Ukutyhoboza kwephakheji ye-USPS kunye nobuqhophololo bokuhambisa kwakhona¶

Ukufumana umyalezo obhaliweyo ongxamisekileyo obanga ukuba iphakheji yeNkonzo yePosi yase-United States ayikwazi ukuhanjiswa ngenxa yedilesi yesitrato engaphelelanga ngoku sesinye sezoyikiso ze-cyber eziqhelekileyo kwizixhobo eziphathwayo. Olu hlaselo lwemiyalezo emifutshane yemiyalezo (i-SMS) eyaziwa ngokuba yi-smishing, ibonisa uphawu lweposi oluyinyani, iibhakhowudi zokulandelela ezifanisiweyo, kunye nolwimi olusemthethweni. Lo myalezo ukukhomba kwiwebhusayithi yobuqhophololo ebukekayo apho ucelwe ukuba uqinisekise idilesi yekhaya lakho kwaye uhlawule umrhumo omncinci wokuthumela kwakhona, ophakathi kwe-0.30 USD kunye ne-3.00 USD, ngokufaka inombolo yakho yedebhithi okanye yekhadi letyala, umhla wokuphelelwa, ikhowudi yokhuseleko, kunye neenkcukacha zentlawulo.

Umrhumo omncinci wokuziswa kwakhona yindlela nje yokukhohlisa eyilelwe ukufaka iinkcukacha zekhadi lakho letyala kunye neerekhodi zesazisi sakho. Zakuba zingenisiwe, uthungelwano lolwaphulo-mthetho luqalisa ngoko nangoko iintengiselwano ezingagunyaziswanga kwi-intanethi, bhalisela ikhadi lakho kurhumo oluqhubekayo lobuqhophololo, okanye uzame ukuthabatha i-akhawunti usebenzisa i-real-time-time one-passceptors. Kwezinye iimeko kwizixhobo ze-Android, ukucofa ikhonkco eliyingozi kubangela ukukhutshelwa okuthe cwaka kwetrojan yebhanki ebeka iliso kwizitshixo kunye nokuthintela iikhowudi zokuqinisekisa ngezinto ezininzi. Ukuthatha amanyathelo okuthintela kwangoko kumakhadi akho entlawulo, isixhobo esiphathwayo, kunye neefayile zetyala kunokunciphisa ilahleko yemali kwaye kuthintele ukubiwa kwexesha elide lesazisi.

Yenza oku ngoku¶

Ukuba ucofe ikhonkco lombhalo womgunyathi okanye ufake iinkcukacha zentlawulo kwiwebhusayithi yokuthumela kwakhona, thatha la manyathelo mathandathu ngoko nangoko:

1. Tshixa okanye urhoxise ikhadi lentlawulo elisengozini ngoku:
   • Vula i-app yakho yebhanki ephathwayo okanye ufowunele umniki-khadi usebenzisa inombolo yobuqhophololo bexesha likaxakeka eprintwe ngasemva ekhadini lakho.
   • Sebenzisa izilawuli zekhadi le-app ukuguqula ngoko nangoko isimo sekhadi lakho ukuba "Litshixiwe" okanye uxele ikhadi njengelonakeleyo.
   • Cela ikhadi lokutshintshwa kwangoko elinenombolo yeakhawunti enamanani alishumi elinesithandathu, umhla wokuphelelwa kwawo, kunye nekhowudi yokhuseleko yeCVV.
2. Jonga utshintshiselwano olusalindelweyo kunye neentlawulo zobuqhetseba eziphikisanayo:
   • Jonga imbali yentengiselwano yamva nje malunga neentlawulo ezincinci ezingaqhelekanga okanye ezilindele ugunyaziso lomrhwebi olungagunyaziswanga.
   • Yalela ibhanki yakho ukuba yale zonke izigunyaziso zorhumo oluqhubekayo kwaye ikhuphe intlawulo esemthethweni phantsi kwemithetho yomanyano yokhuseleko lwabathengi.
   • Chaza ngokucacileyo kummeli worhwaphilizo: "Ndifake iinkcukacha zekhadi lam kwiwebhusayithi yobuqhophololo ezenza ukuhanjiswa kweposi."
3. Jonga isixhobo sakho esiphathwayo ukukhangela usetyenziso olungagunyaziswanga okanye iiprofayili:
   • Kwi-Android, vula iiSetingi -> Ii-Apps kwaye ujonge usetyenziso olungaziwayo olusandula ukufakela (ezifana neetraki zeepakethe zomgunyathi okanye iFlash Players).
   • Kwi-iPhone, vula Useto -> Ngokubanzi -> I-VPN kunye noLawulo lweSixhobo kwaye uqinisekise ukuba akukho lawulo lwesixhobo esiphathwayo esingagunyaziswanga (MDM) okanye izatifikethi zeshishini ezifakiweyo.
   • Ukuba usetyenziso olungaziwayo okanye iprofayile yoqwalaselo ifunyenwe, yisuse ngoko nangoko kwaye uqale ngokutsha isixhobo.
4. Dlulisa umyalezo obhaliweyo ongalunganga ukuxelela umthumeli:
   • Khuphela umzimba womyalezo obhaliweyo kwaye uwugqithisele ngqo kwi-shortcode ye-spam ye-universal carrier 7726 (epela u-SPAM).
   • Dlulisela phambili umyalezo kunye neenkcukacha zomthumeli kwiNkonzo yokuHlola yasePosini yase-United States kwa spam@uspis.gov.
   • Thatha umfanekiso weskrini womyalezo obhaliweyo kunye ne-URL yewebhusayithi ngaphambi kokuba ucime umsonto wencoko.
5. **Khusela isazisi sakho ukuba ungenise idilesi epheleleyo kunye neenkcukacha zobuqu **:
   • Ukuba ifom yenkohliso icele inombolo yakho yoKhuseleko lweNtlalo, umhla wokuzalwa, okanye igama likamama lobuntombi, phatha isazisi sakho njengoko sichaziwe.
   • Beka izilumkiso zorhwaphilizo zexeshana okanye ukhuseleko olupheleleyo lumiswa kwiifayile zakho zetyala e-Equifax, Experian, kunye neTransUnion.
   • Beka iliso kwiingxelo zetyala lakho rhoqo ngemibuzo engagunyaziswanga okanye imigca yorhwebo esanda kuvulwa.
6. Nika ingxelo ye-smishing portal kwi-database yokhuselo lwe-cybersecurity:
   • Faka isikhalazo solwaphulo-mthetho kwi-intanethi kwiZiko le-FBI le-Internet Crime Complaint Centre ic3.gov.
   • Ngenisa i-URL ekhohlakeleyo yokukhohlisa kuGoogle ngokuPhequlula ngokuKhuselekileyo kunye ne-Cybersecurity kunye ne-Arhente yoKhuseleko lwe-Infrastructure (CISA) ukukhusela abanye abathengi.
   • Xela umsebenzi woshishino olukhohlisayo kwi-Federal Trade Commission kwi reportfraud.ftc.gov.

