Ukuhlaselwa Kokufaka Ubufakazi: I-Drained Airline Miles, Amaphuzu Ehhotela, Nebhalansi Yekhadi Lesipho Eligciniwe¶

Ukuvuka ukuze uthole izexwayiso ze-imeyili zokuthi othile usanda kubhuka indiza yezinga elilodwa lebhizinisi lamazwe ngamazwe esebenzisa u-180,000 wamamayela okundiza njalo enkampanini yakho, wadlulisela amaphuzu angu-250,000 okwethembeka ehhotela ku-akhawunti yomuntu ongamazi, noma wakhipha i-Starbucks, Target, Walmart, Sephora, noma ibhalansi yekhadi lesipho lase-Amazon ngenkathi ibhalansi yekhadi lakho lesipho lase-Amazon isasayinwe ngokuzenzakalelayo ekhadini lakho lesikweletu. Ukuhlasela Kokufaka Ubufakazi**. Ngokungafani nokuhlasela okuhlosiwe kobugebengu bokweba imininingwane ebucayi noma a ukwephulwa kwe-akhawunti yasebhange, ukugcwaliswa kokuqinisekisa kusebenzisa isoftware ye-botnet ezenzakalelayo (OpenBullet, SilverBullet, Sentry MBA, kubhangqwe namanethiwekhi ommeleli wezindawo zokuhlala) ukuhlola amashumi ezigidi zezinhlanganisela ze-imeyili nephasiwedi aputshuziwe ("uhlu lwe-combo" lwangaphambilini ukwephulwa kwedatha nokuvuza kwephasiwedi) ngokumelene namakhulu ezinkampani zezindiza, ihhotela, indawo yokudlela, amageyimu, kanye nezingosi zokwethembeka okudayisa ngesikhathi esisodwa. Izigebengu ze-Cybercriminal ziqondise ngokuqondile ama-akhawunti ahamba njalo (Delta SkyMiles, American Airlines AAdvantage, United MileagePlus, British Airways Executive Club, Air Canada Aeroplan, Qantas Frequent Flyer), imiklomelo yehhotela (Marriott Bonvoy, Hilton Honors, World of Hyatt, IHG One Rewards), nezinhlelo zokusebenza zekhofi/zokudla okusheshayo/zokuthengisa (Starbucks, Chick-fil-A, Dunkin', Target Circle, Walmart, Ulta, Sephora) ngenxa yokuthi lezi zinhlelo zibamba izinkulungwane zamadola "emalini eyi-quasi" engalawulwa engakhishwa emakhadini esipho edijithali, i-Apple electronics, noma amathikithi endiza osuku olufanayo ngaphansi kwamasekhondi angu-90, ngokuvamile ane- Zero eyimpoqo yokuqinisekisa i-Multi-Factor Authentication (MFA) inikwe amandla ngokuzenzakalelayo. Uma futhi ubona amakhulukhulu okubhaliswa kwencwadi yezindaba ewumfucumfucu egcwala ibhokisi lakho lokungenayo ngesikhathi esifanayo, umhlaseli usebenzisa I-imeyili Yokubhomulisa / Isikhukhula Sokubhalisa ukuze afihle i-imeyili esemthethweni yokuhlenga indiza noma yerisidi yekhadi lesipho; hlola umhlahlandlela wethu ku i-akhawunti ye-imeyili intshontshiwe, imithetho yokudlulisela phambili, nokutholwa khona manjalo. Uma ubhekene nokuqolwa ngokushesha noma ukusongelwa ngokomzimba, shayela inombolo yakho yasendaweni yezimo eziphuthumayo (911 e-United States naseCanada, 112 kwi-European Union, 999 e-United Kingdom) noma uthintane nemibhalo yethu yamazwe ngamazwe izinombolo eziphuthumayo.

