Gutanga akazi k'impimbano no kubaza ibibazo kure: Lazaro yo muri Koreya ya ruguru BeaverTail npm Repo Malware, Kugenzura Ibikoresho Byibinyoma, no Gufunga Indangamuntu¶

Kumenya neza hagati yikiganiro cyakazi cya kure cyangwa inzira yindege ko "recrutement" cyangwa "umuyobozi ushinzwe akazi" ikora cyber ikomeye cyangwa umutego wamafaranga ni ibintu byihutirwa byombi. Uyu munsi uburiganya bwakazi bwigabanyijemo ibikorwa bibiri byangiza cyane byagaragajwe na FBI, CISA, hamwe n’ibigo bikoresha interineti ku isi: (1) ** Umushinga wa software hamwe na Crypto "Coding Assessment" Malware (Contagious Interview / DPRK Itsinda rya Lazaro BeaverTail & InvisibleFerret) **, aho abashaka akazi kuri LinkedIn, Upwork, cyangwa Telegram basabye injeniyeri ya software cyangwa umukandida wa Web3 / AI gutondeka ububiko bwa GitHub, GitLab, cyangwa Bitbucket hanyuma bagakora npm install && npm start . .ssh urufunguzo, .env dosiye, hamwe na kode y'ibikoresho mu masegonda 5; hamwe na $2,500 to $5,000 reba kuri "MacBook Pro hamwe nu biro byo murugo," kandi ikagutegeka kubitsa mobile-kubitsa cheque no kohereza $2,200 Binyuze kuri Zelle, Venmo, insinga, cyangwa amakarita yimpano kubacuruzi "bemeye kugurisha ibikoresho bya IT" mbere yuko cheque itangira nyuma yiminsi. Kubwa SSN / I-9 kwiba indangamuntu no kugenzura ruswa muri rusange, reba akazi k'impimbano gatanga uburiganya, ibikoresho byo kugenzura uburiganya, no kwiba indangamuntu; kuri npm / PyPI pake urufunguzo rwo kuzenguruka hamwe nubujura bwa kuki ya mushakisha, baza gutanga urunigi npm / PyPI paketi kumvikana hamwe niterambere ryakazi urufunguzo rwo kuzunguruka na isomo ryibisambo bya kuki, infostealer malware, hamwe no gukuraho passkey. Niba uhuye n'agahato k'umubiri ako kanya, iterabwoba ryihuta, cyangwa guhangana n'umuntu woherejwe, hamagara nimero yawe yihutirwa (911 muri Amerika no muri Kanada, 112 hirya no hino mu muryango w’ubumwe bw’ibihugu by’Uburayi, 999 mubwongereza) cyangwa reba ububiko bwacu bwa nimero yihutirwa.

Kora ubu¶

1. ** NIBA URASHOBORA npm install, npm test, yarn, pip install, cyangwa Zoom mpimbano / Amakipe / Miro .dmg/.exe kubibazo byakazi: SHAKA KOMISIYO YANYU NA WI-FI NA ETHERNET HAMWE NA KABIRI **:
2. Kuramo umugozi wa Ethernet cyangwa uhindure Wi-Fi ** OFF ** ako kanya.
3. BeaverTail JavaScript / Node.js yishyurwa ikuramo ibintu byoroshye bya Python (-/.npl cyangwa %UserProfile%\.pyp) akanatangiza InvisibleFerret inyuma yinyuma, ihuza itegeko-no-kugenzura (C2) seriveri (:1224 / :1244) gutambutsa urufunguzo rwawe, clip clip, na sisitemu ya Live.
4. ** Koresha terefone yihariye, isukuye (iPhone cyangwa Android ku makuru ya selire) kugirango yimure ikariso yose ya cryptocurrency no gukuraho buri mikorere ya mushakisha ikora (Google, GitHub, AWS, Microsoft, Apple) **:
5. BeaverTail intego ** MetaMask, Phantom, Rabby, Igiceri cya Coinbase, Ikariso Yizere, Kuva, Electrum, na Solana CLI (-/.config/solana/id.json) ** ububiko bwa dosiye, hamwe na Login Data na Cookies kuva Chrome, Intwari, Edge, Arc, na Firefox, wongeyeho macOS yawe login.keychain-db.
6. Uhereye ku gikoresho gisukuye, ohereza umutungo uwo ari wo wose wa crypto ku gikapo gishyushye ku mbuto nshya y'ibikoresho byo mu gikapu, kuvanaho amasomo yose akora muri Google (myaccount.google.com/security), GitHub (github.com/settings/sessions), hamwe na AWS / Igicu, hanyuma usibe urufunguzo rwa SSH na GPG rwaciwe na GitHub / GitLab.
7. ** NIBA WARASHYIZEHO "" URUGO RW'IBIKORWA BY'URUGO "SHAKA UMUKOZI: NTUKOHEREZE DOLLAR KUMWE" UMUCURUZI ", KANDI HAMAGARA ISHAMI RY'UBUFARANSA BANKI YANYU **:
8. Nubwo porogaramu yawe ya banki yerekana $3,500 reba nka ** "Ibisigisigi Bihari / Amafaranga Yarekuwe," ** ko amafaranga ari ** SI ** yahanaguwe. Muri Reta zunzubumwe za Amerika ** Amabwiriza CC (Expedited Funds Availability Act) **, amabanki agomba gukora kubitsa sheki by'agateganyo imbere 1 to 2 business days, mugihe kuvumbura ko cheque ya routing / konti nimero yahimbwe ifata 5 to 14 business days.
9. Hamagara nimero iri inyuma yikarita yawe yo kubikuza hanyuma utange raporo: * "Nari naribasiwe nuburiganya bwakazi kandi ntabizi mbitsa cheque ikekwa ko ari impimbano; nyamuneka shyira akamenyetso kubitsa kugirango konte yanjye idafunzwe kubera uburiganya." *
10. ** NIBA UHORA UKOhereza ZELLE, VENMO, WIRE, CYANGWA BITCOIN AMAFARANGA YAMAFARANGA YA "BIKORESHEJWE"SWIFT / Fedwire Recall na FBI IC3 Recovery Asset Team guhagarika **; kuri Zelle / Kwishura Byihuse, menyesha ** Yemerewe Kwishyura (APP) kwigana akazi uburiganya ** munsi yemerewe gusunika porogaramu yo kwishyura uburiganya n'uburenganzira bwo kwishyura).
11. ** NIBA WASHYIZEHO SSN YANYU, PASSPORT, LISENSE YA DRIVER, W-4, I-9, CYANGWA DIRECT DEPOSIT BANK ROUTING NOMER **: Shyira guhagarika inguzanyo kuri ** Equifax, Experian, na TransUnion **, funga ** ChexSystems **, funga SSN kuri ** yanjye.myeverify.uscis.gov) **, hanyuma usabe banki yawe gufunga nimero ya konti yagaragaye hanyuma ufungure numero ya konti isimburwa.
12. ** NIBA WEMEYE "UBUSHAKASHATSI BWA PACKAGE / LOGISTICS COORDINATOR" AKAZI KAKIRA KANDI KUGARAGAZA URUGENDO MU RUGO: Hagarika GUKORA AMAFARANGA AKANYA **: Ibyo bikoresho bya elegitoroniki (iPhones, MacBooks, camera lenses) yaguzwe hamwe namakarita yinguzanyo yibwe hanyuma yoherezwa murugo rwawe (Parcel Mule Scam). Gumana ibirango byose byoherezwa hamwe nibiti byo kuganira hanyuma ubaze abapolisi baho cyangwa ** Serivisi ishinzwe kugenzura amaposita yo muri Amerika (USPIS) **.

