Fa'amatalaga imeli hacked: tulafono fa'asalalau natia ma toe fa'aleleia¶

O lau fa'amatalaga imeli muamua o le ki auivi i lau fa'amatalaga numera atoa, tupe, ma fa'aletulafono. E le pei o se fa'aagafesootai fa'aagafesootai fa'aagafesootai po'o le fa'asalalauina o feso'ota'iga, o le Gmail hacked, Microsoft Outlook / Microsoft 365, Yahoo, Apple iCloud Mail, po'o le ProtonMail account e tu'uina atu i le tagata osofa'i le malosi e kiliki ai le "Gogalo le Fa'amatalaga" i au faletupe, fefa'ataua'iga o tupe, fefa'ataua'iga litaea, faitoto'a o lafoga, ma fa'aoso ao. O le mea e sili ona mata'utia, na'o le suia o lau fa'aupuga imeli ma fa'aola le Two-Factor Authentication (2FA) e seasea ona kikiina se tagata osofa'i fa'apitoa mai se pusa meli na hacked. I totonu o le 30 sekone o le talepeina i totonu o se imeli, e totōina e tagata osofa'i fa'aonapo nei ni vaega se lima o le fa'amaoni lemu i tua: natia ** Inbox Sweep and Forwarding Rules** (e masani ona ta'ua. ., .., pe [Blank] e fa'anofo lemu imeli-seti sa'o i le Trash pe RSS Feeds faila ina ia e le va'aia lava i latou), Tolu-Party OAuth Application Grants (eM Client, Thunderbird, po o le pepelo Google Docs polokalame o lo'o fa'atumauina atoa le API faitau/tusi le avanoa e aunoa ma le mana'omia o lau fa'aupuga), ** Fa'atagaga Pusa Meli Tu'ufua**, ** Fa'amatalaga Fa'amatalaga (IMAP/SMTP)**, ma Suiga Imeli / Numera Telefoni Toe Faaleleia.

Afai o se imeli fetuutuuna'i e aofia ai fa'amata'u fa'afuase'i o sauaga fa'aletino, tulituliloa, sauaga i totonu o aiga, po'o le fa'amalosi i se tamaititi, vala'au lau numera fa'afuase'i i le lotoifale (911 i le Iunaite Setete ma Kanata, 112 i totonu o le Iuni a Europa, 999 i Peretania) pe faʻafesoʻotaʻi la matou lisi o faʻasalalauga faavaomalo numera fa'afuase'i vave lava. Mo tagata fa'atau uma ma kamupani fa'atau pusa meli, fa'atino le fa'asologa o le tapeina o la'asaga 6 i lalo i le fa'atonuga tonu.

