Koontada LinkedIn ee la jabsaday ama Bogga Shirkadda ee la afduubay: Joojinta khiyaanada shaqaaleysiinta been abuurka ah iyo soo kabashada gelitaanka maamulka¶

Ogaanshaha in jilaaga khatarta ahi uu afduubay maamule la xaqiijiyay, injineer software, ama shaqaaleyeeyaha shirkadda LinkedIn profile, ama la wareegay Super Admin xakamaynta rasmiga ah ee LinkedIn Bogga Shirkadda, waa badbaado shirkadeed oo xawaare sare leh iyo xaalad degdeg ah oo sumcad leh. Si ka duwan jabsiga warbaahinta bulshada ee macaamiisha caadiga ah, la wareegitaanka akoontada LinkedIn (ATO) waxaa daqiiqado gudahood ku soo hubeeya kooxo abaabulan oo dambiyada internetka ah (Lazarus Group / Contagious Interview, faraantiyada shaqada jeegaga been abuurka ah, iyo B2B qaansheegta been abuurka ah) si loo dhajiyo been abuur *" fog $120k Kaaliyaha / Horumariyaha" liisaska shaqada *** ee ku geliya codsadayaasha qiimeynta koodka la taabtay, dalbada lacag-bixinaha jeegga asalka ah, ama ku daadiya tobanaan kun oo doolar oo aan la fasaxin LinkedIn Manager Campaign (Ads ku bixi kaarka deynta ee shirkadda.

Haddii la wareegiddu ay ku lug leedahay baad, hanjabaad toos ah oo ku wajahan badbaadada jidhka, ama khiyaamo maaliyadeed oo baaxad leh, wac booliiska deegaankaaga ama nambarka xaaladaha degdegga ah (911 gudaha Mareykanka iyo Kanada, 112 guud ahaan Midowga Yurub, 999 gudaha Boqortooyada Ingiriiska; eeg nambarada degdega ah) oo fayl gareeya warbixin dembiyeedka internetka oo degdeg ah. Tix-raac-tix-raacu wuxuu hagayaa walaalaheen la wareegidda akoonnada warbaahinta bulshada iyo jabsiga, Baraha bulshada ee phishing iyo khiyaanada iska dhigistaiyo kanaalka abuuraha ee la afduubay ee crypto scam livestreams markaad fulinayso xogta gaarka ah ee LinkedIn iyo borotokoolka soo kabashada bogga Shirkadda ee hoose.

Hadda samee tan¶

1. ** Hubi in "Super Admin" oo saaxiib ah oo badbaadaya uu weli marin u leeyahay Bogga Shirkadda LinkedIn (0 to 2 minutes.** Bogga Shirkadda LinkedIn ma laha magac isticmaale iyo sir gaar ah; waxa lagu maamulaa iyada oo loo marayo gelitaanka doorka ku salaysan ee ku xidhan profile-ka gaarka ah ee shaqaalaha gaarka ah. Haddii ** xitaa hal qof oo la shaqeeya oo aan tanaasul lahayn uu weli haysto Super Admin Door , si degdeg ah ha u furaan Bogga Shirkadda -> dhagsii ** Settings ( Gear Icon) -> Maamul maamulayaasha, oo dhagsii ** Qashinka Qashinka (Remove)* sumadda ku xigta magaca fulinta/shaqaalaha la jabsaday IYO wax kasta oo damiir laawayaal ah oo Super Admins ah oo lagu daray.
2. ** Jooji kaadhka deynta ee shirkadda ama akoontada bangiga ee ku lifaaqan Maareeyaha Ololaha LinkedIn (linkedin.com/campaignmanageriyo Shaqaaleeyaha LinkedIn (Recruiter Corporate / LiteIsla markiiba $5,000-per-day Ololaha xayaysiisyada crypto/malware waxaa lagu soo dalacayaa kaarkaagii Amex/Visa ee shirkadda ee badbaadisay, ama ka dhoofinta xogtaada musharaxa oo dhan LinkedIn Recruiter.
3. Haddii aad weli qayb ahaan gasho akoonkaaga LinkedIn ee gaarka ah ee ku jira abka taleefankaaga gacanta, gal Settings -> Sign in & security -> Where you're signed in oo ku dhufo End all sessions KA HOR INTAAN BADAN AQOONSIGAAGA SIIRKA AH. Haddii hackerku kaa xado li_at Kukiga fadhiga biraawsarka iyada oo loo marayo infostealer malware ama Adversary-in-the-MiddleAiTM) bogga phishing-ka, beddelidda eraygaaga sirta ah adiga oo aan joojin fadhiyada firfircoon mararka qaarkood waxa ay ka tagtaa calaamadihii mobilada/API ee jira.
4. ** Hubi Settings -> Sign in & security -> Email addresses iyo Phone numbers si loo eego haddii jabsadayhu uu ku daray iimaylka gubanaya sare (@rambler.ru, @firstmail.ltd, @proton.me, @outlook.comoo ka dhigay Primary.** Haddii weeraryahanku uu hore u beddelay iimaylkii hore oo ay shideen xaqiijinta laba-talaabo ah (2SV), ha ku abuurin koonto LinkedIn cusub iimaylkaaga shaqada (abuurista akoon cusub isla ciwaanka iimaylka waxay jebinaysaa isku xirka xogta LinkedIn ee profile-kii hore ee UID). Taa beddelkeeda, si toos ah u aad Foomka Soo-kabashada Aqoonsiga Dawladda ee LinkedIn Persona ee qaybta 1 ee hoose.
5. ** Ku dhaji Digniinta Khayaanada Dadweynaha ee degdega ah guud ahaan website-kaaga rasmiga ah, X/Twitter, iyo shaqaalaha badbaaday LinkedIn waxay quudinaysaa dadka shaqo doonka ah inayan soo dejin faylasha, bixinta kharashka qalabka, ama u dirin shatiga darawalnimada/SSNs shaqo kasta oo lagu dhejiyo koontada la jabsaday. "Recruiting at [Company]" calaamad, saacad kasta oo aamusnaan ah waxay ogolaataa daraasiin shaqo-doon ah in lagu khiyaameeyo magaca shirkaddaada.
6. ** Ka baadh goobta shaqada ee shaqaalaha la dhibay ee Infostealer malware (RedLine, Lumma, Stealcama kordhinta Chrome xaasidnimada ah (fake AI LinkedIn scrapers / ChatGPT outreach extensions)** Waa ka dhamaatay 65 percent Shaqaalaysiinta iyo fulinta LinkedIn la wareegitaanka maaha sababtoo ah adeegsaduhu wuxuu ku qoray erayga sirta ah ee goobta phishing-ka, laakiin sababtoo ah waxay ku rakibeen kordhinta Chrome-ka ee qallafsan iyagoo ballanqaadaya * "Automated LinkedIn Lead Generation / Email Finder"li_at Kukiyada sugida fadhiga** mar kasta oo ay furmaan linkedin.com.

