Zowukira Zotsimikizika: Ma Miles Opanda Ndege, Malo Odyera, ndi Mabanki Osungitsa Makhadi Amphatso¶

Kudzuka ku imelo zochenjeza kuti munthu wina wangobwereka ulendo umodzi waulendo wapadziko lonse lapansi pogwiritsa ntchito ma 180,000 aulendo wanu wandege pafupipafupi, kusamutsa malo 250,000 a kukhulupirika ku hotelo ku akaunti ya alendo, kapena kukhuthula Starbucks, Target, Walmart, Sephora, kapena khadi yamphatso ya Amazon pomwe chikwama chanu chapangongole chimasungidwa bwino. Credential Stuffing Attack **. Mosiyana ndi kuukira kwa spear-phishing kapena a kuphwanya akaunti yakubanki, kuyika mbiri kumagwiritsa ntchito pulogalamu ya botnet (OpenBullet, SilverBullet, Sentry MBA, zophatikizidwa ndi ma projekiti okhalamo) kuyesa mamiliyoni mamiliyoni ophatikizira maimelo ndi mawu achinsinsi ("mndandanda wa combo" zakale kuphwanya kwa data ndi kutulutsa mawu achinsinsi) motsutsana ndi mazana a ndege, hotelo, malo odyera, masewera, ndi malonda ogulitsa nthawi imodzi. Zigawenga zapaintaneti zimayang'ana makamaka maakaunti omwe amawuluka pafupipafupi (Delta SkyMiles, American Airlines AAdvantage, United MileagePlus, British Airways Executive Club, Air Canada Aeroplan, Qantas Frequent Flyer), malipiro a hotelo (Marriott Bonvoy, Hilton Honors, World of Hyatt, IHG One Rewards), ndi khofi/chakudya chofulumira/mapulogalamu ogulitsa (Starbucks, Chick-fil-A, Dunkin', Target Circle, Walmart, Ulta, Sephora) chifukwa mapulogalamuwa amakhala ndi madola masauzande ambiri mu "quasi-currency" yosalamuliridwa yomwe imatha kutumizidwa kumakhadi amphatso za digito, zamagetsi za Apple, kapena matikiti andege a tsiku lomwelo mkati mwa masekondi 90, nthawi zambiri ndi **zero mandatory Multi-Factor Authentication (MFA) yothandizidwa ndi kusakhazikika **. Mukawonanso mazana ambiri akulemba makalata osafunikira akusefukira mubokosi lanu lamakalata nthawi yomweyo, wowukirayo akuthamangitsa Kuwombera Mabomba pa Imelo / Kusefukira Kolembetsa kuti akwirire imelo yovomerezeka yowombola ndege kapena imelo yolandila; onani wotsogolera wathu pa imelo akaunti anadula, malamulo kutumiza, ndi kuchira nthawi yomweyo. Ngati mukukumana ndi chiwembu kapena kuopsezedwa, imbani foni nambala yanu yazadzidzidzi (911 ku United States ndi Canada, 112 ku European Union, 999 ku United Kingdom) kapena fufuzani chikwatu chathu chapadziko lonse lapansi manambala angozi.