Itshati yovavanyo lwezehlo¶

Landela le ndlela yesigqibo senyathelo ngenyathelo lokuvavanya inqanaba lakho lokuvezwa, liqulathe ubuqhetseba bekhadi elinokubakho, kwaye ukhusele i-smartphone yakho ephathwayo:

flowchart TD
    A["Kufunyenwe iSMS eBanga ukusilela koThutho lwePosi"] --> B{"Ngaba ucofe ikhonkco lewebhu kumbhalo?"}
    B -->|"Hayi: Kufunyenwe umbhalo kuphela"| C["Thumela i-SMS kwi-7726 kunye ne-spam@uspis.gov, cima umyalezo, inombolo yebhloko"]
    B -->|"Ewe: Cofa ilinki"| D{"Ngaba ufake iinkcukacha zekhadi, igama lokugqitha, okanye iinkcukacha zakho?"}
    D -->|"Hayi: Vala isikhangeli ngoko nangoko"| E["Cima i-cache yesikhangeli sefowuni kunye neekuki, jonga isixhobo kwiifayile ezikhutshelweyo"]
    D -->|"Ewe: Ikhadi elithunyelweyo okanye ulwazi"| F["Fowunela iYunithi yobuqhophololo yoMniki weKhadi ngoko nangoko ukurhoxisa iKhadi"]
    F --> G["Iintlawulo ezisaXongwayo zempikiswano kwaye Urhoxise uGunyaziso oluRhoqo"]
    G --> H{"Ngaba uyifakile inombolo yoKhuseleko lweNtlalo okanye umhla wokuzalwa?"}
    H -->|"Ewe: Ubuni obugcweleyo buveziwe"| I["Indawo yoKhuseleko lweMikhenkce e-Equifax, i-Experian, kunye neTransUnion"]
    H -->|"Qha:Kufakwe ikhadi qha"| J["Jonga iziteyitimenti zebhanki kangangeentsuku ezingama-60, qinisekisa iingxelo zetyala"]
    I --> K["Xela i-URL ye-Phishing ku-FBI IC3, FTC, kunye ne-CISA"]
    J --> K

Isebenza njani imisebenzi yokuthuthwa kweposi¶

Ukuhanjiswa kweposi akwenziwa ngabantu abathanda ukuzilibazisa bodwa; icwangciswa ngamaqumrhu olwaphulo-mthetho olwenziwa ngekhompyutha kusetyenziswa izixhobo ze-spam ezisasaziweyo, iikiti ezibuyisela umva i-proxy phishing, kunye nemibhobho ezenzekelayo yokukhupha imali.

+-----------------------------------------------------------------------------+
|                     POSTAL SMISHING ATTACK ARCHITECTURE                     |
+-----------------------------------------------------------------------------+
|                                                                             |
|  1. Mass SMS Blast             SIM farms and compromised iMessage botnets   |
|     (Millions daily)           send automated texts to sequential numbers.  |
|                                                                             |
|  2. Spoofed Redelivery URL     Victim clicks lookalike domain               |
|     (Reverse proxy kit)        (e.g., usps-redeliver-tracking-hub.com).     |
|                                                                             |
|  3. Fake Tracking Interface    Page displays realistic USPS branding,       |
|     (Address verification)     simulated tracking status, and address form. |
|                                                                             |
|  4. Card Harvesting Trap       Page demands $0.35 redelivery fee;           |
|     (CVV, expiration, ZIP)     captures complete payment credentials.       |
|                                                                             |
|  5. Real-Time OTP Intercept    Scammer attempts Apple Pay provisioning;     |
|     (Adversary-in-the-Middle)  tricks victim into typing bank SMS code.     |
|                                                                             |
+-----------------------------------------------------------------------------+

Izibonelelo zokusasaza ngobuninzi: iifama zeSIM kunye neebhotnet¶

Amaqela olwaphulo-mthetho aqhumisa izigidi zemiyalezo yonke imihla kubabhalisi beefowuni eziphathwayo kuzo zonke iikhowudi zengingqi zisebenzisa izixhobo ezikhethekileyo:

• Iifama ze-SIM ye-Hardware (IiModem ze-GSM): IiRakhi zeemodem ze-GSM ezinamatshaneli amaninzi aqulethe amakhulukhulu eeSIM khadi zeselula ezihlawulelwayo ezithengwe ngeemali ezibiweyo okanye ezivulwe phantsi kwamagama omgunyathi. Ezi zixhobo zijikelisa ngokuzenzekelayo iinombolo zemfonomfono ukudlula izihluzi ze-spam zomphathi.
• I-iMessage ecuthiweyo kunye neeBotnets zeRCS: Abahlaseli basebenzisa iiskripthi zesoftware ukuqweqwedisa i-Apple iMessage kunye neeakhawunti zeRCS zikaGoogle, okubavumela ukuba bathumele imiyalezo ye-blue-bubble okanye imibhalo efihliweyo yeRCS ngokuthe ngqo kumaxhoba ngaphaya kwamajelo edatha, bazigqithisele ngokupheleleyo iifirewall zeSMS zomthuthi weselula.
• I-Smishing-as-a-Service (SmaaS): Abadlali bezoyikiso zewebhu ezimnyama bathengisa izixhobo zokutshiza eziquka uluhlu olutsha lweenombolo zefowuni eziphathwayo ezisebenzayo, ii-APIs zesango le-SMS ezizihambelayo, kunye neetemplates zeposi ezibanjwe kwangaphambili zomrhumo.