Igiti cyemezo: kubaza kure hamwe nakazi kimpimbano akazi kihutirwa¶

Koresha iyi mbonerahamwe kugirango usimbukire neza kuri protocole ya kontineri ihuye neza nakazi keza ka buriganya wahuye nacyo:

flowchart TD
    Start["Ibihe byihutirwa: Ukekwaho kubaza akazi k'impimbano, Ikizamini cya Coding, cyangwa Uburiganya"] --> ScamType{"Niki 'Abashaka akazi' cyangwa 'Umukoresha' bagusabye gukora?"}

    ScamType -->|"1. Kanda Git Repo & Koresha npm / Python / Docker CYANGWA Shyiramo porogaramu yo guhamagara Video"| DevTrap["KUNYAZA: DPRK Ikiganiro Cyanduye (BeaverTail / InvisibleFerret) Amakuru-Umujura"]

    ScamType -->|"2. Shira sheki (PDF / Ibaruwa) & Kohereza Amafaranga kuri 'Umucuruzi Wemewe'."| CheckTrap["Kugenzura Impimbano Zirenzeho: Kugenzura by'agateganyo bizagerwaho muminsi 5-14"]

    ScamType -->|"3. Yujujwe I-9 / W-4 / SSN / Passeport / Ifishi yo kubitsa mu buryo butaziguye mbere yo kuvumbura uburiganya"| IdTrap["Kwibiranga Indangamuntu & Ubujura bwimishahara: Guhagarika inguzanyo, ChexSystems, IRS IP PIN, & Konti ya Banki"]

    ScamType -->|"4. Kwakira paki murugo, Ubigenzure, & Igisubizo hamwe na Labels Yatanzwe CYANGWA Wishyure 'Task' Crypto"| MuleOrTask["Gusubiza Parcel Mule CYANGWA 'Porogaramu Optimisiyoneri' Crypto Task Scam"]

    DevTrap --> CutNet["1. Hindura OFF Wi-Fi / Kuramo Ethernet Ako kanya Kumurimo Wumushinga"]
    CutNet --> EvacPhone["2. Kuri Terefone isukuye: Himura Crypto Umutungo + Kuraho Google / GitHub / AWS Amasomo + Hindura Urufunguzo rwa SSH"]
    EvacPhone -->ForensicClean["3. Kugenzura - / .npl, - / .pyp, pack.json, & Umwirondoro wa Browser -> Ihanagura & Ongera ushyire OS neza"]