Chitani izi tsopano¶

1. Musanafufute maimelo a spam 500 ("Email Bomb"), fufuzani mu Ma Inbox, Spam, ndi Zinyalala zikwatu kuti mupeze mawuwa. "Redemption", "Points", "Miles", "Ticket", "eGift", "Order", "Transfer", kapena "Added a payment": Nthawi zonse bot yodzaza ndi mbiri ikakhetsa bwino ndege, hotelo, kapena akaunti yogulitsa, wowukirayo nthawi yomweyo amayambitsa script yomwe imasainira imelo yanu kuti ikhale mndandanda wamakalata 500 mpaka 2,000 m'mphindi zitatu kotero kuti muphonye lisiti yeniyeni yosonyeza ndi akaunti iti yokhulupirika yomwe yangochotsedwa kumene. Kupeza chidziwitso chimodzi mkati mwa maola 2 oyamba kumakupatsani mwayi woletsa tikiti yaulendo wa wobera kapena kuyimitsa khadi yamphatso ya digito wokwerayo asanakwere ndege kapena kuwombola barcode.
2. Lowani muakaunti yomwe yasokonezedwa yandege, hotelo, kapena kukhulupirika pa msakatuli waukhondo, sinthani mawu achinsinsi kukhala mawu achinsinsi achinsinsi amtundu wa 16+, ndikuchotsa makhadi onse osungidwa ndi ma tokeni olumikizidwa ndi PayPal/Venmo/Apple Pay:
3. Kuphatikiza pa kuwononga ndalama zomwe mwapeza kapena khadi lanu lamphatso, zolembedwa zosunga mbiri fufuzani ngati "Auto-Reload" (Starbucks / Dunkin' / Toll Pass) kapena dinani kamodzi kosunga makhadi a kingongole amayatsidwa kuti athe kupopa $ 100 mpaka $ 500 kuchokera ku Visa/Mastercard yanu yolumikizidwa kulowa pakhadi yamphatso ya pulogalamuyi ndikutsitsanso.
4. **Yang'anirani tabu ya "Maulendo Akubwera / Zosungitsa / Maoda / Zochita" mkati mwaakaunti yokhulupirika, ndipo MUSAMALE mayendedwe achinyengo kapena kusungitsa hotelo pa intaneti nokha ngati pulogalamuyo ikulipiritsa ndalama zobweza kapena kutumiza mfundozo ku akaunti yomwe wobera akuwongolerabe kudzera pagawo lamafoni **:
5. M'malo mwake, lembani dzina 6-chairline Airline Passenger Name Record (PNR / Khodi Yotsimikizira), ** Nambala ya Tikiti ya e- manambala 13** (mwachitsanzo, 001-... kwa Amereka, 006-... kwa Delta, 016-... kwa United, 125-... ya British Airways), **wokwerayo dzina la wobera adasungitsa tikiti pansi pa **, kapena Nambala Yotsimikizira Hotelo / Nambala Yoyitanitsa Khadi la Mphatso, ndikuyimbira pulogalamu ya kukhulupirika Desk Loteteza Ndalama Zachinyengo nthawi yomweyo.
6. ** Onani ngati wowukirayo asintha Imelo Yobwezeretsanso Yachiwiri, Nambala Yafoni, kapena kuwonjezera membala wa "Banja / Pakhomo / Wosankhidwa Wowombola" mkati mwa mbiri yanu yokhulupirika **:
7. Mapulogalamu ngati British Airways Executive Club, JetBlue TrueBlue, Hilton Honors, Marriott Bonvoy, Air Canada Aeroplan,ndi Qantas lolani maakaunti kuti alumikizitse Akaunti Yapanyumba / Wophatikiza Ma Points kapena Transfer Beneficiary. Zigawenga zimalumikiza akaunti yawo ya nyuru ku dziwe lanu, kukhetsa mfundo zanu mu dziwe lanu, ndikukhalabe olumikizana ngakhale mutasintha mawu anu achinsinsi pokhapokha mutafufuza ndikuthetsa Gulu la Pabanja.
8. **Imbani foni ku banki yanu kapena wopereka kirediti kadi nthawi yomweyo ngati "Auto-Reload" kapena khadi yosungidwa idalipiritsidwa **: Liwitsani dipatimenti yazachinyengo kuti akaunti yanu ya pulogalamu yamalonda idalandidwa kudzera pakuyika mbiri (Unauthorized Card-Not-Present Transaction), pemphani kuti mulowe m'malo mwa nambala ya khadi, ndipo muwafunse kuti achotsere Visa/Mastercard Account Updater ya wamalondayo (VAU/ABU) chizindikiro kuti nambala yanu yatsopano ya khadi yolowa m'malo ingokankhidwiranso ku pulogalamu yogulitsira yomwe yawonongeka.
9. Pezani akaunti ina iliyonse pomwe mudagwiritsapo mawu achinsinsi omwewo (kapena kusinthana kofananako Summer2024 -> Summer2025) ndikuwatembenuza nthawi yomweyo pogwiritsa ntchito mawu achinsinsi: Imelo yanu ndi mawu achinsinsi zikafika pamndandanda wokhazikika wa botnet combo, ma bots odzipangira okha amayesa mawu achinsinsi omwewo motsutsana ndi mawebusayiti opitilira 300 (ndege, mahotela, malo opangira matikiti ngati Ticketmaster/StubHub, mapulogalamu operekera chakudya monga DoorDash/Uber exchanges4 mpaka 2 Eats, 7 maola.

Mtengo wachigamulo: kuyesa ndi kubweza kukhulupirika-kuyika kukhulupirika kapena kukhetsa kwamalonda¶

Gwiritsani ntchito izi kuti muyimitse kukhetsa kwa malo kapena kuba kosungidwa ndikubweza ndalama zanu:

flowchart TD
    Alert["Chidziwitso: Kuwombola Mosaloleka Makilomita/Mapointi, Kukhetsa kwa Khadi Lamphatso Losungidwa, kapena Kusefukira kwadzidzidzi kwa Maimelo a Zankhani Zazakudya 500+"] --> SearchBomb["CHOCHITA 1: Sakani Imelo Inbox + Zinyalala + Spam za 'Kuwombola', 'Miles', 'Points', 'Ticket', 'Order', 'Reload', kapena 'Imelo Yosinthidwa'"]

    SearchBomb --> TargetType{"Ndi Akaunti Yanji Yomwe Idaphwanyidwa ndi Credential-Stuffing Bot?"}

    TargetType -->|"Ndege Zapaulendo Zapaulendo (Delta, AA, United, BA, Aeroplan, Qantas)"| AirlinePath["CHOCHITA 2A: Jambulani Rogue PNR + Dzina Lokwera -> Sinthani Mawu Achinsinsi + Yambitsani MFA -> Imbani Chinyengo cha Ndege / Desiki Loteteza Ndalama Kuti Muwononge Tikiti & Kuyimitsa Akaunti"]

