Isixhobo esiDityanisiweyo seQR ukuqweqwediswa (QRLJacking) kuWhatsApp, isiginali, iDiscord, kunye neTelegram¶

Ukuqonda ukuba kukho umntu ofunda imiyalezo efihliweyo yokuphela ukuya esiphelweni ngexesha lokwenyani okanye uthumela imiyalezo yobuqhophololo kwi-WhatsApp yakho, iSiginali, iDiscord, iTelegram, okanye iakhawunti yomgca ngelixa i-smartphone yakho isasebenza ngokwesiqhelo esandleni sakho kwaye awuzange uphume ngaphandle yeyona nto isiginitsha ye-*Linked-Device QR Code Hijacking (QRLJacking / Ghost Pairing)**. Ngokungafaniyo ne-a Ukutshintsha kweSIM okanye a ikhowudi yenkwenkwezi yenkampani (*72) kunye ne-PIN yelizwi lokuthatha (edlulisela inombolo yakho yefowuni ephambili kwi-handset entsha kwaye ngokukhawuleza ukhabe ifowuni yakho ngaphandle kwe-WhatsApp okanye iSiginali), i-Isixhobo esiQhagamshelweyo seQR Hijack ayichukumisi ukubhaliswa kwefowuni yakho yokuqala. Endaweni yoko, umhlaseli uyakukhohlisa ukuba uskene ephilayo Isixhobo seQR seKhowudi yokuBambisana neKhowudi eveliswe ngowakhe umhlaseli. WhatsApp Web, Signal Desktop, Discord, okanye Telegram Desktop ifestile yomkhangeli zincwadi (efihliweyo kwiphepha lenkohliso njenge "Qinisekisa iminyaka yakho / ikhowudi ye-QR yobuntu", "Skena ukuze ujoyine eli qela labucala le-WhatsApp/Telegram", "Skena simahla iDiscord Nitro / isikhumba seSteam", okanye "Udliwano-ndlebe lomsebenzi / ukuqinisekiswa kokuhanjiswa kwephakheji"). Ngephanyazo xa uskena ikhowudi ye-QR ngaphakathi kweskena sosetyenziso lwakho, ifowuni yakho igunyazisa ikhompyuter yomhlaseli ngokuthembekileyo Isixhobo esiDityanisiweyo seQela, ungqamaniso lwembali yakho yamva nje yomyalezo kunye nawo wonke umyalezo ongenayo nophumayo kwisikrini somhlaseli ngexesha lokwenyani ngelixa udlula ngokupheleleyo i-SMS 2FA, ii-PIN zokutshixa kunye ne-password. Ukuba endaweni yoko uskene istikha somzimba we-QR kwimitha yokupaka okanye kwitafile yokutyela ngekhamera yefowuni yakho eqhelekileyo evule iwebhusayithi yekhadi letyala lokukhohlisa, bona isikhokelo sethu QR code phishing (quishing) kunye needecals imitha yokupaka. Ukuba ujongene nokuphanga, ukuhlambalaza, okanye ingozi emzimbeni, fowunela inombolo yakho kaxakeka yendawo (911 eUnited States naseKhanada, 112 kwiManyano yaseYurophu, 999 eUnited Kingdom) okanye jonga uluhlu lwethu lwamazwe ngamazwe amanani kaxakeka.

