Telegrame anyi Signal Account Hijacted ku diambuluisha dia SMS anyi QR Code Session Cloning: Terminating Rogue Devices, 24-Hour Lockout Trap, and 2FA Cloud Password¶

Paudi umona ne: muntu udi ukushima udi utuma mesaje ku konte webe wa Telegram anyi wa Signal ulomba bantu baudi ubabikila bua kukutumina makuta a tshimpitshimpi anyi bua kufuta makuta ku Enternete, anyi kumona dimanyisha dia kubuela mu liste webe wa miyuki ya mu tshimenga tshiudi kuyi mumanye (New login from Telegram Desktop / Chrome on Windows]. Lelu bena tshinyangu ba mesaje badi benza mudimu mu mishindu ibidi mishilangane: (1) Silent Session Cloning, mudi muena tshinyangu ukushima bua kuenza scanner wa "Link Device" QR code mubi (udibu babikila ne: "Vote pour my niece in this art contest," "Claim Free Telegram Preum Preum"** anyi kubuela mu tshisumbu anyi kubuela mu tshisumbu)" code wa 5-digit wa kubuela mu app pa tshibuelelu tshia Internet tshia dishima, udi upesha muntu udi ukubunda tshisangilu tshia pa mesa padi telefone webe utungunuka ne kuenza mudimu bimpe; ne (2) Dikuata dia telefone wa kumpala, mudi muena tshinyangu windila tshikondo tshia bukubi tshia mêba 24 tshia Telegram bua kumbusha telefone webe ku konte webe, anyi wangata kode wa dijadika dia SMS ku diambuluisha dia dishintakaja dia SIM anyi dikuata dia mesaje a dîyi bua kufila tshimanyinu tshiebe anyi difunda dia Telegram ku telefone wabu. Bua malu a WhatsApp ne Discord adi atangila QR, bala QR code mubi, WhatsApp Web, Discord, anyi Signal linked device hijacking ne session kill; pikala nomba webe wa telefone mupuekele ku No Service / SOS Only anyi mesaje eba a mu diyi adi manyanguke, tangila diakamue Dishintakaja dia SIM ne tshinyangu tshia mesaje a mu diyi, dituma dia meyi a mitoto, ne tshinyangu tshia dijadika dia WhatsApp. Bikala muntu udi ukubunda wenza mudimu ne konte webe udibu bakuate bua kukutshinyisha diakamue, kunyanga muana mutekete anyi kudifuanyikija bu muntu udi wenza mudimu wa diambuluisha dia lukasa, ubikile ku nimero wa njiwu wa muaba unudi (911 mu États-Unis ne mu Canada, 112 mu matunga masanga a ku Mputu, 999 mu Royaume-Uni) anyi tangila mukanda wetu wa nomba ya tshimpitshimpi.