    TargetType -->|"Kukhulupirika kwa Hotelo (Marriott Bonvoy, Hilton Honours, Hyatt, IHG)"| HotelPath["CHOCHITA 2B: Chongani 'Ntchito ya Mfundo' pa Kusamutsa Mfundo / Makhadi a Mphatso / Kusungitsa Zipinda -> Sungunulani 'Kuphatikiza Mafundo' -> Imbani Gulu Lachinyengo Lachinyengo Kuti Musinthe Kusintha"]

    TargetType -->|"Khofi / Chakudya Chachangu / Pulogalamu Yogulitsa (Starbucks, Target, Walmart, Sephora, Chick-fil-A)"| RetailPath["CHOCHITA 2C: Chotsani Makhadi Angongole Osungidwa + Zimitsani 'Reload-Auto-Reload' Nthawi yomweyo -> Imbani Thandizo la Makasitomala Kuti Muyimitse Barcode ya Khadi la Mphatso Yowonongeka & Kutulutsanso Balance"]

    AirlinePath --> AuditEmail["CHOCHITA CHACHITATU: Onani Akaunti Yanu Yaimelo Yaikulu (Gmail/Outlook/Yahoo) ya Malamulo Osautsa Kapena Zosefera Zochotsa Maimelo Okhulupirika"]
    HotelPath --> AuditEmail
    RetailPath --> AuditEmail

    AuditEmail --> RotateAll["CHOCHITA 4: Tembenuzani Kugawana Kwa Akaunti Yonse Yomwe Inagwiritsanso Ntchito Mawu Achinsinsi Pogwiritsa Ntchito Achinsinsi + Machinsinsi / TOTP 2FA"]

Momwe ma bots opangira mbiri amawonongera mailosi, ma point, ndi makhadi amphaso mkati mwa masekondi 90¶

Kumvetsetsa makina enieni a chiwopsezo chokhala ndi mbiri kumafotokoza chifukwa chake maakaunti omwe akhala osakhudzidwa kwa zaka zambiri amachotsedwa mwadzidzidzi nthawi ya 02:00 AM:

1. Chifukwa Chake Kukhulupirika & Maakaunti Ogulitsa Malo Ndi #1 Chandamale cha Combo-List Bots¶

Pamene tsamba lalikulu likuvutika ndi kuphwanya deta, mamiliyoni a email:password awiriwa amapangidwa kukhala mafayilo otchedwa ** Combo Lists . Zigawenga zimanyamula mindandanda ya combo iyi m'zida zodzitchinjiriza zothamanga kwambiri zopanda mutu (OpenBullet 2 / SilverBullet) pogwiritsa ntchito Sinthani mafayilo (.anom / .loli / .opk) zolembedwa mwamakonda za ma API oyendetsa ndege, mahotela, ndi ogulitsa malonda: 1. ** Gawo 1 (Kujambulitsa "Capture" Automated): Mayeso a bot 50,000 adatsitsidwa email:password awiriawiri pa mphindi imodzi kudzera pa ma proxies okhala mozungulira motsutsana ndi pulogalamu ya m'manja ya API yolowera Marriott, Hilton, American Airlines, United, Delta, Starbucks, Target, kapena Sephora. 2. Gawo 2 (Automated Balance Parsing): Nthawi iliyonse malowedwe akapambana (chifukwa wozunzidwayo adagwiritsanso ntchito mawu achinsinsi omwe adagwiritsa ntchito pabwalo lophwanyidwa kapena malo ogulitsira zaka 4 zapitazo), zolemba za bot zimangochotsa akauntiyo Point/Mile Balance, Makhadi Osungidwa Mphatso Yamtengo Wapatali, ndi ** Makhadi Osungidwa Osungidwa * *, ndi Makhadi Osungidwa * , ndi 4 (mwachitsanzo, "100,000+ Miles" kapena "$50+ Gift Card"). 3. Gawo 3 (Kupanga ndalama Mwamsanga / Cashout): - Makhadi Osinthira Makhadi Amphatso (Points-to-Gift-Card): Malo ambiri osonyeza kukhulupirika kuhotelo, ndege, ndi makhadi a ngongole amalola kuombola mapointi pa intaneti pompopompo makadi a Apple, Best Buy, Amazon, Target, Walmart, kapena Visa eGift amatumizidwa kudzera pa imelo, yomwe woukirayo amawalanda kapena kuwatumizira kwina. - Ma Point Transfer & Maiwe Akunyumba: Wowukirayo amasamutsa anu Hilton Honors, Marriott Bonvoy, kapena Airline amaloza ku akaunti yokhulupirika ya "bulu", kapena amalumikiza akaunti yanu ku Dziŵe la Panyumba ndi kuwawombola kuchokera kumalo olowera bulu. - Mphotho Yapadziko Lonse Yatsiku Limodzi / Tsiku Limodzi Lapadziko Lonse & Malo Apamwamba Akhalapo: Magulu achinyengo oyenda patelegalamu yapansi panthaka amatenga akaunti yanu yobedwa ndi ma 150,000 mailosi ndikusungitsa ulendo wapaulendo wapadziko lonse watsiku lomwelo kapena kukagona pahotelo yausiku 5 kwa wogula wina yemwe amalipira masenti 30 pa dola mu cryptocurrency. - M'sitolo Kukhetsa Barcode Yam'manja (Starbucks, Target Wallet, Walmart Pay, Sephora, Ulta): Pamapulogalamu ogulitsa ndi khofi, bot imachotsa nambala yanu ya barcode yamphatso/khodi ya QR (kapena kulowa mwachindunji mu pulogalamu yanu pa foni yowotchera pamalo owerengera nokha), imayatsa Reload-Auto-Reload kuchokera ku Visa/Mastercard yanu yosungidwa, ndikugula malonda ogulitsa kwambiri kapena makadi amphatso akuthupi m'sitolo.

