Meta Business Suite ama Koontada Xayeysiiska Google ee la jabsaday: Joojinta Kharashka Xayeysiisyada Aan La Fasax lahayn iyo Maamulayaasha Da'da ah¶

Ogaanshaha in jilaa halis ahi uu soo dhex galay Meta Business Suite (business.facebook.com* ama ** Google Ads (ads.google.com** akoon, waxay kor u qaaday heerka biilasha maalinlaha ah, waxayna hadda ku kharash garaynaysaa $1,000 ilaa $10,000 saacadii kobcinta soo-dejinta software-ka xaasidka ah, dharka qaaliga ah ee been abuurka ah, ama shabakadaha khamaarka ajnabiga ah ee kaadhka amaahda ee shirkadda ee ku xidhan ama koontada PayPal waa xaalad degdeg ah oo maaliyadeed iyo mid internet. Haddii aad la kulanto xatooyo maaliyadeed oo degdeg ah ama debit bangi aan la ogalayn, wac waaxda khiyaanada bangigaaga isla markaaba ama la tasho annaga nambarada degdega ah tusaha, oo ay la socdaan hagayaashayada on la wareegidda akoonnada warbaahinta bulshada iyo jabsiga, dib u celinta kaarka deynta iyo khilaafyada ACH aan la ogalayniyo kanaalka abuuraha ee la afduubay ee crypto scam livestreams.

Si ka duwan jebinta erayga sirta ah ee astaanta shakhsi ahaaneed ee caadiga ah, ** in ka badan boqolkiiba 85 ee Meta Business Portfolio ee casriga ah iyo afduubyada xayaysiisyada Google-ku waxay ku dhacaan biraawsarka aamusan-xatooyo kukiLumma Stealer, RedLine, StealC, Raccoon, ama kordhinta Chrome-ka xaasidka ah) ama calaamada OAuth phishing ee lagu beegsanayo shaqaale, maamulaha warbaahinta bulshada, ama wakaalada suuqgeynta dibadda**. Mar haddii uu weerarku soo dejiyo buskud fadhi la xaqiijiyay oo galiyay biraawsarkaaga antidetect, si fudud ugama socodsiiyaan xayeysiisyada astaantaada guud. Taa baddalkeeda, waxay dhisaan albaab danbe oo joogto ah oo lakabyo badan leh: waxay abuuraan ** aan la arki karin ** Isticmaalayaasha Nidaamka Meta *, waxay ku xidhaan dibadda ** Aqoonsiga Ganacsiga lammaane , ama abuuraan akoon toos ah ** Qoraalka Xayeysiiska GoogleMCC) link *** kaas oo si aamusnaan ah dib u abuura ololeyaal qallafsan oo dib u hawlgeliya biilasha xitaa ka dib markaad bedesho eraygaaga sirta ah. Hagahan waxa uu ku dhex marayaa joojinta dhiigbaxa maaliyadeed ee bangigaaga daqiiqado gudahood, isaga oo gooya gadaasha dambe ee maamul ee qarsoon adoon burburin raadraaca xisaabinta lacag celintaada taariikhiga ah, iyo soo gudbinta dukumeenti sax ah oo ay u baahan yihiin ** Taageerada Xayeysiisyada Meta iyo ** Baadhitaanada Xisaabaadka Xayeysiisyada Google si loogu rogo kumanaan doolar oo lagu soo oogay eedeymo been abuur ah.

Hadda samee tan¶

1. ** Qabo kaarka deynta ku xiran, kaarka deynta, akoontada bangiga ACH, iyo Paypal Payments Atoomatiga ah ee heerka hay'adda maaliyadeed marka hore (ha sugin Meta ama taageerada Google). $500, $900, ama $2,000 15 daqiiqo kasta). Fur abka bangigaga hadda si aad u xirto kaarka jireed/virtual ***, gasho PayPal -> Settings -> Payments -> Lacag bixinta tooska ah oo jooji **"Meta Platforms, Inc."
2. ** Isla markiiba ka saar kumbiyuutarka cudurka qaba Wi-Fi iyo Ethernet, oo samee dhammaan ka soo kabashada taleefannada casriga ah ee nadiifka ah ama laptop-ka aan jabsanayn.** Haddii adiga ama shaqaale dhawaan soo dejisteen " Ogeysiiska Ku-xadgudubka Xuquuqda daabacaadda" been abuur ah .zip file, "Meta Verified Policy Appeal" PDF la fulin karo, ama qalab naqshadeynta budhcad-badeed oo ku jira Windows PC ama Mac, ** xog-ururin ama VNC qarsoon (HVNC) trojan** waxa uu ku shaqaynayaa mishiinkaas hadda. Gelida bangigaaga ama dib-u-dejinta ereyada sirta ah ee kombuyuutarkaas waxay gacanta ku haysaa calaamadihii fadhigaaga cusub si toos ah ugu soo celinta weerarka.
3. ** Jooji dhammaan ololaha xayaysiisyada firfircoon oo ku rid Xadka Kharashka Koontadaada $0.01 (ama $1.00) gudaha Maamulaha Xayeysiiska Meta iyo Google Ads.** Haddii aad wali marin u leedahay akoontiga xayaysiiska, ha tirtirin ololayaasha beenta ah (ololaha tirtirku waxa ay baabi'iyaan xayeysiisyada forensic ee Meta iyo Google waxa ay u baahan yihiin si ay u habeeyaan lacag celintaada). Bedelkeeda, u rogo ololayaasha oo aad u beddesho Dam/ hakad, u gudub Meta Billing & Settings Payment -> Xadka Kharashaadka Koontada, oo u deji furka adag tobanlaha ugu hooseeya ee la oggol yahay ($0.01 ama $1.00).
4. ** Diiwaangeli 15-ilaa-16-god aqoonsigaaga Meta Ad Account (act_XXXXXXXXXXXXXXX), Aqoonsiga Portfolio Business, iyo Google Ads 10-nambar Aqoonsiga macmiilka (XXX-XXX-XXXXka hor inta aanu jabsadu ku saarin Nuqul ka URL saxda ah ee bogga Dejinta Ganacsiga, Sawirka Taariikhda Wax kala iibsiga biilasha oo tusinaysa FBADS ama GOOGLE*ADS Aqoonsiga qaansheegta, oo sawir liiska maamulayaasha qallafsan ee hadda.
5. ** Hantidhawr oo nadiifi dhammaan afarta lakab ee adkaysiga: Dadka, Shuraakada, Isticmaalayaasha nidaamka, iyo Apps-ka ku xidhan.** Hackers waxay ogyihiin dhibbanayaasha inay eegaan liiska aasaasiga ah Dadka marka hore, si ay u qariyaan gadaasha gudaha Meta Meta Business Settings -> Users -> Users System, ** Partners (Business Asset Sharing, iyo Is-dhexgalka -> Apps-ku xidhan, ama gudaha Xayeysiisyada Google -> Qalabka & Dejinta -> Gelitaanka iyo Amniga -> Maamulayaasha (MCC iyo ** Falalka waaweyn -> Qoraallada.
6. ** Ku xere tigidh rasmi ah "Akoonka Xayeysiiska La Dhiibay / Kharashka Aan La Fasaxnayn" ee Meta iyo Google KA HOR KA HOR DHAMMAAN bixiyaha kaadhka deynta adag ee dib u celinta Koontada, iyo Google Merchant Center ee "Hawsha Lacag Bixinta Shakiga Leh / Hadhaaga Aan La Bixin."** Weydii bangigaaga inuu xannibo * kharashyada cusub* isla markaaba markaad gelinayso * eedeymaha* jira* ee la sugayo ama la dhejiyay ee hoos yimaada baadhista ku meel gaadhka ah ee been abuurka markaad soo gudbiso warbixintaada wax u dhimista.

