Skip to content

Konte wa LinkedIn anyi dibeji dia kumpanyi dishipa: Kuimanyika dishima dia bantu badi bangata bantu ku mudimu ne kupeta kabidi mushindu wa kubuela mu tshibambalu tshia mudimu

Emergency numbers differ by country. This page uses 911, the number for the United States and Canada. Many other countries use 112, 999, or another number. Find the number for your country.

Paudi umona ne: muntu udi wenza malu adi mua kunyanga bantu mmukuate mfumu kampanda, muena mudimu wa programe ya ordinatere, anyi muena mudimu wa kumpanyi wa LinkedIn, anyi mmuangate bukokeshi bua Super Admin pa LinkedIn Company Page webe, mbualu bua lukasa bua bukubi bua kumpanyi ne bua lumu lua tshintu kampanda. Bishilangane na bantu badi basumba bintu ku Enternete, dikuata dia konte ya LinkedIn (ATO) badi babapesha bingoma mu minite mikese kudi bisumbu bia buenzavi bia ku Enternete (Lazarus Group / Contagious Interview, tsheke ya dishima ya mudimu, ne bisumbu bia dishima dia faktire ya B2B) bua kutuma "Remote $120k Mudimu wa diambuluisha / muenji wa mudimu udi unyanga bantu badi balomba mudimu ne dikonkonona dia malu adibu bafunde, ulomba bua kubafuta makuta a kumpala, anyi ujimija makuta binunu ne binunu bia dolare mu LinkedIn Campaign Manager (Ads) kufila makuta ku karte kebe ka mfranga ka kumpanyi.

Shi diangatshila dia bintu didi dilomba dilomba dia makuta, dikuatshisha dia bukubi bua mubidi, anyi dishima dia bungi dia makuta, bikila bampulushi ba muaba unudi anyi nimero ya njiwu (911 mu États-Unis ne mu Canada, 112 mu Union européenne mujima, 999 mu Royaume-Uni; tangila nomba ya tshimpitshimpi) ne funda diakamue luapolo lua malu mabi a ku Enternete. Tangila mikanda ya bana betu pa dikuata dia konte wa réseaux sociaux ne dibunda, dishima dia ku Enternete ne dishima dia bantu bakuabu, ne tshisanji tshia muenji tshikuata kudi tshinyangu tshia crypto paudi wenza mudimu ne malu adi atangila muntu nkayende a mu LinkedIn ne mikenji ya dipingaja dia dibeji dia kumpanyi idi kuinshi eku.

Enza nunku mpindieu

  1. Tangila ni muntu udi ne "Super Admin" udi ne bukenji bua kubuela mu dibeji dia LinkedIn Company (0 to 2 minutes). Dibeji dia kumpanyi wa LinkedIn kadiena ne dina dia mudimu ne mot de passe to; udi ulombodibua ku diambuluisha dia mudimu udi ulamakaja ku profil ya LinkedIn ya bena mudimu pa nkayabu. Shi nansha muena mudimu UMUE udi kayi mushintuluke utshidi anu ne Super Admin role, ubalomba bua bakangule dibeji dia kumpanyi diakamue -> tuaku pa Settings (Gear Icon) -> Manage admins, ne tuaku pa Trash Can (Remove) tshimanyishilu tshidi ku luseke lua dina dia mfumu/muena mudimu udibu bashipe NE Super Admin yonso udi kayi mumanyike udi muena tshinyangu eu muele.
  2. Kukanga karte ka mfranga anyi konte wa ku banke udi mu LinkedIn Campaign Manager (linkedin.com/campaignmanager) ne LinkedIn Recruiter (Recruiter Corporate / Lite) diakamue. Tshienzedi tshia kumpala tshia bena tshinyangu ba LinkedIn badi ne dijinga dia makuta ntshia kunzulula Campaign Manager bua kutuadija $5,000-per-day Mamanyisha a crypto/malware adibu bafuta ku karte kebe ka Amex/Visa, anyi kupatula tshilaminu tshieba tshijima tshia bantu badibu basungule mu LinkedIn Recruiter.
  3. Biwikala utshidi anu mubuele mu konte webe wa LinkedIn mu tshiamu tshiebe tshia telefone, ndaku ku Settings -> Sign in & security -> Where you're signed in ne tuaku End all sessions KUMPALA kua kushintulula mot de passe webe. Shi muena tshinyangu muibe li_at tshiamu tshia kubandila natshi bintu ku diambuluisha dia infostealer malware anyi Adversary-in-the-Middle (AiTM) dibeji dia dishima, kushintulula mot de passe webe kuyi ujikija bikondo bidi bienda bikola kudi misangu mikuabu kushiya bimanyinu bia telefone/API bidiku ne muoyo.
  4. Tangila Settings -> Sign in & security -> Email addresses ne Phone numbers bua kumona ni muena tshinyangu uvua mubueje e-mail wa bubidi (@rambler.ru, @firstmail.ltd, @proton.me, @outlook.com) ne kumuvuija wa kumpala. Shi muena tshinyangu ukadi mushintakaja e-mail wa kumpala ne muenze mudimu wende wa Two-Step Verification (2SV). Pamutu pa nanku, ndaku buludiludi ku LinkedIn Persona Government ID Recovery Form mu tshitupa 1 tshidi kuinshi eku.
  5. Tula diakamue didimuija dia malu a tshinyangu pa site webe wa mbulamatadi, X/Twitter, ne pa LinkedIn feeds ya bena mudimu badi bashale ne muoyo bua kudimuija bantu badi bakeba mudimu bua kubenga kuangata mikanda, kufuta bitadi bia biamu, anyi kutuma mikanda ya diendesha mashinyi/SSN ku mudimu wonso udibu batume kudi konte udibu bashipe. Bualu bantu badi bakeba mudimu badi beyemena kumpanyi webe mulelela badi bajimija mudimu webe tshijadika "Recruiting at [Company]" tshimanyishilu, dîba dionso dia ditalala didi dianyishila bantu ba bungi badi bakeba mudimu bua kuikalabu bashima mu dina dia kumpanyi wenu.
  6. Tangila tshiamu tshia mudimu tshia muena mudimu mubi bua Infostealer malware (RedLine, Lumma, Stealc) anyi bintu bibi bia Chrome (fake AI LinkedIn scrapers / ChatGPT outreach extensions). Pa 65 percent bia diangatangana dia LinkedIn kudi bafidi ba mudimu ne balombodi ki mbualu muena mudimu mmufunde mot de passe wende mu site wa dishima to, kadi mbualu mbateke tshitupa tshia Chrome tshidi tshilaya "Automated LinkedIn Lead Generation / Email Finder" tshidi tshipatuka mu musokoko li_at cookie wa dijadika dia tshisangilu dîba dionso didibu banzulula linkedin.com.