Geedka go'aanka: profile-ka shakhsi ahaaneed ee LinkedIn ee la jabsaday vs. La afduubay ee Shirkadda LinkedIn vs. clone shaqaaleeyste been abuur ah¶

Raac socodka shaqada ee laanta si aad u soo kabsato xakamaynta ku salaysan hantida la jabsaday.

flowchart TD
    A["Gurmadka Amniga LinkedIn"] --> B{"Waa kuwee hantida LinkedIn la jabsaday?"}
    B -->|"Xog-hayaha Guud ee Shakhsi ahaaneed / Shaqaaleeyaha waa la jabsaday (la xiray, iimaylka/2FA waa la bedelay)"| C["Ha ku diwaangelin akoon LinkedIn cusub iimaylkaaga hore -> Fur LinkedIn 'ka warbixi akoon la jabiyay' / Socodka aqoonsiga aqoonsiga qofka"]
    C --> D["Sawirka casriga ah ee NFC/kameerada leh Baasaboorka dawladda ama shatiga darawalnimada adoo isticmaalaya Persona ->LinkedIn Trust & Safety strips hacker's email/2FA & soo dirtaa xiriirinta dib udajinta 24-72h"]
    B -->|"La Afduubtay Bog Rasmi ah oo Shirkadda LinkedIn"| E{"Ma jiraa saaxiib ka badbaaday oo weli ku leh 'Super Admin' bogga Shirkadda?"}
    E -->|"HAA: Ugu yaraan 1 Super Admin oo nadiif ah ayaa hadhay"| F["Badbaadinta Super Admin waxay isla markiiba fureysaa Bogga Shirkadda -> Dejinta -> Maamul maamulayaasha -> Waxay meesha ka saartaa shaqaalaha la jabsado & dhammaan maamulayaasha aan la garanayn -> Waxay tirtirtaa qoraalada been abuurka ah & Liisaska Shaqada"]
    E -->|"MAYA: Hacker-ku waxa uu saaray dhamaan maamulayaasha sare ee sharciga ah"| G["Jooji kaadhka deynta ee shirkadda ee ku lifaaqan Maareeyaha Ololaha -> Soo gudbi 'LinkedIn Bogga Soo kabashada / Codsiga Khilaafaadka' emaylka @companydomain.com la xaqiijiyay"]
    B -->|"Xogta Shaqaalaysiinta 'Ruux' ee beenta ah ee sheeganaya inay ka shaqeeyaan shirkaddaada (lama jabin, laakiin iska dhigaya)"| H["Hayso Bogga Shirkadda Super Admin fur 'Bogga -> Dadka / Shaqaalaha' tab -> Ka warbixi profiles aan la oggolayn ee sheeganaya shaqo"]
    D --> I["Hantidhawrka kordhinta Chrome ee loogu talagalay xoqistayaasha LinkedIn (xaddida 'cookies' li_at') -> Wareeg SSO/Emailka sirta ah -> Ku dhaji digniin musharax dadweyne"]
    F --> I
    G --> I
    H --> I

Qeybta 1: Soo kabashada tillaabo-tallaabo ah marka lagaa xiro koontada LinkedIn shaqsiyeed ee la jabsaday¶

Marka uu weerarku wax u dhimo astaanta LinkedIn ee gaarka ah, waxay raacaan buug-ciyaareedka 90-ilbiriqsi: way soo galaan (iyada oo la xaday) li_at buskudka ama phishing proxy), ku dar ciwaanka iimaylka ee la tuuri karo, xaqiiji, iimaylka u xayaysii ** Primary **, tirtir shaqadaadii asliga ahaa iyo ciwaanada iimaylka shaqsiga ah, oo iska diwaangeli Authenticator App (2SV) akoonkaaga.