Geedka go'aanka: Kala soocida Meta Business Suite ee la jabsaday vs. Google Ads akoonnada¶

Raac laantan shaqaynaysa ee degdega ah iyadoo ku xidhan hadba goobta xayaysiisyada la jabiyay iyo haddii weeraryahanku uu hore u buriyay doorkaaga maamul.

flowchart TD
    Start["Kharashka Xayeysiiska Aan La Fasaxnayn"] --> BankFreeze["TALLAABADA 1: Ku quful credit/kaadhka deynta gudaha App-ka Bangiyada + Ka noqo Meta/Google ee PayPal Autopay"]
    BankFreeze --> IsolatePC["TALLAABADA 2: Ka saar PC-ga laga shakisan yahay ee buka Wi-Fi/Ethernet; U beddel Taleefanka/Tablet Nadiif ah"]
    IsolatePC --> PlatformCheck{"Waa kuwee Platform-ka Xayeysiisyada la jabiyay?"}
    PlatformCheck -->|"Meta Business Suite / Xayeysiisyada Facebook"| MetaAccess{"Wali Ma Leedahay Maareeyaha Galitaanka Koontada Ganacsiga/Xayeysiiska?"}
    MetaAccess -->|"HAA: Wali Admin"| MetaLive["Jooji Ololayaasha Rogue (Ha Tirtirin) -> U deji Xadka Kharashaadka Koontada ilaa $0.01 -> Ka saar Dadka Damiirka ah, Shuraakada, & Isticmaalayaasha Nidaamka"]
    MetaAccess -->|"MAYA: Hoos loogu dhigay Shaqaale ama laga saaray"| MetaLocked["Ururi Aqoonsiga Koontada Xayeysiiska (act_...), Aqoonsiga Ganacsiga, URL bogga, & Aqoonsiyada qaansheegta bangiga -> Soo gudbi Meta 'Akoonka Ganacsiga La jabsaday' & 'Muranka Bixinta' Kor u kaca"]
    PlatformCheck -->|"Xayeysiisyada Google (Raadi / YouTube / Bandhig)"| GoogleAccess{"Weli ma geli kartaa aqoonsiga macmiilka ee Google Ads (XXX-XXX-XXX)?"}
    GoogleAccess -->|"HAA: Wali Admin"| GoogleLive["Jooji Ololayaasha Rogue -> Xisaabaadka Maamulaha Rogue (MCC) -> Tirtir Qoraalada Xayeysiisyada Google-ka ee Aan La Fasaxnayn & Sharciyada Automated"]
    GoogleAccess -->|"MAYA: Laga saaray Koontada Xayeysiiska Google"| GoogleLocked["Sugnaanta hoose ee Google Workspace/Gmail -> Soo gudbi Xayeysiiska Google-ka 'Hawl Akoonka Aan La Fasaxeynin' oo wata aqoonsiga macmiilka ee 10-lambar ah"]
    MetaLive --> RefundFlow["Soo Gudbi Platform Tigidh Biil Bixin Khasaara Ugu Horeeya + Ku Hayso Bankiga Lacagaha La Sugayo"]
    MetaLocked --> RefundFlow
    GoogleLive --> RefundFlow
    GoogleLocked --> RefundFlow

Qaybta 1: Joojinta dhiigbaxa maaliyadeed 10 ka daqiiqo ee ugu horeeya (Bangiga, Card, iyo PayPal borotokool)¶

Afduubayaasha akoonnada xayaysiiska waxay kacsadaan akoonnada la xado iyaga oo isticmaalaya ** Xad-gudubka Billing Billing**. Ganacsi xalaal ah oo kharash gareeyay $25,000 In ka badan saddex sano Facebook ama Google Ads waxay caadi ahaan kordhisaa heerka biil bixinta tooska ah **$900 on Meta *** ama $500 to $1,000 xayaysiisyada Google, oo lagu daray khad qaansheegad bille ah. Marka uu weeraryahanku gacanta ku dhigo, waxay ku soo rogaan 20 ilaa 50 xayaysiis nuqul ah $2,000/day miisaaniyada. Matoorka biilasha otomaatiga ah ee matoorka xayeysiisku wuxuu dalacayaa koontada Visa, Mastercard, American Express, ama PayPal ku xidhan 10 ilaa 20 daqiiqo ilaa xadka kaadhkaagu ka dhamaanayo.