Reverse proxy phishing kits kunye nemimandla ekhangelekayo¶

Xa ixhoba licofa ikhonkco kumyalezo, umkhangeli zincwadi wewebhu ulayisha ubume obuphucukileyo besakhelo sokukhohlisa (njengeModlishka, Evilginx, okanye izixhobo zeposi):

• I-Domain Typosquatting: Abahlaseli babhalisa imimandla efana nefana neenkonzo zikarhulumente ezisemthethweni, ezinje usps-tracking-support-redelivery.com, post-office-portal-us.com, okanye usps-update-delivery-info.org.
• Dynamic Geotargeting: Iseva yokukhohlisa ihlola idilesi ye-IP yondwendwe olungenayo. Ukuba isivakashi sise-United Kingdom, umncedisi ubabuyisela kwi-template ye-Royal Mail template; ukuba useKhanada, kwiphothali yePosi yaseCanada yobuxoki; kwaye ukuba eUnited States, ukuya kwiphepha lokufika le-USPS lomgunyathi.
• I-Bot kunye neCrawler Cloaking: Iseva izibona ngokuzenzekelayo izikhasi ze-injini yokukhangela, abaphandi be-cybersecurity, kunye ne-bots esongelayo yokuskena, ibanika iphepha elingenanto elingenabungozi okanye impazamo ye-404 ngelixa ihambisa ithempleyithi yokukhohlisa ekhohlakeleyo ngokukodwa kubasebenzisi bokwenyani be-smartphone.

I-real-time umchasi-in-the-middle pay trap¶

Iphepha lentlawulo libonakala liqhuba intlawulo encinci, efana ne-0.35 USD, 1.20 USD, okanye i-2.99 USD, phantsi kwegama elithi "intlawulo yolawulo lokubuyisela" okanye "intlawulo eyongezelelweyo yokugcinwa kwepakeji":

• Xa uchwetheza iinkcukacha zekhadi lakho kwaye ucofe u-"Thumela," ikhithi yokukhohlisa ayiqhubeki ngentlawulo eyi-0.35 USD.
• Endaweni yoko, i-bot ezenzekelayo ngasemva ithatha inombolo yekhadi lakho elinamanani alishumi elinesithandathu, ikhowudi yeCVV, kunye nekhowudi ye-ZIP yokuhlawula kwaye ngoko nangoko izame ukubophelela ikhadi lakho kwi-wallet yeselula (efana ne-Apple Pay, i-Google Wallet, okanye i-Samsung Pay) kwi-smartphone yomhlaseli.
• Xa ibhanki yakho ibona ukubhaliswa kwe-wallet entsha, ivelisa ikhowudi yokudlula yokuqinisekisa yeSMS ethunyelwe ngqo kwifowuni yakho.
• Iwebhusayithi yeposi yomgunyathi ngokukhawuleza ibonisa indawo ekhangelekayo: "Ngokhuseleko, faka ikhowudi yokuqinisekisa enamanani ama-6 ethunyelwe yibhanki yakho."
• Ukuba uchwetheza loo khowudi kwiwebhusayithi, iskripthi somhlaseli sithumela kwibhanki yakho, ukongeza ngempumelelo ikhadi lakho kwi-smartphone yabo yomzimba. Umkhohlisi ngoku unokwenza ukuthenga okungenamkhawulo kwiivenkile ezithengisayo de umda wekhadi lakho uphele.

Ukuchonga imiyalezo yeposi yobuxoki¶

Abathwali beposi abasemthethweni babambelela kwimigaqo engqongqo yonxibelelwano lwedijithali. Ukuqaphela umahluko phakathi kwezaziso ezisemthethweni kunye nemiyalezo yobuqhophololo etyholwa kukuvumela ukuba ubone izoyikiso ngoko nangoko.

Isixhobo esiphathwayo silalanise: ukukhohlisa kuthelekiswa neetrojans zebhanki¶

Ngelixa uninzi lohlaselo lokuhanjiswa kweposi lufuna iinkcukacha zekhadi letyala kunye nedatha yesazisi ngeefomu zewebhu, amanye amaphulo ahambisa i-malware eyilelwe ukuseka ukufikelela okuzingileyo kwii-smartphones.

+-----------------------------------------------------------------------------+
|                     SMARTPHONE THREAT VECTOR MATRIX                         |
+-----------------------------------------------------------------------------+
|                                                                             |
|  Device Platform       Attack Vector                  Technical Impact      |
|  -------------------------------------------------------------------------  |
|  Apple iOS             Web Phishing Form              Harvests card, CVV,   |
|  (iPhone)              (No APK installation)          and billing address   |
|                                                                             |
|  Apple iOS             Malicious MDM Profile          Installs rogue root   |
|  (iPhone)              (Prompt to install profile)    certificates and VPN  |
|                                                                             |
|  Google Android        Web Phishing Form              Harvests card, CVV,   |
|  (Samsung, Pixel)      (No APK installation)          and billing address   |
|                                                                             |
|  Google Android        Malicious APK Download         Deploys banking       |
|  (Sideloaded App)      (TeaBot, FluBot, Anatsa)       trojan with keylogger |
|                                                                             |
+-----------------------------------------------------------------------------+

Apple iOS: iinkangeleko zoqwalaselo mobile kunye Safari phishing¶

Kwizixhobo ze-Apple ezisebenzisa i-iOS, inkqubo yokusebenza ephathwayo iyakwalela ukufakwa kwesicelo ngokuthe ngqo ngaphandle kwe-App Store esemthethweni ngaphandle kokuba iprofayile yolawulo lwesixhobo esiphathwayo samkelwe:

• Ukuba undwendwele iwebhusayithi eSafari kwaye uchwetheze iinkcukacha zakho zentlawulo, i-iPhone yakho yomzimba ayosulelwanga yi-malware. Ukuchasana kulinganiselwe kwidatha oyifakileyo kwifom.
• Nangona kunjalo, ukuba iwebhusayithi ikukhuthaze ukuba ukhuphele "iSatifikethi soKhuseleko se-USPS" okanye "iProfayili yoThunyelo" kwaye ikukhokele kwiiSetingi zokufakela iprofayile yoqwalaselo, yale ingcebiso ngoko nangoko.
• Iprofayile ye-MDM ekhohlakeleyo ivumela umhlaseli ukuba ahambise yonke i-traffic yakho ye-intanethi nge-server ekhohlakeleyo ye-proxy, ukubamba amagama ayimfihlo kunye nedatha engafihlwanga.
• Ukujonga iiprofayili ezikhohlakeleyo kwi-iPhone yakho, vula ** Useto -> Ngokubanzi -> VPN kunye noLawulo lweSixhobo**. Ukuba kukho iprofayile engaziwayo evelayo, yicofe kwaye ukhethe Susa Ulawulo.

IGoogle Android: iitrojans zebhanki ze-APK ezifakwe ecaleni¶

Kwizixhobo ze-Android, abakhohlisi bahlala bezama ukukhohlisa abasebenzisi ukuba bakhuphele kwaye bafake iifayile ze-APK ezinobungozi:

• Iwebhusayithi ye-phishing ibonisa isilumkiso: "Ukulandelela ipakethe yakho ngexesha lokwenyani, khuphela i-USPS esemthethweni yoMncedisi wokuJonga umkhondo."
• Isikhangeli sikhuphela ifayile enegama USPS_Track.apk okanye Package_Service.apk.
• Ukuba ucofa ifayile ekhutshelweyo kwaye udlule izilumkiso zokhuseleko ze-Android (ezifana nokuvumela ukufakela kwimithombo engaziwayo), ufaka iTrojan yebhanki enamandla (efana neTeaBot, FluBot, okanye Anatsa).

• Xa ixhoba ngengozi ligunyazisa ukufakwa kwe-APK esecaleni, i-malware icela kwangoko imvume yokwenza iiNkonzo zokuFikelela kwi-Android. Ezi nkalo zofikelelo ziyilelwe ekuqaleni ukunceda abasebenzisi abakhubazekileyo ngokufunda umbhalo wesikrini ngokuvakalayo okanye ngokuzenzekela izijekulo. Nangona kunjalo, ii-Trojans zebhanki zisebenzisa ukufikelela kokufikeleleka ukuseka ulawulo olupheleleyo lwenkqubo yokusebenza yeselula:

• Ixesha lokwenyani lokuLogwa kwamaqhosha kunye nokuKrwelwa kweSkrini: Inkonzo yangasemva ekhohlakeleyo irekhoda wonke unobumba ochwetheziweyo kwibhodi yezitshixo, ithatha amagama omsebenzisi, amagama ayimfihlo, kunye neenombolo zokuzazisa zomntu kuzo zonke izicelo.

• Izigqubuthelo zeSkrini ezikhohlakeleyo: Xa ixhoba livula usetyenziso olusemthethweni lwebhanki okanye lwe-cryptocurrency, iTrojan ibhaqa ukuqaliswa kwe-app kwaye ngoko nangoko yenza isikrini sokungena esingafihliyo okanye se-pixel-egqibeleleyo sokungena ngqo kwi-app yokwenyani. Xa ufaka iziqinisekiso zakho, zithunyelwa kumncedisi womhlaseli ngelixa usetyenziso luntlitheka okanye lubonisa isikrini esifaniswayo sokulayisha.
• I-Automated SMS Interception: I-Trojan ibamba imiyalezo ye-SMS engenayo equlethe i-passcode yexesha elinye ethunyelwe ziibhanki, izicime ngokuthe cwaka izaziso ukuze ungalokothi uzibone, kwaye ithumela iikhowudi zokuqinisekisa kwi-scammer ngaphakathi kwe-milliseconds.

Inyathelo-by-step isiqulatho iprotocol yamakhadi entlawulo esichengeni¶

Xa iinkcukacha zentlawulo zifakwe kwi-portal yokuhanjiswa kwakhona ngobuqhetseba, ukuthatha inyathelo eliqinisekileyo kunye neziko lakho lezemali kumisa iintlawulo ezingagunyaziswanga.

flowchart TD
    A["Iinkcukacha zeKhadi zifakwe kwiFake Relivery Page"] --> B["Vula i-Mobile Banking App kunye neKhadi lokutshixa ngoko nangoko"]
    B --> C["IKhadi lokuFowunela uMniki 24/7 weSebe lobuqhophololo"]
    C --> D["Cela Ukucinywa kweKhadi eliGqibeleleyo kwaye ulikhuphe kwakhona"]
    D --> E["Hlaziya zonke iintengiselwano ukusuka kwiiyure ezingama-72 ezidlulileyo"]
    E --> F{"Ingaba kukho imirhumo engagunyaziswanga okanye kusalindwe ukubanjwa?"}
    F -->|"Ewe"| G["Qalisa uMmiselo Z / E Ingxabano yaBathengi kwizinto ezinobuqhophololo"]
    F -->|"Hayi: Ubanjwe phambi kwamatyala"| H["Qinisekisa ukuba akukho ziWalethi zeDijithali (iApple/Google Pay) zifakiweyo"]
    G --> I["Rhoxisa yonke imirhumo eneTokeni eNxulunyaniswe neKhadi elibiweyo"]
    H --> I
    I --> J["Beka iliso kwi-Akhawunti yokuKhangela kunye neKhadi leKhredithi kangangeentsuku ezingama-60"]

Ukutshixa kunye nokukhutshwa kwakhona kwamakhadi okuhlawula asengozini¶

Sukulinda ukubona ukuba kuyavela na intlawulo engagunyaziswanga kwisiteyitimenti sakho. Xa ufumanisa ukuba iwebhusayithi ibingekho mthethweni, qalisa ukucinywa kwekhadi:

• Ngena kwisicelo sebhanki yakho kwaye ufumane iisetingi zokhuseleko lwekhadi. Cofa ku-Tshixa ikhadi okanye Ikhadi lokuMkhenkcisa ukunqanda iinzame zogunyaziso lwexesha lokwenyani.
• Qhagamshelana nesebe lebhanki elikhuphayo elinobuqhophololo ngama-24/7 usebenzisa inombolo yomnxeba egximfizwe ngasemva kwekhadi lakho lomzimba.
• Chaza ngokucacileyo: "Ndifake ngephutha inombolo yekhadi lam, umhla wokuphelelwa kwexesha, kunye nekhowudi yeCVV kwiwebhusayithi ye-phishing ye-intanethi. Ndifuna eli khadi licinywe ngokukhawuleza kunye nokutshintshwa kukhutshwe inombolo ye-akhawunti entsha."
• Qinisekisa kunye nommeli ukuba ibhanki ivala uhlaziyo lwabarhwebi olunethokheni. Uninzi lwabaniki bekhadi letyala bathatha inxaxheba kwiinkonzo zokuhlaziya ikhadi ezizenzekelayo ezinika abarhwebi inombolo yakho yekhadi elitsha xa ikhadi likhutshiwe kwakhona; cela ngokucacileyo ukuba ibhanki iqhawule onke amakhonkco orhwebo akhoyo.

Ukuphikisana neentengiselwano zobuqhophololo phantsi komthetho wabathengi bomanyano¶

Ukuba abahlaseli bakwazile ukwenza iintlawulo ezingagunyaziswanga phambi kokuba ulitshixe ikhadi, imithetho yebhanki yomanyano inciphisa uxanduva lwakho lwezemali:

• UMthetho wokuTyala ngeTyala ngokuFanelekileyo (FCBA, 12 CFR iSahlulo 1026 / uMmiselo Z): Ngentengiselwano yekhadi letyala, ubuninzi bamatyala akho asemthethweni phantsi komthetho womanyano kwiintlawulo ezingagunyaziswanga yi-50 USD. Uninzi lwabaniki bamakhadi abakhulu (i-Visa, i-Mastercard, i-American Express, i-Discover) igcina imigaqo-nkqubo ye-zero-liability erhoxisa le ntlawulo ye-50 USD xa uxela ubuqhophololo ngokukhawuleza.
• UMthetho wokuTshintshela iNgxowa-mali ngeKhompyutha (EFTA, 12 CFR iSigaba 1005 / uMmiselo E): Ngentengiselwano yekhadi ledebhithi eliqhagamshelwe kwii-akhawunti zokutshekisha, ixesha libalulekile. Ukuba wazisa ibhanki yakho phakathi kweentsuku ezimbini zokusebenza emva kokufunda malunga nokulalanisa, ityala lakho ligcinwe kwi-50 USD. Ukuba unika ingxelo phakathi kweentsuku ezimbini ukuya kwamashumi amathandathu ekhalenda emva kokuba isitatimenti sakho senyanga sigqithiselwe, ityala lakho linyukela kwi-500 USD. Ngaphandle kweentsuku ezingamashumi amathandathu, usengozini yokuphulukana nayo yonke imali ebiweyo kwiakhawunti yakho.
• Gcina irekhodi ebhaliweyo yencoko nganye yomnxeba nebhanki yakho, kubandakanywa umhla, ixesha, igama lommeli, kunye nenombolo yetyala lengxabano.

Ukucocwa kwesixhobo esiphathwayo kunye nokuqina kokhuseleko¶

Ukucoca kunye nokwenza lukhuni isixhobo sakho esiphathwayo kuthintela ukubekw' esweni okuqhubekayo, ukuvunwa kwengqinisekiso, kunye nohlaselo oluphindaphindayo logaxekile.

+-----------------------------------------------------------------------------+
|                     SMARTPHONE DECONTAMINATION CHECKLIST                    |
+-----------------------------------------------------------------------------+
|                                                                             |
|  [X] Clear Mobile Browser Cache: Purge Safari, Chrome, or Firefox cache,    |
|      cookies, and website data to remove cached phishing sessions.          |
|                                                                             |
|  [X] Audit Installed Applications: Inspect all apps, removing any unknown  |
|      software, especially apps installed outside official app stores.       |
|                                                                             |
|  [X] Audit Accessibility Permissions (Android): Revoke accessibility       |
|      access for any third-party app not explicitly trusted.                |
|                                                                             |
|  [X] Remove Enterprise MDM Profiles (iOS): Delete unfamiliar device        |
|      management certificates under Settings -> VPN & Device Management.     |
|                                                                             |
|  [X] Enable Spam Filtering: Activate native carrier and operating system    |
|      spam call and message filters (Silence Unknown Callers / Spam Shield). |
|                                                                             |
+-----------------------------------------------------------------------------+

Ukucoca i-cache yesikhangeli sefowuni kunye nokugcinwa kweseshoni¶

Iiwebhusayithi ze-Phishing zigcina izikripthi zokulandela umkhondo, iithokheni zeseshoni, kunye nezinto ze-cache zasekhaya ngaphakathi kwesikhangeli sakho esiphathwayo ukulandelela iimpendulo zabatyeleli:

• iOS Safari: Vula ** Useto -> Safari -> Imbali ecacileyo kunye neDatha yeWebhusayithi**. Khetha "Yonke Imbali" kwaye uqinisekise. Oku kuvala zonke iithebhu zebrawuza evulekileyo kwaye icime iikuki ezigciniweyo, imifanekiso egciniweyo, kunye namangeno edatabase yewebhu yendawo.
• I-Android Google Chrome: Vula iChrome, cofa amachaphaza amathathu kwikona ephezulu ngasekunene, khetha ** Useto -> Ubumfihlo kunye nokhuseleko -> Sula idatha yokukhangela **. Khetha "Ngalo lonke ixesha," khangela "Iikuki kunye nedatha yesayithi" kunye "Imifanekiso egciniweyo kunye neefayile," kwaye ucofe Cima idatha.