    CheckTrap --> SentMoney{"Wigeze Kohereza Amafaranga kuri 'Umucuruzi Ucuruza Ibikoresho'?"}
    SentMoney -->|"Oya: Reba Kubitsa, $ 0 Yoherejwe hanze"| WarnBank["NTIMUKORESHE AMAFARANGA -> Hamagara Banki Yuburiganya Byihuse kugirango Ibendera Utazi Kubitsa nabi"]
    SentMoney -->|"Yego: Yoherejwe ukoresheje Zelle / Umugozi / Crypto / Ikarita yimpano"| RecallFunds["Hamagara Bank Wire / Ibiro Byuburiganya Ako kanya -> Gupfukirana Ibikorwa Byinshi Mbere yo Kugenzura Bounces -> Raporo IC3 Raporo"]

    IdTrap --> LockCredit["Hagarika Equifax / Experian / TransUnion + ChexSystems -> Funga nimero ya konti ya banki yashyizwe ahagaragara -> Funga myE-Kugenzura"]
    MuleOrTask --> StopShip["Hagarika kohereza paki & Hagarika kubitsa Crypto -> Kubika inzira zerekana & Raporo kuri USPIS / IC3"]

Icyiciro cya 1: Uburyo imitego ibiri minini ya kure-yakazi ikora munsi ya hood¶

Gereranya ubukanishi bwa tekiniki n'ibimenyetso bitukura-byerekana ibimenyetso bitatu byihutirwa byakazi bikora kwisi yose:

Icyiciro cya 2: Ibisubizo byihutirwa kubategura software (Contagious Interview / BeaverTail / InvisibleFerret)¶

Niba uri software ukora software yakusanyije ububiko bwabakozi cyangwa abaza ibibazo hanyuma akiruka npm install, npm start, yarn, pnpm, python, cargo, cyangwa ikorwa kuri Windows yawe, macOS, cyangwa Linux ikoreramo, kurikiza uru rutonde rwukuri rwibisubizo bishingiye kuri ** Palo Alto Networks Unit 42 **, ** CrowdStrike **, na ** CISA / FBI ** amakuru yiterabwoba kuri koreya ya ruguru Contagious Interview kwiyamamaza.

Intambwe ya 1: Sobanukirwa na 2-Icyiciro BeaverTail -> InvisibleFerret Kwica Urunigi kuri disiki yawe¶

Nigute ububiko busa nkibisanzwe / Node.js ububiko bwanduye Mac cyangwa PC yawe utiriwe utera antivirus?

+-------------------------------------------------------------------------+
| ANATOMY OF A CONTAGIOUS INTERVIEW (BEAVERTAIL) MALICIOUS REPO           |
|                                                                         |
| 1. The Decoy Repo (e.g., "mern-ecommerce-assessment" or "defi-dex-ui"): |
|    - 99% of the repo is real, working React/Express boilerplate code.   |
|    - Hidden at the very end of `server/routes/api/auth.js` or           |
|      `backend/controllers/userController.js` (often scrolled 300 spaces |
|      to the right on one line so you do not see it in VS Code) is an    |
|      obfuscated `eval(Buffer.from(...))` or `axios.get(...)` call.      |
|                                                                         |
| 2. Stage 1: BeaverTail (JavaScript Info-Stealer inside Node.js):        |
|    - Scans Chrome, Brave, Opera, Edge, Vivaldi (`Default` & `Profile N`)|
|      for `Login Data`, `Local Extension Settings` (MetaMask `nkbihfbeog`|
|      Phantom `bfnaelmome`, Rabby `acmacodkjb`), and Solana `id.json`.   |
|    - Uploads stolen vaults & cookies immediately to `http://<C2>:1224`. |
|                                                                         |
| 3. Stage 2: InvisibleFerret (Python Backdoor + AnyDesk Persistence):    |
|    - BeaverTail downloads a standalone portable Python 3.11 zip into    |
|      `~/.npl/` or `%UserProfile%\.pyp\` and runs `~/.npl/.pyp/python`   |
|      executing `~/.npl/main.py` (`InvisibleFerret`).                    |
|    - InvisibleFerret logs keystrokes, reads your clipboard, scans your  |
|      entire drive for `.env`, `.ssh`, `seed`, `mnemonic`, and silently  |
|      downloads/configures `AnyDesk` for full remote desktop control.    |
+-------------------------------------------------------------------------+

Intambwe ya 2: Reba neza neza BeaverTail na InvisibleFerret Ibipimo byubwumvikane (IoCs)¶

** Mugihe mudasobwa yawe yanduye Mac, Linux, cyangwa Windows yaciwe burundu na Wi-Fi na Ethernet **, fungura terminal (cyangwa PowerShell) kugirango urebe niba Icyiciro cya 2 (InvisibleFerret) yajugunywe kuri disiki yawe:

# On macOS or Linux (WITH WI-FI OFF):
ls -la ~/.npl ~/.pyp ~/.vscode
ps aux | grep -iE "npl|pyp|main\.py|anydesk|node"

# Search the cloned interview repository for hidden horizontal-scroll obfuscation or base64 evals:
grep -rnE "Buffer\.from|child_process|execSync|\.npl|\.pyp|:1224|:1244|nkbihfbeogaeaoehlefnkodbefgpgknn" /path/to/cloned/interview_repo/

# On Windows PowerShell (WITH WI-FI / ETHERNET OFF):
Get-ChildItem -Path $env:USERPROFILE -Force | Where-Object { $_.Name -match "^\.(npl|pyp)" }
Get-Process | Where-Object { $_.Path -match "npl|pyp|AnyDesk" }