1. Sida loo gooyo biraha lacag bixinta adoon kicin xayiraad aan laga laaban karin¶

2. Waa maxay sababta ay tahay inaad isku mar u dejiso "Xadiga Kharashaadka Xisaabaadka" gudaha madal xayaysiiska isku mar¶

Haddii aad si fudud u tirtirto kaarka deynta markaad ka tagayso ololayaasha hackers-ka ee ka dhex socda Maamulaha Xayeysiiska Meta ama Google Ads, madalku waxa ay sii wadi doontaa u adeegida xayaysiisyada hackerka ilaa aad hadda Bill Threshold ($500 ku $2,000) waa la gaarey, markaas qarashku hoos u dhaco oo akoonkaaga xayaysiisku galo "Cillad Account: Balance Undettled / Disabled for Failed Payment." - ** Maamulaha Xayeysiiska Meta:** U tag https://business.facebook.com/billing_hub/payment_settings -> ka dooro akoonkaaga xayaysiiska ee hoos u dhaca -> u rog ** xadka kharashka xisaabta** -> guji Saddex dhibcood (Saddex dhibcood)...) -> deji xadka (ama Beddel) -> nooca 0.01 (ama 1.00, waxay kuxirantahay lacagta ugu yar) -> dhagsii Save. Isla markiiba kharashkaaga hadda ka bato $0.01Xayeysiiska Meta wuxuu joojiyaa dhammaan xayeysiisyada la soo gaarsiinayo olole kasta oo ku jira akoonkaas, xitaa haddii qoraalka qallafsan uu ololuhu dib u shido. - Xayeysiiska Google-ka: Haddii koontadaada ay isticmaasho lacag-bixinta gacanta ama miisaaniyada ololaha, dooro ololaha oo dhan -> dhagsii ** Wax ka beddel -> Beddel miisaaniyada** -> u dhig $0.01/day, oo jooji dhammaan ololayaasha

Qeybta 2: Nadiifinta albaabada qarsoon ee gudaha Meta Business Suite (business.facebook.com)¶

Marka infostealer uu wax u dhimo astaanta Facebook ee leh xuquuqda maamul ee Meta Business Portfolio (oo hore u ahaan jiray Maamulaha Ganacsiga Facebook), weeraryahanku wuxuu ku sameeyaa buug-ciyaareed qoraal ah oo joogto ah isagoo isticmaalaya Meta Graph API in ka yar 15 sekan. Haddii aad kaliya hubiso ** Goobaha Ganacsiga -> Dadka** oo aad ka saarto magaca qariibka ah ee aad aragto, hackers-ku wali waxa uu maamuli doonaa akoonkaaga xayaysiiska 5 daqiiqo kadib.

Waa inaad xisaabisaa oo aad nadiifisaa ** dhammaan lixda qaybood** gudaha ** Meta Meta Business Settings (https://business.facebook.com/settings***:

1. Qaybta 1: Bootfooliyada Ganacsiga "Isticmalayaasha -> Dadka" (iyo Casuumad la sugayo)¶

1. Fur ** Goobaha Ganacsiga -> Isticmaalayaasha -> Dadka**.
2. Guji qof kasta oo liiska ku jira oo hubi:
3. Cinwaanka iimaylkooda: Weeraryahanadu waxay had iyo jeer martiqaadaan iimaylo u eg (sida support-meta-verify@hotmail.com ama nooc ka mid ah magaca saaxiibkaa oo si khaldan loo qoray oo leh ** Xakamaynta Buuxa (Maamulka Ganacsiga)** ogolaansho.
4. ** Martiqaadyada La Sugayo:** Guji Pending filter tab ee sare ee liiska dadka. Hackers waxay had iyo jeer abuuraan 2 ama 3 xiriirin martiqaad oo gurmad ah (fb.me/...) loo soo diro emails gubanaya si haddii aad tirtirto akoonkooda maamulka ee firfircoon, ay si fudud u riixaan xidhiidhka martiqaadka la sugayo 2 saacadood ka dib oo ay dib ugu biiraan sidii Full Admin. ** baabi'iso martiqaad kasta oo sugaya isla markaaba.**
5. Doorkaaga: Hubi in akoonkaaga uu wali leeyahay ** Xakamaynta Buuxa -> Maamul** Daaran. Haddii jabsadayhu uu abuuray muuqaal labaad oo u eg oo sharci ah oo uu kuugu hoos dhigay Gelitaanka Qaybeed (Aasaasiga ah), ma arki doontid badhanka "ka saar" ee ku xiga magacooda ilaa Taageerada Meta ay soo celinayso madaxdaada maamulka.

2. Qolka 2: "Isticmalayaasha -> Isticmaalayaasha Nidaamka" (# 1 API Backdoor)¶

Kani waa albaabka dambe ee ugu khatarsan oo la ilduufay ee Meta Business Suite: - ** Waa maxay Isticmaalaha Nidaamka Meta:** Meta waxay u ogolaataa ganacsiyada inay abuuraan akoonno toos ah, oo aan bini'aadmi ahayn oo loo yaqaan ** Isticmaalayaasha Nidaamka ** (hoosta ** Goobaha Ganacsiga -> Isticmaalayaasha -> Isticmaalayaasha Nidaamka ) si ay ugu oggolaadaan server-yada iyo software inay ku maamulaan xayeysiisyada API ee muddada dheer iyagoon u baahnayn gelitaanka Facebook ee shakhsi ahaaneed ama 2FA. - ** Sida ugu dhaqsaha badan ee ay tuugtu ugu xad-gudbaan: Isla marka uu weeraryahanku afduubo fadhigaaga biraawsarkaaga, waxay abuuraan ** Isticmaalaha Nidaamka Maamulka** (badanaa waxay ku magacaabaan wax aan waxyeello lahayn sida "Shopify Pixel Sync", "Meta Conversions API", "Maamulaha Buugaagta", ama "Is-dhexgalka Ganacsiga"), ku qor ** Xisaabtaada (Xayeysiiskaaga).Full Control: Manage Campaigns & View Performance* iyo ** Bogga Facebook-ga** hanti ahaan u ah Isticmaalaha Nidaamka, oo dhagsii Samee Calaamad Cusub. - Sababta ay u dilaan: Xitaa haddii aad ka saartid hacker-ka Dadka , bedesho eraygaaga sirta ah ee Facebook, oo daar furaha amniga hardware, ** in System User API token uu weli 100% ku firfircoon yahay server-ka hacker-ka wuxuuna u ogolaanayaa inay abuuraan olole, kor u qaadaan miisaaniyada, oo ay ku daraan maamulo cusub meel fog iyagoo isticmaalaya Graph API. - sida loo nadiifiyo: 1. Tag Goobaha Ganacsiga -> Isticmaalayaasha -> Isticmaalayaasha Nidaamka **. 2Dooro Nidaam Iicmaale kasta oo aadan si cad u aqoonsan -> dhagsii **Ka noqo Toke dhanka midig ee sare -> ka saar dhammaan ** Hantida la qoondeeyay* (Xayeysiiska Xisaabaadka, Bogagga, Pixels) -> ka tirtir ama ka saar oggolaanshaha Isticmaalaha Nidaamka.