Yenza oku ngoku¶

1. ** Vula umyalezo wakho wesikrini "Izixhobo eziQhagamshelweyo / iiSeshini eziSebenzayo" NGOKU kwaye uphelise yonke idesktop engaziwayo okanye iseshoni yesikhangeli **:
2. Ku WhatsApp (iPhone & Android): Cofa Iisetingi (okanye iMenu enamachaphaza amaThathu) > Izixhobo eziQhagamshelweyo. Jonga kuluhlu oluphantsi kwe Isimo seSixhobo (Google Chrome (Windows), Mac OS, Firefox (Linux), WhatsApp Desktop). Cofa sonke isixhobo esinye ongasaziyo ngeepesenti ezili-100 kwaye ucofe **Phuma **.
3. KuMqondiso (iPhone & Android): Cofa Umfanekiso weProfayile yakho (phezulu ekhohlo) > Useto > Izixhobo eziQhagamshelweyo. Cinezela nayiphi na iseshoni yedesktop engaziwayo (Signal Desktop) kwaye ukhethe Susa unxulumaniso.
4. KwiTelegram (iPhone & Android): Cofa Useto > Izixhobo (Active Sessions). Thepha ** Cima zonke ezinye iiSeshini ** ngokukhawuleza (kwaye uphonononge uluhlu olungezantsi kwalo: ukuba umhlaseli udibanise iseshoni yabo ngaphantsi kweeyure ezingama-24 ezedlulileyo kwaye iTelegram ithi * "Izixhobo ezitsha azikwazi ukuphelisa iiseshoni ezindala kwiiyure ze-24"*, landela iseshoni yethu yongxamiseko-ukubulala ngokudlula kwiSigaba 1 ngezantsi).
5. kwiDiscord (iOS & Android): Cofa Wena (ezantsi ekunene) > Useto (Umfanekiso weGear) > Izixhobo -> cofa Phuma Zonke Izixhobo ezaziwayo (kwaye utshintshe igama lokugqitha lakho leDiscord ngoko nangoko, elingasebenziyo zonke iithokheni zoqinisekiso lweDiscord ezisebenzayo).
6. Jonga kwimiyalezo yakho ethunyelweyo, iincoko ezigciniweyo, kunye "neNkunkuma / isandula kucinywa" ukuze ubone ukuba umhlaseli uthumele ntoni na okanye wathumela ngaphandle ngelixa isixhobo sakhe esiDityanisiweyo sasiqhagamshelwe:
7. Abahlaseli abaqweqwedisa a WhatsApp Web, Telegram, okanye Discord Iseshoni ngekhowudi ye-QR ngokukhawuleza khangela ** Iingxoxo ezigciniweyo ** (bagcina iingxoxo apho bathumela khona imiyalezo kubahlobo bakho okanye umphathi ocela imali ukuze ezo ncoko zihlale zifihliweyo kuluhlu lwakho lwengxoxo oluphambili) kwaye ukhangele imbali yakho yencoko yamagama "password", "seed", "bank", "passport", "tax", "SSN", okanye "code".
8. Khupha nayiphi na imicu engaziwayo egciniweyo ngaphakathi kuWhatsApp/iTelegram ngoku ukuze ubone ukuba ngubani umhlaseli othumele umyalezo kwiakhawunti yakho.
9. Ukuba iakhawunti yakho yeDiscord iye yaqweqwediswa ngomkhonyovu "wokuQinisekisa okungeyonyani / iKhowudi ye-Nitro QR yasimahla", rhoxisa ngoko nangoko iThokheni yakho yeDiscord Auth ngokutshintsha igama eligqithisiweyo KWAYE ujonge iBhili yakho / iMpahla yeZipho:
10. Ukuskena ikhowudi yeQR ngaphakathi kwe- Discord Mobile App (Scan QR Code) ayidibanisi nje umbukeli oyiqabane: inika umhlaseli i-akhawunti epheleleyo yokuqinisekisa uphawu, ebavumela ukuba bathenge amakhulu eedola Izipho zeDiscord Nitro usebenzisa ikhadi lakho letyala eligciniweyo okanye i-PayPal kunye ne-DM ikhonkco le-malware kuzo zonke iiseva zakho.
11. Jonga ukuba ngaba umhlaseli ukukhohlisile na ukuba uchwetheze "iKhowudi yokuBhanqa yaBalinganiswa abasi-8" (Link with Phone Number Instead) kuWhatsApp:
12. Ukongeza kwiikhowudi ze-QR, ngoku i-WhatsApp ixhasa ukudibanisa isikhangeli se-intanethi ngokuchwetheza ikhowudi yealphanumeric** enamagama ayi-8** (XXXX-XXXX) kwifowuni yakho ("Enter code to link new device"). Abaqhathi bathumela i-pop-ups yokhuseleko lobuxoki besithi "Faka ikhowudi yokuqinisekisa A7K9-M2P4 kuWhatsApp ukuqinisekisa iakhawunti yakho", ephumeza okuthe cwaka okufanayo WhatsApp Web iqabane ukuqweqwedisa njengoko uskena ikhowudi QR. Ukuphelisa zonke Izixhobo eziQhagamshelweyo kwiNyathelo 1 zibulala zombini iiseshoni eziqhagamshelwe kwi-QR kunye ne-8-code-code-linked ngoko nangoko.
13. **Lumkisa abafowunelwa bakho kunye neencoko zeqela ukuba iseshoni ekhohlakeleyo ifikelele ngokufutshane kwiakhawunti yakho **:
14. Thumela uhlaziyo lwemeko ecacileyo okanye umyalezo kuye nawuphi na umfowunelwa othunyelwe ngumhlaseli ukuze kungabikho mntu ucofa ikhonkco lokukhohlisa, iskena ikhowudi yesibini ye-QR, okanye uthumele imali ngeZelle, iVenmo, iRevolut, okanye i-crypto.
15. ** Jikelezisa nawaphi na amagama agqithisiweyo, amabinzana embewu ye-cryptocurrency, okanye iifoto ezibuthathaka ebezihleli ngaphakathi kwencoko yakho ethi "Umyalezo Wena / Imiyalezo Egciniweyo"**:
16. Izigidi zabantu zisebenzisa ** WhatsApp "Umyalezo Wena (Wena)"**, Telegram "Imiyalezo egciniweyo", Isiginali "Inqaku kuSelf", okanye i-personal Discord Server ** njengencwadana yangasese yokugna amagama ayimfihlo, iifoto zeelayisenisi zokuqhuba / iipaspoti, iiPDF zerhafu, kunye namabinzana okubuyisela i-crypto. Umzuzu umhlaseli eqhagamshela iqabane lomkhangeli zincwadi wedesktop ngekhowudi ye-QR, incoko yokuqala yokukhuphela iscript ezenzekelayo ngu Saved Messages / Note to Self / You.

Umthi wesigqibo: ukuxilonga kunye nokuphelisa iQR Hijack yeSixhobo esiDityanisiweyo (QRLJacking)¶

Landela lo mthi wesigqibo ukuchonga indlela umhlaseli aqhagamshele ngayo kwiakhawunti yakho kwaye uqhawule ngokupheleleyo ukufikelela kwakhe:

flowchart TD
    Symptom["Imiyalezo eThunyelweyo engachazwanga, iiNgxoxo ezigciniweyo, iiRisithi eziFundiweyo, okanye iSeshini yeDesktop engaqhelekanga emva kokuskena iKhowudi yeQR okanye uFaka iKhowudi yeeChar ezisi-8."] --> AppType{"Leliphi iQonga leMiyalezo ebekujoliswe kulo?"}

    AppType -->|"I-WhatsApp (iKhowudi ye-QR OKANYE iKhowudi yeempawu ezisi-8 'Ikhonkco ngeNombolo yeFowuni')"| WAPath["INYATHELO 1A: Vula i-WhatsApp -> Useto -> Izixhobo eziQhagamshelweyo -> Cofa zonke izixhobo ezidwelisiweyo -> Cofa 'Phuma'"]

    AppType -->|"Umqondiso (QR yeDesktop eQhagamshelweyo)"| SigPath["INYATHELO 1B: Vula uMqondiso -> Useto -> Izixhobo ezidityanisiweyo -> Cofa iDesktop engaziwayo -> Cofa 'Unlink'"]

    AppType -->|"ITelegram (Ngena ngeQR / Iseshini esebenzayo)"| TGPath["INYATHELO 1C: Vula iTelegram -> Useto -> Izixhobo -> Cofa 'Cima zonke ezinye iiseshini' + Vula i-Password yoQinisekiso lwe-2"]

    AppType -->|"I-Discord ('Scan QR Code' Nitro / iScam yoQinisekiso lweServer)"| DiscPath["INYATHELO 1D: Vula iDiscord -> Useto -> izixhobo -> 'Phuma kuzo zonke izixhobo ezaziwayo' + Guqula igama lokugqithisa leDiscord ngoko nangoko (Seta kwakhona iToken ye-Master Auth) + Susa amakhadi eNtlawulo agciniweyo"]