Marka aad isku daydo in aad gujiso "Forgot Password," LinkedIn midkood waxa ay tiraahdaa "Ma heli karno xisaab iimaylkaas leh" ama waxa ay weyddiisaa 6-god 2SV code xaqiijin ah kaas oo ku jira taleefanka jabsiga. Waa kan sida saxda ah ee looga gudbi karo akoonkaaga:

Habka 1: Kicinta "U xaqiiji aqoonsigaga qof" 2SV / Iimaylka Dulqulka socodka (ugu dhaqsaha badan)¶

Haddii iimaylkaagu wali shaqeeyo (ama aad gujiso "Ka rog is beddelka iimaylkan" isku xidhka gudaha iimaylka digniinta tooska ah ee LinkedIn lagu soo diray sanduuqaaga marka uu jabsaday iimaylkaga), laakiin jabsadayhu daaray ** Xaqiijinta Laba-tallaabo (2SV)** si uu kuu xannibo: 1. Dusha ** browserka kombayutarka miiska** (isku xirka aqoonsiga-dhaafitaanku wuxuu inta badan ku dhuuntaa daalacashada mobaylka), tag linkedin.com/login. 2. Geli iimaylkaaga iyo eraygaaga sirta ah (ama dhagsii Sirta ah illowday? oo geli koodka iimaylkaaga lagu soo diray). 3. Marka LinkedIn kaa istaagto shaashadda adigoo weydiinaya ** 6-nambar Xaqiijiye koodka App-ka** (kaaso hackersku xakameeyo), si toos ah uga eeg sanduuqa koodka hoostiisa oo dhagsii: "Verify using another method" ama "Can't access your authenticator app? Verify your identity". 4. LinkedIn waxay bilaabaysaa ** Xaqiijinta Aqoonsiga Qofka** ku-xidhan ee QR code / socodka kamarada: - Ku sawir code-ka QR kamaradaada casriga ah. - Sawir hore iyo xagga dambe ee ** Aqoonsiga sawirka ay dawladdu bixisay** (Baasaboor, Shatiga Darawalnimada, ama Kaarka Aqoonsiga Qaranka; haddii baasaboorkaagu leeyahay chip NFC, Persona wuxuu ku sawiri karaa chip-ka crypto-ga isagoo isticmaalaya akhristaha NFC ee taleefankaaga si aad si dhakhso leh u hubiso) oo buuxi hubinta noolaanshaha 3-xagal ee nolosha. 5. Maxaa xigi doona: Isla marka uu Persona xaqiijiyo in magaca buuxa ee sharciga ah ee aqoonsiga dawlada uu la mid yahay magaca buuxa ee taariikhiga ah ee profile LinkedIn, nidaamka soo kabashada otomaatiga ah ee LinkedIn ** si toos ah ayuu u curyaamiyaa Hubinta Laba-Tallaabo ee Hackers-ka (2SV** waxayna kuu soo dirtaa xiriir toos ah oo soo gal ah gudaha 15 daqiiqo ilaa 48 saacadood.

Habka 2: Marka hacker-ku mar hore ka tirtiray ciwaanka emailkaaga xisaabta (No-Access Form)¶

Ka waran haddii xiriirinta "Beddelka iimaylka u celi" ee ku jira sanduuqaaga-mailku uu dhacay (ama hacker-ku uu sidoo kale wax u dhimo sanduuqaaga e-mailka oo uu tirtiro digniinta), marka ku qoritaanka iimaylka LinkedIn ay tiraahdo "Akoonka lama helin"? 1. Furo rasmiga ah LinkedIn No-Login Compromised Account Foomka Soo Kabashada : linkedin.com/help/linkedin/ask/TS-RHA (ama linkedin.com/help/linkedin/ask/TS-F-APPEAL). 2. Ku buuxi goobaha saxnaanta qalliinka si router-ka kala soocida otomaatiga ah uu tigidhkaaga si toos ah ugu diro ** Soo kabashada Xisaabaadka / Safka ATO: - Cinwaanka iimaylka halkaas oo aan kugula soo xiriiri karno: Geli ** ciwaanka iimaylka nadiif ah, aamin ah* (sida ugu fiican shirkaddaada la xaqiijiyay @yourcompany.com ciwaanka iimaylka ee u dhigma loo shaqeeyaha hadda ku taxan taariikhda shaqadaada LinkedIn). - URL ee Profile-kaaga LinkedIn: Ku dheji URL-ka saxda ah ee faallada guud ee astaantaada (tusaale, https://www.linkedin.com/in/firstname-lastname-12345/). (Haddii uu jabsaday magacaaga profile ama URL aan waxba tarayn, ka hel URL-kaagii asalka ahaa ee taariikhda browserka hore, saxeexyada iimaylka, ama cache Google) - Cinwaanka iimaylka ee hore ula xidhiidhay akoonkaaga: Geli ciwaanka saxda ah ee ahaa Primary akoonkaaga LinkedIn ka hor weerarka. - Faahfaahinta arrinta: > * "Akoonka LinkedIn ([Profile URL]) waxaa lagu afduubay gelitaanka aan la ogalayn [Taariikhda] ee [Waqtiga]. Weeraryahanku waxa uu iga saaray iimaylkaygii aasaasiga ahaa ([Old Email]), waxa uu ku daray ciwaanka iimaylka ah ee aan la fasixin, waxana uu karti geliyay 2SV 3. Kalsoonida & Badbaadada LinkedIn waxay kuugu jawaabi doontaa iimaylka xiriirkaaga ** xiriirinta aqoonsiga shaqsi ee hal mar ah*. Marka aad ku soo gudbiso aqoonsiga dawladda iyada oo loo marayo xidhiidhkaas, waxay ka xayuubiyaan iimaylka hackerka oo ay soo celiyaan ciwaanka iimaylkaagii asalka ahaa.