Enza nunku mpindieu¶

1. Biwikala utshidi mubuela mu Telegram anyi mu Signal ku telefone webe mpindieu, KUPATUKI: kangula diakamue Settings -> Devices ne kujikija bikondo bikuabu bionso:
2. Mu Telegram: Fina pa Malongolola -> Biamu (Active Sessions) -> Terminate All Other Sessions (anyi tuaku pa tshiamu tshia mudimu tshia rogue/web ne tuaku pa Terminate Session). Kupatuka mu telefone webe i bualu bubi butambe buudi mua kuenza, bualu kupatuka kudi kujimija >24-hour diakalenga dia tshisangilu tshia bakulu didi dikuanyishila bua kuipata muena lukuna.
3. Mu tshimanyishilu: Fina pa Tshimanyinu tshiebe tshia profil (kuulu ku dia bakaji) -> Malongolola -> Biamu bidi bipetangana, fina pa tshionso tshidi katshiyi tshimanyike Signal Desktop anyi iPad kubuela, ne tuaku pa Unlink (Remove Device).
4. Diakamue, teka anyi ushintulule Telegram 2-Step Verification Cloud Password NE webe Signal Registration Lock PIN (mu masekonde 30 a kuipata muena lukuna):
5. Mu Telegram: Enda ku Malu adibu balongolole -> Malu masokoka ne bukubi -> Dijadika dia malu abidi (Cloud Password). Shi i Off, utshikudimune On diakamue ne weja adrese wa e-mail wa dipingaja. Shi muena tshinyangu ukadi muenze tshijadiki tshia malu abidi On paudi musokome mu konte webe, kutshinyi to: wewe utshidi mubuele mu telefone webe, tuaku pa Shintulula mot de passe -> Forgot Password?. Nansha mudi muntu udi ukubunda kayi muele e-mail webe, Telegram udi witaba tshiamu tshijadika bua kutuadija dipingaja dia mot de passe mu matuku 7 (anyi dipingaja diakamue ku diambuluisha dia e-mail wa dipingaja).
6. Mu tshimanyishilu: Enda ku **Malongolola -> Konte -> PIN wa tshimanyishilu (Registration Lock).
7. Bua tshinyi udi ne dibala dia mêba 24 pa Telegram (The 24-Hour Session Eviction Rule): Padi muntu udi ukubunda ubuela mu konte webe wa Telegram ku tshiamu tshipiatshipia ku diambuluisha dia code QR anyi code wa nomba 5, Telegram udi ukandika tshisangilu tshipiatshipia atshi bua kujikija tshisangilu tshiebe tshia kale tshia telefone munkatshi mua mêba 24 menemene. Bantu badi baluisha badi bashala bapuwe mu meba 24 a kumpala (0 messages sent) nunku kuena ubamona to, ne ku Dîba 24 ne minite 1, badi bajikija tshisangilu tshiebe tshia ku telefone ne bakukanga pambelu. Tangila Settings -> Devices mpindieu.
8. Bikalabu bakuipate mu telefone webe wa kumpala (Logged Out), funda kabidi diakamue ku diambuluisha dia nimero webe wa telefone (SMS / Phone Call) pa karte kebe ka SIM:
9. Pa Signal: Signal udi witaba anu telefone umue wa ku bianza ku musangu. Kujadika kabidi nomba webe wa telefone ku diambuluisha dia SMS ku tshiamu tshiebe tshia iPhone anyi tshia Android kudi kumbusha diakamue telefone wa muntu udi ukubunda ne kujimija bikondo bionso bia ku biro bidi biumvuangane (pa kumbusha padi muntu udi ukubunda muanyishe Registration Lock, utudi tuakula mu Tshitupa 4).
10. Pa Telegram: Lomba kode wa kubuela mu nimero webe wa telefone; shi muena lukuna uvua muenzeje 2-Step Verification Cloud Password uudi kuyi mumanye, tuaku pa Forgot password? -> Reset Account (anyi windile matuku 7 a dipingaja dia meyi a tshisokomenu adi kaayi malelela pikala utshidi ne tshisangilu tshibidi tshia iPad/Mac).
11. Tangila ni tshiamu tshieba tshia telefone tshidi ne dituma dia mabikila didi kadiyi dianyishibue (*#21# ne *#67#) anyi SIM Swap: Shi kuena muanji kubala kode wa QR anyi kufunda kode mu kazubu ka tanda ya internet, webeja mudi muntu udi ukubunda mupete kode webe wa dijadika dia SMS/dîyi: funda *#21# ne *#67# pa tshiamu tshia telefone webe mpindieu bua kujadika ne: muntu udi ukubunda ki mmutume mabikila ebe a dijadika ku nimero yende to.
12. Tuma diakamue didimuija dia pambelu pa tshisumbu (SMS, WhatsApp, Instagram, Phone Call) kudi bena mu dîku, bena mudimu nebe, ne bantu baudi ubabikila mu malu a mfranga: Bantu badi bakukuata ku bukole batu batuma diakamue mesaje kudi bantu 20 baudi uyukila nabu matuku mashale aa benza bu ne: udi wewe mu bualu bua tshimpitshimpi ("Hey, my bank card is frozen, can you send $800 on Zelle / USDT and I'll pay you back tonight?") anyi kutuma malu mabi BeaverTail / crypto-drainer links in Telegram groups where you are Admin.

Mutshi wa mapangadika: Telegrame ne Signal konte ya tshinyangu tshia tshimpitshimpi¶

Ingidija tshimfuanyi etshi bua kumanya njila webe mulelela wa kupingaja malu bilondeshile programe kayi uvuabu banyange (Telegram vs. Signal), ni telefone webe utshidi mubuele, ne ni muntu udi ukubunda udi muele 2FA Cloud Password anyi PIN wa Registration Lock:

flowchart TD
    Start["Tshilumbu tshia tshimpitshimpi: Telegrame anyi Signal Account Hijacted / Unuthorized Login"] --> WhichApp{"App kayi udi munyanguke?"}

    WhichApp -->|"Telegrame"| TgState{"Telefone webe anyi tshiamu tshieba tshia ku biro tshitshidiku mpindieu anyi?"}
    WhichApp -->|"Tshimanyishilu"| SigState{"Tshiamu tshieba tshia kumpala tshia telefone tshitshidi tshibuela mpindieu anyi?"}

    TgState -->|"Eyowa: Utshidi anu mubuela mu tshiamu tshimue"| TgKick["Fungula Paramètres -> Biamu -> Fina pa 'Terminer All Other Sessions'"]
    TgKick --> TgLess24{"Telegram udi wamba ne: 'Malu mapiamapia kaena mua kujikija malonga a kale munkatshi mua mêba 24' anyi?"}

    TgLess24 -->|"Tòo: Bisangilu bia Rogue mbijika bimpe"| TgSet2fa["Enda ku Paramètres -> Privacy & Security -> Two-Etape Verification -> Set/Reset Cloud Password & Recovery Email"]
    TgLess24 -->|"Eyowa: Udi mupingane (<24h Old Session)"| TgWaitRace["Kumbusha Telegram Bot/Web Sessions -> Enable Cloud Password if Off -> Keep App Open & Terminate Attacker at Hour 24:00"]

    TgState -->|"Tòo: Bavua bamuipate mu biamu bionso"| TgReLogin["Bueja nimero ya telefone -> Angata kode ku diambuluisha dia SMS/Dibikila -> Muena tshibawu uvuaku muteke mot de passe wa Rogue 2-Step Cloud anyi?"]