Danger

The "Malicious Job Listing / Trojanized Coding Test" Liability Trap. Bena tshinyangu badibu bambuluisha kudi mbulamatadi (badibu bafunde kudi CISA, FBI, ne Mandiant) ne bena tshinyangu ba malu a mfranga batu bangata konte ya bushuwa ya LinkedIn ya Balombodi ba mudimu bajadika, balombodi ba malu a mfranga, ne balombodi ba malu a mfranga ba kumpanyi minene ne ya malu a mfranga. Kuenza mudimu ne konte weba mulelela wa mudimu ne Recruiter InMail credits, badi batuma mesaje kudi ba-enjenyere ba programe ne ba-developpeur ba crypto, bababikila ku muyuki wa dishima, ne babalomba bua kuenza clone ne kuenza mudimu ne malicious GitHub repository (npm install / Python / Node.js test project) anyi wangate tshiamu tshia dishima tshia video-conferencing tshidi tshijimija makuta a muena mudimu ne mikanda ya kumpanyi. Misangu yonso manyisha bantu bonso badi bapeta InMails mu tshikondo tshia diumvuangana diakamue.

Mutshi wa mapangadika: Dibunda dia profil wa muntu nkayende wa LinkedIn vs. dibunda dia LinkedIn Company Page vs. dishima dia muena mudimu wa dishima

Londa mudimu wa dikosolola edi bua kupeta bukokeshi bilondeshile tshintu tshivua tshinyanguke.

flowchart TD
    A["LinkedIn Security Emergency"] --> B{"Ntshintu kayi tshia LinkedIn tshidibu banyanga?"}
    B -->|"Mulombodi wa muntu nkayende / muena mudimu udi mubuela mu mudimu (mukanga, email/2FA mushintuluke)"| C["KUFUNDI konte mupiamupia wa LinkedIn ne e-mail webe wa kale to -> Fungula LinkedIn 'Report a Compromised Account' / Persona ID Verification flow"]
    C --> D["Tangila NFC / kamera ya telefone ya bianza ne Passport wa mbulamatadi anyi mukanda wa diendesha ku diambuluisha dia Persona -> LinkedIn Trust & Safety udi umbusha email wa hacker/2FA ne utuma link wa dijadikulula mu 24-72h"]
    B -->|"Dibeji dia kumpanyi wa LinkedIn dia mbulamatadi dikuata (mifundu ya dishima anyi Admin mushipa)"| E{"Muena mudimu netu udi mushale ne muoyo udiku ne bukenji bua 'Super Admin' pa dibeji dia kumpanyi anyi?"}
    E -->|"EYOWA: Mulombodi umue mukezuke udi mushale"| F["Surviving Super Admin udi unzulula diakamue dibeji dia kumpanyi -> Paramètres -> Manage Admins -> Remove hacked employees hacked & Admins all inknowns -> Delete scam posts and Job Listings"]
    E -->|"TO: Muena tshinyangu mmuipate balombodi bonso badi bakumbane"| G["Kukanga karte ka mfranga ka kumpanyi kadi kalamakaja kudi mulombodi wa kampanye -> Tuma 'LinkedIn Page Admin Recovery / Dispute Request' ku e-mail wa @companydomain.com mujadikibue"]
    B -->|"Malu a dishima a 'Ghost' a bena mudimu badi bamba mudibu benza mudimu ku tshiapu tshieba (ki mbakuate to, kadi badi badifuanyikija)"| H["Enza bua Super Admin wa dibeji dia kumpanyi abulule 'Dibeji -> Bantu / Bena mudimu' -> Kumanyisha bantu badi kabayi banyishibue badi balomba mudimu + kufunda dishipa dia mikenji ya tshimanyinu tshia mudimu"]
    D --> I["Tangila bipese bia Chrome bua ba-scraper ba LinkedIn (kuiba 'li_at' cookie) -> Kushintulula meyi a tshisokomenu a SSO/Email -> Kutuma didimuija dia bantu badi basungula"]
    F --> I
    G --> I
    H --> I

Tshitupa 1: Dipingaja dia malu ku kakese ku kakese paudi mupangile konte webe wa LinkedIn udibu bakuate

Padi muena tshinyangu unyanga profil wa muntu nkayende wa LinkedIn, udi ulonda mukanda wa manaya wa sekonde 90: udi ubuela (ku diambuluisha dia tshintu tshiiba li_at cookie anyi phishing proxy), weja adrese wabu wa e-mail, umujadike, utume e-mail wabu ku Primary, umbusha adrese yebe ya mudimu ne ya pa nkayebe, ne funda Authenticator App (2SV) wabu mu konte webe.