3. Qaybta 3: "Isticmalayaasha -> Wada-hawlgalayaasha" (Xiriirka Ganacsiga Dibadda)¶

1. Tag ** Goobaha Ganacsiga -> Isticmaalayaasha -> Shuraakada ***.
2. Hoosta **"La-hawlgalayaasha si aad hantida ula wadaagto."Weerarayaashu waxay ku abuuraan faylal ganacsi oo la tuuri karo akoon la xaday oo waxay ku xidhaan ** Aqoonsiga Ganacsiga lammaane Portfolioga Ganacsigaaga, taasoo siinaysa ganacsigooda dibadda inay si buuxda u maamulaan Koontadaada Xayeysiiska iyo Bogga Facebook-ga.
3. Guji ganacsi kasta oo lammaane aan la aqoonsan -> dhagsii ** Qashin-qashinka / Ka saarida lammaanaha ** sumadda si aad isla markiiba u gooyso buundada hantida.

4. Qaybta 4: Koontada Xayeysiiska Tooska ah "Aan ganacsi ahayn" Admins (Accounts -> Ad Accounts)¶

Meta waxay u ogolaataa boggaga gaarka ah ee Facebook in lagu daro si toos ah Koontada Xayeysiiska xitaa haddii aysan xubno ka ahayn Portfolio Ganacsiga waalidkaa: 1. Tag ** Goobaha Ganacsiga -> Xisaabaadka -> Xisaabaadka Xayeysiiska *** -> dooro Koontadaada Xayeysiiska. 2. Ka eeg taabka Dadka ee shayga midigta oo ka saar isticmaale kasta oo aan la aqoonsan oo haysta Maaraynta Koontada Xayeysiiska ama Maamul Ololaha. 3. Sidoo kale fur ** Settings Manager classic https://adsmanager.facebook.com/adsmanager/manage/accounts/settings* -> u rog ** Doorarka Koontada Xayeysiiska**, halkaas oo profile-yada gaarka ah ee lagu martiqaaday xiriirinta saaxiibada Facebook ee dhaxalka ah ay ka muuqdaan, oo dhagsii Ka saar agtiisa shisheeye kasta.

5. Qaybta 5: Xeerarka otomaatiga ah (Ads Manager -> Automated Rules)¶

Waa maxay sababta ay u hakiyeen ololayaasha damiirka ah si sixir ah inay dib ugu noqdaan ** ON *** saacada 3:00 subaxnimo? - Weeraryahanadu waxay abuuraan Xeer otomaatig ah gudaha Maareeyaha Xayeysiiska Meta (https://adsmanager.facebook.com/adsmanager/rules/manage) lagu habeeyey shuruudaha: - Haddii Xaaladda Ololaha la hakiyo -> Ficil: Daar Ololaha & Kordhi Miisaaniyadda Maalinlaha ah 50%, Soco 30 Daqiiqo kasta. - Fur ** Xeerarka Atoomaatiga ah *** gudaha Maareeyaha Xayeysiiska iyo ** Tirtir xeer kasta *** oo la sameeyay inta lagu jiro daaqadda tanaasulka.

6. Qaybta 6: Profile-ka Facebook-ga gaarka ah "Isku-dhafka Ganacsiga" & Kulamo Firfircoon¶

Sababtoo ah faylalkaaga Meta Business Portfolio waxaa laga gelayaa astaantaada gaarka ah ee Facebook: 1. Furan https://www.facebook.com/settings?tab=business_tools (Settings -> Isdhexgalka Ganacsiga), ka saar abka OAuth ee aan la aqoonsan manage_ads ama business_management ogolaanshaha, oo ka bax dhammaan fadhiyada miiska ee aan la aqoon ee Meta Accounts Center (accountscenter.facebook.com/password_and_security/login_activity).

Qeybta 3: Nadiifinta albaabada qarsoon ee gudaha Google Ads (ads.google.com)¶

Marka jilaa halis ahi uu waxyeeleeyo akoontada Xayeysiiska Google (inta badan si uu u raadiyo xayeysiisyada been abuurka ah NordVPN, Ledger Live, Zoom, AnyDesk, ama QuickBooks Soodejisyada phishingka iyagoo isticmaalaya calaamada xayaysiisiyaha ee la xaqiijiyay), waxay gundhig u yihiin ku adkaysiga *afar meelood oo gaar ah gudaha interface Ads Google:

1. Hubi "Galitaanka iyo Amniga -> Isticmaalayaasha" IYO "MaareeyayaashaMCC)"¶

1. Xayeysiiska Google-ka, dhagsii Maamulka (ama Tools and Settings) -> Gelitaanka iyo amniga.
2. ** Tab 1 (Users):** Calaamadee ciwaan kasta oo iimayl ah oo ku hoos qoran **Isticmalayaasha Ka noqo isticmaale kasta oo aan la aqoonsan ama martiqaad la sugayo isla markaaba.
3. ** Tab 2 (Managers - The #1 Google Ads Backdoor):** Guji tab Maareeyayaasha midigta ku xigta Isticmaalayaasha.
4. Weeraryahanadu waxay isku xidhaan akoonkooda ** Google Ads Manager Account (MCC -Xarunta Macmiilkayga)** sidii Mulkiilaha Maamulka ee akoonkaaga Xayeysiiska Google.
5. Isticmaale oo eegaya kaliya Users tab arka kaliya ciwaanka iimaylka u gaar ah oo u malaynaya in akoonku nadiif yahay, halka hacker-ku uu koontaroolo dhammaan akoontiga Managers tab.
6. Guji Ka saar marin u helidda (Xidhiidhka ka bixi) ee ku xigta Koontada Maareeyaha aan la aqoonsanayn isla markaaba.
7. ** Tab 3 (Security -> Domains La Ogolaaday):** Hubi in uu weeraryahanku ku daray domain khayaali ah (sida @mail.ru, @proton.me, ama domain la tuuri karo) ee liiskaaga Domains La Ogolaaday.