Fai nei loa¶

1. Aua le suia lau uputatala mai le Windows PC po o le Mac e tasi pe afai e te masalomia o se Infostealer virus: Afai na hack lau imeli e ui lava ua uma ona e kiina le Two-Factor Authentication (2FA), atonu o loo i ai i lau komepiuta se Infostealer malware infection (e pei o Lumma Stealer, RedLine, poʻo Atomic macOS Stealer) poʻo se faʻaoga leaga o Chrome/Edge browser e faʻapipiʻi ai le Chrome/Edge browser.SAPISID/SID luga ole Google po'o ESTSAUTH luga ole Microsoft). Filifili se telefoni mama (iOS poʻo le Android) e faʻatino ai lau suiga o upu faʻamaonia ma le faʻamamaina o le saogalemu i le taimi nei.
2. Su'e ma toe fa'afo'i lau Email Toe Fa'aleleia, Numera Telefoni Toe Fa'aleleia, ma masini MFA Authenticator A'O LE'I suia lau fa'aupuga (po'o totonu ole 30 sekone mulimuli ane): Fa'apipi'i loa e le au osofa'i a latou lava numera telefoni mumu, tuatusi imeli fa'aaoga, po'o le rogue Authenticator app i au tulaga saogalemu. Afai e te suia lau faʻaupuga e aunoa ma le tapeina o le telefoni faʻaleleia a le tagata osofaʻi poʻo le rogue passkey, o le a naʻo le kiliki e le tagata osofaʻi "Gogalo le Upu" 10 sekone mulimuli ane ma loka * oe * i fafo tumau.
3. Fa'amalosi-fa'amuta uma taimi e ulufale ai i totonu, kuki su'esu'e faifai pea, ma Fa'amatalaga Fa'amatalaga i le lalolagi atoa: O le suia o se fa'aupuga e le vave fa'aumatia fa'ailoga IMAP fe'avea'i po'o kuki fa'ainitaneti o taimi i luga ole laiga. Kiliki manino "Saini i fafo mai masini uma / Soloia sauniga uma" i lau Google, Microsoft, Yahoo, poʻo le Apple security dashboard, ma tape uma 16-character App Password i luga o le teugatupe.
4. Tatala se su'esu'ega i luga ole laiga (e le o se meli meli feavea'i) ma tape uma Tulafono o Pusa Pusa natia, Filters, Auto-Forwarders, ma Tulafono Salu: Meli feavea'i (Gmail pe Outlook i luga ole iOS/Android) e masani ona natia tulafono fa'aauala i luga ole laiga. Tatala le fa'atulagaina o au imeli i luga o le komepiuta ma asiasia Filters and Block Addresses, Forwarding and POP/IMAP, ma Rule / Sweep. Ave'ese so'o se tulafono e lafoa'i meli i fafo pe otometi ona feavea'i imeli e iai upu fa'apei "bank", "code", "reset", "security", "wire", "invoice", pe "crypto" i totonu o le Trash, Archive, pe RSS Feeds faila.
5. Se'e Tolu-Party OAuth Feso'ota'i Apps ma Sui Pusa Meli: Su'e i lau teugatupe Third-Party Apps & Services (Google) po'o Apps ma Au'aunaga na e tu'uina atu i ai (Microsoft/Yahoo) ma soloia app ta'itasi ma Mail.Read, Mail.ReadWrite, pe Gmail API fa'atagaga, fa'aopoopo i ai le siaki ** Fa'ataga le Avanoa i Lau Teugatupe (Tu'ufua)** ina ia le mafai e le tagata osofa'i ona faitau lau pusa meli e ala i se fa'ailoga OAuth e matua'i le amana'ia suiga o upu fa'aigoa.
6. Siaki lau Trash (Bin), Sent, ma Spam faila i le taimi lava e iloa ai po o fea tala tau tupe poʻo faʻamatalaga crypto ua uma ona toe setiina e le tagata osofaʻi: E tape e le au osofaʻi faʻailoga saogalemu mai lau faletupe, Coinbase/Binance, Amazon, PayPal, poʻo le Steam sekone pe a uma ona maua le 6-numera faʻamaonia code. Tatala lau Trash ma Sent faila i le taimi nei: imeli-seti upu uma o loʻo nofo i lau Trash o se tala ua uma ona soli e le tagata osofa'i pe taumafai e soli.

Laau fa'ai'uga: toe fa'aleleia ma fa'amama fa'amalosi i tua¶

Mulimuli i lea la'asaga ma lea la'asaga fa'ata'ita'i la'au pe o lo'o avanoa pea i lau pusa meli pe ua loka atoa e le tagata osofa'i:

flowchart TD
    A["Masalo pe Fa'amaonia Fa'amatalaga Fa'amatalaga Imeli"] --> B{"E mafai lava ona e ulufale i lau imeli i le taimi nei?"}
    B -->|"Ioe: O lo'o maua pea la'u avanoa"| C["Su'e i se Telefoni Mamā (Aloese PC e ono A'afia)"]
    C --> D["1. Aveese le Attacker's Recovery Phone, Toe Fa'aleleia Imeli & Rogue MFA Passkeys"]
    D --> E["2. Suia le uputatala i le Unique 20+ Char Passphrase & Enable Phishing-Resistant 2FA"]
    E --> F["3. Kiliki 'Sign Out of All Devices' & Ave'ese uma 16-Char App Passwords"]
    F --> G["4. Tatala le Meli i luga o le Desktop: Fa'amama le Fa'auluina o Mea Natia, Filifiliga, Salu Tulafono & Fa'atonu."]
    G --> H["5. Fa'ate'a le OAuth Third-Party Apps & Su'esu'e Lapisi/Auina Kosi mo Fa'amatalaga i fafo ua soli."]
    B -->|"Leai: Ua suia e le tagata osofa'i upu fa'amaonia ma le telefoni/MFA"| I{"O le a le ituaiga imeli e loka?"}
    I -->|"Galuega / A'oga / Vaega Autasi (@company.com)"| J["Faʻafesoʻotaʻi le IT Admin i le taimi lava lea: Pule e mafai ona toe setiina le MFA, Aveese Tokeni & Toe Faʻafoʻi le Avanoa ile 60 Sekona e ala ile Admin Console"]
    I -->|"Gmail patino / Outlook.com / Yahoo / iCloud"| K["Fa'asolo le Pepa Fa'afo'i Fa'amatalaga otometi mai lau Tala Fa'asolopito o le Fale Wi-Fi IP ma le Su'esu'ega/ Telefoni"]
    K --> L["Valaau vave i au Faletupe, feaveai feaveai & Crypto Fetufaaiga e ala i le telefoni e fa'a'aisa ai fa'amatalaga o lo'o nonoa i lena imeli"]

Vaega 1: Su'etusi fa'amama fa'amama e ala ile kamupani imeli (Gmail, Outlook/M365, Yahoo, iCloud)¶

E teuina e so'o se kamupani imeli tele tulafono fa'asalalau, filiga, fa'ailoga OAuth, ma sui o le pusameli i fa'ameamea laiti. E tusa lava pe e te faʻaogaina le Apple Mail poʻo le Outlook Desktop i luga o lau komepiuta, e tatau ona e ** e te ulufale i totonu o le upega tafaʻilagi aloaia a le kamupani i luga o le masini komepiuta ** (pe talosagaina le "Desktop Site" i lau suʻesuʻega feaveaʻi) e vaʻai i nei faʻatulagaga-itulau.

Sa'ili'iliga Auiliiliga 1: Fa'amamāina ole Google/Gmail Account¶

Pe a fa'amamāina se fa'amatalaga Gmail po'o Google Workspace fa'aletonu, galue i nei laupepa tonu e fitu e aunoa ma le fa'ase'eina o se tasi:

1. Suetusi Saogalemu & Pasi (myaccount.google.com/security):
   • Kiliki Passkeys and security keys: O le au osofa'i e vave ona lesitalaina se kofe fa'akomepiuta po'o fa'amautu fa'amaonia i luga o latou lava su'esu'ega ina ia mafai ai ona latou toe ulufale i totonu ma leai se fa'aupuga ma leai se SMS vave. Ave'ese so'o se passkey e te le iloa ma le 100 pasene mautinoa.
   • Kiliki 2-Step Verification -> siaki Authenticator, Google Prompt devices, Recovery phone, ma Backup codes. Kiliki Fausia tulafono fou e vave fa'aleaogaina so'o se 8-numera fa'amaufa'ailoga tulafono fa'apipi'i e le tagata osofa'i.
2. ** Fa'aleaga upu fa'aoga Active App (myaccount.google.com/apppasswords)**:
   • O le App Password o se code passcode e 16 mataitusi e mafai ai e se tagata fa'atau meli IMAP (pei o Thunderbird po'o se fa'ailoga Python a le hacker) ona la'uina mai lau pusameli atoa e fa'avavau ** a'o fa'aalo atoa le 2-Step Verification**. Ave'ese uma upu fa'aoga o lo'o lisiina.
3. ** Soloia So'oga OAuth Vaega Tolu (myaccount.google.com/connections)**:
   • Va'ai mo so'o se talosaga ua tu'uina atu le avanoa i le Gmail, Google Drive, po'o le Google Contacts (e masani ona fa'aogaina e tagata osofa'i meli fa'atau meli e pei o eM Client, Newton Mail, Cleanfox, po'o tusitusiga OAuth masani). Kiliki le app -> Tape uma feso'ota'iga e te maua ma [App Name].
4. Siaki Gmail Accounts and Import Tab (Mail Delegation & Reply-To Aveesea):
   • I Gmail i luga o le komepiuta komepiuta, kiliki le Gear icon -> Silasila i faatulagaga uma -> Accounts and Import.
   • I lalo o le Fa'ataga lau fa'amatalaga, fa'amautinoa o lo'o lisi atu tuatusi imeli ZERO. E mafai e se tagata fa'atagaga ona faitau, lafo, ma tape au imeli e aunoa ma le iloaina o lau fa'aupuga.
   • I lalo o le **Auina le meli e pei o **, kiliki faʻasaʻo faʻamatalaga i tafatafa o lou lava igoa ma faʻamaonia e leʻi faʻaofi e le tagata osofaʻi se mea lilo Specify a different "reply-to" address (mo se faʻataʻitaʻiga, seti lau Tali-I i yourname.company@gmail.com po'o se itu e foliga mai e osofa'i, o so'o se taimi lava e tali mai ai se tasi i au imeli fa'aletulafono, o la latou tali e alu i le tagata ta'avale nai lo oe).
5. Siaki Gmail Filters and Blocked Addresses Tab:
   • Va'ai toto'a i faamama uma. E masani ona faia e tagata osofaʻi filiga faʻafetaui from:(a|e|i|o|u) pe size > 0 pe has:attachment po o upu autu pei invoice, wire, bank, security, alert, code ma le gaioiga Skip the Inbox (Archive it), Mark as read, Delete it, po o Forward it to:. Aveese uma faamama e le masani ai.
6. Siaki Gmail Forwarding and POP/IMAP Tab:
   • Fa'amaonia le Fa'asolo atu ua seti i le Fa'amalo le lafoa'i, aveese so'o se tuatusi lafoa'i e le o iloa mai le lisi pa'u i lalo, ma seti le IMAP access i le Fa'agata IMAP (se'i vagana ua e fa'aogaina fa'apitoa se tagata fa'apipi'i desktop).
7. Siaki Google Drive Trash & Google Takeout History:
   • E masani ona fa'aosoina e le au osofa'i se Google Takeout (takeout.google.com) archive e sii mai ai a .zip o au imeli uma, Google Photos, ma Google Drive pepa, e aofia ai lafoga toe faafoi ma lisi o upu faataga. Asiasi takeout.google.com i le taimi nei: afai e te vaʻai i se faʻatau atu o loʻo galue pe maeʻa e te leʻi talosagaina, kiliki ** Faʻagata le auina atu i fafo ** ma vaʻai tonu po o fea faʻamaumauga o faʻamaumauga na afifiina.

Sa'ili'iliga Auiliiliga 2: Fa'amamāina o se Teugatupe a Microsoft Outlook.com / Hotmail / Microsoft 365¶

Microsoft accounts (@outlook.com, @hotmail.com, @live.com, @msn.com, ma pusameli a Microsoft 365 Exchange Online) e iai ni nofoaga lalafi tulaga ese e fa'aogaina e tagata osofa'i i le taimi o Fefa'ataua'iga Imeli Pisinisi (BEC) ma fa'atauga a tagata fa'atau:

1. ** Le Natia RSS Feeds ma Conversation History Mailei faila**:
   • I totonu o Outlook, e seasea ona faʻafeiloaʻi e tagata osofaʻi imeli na taofia ile autu Deleted Items faila ona o tagata e siaki Deleted Items. Nai lo lena, latou te faia se Outlook Rule e igoa . pe 1 o lo'o fa'asolo atu imeli ulufale i totonu o le RSS Feeds, Archive, po o Conversation History faila ma maka i latou ua faitau. Siaki faila uma i lou itu tauagavale, aemaise lava RSS Feeds, taimi nei.
2. Su'e lua Rules MA Sweep i Outlook Web (outlook.live.com pe outlook.office.com):
   • Kiliki le Settings Gear (pito i luga taumatau) -> Meli -> Tulafono. Ave'ese so'o se tulafono e te le'i faia.
   • Matau le pusa siaki i le pito i lalo o le tulafono a le tagata osofaia: Stop processing more rules. E siaki e le au osofa'i le pusa lea i luga o latou tulafono pito i luga ina ia leai se tasi o au tulafono fa'aletulafono e alu.
   • O le isi, kiliki Meli -> Salu ma Meli -> Imeli leaga -> Tagata auina atu ma tuatusi. E masani ona faʻaopoopo e le au osofaʻi @microsoft.com, @google.com, @apple.com, @chase.com, @bankofamerica.com, ma @coinbase.com i lau lisi Auina atu ma Nofoaga Fa'asao ina ia fa'aoso fa'aola pe alu le leoa i le Junk. Fa'amama lau lisi o Tagata e Fa'asalaina o so'o se kamupani fa'atulafonoina.
3. Siaki Mail -> Forwarding and IMAP:
   • Ia mautinoa Enable forwarding e le'o siaki. Afai o le tuatusi imeli a le tagata osofaʻi o loʻo nofo i totonu o le pusa ma "Keep a copy of forwarded messages" e le'i siakiina, o imeli uma lava na lafo atu ia te oe na lafo atu i le tagata ta'avale ma tape ese mai lau pusameli ae le'i lavea lau Pusa meli.
4. Mo Fa'atonu Microsoft 365 Autasi: Fa'agaoi le PowerShell e Su'e Tulafono Natia MAPI / Pisinisi Pusa (MFCMAPI):
   • O lo'o fa'aogaina e le au fa'amata'u fa'amata'u a le BEC le Fetufa'aiga Web Services (EWS) API po'o MFCMAPI e fatu ai tulafono fa'aliga leaga ile Pusa meli (e ala ile tapeina ole PR_RULE_MSG_NAME ma PR_RULE_MSG_PROVIDER MAPI properties) e e le o fa'aalia i le Outlook Web GUI po'o le tulaga masani o le Exchange Admin Center.
   • E tatau ona fa'afeso'ota'i se Pule Fa'atonu i le Exchange Online PowerShell ma tamo'e:

     Get-InboxRule -Mailbox victim@yourdomain.com -IncludeHidden | Format-List Name,Enabled,Description,ForwardTo,ForwardAsAttachmentTo,RedirectTo,DeleteMessage,MoveToFolder
     

   • Fa'aopoopo le -IncludeHidden fu'a o lo'o fa'aalia tulafono fa'amalosi MAPI o lo'o natia i totonu o le pusameli'i le laulau Fa'atasi (FAI), lea e mafai ona faamamaina e ala i Remove-InboxRule -Mailbox victim@yourdomain.com -Identity "<RuleID>" po'o le tatalaina outlook.exe /cleanrules.
   • Ia asiasia foi Tulafono o Femalagaa'iga o Fefa'ataua'iga (Tulafono Fa'asolo o Meli) e ala i Get-TransportRule: afai na fa'afefe e le tagata osofa'i se fa'amatalaga a le Pule Fa'atau, atonu na latou faia se tulafono fa'asolo o meli i le lalolagi atoa nai lo le tulafono a le pusameli.

Vaega 2: O le a le mea e fai pe a e loka atoa i fafo (Atacker suia upu faʻaulu & 2FA)¶

Afai ua uma ona suia e le tagata osofaʻi lau upu faʻaulu, sui lau numera telefoni toe faʻaleleia ia latou lava, ma ki a latou lava Authenticator app poʻo hardware key, o minute uma e taua ona o loʻo faʻamalosi e le tagata osofaʻi au faʻamatalaga fesoʻotaʻi aʻo e lokaina.