Qaybta 2: Soo kabashada Bogga Shirkadda LinkedIn ee la afduubay iyo nadiifinta Super Admins-da aan damiir lahayn¶

Fahamka sida LinkedIn's ** Bogga Maamulka Dhismaha** u shaqeeyo waa muhiim inta lagu jiro shil: - A ** LinkedIn Bogga Shirkadda (linkedin.com/company/your-brand)** ma laha galitaanka kali ah. Taa baddalkeeda, profile-yada LinkedIn ee gaarka ah waxaa loo qoondeeyay mid ka mid ah dhowr doorar maamuleed: Maamulka Sare, Maamulka Mawduuca, Curator, Analyst, ama ** Boodhadhka Mawduuca La Kafilo** - Kaliya **Super Admin *** ayaa awood u leh inuu ku daro ama ka saaro Admins kale, wax ka beddelo faahfaahinta bogga, ama damiyo bogga, iyo ** Maamule kasta oo Sare wuxuu ka saari karaa maamulaha kale ee Super hal guji *** (ma jiro hal door oo "Abuuraha Bogga / Mulkiilaha xididka" ee caadiga ah ee boggaga LinkedIn ilaa lagu maareeyo Maareeyaha Ganacsiga ganacsiga).

Is barbar dhig labada Shabakadda ee wax u dhimaya xaaladaha oo samee nidaamka soo kabashada saxda ah:

Qaybta 3: Joojinta khiyaanada shaqada ee been abuurka ah, Shaqaallaha beenta ah ee InMails-ka, iyo profiles-ka-yeelyeelka "Shaqaale been abuur ah"¶

Xataa marka Boggaga Shirkadda aan la jabsanayn, dembiilayaasha interneetka waxay uga faa'iidaystaan ​​LinkedIn laba siyaabood oo wax u dhimaya summadaada oo waxyeello u geysta codsadayaasha shaqada:

1. Nadiifinta ka dib wax-ka-qabashada LinkedIn Recruiter kursi ama shaqo been abuur ah oo la soo dhejiyo¶

Haddi weeraryahan uu galo Bogga Shirkaddaada ama shaqaalaha LinkedIn RecruiterRecruiter Corporate / Recruiter Lite* shatiga: 1. ** Xidh oo tirtir qoraalada shaqo ee been abuurka ah isla markiiba:** - Aad linkedin.com/my-items/posted-jobs/ (ama furan ** Shaqaalaysiiye -> Shaqooyin *** / ** Bogga Shirkadda -> Shaqooyinka **), fur liis kasta oo shaqo oo aan la ogolayn, dhagsii ** Maamul shaqo -> Shaqo xidh , oo la xidhiidh codsade kasta oo liiskaas codsaday digniin ammaan degdeg ah: > * "OGAYSIIS AMNIGA: Liiska shaqada waxaa la soo dhejiyay ogolaansho la'aan inta lagu gudajiray heshiiska dhinac saddexaad 2. Kala noqo Kursiga la jabiyay ee ku dhex jira Xarunta Maamulka Shaqaaliyaha ee LinkedIn: - Shaqaalayle jira Maamulaha shatiga waa inuu isla markiiba furo LinkedIn Recruiter -> Settings Admin -> Maamul Isticmaalayaasha, hel kursiga qorista ee la dhibay, oo guji ** Ruqsadda Baarkinka/Ka noqoshada Helitaanka sidaa darteed weeraryahanku isla markiiba waa laga saaray console-ka shaqaaleysiinta xitaa haddii ay weli hayaan astaanta LinkedIn ee isticmaalaha. 3. ** Dhoofinta Hawsha Shaqaalaysiinta & Diiwaanka Hantidhawrka Boostada: - Hubi musharaxiinta uu u soo diray qofka weerarka gaystay InMail ama loo dhoofiyay .csv inta lagu jiro daaqada jebinta si sarkaalkaaga Ilaalinta xogta (DPO) waxa ay qiimayn karaan musharax kasta oo PII ah (eeg si lama filaan ah iimaylka loogu soo diray liiska mushaharka sirta ah ama faylka HIPAA).

2. Sida meesha looga saaro "Shaqaalaha beenta ah/ Shaqaalaysiinta Been-abuurka ah" kuwaas oo ku taxay shirkadaada profile-ka fasax la'aan¶

Sababtoo ah LinkedIn waxay u ogolaataa xisaab kasta oo cusub in la qoro "Technical Recruiter at [Your Company Name]" Qaybta waayo-aragnimadooda iyada oo aan la hubin domain si toos ah, faraanti khiyaamo ah ayaa abuuraya daraasiin qoraallo been abuur ah oo ku xidhan summada Boggaga Shirkadda si ay u khiyaameeyaan ugaarsadaha shaqada ee Telegram iyo WhatsApp.

Waa kan sida Bogga Shirkadda Super Admin uu uga xayuubin karo astaantaada shirkadda iyo sheegashada shaqaalaynta profiles been abuur ah: 1. Isticmaal bogga Shirkadda "Dadka / Xubnaha La Xidhiidha" Qalabka Saaridda: - Furo Boggaga Shirkadda sida Super Admin -> dhagsii Dadka tabka aragtida dadweynaha -> ka dhex eeg liiska profile-yada sheeganaya inay ka shaqeeyaan ururkaaga. - Guji Saddex Dhibcood (... on the fake profile -> guji ** Report / Block -> Soo sheeg profile this -> Waxay iska dhigayaan qof kale ama wakiil ka ah shirkad aysan u shaqeyn (Fake profile / Not an employee)**. 2. Soo gudbi astaan ganacsi oo rasmi ah/samaynta iska dhigista summadaFastest Bulk Removal): - Haddii khayaanada ay abuureen xisaabo shaqaaleeyayaal badan oo been abuur ah iyagoo isticmaalaya magaca ganacsiga ee ka diiwaan gashan shirkaddaada iyo astaanta si ay u socodsiiyaan khiyaanada shaqada, soo gudbi LinkedIn Trademark Jebinta / Ogeysiiska Khayaanada ee linkedin.com/help/linkedin/answer/a1336378 oo ka yimid ciwaanka emailkaaga sharci/shirkadeed oo taxaya dhammaan URL-yada astaanta u ah gafafka. Kooxda Qaadista Sharciga ee LinkedIn waxay sida caadiga ah nadiifiyaan faraantiyada shaqaaleeyayaasha been abuurka ah ee la xaqiijiyay 12 ilaa 24 saacadood.