    WAPath --> AuditSaved["INYATHELO 2: Jonga 'umyalezo wakho / ogciniweyo weMiyalezo / Qaphela kwiSiqu' kunye 'neNgxoxo egciniweyo' ukubona ukuba yeyiphi iData ekhutshelweyo okanye ethunyelwe ngumhlaseli"]
    SigPath --> AuditSaved
    TGPath --> AuditSaved
    DiscPath --> AuditSaved

    AuditSaved --> SecretsExposed{"Ngaba amagama okugqithisa, amabinzana embewu, amaqhosha e-API, okanye iiFoto ze-ID zigcinwe kwiMbali yakho yeNcoko?"}

    SecretsExposed -->|"Ewe: Igcinwe 'kwiMiyalezo egciniweyo' okanye kwiNgxoxo zakutsha nje"| RotateSecrets["NGOKUXAMISEKILEYO: Jikelezisa onke amaPasswords/izitshixo eziveziweyo, Hambisa i-Crypto kwiGama leMbewu eNtsha, kwaye uFreeze iTyala ukuba i-ID/SSN yavezwa."]
    SecretsExposed -->|"Akukho ziNkcazo zinovakalelo kwiiNgxoxo"| NotifyContacts["INYATHELO LESI-3: Khupha iiNgxoxo ezifihlakeleyo, Cima iMiyalezo yeScam kuye wonke umntu, kwaye Ulumkise abafowunelwa ukuba bangacofa amakhonkco."]

    RotateSecrets --> NotifyContacts

Njani QRLJacking ("Ghost Pairing") Isebenza emva kweSigcawu¶

Kutheni uye QRLJacking (Quick Response Code Login Jacking) yiba ngoyena mntu uhlaselayo uthandwayo ngamaqela eentlola ezixhaswa ngurhulumente (APT28, Star Blizzard, UNC4221) kunye nabaqhatha ngemali abajolise kwiintatheli, abaphathi, kunye nabasebenzisi bemihla ngemihla? Kuba lugqitha ngokupheleleyo lonke ulawulo lokhuseleko lwemveli kwiakhawunti yakho:

1. Kutheni i-SMS 2FA, ii-PIN zoQinisekiso eziNyathelo-mbini, kunye neTshixo yokuBhalisa UNGAMELI QRLJacking¶

Xa umhlaseli ezama ukuba iakhawunti yakho ye-WhatsApp, iSiginali, okanye iTelegram ngendlela yakudala (ngokuchwetheza inombolo yefowuni yakho kwifowuni entsha), babethe iindonga ezimbini: 1. Kuya kufuneka babambe iSMS enamanani ama-6 okanye umnxeba welizwi othunyelwe kumphathi wakho weselula. 2. Nokuba bayayinqanda loo SMS, babetha i-PIN yakho yokuQinisekisa aManyathelo Ambini/i-PIN yokutshixa yoBhaliso**.

QRLJacking ihamba ijikeleze zombini iindonga ngokubuyisela umva isalathiso sokungena: 1. Inyathelo loku-1 (Umhlaseli Uvelisa iSokethi yokuBambisana ePhilayo): Umhlaseli ozisebenzelayo weNode.js / iseva yePlaywright ivula isikhangeli esingenantloko sokwenyani web.whatsapp.com, discord.com/login, okanye web.telegram.org. Loo mncedisi osemthethweni uvelisa i-** ephilayo, ehlaziyayo ngokutshintsha ikhowudi ye-cryptographic pairing ** (esebenzayo kwi-20 ukuya kwi-60 imizuzwana, ihlaziywa ngokuqhubekayo kwiWebSocket). 2. Inyathelo lesi-2 (Umhlaseli usasaza iKhowudi ye-QR eKhokeleyo kwiPhepha le-Lure): Umhlaseli ushumeka umfanekiso ophilayo weWebSocket QR ngaphakathi kwiphepha lewebhu elikholisayo: - * "ICloudflare / i-WhatsApp yokujonga uKhuseleko: Skena le khowudi ye-QR kuWhatsApp (Settings > Linked Devices) ukuqinisekisa iakhawunti yakho nokuthintela ukumiswa."* - * "Isimemo seQela lasekuhlaleni eliKhethekileyo: Skena ngoWhatsApp ukuze ujoyine iVIP的投资/Crypto/Neighbourhood Group."* - * "Ukungavisisani Wick / Captcha.bot UQinisekiso lweSeva: Skena le khowudi yeQR ngeDiscord Mobile App ukuvula zonke izitishi kule seva."* - "Ikhowudi ye-WhatsApp eneempawu ezisi-8 (Link with Phone Number)": Endaweni yokubonisa ikhowudi yeQR kwaphela, umhlaseli ucofa "Ikhonkco nenombolo yefowuni" web.whatsapp.com isikrini, chwetheza inombolo yakho yefowuni, ifumana ** ikhowudi enamagama ayi-8** (G4M9-K2L8), kwaye ibonise umyalezo kuwe othi: "Ukuqinisekisa ukuba ungumntu / RSVP kwesi siganeko, ngenisa ikhowudi G4M9-K2L8 xa kusithi gqi uWhatsApp efowunini yakho." 3. Inyathelo lesi-3 (Ifowuni yakho iSayina ngokuCriptographical isitshixo sikawonke-wonke soMhlaseli): Kuba uskena ikhowudi ye-QR (okanye uchwetheza ikhowudi enoonobumba abasi-8) ukusuka ngaphakathi kwefowuni yakho esele iqinisekisiweyo esisiseko, i-WhatsApp/Signal/Telegram/Discord ikuthatha oku njengokuba ubhanqa eyakho ilaptop ngenjongo. Ifowuni yakho yenza isitshixo esitsha sesazisi sezixhobo ezininzi, isayine isitshixo sikawonke-wonke somhlaseli (Curve25519), kwaye ngoko nangoko uqokelela kwaye ulayishe imbali efihliweyo yemiyalezo yakho yamva nje ngqo kwisikhangeli somhlaseli.