Ungathathi cala usetyenziso oluyingozi lwe-Android¶

Ukuba ukhuphele kwaye wafaka ifayile yesicelo kwikhonkco lokukhohlisa kwifowuni ye-Android, susa isoyikiso kwangoko:

• Qala kwakhona i-smartphone yakho ye-Android kwi- ** Imo eKhuselekileyo ** (kwiimodeli ezininzi, cofa kwaye ubambe iqhosha laMandla, emva koko ucofe kwaye ubambe i-icon ethi "Cima" kwisikrini de kuvele i-"Reboot kwimo ekhuselekileyo". IMowudi eKhuselekileyo ithintela usetyenziso lwe-malware yomntu wesithathu ekubeni lusebenze ngasemva.
• Vula ** Useto -> Ii-Apps -> Bona zonke ii-apps **.
• Skrola kuluhlu ukhangela usetyenziso olukrokrisayo ngaphandle kweempawu zenkampani ezifanelekileyo, ii-apps ezinamagama enziwe afana nalawo enziwe afana nalawo enziwe afana nalawo enziwe afana nalawo enziwe afana nalawo aqhelekileyo (afana ne-"Package Service," "Uhlaziyo lweSistim," "Flash Player," okanye "USPS Assist"), okanye ii-apps ezifakwe ngosuku lwesehlo.
• Khetha usetyenziso olukrokrelayo, cofa Nyanzela Yeka, uze ucofe Khipha.
• Ukuba iqhosha elithi "Khipha" libe ngwevu, i-malware ifumene amalungelo oMlawuli weSixhobo. Vula ** Useto -> Ukhuseleko -> Usetyenziso lolawulo lweSixhobo **, fumana i-app engalunganga, ucime iimvume zomlawuli, kwaye uqhubeke nokukhupha.

Ukuhluza imiyalezo etshizayo kwinqanaba lenkqubo yokusebenza¶

Zombini iApple iOS kunye neGoogle Android zibandakanya izixhobo zokucoca ezakhelwe ngaphakathi zokuthulisa imiyalezo engacelwanga evela kumanani angagcinwanga kubafowunelwa bakho:

• Apple iOS: Vula ** Useto -> Imiyalezo **, skrolela ezantsi "Ukucoca Umyalezo," kwaye uguqule ku **Hlunga Abathumeli abangaziwayo **. Oku kudala ithebhu eyahlukileyo kwisicelo sakho seMiyalezo yeetekisi ezingenayo ukusuka kumanani angaziwayo, ukuthulisa izandi zesaziso kunye nokugcina amakhonkco angalunganga ngaphandle kwembono yakho yokuqala.
• I-Google Android (iMiyalezo kaGoogle): Vula iMiyalezo kaGoogle, cofa iprofayile yakho avatar phezulu ekunene, cofa Useto lwemiyalezo -> Ukhuseleko logaxekile, kwaye uvule ku Vula ukhuseleko logaxekile. Le njini yokucoca i-neural ifumana ngokuzenzekelayo kwaye ilandele izicatshulwa ezirhanelwayo kwifolda yakho ethi "Spam & Blocked" ngaphandle kokungcangcazela ifowuni yakho.

Iindlela ezisemthethweni zokunika ingxelo kunye nokunyanzeliswa komthetho weposi¶

Ukuhambisa iingxelo zobuqhetseba ezineenkcukacha kwii-arhente zomdibaniso kunceda abahloli beposi bemephu ye-spam syndicates, babambe imimandla yobuqhophololo, kwaye bathathe iziseko zeseva yolwaphulo-mthetho.

+-----------------------------------------------------------------------------+
|                      OFFICIAL FRAUD REPORTING DIRECTORY                     |
+-----------------------------------------------------------------------------+
|                                                                             |
|  Organization             Contact Channel           Purpose                 |
|  -------------------------------------------------------------------------  |
|  Carrier Spam Service     Forward SMS to 7726       Triggers carrier-wide   |
|                           (Universal shortcode)     spam block              |
|                                                                             |
|  US Postal Inspection     spam@uspis.gov            Federal criminal        |
|  Service (USPIS)          1-877-876-2455            investigation of fraud  |
|                                                                             |
|  FBI Internet Crime       ic3.gov                   Transnational cyber-    |
|  Complaint Center (IC3)                             crime tracking          |
|                                                                             |
|  Federal Trade            reportfraud.ftc.gov       Consumer deceptive trade|
|  Commission (FTC)                                   practice reporting      |
|                                                                             |
|  Google Safe Browsing     safebrowsing.google.com/  Submits malicious URL   |
|                           safebrowsing/report_phish for browser blocking    |
|                                                                             |
+-----------------------------------------------------------------------------+

Ukunika ingxelo kwiNkonzo yoHlolo lwasePosini yaseMelika¶

INkonzo yoHlolo lwePosi yase-United States yi-arhente yonyanzeliso lomthetho enoxanduva lokuphanda ubuqhophololo ngeposi, ubuqhophololo beposi, ubuqhophololo beposi, kunye nohlaselo olujoliswe kubathengi be-USPS:

• Dlulisela phambili umyalezo obhaliweyo otyhobozayo ku spam@uspis.gov.
• Kumzimba wakho we-imeyile, faka umfanekiso weskrini womyalezo obhaliweyo obonisa inombolo yefowuni yokuqala, umhla kunye nexesha elifunyenweyo, kunye ne-URL yewebhusayithi eboniswe kumyalezo.
• Abaphandi be-USPIS be-cyber baququzelela kunye neerejistra zesizinda, ababoneleli ababambe iqhaza, kunye nabatshutshisi be-federal ukuba babambe imimandla yobuqhetseba kwaye bavale iziseko zokukhwabanisa.

Ukunika ingxelo kubathuthi bonxibelelwano ngemfonomfono nge-7726¶

I-shortcode jikelele 7726 (spelling SPAM kwiphedi yefowuni eqhelekileyo) igcinwa ngabaqhubi benethiwekhi ephathwayo kwihlabathi jikelele (kuquka i-AT&T, iVerizon, T-Mobile, Vodafone, kunye neEE):

• Khuphela okubhaliweyo komyalezo wobuqhophololo.
• Yenza umyalezo omtsha ophumayo othunyelwe ku 7726 kwaye uncamathisele okubhaliweyo.
• Umphathiswa wakho uya kuphendula ngokukhawuleza ngokukhawuleza ecela inombolo yefowuni yokuqala okanye idilesi ye-imeyile ethumele ispam.
• Phendula ngenombolo yefowuni yomthumeli.
• Amaziko ocazululo lwezigrogriso zeCarrier asebenzisa ezi ngxelo zihlanganisiweyo ukuhlaziya ii-firewall ze-SMS zexesha lokwenyani, ukuvala imiyalezo efanayo ngaphambi kokuba ifikelele kwizigidi zabanye ababhalisi.