    TgReLogin -->|"Kakuyi mot de passe mu ditutu to"| TgKick
    TgReLogin -->|"Eyowa: Mukandika kudi mot de passe wa mu ditu wa muena lukuna"| TgReset["Toneka pa 'Udi mupue mot de passe muoyo anyi?' -> Tangila mukanda wa dipingaja anyi utuadije 7-Day Reset / Account Reset"]

    SigState -->|"Eyowa: Telefone wa kumpala udi wenza mudimu, kadi mesaje adibu batuma kuyi nebe"| SigUnlink["Kangula bimanyinu bia tshimanyishilu -> Biamu bidi bilamakaja -> Unlink All Unknown Desktop/iPad Sessions -> Enable Registration Lock PIN"]

    SigState -->|"Tòo: Tshimanyishilu tshidi tshiamba ne: 'Tshiamu tshiebe katshiena tshifunda to'"| SigReReg["Diakamue, Fina pa 'Re-register' ne nomba webe wa telefone ku diambuluisha dia SMS -> Tangila tshiamu tshia telefone bua kushintulula SIM anyi dituma dia telefone (*#21#)"]

    SigReReg --> SigPinLock{"Muntu uvua uluisha uvua muenze bua PIN wa difunda dia tshimanyinu tshia dishima ikaleku anyi?"}
    SigPinLock -->|"Tòo: Badi bafunda kabidi diakamue"| SigUnlink
    SigPinLock -->|"Eyowa: Mukanga kudi PIN wa muena lukuna"| SigWait7["Muntu udi ukubunda udi mupatuka diakamue ku SMS webe Verify -> Windile 7-Day Registration Lock Inactivity Timer bua kupingaja nomba"]

Tshitupa 1: Mushindu kayi udi bena lukuna bangata Telegram ne Signal kabayi bakuiba telefone webe¶

Kujingulula mushindu kayi uvua muena tshinyangu mubuele mu konte webe kudi ne mushinga, bualu yeye mubuele ku diambuluisha dia laptable munyanguke (Info-Stealer malware) anyi kazubu ka mesaje a dîyi adibu batume, anu wewe mumbushe tshisangilu tshiabu ku telefone webe nebikufikishe ku dikukuata kabidi kunyima kua minite 10.

Tshitupa 2: Dipingaja dia konte wa Telegram ku kakese ku kakese ne diumusha dia bena mudimu ba tshinyangu¶

Londa tshilejelu tshidi kuinshi eku tshidi tshikumbanangana ne mushindu uudi mua kubuela mu Telegram:

Tshilejilu A: Utshidi anu mubuela mu Telegram ku telefone webe (anyi iPad/Desktop)¶

Sekonde yonso udi ne mushinga, bu muudi wenda lubilu mu tshikondo tshia mêba 24:

1. Tangila ne ujikije bikondo bionso bia tshinyangu (Settings -> Devices):
2. Kangula Telegrame -> Malongolola -> Biamu (Active Sessions).
3. Tangila muinshi mua Active Sessions bua tshikebelu tshionso tshiudi kuyi mumanye (Chrome, Firefox, Safari), desktop (Telegram Desktop pa Windows/Linux/macOS), anyi tshiamu tshia ku bianza, anyi tshisangilu tshionso tshidi tshileja adrese wa IP / ditunga diudi kuyi mumanye.
4. Fina pa Terminate All Other Sessions (anyi uteke ku dia bakaji / tuaku pa tshisangilu tshia tshinyangu ne tuaku pa Terminate Session).
5. Kuindila: Uvua kabidi muenze mudimu ne Telegram Desktop pa tshiamu tshia Windows anyi tshia Mac? Tangila mesa adi mu tshitupa tshia 1 Vector #3: pikala tshiamu tshieba tshia ku bianza tshikuate kudi info-stealer malware uvua muibe tdata tshilaminu, muena lukuna udi ufila tshitupa tshia tshisangilu tshia muomumue ne tshiebe tshiakane Telegram Desktop pa portable au. Nunku, udi ne tshia kujikija tshiebe Telegram Desktop tshisangilu kabidi** (Terminate All Other Sessions ku telefone webe) nunku tshiiba tdata tshimanyishilu tshia tshisangilu tshidi tshijimijibua ku biamu bia mudimu bia Telegram.
6. Tangila kabidi Logged in with Telegram (Websites tab munda Settings -> Devices): Tangila panshi munda mua Malongolola -> Biamu (anyi Malu masokoka ne bukubi -> Mubuela mu Telegram / Bots ne Sites). Shi muntu udi ukubunda udi muanyishile kazubu ka tanda ya Internet ka muntu mukwabo nansha tshiamu tshieba tshia bot ku diambuluisha dia konte webe, tuaku pa Disconnect All.
7. Kukanga Two-Step Verification (Cloud Password) diakamue:
8. Enda ku Malongolola -> Malu masokoka ne bukubi -> Dijadika dia malu abidi.
9. Shi Two-Step Verification udi mpindieu OFF: Toneka pa Set Password, enza password wa pa buawu (udibu balame mu tshilaminu tshia mot de passe webe), ne enza misangu yonso Recovery Email (udibu balame kudi hardware/authenticator 2FA).
10. Netuambe tshinyi bikala muntu udi ukubunda mumane kuenza Two-Step Verification ON padiye musokome mu konte webe? Bu muudi utshidi mubuela mu telefone webe, udi mua kutshimuna Cloud Password wa muena lukuna mpindieu:
    1. Fina pa Malu adibu balongolole -> Malu masokoka ne bukubi -> Dijadika dia malu abidi -> Shintulula mot de passe.
    2. Fina pa Forgot Password? kuinshi.
    3. Shi muena tshinyangu kena mujadike e-mail wa dipingaja (anyi wewa muele Don't have access to email? munda mua tshisangilu tshijadika), Telegram udi utuadija matuku 7 a Cloud Password Reset countdown. Bu muudi mumane kujikija tshisangilu tshia tshiamu tshia muena lukuna mu tshitupa tshia 1, muena lukuna kena mua kumbusha dijadikulula diebe dia matuku 7 to, ne mu matuku 7 mot de passe wa Cloud udi ujimina bimpe menemene ne kakuyi muyuki mujimija to.