2. Ukuthelekisa i-Platform: Yintoni efunyanwa ngumhlaseli xa uhlola iKhowudi yabo ye-QR yokungena¶

Isigaba 1: I-Platform-by-Platform Containment Emergency & Forensics¶

1. I-WhatsApp: Uphicotho-zincwadi kunye nokuSungula iZixhobo eziDityanisiweyo (kwaye Ukuyekisa i-8-Character Code Attack)¶

1. Vula i-WhatsApp kwi-smartphone yakho yokuqala.
2. Cofa Iisetingi (ezantsi ekunene kwi-iPhone) okanye i-Amachaphaza amaThathu eMenu* (phezulu ekunene kwi-Android) -> cofa Izixhobo eziQhagamshelweyo.
3. Ngaphambi kokuba ucofe "Phuma" kwisixhobo esingaqhelekanga, thatha umfanekiso weskrini Linked Devices screen ukuba ufuna ubungqina bendawo yokusebenza, ukuchwechwa, okanye uphando lwamapolisa:
4. Cofa kwingeniso yesixhobo esingaqhelekanga (Google Chrome (Windows) okanye Mac OS): I-WhatsApp iya kubonisa ** isitampu sexesha sokugqibela esisebenzayo ** kwaye ngamanye amaxesha **isixeko esimalunga / indawo ** yaloo seshoni.
5. Cofa u-Phuma* kwisixhobo ngasinye esidwelisiweyo (nokuba esinye sijongeka njenge "Google Chrome", phuma **zonke ** kuzo ukuze uqiniseke ukuba i-100% iqinisekile ukuba i-socket ye-browser yomhlaseli itshatyalalisiwe; ungasoloko uqhagamshela eyakho ilaptop yokwenyani kamva).
6. Jonga ifolda yakho ye-WhatsApp ethi "Archived" kwangoko:
7. Skrolela encotsheni yoluhlu lwakho IiNgxoxo kwaye ucofe ku-Kugciniwe*.
8. Abaqhankqalazi abaqweqwedisa iseshini yeWebhu kaWhatsApp phantse ngalo lonke ixesha ** Gcina ugcino ** kwaye ** Thulisa ** incoko yabahlobo / amalungu osapho abenza ubuqhophololo ukuze xa umhlobo wakho ephendula * "Ngokuqinisekileyo, ithini iakhawunti yakho yeZelle / yebhanki?"*, akukho saziso siphumayo kwiscreen sefowuni yakho.
9. Vula yonke incoko egciniweyo, cima nayiphi na imiyalezo yobuqhophololo ethunyelwe ngumhlaseli (** Cofa kwaye Ubambe > Cima > Cima wonke umntu**), kwaye ufowunele okanye uphawule ngelizwi abo bafowunelwa ngoko nangoko.
10. Cima "uQhagamshelwano ngeNombolo yeFowuni" I-Push Prompts ngokungahoyi iikhowudi ezingacelwanga:
11. Ukuba ukhe wafumana isaziso sokutyhala esingacelwanga esivela kuWhatsApp esithi "Uzama ukudibanisa isixhobo? Faka ikhowudi..." xa ungakhange ucele ikhowudi kwikhompyuter yakho, cofa Cima / Cima kwangoko; umntu uchwetheze inombolo yakho yefowuni web.whatsapp.com ngethemba lokuba ungafaka ikhowudi yabo.

2. ITelegram: Yintoni omawuyenze ukuba iTelegram ikuthintele ekupheliseni iSeshini yeHacker (The 24-Hour New Device Rule)¶

ITelegram inomgaqo ombi wokhuseleko: Iseshoni entsha yokungena ayikwazi ukuphelisa endala iiseshoni ezisebenzayo de iseshoni entsha ifakwe kwiiyure ezingama-24. - Imeko A (Ifowuni yakho ESELE ingenile kwiTelegram ngaphambi kokuba umhlaseli askene ikhowudi ye-QR): Ngenxa yokuba ifowuni yakho iyiseshini ** endala ** kwaye i-browser edibeneyo ye-QR yomhlaseli yiseshoni entsha ** iseshoni, ifowuni yakho ** inokuphelisa iseshoni yomhlaseli ngokukhawuleza ngokulinda kwe-zero **. Yiya ku ** Useto > Izixhobo , cofa iseshoni yomhlaseli, kwaye ucofe Yekisa iSeshini (okanye ucofe Cima zonke ezinye iiseshini). - Imeko B (Umhlaseli ulinde iiyure ezingama-24 emva kokudibanisa iseshoni yakhe ye-QR, wayiphelisa iseshoni yakho yefowuni, kwaye usanda kungena kwakhona kwifowuni yakho namhlanje): Ngoku ifowuni yakho ithathwa njenge "isixhobo esitsha (ngaphantsi kweeyure ezingama-24 ubudala)", ngoko xa ucofa iseshoni yomhlaseli ukuyiphelisa, iTelegram iveza impazamo ithi: "Ngenxa yezizathu zokhuseleko, awukwazi ukuphelisa iiseshoni ezindala kwisixhobo esitsha esiqhagamshelwe. Nceda ulinde iiyure ezingama-24." Nantsi indlela yokoyisa oko kuvalwa kweeyure ezingama-24 ngokukhawuleza: 1. Jonga ukuba usenaso nasiphi na esinye isixhobo esidala ** (esifana ne-iPad, ifowuni endala, okanye iPC yakho yasekhaya ene Telegram Desktop) efakwe kwiakhawunti yakho yeTelegram ngaphezulu kweeyure ezingama-24; vula ** Useto > Izixhobo ** kweso sixhobo esidala kwaye uphelise umhlaseli ngokukhawuleza. 2. Ngokukhawuleza uye ku Useto > Ubumfihlo kunye nouseleko > Ukuqinisekiswa kwamanyathelo amabini (Iphasiwedi yefu) ** kwaye mhlawumbi uvule i-Password yefu okanye utshintshe i-Password yakho yefu ekhoyo + i-imeyile yoBuyiselo ukuze umhlaseli angakwazi ukukuvalela ngaphandle. 3. Cwangcisa ** Useto > Izixhobo > Cima ngokuzenzekelayo iiSeshini eziDala kwelona xesha lifutshane (1 week), hlala ngaphakathi kwakho Settings > Devices isikrini ekunene njengoko isibali-xesha seeyure ezingama-24 siphelelwa (okanye jonga umhlaseli ezama ukuphelisa iseshoni yakho entsha), kwaye ucofe Cima zonke ezinye iiSeshini ngoko nangoko iwindow yeeyure ezingama-24 iyacinywa.