2. Chifukwa Chimene Simunalandire Chidziwitso cha Imelo: "Bomba la Imelo" & Njira Yosefera ya Ma Inbox¶

Wowukira akataya mfundo zanu, nsanja yokhulupirika nthawi zonse imatumiza imelo yotsimikizira yokha ("Your Marriott Bonvoy Points Transfer is Complete" kapena "Your Delta eTicket Receipt"). Kukulepheretsani kuwona imeloyo munthawi yoyimbira ndege ndikuletsa tikiti isananyamuke, owukira amagwiritsa ntchito njira ziwiri: - Trick A (Ngati alibe mwayi wopeza akaunti yanu ya imelo): Amakhazikitsa Bomba Lolembetsa (Email Bomb), pogwiritsa ntchito zolembera zokha kutumiza imelo adilesi yanu ku 1,000+ mafomu olembetsa amakalata osavomerezeka padziko lonse lapansi mkati mwa masekondi 120. Foni yanu imangolira ndi 1,000 "Confirm your subscription to..." maimelo m'mphindi 10, zomwe zimapangitsa anthu ambiri kusankha maimelo onse 1,000 ndikugunda Delete, ndikuchotsa mwangozi ndege imodzi yeniyeni kapena chenjezo lachinyengo lakubanki lomwe linayikidwa pamzere 412. - Trick B (Ngati mudagwiritsanso ntchito mawu achinsinsi EXACT SAME pa Akaunti yanu ya Imelo): Wowukirayo amalowa mu Gmail, Outlook, kapena Yahoo Mail yanu, ndikupanga chosaoneka Lamulo / Zosefera (MainboxIf sender contains "delta.com", "marriott.com", "hilton.com", or "starbucks.com" -> Skip Inbox and Delete It / Move to Trash), ndikukhuthula foda yanu ya Zinyalala kuti musawone ngakhale chidziwitso chimodzi.

Gawo 1: Kubwezeretsa Ma Miles A Airline Ophwanyika & Malo Odyera (Wopereka-Bw-Provider Playbook)¶

Mosiyana ndi mawaya kapena ma cryptocurrency (omwe sangasinthe akakhazikika pa unyolo), **makilomita apandege, mahotela, ndi makadi amphatso amkati amakhala mkati mwankhokwe yapakati yoyang'aniridwa ndi 100 peresenti ndi kampani . Ngakhale wobera adasamutsira kale mfundo zanu kwa membala wina kapena kupereka tikiti yothawira ndege, gulu la ndege kapena hotelo ** Gulu Lofufuza Zachinyengo / Revenue Protection Investigation litha kutsata akaunti yomwe ikupita, kutaya tikiti kapena kusamutsa, kuletsa pasipoti/akaunti ya wolandirayo, ndikubwezeretsanso 100 peresenti ya mailosi omwe adabedwa, kuyeretsa akaunti yatsopano.

Tsatirani njira zobwezeretsanso pulogalamu yanu yokhulupirika pansipa:

Gawo 2: Kuyimitsa "Auto-Reload" & Kusunga Chizindikiro cha Malipiro Osungidwa¶

Anthu ambiri omwe amakhudzidwa ndi zinthu zomwe amapeza pamakampani ogulitsa khofi komanso khofi amataya ndalama zenizeni kuchokera kuakaunti yawo yochitira cheke ku banki kapena kirediti kadi kuwonjezera pa kukhulupirika kwawo komwe amasunga. Umu ndi momwe Auto-Reload & Tokenized Wallet Drain imagwirira ntchito komanso momwe mungatsekere:

1. Momwe Oukira Amagwiritsira Ntchito "Auto-Reload" ndi "Scan & Pay":
2. Mu mapulogalamu ngati Starbucks, Dunkin', Chick-fil-A, Panera, EZ-Pass / Toll Tag accounts, ndi makhadi oyendayenda, ogwiritsa ntchito nthawi zambiri amasunga kirediti kadi kapena akaunti ya PayPal kuti awonjezere ndalama zomwe asunga.
3. Ngakhale khadi lanu la Starbucks lidangokhala ndi $4.50 pomwe wobera adalowa, wowonongayo amagunda "Kwezaninso $100.00" kasanu motsatana pogwiritsa ntchito tokeni yanu yosungidwa ya Visa/Mastercard/PayPal (yomwe nthawi zambiri si imathandizira manambala atatu. CVV Mukatsitsanso khadi lamphatso la chipani choyamba), ndiye kuti nthawi yomweyo amasamutsa ndalamazo $500 pakhadi linalake kapena kuzigwiritsa ntchito polembetsa.
4. Chifukwa Chake Kungosintha Nambala Yanu Ya Kirediti Kadi Nthawi Zina Sikokwanira (Visa VAU / Mastercard ABU):
5. Mukayimba foni kubanki yanu kuti inene zachinyengo ndipo amakutumizirani kirediti kadi yatsopano yokhala ndi manambala 16, Visa (** Visa Account Updater). VAU**) ndi Mastercard (Automatic Billing Updater ABU) ingokankhirani nokha nambala yanu yatsopano yamakhadi okhala ndi manambala 16 kwa ogulitsa mobwerezabwereza ndi zikwama zam'manja pomwe khadi yanu yakale idasungidwa.
6. Ngati woukirayo akadali ndi chizindikiro cha gawo la OAuth mkati mwa pulogalamu yanu yogulitsa kapena yotumizira zakudya yomwe yawonongeka, khadi lanu lolowa m'malo latsopano litha kuwonekera mkati mwa pulogalamu yomwe yabedwa khadi lanu lisanalowe m'bokosi lanu la makalata.
7. Zomwe mungauze kubanki yanu: Akaunti yamalonda yomwe ili ndi khadi yosungidwa ikabedwa, uzani katswiri wazazazaza waku banki yanu: > "Chonde letsani khadi langa, chotsani zizindikiro zonse zolipirira zamalonda zomwe zalumikizidwa nazo [Merchant Name], ndipo ikani chipika chotuluka kwakanthawi pa Visa Account Updater / Mastercard Automatic Billing Updater kuti nambala yanga yatsopano ya khadi ingokankhidwira kwa wamalonda yemwe wasokoneza."

Gawo 3: Kuwunika Akaunti Yanu ya Imelo pa Kusokoneza Pamodzi & Malamulo a Ma Inbox¶

Chifukwa 65 peresenti ya anthu amagwiritsanso ntchito mawu achinsinsi omwewo m'maakaunti angapo, nthawi iliyonse boti yoyika mbiri ilowa muakaunti yanu yandege, hotelo, kapena malo ogulitsira, muyenera kuyang'ana nthawi yomweyo ngati bot yomweyo idalowanso mu Akaunti yanu ya Imelo (Gmail, Outlook / Hotmail, Yahoo, iCloud, AOL):

1. Chongani Malo Olowera Okhazikika pa Akaunti Yanu ya Imelo:
2. Gmail: Pitani pansi kumanja kwa bokosi lanu lolowera ndikudina ** Tsatanetsatane (Last account activity)**, kapena pitani myaccount.google.com/device-activity.
3. Microsoft Outlook / Hotmail / Live: Pitani account.live.com/Activity ndikuyang'ana kuyesera kulikonse kwaposachedwa (nthawi zambiri mumawona zolephera komanso zopambana za IMAP/POP3/Exchange zoyeserera kuchokera ku ma adilesi a IP akunja).
4. Yahoo Mail: Pitani ku Zaakaunti Zaakaunti> Zochita Zaposachedwa.
5. Yang'anani Mauthenga Anu Otumizira Imelo & Chotsani Zosefera Pakali pano:
6. Tsegulani makonda anu a imelo pa sakatuli pakompyuta (mapulogalamu amafoni am'manja amabisa malamulo osefera):
   • Gmail: Zokonda (Chizindikiro cha Gear) > Onani zokonda zonse > Zosefera ndi Maadiresi Oletsedwa NDI Kutumiza ndi POP/IMAP.
   • Outlook.com: Zikhazikiko (Chizindikiro cha Zida) > Imelo > Malamulo NDI **Maimelo > Kutumiza ** NDI Maimelo > Imelo yosafunikira > Otumiza ndi madambwe oletsedwa.
   • Yahoo Mail: Zikhazikiko> Zokonda Zina> Zosefera.
7. Yang'anani lamulo lililonse lomwe limati: If From/Subject contains [Airline / Hotel / Bank / PayPal / Amazon / "Security" / "Code"] -> Delete it / Mark as Read / Move to Trash / Archive. Chotsani zosefera zilizonse nthawi yomweyo.
8. Kuti mumve zambiri zakusintha kwa imelo, tsatirani kalozera wathu imelo akaunti anadula, malamulo kutumiza, ndi kuchira.

Gawo 4: Kuchotsa Kugwiritsa Ntchito Mawu Achinsinsi Pa Moyo Wanu Wonse Wapa Digito¶

Kuwukira kosunga zidziwitso kumangogwira ntchito imodzi yokha: mudagwiritsa ntchito mawu achinsinsi patsamba la kukhulupirika kapena malonda lomwe lidawoneka ngati laphwanya data (kapena longoganiziridwa mosavuta ndi lamulo losintha mtanthauzira mawu).