Tshilejilu B: Netuambe tshinyi pikala Telegram wamba ne "You cannot terminate other sessions because you logged in less than 24 hours ago"?¶

Bidi bienzeka pikala muntu udi ukubunda muele telefone webe kumpala, wewe mupingane ku SMS, ne mpindieu tshisangilu tshieba tshia telefone tshidi anu 5 minutes old padi tshikondo tshia muena lukuna tshidi 25 hours old. 1. KUPATUKI mu telefone webe: tshipiminu tshiebe tshia mêba 24 tshia mudimu tshiakatuadija dîba diuvua mubuele kabidi. 2. Tangila diakamue ni muntu udi ukubunda uvua mupue muoyo bua kuteka mot de passe wa 2-Step Verification Cloud: Ndaku mu Settings -> Privacy and Security -> Two-Step Verification. Shi tshitshidi Off, teka mot de passe wa Cloud ne e-mail wa dipingaja diakamue. Kuteka Cloud Password misangu ya bungi kudi kulomba anyi kukandika bikondo bidi kabiyi bijadikibua ne kudi kupangisha muntu udi ukubunda bua kukukanga yeye muele telefone webe kabidi. 3. Umbusha "New login" dimanyisha munda mua diyukidilangana diebe ne Telegram (777000) diakamue shi udi mubuela mu tshiamu tshibidi tshia dipandisha natshi bantu, ne tangila telefone webe bua sekonde menemene udi tshisangilu tshiebe tshifika ku mêba 24 (or if you have an older iPad/Mac session that has been logged in for weeks), udi wenza mudimu ne tshiamu tshia kale bua kuela Terminate All Other Sessions.

Tshilejelu C: Badi bakuipata mu Telegram, NE muena tshinyangu udi muteke mot de passe wa 2-Step Verification Cloud¶

Paudi ufunda nomba webe wa telefone mu Telegram, funda SMS/kode wa dîyi, ne utute tshimanu tshilomba "Mot de passe webe wa mu ditu" (udi muena tshibawu muteka):

+-------------------------------------------------------------------------+
| HOW TO RECLAIM YOUR PHONE NUMBER WHEN LOCKED OUT BY A ROGUE 2FA PASSWORD|
|                                                                         |
| 1. Enter your Phone Number in Telegram -> Verify with SMS / Voice Call. |
|    (Must be done from your physical SIM card so Telegram proves you     |
|     own the telephone number.)                                          |
| 2. At the "Enter Password" screen, tap "Forgot password?".              |
| 3. Telegram says: "We sent a recovery code to [attacker's email]".      |
| 4. Tap "No access to [email]?" / "Reset Account".                       |
| 5. Telegram offers TWO paths depending on account state:                |
|    - Path A: 7-Day Password Reset Waiting Period (if eligible).         |
|    - Path B: Immediate "Delete / Reset Account" -> Wipes the hijacked   |
|      account's cloud history, kicks the attacker out permanently, and   |
|      lets you register a fresh, clean account on your phone number NOW. |
+-------------------------------------------------------------------------+

Shi muntu udi ukubunda udi wenza mudimu ne konte webe wa Telegram mpindieu bua kushima balunda bebe anyi bakiliya bebe ne ubenga bua kukubueja ne mot de passe wende wa dishima, tuaku pa Forgot password? -> Reset Account (Kujimija ne kuenza kabidi) udi ubutula diakamue mushindu udi muena tshibawu mua kubuelamu ne udi ujikija dishima dia kudifuanyikija pa muaba au.