Intambwe ya 3: Kora Iminota 15-Yabatezimbere Impamyabumenyi & Crypto Evacuation (Kuva Mubikoresho Byera)¶

Kora ** ntabwo ** andika ijambo ryibanga cyangwa interuro yimbuto kuri mudasobwa yanduye. Ukoresheje telefone isukuye ** (iPhone / Android) cyangwa mudasobwa itandukanye idahwitse **:

1. ** Kwimura amafaranga yose ya Cryptocurrency ahita (Minutes 0 to 5) **:
2. Nubwo umufuka wawe wa MetaMask, Phantom, Rabby, cyangwa Kuva wafunzwe ufite ijambo ryibanga, BeaverTail washyizeho dosiye yawe ihishe neza (000003.log / LOCK / Local Extension Settings) ** na ** InvisibleFerret ikoresha keylogger / clipboard monitor (no kuri macOS izamuka kavukire osascript ijambo ryibanga risaba ijambo ryibanga rya Mac Sisitemu yo gufungura login.keychain-db).
3. Kora igikapu gishya kuri terefone yawe ya ** cyangwa igikapu cyibikoresho (Ledger / Trezor) ** hamwe na ** shyashya-12-24-yamagambo yimbuto yimbuto ** hanyuma wohereze 100 kwijana ryibimenyetso byawe, NFTs, hamwe nu mwanya uhagaze muri buri gikapo cyigeze gikora kuri mudasobwa.
4. ** Kuraho GitHub yose, GitLab, Bitbucket, na Cloud (AWS / GCP / Azure / Vercel) ibyangombwa (Minutes 5 to 10) **:
5. ** GitHub **: Injira kuri terefone yawe -> ** Igenamiterere -> SSH na GPG urufunguzo ** -> ** Siba ** urufunguzo rwa SSH rwabitswe muri -/.ssh/ kuri mudasobwa igendanwa. Noneho jya kuri ** Igenamiterere -> Igenamiterere ry'abateza imbere -> Ikimenyetso cyo kugera ku giti cyawe ** (kuvanaho ibimenyetso byose) na ** Igenamiterere -> Amasomo ** -> ** Kuraho amasomo yose **.
6. ** AWS / GCP / Igicu **: Hita uhagarika buriwese AWS_ACCESS_KEY_ID yabitswe muri -/.aws/credentials cyangwa imbere icyaricyo cyose .env dosiye kuri iyo mudasobwa igendanwa (InvisibleFerret gusubiramo inshuro zose ububiko bwububiko kuri disiki yawe ya .env, .npmrc, .pypirc, kubeconfig, na id_rsa).
7. ** Niba ufite umukoresha cyangwa ububiko bwabakiriya / urufunguzo kuri iyo mudasobwa igendanwa **: Menyesha ikigo gishinzwe umutekano wumukoresha wawe (SOC / CISO) ako kanya kugirango bashobore kuzenguruka ibigo .env amabanga no kugenzura.
8. ** Kuraho amasomo yose ya mushakisha (Google, Microsoft, Apple, Slack, Discord, Telegram) ((Minutes 10 to 15) **:
9. Wibuke: guhindura ijambo ryibanga akenshi ntibishobora ** gutesha agaciro kuki yibice byibwe keretse ukanze neza ** "Sohora mubikoresho byose / Kuraho amasomo yose" ** mumutekano wa Google, Konti ya Microsoft, Slack, Discord, na X / Twitter.
10. Hindura umuyobozi wibanga ryibanga (1Password, Bitwarden, Keeper) ** ijambo ryibanga hanyuma ukureho ibimenyetso byemewe bya mudasobwa igendanwa.
11. ** Ihanagura kandi wongere usubiremo sisitemu ikora kuri sitasiyo yanduye **: Kuberako InvisibleFerret shyiramo ibikorwa byimbere byimikorere, ihindura mushakisha ya binaries, nigitonyanga AnyDesk kugera kure, gusiba gusa -/.npl kandi ububiko bwakoronijwe ntabwo buhagije. Wibike gusa inyandiko isanzwe / dosiye yinkomoko (yagenzuwe neza hamwe git status / git diff), hanyuma ukore OS yuzuye isukuye hanyuma usubiremo (macOS Erase All Content and Settings cyangwa Windows USB isukura ibice byohanagura).

Icyiciro cya 3: Ibisubizo byihutirwa kubinyoma "Ibikoresho byo murugo" Kugenzura uburiganya¶

Niba warahawe akazi ka kure (Administrative Assistant, Data Entry, Customer Support, Project Coordinator, Graphic Designer.