2. Tirtir xaasidnimada "Google Ads Scripts" iyo "Sharciyada Atoomaatiga ah"¶

Xayeysiisyada Google waxa ka mid ah matoor otomaatig ah oo JavaScript ah oo xoog badan oo loo yaqaan Google Ads Scripts: 1. Tag ** Qalabka iyo Dejinta (ama Actions Bulk) -> Qoraallada**. 2. Hackers-ku waxay ku dhejiyaan 40-line JavaScript culeyska ah ** Scripts ** loo dejiyay inuu socdo ** Saacadle ***. Qoraalkaas wuxuu si toos ah u joojinayaa ololayaashooda phishingka, wuxuu tirtiraa ereyadaada furaha xun, wuxuu kor u qaadaa miisaaniyad maalmeedkaaga $5,000, oo xitaa isticmaali kara Google-ka UrlFetchApp si aad u muujiso heerka akoonkaaga serfer-ka-kontorool dibadda ah. 3. Dami oo Tirtir qoraal kasta oo aan la aqoonsan, dabadeed fur Waxqabadyada Bulk -> Xeerarka (Sharciyada Atoomaatiga ah) oo tirtir xeer kasta oo la qorsheeyay si uu awood ugu yeesho ololaha ama beddelka miisaaniyadaha.

3. Hubi "Xayeysiiska Customizers, Qaababka Dabagalka Heerka Koontada, iyo Xiriirinta Xarunta Ganacsiga Google"¶

Xataa haddii aanu weeraryahanna abuurin olole cusub oo cusub, la-hawlgalayaasha casriga ahi waxay ku fuliyaan "Afduub URL Aamusan"* ololayaashaada sharciga ah: 1. Tag Admin/Settings -> Account Settings -> Tracking oo eeg Tabraaca Dabagalka iyo ** URL-ka u dambeeya**. Weeraryahanadu waxay halkan ku duraan qoraal dib u hagis ah si ay u riixaan xayeysiisyada summadaada sharciga ah si aamusnaan ah ugu jiheeyaan isticmaalayaasha iyada oo loo marayo dhul-xirfadeed xaasidnimo ah ama dhibicda malware. 2. Hubi ** Maareeyaha Xogta / Xisaabaadka Ku Xidhan (Google Merchant Center, YouTube, Google Analytics 4** oo kala saar Xarun Ganacsi oo Ajnabi ah oo quudinaysa qofka weerarka soo qaaday si uu u sameeyo xayaysiisyada wax iibsiga ee been abuurka ah.

Qaybta 4: Sida loo soo ceshado gelitaanka maamulka oo 100% looga soo celiyo Meta iyo Google¶

Haddii aad weli tahay maamule eegaya $8,000 eedeymo aan la ogalayn ama gabi ahaanba lagaa saaray akoonkaaga Meta Business Portfolio/Google Ads, ** Ogolaanshaha lacag celintaada waxay kuxirantahay gabi ahaanba soo gudbinta xirmo dambi baaris ah ** taas oo cadeynaysa in kharashku ka yimid fadhi la jabiyay halkii uu ka ahaan lahaa qalad shaqaale.

1. Shaxda caddaynta dambi-baarista ee loo baahan yahay (Ururso ka hor intaadan gudbin tigidhkaaga)¶

2. Meta Business Suite-ka rasmiga ah ee tanaasulka & soo celinta wadooyinka kor u kaca¶

Iyada oo ku xidhan heerka gelitaankaaga hadda, adeegso dariiqyadan kor u qaadida Meta ee rasmiga ah (waligaa ha ku kalsoonaanin qolo saddexaad "hackers-ka soo kabashada" faallooyinka ama DM-yada):

1. ** Jidka A (haddii aad weli marin u leedahay Meta Meta Account Account ama Account Ad):**
2. Fur Xarunta Caawinta Ganacsiga Meta (https://www.facebook.com/business/help/support, hoos u dhaadhac, oo dhagsii Xidhiidh Taageerada Xayeysiiska. Dooro Akoonka Xayeysiiskaact_..., dooro **"Akoonka xayaysiiskaygu waa la jabsaday/waxaa igu soo oogay dacwado aan la ogalayn"
3. Sidoo kale fur Meta Billing Hub (https://business.facebook.com/billing_hub/transactions, dhagsii aqoonsi kasta oo qaansheegad khiyaano ah, oo dooro "Ka warbixi dhibka / Muran lacagtan -> Dhaqdhaqaaq aan la ogolayn ama la jabsaday."
4. ** Waddada B (hadduu Hacker-ku kaa saaray Boggaga Ganacsiga iyo Bogga Facebook):**
5. Marka hore, ku socodsii koontadaada shakhsi ahaaneed wax u dhimaya socodka shaqada https://www.facebook.com/hacked haddii profile-kaaga gaarka ah la jebiyey.
6. Marka labaad, ka fur Taageerada Meta Business Pro Chat ee saaxiibka ama hay'adda lamaanaha akoonkiisa nool oo ka warbixi Maamulka La-wareegidda (ATO* ku yaal Aqoonsiga Portfolio-ga Ganacsiga, Aqoonsiga Bogga, iyo Aqoonsiga Koontada Xayeysiiska (act_...). Ku lifaaq qoraal PDF ah oo saxeexan oo ku yaal xarafka shirkadda (oo wata aqoonsiga dawladda iyo utility-ganacsiyeed/diiwaangelin u dhigma Xaqiijinta Ganacsiga) oo ay ku qoran tahay URL Profile ee mulkiilaha sharciga ah ee Facebook iyo iimaylka dib loogu soo celinayo sidii Maamule Buuxa.
7. ** Jidka C (haddii Kaarka deynta lagaa xado oo lagu dhex isticmaalay Koontada Xayeysiiska Meta Shisheeye):**
8. Haddaad aragto FACEBK *XXXXXXXXXX Kharashaadka ku jira bayaanka kaadhka, iska hubi maamulaha xayaysiisyada Meta marka hore. Haddii Koontadaada Xayeysiiskaagu ay muuqato $0.00 kharash gareeyay, nambarka kaadhka laftiisa ayaa la xaday oo lagu xidhay gudaha Koontada Facebook ee shisheeyaha. Isla markiiba ugala dood eedeeymaha sida ** Khiyaanada Kaadhka La Xaday** bangigaaga oo gudbi 10-ka xaraf FACEBK * kood ku yaal Meta's ** Foomka Dacwooyinka Aan La Fasaxin (https://www.facebook.com/help/contact/1937556639801443)**.