Tshitupa 3: Dipingaja dia konte wa tshimanyishilu ku tshitupa ku tshitupa (Linked Devices vs. Difunda dia kumpala)¶

Mushindu wa kuenza mudimu ne tshiamu tshia Signal (Signal Protocol / Double Ratchet / Sealed Sender) mmushilangane bikole ne tshilejelu tshia Telegram tshia diyukidilangana mu matutu, tshidi tshienza mudimu bikole mu diakalenga diebe mu tshikondo tshia diondopangana:

1. Bua tshinyi muena tshinyangu udi ulamakaja muena tshinyangu Signal Desktop anyi iPad NTSHIENA mua kubala mesaje eba a kale to¶

Bishilangane na Telegram (udi ulongolola malu ebe onso a bidimu bia bungi a diyukidilangana mu matutu dîba didi tshiamu tshipiatshipia tshibuela), Signal udi ulama mesaje nansha amue mu ditutu, ne katshia ku Signal 7.0+, udi ulamakaja tshintu tshipiatshipia Signal Desktop anyi iPad udi anu wenza mudimu ne tshitupa tshikese, tshia ku ndekelu too ne ku ndekelu tshia metadata ya muyuki wa matuku mashale aa pikalabi bitabijibua patoke ku telefone wa kumpala.

Shi uvua mudishima bua kuenza scanner wa ** mubisgnl://linkdevice?uuid=...** QR code munda mua Signal (Settings -> Linked Devices -> Link New Device): 1. Fungula Signal ku telefone webe wa kumpala. 2. Fina pa Tshimanyishilu tshiebe tshia profil (kuulu ku dia bakaji) -> Malongolola -> Biamu bidi bipetangana. 3. Tangila liste wa bintu bidi bipetangana (Last active tshimanyishilu tshia dîba ne dina dia tshiamu). 4. Fina pa tshiamu tshionso tshidi katshiyi tshimanyike ne fina pa Unlink (OK). 5. Musangu uudi utua Unlink, tshitupa tshia Signal Desktop tshia muena tshinyangu tshidi tshijika bua kashidi ne katshiena mua kupeta anyi kutuma mukenji nansha umue to.

2. Netuambe tshinyi pikala telefone webe wa kumpala wa Signal wamba ne "Your device is no longer registered"?¶

Bualu Signal udi witaba anu telefone umue wa kumpala ku nimero ya telefone, kumona "Tshiamu tshiebe katshiena kabidi tshifunda kudi Signal to" kudi kumvuija ne: muntu udi ukubunda mmukuate SMS anyi code wa dijadika dia dîyi dia nimero webe wa telefone ne mmufundishe Signal ku tshiamu tshiabu tshia telefone.

Enza malu anayi aa diakamue: 1. Tangila ni tshiamu tshieba tshia ku bianza tshivua tshishintakaja SIM (Do you still have 4G/5G cellular bars and can you receive a normal SMS/call?): - Shi telefone webe uleja SOS Only / No Service, muena tshibawu wakenza SIM Swap wa muena mudimu. Bikila tshibambalu tshia malu a tshinyangu tshia tshiapu tshiebe tshia telefone ku telefone mukuabu diakamue ku diambuluisha dia Mukanda wa tshimpitshimpi wa dishintakaja dia SIM. - Shi telefone webe utshidi ne mudimu wa telefone, tangila ne umbushe mikenji yonso ya dituma dia mabikila idi kayiyi mianyishibue pa kuela ##002# (dijimija dia dituma dia bintu pa buloba bujima) pa tshiamu tshia telefone webe ne ufina Call. 2. Tona Re-register munda mua Signal ku telefone webe mpindieu ne ujadike ku diambuluisha dia SMS: - Mu milliseconde menemene uudi mujikije kode wa dijadika dia SMS ku telefone webe, Server wa Signal udi umbusha diakamue difunda dia telefone dia muena tshibawu (Device No Longer Registered) ne wipata muena tshibawu tshishiki. 3. Netuambe tshinyi pikala kunyima kua wewe mumane kubueja kode wa SMS, Signal ukulomba Signal PIN (Registration Lock) udi muena lukuna muenza anu bua se? Mona tshintu tshidi tshikolesha tshia Signal: - Nansha mudi muntu udi ukubunda muele Registration Lock ne muele PIN wa dishima, kujikija tshitupa tshia dijadika dia SMS mu telefone webe kudi anu kujimija diakamue tshiamu tshia muntu udi ukubunda (anyi kukanga tshisangilu tshiabu padibu bamuluisha kabidi). - Shi kuena mua kupitshila ku PIN wa Registration Lock wa muena tshinyangu, kulekedi muena tshinyangu apeta kode mukuabu wa SMS to. Muinshi mwa meyi a Signal a Registration Lock, PIN wa Registration Lock udi ujika nkayende kunyima kua matuku 7 a konte kayi wenza mudimu. Padi matuku 7 apita kakuyi muntu udi ukubunda mua kujadika kabidi nomba webe wa telefone ku diambuluisha dia SMS, udi mua kupingaja nimero webe wa telefone bimpe kuyi dijinga ne PIN wa muntu udi ukubunda to. 4. Paudi upingana munda mua Signal, enza bua webe Registration Lock ne kutangila Safety Numbers: - Enda ku Parametres -> Account -> Registration Lock -> Turn On (ne tela PIN mukola wa maleta ne nomba muinshi mua Change Your PIN). - Bualu difunda dia kabidi didi dipatula Identity Keypair mupiamupia pikala bintu bia kulama kabiyi bipingajibua, bantu baudi ubabikila nebamone Your safety number with [Your Name] has changed, ubadimuija diakamue ne: bualu bua difunda budi buenzeke.