Laasaga 1: Aveese Muamua le Fa'atupe a le Tagata osofa'i (15 Minute Muamua)¶

Aua e te fa'aaluina le tolu itula e tau ai se fa'afoma'i fa'afo'i fa'a-imeli fa'atotonu a'o fa'amama e le tagata ta'avale lau teugatupe i le faletupe e fa'aaoga ai lau pusa meli ua faoa:

1. Valaau Au Faletupe, Fa'asalalau Kata Fa'aaitalafu, ma Fa'atauga Fa'afaigaluega e ala ile Telefoni:
   • Ta'u i le Vaega o Faiga Fa'atauva'a: "O la'u tuatusi imeli muamua [your@email.com] ua fa'afefeteina ma o lo'o loka nei a'u i fafo. Fa'apipi'i loa se upu fa'aupuga / puipuiga malu i luga o la'u fa'amatalaga, fa'ate'aina taimi i luga o le upega tafa'ilagi / feavea'i, ma aveese lena tuatusi imeli mai le toe setiina o upu fa'apolopolo a le tagata lava ia."
2. Loka lau Teugatupe feavea'i e ave ai le telefoni fe'avea'i e fa'asaga i se su'i SIM e mulimuli ai:
   • I totonu o lau pusameli hacked, e mafai e le tagata osofaʻi ona faitau lau masina AT&T, Verizon, T-Mobile, Rogers, Vodafone, poʻo le O2 pili, tuʻuina atu ia i latou lau numera telefoni feaveaʻi ma tuatusi pili. Valaau vave lau ave e fa'amaonia lau Numera Transfer PIN / Port Freeze ma Account Passcode ua loka i lalo.
3. ** Fa'a'aisa lau Cryptocurrency Fetufaaiga Fa'amatalaga (Coinbase, Binance, Kraken, Gemini)**:
   • O le tele o fefa'ataua'iga tetele e maua ai se kiliki e tasi po'o se telefoni fa'afuase'i Loka Fa'amatalaga pe a fa'aletonu lau imeli (mo se fa'ata'ita'iga, vala'au Coinbase loka fa'afuase'i fa'afuase'i i +1 (888) 908-7930 i le US/International po'o +44 808 168 4635 i Peretania).
4. ** Suia le tuatusi imeli resitala i luga o teugatupe uma e mafai ona e ulufale i totonu **:
   • Atonu o lo'o e saini pea ** ile Amazon, PayPal, Venmo, Steam, Discord, Apple ID, ma lau fa'aupuga i luga o lau telefoni i le taimi nei. Fausia se fa'amatalaga imeli fa'afuase'i fou ma mama (mo se fa'ata'ita'iga, i luga o le ProtonMail po'o se Gmail fou fa'amautu i se ki fa'aoga) ma alu loa i totonu o le fa'aoga o au polokalama o lo'o i totonu e sui ai a latou imeli fa'afeso'ota'i ese mai le tuatusi hacked a'o le'i toe fa'afo'i e le tagata osofa'i.

Laasaga 2: Faʻafefea ona pasi le Algorithms Toe Faʻaleleia Faʻamatalaga Faʻapitoa (Google, Microsoft, Yahoo)¶

Mo fa'amatalaga imeli a tagata fa'atau (@gmail.com, @outlook.com, @hotmail.com, @yahoo.com), o sui lagolago a tagata e matua fa'asaina e fa'ainisinia fa'atonutonu mai le toe setiina ma le lima o fa'aupuga po'o le pasia o le 2FA i luga o le telefoni (e puipuia ai fa'ainisinia fa'aagafesootai). Nai lo lena, o le toe faʻaleleia o loʻo pulea e se otometi ** Risk & Identity Scoring Engine**. Ina ia fa'ateleina lau sikoa fa'atuatuaina ma fa'aoso le natia "7-Day / 30-Day Security Hold Override":