Ukukhusela ngokuchasene ne-USPS yokuThatha i-akhawunti yoThunyelo olunolwazi kunye nokuphambukiswa kweposi¶

Ivektha yesibini eyingozi yokutyhalwa ngeposi ibandakanya ukudalwa kweakhawunti ngobuqhetseba kwiqonga elisemthethweni le-USPS yoLwazi lokuHamba. Xa abahlaseli bevuna igama lakho elipheleleyo, idilesi yesitrato yendawo, kunye neenkcukacha zekhadi lokuhlawula, ngamanye amaxesha bazama ukubhalisa iakhawunti engagunyaziswanga egameni lakho usps.com:

• INgcaciso yeNdawo yokuHanjiswa gadalala: Ukuhanjiswa Ngolwazi kuvumela abahlali ukuba babone kwangaphambili imifanekiso engwevu yedijithali yeposi engenayo enobungakanani obunobumba kunye nokulandelela iipakethe ezicwangciselwe ukufika kwiidilesi zabo. Ukuba i-cybercriminal ibhalisa i-akhawunti isebenzisa idilesi yakho, banokujonga imifanekiso eskeniweyo yeengxelo zebhanki ezingenayo, amaxwebhu erhafu, iileta ezithatha indawo yekhadi letyala, kunye nembalelwano karhulumente phambi kokuba i-imeyile ifike kwibhokisi yakho yeposi.
• Utshintsho Lwedilesi Olungagunyaziswanga (COA): Abahlaseli banokusebenzisa iinkcukacha zobuqu ezifunyenweyo ukungenisa isicelo sokutshintsha idilesi ye-elektroniki ngenkonzo yeposi, bejikisa imeyile yakho kwikhaya elingenamntu, ukulahla ipakethe, okanye iarhente yorhwebo efumana imeyile. Nje ukuba i-imeyile yakho ithunyelwe kwenye indawo, izaphuli-mthetho zibamba amakhadi okuthenga ngetyala asandul' ukukhutshwa, amakhadi okuthenga ngetyala, kunye neerekhodi ezibuthathaka zezimali ngaphandle kolwazi lwakho.
• Ukuqinisekisa ubume beAkhawunti: Tyelela usps.com, yiya kwi-Informed Delivery portal, kwaye uzame ukungena okanye wenze i-akhawunti ngeenkcukacha zakho zobuqu. Ukuba iqonga libonisa ukuba i-akhawunti sele ikhona kwidilesi yakho phantsi kwedilesi ye-imeyile ongayaziyo, qhagamshelana nenkonzo yabathengi be-USPS ngoko nangoko.
• Uqinisekiso lweSazisi soMntu: Ukuba i-akhawunti engagunyaziswanga yenziwe, tyelela iofisi yesebe yengingqi yakho ngeendlela ezimbini zesazisi sikarhulumente kunye nobungqina bedilesi. Cela ukuba oonobhala beposi bavale i-akhawunti yedijithali engagunyaziswanga kwaye babambe ubuqhophololo kwidilesi yakho yokuhanjiswa kwendawo ukuvala utshintsho kwiidilesi ze-elektroniki.

Ulawulo loxinzelelo kunye neziphumo zempilo¶

Ukuwa lixhoba lobuqhophololo be-intanethi kudla ngokuvelisa uxinzelelo olumandla lweemvakalelo, ukuzigxeka, kunye neemvakalelo zokuba sesichengeni. Ukufumanisa ukuba ucofa nje kwifowuni yakho unike inombolo yekhadi lakho letyala okanye iinkcukacha zesazisi sakho kubaphuli-mthetho kunokubangela ukothuka ngokwasemzimbeni, ukuphuthelwa, uxinzelelo lwegazi olunyukileyo, kunye nexhala.

Yazi ukuba imiyalezo yokuthuthwa kweposi iyilwe ngobuchwephesha ngamaqela olwaphulo-mthetho asebenzisa into yokuba izigidi zabantu zilindele iipakethe yonke imihla. Ukuba uxinzelelo lwemali ehambelanayo lubangela ukuqina kwesifuba, ukuphefumla, ukungcangcazela okukhulu, okanye ukuphakuzela, funa unyango ngokukhawuleza. Cinga ukugqiba uncedo lokuqala oluqinisekisiweyo, i-CPR, kunye nekhosi yoncedo lokuqala lwezengqondo ngokusebenzisa uMnqamlezo oBomvu, iSt John Ambulance, okanye umnikezeli wendawo ukuze wakhe ukuzithemba kunye nobuchule obusebenzayo ekulawuleni ukothuka komzimba kunye neengxaki zempilo ezinzima ngexesha likaxakeka losapho.

Imibuzo edla ngokubuzwa¶

Ngaba iNkonzo Yeposi yaseUnited States ikhe ithumele imiyalezo emalunga nokuhanjiswa kwepasela?¶

INkonzo yePosi yase-United States ithumela kuphela izaziso ezibhaliweyo kubathengi ababhalise ngokuthe ngqo ukulandelela uhlaziyo kwiwebhusayithi esemthethweni (usps.com) ngenombolo ethile yokulandelela, okanye ababhalise kwi-Information Delivery. Imiyalezo ebhaliweyo ezenzekelayo ezenzekelayo esuka kwi-USPS ifika ngokukodwa kwi-shortcode enamanani amahlanu esemthethweni 28777 (USPS) kwaye ingaze iqulathe amakhonkco ayalela abasebenzisi ukuba bahlaziye iinkcukacha zedilesi okanye bahlawule umrhumo wokubuyisela kwakhona. Inkonzo yeposi ayikhe ithumele imiyalezo ebhaliweyo engacelwanga ifuna iinkcukacha zobuqu okanye iinombolo zekhadi letyala ukuze ikhuphe ipakethe.