Kuti mudziteteze kwamuyaya ku akaunti yanu yonse, malizitsani mindandanda 5 iyi:

• 1. Yendetsani Ma Adilesi Anu a Imelo Kupyolera Have I Been Pwned (haveibeenpwned.com):
• Lowetsani ma adilesi anu a imelo aumwini ndi antchito pa haveibeenpwned.com kuti muwone zomwe zaphwanya mbiri yakale zidawulula zidziwitso zanu.
• **2. Tsegulani Msakatuli Wanu / Woyang'anira Achinsinsi "Kufufuza Achinsinsi" Kufufuza & Kusintha Mawu Achinsinsi Omwe Agwiritsidwanso Ntchito Poyamba **:
• ** Mawu achinsinsi a Apple (iOS 18 / macOS Sequoia kapena Settings > Passwords > Security Recommendations)**, Google Password Manager (passwords.google.com/checkup), 1Password (Watchtower), ndi Bitwarden (Vault Health Reports) sungani zokha malowedwe anu onse osungidwa mu "Mawu Achinsinsi Osokoneza" ndi "Mawu Achinsinsi Ogwiritsidwanso Ntchito".
• Sinthani mawu anu achinsinsi omwe mwagwiritsidwanso ntchito ndi chiwopsezo chazachuma/chamtengo ndikusintha iliyonse ndi dzina lapadera, lopangidwa mwachisawawa mawu achinsinsi a zilembo 16 mpaka 24 (kapena mawu achinsinsi ama 4 ngati correct-horse-battery-staple):
  1. Maakaunti Oyambirira a Imelo (Gmail, Outlook, Yahoo, iCloud)
  2. Mabanki, Mabrokerage, ndi Mapulogalamu Olipirira (PayPal, Venmo, Cash App, Zelle)
  3. Maakaunti Okhulupirika Pandege & Maakaunti Okhulupirika a Mahotelo (Delta, AA, United, BA, Marriott, Hilton, Hyatt)
  4. Mapulogalamu Ogulitsa, Matikiti & Otumizira Chakudya okhala ndi Makhadi Osungidwa/Mabalance (Amazon, Target, Walmart, Starbucks, Ticketmaster, Uber, DoorDash, Sephora, Ulta)
• **3. YATSANI Multi-Factor Authentication (MFA) kapena Passkeys pa Akaunti Iliyonse Yokhulupirika & Yogulitsa Zogulitsa Zomwe Zimathandizira **:
• Ogwiritsa ntchito ambiri amathandizira 2FA kubanki yawo ndi imelo koma ayiwala kuti **Delta SkyMiles, American Airlines, United MileagePlus, British Airways, Air Canada Aeroplan, Marriott Bonvoy, Hilton Honors, Hyatt, Amazon, Target, Walmart, Starbucks,ndi Ticketmaster tsopano thandizani 2FA kapena Passkeys **, komabe ambiri amasiya 2FA ** OFF mwachisawawa ** mpaka mutayatsa pamanja mkati mwa Zikhazikiko za Chitetezo cha Akaunti.
• 4. Osasunga Khadi Langongole kapena Khadi La Debit Mkati Mwa Chakudya Chake, Khofi, Kapena Mapulogalamu Ogulitsa:
• M'malo mosunga nambala yanu ya manambala 16 ya Visa/Mastercard mkati mwa malo odyera 40 osiyanasiyana, khofi, ndi zogulira (komwe boti iliyonse yosunga mbiri ingathe kulipiritsa), chotsani makhadi onse osungidwa pamaprofayilo amalonda ndikuwunika pogwiritsa ntchito Apple Pay kapena Google Pay (yomwe imafuna ID yanu yamoyo / Kukhudza ID ya biometric pa foni yanu yam'manja kapena kugulanso / kugulanso kirediti kadi) nambala** (Privacy.com, Capital One Eno, Citi Virtual Account Numbers, Revolut Disposable Cards) ndi malire okhwima a $25 pamwezi.
• 5. Gwiritsani Ntchito Maimelo Apadera Pamaakaunti Amtengo Wapatali:
• Lingalirani zosintha ma imelo olowera pamaakaunti anu oyamba akubanki, ndege, ndi mahotelo kukhala maimelo odzipatulira (you+loyalty@... kapena Apple Bisani Imelo Yanga / SimpleLogin / Fastmail alias) yomwe siinagwiritsidwepo ntchito polembetsa ma forum, zolemba zamakalata, kapena malo ogulitsira. Ngati mndandanda wa combo wa omwe akuukira sadziwa imelo yanu yolowera, sangayese ngakhale kuyika mawu achinsinsi pa akaunti yanu.

Nambala zangozi zachigawo ndi ndondomeko za bungwe¶

Kupeza mopanda chilolezo maakaunti a kukhulupirika, kuyenda, ndi malonda kudzera muzinthu zodziwikiratu ndi mlandu (mu US Computer Fraud and Abuse Act, UK Computer Misuse Act 1990, ndi malamulo enanso padziko lonse lapansi). Kupereka lipoti zomwe zachitika kumapanga nambala yovomerezeka yomwe imathandiza kukakamiza ndege, mahotela, kapena mabanki omwe sakufuna kubwezeretsanso ndalama zomwe zidabedwa:

• United States ndi Canada:
• Ntchito Zadzidzidzi: Imbani 911 ngati pali chiwopsezo chakuthupi kapena zachiwembu mwa munthu.
• FBI Internet Crime Complaint Center (IC3): Lembani lipoti pa intaneti ku ic3.gov kulemba malo osaloledwa/makilomita kuwomboledwa, dzina lachinyengo/PNR ngati likuwoneka, ndi mtengo wandalama wabedwa.
• ** Federal Trade Commission (FTC) & Dipatimenti ya Zamayendedwe (DOT) (US)**: Nenani za kulandidwa kwa akaunti yogulitsa/makadi amphatso ku ReportFraud.ftc.gov; ngati ndege ikukana kufufuza kapena kubwezeretsa mailosi omwe anabedwa popanda vuto lanu pamene zowongolera zachitetezo zinalibe, muthanso kudandaula ndi ogula ku U.S. Dipatimenti ya zamayendedwe (airconsumer.dot.gov) kapena State Attorney General.
• Canadian Anti-Fraud Center (CAFC): Nenani pa intaneti pa antifraudcentre-centreantifraude.ca kapena imbani 1-888-495-8501.
• United Kingdom:
• Ntchito Zadzidzidzi: Imbani 999 (kapena 101 kwa apolisi omwe si angozi).
• Zachinyengo Zochita (UK National Fraud and Cyber Crime Reporting Center): Nenani pa intaneti ku actionfraud.police.uk kapena imbani 0300 123 2040, ndi kutumiza maimelo aliwonse okhudzana ndichinyengo/sipamu ku NCSC ku report@phishing.gov.uk.
• Mgwirizano wamayiko aku Ulaya:
• Ntchito Zadzidzidzi: Imbani 112 kudutsa mayiko onse a EU.
• ** National Cybercrime & Consumer Protection Authorities **: Lembani lipoti la apolisi kudzera pa lipoti la Europol dziko lonse (europol.europa.eu/report-a-crime/report-cybercrime-online) ndikudziwitsani banki yanu mkati mwa zenera la PSD2 ngati njira yolipirira yosungidwa idaperekedwa.
• Australia ndi New Zealand:
• Ntchito Zadzidzidzi: Imbani 000 ku Australia kapena 111 ku New Zealand.
• ** ReportCyber ​​(ACSC) & Scamwatch (Australia)**: Nenani pa intaneti ku cyber.gov.au/report-and-recover/report kapena imbani 1300 CYBER1 (1300 292 371).
• CERT NZ / NetSafe (New Zealand): Lipoti ku cert.govt.nz kapena imbani 0508 NETSAFE (0508 638 723).
• India ndi Asia-Pacific:
• India National Cyber Crime Reporting Portal: Imbani 1930nthawi yomweyo kufotokoza zachinyengo zandalama/chikwama kapena kudandaula ku cybercrime.gov.in.
• Singapore (ScamShield / SPF Anti-Scam Center): Imbani 1799 kapena 1800-722-6688.

Mafunso omwe amafunsidwa pafupipafupi¶

Kodi achiwembu adalowa bwanji muakaunti yanga yandege kapena hotelo pomwe ndege kapena hoteloyo imati sanaberedwe?¶

Pachiwopsezo chokhala ndi mbiri, malo osungira ndege kapena hoteloyo sanayenera kuphwanyidwa. M'malo mwake, a zosiyana Webusayiti yomwe mudapanga akaunti zaka zapitazo (monga pulogalamu yolimbitsa thupi, malo opangira matikiti, forum, kapena malo ogulitsira) idakhala ndi vuto lachidziwitso chomwe chidatulutsa imelo yanu ndi mawu achinsinsi. Chifukwa mudagwiritsa ntchito mawu achinsinsi omwewo (kapena pafupifupi kufanana kofanana) pa ndege yanu, hotelo, kapena pulogalamu ya khofi, ma bots odzipangira okha "amadzaza" maimelo ndi mawu achinsinsi omwe adawukhira patsamba lolowera ndege kapena hotelo ndikulowa.

Chifukwa chiyani ndinalandira mwadzidzidzi maimelo okwana 1,000 "Tsimikizirani kulembetsa kalata yanu" mumphindi 10 pomwe mfundo zanga kapena makadi amphatso adabedwa?¶

Kusefukira kwa ma signups osafunika kumatchedwa an Bomba la Imelo (kapena Bomba Lolembetsa). Wowonongayo adasaina dala adilesi yanu ya imelo kuti mulembe makalata 1,000 mwachisawawa pa intaneti nthawi yeniyeni yomwe adawombola ndege yanu, kusamutsa malo anu ohotela, kapena kuyitanitsa pa akaunti yanu yogulitsa. Cholinga chawo ndikuchulukitsira zidziwitso za foni yanu ndikuyika imelo imodzi yovomerezeka yolandila kuchokera kundege, hotelo, kapena sitolo kuti musankhe maimelo onse 1,000 ndikuwachotsa osazindikira kuti ndi akaunti iti yomwe yangotsitsidwa. Osafufuta mochulukira bomba la imelo musanafufuze ma inbox ndi sipamu foda ya mawu ngati "Order", "Mfundo", "Malo", "Tikiti", "Choka", kapena "Risiti".