Paudi ukeba kufina pa "Mpua muoyo mot de passe," LinkedIn udi wamba ne "Katuena bapeta konte udi ne e-mail au to" anyi ukulomba code wa 2SV wa nomba 6 udi mu telefone wa muena tshinyangu. Mona mushindu mulelela wa kupingaja konte webe:

Mushindu 1: Kuenza mudimu ne "Verify Your Identity with Persona" 2SV / Email Override Flow (Fastest)

Shi e-mail webe utshidi wenza mudimu (anyi udi mufina pa "Pingana dishintuluka dia e-mail edi" munda mua e-mail wa didimuija dia LinkedIn uvua mutume mu kazubu kebe ka mesaje pavua muena tshinyangu mushintulule e-mail webe), kadi muena tshinyangu au muele Two-Step Verification (2SV) bua kukukandika: 1. Pa tshiamu tshia ordinatere tshia pa mesa (tshidibu babikila ne: identité-override tshidi tshisokome misangu ya bungi mu biamu bia ku bianza), ndaku ku linkedin.com/login. 2. Bueja e-mail webe ne mot de passe webe (anyi tuaku pa Udi mupue mot de passe webe muoyo anyi? ne funda kode udibu bakutumine ku e-mail webe). 3. Padi LinkedIn ukuimanyika ku tshibuelelu ukuebeja 6-digit Authenticator App code (udi muena tshinyangu ulombola), tangila buludiludi muinshi mua kazubu ka kode ne tuaku: "Verify using another method" anyi "Can't access your authenticator app? Verify your identity". 4. LinkedIn neapatule Dijadika dia bumuntu bua muntu QR code / camera flow: - Tangila QR code na tshiamu tshieba tshia foto. - Angata tshimfuanyi tshia kumpala ne tshia panyima pa Government-Issued Photo ID (Passport, Driver's License, anyi National ID Card; pikala passport webe ne tshiamu tshia NFC, Persona udi mua kubala tshiamu tshia cryptographic ku diambuluisha dia tshiamu tshia NFC tshia telefone webe bua kujadika lukasa) ne ujikije tshikebelu tshia selfie tshia 3-angle. 5. Tshidi tshienzeka pashishe: Diakamue padi Persona ujadika ne: dîna dijima didi mu mukanda webe wa mbulamatadi didi dipetangana ne dina dijima dia kale didi pa profil wa LinkedIn, tshiamu tshia LinkedIn tshidi tshienza mudimu nkayatshi tshidi tshipangisha tshijadiki tshia mu bitupa bibidi tshia muena tshinyangu (2SV) ne kukutumina mukanda wa kubuela mu minite 15 too ne ku meba 48.

Mushindu 2: Padi muena tshinyangu mumane kumbusha adrese webe wa e-mail mu konte webe (No-Access Form)

Netuambe tshinyi pikala "Kupingaja dishintuluka dia e-mail" mu kazubu kebe ka mesaje kajika (anyi muena tshinyangu au mubuele kabidi mu kazubu kebe ka e-mail ne mufute didimuija), nunku wewe mufunde e-mail webe mu LinkedIn udi wamba ne: "Account not found"? 1. Kangula mukanda wa LinkedIn No-Login Compromised Account Recovery Form: linkedin.com/help/linkedin/ask/TS-RHA (anyi linkedin.com/help/linkedin/ask/TS-F-APPEAL). 2. Uwuje miaba eyi ne bujalame bua dipanda bua tshiamu tshia triage tshidi tshienza mudimu nkayatshi tshitume tike webe buludiludi ku Account Recovery / ATO Queue: - Adrese wa e-mail utudi mua kukubikila: Funda adrese wa e-mail mukezuke ne mu bukubi (bimpe menemene udi wa kumpanyi webe mujadika @yourcompany.com adrese wa e-mail udi upetangana ne muena mudimu udiku mpindieu udibu bafunde mu malu ebe a mudimu a mu LinkedIn). - URL wa profil webe wa LinkedIn: Lama URL wa patoke wa profil webe (tshilejilu, https://www.linkedin.com/in/firstname-lastname-12345/). (Bikala muena tshinyangu mushintulule dina dia profil webe anyi URL wa tshianana, keba URL webe wa ku ntuadijilu mu malu a kale a navigateur, mu bimanyinu bia e-mail anyi mu tshilaminu tshia Google). - Adrese wa e-mail uvua mubuela kumpala ne konte webe: Funda adrese wa e-mail uvua wa kumpala mu konte webe wa LinkedIn kumpala kua dibunda. - Malu adi atangila tshilumbu etshi: > "My LinkedIn account ([Profile URL]) was hijacted by unuthorized access on [Date] at [Time]. Muntu uvua unkuata uvua mumbushe adrese wanyi wa kumpala wa e-mail ([Email wa kale]), muele adrese wa e-mail uvua kayi muanyishibue, ne muenze bua 2SV kayi muanyishibue. E-mail wanyi wa kumpanyi udi upetangana ne muena mudimu wanyi udi mujadikibue mpindieu pa profil, ndi mubala bua kujikija dijadika dia ID wa muntu nkayende wa mbulamatadi diakamue." 3. LinkedIn Trust & Safety neandamune ku e-mail webe ne tshimanyinu tshia pa buatshi tshia Persona ID wa musangu umua. Paudi ufila ID webe wa mbulamatadi ku diambuluisha dia link au, badi bakumbusha email wa muena tshinyangu ne bakupingajila adrese webe wa email wa ku ntuadijilu.