1. TULAFONO FAʻATAU: Auina atu le Pepa Toe Faʻaleleia mai lau Masini Talafaasolopito Saʻo, Browser, ma le tuatusi IP Wi-Fi ile fale:
   • Aua le tamoe accounts.google.com/signin/recovery pe account.live.com/acsr mai se fa'amalama su'esu'e incognito fou i luga o fa'amatalaga feavea'i po'o se VPN.
   • Fa'aoga le komipiuta sa'o, desktop, po'o le telefonipoto ma le sa'o mea su'esu'e (fa'atasi ai ma kuki fa'ato'atoa/teu fa'apitonu'u) lea na e saini ai i totonu o lena imeli imeli i aso uma mo le tausaga ua tuana'i, a'o fa'afeso'ota'i i lou fale masani po'o le ofisa Wi-Fi router (ASN ma geolocation fetaui). O le toe faʻaleleia algorithm e mamafa tele faʻailoga tamatamailima masini (DeviceID) ma talafa'asolopito IP subnets.
2. Google / Gmail Toe Fa'aleleia (accounts.google.com/signin/recovery):
   • E tusa lava pe na suia e le tagata osofaʻi lau telefoni toe faʻaleleia ma toe faʻaleleia le imeli i sekone talu ai, ** Google taofi lau numera telefoni faʻaleleia muamua ma le tuatusi imeli toe faʻaleleia muamua e avea ma mea aoga mo le toe faʻaleleia mo le 7 aso faʻakalena (168 itula)** pe a uma ona suia e se tagata osofaʻi.
   • Pe a uunaia i le taimi signin/recovery, kiliki "Fa'ata'ita'i se isi auala" se'ia ofo mai e lafo se code i lau uluai numera telefoni po'o le mua toe fa'aleleia tuatusi imeli, pe fa'aoso lau telefoni Android/iPhone ua uma ona resitala e ala i le Google Prompt.
   • Afai e te lesitala ile Google One (Paid Cloud Storage) poʻo le YouTube Premium / YouTube Channel:
     • Totogi Google One tagata fai saofaga e maua le avanoa e ola ai tagata Google One Support (one.google.com/support) o ai e mafai ona fa'ateleina tala loka i totonu.
     • Afai o lau Google account hacked e ona le YouTube Channel, faafesootai @TeamYouTube i X (muamua Twitter) fa'alaua'itele i le taimi lava lena. E le pei o Gmail masani, @TeamYouTube E tu'uina atu e le Creator Support se Hacked Account Escalation Form fa'ata'ita'iina e tagata Google enisinia fa'alagolago-ma-saogalemu e fa'amaonia lau ulua'i Channel ID (UC..), AdSense ID, ma tu'u i luga le tala fa'asolopito o le IP e aveese fa'aletino passkeys/MFA a le tagata osofa'i ma toe fa'afo'i lau Google/Gmail account atoa i totonu ole 24 i le 72 itula.
3. Microsoft Outlook / Hotmail / Xbox Account Recovery (account.live.com/acsr):
   • Muamua, taumafai e saini i totonu ma kiliki "E leai sau mea nei" i le 2FA mata: afai e iai sau 25-karacter Microsoft Recovery Code na sefe i le taimi na e setiina ai lau teugatupe, o le ulufale atu e mafai ai ona e suia le faʻamatalaga saogalemu a le tagata osofaʻi (i lalo o le faʻatonuga a Microsoft 30-aso faʻamatalaga saogalemu e sui ai le taimi faʻatali, i le taimi e poloka ai le tagata osofaʻi).
   • Pe a fa'atumu le Microsoft Account Recovery Form (account.live.com/acsr) mai lou fale Wi-Fi IP:
     • Tuuina atu ** laina autu sa'o** o le 3 i le 4 imeli lata mai na e lafoina (fai i uo po'o aiga e su'e a latou lava pusa meli ma faitau atu ia te oe le sa'o o le tagata-mo-gaioiga laina autu o imeli na e lafoina talu ai nei).
     • Tuuina atu tuatusi imeli sa'o o feso'ota'iga na e imeli talu ai nei.
     • Tuuina atu lau Xbox Console Hardware LiveDeviceID / Serial Number if you ever signed into an Xbox with that Microsoft account, and the last 4 digits and expiration date of any credit card ever used on Microsoft Store / Skype / Office 365.