Qeybta 4: Sababta aad li_at Kukiga fadhiga waa la xaday (iyo sida loo xiro LinkedIn si joogto ah)¶

Haddii shaqaalaha la dhimay uu lahaa laba-tallaabo Xaqiijin (2SV) shiday oo waligiis ma qorin furahooda sirta ah iimaylka phishing-ka, ** sidee buu jabsadaygu u galay akoonkiisa LinkedIn?**

Mar kasta oo aad gasho www.linkedin.com Chrome, Edge, ama Brave, server-yada LinkedIn waxay dejiyeen buskud HTTP ah oo magaceedu yahay li_at (wuxuu shaqeynayaa ilaa 365 maalmood). Qof kasta oo haysta hal-abuurkaas li_at Xadhkaha qoraalka ahi waxa ay ku dhejin karaan biraawsarkooda tab kaydinta DevTools oo isla markaaba u geli LinkedIn adiga oo kale, iyaga oo ka gudbaya eraygaaga sirta ah iyo 2SV Authenticator App.

Waxaa jira **saddex dariiqo oo aasaasiga ah li_at buskudka waa la xado : 1. ** Kordhinta Chrome-ka ee Rogue ("LinkedIn Automation / AI Scrapers"): Boqollaal dhinac saddexaad ah Chrome kordhinta oo lagu suuqgeeyay qorayaasha iyo iibiyeyaasha ("Ka raadi iimaylka qof kasta ee LinkedIn"*, "Auto-Connect Bot", "Ai Comment Generator") si cad u akhri li_at buskud ka linkedin.com una gudbi server dibadeed si ay bot kooda daruurtu u xoqdo LinkedIn hoosta aqoonsigaaga. Marka iibiyaha dheeraynta la jabsado (ama iibiyo xogtiisa isticmaale), kumanaan xisaabaadka qorista ayaa la afduubaa habeenkii. 2. AiTM Reverse-Proxy phishing (Evilginx Digniin Been Abuur ah): iimaylka odhanaya "Waxaad ka haysataa 1 InMail oo cuub maamule kireystaha"ma *"Boggaga LinkedIn waa la xaddiday"* waxay keentaa bogau eg kaasoo wakiil ka ah koodka 2SV ee dhabta ah oo soo qabta li_at. 3. Infostealer Malware (Lumma / Vidar) Ka Bilaabashada Fake: Weeraryahan wuxuu soo diraa shaqaale qore a "Resume_John_Doe.zip" kayd ka kooban a .lnk ama .exe faylka oo la qariyay astaanta PDF.

Liiska hubinta adkaanta ee shirkadda 5-da dhibcood¶

Ka hir geli shantan difaac guud ahaan maamule kasta, shaqaale qoraya, iyo maamulaha bogga Shirkadda maanta:

• 1. Mamnuuci Dhammaan "LinkedIn Scraper / Automation" Kordhinta Chrome & Wareeg li_at Adigoo gujinaya Sign Out:
  • Furan chrome://extensions (ama edge://extensionsiyo ** ka saar otomaatigyada LinkedIn dhinac saddexaad, iimaylka-hele, ama kordhinta xoqitaanka ***. Kadib guji **Aniga -> Saxiix *** gudaha LinkedIn oo dib u soo gal (guji * Saxiix * waxay si cad u burinaysaa kii hore li_at buskudka ku jira server-yada LinkedIn, halka si fudud loo xidho tab browserka ay ka tagayso buskudka la xaday mid ansax ah).
• 2. Waxay u baahan tahay calaamadda iimaylka ee shaqada ee la xaqiijiyay (Confirmed Work Email+ CLEAR / Shakhsiyaadka Aqoonsiga Dawladda ee ku yaal dhammaan xogta guud ee fulinta iyo qorayaasha:
  • Shaqaalaysiiye kasta iyo maamule kasta ha buuxiyo LinkedIn ee bilaashka ah ** Xaqiijinta iimaylka Shaqada ** IYO ** Xaqiijinta Aqoonsiga Qofka / CAD ** si ay profile-koodu u soo bandhigaan ** Summada Gaashaan ee La Xaqiijiyay**. Kadibna si cad ugu sheeg shirkaddaada Careers "Dhammaan shaqaale qorayaasha [Shirkadda] ee sharciga ah waxay ku tusinayaan calaamada goobta shaqada ee LinkedIn oo kaliya waxay email kuugu soo diri doonaan @ourcompany.com"*
• 3. Daar geli LinkedIn kali-gal (SSO) ee loogu talagalay shaqaaleysiinta ganacsiga, hagaha iibka, iyo kuraasta Maareeyaha Ololaha:
  • Gudaha LinkedIn Admin Center -> Settings -> Global Settings -> Single Sign-On (SSO), ku xidh dhammaan kuraasida LinkedIn ee la bixiyo ee shirkadda ** Okta / Microsoft Entra ID / Google Workspace SAML SSO** oo lagu xoojiyay phishing-u- adkaysta FIDO2 Passkeys / YubiKeys*.
• 4. Bogga Shirkadda Hanti-dhawrka Super Admins Bil kasta ("Ugu yar 3, ugu badnaan 4" Xeer):
  • Ku hay 3 ilaa 4 Super Admins ee la aamini karo Bogga Shirkadaada (sidaa darteed hal qof oo baxaya ama la xidhaa waligiis boga ma jabin), oo isla markiiba hoos u dhig qoraal-qorayaasha warbaahinta bulshada iyo wakaaladaha suuqgeynta dibadda Content Admin ama Sponsored Content Poster door (kaas oo u oggolaanaya daabacaadda qoraallada iyo socodsiinta xayaysiisyada ** fasax la'aan si ay u joojiyaan Super Admins).
• 5. Shaqaalaysiinta Tareenku Waligood ma Furan .zip, .rar, .iso, .lnk, ama Xidhiidhada "Resume/Portfolio" ee la ilaaliyo sirta ah:
  • Shaqaalaysigu waa bartilmaameedka #1 ee shirkadda ee ku-xidhnaanta malware-ka sababtoo ah shaqadoodu waa inay furaan shaqada shisheeyaha maalinta oo dhan. Habee albaabkaaga iimaylka shirkadda si aad u xannibto .zip / .rar / .lnk / .exe / .scr lifaaqa iyo fara qorayaasha in ay kaliya eegaan .pdf iyo .docx dib u bilaaba gudaha daawashada webka Cloud