1. Impamvu porogaramu ya banki ivuga "Amafaranga arahari" kuri cheque yibinyoma 100% (The Regulation CC Float Trap)¶

+-------------------------------------------------------------------------+
| HOW THE FAKE "EQUIPMENT CHECK" FLOAT TRAP WORKS                         |
|                                                                         |
| Day 1 (Monday): You deposit the scammer's $3,500 "Equipment Check"      |
|                 using your bank's Mobile Deposit app.                   |
| Day 2 (Tuesday): Under US Federal Law (Regulation CC), your bank MUST   |
|                  release the funds within 1-2 business days. Your app   |
|                  now shows: "Available Balance: +$3,500.00".            |
| Day 2 (Tuesday PM): "Hiring Manager" tells you to Zelle/Wire $2,800     |
|                     immediately to their "Approved MacBook Vendor" so   |
|                     your laptop arrives by Friday.                      |
| Day 8 (Next Tuesday): The real corporate bank whose routing/account     |
|                       number was forged on the check rejects it as      |
|                       COUNTERFEIT / ALTERED (`Return Code R29 / Refer   |
|                       to Maker`).                                       |
| RESULT ON DAY 8:                                                        |
|   - Your bank claws back the full $3,500.00 from your balance.          |
|   - The $2,800 you sent via Zelle/Wire is gone forever.                 |
|   - Your account drops to -$2,800.00 overdraft, and your bank's risk    |
|     algorithm may freeze/close your account and report you to           |
|     ChexSystems as a check-fraud risk.                                  |
+-------------------------------------------------------------------------+

2. Intambwe-ku-ntambwe protocole yo kurinda banki niba wabitse sheki¶

Urubanza A: Wabitse sheki, ariko ntabwo wohereje amafaranga kuri "umucuruzi"¶

** Watsinzwe $0 kugeza ubu, kandi urashobora kubuza banki yawe gufunga konti yawe niba ukora nonaha: ** 1. ** Ntukureho, gukoresha, cyangwa kohereza igice kimwe cyamafaranga yabikijwe **. Kureka byuzuye $3,500 kwicara bidakorewe kuri konti kugirango mugihe sheki igabanutse muminsi 5 yakazi 10, banki isubiza inyuma inguzanyo zayo zagateganyo neza. $0 kurenza urugero. 2. ** Hamagara ishami rya banki ishinzwe uburiganya ako kanya (cyangwa ujye mumashami yumubiri hanyuma uvugane numuyobozi wishami) **: - Iyo cheque y'impimbano isunika bucece nta bisobanuro, moteri ya banki ikora ibyago (Early Warning Services / ChexSystems) ntashobora kumenya niba wari umutekamutwe cyangwa inzirakarengane ushaka akazi. - Bwira uhagarariye banki mu buryo bweruye: * "Nasabye akazi ka kure maze umushukanyi anyoherereza cheque y'ibikoresho '$ 3.500' ko nabitse kuri telefone uyu munsi. Gusa nasanze ari uburiganya bwo kugenzura akazi k'impimbano. SINAKORESHEJWE cyangwa ngo nyohereze idorari rimwe ry'amafaranga. Nyamuneka shyira inoti y'uwahohotewe ku kazi ku mwirondoro wanjye kandi uhindure / ufate inguzanyo y'agateganyo kugira ngo konti yanjye idahanwa. - Saba banki kureka $15 to $35 Amafaranga yo kubitsa yasubijwe kandi wemeze ko konte yawe itazashyirwa ahagaragara kugirango ufunge.

Urubanza B: Wabitse sheki KANDI umaze kohereza amafaranga (Zelle, Venmo, Wire, Cash App, Crypto, cyangwa Gift Cards)¶

1. ** Hamagara ishami rya banki ishinzwe uburiganya mu masegonda 60 **:
2. Menyesha impande zombi z'icyaha: (a) kubitsa sheki yinjira ni cheque y'amiganano y'impimbano igiye gutangira, kandi (b) kwimura Zelle / Venmo / Wire / ACH byasohotse byatewe n'uburiganya bw'akazi.
3. ** Niba wohereje umugozi wa Banki (Fedwire / SWIFT) mu masaha 24 kugeza 72 ashize : Saba ako kanya ** Kwibutsa insinga yibeshya (SWIFT MT192 / pacs.004) ** hanyuma utange raporo yihutirwa kuri ic3.gov rero Ikipe ya FBI yo Kugarura Umutungo (RAT) ** irashobora gutanga uburiganya bwamafaranga Kwica Urunigi (FFKC) guhagarika kuri konte yakira.
4. ** Niba wohereje Zelle, Venmo, cyangwa Ubwongereza Faster Payments**: Tanga ** Yemerewe Kwishura Gusunika (APP) uburiganya bwo gusaba ** no gusaba banki yakira inzira / ibigo birambuye (Zelle Network Fraud).
5. ** Niba abatekamutwe bakubwiye kugura amakarita ya Apple, Razer Gold, Steam, cyangwa Target Impano Yamakarita **: Hamagara umurongo wuburiganya utanga ikarita yimpano ako kanya hamwe nimero yakurikiranye kugirango uhagarike amafaranga yikarita itemewe.
6. ** Witegure kuri $3,500 reba clawback kugirango konte yawe itajya mubi muri ChexSystems yishyurwa-**:
7. Iyo impimbano $3,500 reba bounces muminsi 5 kugeza 10, banki yawe izagabanya $3,500 kuri konte yawe. Korana nitsinda rya banki yawe yo kugaruza uburiganya kugirango ushyireho gahunda yo kwishyura inyungu zeru kuri zero zisigaye mbere yumunsi wa 30 kugirango banki idatangaza ko konti itabishaka ifunze ** ChexSystems ** cyangwa ** Serivisi zo kuburira hakiri kare (EWS) **.