Kodi ndingayang'ane dzina lenileni la munthu yemwe akuwuluka pa tikiti yomwe yasungidwira ndi kubedwa kwa ndege yanga ndikukanena kupolisi?¶

Muyenera kujambula chithunzi cha Passenger Name Record (`PNR`), dzina lapaulendo, pasipoti/ Zambiri zapaulendo wodziwika (ngati zikuwonekera pa sikirini yosungitsa), ndi nambala yaulendo wa pandege ndikuzipereka kwa onse awiri Gulu la ndege la Corporate Fraud / Revenue Protection Desk ndi kukhazikitsa malamulo (`ic3.gov`). Komabe, kumbukirani kuti munthu amene wakhala pampando wandegeyo nthawi zambiri amakhala munthu wapaulendo wosadziwa yemwe adagula "tikiti yotsika mtengo" kuchokera kwa broker wachinyengo woyenda mobisa pa Telegraph, WeChat, kapena Instagram, m'malo mwa wobera yemwe adayendetsa botnet yosunga mbiri. Gulu lazachinyengo la ndegeyo liletsa tikiti ndikufufuza IP yosungitsa komanso njira yolipirira yomwe imagwiritsidwa ntchito pamisonkho/chindapusa.

Chifukwa chiyani akaunti yanga yandege kapena hotelo sinamufunse wobera nambala ya 2FA pomwe adalowa kuchokera kudziko lina ndikutulutsa mapointi 200,000?¶

Ambiri omwe amawuluka nthawi zambiri, kukhulupirika kuhotelo, ndi mapulogalamu ogulitsa amasiya Multi-Factor Authentication (`MFA`) anatembenuka ZIMTHITSA mwachikhazikitso (zomwe zimakufunsani kuti mufufuze pamanja pazokonda za Akaunti ya Chitetezo kuti muyatse) kapena kungokakamiza 2FA pa intaneti yawo pomwe mukusiya akale **mapulogalamu am'manja a API endpoints** kapena **ma API otumiza anzanu** osatetezedwa ndi zovuta za 2FA. Kuthandizira 2FA/Passkeys momveka bwino mu mbiri yanu yokhulupirika ndikugwiritsa ntchito mawu achinsinsi, osasintha, osasinthika 16+ kuyimitsa ma bots odziyimira pawokha ngakhale pama API am'manja omwe adatengera.

Kodi Marriott, Hilton, Delta, American, United, kapena Starbucks adzandibwezeradi mfundo zanga zomwe andibera kapena khadi lamphatso?¶

Inde, pamilandu yochulukirachulukira yolembedwa, mutapereka lipoti la kuwomboledwa kosaloledwa mwachangu ku gulu lawo lodzipatulira la **Loyalty Fraud / Account Security** ndikukhazikitsa mawu achinsinsi apadera ndi 2FA. Chifukwa malo okhulupilika ndi makadi amphatso a sitolo yotsekedwa ndi zolemba zamkati m'malo motumiza ndalama zosasinthika, gulu lachinyengo la kampani likhoza kuletsa kusungitsa hotelo yachinyengo, kutaya tikiti ya ndege, kubwezera mfundo kuchokera ku akaunti ya wolandira, kukupatsani nambala yatsopano ya membala wokhulupirika kapena nambala ya khadi la mphatso, ndikubwezeretsani ndalama zanu zonse.

Maupangiri ogwirizana¶

• Kuyankha pakuphwanya kwa data ndi kutayikira kwa mawu achinsinsi: momwe mungayang'anire ndikuteteza maakaunti anu
• Akaunti ya imelo idabedwa, malamulo otumizira, ndikuchira
• Kuphwanya akaunti yakubanki: chinyengo chimayimitsidwa ndikuchira
• Phishing ndi akaunti zosokoneza
• Kubera ma cookie a Session, pulogalamu yaumbanda ya infostealer, ndi kuchotsa makiyi
• Nambala zadzidzidzi malinga ndi dziko

Magwero ndi malangizo ovomerezeka¶

• Cybersecurity and Infrastructure Security Agency (CISA) & FBI Internet Crime Complaint Center (IC3) (United States): Kuchepetsa Zowonongeka Zowonongeka, Kutenga Akaunti (ATO), ndi Kulembetsa Mabomba Campaigns.
• Tsegulani Ntchito Yotetezedwa Padziko Lonse Lapansi (OWASP): *OWASP Automated Threat Handbook: OAT-008 Zolemba Zovomerezeka & OAT-019 Kuphatikizika kwa Akaunti ndi Kubweza Malipiro a Loyalty Point *.
• National Institute of Standards and Technology (NIST) (United States): Special Publication 800-63B: Digital Identity Guidelines: Authentication, Lifecycle Management, and Breached Password Screening.
• National Cyber ​​​​Security Center (NCSC) (United Kingdom): Credential Stuffing, Zowopsa Zogwiritsanso Ntchito Mawu Achinsinsi, ndi Maupangiri Otsimikizika a Multi-Factor for Consumers and Online Services.
• Federal Trade Commission (FTC) & U.S. Department of Transportation (DOT): Consumer Protection and Airline Frequent-Flyer/Loyalty Program Fraud Investigation Standards.