Lambarada degdega ah ee gobolka iyo borotokoolka wakaalada¶

Marka koontada LinkedIn ama la wareegidda Bogga Shirkadu ay keento khiyaamo shaqo oo been abuur ah oo lagu beegsanayo dadweynaha, kharashaadka maaliyadeed ee B2B ee aan la ogolayn, ama soo-gaadhista musharraxa PII, u warbixi dembiyada internetka ee qaranka ee ku habboon iyo wakaaladaha musuqmaasuqa shaqada:

Maraykanka iyo Kanada¶

• Bilayska Degdega ah Diritaan (Hanjabaado Jir Degdeg ah) Wac 911.
• Dambiyada Internetka ee Federaalka & Warbixinta Fadeexada Shaqada:
  • Mareykanka: Warbixin u gudbi ** Xarunta Cabashada Dembiyada Internetka ee FBI (ic3.gov(Si gaar ah u tixraacaya Iimayl-ka Ganacsiga/Is-afgaransiinta Xisaabaadka ama Khiyaanada Shaqaalaysiinta Shaqo ee Been-abuurka ah) iyo ** Guddiga Ganacsiga ee Federaalka (ReportFraud.ftc.gov)**. Hadii ay dawladu kafaalo qaado Contagious Interview malware waxaa loo qaybiyay injineerada akoonkaaga la afduubay, ogeysii CISA (cisa.gov/report).
  • Kanada: Ka warbixi Xarunta Ka-hortagga Khiyaanada KanadaCAFC, antifraudcentre-centreantifraude.ca ama 1-888-495-8501* iyo Xarunta Amniga Internetka ee Kanadacyber.gc.ca).

Boqortooyada Ingiriiska¶

• Bilayska Degdegga ah u diraya: Wac 999.
• ** Dembiyada Internetka, Khiyaanada Shaqaalaysiinta & Warbixinta Jebinta GDPR:**
  • Ka warbixi la wareegida akoontiga shirkada iyo been abuurka qorista ee Falka Khiyaanada ah (actionfraud.police.uk ama 0300 123 2040 oo la tasho ** National Cyber ​​Security CentreNCSC)** hanuunin.
  • JobAware (jobsaware.co.uk): Bogga rasmiga ah ee dawladda UK ee aan macaash doonka ahayn (oo ay ku shaqeeyaan Booliiska Magaalo-weynta iyo SAFERjobs) ee ka warrama shaqooyinka LinkedIn ee been abuurka ah iyo been-abuurka qorista.
  • ** UK ICO (ico.org.uk):** Haddii kursiga LinkedIn Recruiter la tanaasulay uu kashifay CV-yada, nambarada telefoonada, iyo qoraallada codsadayaasha UK, qiimee haddii warbixinta 72-saac ee GDPR UK 33 ee Xafiiska Guddoomiyaha Warfaafinta loo baahan yahay.

Midowga Yurub¶

• Lambarka Gurmadka Pan-Yurub: Wac 112.
• GDPR & Xeerka Adeegyada Dijital ah ee EU (DSA) Kor u kac:
  • Haddii CV-yada musharraxiinta ama xogta shakhsi ahaaneed ee gudaha Shaqaalaynta LinkedIn uu galo weeraryahan, ogaysii Hay'adda Ilaalinta Xogta Qaranka ee Hay'addaada (DPC Ireland waa LinkedIn Ireland Unlimited Company's Hoggaanka Midowga Yurub, oo ay weheliso degaankaaga CNIL / BfDI / AEPD) gudaha 72 saacadood ee hoos yimaada GDPR Qodobka 33.
  • Sida uu dhigayo ** Xeerka Adeegyada Dijital ah ee EU (DSA**, Meheradaha Yurub iyo shakhsiyaadka sidoo kale waxay kordhin karaan iska dhigista madal aan la xalin iyo waxyaabaha khiyaanada sharci darrada ah iyagoo sii marinaya LinkedIn's u heellan EU Socodka Ka warbixinta Macluumaadka Sharci-darrada ah.