3. IDiscord: Ukufumana kwakhona kwi "Scan QR Code / Fake Verification Bot / Free Nitro" Hijack¶

Kutheni ukuqweqwediswa kwe-Discord QR kuyingozi ngokukhethekileyo: Ngokungafaniyo neWebhu kaWhatsApp (apho iskena se-QR sidala kuphela iseshoni yeqabane elilinganiselweyo elingenako ukutshintsha igama lokugqitha leakhawunti okanye inombolo yefowuni), iskena ikhowudi ye-QR yokungena yeDiscord (Settings > Scan QR Code) inika isikhangeli somhlaseli uphawu olupheleleyo loqinisekiso lomsebenzisi. Ngaphakathi kwemizuzwana emi-5 yokuskena kwakho, iscript yebhot yomhlaseli ezenzekelayo: - Iitshekhi users/@me/billing/payment-sources kwaye uthenge ** 10x $ 9.99 okanye $ 99.99 Discord Nitro Gift Subscriptions ** usebenzisa iVisa yakho egciniweyo, Mastercard, okanye PayPal (ukuthumela amakhonkco esipho seNitro esihlawulekayo kwi-hacker). - Thumela i-DM yokukhohlisa ("Bro check out this game I'm testing" okanye "Free $50 Steam gift card") kuye wonke umntu okuLuhlu lwabahlobo bakho nakuyo yonke iseva yeDiscord ekuyo. - Iwisa into eqhubekayo Discord Backup Code okanye ulungisa eyakho app.asar umxhasi wedesktop ukuba i-malware nayo ibiqhutywa.

Amanyathelo achanekileyo oBuyiselo lweDiscord: 1. Vula iDiscord -> ** Useto loMsebenzisi (Umfanekiso weGear) > Iakhawunti yam > Guqula igama lokugqithisa**. Ukutshintsha igama lokugqitha lakho leDiscord ngoko nangoko yenza ukuba yonke ithokheni yoqinisekiso ekhoyo ingasebenzi kuzo zonke izixhobo kunye nemibhalo, ukukhaba umhlaseli ngaphandle komzuzwana omnye. 2. Yiya ku ** Useto lomsebenzisi > Izixhobo ** kwaye ucofe ** Phuma kuzo zonke izixhobo ezaziwayo ** ngomlinganiselo olungileyo. 3. Yiya ku ** Useto lomsebenzisi> iakhawunti yam> uQinisekiso lwezinto ezininzi**: - Cofa Jonga iiKhowudi zogcino > Yenza iiKhowudi eziNtsha (kuba isikripthi somhlaseli sikhuphele ngokuzenzekelayo ikopi yeekhowudi zakho ezidala ezinedijithi ezisi-8 zekhowudi yokugcina yeDiscord okwesibini uskene ikhowudi yeQR). - Susa naziphi na ezingaqatshelwanga Izitshixo zoKhuseleko / iiPasskeys okanye i-SMS Backup Auth amanani umhlaseli wongeziweyo. 4. Yiya ku ** Useto lomsebenzisi > Intlawulo ** kwaye ** Imirhumo / Impahla yesipho **: - Cima onke amakhadi etyala agciniweyo kunye noqhagamshelo lwe-PayPal. - Ukuba umhlaseli uthenge ngaphandle kwemvume Izipho zeDiscord Nitro kwikhadi lakho, USUKU fayilisha imbuyekezo yekhadi letyala kwibhanki yakho kuqala (Inkqubo yokuhlawula ezenzekelayo yeDiscord ivala ngokusisigxina nayiphi na i-akhawunti yeDiscord efayilisha imbuyekezo yebhanki). Endaweni yoko, ngenisa ngokukhawuleza I-Discord Trust & noKhuseleko / Itikiti leMbuyiselo yeNtengiselwano engagunyaziswanga apha dis.gd/billing ukuxela ukuba iakhawunti yakho ithotyiwe ngeQR phishing; Inkxaso yeDiscord inokuphelisa izipho zeNitro ezingahlawulelwanga kwaye ubuyisele ikhadi lakho ngaphandle kokuvala iakhawunti yakho.

Inqanaba lesi-2: Ukujongana nokuKhutshwa kweDatha ukusuka "kwiMiyalezo egciniweyo" / "Ziyalezo ngokwakho"¶

Nje ukuba ukhabe umhlaseli ngaphandle kweZixhobo eziQhagamshelweyo, chitha imizuzu eli-10 uphicotha ukuba yeyiphi idatha enovakalelo eveziweyo kwimbali yakho yencoko:

1. Vula incoko yakho (Message Yourself kuWhatsApp, Saved Messages kwiTelegram, Note to Self kuMqondiso):
2. Ngaba ukhe wathumela umyalezo nge-igama lokugqitha, inombolo yebhanki yendlela, ifoto yekhadi lakho letyala, ifoto yencwadana yakho yokundwendwela/yelayisensi yokuqhuba, imbuyekezo yerhafu, isitshixo se-SSH, okanye ibinzana lembewu ye-crypto-12/24?
3. Iyazenzekela QRLJacking izikhokelo (EvilQr, QRLJacker, kunye neTelegram yesiko / i-WhatsApp dumpers) zicwangciswe ukukhuphela i-100 yepesenti yeendaba zakho zokuxoxa ngokwakho kunye nombhalo ngaphakathi kokuqala ** imizuzwana eyi-15 ** ye-QR scan.
4. Ukuba ibinzana lembewu ye-crypto okanye isitshixo sabucala sakhe sancamathiselwa okanye safotwa kwimbali yakho yencoko, yiphathe njengelahleko ngoku kwaye ulandele yethu cryptocurrency wallet drain kunye nembewu-phrase compromise isikhokelo.
5. Ukuba ifoto yeKhadi lakho loKhuseleko lwezeNtlalo, iLayisensi yokuqhuba, okanye iPaspoti ibikwimbali yakho yencoko, beka umlinganiselo wetyala simahla e-Equifax, Experian, kunye neTransUnion usebenzisa impendulo yokubiwa kwezazisi isikhokelo.
6. Khangela iBar yeNgxoxo yakho ngamagama angundoqo akuMngcipheko omkhulu:
7. Kwibha yokukhangela ephezulu ye-WhatsApp, iSiginali, iTelegram, okanye iDiscord, khangela nganye nganye:
   • password / passcode / PIN
   • login / account
   • bank / routing / IBAN
   • seed / phrase / wallet / 0x
8. Jikelezisa zonke iziqinisekiso ezivela kwezo ziphumo zophendlo.