Tshitupa 2: Kupingaja dibeji dia kumpanyi wa LinkedIn uvuabu bangate ne kumbusha balombodi ba malu mabi

Kujingulula mushindu udi Page Admin Architecture wa LinkedIn wenza mudimu kudi ne mushinga wa bungi mu tshikondo tshia bualu kampanda: - Dibeji dia kumpanyi wa LinkedIn (linkedin.com/company/your-brand) kena ne tshiamu tshia kubuela natshi nkayatshi to. Pamutu pa nanku, bantu badi mu LinkedIn badi babapesha umue wa ku midimu ya bungi ya Admin: Super Admin, Content Admin, Curator, Analyst, anyi Sponsored Content Poster (ne Paid Media Admin mu Campaign Manager). - Anu Super Admin ke udi ne bukokeshi bua kuela/kumbusha ba Admin bakuabu, kushintulula malu adi atangila dibeji, anyi kupangisha dibeji, ne Super Admin yonso udi mua kumbusha Super Admin mukuabu yonso ne dikuma dimue (kakuena mudimu umuepele udi kauyi mua kushintuluka wa "Mufuki wa dibeji / Muena miji" mu mabeji a LinkedIn a pa tshibidilu to, anu mudiye mulombodi wa malu a bungenda).

Fuanyikija mishindu ibidi ya dinyanguka dia dibeji dia kumpanyi ne wenze mudimu wa dipingaja:

Tshilejilu tshia dikuata dia dibeji dia kumpanyi Malu a lukasa a dilongolola dia malu a tekiniki Mua kuepuka dipingana dia tshipungidi
Tshilejilu A: Mulombodi umua anyi mulombodi wa malu a dipana uvua mubuele mu LinkedIn, ne udi anu ne mukuabu mukezuke Super Admin 1. Enza bua Super Admin udi mushale mukezuke abuele mu LinkedIn diakamue.
2. Fungula dibeji dia kumpanyi -> Malongolola (tshimfuanyi tshia tshiamu) -> Kulombola balombodi.
3. Muinshi mua Balombodi ba mabeji, keba profil wa muena mudimu udibu bashipe ne tangila liste mujima bua profile yonso udi muena tshinyangu au mubueje mu mêba 24 adi mapite aa.
4. Fina pa Trash Can (Remove) tshimanyishilu ku luseke lua Admin yonso munyanguke anyi kayi mumanyike.
5. Shintulula ku Paid media admins tab ne umbusha bintu bionso bia dishima bia Campaign Manager.		 Kueyemenyi kudi Super Admin umuepele to. Misangu yonso ikala ne 3 Super Admins mishilangane** mu bibambalu bishilangane (tshionso tshilama ne tshiamu tshia mudimu / 2SV)
Tshilejilu B: Dikanga dia dibeji dia kumpanyi dijima (Muena tshinyangu uvua munyange mulombodi munene ne mumbushe balombodi bakuabu bonso ba kumpanyi) 1. Kukanga karte konso ka mfranga ka kumpanyi / konte ya ku banke idi milamakaja kudi LinkedIn Campaign Manager ne Recruiter.
2. Ikala ne muena mudimu wa kumpanyi muanyishibue (udi mubuela mu profil wa LinkedIn udi ne mujadika @yourcompanydomain.com e-mail wa mudimu mujadikibua pa profil wabu) kangula LinkedIn Page Admin Dispute / Recovery Support Ticket (linkedin.com/help/linkedin/ask/cp-admin).
.		 Funda dibeji diebe dia kumpanyi ne konte yebe ya dimanyisha munda mua LinkedIn Business Manager (business.linkedin.com) nunku bulongolodi buenu budi ne bintu ku tshipiminu tshia muena nzubu pamutu pa kuikala ne malu a muntu pa nkayende

Tshitupa 3: Kuimanyika dishima dia mudimu, mikanda ya dishima ya bena mudimu, ne "bena mudimu ba dishima"

Nansha padibu kabayi banji kubuela mu dibeji dia kumpanyi webe, bena tshinyangu ba ku Enternete badi benza mudimu ne bulongolodi bua mudimu budibu basungule mu LinkedIn mu mishindu ibidi idi inyanga tshimanyinu tshiebe ne inyanga bantu badi bakeba mudimu:

1. Kusukula kunyima kua bualu bubi LinkedIn Recruiter nkuasa anyi mudimu wa dishima

Shi muntu udi ukubunda mupeta mushindu wa kubuela mu dibeji dia kumpanyi wenu anyi mu LinkedIn Recruiter wa muena mudimu (Recruiter Corporate / Recruiter Lite) bukenji: 1. Fanga ne umbusha midimu yonso ya dishima diakamue: - Ndaku ku linkedin.com/my-items/posted-jobs/ (nansha kangula Muena mudimu -> Midimu / Dibeji dia kumpanyi -> Midimu), kangula liste yonso wa midimu idi kayiyi mianyishibue, tuaku pa Lombola mudimu -> Kukanga mudimu, ne yukila ne muntu yonso udi mulomba mudimu au ne didimuija dia lukasa dia bukubi: > "DIMANYISHA DIA BUA KUDIMUENA: Mukanda wa mudimu eu uvua mufunda kakuyi dianyisha pavua muntu mukuabu mubuele mu konte wende. [Dîna dia kumpanyi] kakuakulomba nansha kakese bua kuangata programe anyi mikanda ya kode kumpala kua dibikila dia HR dia mbulamatadi to, kakuenza nkonko ya mesaje pa Telegram/WhatsApp nansha kakese, ne kakulomba makuta anyi bintu bia ku banke to. mikanda miangatshila mu liste ewu." 2. Kumbusha muaba uvuabu bashipe munda mua LinkedIn Recruiter Admin Center: - Muena mudimu udiku Mulombodi wa bukenji udi ne tshia kunzulula diakamue LinkedIn Recruiter -> Admin Settings -> Manage Users, kupeta muaba wa muena mudimu udibu bashipe, ne kututa pa Park License / Revoke Access bua muntu udi uluisha apatuke diakamue mu console wa muena mudimu nansha yeye muikale ne LinkedIn tshimfuanyi. 3. Patula mudimu wa muena mudimu ne mukanda wa dikonkonona dia malu mu poste: - Tangila bantu badi muena tshinyangu mutumine mesaje ku diambuluisha dia InMail anyi batume kudi .csv mu tshikondo tshia dishipa dia mikenji bua muena mudimu weba wa bukubi bua malu ebe (DPO) udi mua kukonkonona dimanyisha dia PII yonso (tangila ku mpukapuka kutuma mukanda wa difutu anyi mukanda wa HIPAA).