Phase 3: Damage control for secrets exposed inside your old emails¶

Once you have locked the attacker out and cleaned all rules and OAuth tokens, you must confront a sobering forensic reality: if the attacker had IMAP, OAuth, or web access to your mailbox for even 15 minutes, assume they ran an automated keyword search across your entire historical email archive.

Attackers do not read your 50,000 old emails manually. Their automated scripts immediately search your inbox for these exact ten high-value keywords and download every matching message and PDF attachment:

1. "seed", "mnemonic", "recovery phrase", "24 words", "wallet", "Coinbase", "Binance", "Ledger": If you ever emailed yourself a photo, text note, or encrypted zip of a cryptocurrency seed phrase or 2FA backup code, consider that wallet compromised immediately and move all funds to a brand-new hardware wallet.
2. "tax", "1040", "W-2", "1099", "SSN", "Social Security", "passport", "driver license", "mortgage", "closing": Loan applications, apartment leases, and CPA emails inside your inbox almost certainly contain PDFs with your unredacted Social Security Number (or national ID), date of birth, and driver's license photo. Place an immediate Credit Freeze with Equifax, Experian, and TransUnion (see our guide on identity theft response).
3. "password", "login", "credentials", "welcome to", "backup codes": Search your own inbox right now for the words password ma backup code, tape na imeli fa'amatalaga mata'utia pe a uma ona fesuia'i upu ta'i tasi o lo'o ta'ua i totonu.
4. "invoice", "ACH", "wire", "routing", "escrow", "closing costs", "docusign": Afai o loʻo e i le ogatotonu o le faʻatauina o se fale, totogi se konekarate, poʻo le faʻatautaia o se pisinisi, o loʻo i ai nei i le tagata osofaʻi ni kopi o au faʻamatalaga moni ma faʻamatalaga faʻatautaia o faletupe ma o le a taumafai e faʻafoliga oe poʻo lau kamupani igoa e gaoi le faʻaliliuina o le uaea. Fa'afeso'ota'i lau kamupani fa'atau fanua, ofisa fa'atau, po'o tagata fa'atau i luga o le telefoni vave e lapata'ia i latou.

Fesili e fai soo¶

Punavai ua siaki¶

• Cybersecurity and Infrastructure Security Agency (CISA, Iunaite Setete): Puipuia Mai Pisinisi Imeli Fetuuna'i (BEC), OAuth Fa'aaoga sese, ma Phishing-Resistant MFA Guidance (cisa.gov/MFA ma cisa.gov).
• Microsoft Security Response Center & Defender Threat Intelligence (United States): * Tali atu i se Fa'amatalaga Imeli Fa'aletonu i totonu o le Microsoft Defender mo le Office 365 (Tulafono Pusa Pusa Natia -IncludeHidden, OAuth Consent Grants, ma le Soloia o Sauniga)* (learn.microsoft.com/en-us/defender-office-365/responding-to-a-compromised-email-account).
• Google Account Security & Workspace Admin Help (United States): Secure a Hacked or Compromised Google Account, OAuth Third-Party Connections, ma Advanced Protection Program (support.google.com/accounts/answer/6294825).
• National Cyber ​​​​Security Center (NCSC, United Kingdom): * Toe Fa'afo'isia o se Fa'amatalaga Imeli ma Fa'aitiitia le Tulaga Fa'aauauina o Tulafono Fa'asalalau Imeli* (ncsc.gov.uk).
• Federal Trade Commission (FTC, United States): O le a le mea e fai pe a fai e taufetuli lau Email Account (consumer.ftc.gov).
• Australian Cyber ​​Security Center (ACSC / ASD, Ausetalia): * Puipuia Faamatalaga Imeli ma Su'esu'eina Tulafono Le Fa'atagaina o Pusa meli* (cyber.gov.au).

Taiala fa'atatau¶

• Phishing ma tala fa'aletonu
• MFA phishing ma le fili-i-le-ogatotonu ala
• loka MFA ma toe fa'amaonia
• Data breach response and password leaks
• Malware, ransomware, ma fa'ama'i pipisi
• Suiga SIM