Tshitupa 4: Kulama Voicemail webe, SIM, ne Laptop bua muntu udi ukubunda kayi mua kubuela kabidi to¶

Wewe muipata muena tshinyangu mu Telegram anyi mu Signal kuyi mukanga tshiibi tshivuabu babuela, nebakunyenge kabidi butuku ebu. Tangila biibi bionso bisatu ebi mpindieu:

# 1. On your iPhone or Android dialer keypad, dial this standard GSM code and press Call:
*#21#
# And check conditional forwarding (when busy / unanswered / unreachable):
*#61#
*#62#
*#67#

• Wewe wenza mudimu ne Telegram Desktop anyi Signal Desktop pa tshiamu tshia Windows anyi tshia Mac: Shi kuena muangate QR code ne kuyi mupeta SMS/call code, ela meji ne ordinatere webe anyi Mac udi ne Info-Stealer (Lumma, RedLine, BeaverTail, AMOS) uvua muibe muaba wenu tdata anyi Signal tshilaminu. Umbusha ordinatere au ku Wi-Fi diakamue ne ulonde dikuata dia cookies, infostealer malware, ne dijimija dia passkey.

Tshitupa 5: Dilombola dia dinyanguka ne didimuija dia bantu kumpala kua dienza dia wire/crypto¶

Mu minite mikese kunyima kua dikuata dia konte wa Telegram anyi wa Signal, bena tshinyangu batu benza mudimu ne script idi yenza mudimu nkayayi idi ikeba miaku ya pa buayi mu miyuki yebe (seed, mnemonic, password, 0x, passport, SSN, bank, invoice) ufundile bantu baudi ubabikila:

• Tangila anyi kumbusha mesaje adi ne mushinga mu Telegram Saved Messages (Favorites): Miliyo ya bantu badi benza mudimu ne Telegram badi benza mudimu ne ** yabu ya pa nkayabuSaved Messages** tshibuta tshia mu ditu bu tshilaminu tshia mikanda tshia kulama miaku ya ntete ya makuta a tshiamu tshia arjan, meyi a tshisokomenu, foto ya mikanda ya diendesha mashinyi, ne mikanda ya bitadi. Shi muntu udi ukubunda udi mua kubuela mu tshisangilu tshieba tshia Telegram nansha bua sekonde 10, ela meji ne bot wende mmuangate bionso bidi munda Saved Messages. Diakamue, pingaja makuta onso a crypto mu tshibutshilu tshipiatshipia tshia bintu (cryptocurrency wallet drain ne seed phrase compromise) ne kushintulula meyi a tshisokomenu onso adibu balame mu Saved Messages.
• Tangila tshisumbu tshionso tshia Telegram ne tshisanji tshionso tshiudi Owner anyi Admin: Bena tshinyangu badi bangata balombodi ba kasumbu bua kutuma "Emergency Airdrop / Security Update" idi ijimija makuta a bena mu kasumbu, anyi bua kufila bumfumu bua tshisanji ku konte wa tshinyangu. Tangila Bienzedi bia matuku aha (Admin Log) munda mua kasumbu konso/tshisanji tshiudi ulombola ne umbusha balombodi anyi bots yonso idi muena tshinyangu muele.
• Tuma didimuija dimpe kudi bantu baudi ubabikila ku diambuluisha dia SMS, WhatsApp, LinkedIn, anyi X/Twitter: Ambila bantu baudi ubabikila ne: "Konte wanyi wa Telegram/Signal mmunyanguke lelu. Kutumina makuta, crypto, anyi kututa pa link anyi pa fichier nansha umue (zip, dmg, exe, njila ya masungula) mituma ku konte wanyi kayi muanji kumbikila ku telefone wa pa tshibidilu."

Nomba ya tshimpitshimpi ya mu tshijengu ne mikenji ya bibambalu¶

Bikala dikuata dia konte wa Telegram anyi wa Signal difikisha ku dituma dia makuta a ku banke anyi a ku Enternete kakuyi dianyisha, buivi bua makuta a tshiamu tshia nzembu, dikuata dia makuta anyi dienza dia malu mabi, manyisha bualu ebu diakamue:

• États-Unis ne Canada: Ela 911 bua tshinyangu tshionso tshia lukasa tshia bukubi bua mubidi anyi dikuata dia muana mutekete. Umanyishe malu a mfranga anyi a tshiamu tshia nzembu adi afumina ku dikuata dia konte ya mesaje kudi FBI Internet Crime Complaint Center (ic3.gov), FTC (ReportFraud.ftc.gov), anyi Tshibambalu tshia diluisha dishima tshia mu Canada (1-888-495-8501).
• Royaume-Uni: Ela 999 bua njiwu ya lukasa anyi 101 bua luapolo lua bampulushi ludi kaluyi lua lukasa. Umanyishe dikuata dia konte ya mesaje ne dishima dia malu a dishima ("Muoyo Mamu / Mulunda udi mu dikenga" dishima) kudi Action Fraud (0300 123 2040 / actionfraud.police.uk) ne mulongo wa malu a tshinyangu wa banke webe (159).
• Union européenne: Ela 112 mu matunga onso adi mu UE bua malu a tshimpitshimpi, ne funda luapolo lua malu a tshinyangu tshia ku Enternete ku tshiibi tshia bampulushi tshia ditunga diebe pamue ne CSIRT wa ditunga diebe.
• Australie ne Nouvelle-Zélande: Ela 000 mu Australie anyi 111 mu Nouvelle-Zélande bua malu a tshimpitshimpi. Umanyishe dikuata dia konte kudi ReportCyber (cyber.gov.au, 1300 CYBER1) anyi CERT NZ (0800 237 869), ne yukila ne IDCARE (1800 595 160).
• India ne Asia-Pacifique: Dial 112 bua diandamuna dia lukasa dia bampulushi. Mu Inde, manyisha malu a tshinyangu a mfranga adi afumina ku Telegram/Signal diakamue ku National Cyber Crime Helpline (1930 / cybercrime.gov.in); mu Singapour, bikila Anti-Scam Helpline (1799).

Nkonko itubu bela misangu ya bungi¶

Bua tshinyi muena tshinyangu uvua muindile mêba 24 kayi mutume mukenji nansha umue kunyima kua meme mumane kuenza scanner wa code QR wa dishima anyi mumane kubueja code au mu site wa "Voting"?¶

Ditalala dia mêba 24 edi ndienza ku budisuile ne didi dienzeka nkayadi. Mu mikenji ya bukubi ya Telegram, tshiamu tshipiatshipia tshidi tshilamakaja tshidi tshikandika bua kujikija bikondo bia kale bidi bienza mudimu (`Settings -> Devices -> Terminate All Other Sessions`) bua **mêba 24** a kumpala. Bikala muntu udi ukubunda mutuadije kutuma mesaje kudi bantu bebe mu dîba dia 1, neumone diakamue ne: udi mua kukangula `Settings -> Devices`, ne kubapatula mu masekonde 5. Pamutu pa nanku, bot wabu udi ubutula dimanyisha dia kubuela mu site webe `Telegram (777000)` muyuki wa mudimu diakamue paudi ubuela, udi windila mupuwe munkatshi mua mêba 24 ne minite 1, udi umbusha telefone webe ku konte pa dîba dia 24, ne ukukanga.

Mmunyi muvua muena tshinyangu mubuele mu Telegram Desktop wanyi tshiyi muanji kupeta kode wa kubuela wa nomba 5 anyi kuenza scanner wa kode wa QR?¶

Shi kakuena tshisangilu tshipiatshipia tshidi tshimueneka mu `Settings -> Devices` (anyi shi udiku `Telegram Desktop` tshikondo tshivua tshienza mudimu ne IP mukuabu), ordinatere webe uvua ne disama dia **Info-Stealer malware** (`Lumma Stealer`, `RedLine`, `StealC`, `BeaverTail`, anyi `AMOS`). Bantu aba badi biba ngumu badi bakopa ** ya muaba udibu basombele`%AppData%\Telegram Desktop\tdata`** tshilaminu (anyi `-/Library/Application Support/Telegram Desktop/tdata` pa macOS) buludiludi ku SSD webe. Pa kumbusha wewe muenzeje **Local Passcode Lock** munda mua Telegram Desktop (`Settings -> Privacy and Security -> Local Passcode`, udi ufunda malu a muaba udibu `tdata` tufungu tua tshisangilu pa diske), muntu yense udi wiba `tdata` tshilaminu tshidi mua kutshiela mu tshiamu tshiabu tshia Telegram Desktop ne kubuela diakamue mu tshisangilu tshieba.

Shi muntu uvua mubunda konte wanyi wa Telegram, uvuaku mumone anyi Secret Chats?¶

Tòo. Bishilangane na Telegram Cloud Chats ya pa tshibidilu ne `Saved Messages` (idi milamibua mu biamu bia mudimu bia Telegram ne idi ipetangana ne biamu bionso bidibu babueje), **Telegram `Secret Chats` bidi anu bia tshiamu kampanda ne bidi bifunda ku ndekelu too ne ku ndekelu (`MTProto 2.0 E2EE`)**. Diyukidilangana dia mu musokoko didi dibangisha pa iPhone webe kadiena dipetangana ne tshisangilu tshipiatshipia tshia Telegram Web anyi tshia Desktop to, nunku muntu udi ukubunda udi wenza clone wa tshisangilu tshiebe mu ordinatere wende kena mua kubala miyuki yebe ya mu musokoko idiku to.