2. Mushindu kayi wa kumbusha "Bena mudimu ba dishima / Bafidi ba mudimu ba dishima" badi bafunda kumpanyi webe mu profil wabu kabayi banyishibue

Bualu LinkedIn udi witaba konte yonso mupiamupia bua kufunda "Technical Recruiter at [Your Company Name]" mu tshitupa tshiabu tshia dimanya kakuyi dijadika dia domaine ku tshibangidilu, bipese bia dishima bidi bienza makumi a bantu ba dishima badi basuikila ku tshimanyinu tshia dibeji dia kumpanyi bua kushima bantu badi bakeba mudimu ku Telegram ne ku WhatsApp.

Mona mudi dibeji dia kumpanyi Super Admin mua kumbusha tshimanyishilu tshia kumpanyi ne dilomba dia mudimu ku profil ya dishima: 1. Wenza mudimu ne tshiamu tshia mudimu tshia diumusha dia dibeji dia kumpanyi "Bantu / Bena mudimu badisangisha": - Kangula dibeji dia kumpanyi webe bu Super Admin -> tuaku pa Bantu mu tshimuenekelu tshia bantu bonso -> tangila liste wa bantu badi bamba mudibu benza mudimu mu bulongolodi buebe. - Fina pa Matoyi asatu (...) pa profil wa dishima -> tuaku pa Report / Block -> Report this profile -> Badi badifuanyikija bu muntu mukuabu anyi baleja mpala wa kumpanyi udibu kabayi benzela mudimu (Fake profile / Not an employee). 2. Tuma tshimanyishilu tshia mudimu / dimanyisha dia tshimanyishilu (Fastest Bulk Removal): - Shi bena tshinyangu benze konte ya bungi ya dishima ya diangatshila bantu mudimu ku diambuluisha dia dina ne tshimanyishilu tshia kumpanyi wenu bua kuenza mudimu wa dishima, utume Dimanyisha dia dishipa dia tshimanyinu tshia mudimu dia LinkedIn / Dishima ku linkedin.com/help/linkedin/answer/a1336378 ku adrese webe wa e-mail wa mikenji anyi wa kumpanyi udi uleja URL yonso ya malu adi kaayi makane. Tshisumbu tshia LinkedIn's Legal Takedown Team tshitamba kujimija bantu badibu basungule bua kuenza mudimu mu mêba 12 too ne ku 24.

Shi muena mudimu uvuabu benzele bibi uvua ne dijadika dia malu abidi (2SV) wakatuadija mudimu ne kabavua banji kufunda mot de passe wabu mu e-mail wa dishima to, mmunyi muvua muena tshinyangu au mubuele mu konte wabu wa LinkedIn?

Dîba dionso diudi ubuela www.linkedin.com pa Chrome, Edge, nansha Brave, ba-server ba LinkedIn badi bateka tshintu tshia HTTP tshidibu babikila ne: li_at (udi ne mushinga too ne matuku 365). Muntu yense udi ne tshintu atshi li_at mulongo wa mifundu udi mua kuwuteka mu tshitupa tshia DevTools Storage tshia tshikebelu tshiabu ne diakamue kubuela mu LinkedIn bu wewe, kupitshila ku mot de passe webe ne 2SV Authenticator App.

Kudi mishindu isatu minene ya li_at biscuit udi wiba: 1. Rogue Chrome Extensions ("LinkedIn Automation / AI Scrapers"): Nkama ya bintu bia Chrome bia bantu bakuabu bidibu bapanyisha kudi bafidi ba mudimu ne bapanyi ("Find Anyone's Email on LinkedIn", "Auto-Connect Bot", "AI Comment Generer") li_at biscuit wa linkedin.com ne kumutuma ku tshilaminu tshia pambelu bua bot wabu wa mu matutu ikale mua kukosa LinkedIn muinshi mua bumuntu buebe. Padibu bashipa muena mudimu au (anyi usumbisha tshilaminu tshia malu ende a bena mudimu), binunu ne binunu bia konte ya bantu badi bangata bantu badi babuela mu nzubu mu butuku bumue. 2. AiTM Reverse-Proxy Phishing (Evilginx Madimuija a dishima a LinkedIn): Mukanda wa ku Enternete udi wamba ne: "Udi ne InMail mupiamupia umue wa kudi mulombodi wa mudimu" anyi "Dibeji diebe dia LinkedIn ndikandika" udi ufila ku domaine udi umueneka bu udi ufila code webe mulelela wa 2SV ne ukuata li_at. 3. Infostealer Malware (Lumma / Vidar) Ku CV ya dishima: Muntu udi uluisha udi utuma muena mudimu "Resume_John_Doe.zip" tshibutshilu tshidi ne .lnk anyi .exe tshikandakanda tshisokoka ne tshimfuanyi tshia PDF.