Kufuneka ndenze ntoni ukuba ndifake iinkcukacha zekhadi lam letyala kodwa ndilivale iphepha lewebhu phambi kokuba ndilithumele?¶

Iikiti zangoku ezibuyisela umva iproxy phishing zisebenzisa iscripts ezizenzekelayo zokulandela umkhondo, ezifana ne keyloggers okanye uqhagamshelo lwesokhethi yexesha lokwenyani, ezibamba iziqhoboshi zeqhosha njengoko uzichwetheza kwiibhokisi zongeniso ezizimeleyo, nokuba awuzange ucofe iqhosha elithi "Thumela" okanye "Qhubeka" Ngenxa yokuba inombolo yekhadi lakho, ixesha lokuphelelwa lixesha, kunye nekhowudi yeCVV inokuba zithunyelwe kwangexesha, kufuneka uliphathe njengelikhohlisiwe. Qhagamshelana neziko lakho lezemali ngokukhawuleza ukuze ulitshixe kwaye ulibuyisele ikhadi lentlawulo.

Kutheni abakhohlisi becela umrhumo omncinci nje nge-0.35 USD endaweni yamakhulu eedola?¶

Abaqhankqalazi bacela ngabom umrhumo ongabalulekanga phakathi kwe-0.30 USD kunye ne-3.00 USD kuba abathengi abafane bathandabuze ukuchitha imali encinci ukusombulula iphakheji elibazisiweyo. Le mali iphantsi yedola idlula ukuthandabuza kwabantu kwaye inqanda ukubangela imithetho yobuqhophololo ebhankini ephonononga iintengiselwano zexabiso eliphezulu. Nje ukuba i-scammer ibambe iziqinisekiso zekhadi elipheleleyo, basebenzisa idatha ebiweyo ukubhalisa ikhadi lakho kwi-wallets ephathwayo okanye ukuqalisa ukuthengiselana okungagunyaziswanga kweedola eziphezulu.

Ngaba abakhohlisi bangayiba imali yam ukuba ndicofe ikhonkco kuphela kodwa ndingachwethezi naluphi na ulwazi?¶

Ukuba ucofe kuphela ikhonkco kwiSafari, Chrome, okanye esinye isikhangeli seselfowuni esiqhelekileyo kwaye kwangoko uvale ithebhu ngaphandle kokungenisa ulwazi, ukufaka isicelo, okanye ukukhuphela iprofayile yoqwalaselo, iiakhawunti zakho zemali zihlala zikhuselekile. Iinkqubo zokusebenza zeselula zanamhlanje zahlula iithebhu zesikhangeli sewebhu ngaphakathi kweebhokisi zesanti ezikhuselekileyo, zithintela iiwebhusayithi ekukhupheni amagama ayimfihlo agciniweyo okanye amakhadi okuhlawula ngaphandle kokusebenzisana nomsebenzisi. Coca i-cache yesikhangeli sakho kunye nedatha yewebhusayithi njengenyathelo lokhuseleko oluqhelekileyo.

Uthini umahluko phakathi kwenombolo yokulandelela ye-USPS yokwenyani kunye nenombolo yomkhondo womgunyathi kwisicatshulwa?¶

Amanani okulandelela e-USPS okwenene abambelela kwiifomathi ezisemgangathweni, eziquka ama-20 ukuya kuma-22 amanani aqala ngo-9 (kwipakethe zasekhaya), okanye i-13 oonobumba bealphanumeric abaqala ngoonobumba ababini, balandelwe ngamasuntswana alithoba, baze baphele nge-US (yokuthunyelwa kumazwe ngamazwe). Imiyalezo ebhaliweyo yeSmishing ihlala ibandakanya imitya eyenziwe ngokupheleleyo yoonobumba kunye namanani, okanye ushiye inombolo yokulandelela ngokupheleleyo ngelixa uyalela ukuba ucofe ikhonkco. Unokuqinisekisa nayiphi na inombolo yokulandelela ngokukhuselekileyo ngokuya ngqo kwi-usps.com kwaye ufake ikhowudi kwibha yokukhangela esemthethweni yokukhangela.

Imithombo ijongiwe¶

• Inkonzo yoHlolo lwePosi yase-United States (USPIS, eUnited States): IiNgcebiso zoKwazisa uLuntu: ISmishing Package Delivery Scams and Post Phishing (uspis.gov).
• IKomishoni yoRhwebo ye-Federal (FTC, eUnited States): Isilumkiso soMthengi: I-Fake Package yokuhanjiswa kweMiyalezo ebhaliweyo kunye noHlaselo lweSmishing (consumer.ftc.gov).
• I-Arhente yoKhuseleko lwe-Cybersecurity kunye neZiseko zoKhuseleko (CISA, United States): UkuLwa i-Mobile Phishing kunye ne-Smishing Threats: IsiKhokelo kuBathengi kunye neMibutho (cisa.gov).
• IKomishoni yoNxibelelwano lwe-Federal (FCC, eUnited States): IsiKhokelo soMthengi: Imixholo yeRobo, iSmishing, kunye nePackage Delivery Scams (fcc.gov).
• Iziko leSizwe loKhuseleko lwe-Cyber ​​(NCSC, eUnited Kingdom): Ubuqhetseba kunye noBuqhetseba bokuPhila: Ukuchonga kunye nokuNika iMiyalezo ye-SMS eNyonzo (ncsc.gov.uk).
• Iziko laseKhanada eliChase ubuqhophololo (i-CAFC, eKhanada): UThintelo loBuqhophololo: Ukuhanjiswa kwePakeji kunye ne-Courier Smishing Schemes (antifraudcentre-centreantifraude.ca).

Izikhokelo ezinxulumeneyo¶

• Impendulo yokwaphulwa kwedatha kunye nokuvuza kwephasiwedi
• I-MFA phishing kunye nomchasi-ophakathi-okudlulayo
• QR khowudi phishing kunye nokuzikhusela quishing
• Ukubiwa kwepakethi kunye nokuphangwa kwevaranda
• Ubuqhophololo nobuqhetseba