Isigaba sesi-3: uKhuselo oluSisigxina oluchasene neKhowudi ye-QR kunye ne-Companion Device Hijacking¶

Beka ezi zikhuselo zintlanu endaweni namhlanje ukuze wena okanye ilungu losapho lingabinakho ukukhohliswa ukuba lidibanise isixhobo esikhohlakeleyo seqabane:

• 1. Qonda umahluko phakathi kwe-App yeKhamera yefowuni yakho rhoqo kunye ne-In-App "Qhagamshela isixhobo" iskena:
• ** Iikhowudi zeQR eziqhelekileyo** (iimenyu zokutyela, amatikiti omnyhadala, iikhowudi zeWi-Fi, amakhonkco oluntu, okanye iWhatsApp/iTelegram esemthethweni wa.me / t.me amakhonkco esimemo seqela) iskeniwe ngeyakho eqhelekileyo iPhone okanye Android Camera app, ejonga kuqala i-URL (https://...).
• In-App "Qhagamshela isixhobo" Izikena (WhatsApp > Settings > Linked Devices > Link a Device, Signal > Linked Devices, Discord > Scan QR Code) zikuphela kokuloga ikhompyuter yesibini kwiakhawunti yakho. Ungaze uvule Settings > Linked Devices Ngaphandle kokuba uhleli ngokwasemzimbeni phambi kwelaptop yakho osandul’ ukuyivula web.whatsapp.com kuwe.
• **2. Yenza i-Biometric App Lock kunye neePasskeys ku-WhatsApp, uMqondiso, kunye neTelegram **:
• Nangona i-WhatsApp sele ifuna i-ID yoBuso / i-ID yokuchukumisa / i-Fingerprint ngaphambi kokuvula ifayile Link a Device ikhamera, ivula ** Isitshixo sosetyenziso (Settings > Privacy > App Lock / Screen Lock)** ithintela umntu oboleka ifowuni yakho engavalwanga imizuzwana eli-15 ethekweni, kwindawo yokutyela, okanye edesikeni yeofisi ekuvuleni i-WhatsApp nokuskena ikhowudi ye-QR kwifowuni yakhe ukuze ahlole imiyalezo yakho ethe cwaka kwiintsuku ezili-14 ezizayo.
• (Qaphela: Ukumamela kwasekhaya nge WhatsApp Web / Signal Desktop / Telegram Web, apho iqabane elinomona okanye umntu osebenza naye ebamba ifowuni yakho evuliweyo kangangemizuzwana eli-10 ngoxa ukwindlu yangasese aze ajonge ikhowudi ye-QR kwilaptop yakhe, yenye yezona ndlela zixhaphakileyo zokuhlola abanye abantu.)
• 3. Uphicotho Settings > Linked Devices Kanye ngenyanga kuzo zonke ii-Apps zokuthumela imiyalezo:
• Kwenze umkhwa wenyanga ukuvula Linked Devices / Active Sessions kwi-WhatsApp, iSiginali, iTelegram, iDiscord, kunye ne-ID kaGoogle/Apple ukuqinisekisa ukuba iibrowser ezingaziwayo okanye iidesktops zincanyathiselwe.
• 4. Vula uQinisekiso olunamanyathelo amabini (Registration Lock / Cloud Password):
• Ngelixa uQinisekiso olunaManyathelo amabini aluthinteli QRLJacking (kuba QRLJacking yenzeka ngaphakathi kwifowuni yakho esele ingenile), uvule Isiqinisekiso esiManyathelo amabini kuWhatsApp (Settings > Account > Two-step verification), Umqondiso (Settings > Account > Registration Lock), kunye neTelegram (Settings > Privacy and Security > Two-Step Verification) unqanda umhlaseli ekunyuseni iseshoni yeqabane ukuya kwinombolo epheleleyo yenombolo yefowuni.
• 5. Ungaze Ugcine Amagama Okugqithisa Angabhalwanga-Sibhalo, Amabinzana eMbewu, okanye Iifoto zesazisi "kwiMiyalezo egciniweyo" okanye "Qaphela KuWe":
• Cima onke amagama agqithisiweyo, iifoto zekhadi letyala, kunye namabinzana embewu kwi-apps yakho yemiyalezo namhlanje (Delete for Everyone) kwaye uzihambise kumphathi wegama eliyimfihlo ozinikeleyo, onguziro-ulwazi olufihliweyo (Bitwarden, 1Password, KeePassXC, okanye Amagama okugqithisa we-Apple).