Mukanda wa 5-Point Corporate LinkedIn Hardening Checklist

Enza malu atanu aa kudi mulombodi yonso, muena mudimu ne mulombodi wa dibeji dia kumpanyi lelu:

  • 1. Kandika bintu bionso bia "LinkedIn Scraper / Automation" bia Chrome ne kunyunguluka li_at Pa kufina Sign Out:
    • Kangula chrome://extensions (anyi edge://extensions) ne umbusha tshiamu tshionso tshia LinkedIn tshia muntu muisatu, tshikebelu tshia e-mail, anyi tshiamu tshia kukosa natshi bintu. Pashishe, tuaku pa Meme -> Patuka munda mua LinkedIn ne ubuele kabidi (kutua pa Patuka kudi kunyanga patoke li_at cookie pa ma serveur a LinkedIn, kadi kukanga anu tab wa tshikebelu kudi kushiya cookie muiba udi ne mushinga).
  • 2. Dilomba tshimanyishilu tshia mudimu tshijadika (Confirmed Work Email) + CLEAR / Persona Government ID Badge on All Executive & Recruiter Profiles:
    • Enza bua muena mudimu yonso ne mulombodi wa mudimu ajikije mudimu wa tshianana wa LinkedIn Dijadika dia e-mail wa mudimu NE Dijadika dia bumuntu bua muntu / CLEAR bua profil wabu aleje tshimanyinu tshia ngabu mujadika. Pashishe, amba patoke pa tshiapu tshieba Careers dibeji dia ku Enternete: "Bantu bonso badi bangata bantu mu mudimu badi baleja tshimanyinu tshia muaba wa mudimu mujadika pa LinkedIn ne nebakutumine anu e-mail kudi @ourcompany.com."
  • 3. Enza mudimu wa LinkedIn Single Sign-On (SSO) bua Enterprise Recruiter, Sales Navigator, ne Campaign Manager Seats:
    • Mu LinkedIn Admin Center -> Settings -> Global Settings -> Single Sign-On (SSO), ela miaba yonso ya LinkedIn idibu bafuta ku Okta / Microsoft Entra ID / Google Workspace SAML SSO mienzeja ne FIDO2 Passkeys / YubiKeys idi kayiyi inyanguka.
  • 4. Dibeji dia kumpanyi wa dikonkonona dia makuta Super Admins Ngondo yonso (Mukenji wa "Minimum 3, Maximum 4"):
    • Lama 3 too ne ku 4 ba Super Admins ba kueyemena pa dibeji dia tshiapu tshieba (bua muntu umue udi umbuka anyi udibu basuike kayi muanji kunyanga dibeji to), ne diakamue upuekeshe bafundi ba mikanda ba pa tshibidilu ba pa réseaux sociaux ne bibambalu bia pambelu bia dimanyisha dia bintu ku Content Admin anyi Sponsored Content Poster mudimu (udi ufila bukenji bua kupatula mikanda ne kuenza mamanyisha kakuyi bukenji bua kuipata balombodi banene).
  • 5. Longesha bena mudimu bua kubenga kunzulula nansha kakese .zip, .rar, .iso, .lnk, anyi "Resume / Portfolio" milama kudi mot de passe:
    • Bantu badi bangata bantu ku mudimu badi bantu ba kumpala badibu basue kuenza nabu mudimu mu kumpanyi bualu mudimu wabu ngua kunzulula mikanda ya mudimu ya bantu badibu kabayi bamanye dituku dijima. Longolola tshiibi tshiebe tshia e-mail tshia mudimu bua kukanga .zip / .rar / .lnk / .exe / .scr bintu bidibu balamakaja ne ulombe bafidi ba mudimu bua kumona anu .pdf ne .docx udi utuadija kabidi munda mua tshiamu tshia kutangila natshi malu tshia mu matutu.

Tip

Teka tshipiminu tshikole tshia makuta a dituku dionso anyi tshipiminu tshia difuta dia makuta kumpala kua dîba mu LinkedIn Campaign Manager. Nansha mudi kumpanyi webe kayi wenza mudimu ne LinkedIn Ads, enza bua dibeji dia kumpanyi webe dikale ne Campaign Manager (business.linkedin.com) konte kena ne karte ka mfranga ka kumpanyi kadiyi ne mikalu kadi kalama mu dosie to. Umbusha karte ka mfranga kadiyi kaenza mudimu mu nzubu wa difuta dia makuta wa Campaign Manager bua dikuata dia konte kadiyi mua kufikisha ku $25,000 ku ndekelu kua lumingu ku ndekelu kua lumingu.

Nomba ya tshimpitshimpi ya mu tshijengu ne mikenji ya bibambalu

Padibu bangata konte wa LinkedIn anyi dibeji dia kumpanyi difila dishima dia mudimu didi ditangila bantu, difuta dia makuta dia B2B didi kadiyi dianyishibue, anyi dimanyisha dia PII dia muntu udi musue kuenza mudimu, manyisha kudi bibambalu bia ditunga bidi bitangila malu a tshinyangu a ku Enternete ne a dishima dia mudimu:

États-Unis ne Canada

  • Dituma dia bampulushi mu tshimpitshimpi (Ditshina dia lukasa dia mubidi / Dikuma): Bikila 911.
  • Dimanyisha dia malu a tshinyangu a ku Enternete ne a mudimu:
    • États-Unis: Funda luapolo kudi FBI Internet Crime Complaint Center (ic3.gov) (mu bulelela udi utela dinyanguka dia e-mail/konte ya mudimu anyi dishima dia mudimu wa dishima) ne Federal Trade Commission (ReportFraud.ftc.gov). Shi mbulamatadi udi ufila diambuluisha Contagious Interview logiciel mubi uvua mufidibue kudi ba-enjenyere ku diambuluisha dia konte webe uvuabu bakuate, manyisha CISA (cisa.gov/report).
    • Canada: Luapolo kudi Centre wa diluisha dishima wa mu Canada (CAFC, antifraudcentre-centreantifraude.ca anyi 1-888-495-8501) ne Tshibambalu tshia bukubi tshia ku Enternete tshia mu Canada (cyber.gc.ca).