3. Xayeysiiska rasmiga ah ee Google wuxuu u tanaasulaa & soo celinta dariiqa kordhinta¶

1. Buuxi ** Hubinta Ammaanka Koontada Google (https://myaccount.google.com/security-checkup***, ka noqo aaladaha aan la aqoon hoosta myaccount.google.com/device-activity, oo ku xidh 2-tallaabo Xaqiijinta taleefankaaga nadiifka ah.
2. Soo gudbi Foomka Kordhinta Koontada Google ee u go'an https://support.google.com/google-ads/answer/9355975 -> "Ka warbixi dhaqdhaqaaqa koontada aan la ogalayn").
3. Fur Maamulka -> Beddel taariikhda (ads.google.com/aw/changehistory), dhoofi CSV-ga oo tusinaya shaambada saxda ah marka ololaha, miisaaniyada, ama isticmaalayaasha aan la ogolayn lagu daray, oo ku lifaaq tigidhkaaga. Google's ** Security Account & Billing Trust** waxay si ku meel gaadh ah u hakin doonan akoontiga ilaalinta, nadiifin doona ololaha qofka weerarka gaystay, tirtiri doona siyaasad kasta oo gadood ah oo ay sababtay jebinta, oo waxay soo saari doontaa ** Amaahda Koontada La Dhibay / Soo Celinta** 3 ilaa 10 maalmood oo shaqo gudahood.

Qaybta 5: Nadiifinta goobta shaqada iyo adkaynta ka dhanka ah la wareegida xayaysiiska mustaqbalka¶

Wakaaladaha suuq-geynta iyo aasaasayaasha ayaa had iyo jeer la jabsadaa mar labaad 72 saacadood ka dib dib u soo celinta sababtoo ah waligood ma tirtirin malware-ka infostealer ee Windows PC ama Mac halkaasoo buskudka fadhiga laga xaday.

1. Sida " Ogeysiiska Xuquuqda Daabacaadda ee Meta Been Abuur / Xadgudubka Siyaasadda" u shaqeeyo¶

Kooxaha khatarta ah ee beegsanaya Meta Business Suite (Ducktail, NodeStealer, VietCredCare, Lumma Stealer) dir fariimo deg-deg ah adigoo sheeganaya in Boggaga ama Koontadaada Xayeysiiska lagu tirtiri doono 24 saacadood gudaheed xadgudubka Hantida Caqliga, ee ku xidha kaydka sirta ah lagu ilaaliyo (Case_ID_883920.zip). Gudaha waxaa ku jira mid la qariyay oo la fulin karo (Copyright_Evidence.pdf.exe ama .scr) ama col-dhexda ah (Evilginx) Xidhiidhiyaha dib-u-celinta. Marka la fuliyo, malware-ku wuxuu soo saaraa Chrome/Edge SQLite cookies-ka iyo Facebook Graph API summada (EAAB...), weydiin graph.facebook.com/v19.0/me/adaccounts isla markiiba si aad u daadiso kaadhadhka shirkada ee xaddidan.

2. Qaab dhismeedka go'doominta ee 4-sharci ee ganacsiga ad-account¶

1. ** OS nadiif ah dib ugu rakib goobaha shaqada ee caabuqan: ** PC ama Mac kasta oo furay shaki .zip, .rar, .exe, ama .dmg waa in wadooyinkiisa la habeeyey oo Windows/macOS dib looga rakibay USB nadiif ah oo lagu abuuray mishiin gaar ah.
2. ** Kaadhadhka Daynta Tooska ah ee Loo Go'ay oo leh Koofiyado Maalinle Adag:** Weligaa ha ku xidhin kaadhka deynta shirkadaha aan xidhnayn ama koontada hubinta aasaasiga ah si toos ah Meta ama Google Ads. Soo saar baayacmushtar-ku xiran ** Kaarka deynta Virtual** (Ramp, Brex, Wise, Amex Virtual, Privacy.com) ku koobtay xayaysiimahaaga caadiga ah ee maalinlaha ah iyo 20 boqolkiiba. Haddii ganacsigaagu uu kharash gareeyo $200/day, a $250/day Koofida adag ee kaarka joogsiga a $10,000/hour jabsada $251 si toos ah.
3. "Maamulka Vault" vs. "Iibsadaha Warbaahinta Maalinlaha ah" Kala Saarida Doorka: Ku hay ** Maamulka Buuxa / Xakamaynta Maaliyadda *** laba koontooyin Vault oo gaar ah oo lagu xafiday ** FIDO2 furayaasha amniga qalabkaYubiKey*** oo aan waligood soo galin laptop-yada shaqada ee maalinlaha ah. Sii xisaabaadka shaqaalaha ee maalinlaha ah kaliya ** Maamul Ololaha (Standard)** rukhsadaha si buskudka la xado uusan ugu darin maamule ama uusan u beddeli karin biilasha.
4. ** Profile Barowsar u Go'ay oo leh Zero Extensions:** Gelida Meta Business Suite iyo Google Ads gudaha astaanta gaarka ah ee Chrome/Edge oo leh eber VPN, PDF, ama AI kordhinta lagu rakibay.