Icyiciro cya 4: Gufunga umwirondoro wawe niba watanze an I-9, W-4, SSN, Passeport, cyangwa Ifishi yo kubitsa itaziguye¶

Abashaka akazi k'impimbano hafi buri gihe bohereza "Onboarding Packet" (Form W-4, Form I-9, Direct Deposit Authorization, n'amafoto y'imbere n'inyuma y'uruhushya rwo gutwara ibinyabiziga, Passeport, cyangwa Ikarita y'Ubwiteganyirize) mbere yo gushira sheki cyangwa umutego wa malware. Niba wohereje imwe muri izo nyandiko, kora iyi ntambwe 5 yintambwe yo gufunga uyumunsi:

1. ** Funga nimero ya konti ya banki yagaragaye (Direct Deposit ifishi) **: Ifishi yo kubitsa itaziguye iha abashuka nomero yawe ya banki ya banki (ABA. ACH Debit ikura kuri konte yawe. Bwira banki yawe ** gufunga iyo nimero ya konti hanyuma wimure amafaranga yawe kuri nimero nshya ya konti y'imbere **.
2. ** Shyira Freeze Free Credit Free kubiro bitatu byinguzanyo **:
3. ** Equifax ** (equifax.com/personal/credit-report-services/credit-freeze/ / 1-888-298-0045)
4. ** Umunyamerika ** (experian.com/freeze/ / 1-888-397-3742)
5. ** TransUnion ** (transunion.com/credit-freeze / 1-800-916-8800)
6. ** Hagarika ChexSystems (chexsystems.com) na NCTUE**: Amabanki akoresha ** ChexSystems ** (ntabwo ari Equifax / Experian) mugihe umuntu afunguye konti yo kugenzura mwizina ryawe. Shira ubuntu ** ChexSystems Umutekano Freeze ** kumurongo kugirango abatekamutwe badashobora gufungura konti ya banki ukoresheje uruhushya rwawe rwo gutwara hamwe na paki ya I-9.
7. ** Funga nomero yubwiteganyirize muri myE-Verify (USCIS) **: Jya kuri myeverify.uscis.gov hanyuma ukore Self Lock, ibuza umuntu uwo ari we wese gukoresha SSN yawe muri sisitemu y'akazi ya E-Kugenzura.
8. ** Shaka an IRS Identity Protection PIN (IP PIN) (irs.gov/ippin) **: Irinde abatekamutwe gutanga imenyekanisha ryimisoro mu izina ryawe wiyandikishije mumibare 6 ** IRS IP PIN ** ako kanya.

Icyiciro cya 5: Guhagarika "Parcelle Reshipping Mule" cyangwa "Umukoro wa Crypto" Uburiganya neza¶

Byagenda bite se niba warahawe akazi muri kimwe muri ibyo bibiri bitagenzuwe kure akazi?

Urugero rwa 1: Wakiriye akazi "Kugenzura Ubuziranenge / Gupakira Imbere" kandi ufite paki murugo rwawe¶

Niba wakiriye MacBook, iphone, cyangwa ibikoresho bya elegitoronike kuri aderesi y'urugo hanyuma ugahabwa USPS / UPS / FedEx ibirango byoherejwe na PDF kugirango ubyohereze: - ** Hagarika kohereza ibicuruzwa ako kanya **. Buri paki igeze munzu yawe yaguzwe ukoresheje ikarita yinguzanyo yibwe aho uwashutse yinjiye ** izina ryawe na aderesi y'urugo ** nku Ship To aderesi. - ** Ntugasubize paki kuri aderesi yabatekamutwe **: Gumana udusanduku tudafungura, uzigame imeri yose, ikiganiro cya Telegramu, ikirango cyo kohereza PDF, namasezerano yakazi nkibimenyetso, hanyuma ubaze abapolisi baho na ** Amerika. Serivisi ishinzwe kugenzura amaposita (1-877-876-2455 / uspis.gov) ** (cyangwa ** Igikorwa cyuburiganya ** mubwongereza) kugirango bategure gusubiza ibicuruzwa kubacuruzi bariganyije.

Urugero rwa 2: Washakishijwe binyuze kuri WhatsApp / Telegramu kugirango "Porogaramu Optimisiyoneri / Igiciro cyibicuruzwa" Crypto Task Job¶

• ** Uburyo umutego ukora **: "Umukoresha" arakwishura $50 to $150 mubyukuri USDT kumunsi wa 1 wo gukanda buto murubuga rwimpimbano. Kumunsi wa 2 cyangwa Umunsi wa 3, konte yawe ikubita ** "Igikorwa cyo Guhuza" ** ishyira imiyoboro yawe kuri -$400 kandi igusaba kubitsa $400 yawe wenyine USDT "" kurangiza urutonde rw'imirimo 40. " Umwanya ubitsa $400, Igikorwa cya kabiri gisabwa $1,800, hanyuma $6,000, hanyuma $25,000 kuri "imisoro."
• ** Igikorwa ako kanya **: ** Hagarika kubitsa amafaranga ahita **. Imibare kurubuga rwibikorwa ni HTML yimpimbano igenzurwa nabashuka; kwishyura amafaranga asigaye ntazigera afungura kubikuza. Hagarika imibonano yose kandi wirinde "crypto recovery hackers" kuri Telegram cyangwa Instagram.