Royaume-Uni

  • Dituma dia bampulushi mu tshimpitshimpi: Bikila ku 999.
  • Buenzavi bua ku Enternete, dishima dia mudimu ne dimanyisha dia dishipa dia GDPR:
    • Umanyishe dishima dia diangatangana dia konte wa kumpanyi ne dishima dia diangatangana dia mudimu kudi Action Fraud (actionfraud.police.uk anyi 0300 123 2040) ne yukila ne Centre national cyber sécurité (NCSC) buludiki.
    • JobsAware (jobsaware.co.uk): Tshibuelelu tshia mbulamatadi tshia UK tshidi katshiyi tshikeba makuta (tshienza mudimu ne bampulushi ba mu tshimenga tshinene ne SAFERjobs) bua kumanyisha malu a dishima a mudimu a LinkedIn ne malu a dishima a bantu badi bangata bantu ku mudimu.
    • UK ICO (ico.org.uk): Shi nkuasa wa LinkedIn Recruiter munyanguke udi uleja CV, nimero ya telefone, ne mikanda ya bantu badi bakeba mudimu mu UK, ela meji ni bidi bikengela kufila luapolo lua mêba 72 lua UK GDPR Article 33** kudi Biro bia Information Commissioner.

Buobumue bua matunga a ku Mputu

  • Pan-European Emergency Number: Bikila ku 112.
  • GDPR & EU Digital Services Act (DSA) Dikola:
    • Shi CV ya muntu udi ukeba mudimu anyi malu a muntu nkayende adi munda mua LinkedIn Recruiter avua menzeke kudi muntu udi ukubunda, manyisha bena mudimu ba mu ditunga diebe badi batangila malu a bukubi bua malu a bantu (DPC Ireland udi LinkedIn Ireland Unlimited Company's lead EU regulator, pamue ne CNIL / BfDI / AEPD) mu mêba 7 ** 2 D mu kanungu ka GPR333.
    • Muinshi mua **EU Digital Services Act (DSA).

Australie ne Nouvelle-Zélande

  • Dituma dia lukasa: Bikila 000 mu Australie anyi 111 mu Nouvelle-Zélande.
  • Dimanyisha dia malu a tshinyangu ne a dishima:
    • Australie: Kumanyisha dikuata dia konte ya kumpanyi ku diambuluisha dia cyber.gov.au (ReportCyber / ACSC) ne kumanyisha ACCC malu a dishima a diangatangana dia bantu ku mudimu Scamwatch (scamwatch.gov.au). Shi mikanda ya diendesha mashinyi ya bena ditunga dia Australie anyi ya passport milomba kudi muena mudimu wa dishima udi udileja bu tshimanyishilu tshieba, yukila ne IDCARE (idcare.org anyi 1800 595 160).
    • New Zealand: Luapolo kudi CERT NZ (cert.govt.nz) ne Netsafe (netsafe.org.nz anyi 0508 NETSAFE).

India ne Asia-Pacifique

  • India: Bikila 1930 (National Cyber Crime Helpline) anyi funda dilomba ku cybercrime.gov.in muinshi mua tshibambalu tshia malu a munda mua ditunga (I4C) bua dishima dia mudimu ne dikuata dia bintu bia ku Enternete bia kumpanyi, ne kumanyisha malu a bukubi a kumpanyi kudi CERT-In (cert-in.org.in) mu meba 6.
  • Singapore & Japan: Mu Singapour, udi mua kubikila 999 (Emergency) anyi Anti-Scam Helpline (1799) ne kufila luapolo lua ku Enternete lua bampulushi ba mu Singapour (police.gov.sg). Mu Japon, yukila ne Prefecture Police Cybercrime Consultation Desk (#9110).

Nkonko itubu bela misangu ya bungi

Bidiku bimpa bua kubala mukanda wanyi wa dienda anyi mukanda wa diendesha mashinyi mu tshibuelelu tshia "Persona" pa LinkedIn bua kupeta kabidi konte wanyi uvuabu banyange anyi?

Eyowa, anu wewe mutuadije diondopangana buludiludi ku mbulamatadi `linkedin.com` tshitupa (anyi ku diambuluisha dia mbulamatadi `@linkedin.com` link wa tike wa diambuluisha). LinkedIn udi wenza mudimu ne **Persona Identities, Inc.** (ne **CLEAR** mu Amerike wa ku Nord) bu muena mudimu wende wa mbulamatadi, wa SOC 2 Type II ne ISO 27001 udi ujadika bumuntu. Paudi ubala ID webe wa mbulamatadi ne wangata selfie ku diambuluisha dia Persona mu tshikondo tshia dipingaja dia konte wa LinkedIn, Persona udi ujadika mu mushindu wa tshikoso ne: dîna diebe ne mpala webe bidi bipetangana ne muena konte ne udi uleja LinkedIn Trust & Safety bua kumbusha adrese wa e-mail wa muena tshinyangu ne tshimanyinu tshia 2SV. Kufundi nansha kakese JPEG wa passport webe bu mukanda wa e-mail udi kauyi mufunda ku adrese wa e-mail wa mpukapuka to; Uteke anu munda mua tshiamu tshia Persona tshisokoka.

Mmunyi mudi muntu mua kudibueja bu "Super Admin" ku dibeji dietu dia kumpanyi wa LinkedIn kayi mupete didimuija kudi CEO wetu?

Bualu bua LinkedIn Company Pages idi yenza mudimu ne bukokeshi bua Super Admin, **muena mudimu yonso udi ne mudimu wa Super Admin** pa dibeji dieba dia kumpanyi udi mua kuela Super Admin mupiamupia ne kumbusha Super Admin bakuabu bonso badiku mu masekonde 10. Mu tshinyangu tshionso tshia dibeji dia kumpanyi, muena tshinyangu kavua mubuele mu "ma serveur a LinkedIn" to; pamutu pa nanku, bakanyanga konte wa muntu nkayende wa LinkedIn wa mulombodi wa malu a bungenda udiku mpindieu anyi wa kale, muena mudimu wa tshibambalu tshia pambelu, anyi mubanjiji uvua mupue muoyo bukenji bua Super Admin pa dibeji dieba dia kumpanyi, benze mudimu ne tshisangilu tshia muntu au bua kusakidila konte wa burner bu Super Admin mupiamupia, ne pashishe kuipata tshisumbu tshienu pa dibeji.