Iinombolo zengingqi zikaxakeka kunye neeprothokholi ze-arhente¶

Ufikelelo olungagunyaziswanga kwiiakhawunti zemiyalezo yabucala nge QRLJacking okanye uthungelwano-sixhobo sokudibanisa isixhobo lulwaphulo-mthetho phantsi kocingo, ukuchwechwela, kunye nemithetho yokusetyenziswa kakubi kwekhompyuter kwihlabathi jikelele:

• I-United States neKhanada:
• Iinkonzo zikaNgxamiseko: Cofa 911 ukuba ukuqweqwediswa kweakhawunti kubandakanya ukuchwechwelwa ekhaya, ukuxwilwa ngesondo, okanye isoyikiso esikhawulezileyo kukhuseleko lomzimba.
• Iziko le-FBI le-Intanethi yesikhalazo soLwaphulo-mthetho (IC3) & CISA: Xela ukuthathwa kweakhawunti yekhowudi yeQR kunye nobuqhophololo bokulinganisa imali e ic3.gov (I-CISA kunye ne-FBI bakhuphe iingcebiso ezithile ngesiRashiya/APT Signal kwaye WhatsApp Isixhobo esidityanisiweyo se-QR sijolise kurhulumente, umkhosi, kunye neeakhawunti zentatheli).
• Iziko laseKhanada elichase ubuqhophololo (CAFC): Ingxelo kwa antifraudcentre-centreantifraude.ca okanye 1-888-495-8501.
• United Kingdom:
• Iinkonzo zikaNgxamiseko: Cofa 999 (okanye 101 kumapolisa angengawo awexesha likaxakeka).
• Amanyathelo ubuqhophololo kunye neNCSC: Xela ukufikelela kwiakhawunti yomyalezo ongagunyaziswanga phantsi koMthetho wokuSebenzisa kakubi kweKhompyutha ka-1990* e-actionfraud.police.uk* (0300 123 2040) kwaye uxele ii-URL ezikhohlakeleyo ze-QR zokukhohlisa kwi-NCSC e- ncsc.gov.uk.
• IManyano yaseYurophu:
• Iinkonzo zikaNgxamiseko: Cofa 112 kuwo onke amazwe angamalungu e-EU.
• Iiyunithi zeSizwe zoLwaphulo-mthetho lwe-Cybercrime kunye ne-ENISA: Ingxelo nge-portal ye-cybercrime ye-Europol (europol.europa.eu/report-a-crime/report-cybercrime-online).
• I-Australia neNew Zealand:
• Iinkonzo zikaNgxamiseko: Cofa 000 eOstreliya okanye 111 eNew Zealand.
• Ingxelo yeCyber (ACSC) kunye neScamwatch (eOstreliya): Xela i-WhatsApp / iTelegram "Molo Mama / Ukuzenza ongeyena" kunye nokuthathwa kweakhawunti ye-QR e cyber.gov.au (1300 CYBER1) okanye scamwatch.gov.au.
• CERT NZ (eNew Zealand): Ingxelo e cert.govt.nz.
• Indiya kunye neAsia-Pacific:
• I-Portal yeSizwe yeNgxelo yoLwaphulo-mthetho lwe-Cyber yaseIndiya: Cofa 1930 okanye uxele ukuqweqwediswa kwe-WhatsApp/Telegram e-*cybercrime.gov.in**.
• ** Amapolisa aseSingapore (SPF Iziko lokuNqanda ubuqhophololo) kunye neCSA**: Fowuna 1799 (ScamShield) okanye 1800-722-6688 (ISingapore ifumene amaza amakhulu obuxoki "I-Singpass / Unyulo / Uvavanyo" i-WhatsApp Web QR-linking scams).

Imibuzo ebuzwa qho¶

Umntu angayifunda njani imiyalezo yam ye-WhatsApp okanye yeSignali kwikhompyuter yakhe xa i-WhatsApp kunye neSignal "End-to-End Encrypted"?¶

Uguqulelo oluntsonkothileyo ekupheleni ukuya ekupheleni (`E2EE`) kuthetha ukuba imiyalezo iguqulelwe ngokuntsonkothileyo phakathi kwezixhobo ezigunyazisiweyo zeakhawunti yakho kunye nezixhobo ezigunyazisiweyo zomamkeli wakho ukwenzela ukuba abathwali be-telecom okanye iseva yemiyalezo ngokwayo ikwazi ukuyifunda xa ihamba. Nangona kunjalo, xa uskena umhlaseli `WhatsApp Web` okanye `Signal Desktop` Ikhowudi ye-QR usebenzisa ifowuni yakho Izixhobo ezidityanisiweyo iskena (okanye xa umntu onofikelelo ngokwasemzimbeni kwifowuni yakho engatshixwanga eskena esakhe iscreen selaptop), ifowuni yakho ichaza ikhompyuter yomhlaseli njengenye enye yeendawo ZAKHO ezisemthethweni ezifihliweyo ekupheleni ukuya ekupheleni. Ukusukela ngaloo mzuzu de ucofe u-"Phuma" kwiZixhobo eziQhagamshelweyo, ifowuni yakho ifihla ikopi yomyalezo ngamnye ngokukodwa isitshixo sesikhangeli somhlaseli.

Yintoni umahluko phakathi kokuskena ikhowudi ye-QR nge-iPhone/Android Camera app yam xa ithelekiswa nokuskena ngaphakathi kwe-WhatsApp/Signal/Discord's "Izixhobo eziQhagamshelweyo" iskena?¶

Xa uskena ikhowudi ye-QR usebenzisa i-*iPhone okanye i-app yekhamera ye-Android **, ikhowudi ye-QR idla ngokuba nekhonkco lewebhu (`https://...`), enokukhokelela kwiwebhusayithi yokukhohlisa ([ukuphuma](qr-code-phishing-quishing-parking-meter-decals-and-malicious-redirects.md)) ekucela ukuba uchwetheze igama eligqithisiweyo okanye inombolo yekhadi letyala, **kodwa ukuskena nje i-URL yewebhu nge-app yakho yekhamera eqhelekileyo ayinakuqhagamshela ngokuzenzekelayo i-WhatsApp Web okanye iseshoni yeDesktop yeSiginali ngokwayo**. Ngokwahlukileyo, xa umkhohlisi ekuqinisekisa ukuba uvule ** WhatsApp / Signal / Telegraph / Discord -> Useto -> Izixhobo eziQhagamshelweyo -> Qhagamshela isiXhobo ** kwaye ukhombe * eso * in-app iskena kwikhowudi yabo ye-QR (okanye uchwetheze ikhowudi yabo yokubhanqa abalinganiswa abasi-8), uphumeza ngokuthe ngqo isixhobo esi-cryptographic-ibhangqa i-akhawunti yakho ngaphandle kokubamba ngesandla igama eliyimfihlo elinika ukufikelela kwiakhawunti yakho.