Netuambe tshinyi pikala muntu udi unkuata mushintulule nimero ya telefone ya mu konte wanyi wa Telegram ku nimero yende ya telefone?¶

Anu bu mudibu bajikija bikondo bia kale, Telegram udi ukandika tshiamu tshipiatshipia tshidi tshibuela mu konte bua kushintulula nomba wa telefone wa konte mu **mêba 24** a kumpala (ne udi uleja didimuija dinene). Shi muntu udi ukubunda udi musombele mu konte webe munkatshi mua meba mapite pa 24 ne mushintulule nimero ya telefone ya konte webe bua kulua nimero wa burner, nimero webe wa telefone udi mpindieu mupatuke mu konte au (nanku wewe mubuele ne nimero webe wa telefone udi wenza konte mupiamupia udi kayi ne tshintu padi muntu udi ukubunda ukokesha konte webe wa kale `@username` ne malu a kale a muyuki muinshi mua nomba wabu wa burner). Tuma diakamue mesaje **Telegram Abuse / Support (`@notoscam` ne `recover@telegram.org`)**, udimuija bantu bonso badi bakubikila ne: malu ebe a kale `@username` udi munyanguke, ne udi ne bantu ba bungi badi bamanyisha mudibu bakuate `@username` bua difuanyikija nunku Telegram udi utshikanga.

Ndi mua kupingaja konte wanyi wa Telegram anyi wa Signal ku telefone wanyi meme mu luendu mu ditunga dikuabu ne mujimije mushindu wa kupeta karte kanyi ka SIM anyi?¶

Shi telefone webe **utshidi mubuela mu Telegram** paudi ku babende, udi mua kushintulula nomba wa telefone wa konte webe wa Telegram ku eSIM mupiamupia wa muaba uudi musombele anyi nimero wa luendu munda mua **Settings -> Tap your Phone Number -> Change Number** (udi utuma code wa dijadika ku *now* number, ki SIM mujimine to, pikala session webe muikale `>24 hours` kale). Bia muomumue, **Signal** udi ne tshintu tshia **Change Phone Number** (`Settings -> Account -> Change Phone Number`) udi ulekela telefone wa kumpala ukadi mujadikibue bua kufila konte webe mujima wa Signal, bisumbu biebe ne profil webe ku nimero wa telefone mupiamupia kuyi dijinga ne SMS wa SIM wa kale uvua mujimine.

Mmunyi mundi mua kupangisha bantu badi baluisha bua kukopa bintu bianyi Telegram Desktop tdata tshilaminu anyi Signal Desktop tshilaminu tshia bintu kabidi?¶

Mu **Telegram Desktop**, ndaku ku **Settings -> Privacy and Security -> Local Passcode** ne tela passcode wa muaba unudi: bidi bifunda muaba wenu `tdata` tufungu tua tshisangilu ne `PBKDF2 / AES` nunku mukopolola `tdata` mikanda kayena ne mushinga kudi info-stealer malware kuyi ne code wa tshisokomenu wa muaba uudi to. Mu **Signal Desktop**, ikala ne tshiamu tshieba tshia mudimu (`Windows DPAPI` / `macOS Keychain` / `Linux libsecret`) mukanga ne kayi wenza mudimu kayi mueyemenyibua to `.exe`, `.dmg`, `npm install`, anyi PowerShell clipboard commands pa tshiamu tshidi ne tshimanyinu tshia Signal Desktop tshidi tshienza mudimu.

Malu adi apetangana¶

• QR code mibi, WhatsApp Web, Discord, anyi Signal linked device hijacking ne session kill
• Dibunda dia PIN wa mesaje a mu diyi, dituma dia meyi a mitoto, ne dikuata dia dijadika dia WhatsApp
• Dishintakaja dia SIM
• Dikuata dia cookies ya tshisangilu, infostealer malware, ne dijimija dia passkey
• Cryptocurrency wallet drain ne seed phrase compromise
• Nomba ya telefone ya dianyisha dia malu abidi mipingajibua kudi muena mudimu ne SMS 2FA lockout
• Nomba ya njiwu bilondeshile ditunga

Miaba ne buludiki bua mbulamatadi¶

• Telegram Messenger Inc. (telegram.org/faq & core.telegram.org/api/auth): Dilombola dia bikondo bia mudimu, Dipangisha dia dijikija dia tshisangilu tshia tshiamu tshipiatshipia tshia mêba 24, ne Dijadika dia malu abidi (SRP Cloud Password) Recovery Protocol.
• Mutumibue wa tshimanyishilu (support.signal.org): Signal PIN ne Registration Lock Specification (7-Day Inactivity Expiration), Linked Devices Security, and Safety Number Verification.
• Tshibambalu tshia bukubi bua ku Enternete ne tshia bintu bia mudimu (CISA) & Biro bia malu a makebulula bia mbulamatadi (FBI) (États-Unis): Mibelu ya malu a bukubi bua ku Enternete: Dikuba dia meyi a ku telefone ne mesaje adibu bafunde mu musokoko ku dishima, dienza dia code QR, ne dishintakaja dia SIM.
• Tshibambalu tshia bukubi tshia ku Enternete tshia ditunga (NCSC) (Royaume-Uni): Kulama konte ya mesaje diakamue ne buludiki bua kujadika malu abidi.
• Electronic Frontier Foundation (EFF): Didikuba dia Dilama: Dikolesha dia Tshimanyishilu ne Telegrame bua kuluisha dikuata dia konte.