Ndi ne tshia kuenza anu profil mupiamupia wa LinkedIn ne e-mail wanyi wa mudimu pandi muindile diambuluisha dia LinkedIn bua kupingaja profil wanyi uvuabu bashipe anyi?

Tòo, **kuena ne bua kuenza konte mupiamupia wa LinkedIn ne adrese wa e-mail wa muomumue** uvuabu banji kulamakaja ku profil webe uvuabu bashipe padibu benda bapingaja bintu to. Mu tshilaminu tshia bintu tshia LinkedIn, adrese wa e-mail udi mua kuikala anu mulamakaja ku UID umue wa muena mudimu musangu umua. Shi muena tshinyangu mumbushe e-mail webe mu profil webe mulelela wa bidimu 10 ne wewe wenza mudimu ne e-mail au diakamue bua kufunda konte mupiamupia udi kayi ne tshintu, bena mudimu ba LinkedIn badi mua kupingaja profil webe wa ku ntuadijilu ku adrese wa e-mail au too ne paudi muanji kukanga ne kumbusha konte wa tshianana udi mufuanangana, ne udi ukumbaja matuku a bungi a dipingaja dia konte webe.

Bua tshinyi bena tshinyangu ba bungi badi badifunda bu "HR Recruiter" mu tshiapu tshietu pa LinkedIn, ne tudiku mua kupangisha bantu batudi katuyi bamanye bua kuamba mudibu benza mudimu muaba eu anyi?

Bilondeshela mushindu wa kale, LinkedIn udi witaba muntu yonso bua kufunda dina dia kumpanyi mu tshitupa tshia "Dimanya" dia profil wende kayi dijinga ne dianyisha dia kumpala dia kudi mulombodi wa dibeji dia kumpanyi. Bisumbu bia bena tshinyangu bia mudimu bidi bienza mudimu bibi ne bualu ebu pa kupatula mabeji adi aleja kumpanyi wenu bu muena mudimu wabu wa mpindieu bua tshimanyinu tshia kumpanyi wenu tshimueneke ku luseke lua dina diabu padibu batuma mesaje kudi bantu badibu bakengesha. Nansha muudi kuyi mua kukandika tshitupa tshia Experience pa buloba bujima, balombodi ba dibeji dia kumpanyi badi ne tshia kukontonona pa tshibidilu tshitupa tshia **Bantu** pa dibeji dia kumpanyi webe, kuleja bantu badi kabayi banyishibue ku diambuluisha dia **Report -> Not an employee**, ne kulomba bena mudimu bonso ba bushuwa bua kuenza mudimu ne **Verified Work Email Badge** wa LinkedIn (udi uleja ne: badi mua kuikala ne bukokeshi `@yourcompany.com` inbox).

Shi muena tshinyangu munyeme $10,000 ya mamanyisha a tshinyangu mu LinkedIn Campaign Manager wetu wenza mudimu ne karte ketu ka mfranga ka kumpanyi, LinkedIn neapingaje makuta anyi?

Eyowa, shi udi ufila luapolo lua dikuata dia konte udi kayi muanyishibue diakamue ku diambuluisha dia diambuluisha dia LinkedIn ne dia mufidi wa karte kebe ka mfranga, tshisumbu tshia LinkedIn tshia dishima ne difuta dia bitadi tshidi tshijimija anyi tshipingaja makuta adibu benze mu tshikondo tshia dikuata dia bintu. Kubangishi anu dipingaja dia makuta ku karte ka mfranga kumpala kua kunzulula **LinkedIn Compromised Account & Unauthorized Ad Spend Ticket** to, bualu dipingaja dia makuta didi kadiyi dimanyishibua didi mua kufikisha ku dipangisha dia kashidi dia konte webe wa dimanyisha dia kumpanyi; Pamutu pa nanku, ikala ukanga karte ku bilumbu *bipiabipia* paudi ufunda tshilumbu tshia difuta dia makuta tshia ATO ne LinkedIn.

Miaba ne buludiki bua mbulamatadi

  • LinkedIn Trust & Safety / Help Center: Kumanyisha ne kupingaja konte wa LinkedIn munyanguke (linkedin.com/help/linkedin/ask/TS-RHA), Ujadike bumuntu buebe ne Persona bua kupeta mushindu wa kubuelamu, Kulombola balombodi ba mabeji a LinkedIn (Super Admin Bukubi bua mudimu), ne Kumanyisha malu a dishima ne malu a dishima a mudimu.
  • Biro bia malu a makebulula bia mbulamatadi (FBI IC3) & Cybersecurity and Infrastructure Security Agency (CISA, États-Unis): Mamanyisha a mudimu wa mbulamatadi adi atangila dishima dia diangatangana dia mudimu, dikonkonona dia meyi a bafidi ba ngenyi (Contagious Interview / DPRK IT Worker Schemes), ne Corporate Social Media Account Takeover.
  • Google Mandiant & Threat Intelligence: Dikonkonona dia Session-Cookie Theft (li_at Dibutuka dia cookies ku diambuluisha dia biamu bia mudimu bibi ne infostealers) Ditangila kudi bafidi ba mudimu ne balombodi ba midimu.
  • Kasumbu ka malu a bungenda mushinga ka mbulamatadi (FTC, États-Unis) & UK JobsAware / Action Fraud: Bulombodi bua mfumu wa mudimu ne muena mudimu udi ukeba mudimu pa bidi bitangila dishima dia mudimu ne dishima dia bintu bia mudimu bia kumpala.

Malu adi apetangana