Australia iyo New Zealand¶

• Diritaan Degdeg ah: Wac 000 gudaha Australia ama 111 gudaha New Zealand.
• ** Ka warbixinta Dambiyada Internetka & Khayaanada:**
  • Australia: Ka warbixi la wareegida akoontiga shirkada cyber.gov.au (ReportCyber / ACSC) una soo sheeg khayaanada qorista beenta ah ACCC Scamwatch (scamwatch.gov.au). Haddii shatiga darawalnimada ama baasaboorka muwaadiniinta Australiyaanka ah uu codsaday shaqaaleeye been abuur ah oo iska dhigaya astaantaada, la xiriir IDCARE (idcare.org ama 1800 595 160).
  • New Zealand: Ka warbixi CERT NZ (cert.govt.nz* iyo ** Netsafe (netsafe.org.nz ama 0508 NETSAFE)**.

Hindiya iyo Aasiya-Pacific¶

• Hindiya: Wac 1930 (Qadka Caawinta Dembiyada Internetka ee Qaranka) ama cabasho ka gudbi cybercrime.gov.in hoos yimaada Wasaaradda Arrimaha GudahaI4C2) khiyaano shaqo oo been abuur ah iyo afduubka warbaahinta bulshada ee shirkadaha, iyo u soo sheeg shilalka amniga ganacsiga CERT-In (cert-in.org.in* 6 saacadood gudahood.
• Singapore & Japan: Gudaha Singapore, wac 999 (Xaalad Degdeg ah) ama ** Khadka Caawinta Ka-hortagga Khiyaanada1799** oo fayl galiya e-warbixinta Ciidanka Booliska Singaporepolice.gov.sg). Jabbaan, la xidhiidh ** miiska La-talinta Dembiyada Internetka ee Booliska ee Prefectural (#9110)**.

Su'aalaha soo noqnoqda¶

Ammaan ma tahay in la iska sawiro Baasaboorkayga ama shatiga darawalka ee shaashada xaqiijinta "Persona" ee LinkedIn si aan u soo ceshado akoonkayga la jabsaday?¶

Haa, waa haddii aad si toos ah uga soo kabsato sarkaalka `linkedin.com` domain (ama iyada oo loo marayo si rasmi ah `@linkedin.com` taageerada tigidhada). LinkedIn waxay isticmaashaa ** Aqoonsiga Qofka, Inc.** (iyo ** CLEAR** ee Waqooyiga Ameerika) si rasmi ah, SOC 2 Nooca II iyo ISO 27001 la-hawlgalayaasha xaqiijinta aqoonsiga. Markaad sawirto aqoonsiga dawlada oo aad iska sawirto qof toos ah adoo isticmaalaya Persona inta lagu guda jiro socodka soo kabashada akoontada LinkedIn, Persona waxay si qarsoodi ah u xaqiijisaa in magacaaga sharciga ah iyo wejigaaga ay la mid yihiin mulkiilaha akoontiga oo ay calaamad u tahay LinkedIn Trust & Safety si ay uga xayuubiso ciwaanka iimaylka hacker-ka iyo 2SV. Weligaa ha iimayl dirin JPEG-ga cayriin ee baasaboorkaaga sida lifaaq iimaylka aan qarsoodi ahayn oo ku socda ciwaanka iimaylka random; Kaliya ku soo rar gudaha widget-ka rasmiga ah ee Persona.

Sidee buu qof isugu daray "Super Admin" Bogga Shirkadda LinkedIn iyadoon maamulahayadu helin digniin?¶

Sababtoo ah Bogagga Shirkadda LinkedIn waxay isticmaalaan oggolaanshaha isku-filka ah ee Super Admin, ** shaqaale kasta oo haya doorka Super Admin ** ee Boggaaga Shirkadda wuxuu ku dari karaa Super Admin cusub oo ka saari kara dhammaan maamulayaasha kale ee Super Admin ee jira 10 ilbiriqsi gudahood. Ku dhawaad ​​kasta oo la afduubo Bogga Shirkadda, weeraryahanku ma jabin "Serfarada LinkedIn"; taa beddelkeeda, waxay u dhimeen koontada LinkedIn ee shaqsi ee mid ka mid ah maamulaha suuqgeynta hadda ama hore, qandaraasle wakaalad dibadda ah, ama aasaasaha oo weli iloobay mudnaanta Super Admin ee Boggaga Shirkadda, waxay isticmaaleen kalfadhiga qofkaas inuu ku daro akoon gubanaya sidii Super Admin cusub, ka dibna kooxdaada ka saaray bogga.

Miyaan kaliya ku abuuraa profile LinkedIn cusub oo leh iimaylka shaqada inta aan sugayo Taageerada LinkedIn si aan u soo ceshado astaantayda la jabsaday?¶

Maya, **waligaa ha samayn koontada LinkedIn-cusub adigoo isticmaalaya isla cinwaanka iimaylka** kaas oo markii hore ku xidhnaa astaantaada la jabsaday iyadoo soo kabashadu socoto. Xogta dhabarka dambe ee LinkedIn, ciwaanka iimaylka waxa lagu xidhi karaa hal xubin oo UID ah markiiba. Haddii jabsigu ka saaro iimaylkaga astaantaada dhabta ah ee 10-jirka ah oo aad isla markiiba isticmaasho iimaylkaa la xoreeyay si aad u diwaangeliso akoon cusub oo maran, injineerada soo kabashada LinkedIn si toos ah uma rogi karaan astaantaada asalka ah ciwaanka emailkaas ilaa aad marka hore xidho oo aad nadiifiso koontada maran ee nuqul ka mid ah, ku dara maalmo dib u dhac ah soo kabashadaada.