Lambarada degdega ah ee gobolka iyo borotokoolka wakaalada¶

Haddii eedeymaha xayaysiisyada aan la fasaxin ay daadiyeen akoonnadaada shaqada, u sheeg dembiga internetka marinka fulinta sharciga qaranka si aad u soo saarto lambar rasmi ah Booliska / Lanbarka Tixraaca Dembiyada Internetka ee bangigaaga iyo boosteejada:

• Mareykanka: Cabasho u gudbi FBI Internet Complaint Centreic3.gov* iyo FTC (ReportFraud.ftc.gov). U yeedh ** Xeerka Kaydka Federaalka E (12 CFR § 1005.6*** ee loogu talagalay lacag-bixinnada macaamiisha/ bullaacadaha ACH ama ** Xeerka Dallacaadda Daynta Caddaaladda (Fair Credit Billing Act)FCBA, 15 U.S.C. § 1666*** kaararka deynta; Lacagaha ACH ee shirkadda, codso degdeg ah R29 soo noqoshada aan la ogalayn 24 saacadood gudahood sida hoos timaada ** Xeerarka Hawlgalinta NACHA **. Lambarka degdega ah: 911.
• Kanada: Ka warbixi Xarunta Ka-hortagga Khiyaanada Kanadaantifraudcentre-centreantifraude.ca, 1-888-495-8501* iyo Xarunta Amniga Internetka ee Kanadacyber.gc.ca). Lambarka degdega ah: 911.
• United Kingdom: Ka warbixi ** Falalka Khiyaanada ah (actionfraud.police.uk, 0300 123 2040*** oo raac ** Xarunta Amniga Cyberka Qarankancsc.gov.uk)** hanuunin. U yeedho ** UK Xeerarka Adeegyada Lacag-bixinta 2017** bangigaaga lacag celin aan la oggolayn oo degdeg ah. Nambarka degdega ah: 999 ama 112 (booliska aan degdega ahayn: 101).
• Midowga Yurub: U wargeli qarankaaga CERT/CSIRT iyo qaybta dambiyada internetka ee booliiska, una yeedh EU Dib-u-habaynta Adeegyada Lacag bixinta (EU).PSD2, Dardaaran (EU) 2015/2366, Qodobka 73) u baahan adeeg bixiyayaasha lacag bixinta inay soo celiyaan wax kala iibsiga aan la ogalayn dhamaadka maalinta shaqada ee xigta (T+1). Nambarka degdega ah: 112.
• Australia iyo New Zealand: Australia dhexdeeda, warbixin ka soo gudbi ** Xarunta Amniga Cyberka ee Australiacyber.gov.au / ReportCyber, 1300 292 371)**. Gudaha New Zealand, ka warbixi CERT NZ (cert.govt.nz, 0800 237 869* iyo ** Netsafe (netsafe.org.nz)**. Nambarada degdega ah: 000 (Australia), 111 (New Zealand).
• Hindiya iyo Aasiya-Baasifigga:** Hindiya, ka warbixi qulqulka internetka ee maaliyadeed isla markiiba cybercrime.gov.in ama wac 1930 3 maalmood gudahooda oo la shaqeeyo sida hoos timaada RBI-Xeeradaha Mas'uuliyadda Wax-ka-masarka. Singapore dhexdeeda, la xidhiidh SPF Anti-Scam Center1800-722-6688* iyo SingCERT (csa.gov.sg). Eeg nambarada degdega ah.

Su'aalaha soo noqnoqda¶

Maxay tahay sababta aan u sugo inaan xareeyo lacag celinta kaarka deynta rasmiga ah haddii xisaabtayda Meta ama Google Ads ay tahay tayda si firfircoon?¶

Marka aad u sheegto bangigaaga inuu ku qasbo kaarka deynta ee rasmiga ah ee ka dhanka ah Meta Platforms ama Google LLC ee dacwooyinka lagu soo dalaco gudaha Bootfooliyada Ganacsiga ee firfircoon ama koontada Google-ka, mashiinka halista toosan ee madalku wuxuu ula dhaqmaa ganacsigaaga khatar celin celin oo isla markiiba wuxuu baabi'iyaa Xisaabtaada Xayeysiiska, Bootfooliyada Ganacsiga, Facebook Page, Dukaanka Instagram, ama Xarunta Ganacsiga Google. Markaad xidho kaadhkaaga si aad u joojiso kharashaadka cusub marka hore, ogeysiinta bangigaaga inaad sugayso credit qiyamka baayacmushtarka, oo aad si toos ah uga xarayso tigidhka akoontada Adkaynta La Dhibay Meta ama Taageerada Google, kooxda amniga gudaha ee madalku waxay buriyaan dheelitirka aan la dejin oo waxay soo celiyaan kharashyada la dajiyay iyada oo akoonnadaadu firfircoon yihiin. Kaliya kor u qaad oo noqo lacag celin joogto ah oo bangi ah haddii madalku diido sheegashadaada tanaasulka ama haddii kaadhkaaga lagu dhex isticmaalay akoon shisheeye oo aanad lahayn.

Sidee buu weeraryahanku ugu daray maamulaha damiirka ah ee Meta Business Suite markii aan shiday Xaqiijinta Laba-Factor?¶

Ku dhawaad ​​kiis kasta oo casri ah, weeraryahanku ma soo gelin adiga oo isticmaalaya magacaaga isticmaale iyo eraygaaga sirta ah. Taa baddalkeeda, adiga ama maamule kale oo ku jira Portfolio-ga Ganacsiga waxaad fulisay faylka infostealer-ka oo isu ekeysiiyay sida PDF ama zip lifaaqa kumbuyuutarka Windows ama Mac, ku rakibay kordhinta Chrome-ka ee la dhibay, ama soo gashay isku xirka phishing-ka-dhex-dhexaadka ah. Sababtoo ah browserkaagu waxa uu kaydiyaa buskud fadhi la xaqiijiyay ka dib markaad dhaafto 2FA, xatooyada buskudkaa waxay u ogolaanaysaa weerarka inuu waco Meta's `business_users` ama `system_users` dhamaadka iyadoon kicin 2FA cusub.

