, anyi foto wa mukanda webe wa diendesha / Passport:
7. Teka Security Freeze diakamue, tshianana pa luapolo luebe lua mfranga ku Equifax, Experian, ne TransUnion (ne ChexSystems bua konte ya ku banke) ku diambuluisha dia diandamuna dia buivi bua bumuntu ne dipingaja dia makuta mulombodi.

Dikuba: Mua kukuba ordinatere webe ku malu a tshinyangu ne kukuba baledi anyi balela bebe bakulakaje¶

Shi udi ulongolola ordinatere bua wewe nkayebe, muledi webe, anyi kakuebe kunyima kua dishima dia diambuluisha dia malu a ordinatere, enza mudimu ne bimanyinu binayi ebi mu minite itanu bua muena dishima kayi mua kudisangisha kabidi to:

• Teka tshiamu tshia kukanda natshi mamanyisha ne malu mabi (uBlock Origin / uBlock Origin Lite) mu tshikebelu tshionso: Ma 90 pa lukama a bintu bia dishima bia Microsoft ne Apple bidi bipatuka ku diambuluisha dia dimanyisha dia malu mabi mu ngumu, mu mishindu ya kudia, mu miaku mishilangane anyi mu site idi ne bilema bia kufunda. Kuteka uBlock Origin kudi kukanga 99.9 pa lukama ya mishindu ya dishima ya diambuluisha dia malu a tekinoloji kumpala kua kuyibueja.
• Shintulula routeur wa ku njibo nansha DNS wa navigateur ku DNS Resolver wa Malware-Blocking (1.1.1.2 anyi 9.9.9.9): Teka ordinatere anyi routeur DNS ku Cloudflare bua mêku (1.1.1.2 ne 1.0.0.2) anyi Quad9 (9.9.9.9), udi ukandika nkayende miaba mipiamipia ya dishima ya diambuluisha dia malu a tekinoloji ku tshitupa tshia DNS.
• Enza tshikandakanda tshia Windows / AppLocker anyi tshikandakanda tshia mikenji ya Firewall AnyDesk.exe, ScreenConnect, ne UltraViewer: Pa ordinatere wa mulela udi kayi wenza mudimu ne biamu bia mudimu bia ku bule bia bantu bakuabu, kukudimuna konte wabu wa Windows wa dituku dionso kumbukila ku konte wa Mulombodi too ne ku konte wa Muena mudimu wa pa tshibidilu (ulama konte wa pa nkayende wa Mulombodi udibu balame ne mot de passe bua kulongolola malu a IT a mu dîku) bua kabatshiyi mua kuenza mudimu mu tshimpitshimpi SYSTEM-level RMM services kakuyi PIN wa mulombodi.
• Lama tshimanyinu tshia tshivulukilu tshia pa mutu pa tshiamu tshia ordinatere: Funda patoke pa tshimanyinu tshikese ne: *"Microsoft, Apple, Geek Squad, ne banke webe kabakuleja nansha kakese nimero ya telefone pa tshiamu anyi kukulomba bua kuteka AnyDesk/UltraViewer to. Fina Ctrl+Shift+Esc bua kukanga."

Nkonko itubu bela misangu ya bungi¶

Malu adi apetangana¶

• Disama dia programe mibi, ransomware, ne spyware
• Dikuata dia token ya tshisangilu, infostealer malware, ne dijimija dia passkey
• Dishipa dia konte wa ku banke ne dituma dia makuta ku Enternete kakuyi dianyisha
• Diandamuna dia buivi bua bumuntu ne dipingaja dia makuta
• Dikanga dia tshilaminu tshia meyi a tshisokomenu ne dipingaja dia tshilaminu tshia bintu mu tshimpitshimpi
• Deepfake voice clone ne AI impersonation scams
• Mukanda wa nomba ya tshimpitshimpi

Miaba mifumina¶

• Federal Trade Commission (FTC) (United States): Mushindu wa kumona, kuepuka, ne kumanyisha malu a dishima a diambuluisha dia bena mudimu (madimuija a patupu, dishima dia dipingaja dia makuta mapite bungi, ne dishima dia karte ka dipa).
• Cybersecurity and Infrastructure Security Agency (CISA), FBI, ne NSA Joint Cybersecurity Advisory (AA23-025A) (United States): Kukuba ku dienza mudimu bibi ne programe wa Remote Monitoring and Management (RMM) (ConnectWise ScreenConConCon) ne Dilomba dia dilomba.
• Tshibambalu tshia bukubi tshia ku Enternete tshia ditunga (NCSC) ne malu a dishima (Royaume-Uni): * Kuenza mudimu ne dibikila dia diambuluisha dia malu a ordinatere ne diumusha dia dibuela dia ku bule didi kadiyi dianyishibue*.
• Microsoft Security Response Center & Apple Platform Security: Bulombodi bua mbulamatadi pa bidi bitangila dishima dia diambuluisha dia malu a ordinatere (support.microsoft.com/security), Browser Fullscreen/PointerLock Abuse, ne Kumbusha malu adi kaayi maanyishibue.