Waa maxay sababta daraasiin tuugo ah ay si lama filaan ah isugu qoraan "HR Recruiter" ee shirkadeena LinkedIn, oo ma ka joojin karnaa shisheeyaha inay sheeganayaan inay halkan ka shaqeeyaan?¶

Naqshadaynta taariikhiga ah, LinkedIn waxay u ogolaataa isticmaale kasta inuu ku qoro magac kasta oo shirkad ah qaybta "Khibradda" ee boggooda iyagoon u baahnayn oggolaan horudhac ah Maamulaha Bogga Shirkadda. Dambiile-shaqo-xumo-dambiyeedka ayaa ku xad-gudbay tan iyaga oo kor u qaadaya profiles-ka sockpuppet kuwaas oo ku taxaya shirkaddaada shaqo-bixiyehooda hadda si ay calaamadda shirkaddaada rasmiga ah uga muuqato magacooda agteeda marka ay farriinta u dirayaan dhibbanayaasha. In kasta oo aadan horay u xannibi karin goobta khibradda adduunka oo dhan, Boggaaga Shirkadda Super Admins waa inay si joogto ah u baaraan **Dadka** tab ee Bogga Shirkadda, calaamadee profiles aan la oggolayn iyada oo loo marayo ** Warbixinta -> Ma aha shaqaale ***, oo waxay uga baahan yihiin dhammaan qorayaasha dhabta ah inay shidaan LinkedIn's ** Summada Iimayl La Xaqiijiyay `@yourcompany.com` inbox).

Hackers waa orday $10,000 Xayeysiisyada been abuurka ah ee ku jira Maareeyaha Ololaha LinkedIn addoo isticmaalaya kaarkeena deynta ee shirkadda, LinkedIn ma soo celin doontaa lacagta?¶

Haa, haddii aad isla markiiba uga warbixiso la wareegidda akoonnada aan la ogalayn ee Taageerada LinkedIn iyo bixiyaha kaadhka amaahda ee shirkadda, Kooxda Lacag-bixinta Xayeysiiska ee LinkedIn waxay si joogto ah u buriyaan ama u soo celiyaan kharashaadka xayeysiiska ee aan la oggolayn ee la soo saaray intii lagu jiray daaqadda afduubka ee la xaqiijiyey. Si fudud ha u bilaabin soo celinta kaadhka deynta indhoolaha ah ka hor inta aanad furin **LinkedIn Compromised Account & Tigidhka Kharashka Xayeysiiska Aan La Fasax lahayn**, maadaama dib u soo celinta aan la shaacin ay dhalin karto ganaax joogto ah oo toos ah akoontada xayaysiiska ee boggaga shirkadda; Taa beddelkeeda, ka jooji kaadhka * eedeymo cusub* markaad buuxinayso khilaafka qaan-sheegga ATO ee rasmiga ah LinkedIn.

Ilaha iyo hanuuninta rasmiga ah¶

• LinkedIn Trust & Safety /Xarunta Caawinta: Ka warbixinta iyo soo kabashada Koontada LinkedIn ee la jabiyay (linkedin.com/help/linkedin/ask/TS-RHA), Ka xaqiiji aqoonsigaga qof si aad u soo kabsato gelitaanka, Maaraynta Admins bogga LinkedIn (Super Admin Ilaalinta Doorka), iyo Ka warbixinta Xogaha been abuurka ah iyo Khiyaanada Shaqada.
• ** Xafiiska Baarista FederaalkaFBI IC3& Hay'adda Ammaanka Kaabayaasha InternetkaCISA, Maraykanka):** Ogaysiisyada Adeegga Dadweynaha ee Ku saabsan Khiyaanada Shaqaalaysiinta, Qiimaynta Codaynta Soo-saare La-Troojaansaday (Contagious Interview / DPRK IT Schemes Worker), iyo La wareegidda Xisaabaadka Warbaahinta Bulshada ee Shirkadda.
• ** Google Mandiant & Sirdoonka Hanjabaadda:** * Falanqaynta Xatooyada Kukiyada Kulanka-li_at Kukiyaynta Kukiyada iyada oo loo sii marayo Kordhinta Browser-ka xaasidnimada leh iyo xog-ururinta) Bartilmaameedka Shaqaalaysiinta iyo Maamulayaasha Shirkadaha*.
• Guddiga Ganacsiga ee FederaalkaFTC, United States) & UK Jobs Ogaalka / Khiyaanada Ficil: *Hagaha Loo-shaqeeyaha iyo Shaqo-doonka ee Khiyaanada Shaqo ee Iska Dhigista

Tilmaamaha la xidhiidha¶

• La wareegidda akoonnada warbaahinta bulshada iyo jabsiga
• Baraha bulshada ee phishing iyo khiyaanada iska dhigista
• Kanaalka abuuraha waxaa afduubay qulqulka tooska ah ee loo yaqaan 'crypto scam'
• Isku-duubnida khadka tooska ah ee lala beegsaday, wicitaannada dhibaataynta loo-shaqeeyaha, iyo xannibaadda wareegga dhijitaalka ah
• Si lama filaan ah ayaa loogu soo diray iimaylka sirta ah liiska mushaharka ama faylka HIPAA qaataha khaldan
• Nambarada degdega ah