Waxaan ka saaray hacker-ka "Dadka" Meta Meta Business Settings, markaa maxay wali u soo muuqdaan ololeyaal cusub oo khiyaano ah?¶

Ka saarida qofka weerarka gaystay tabka Dadka waxa ay tirtirtaa oo kaliya kursigooda astaanta gaarka ah ee muuqda. Weeraryahannadu waxay ku hayaan kontorool joogto ah iyagoo u maraya saddex albaab oo qarsoon oo gudaha Meta Meta Business Settings: marka hore, ** Isticmaalayaasha -> Isticmaalayaasha Nidaamka **, halkaas oo ay ka soo saaraan calaamad gelitaanka API ee aan muuqan ee aan dhicin ee loo qoondeeyay Koontadaada Xayeysiiska; labaad, ** Isticmaalayaasha -> Shuraakada ***, halkaas oo ay kula wadaagaan hantidaada Koontada Xayeysiiska Aqoonsiga Ganacsiga Shuraakada dibadda ee ay gacanta ku hayaan; iyo seddexaad, ** Xisaabaadka -> Xisaabaadka Xayeysiiska -> Dadka ***, halkaasoo profile shakhsiyeed si toos ah loogu dhejin karo koontada xayeysiiska ee ka baxsan liiska faylalka ganacsiga ee ugu muhiimsan. Waa inaad nadiifisaa dhammaan saddexda goobood oo aad tirtirtaa sharci kasta oo Automated gudaha Maareeyaha Xayeysiiska.

Xayeysiisyada hackersku waxay jebiyeen siyaasadaha "Nidaamyada Wareega" oo akoonkayga la hakiyay. Ma la iga qaadi karaa mamnuuc?¶

Haa, waa haddii aad rafcaan ka qaadato socodka shaqo ee Koontada la Dhibay halkii aad ka gudbin lahayd rafcaan siyaasadeed oo guud. Marka uu weerarku ku sameeyo xayaysiisyada phishing ama malware-ka akoonkaaga la afduubay, bots otomaatig ah ayaa isla markaaba hakinaya akoontada xadgudubyada siyaasada. Soo gudbinta **Hawsha Xisaabta Akoonka Aan La Fasaxnayn/Akoonka Ganacsiga La Jabsado** oo wata saxamada wakhtiyada gelitaanka UTC ee dariiqyada tigidhkaga marka hore kooxda Ammaanka Koontada; Marka Nabadgelyadu ay xaqiijiso jebinta, waxay nadiifiyaan siyaasadda hakinta waxayna soo celiyaan akoonkaaga.

Ka warran haddaan arko FACEBK * ama GOOGLE *ADS Lacag baan ku soo dalacayaa bayaankayga bangiga, laakiin ma lihi xisaab xayeysiis?¶

Taas macneheedu waxa weeye in nambarkaaga kaadhka muuqaalka ama muuqaalka ah lagu xaday jebinta dibadeed oo uu ku xidhay khayaano gudaha akoonkooda Facebook ee been abuurka ah ama Google Ads. Sababtoo ah ganacsigaaga iyo astaantaada gaarka ah kuma xidhna akoontada xayaysiiska ee tuuga, wac waaxda khayaanada bangigaaga isla markaaba si aad u baabiiso kaadhka, u fayl garaysii lacag celinta isticmaalka aan la ogolayn ee hoos timaada Zero Liability, oo u gudbi 10 xaraf koodka wax kala iibsiga ee Meta's ama foomka lacagta Google ee aan la aqoonsan.

Tilmaamaha la xidhiidha¶

• La wareegidda akoonnada warbaahinta bulshada iyo jabsiga
• Kanaalka abuuraha waxaa afduubay qulqulka tooska ah ee loo yaqaan 'crypto scam'
• Baraha bulshada ee phishing iyo khiyaanada iska dhigista
• Khilaafaadka dib-u-celinta kaarka deynta, lacagaha ACH ee aan la ogolayn, iyo Xeerka E
• Nambarada degdega ah

Ilaha iyo hanuuninta rasmiga ah¶

• Xarunta Caawinta Meta Meta (Meta Platforms, Inc.):facebook.com/business/help), Maamul isticmaalayaasha nidaamka oo ka noqo Calaamadaha gelitaanka ee Goobaha Ganacsiga, iyo FACEBK Eedaha.
• ** Caawinta Xayeysiisyada Google & Xarunta Injineernimada Badbaadada Google (Google LLC):** Ka dhig Koontadaada Xayeysiisyada Google mid sugan: Ka warbixinta Dhaqdhaqaaqa Koontada Aan La Fasaxnaynsupport.google.com/google-ads/answer/9355975) iyo Maaraynta Heerarka Helitaanka, Xisaabaadka Maareeyaha (MCC), iyo Google Ads Scripts.
• ** Hay'adda Ammaanka Kaabayaasha Internetka iyo Kaabayaasha (CISA, United States) & FBI IC3:** Xakamaynta Xatooyada Kukiyada Fadhiga, Cadawga-dhexeAitM) Phishing, iyo La wareegida Koontada Ganacsiga Shirkadaha.
• Xafiiska Ilaalinta Maaliyadeed ee Macmiilka (CFPB) & Guddiga Ganacsiga ee Federaalka (FTC, United States): Runta ku jirta Sharciga Amaahda (Xeerka Z/Xeerka Biilka Xaqa ah) iyo Xeerka Wareejinta Lacagaha Elektarooniga ah (Xeerka E) Ilaalinta Biilasha Aan La Fasaxeynin.
• ** Xarunta Nabadgelyada Internetka ee Qaranka (NCSC, Boqortooyada Ingiriiska):** * Xaqiijinta Qodobo Badan, Nadaafadda OAuth Token, iyo Soo Kabashada Baraha Bulshada iyo Xisaabaadka Suuqgeynta Cloud*.