Inomero zihutirwa zo mukarere hamwe na protocole yikigo¶

Menyesha porogaramu ya kure ya malware (Contagious Interview), kugenzura uburiganya bw'akazi, no kwiba indangamuntu ku bayobozi ba cyber n'abashinzwe imari mu karere kanyu:

• ** Amerika na Kanada **: Hamagara 911 kubintu byose byihutirwa byumutekano. Menyesha porogaramu yangiza porogaramu (Lazarus / BeaverTail) no kugenzura akazi k'impimbano / gutakaza akazi kuri ** FBI IC3 (ic3.gov) **, ** FTC (ReportFraud.ftc.gov na IdentityTheft.gov) **, hamwe na ** USPIS (1-877-876-2455) **. Muri Kanada, hamagara Ikigo cya Kanada cyo Kurwanya Uburiganya (1-888-495-8501) ** hamwe na ** Ikigo cya Kanada gishinzwe umutekano wa cyber (1-833-CYBER-88) **.
• ** Ubwongereza **: Hamagara 999 kubintu byihutirwa cyangwa 101 kubapolisi baho. Hamagara 159 guhuza ishami ryuburiganya rya banki yawe, no kumenyesha uburiganya bwakazi bwimpimbano hamwe na porogaramu zangiza porogaramu kuri ** Igikorwa cyuburiganya (0300 123 2040 / actionfraud.police.uk) ** na ** NCSC (ncsc.gov.uk) **. Reba ** Kwiyandikisha Kurinda CIFAS (cifas.org.uk) **.
• ** Umuryango w’ubumwe bw’ibihugu by’i Burayi **: Hamagara 112 mu bihugu byose bigize Umuryango w’ubumwe bw’ibihugu by’Uburayi, menyesha ako kanya ibiro by’uburiganya bya banki yawe, hanyuma utange raporo mu ishami ry’igipolisi cy’igihugu cy’ibyaha by’icyaha ndetse na CSIRT y’igihugu.
• ** Australiya na Nouvelle-Zélande **: Hamagara 000 muri Ositaraliya cyangwa 111 muri Nouvelle-Zélande. Menyesha akazi n'uburiganya kuri ** Scamwatch (scamwatch.gov.au) **, ** RaporoCyber (cyber.gov.au, 1300 CYBER1) **, hanyuma ubaze ** IDCARE (1800 595 160 muri AU / 0800 121 068 muri NZ) **.
• ** Ubuhinde na Aziya-Pasifika **: Hamagara 112 mubuhinde kubintu byihutirwa hanyuma uhamagare kuri telefone ya ** y'igihugu ya Cyber Crime (1930 / cybercrime.gov.in) ** ako kanya guhagarika transfert ya banki yibeshya. Muri Singapuru, hamagara kuri telefone yo kurwanya **1799) **.

Ibibazo bikunze kubazwa¶

Nakoresheje ububiko bwa GitHub bw'abashaka akazi (git clone ...), yafunguye amadosiye muri VS Code kugirango ayasome, kandi NTAKIGEZE yiruka npm install cyangwa npm start. Ndacyanduye?¶

Bitandukanye `npm install` (ikora `package.json` Inyandiko), kwiruka ubusa `git clone` no gusoma neza `.js` dosiye ntabwo ikora code yonyine Keretse niba ububiko burimo ububi `.vscode/tasks.json` dosiye hamwe `"runOn": "folderOpen"` KANDI ukanze "Yego, nizeye abanditsi" mugihe VS Code yafunguye ububiko. Reba niba a `.vscode/tasks.json` dosiye ibaho imbere muri repo yakoronijwe (`cat /path/to/repo/.vscode/tasks.json`) hanyuma urebe niba `-/.npl` cyangwa `-/.pyp` yaremewe murugo rwawe. Niba ntanumwe ubaho kandi utigeze wiruka `npm`, `yarn`, `python`, cyangwa `node`, sisitemu yawe ntabwo yakoze umushahara: gusiba gusa ububiko bwa clon.

Bigenda bite iyo nakoze ikizamini coding yikizamini imbere muri Docker kontineri (docker compose up) kuri Mac yanjye cyangwa Windows PC? Ikonteneri yarandinze?¶

Biterwa nubunini bwashyizwe imbere `docker-compose.yml` cyangwa i `Dockerfile`. Niba warakoresheje kontineri hamwe na sisitemu yihariye ya dosiye, malware ntishobora kubona kuki yakiriye Chrome cyangwa kwagura MetaMask. Ariko, benshi `Contagious Interview` ububiko burimo a `docker-compose.yml` ibyo rwihishwa-bihuza urugo rwawe rwakira (`volumes: - -/.ssh:/root/.ssh` cyangwa `- -/:/host_home`) cyangwa yiruka hamwe `privileged: true`. Kugenzura `docker-compose.yml` muri repo ako kanya: niba yarashizeho `-`, `$HOME`, cyangwa `/Users`, fata mudasobwa igendanwa yakiriye nkuko byangiritse.