Ngaba umhlaseli odibanise a WhatsApp Web okanye Signal Desktop Iseshoni isafunda imiyalezo yam emva kokuba ndicofe u-"Phuma / Unganxulumanisi" kwiZixhobo eziDityanisiweyo?¶

Hayi, hayi kuyo nayiphi na imiyalezo emitsha ethunyelwe emva kokuba uyiqhawule. Umzuzu ucofa Phuma / Ungaqhagamshelani phantsi Useto > Izixhobo ezidityanisiweyo, i-smartphone yakho ephambili irhoxisa isitshixo se-cryptographic yesixhobo se-cryptographic kwiseva kwaye ijikelezisa izitshixo zokuthumela izixhobo ezininzi (`Sender Key` iiratchets) nabo bonke abafowunelwa bakho kunye neencoko zeqela. Isikhangeli somhlaseli siqhawula ngoko nangoko kwaye asinakuze siguqule uguqulelo lokuntsonkotha omnye umyalezo ongenayo okanye ophumayo, nangona begcina nayiphi na imiyalezo emidala isikhangeli sabo esele siyikhutshelwe ngexesha lefestile bebeqhagamshelwe kuyo.

Ngaba iqabane onomona okanye iqabane lam lifunde yonke imiyalezo yam ye-WhatsApp okanye yeTelegram ngaphandle kokufaka nayiphi na i-spyware app kwifowuni yam?¶

Indlela ye-#1 esetyenziswa ngabaphulaphuli basekhaya ukufunda i-WhatsApp yeqabane, iSiginali, iTelegram, okanye i-iMessage chats ifuna zero ispyware kwifowuni yakho: Ngelixa uleleyo okanye eshawarini, umntu uvula ifowuni yakho (eyazi ikhowudi yakho yokudlula yesikrini enamanani ama-4 ukuya kwa-6), avule `WhatsApp > Settings > Linked Devices > Link a Device`, kwaye iskena ikhowudi yeQR kwilaptop okanye ithebhulethi yabo (`web.whatsapp.com`). Ngenxa yokuba ifowuni yakho isebenza ngokwesiqhelo emva koko, amaxhoba ahlala iinyanga engakhange aqonde ukuba isikhangeli seqabane sifumana umyalezo wonke. Jonga rhoqo `Settings > Linked Devices` kuzo zonke ii-apps zemiyalezo, tshintsha ikhowudi yokuvula isikrini sefowuni yakho, kwaye uvule i-biometric ** Isitshixo se-App ** ngaphakathi kwe-WhatsApp, iSiginali kunye neTelegram.

Kutheni le nto uWhatsApp ekhuphe isaziso esicela ukuba "Faka ikhowudi yokudibanisa isixhobo esitsha" xa ndingazange ndivule iWebhu kaWhatsApp?¶

UWhatsApp wongeze into ebizwa ngokuba "Nxulumanisa nenombolo yefowuni endaweni yoko" kwi `web.whatsapp.com` kubasebenzisi abaneekhamera zefowuni ezaphukileyo. Kuba nabani na owazi inombolo yakho yeselula enamanani ali-10 angachwetheza inombolo yefowuni yakho kuyo `web.whatsapp.com` kwaye ucofe "Okulandelayo", umhlaseli unokubangela ukuba isaziso sivele kwifowuni yakho nangaliphi na ixesha ngelixa ufowuna okanye ukuthumelela umyalezo uzenza iNkxaso ye-WhatsApp okanye umqhubi wokuhambisa ekucela ukuba "chwetheze ikhowudi yamagama ayi-8. `XXXX-XXXX` ukuqinisekisa iakhawunti yakho". Ungaze uchwetheze ikhowudi enamagama asi-8 kuWhatsApp ngaphandle kokuba uyicelile ngokwakho kwiscreen sekhompyuter yakho kwimizuzwana emi-5 eyadlulayo.

Izikhokelo ezinxulumeneyo¶

• QR code phishing (quishing), imitha yokupaka iidecals, kunye nolunye uhlengahlengiso olunonya
• Ikhowudi yenkwenkwezi yenkampani (* 72) ukuqweqwediswa kwefowuni yokugqithisela kunye ne-PIN yelizwi yokuthatha
• Ukutshintsha kweSIM: indlela yokufumanisa, ukuyeka, kunye nokubuyisela kwi-SIM hijack
• I-Stalkerware, ispyware, kunye nokufunyanwa kwe-keylogger kwiifowuni
• Imvume ye-OAuth yokukhohlisa, izibonelelo ze-app yomntu wesithathu ezikhohlakeleyo, kunye nokurhoxiswa kophawu lwe-API
• Amanani kaxakeka ngokwelizwe

Imithombo kunye nezikhokelo ezisemthethweni¶

• I-Arhente yoKhuseleko lwe-Cybersecurity kunye ne-Infrastructure Security Agency (CISA), i-Arhente yoKhuseleko lweSizwe (NSA), kunye ne-FBI (eUnited States): Ingcebiso eDityanelweyo ye-Cybersecurity kwi-Russian State-Sponsored and Cybercriminal Targeting of Signal, WhatsApp, kunye neTelegram nge-Malicious "Izixhobo eziQhagamshelweyo" Iikhowudi zeQR (QRLJacking / Ghost Pairing).
• Vula iProjekthi yoKhuseleko lweSicelo seHlabathi liphela (OWASP): QRLJacking (Quick Response Code Login Jacking) INkqubo-sikhokelo yoHlaselo kunye neSeshini yokuThintela iNqanaba lokuThintela.
• Iziko leSizwe loKhuseleko lweCyber (NCSC) (eUnited Kingdom) kunye ne-Cyber ​​​​Arhente yoKhuseleko lwaseSingapore (CSA): *Izilumkiso zikawonke-wonke kwi-WhatsApp Web QR Code Phishing Campaigns, i-8-Character Pairing Code Social Engineering, kunye ne-Divice-Auditing Auditing *.
• Iphepha elimhlophe loKhuseleko le-WhatsApp (Meta) kunye neNgcaciso yeProtokholi yoMqondiso: Izixhobo ezininzi zokuPhelisa ukuFihliswa kweArchitecture, ukuChithwa kweSitshixo seQela, kunye nokuBhalwa kweSitshixo soMthumeli.