Nigute sheki yaba impimbano niba ari "Cashier's Check" yatanzwe na FedEx Ijoro ryose hamwe n'ikimenyetso cy'amazi hanyuma umubitsi wa banki akabyemera kuri konti?¶

Sheki y'impimbano ya cheque yanditswe ku bubiko nyabwo bwa chimique ukoresheje nimero yemewe na magnetiki `MICR` wino y'imyandikire ya banki nkuru. Umukozi wa banki yumuntu kumadirishya yishami agenzura gusa ko numero ya maritire ifite agaciro kandi sheki isa nkukuri; umubitsi ntashobora kubona imbere yigitabo cyimbere cyimbere kugirango amenye niba koko nimero ya cheque yatanzwe. Gusa iyo ishusho yo kugenzura inyuze muri Federal Reserve clearinghouse (`5 to 10 business days later`) ese banki itanga irabyanga nkimpimbano.

Nshobora kujya muri gereza niba ntabizi nabitse cheque y'akazi mpimbano kandi nkoresha amafaranga make mbere yuko atera?¶

Gushukwa n'uburiganya bwo kugenzura akazi ntibufite umugambi mubisha (`mens rea`), mugihe utabeshye muri banki ukamenyesha uburiganya ishami rishinzwe uburiganya bwa banki na polisi (`IC3` / raporo ya polisi yaho) ako kanya. Ariko, ukurikije amasezerano ya konte yo kubitsa muri banki yawe hamwe na ** yubucuruzi bumwe (`UCC § 4-207 / § 4-214`**

Kuki abashaka akazi bakoze telefone yiminota 30 nukuri kuri Zoom / Google Meet niba ari ba Hackers ba Lazaro?¶

DPRK **`Contagious Interview` (`UNC4899` / `Famous Chollima`. Kuberako umuterimbere umwe ukora akazi kenshi `$50,000 to $2,000,000+` muri DeFi protocole urufunguzo, ububiko bwimikorere ya multisig, cyangwa ibyangombwa byumusaruro wibicu, kumara iminota 30 kumuhamagaro wa videwo kugirango ubemeze gukora `npm install` ku isuzuma ryabo repo ifite inyungu nyinshi kubushoramari kubakinnyi babangamiye.

Byagenda bite se niba "umukoresha" yohereje amafaranga kuri konti yanjye binyuze kuri ACH / Zelle ansaba gukuramo amafaranga cyangwa kugura Bitcoin yohereza kubakiriya babo?¶

Ngiyo ** Amafaranga Amafaranga (`Layering`) ** imikorere. Bitandukanye nimpapuro zigenzura (zisunika mbere yo gutura), niba `$4,000` mubyukuri wageze kuri konte yawe ukoresheje `ACH`, `Zelle`, cyangwa `Wire`, ** ibyo `$4,000` yibwe kuri konte ya banki yibasiwe ninzirakarengane cyangwa gukundana-uburiganya. Niba uyikuyemo cyangwa ukayihindura Bitcoin kuri "umukoresha wawe", abashinzwe kubahiriza amategeko na banki yuwahohotewe bakurikirana amafaranga yibwe kuri konti yawe. Ntukureho cyangwa ngo utere imbere ijana; hamagara ishami ry’uburiganya muri banki yawe hanyuma ubasabe gusubiza ihererekanyabubasha mu kigo cyatangiye.

Kuyobora¶

• Akazi k'impimbano gatanga uburiganya, kugenzura ibikoresho, no kwiba indangamuntu
• Gutanga urunigi npm / PyPI pake kumvikana hamwe niterambere ryakazi urufunguzo rwo kuzunguruka
• Isomo rya kuki yibye, infostealer malware, hamwe no gukuraho passkey
• Fake CAPTCHA KandaFix PowerShell Win + R clipboard malware na Lumma Infostealer ikosora
• Cryptocurrency wallet drain hamwe nimbuto interuro kumvikana
• Uburenganzira bwo gusunika kwishura (APP) uburiganya bwa porogaramu: Zelle, Venmo, hamwe no Kwishyura Byihuse kwigana no gusubiza amafaranga
• Igisubizo cyo kwiba indangamuntu
• Imibare yihutirwa ukurikije igihugu

Inkomoko nubuyobozi¶

• Ibiro bishinzwe iperereza (FBI), Ikigo gishinzwe umutekano n’ibikorwa remezo (CISA), & DoD Cyber Crime Centre (DC3) (Amerika): * Umujyanama uhuriweho: Koreya y'Amajyaruguru (DPRK) Ubukangurambaga Bwubukangurambaga bugamije guteza imbere software (Contagious Interview / BeaverTail / InvisibleFerret) *.
• Umuyoboro wa Palo Alto Igice cya 42 (unit42.paloaltonetworks.com): * Abakinnyi ba Koreya ya ruguru babangamira abashaka akazi abashaka akazi nkabashaka akazi (Contagious Interview Isesengura) *.
• Komisiyo ishinzwe ubucuruzi (FTC) & Federal Reserve Board (Reta zunzubumwe za Amerika): * Inama zumuguzi kuburiganya bwibinyoma, Parcelle Mules, Regulation CC (12 CFR Part 229) Amategeko *.
• Serivisi ishinzwe abenegihugu n'abinjira n'abasohoka muri Amerika (USCIS): *myE-Verify Kwifunga Indangamuntu Kurinda *.
• Ikigo cy'igihugu gishinzwe umutekano wa cyber (NCSC) & Ibikorwa by'uburiganya (Ubwongereza): * Kugabanya ububiko bubi bwa kode mbi hamwe n'uburiganya bwo gushaka abakozi *.