Yenza lokhu manje¶

1. Ngaphambi kokususa isikhukhula esingazelelwe sama-imeyili kagaxekile angu-500 ("Ibhomu Le-imeyili"), sesha amafolda akho e-Ibhokisi lokungenayo, Ugaxekile, kanye Nodoti ukuze uthole amagama "Redemption", "Points", "Miles", "Ticket", "eGift", "Order", "Transfer", noma "Added a payment": Noma nini lapho i-bot efaka izifakazelo ikhipha ngempumelelo inkampani yezindiza, ihhotela, noma i-akhawunti yokudayisa, umhlaseli ngokushesha uvula iskripthi esisayina ikheli lakho le-imeyili ohlwini lwama-imeyili angahleliwe angu-500 kuya kwangu-2,000 emizuzwini engu-3 ukuze uphuthelwe irisidi elilodwa langempela elibonisa ukuthi yiphi i-akhawunti yokwethembeka esanda kuthululwa. Ukuthola leso saziso esisodwa emahoreni angu-2 okuqala kukuvumela ukuthi ukhansele ithikithi lendiza lomgebezi noma umise ikhadi lesipho ledijithali ngaphambi kokuba umgibeli agibele indiza noma asebenzise ibhakhodi.
2. Ngena enkampanini yezindiza, ihhotela, noma i-akhawunti yokwethembeka esengozini esipheqululini esihlanzekile, shintsha iphasiwedi ibe yiphasiwedi engahleliwe entsha sha yezinhlamvu ezingu-16+, bese ususa wonke amakhadi esikweletu/edebhithi namathokheni axhunyiwe e-PayPal/Venmo/Apple Pay:
3. Ngokungeziwe ekusebenziseni amamayela akho anqwabelene noma ibhalansi yekhadi lesipho, imibhalo yokufaka izifakazelo ihlola ukuthi ingabe "Layisha kabusha Ngokuzenzakalelayo" (Starbucks / Dunkin' / Toll Pass) noma ukuchofoza okukodwa kokuphuma kwekhadi lesikweletu eligciniwe kunikwe amandla ukuze bakwazi ukumpompa u-\(100 owengeziwe ukuya ku-\)500 ku-Visa/Mastercard yakho exhunyiwe baye kubhalansi yekhadi lesipho lohlelo lokusebenza futhi bakukhiphe nakho.
4. Hlola ithebhu ethi "Uhambo Oluzayo / Ukubhuka / Ama-oda / Umsebenzi Wamaphuzu" ngaphakathi kwe-akhawunti yokwethembeka, FUTHI UNGAKHANSELI indiza ewumgunyathi ewumgunyathi noma ukubhukha ihhotela ku-inthanethi ngokwakho uma uhlelo lukhokhisa imali yokuphinda ludiphoziswe noma luthumela amaphuzu ku-akhawunti isigebengu esisayilawula ngeseshini yeselula esebenzayo:
5. Kunalokho, bhala phansi Irekhodi Legama Lomgibeli Wendiza Yendiza enezinhlamvu ezingu-6 (PNR / Ikhodi Yokuqinisekisa), Inombolo ye-e-Ticket enezinhlamvu ezingu-13 (isibonelo, 001-... okwaseMelika, 006-... ku-Delta, 016-... kwe-United, 125-... yeBritish Airways), umgibeli obiza igama lomgebengu ubhukhe ithikithi ngaphansi, noma Inombolo Yokuqinisekisa Ihhotela / Inombolo Yoku-oda Ikhadi Lesipho, futhi ashayele ideskithophu Lokuvikelwa Kokukhwabanisa/Imali Engenayo lohlelo lobuqotho, futhi abize ngokushesha.
6. Hlola ukuthi umhlaseli ushintshile yini i-imeyili yokutakula Yesibili, Inombolo Yocingo, noma wengeze ilungu elithi "Umndeni / Ukuhlanganiswa Komndeni / Oqokelwe Ukuhlengwa" ngaphakathi kwephrofayela yakho yokwethembeka:
7. Izinhlelo ezifana British Airways Executive Club, JetBlue TrueBlue, Hilton Honors, Marriott Bonvoy, Air Canada Aeroplan, futhi Qantas vumela ama-akhawunti ukuthi axhumanise I-akhawunti Yasekhaya / Uzakwethu Wokuhlanganisa Amaphoyinti noma Dlulisa Ohlomula. Abahlaseli baxhumanisa i-akhawunti yabo ye-mule nephuli yakho, bakhiphe amaphuzu akho echibini, futhi bahlale bexhumene ngisho nangemva kokuba usushintshe igama-mfihlo ngaphandle uma ucwaninga ngokucacile futhi uhlakaza Iphuli Yasekhaya.
8. Shayela ibhange lakho noma okhipha ikhadi lesikweletu ngokushesha uma "Layisha Ngokuzenzakalelayo" noma ikhadi eligciniwe likhokhisiwe: Yazisa umnyango wokukhwabanisa ukuthi i-akhawunti yakho yohlelo lokusebenza lomthengisi ithathwe ngokufaka imininingwane (Unauthorized Card-Not-Present Transaction), cela ukushintshwa ngokushesha kwenombolo yekhadi, bese ubacela ukuthi bahoxise Isibuyekezo Se-akhawunti ye-Visa/Mastercard yomthengisi (VAU/ABU) ithokheni ukuze inombolo yekhadi lakho elisha lingaphindiselwa emuva ngokuzenzakalelayo kuhlelo lokusebenza lokudayisa olusengozini.
9. Thola yonke enye i-akhawunti lapho oke wasebenzisa khona igama-mfihlo elifanayo (noma okuhlukile okufana nalokhu Summer2024 -> Summer2025) bese uwazungezisa ngokushesha usebenzisa isiphathi sephasiwedi: Uma ipheya yakho ye-imeyili nephasiwedi ifinyelela kuhlu lwenhlanganisela ye-botnet esebenzayo, ama-bot azenzakalelayo azohlola lelo phasiwedi ngqo kumawebhusayithi aphezulu angu-300 (izinkampani zezindiza, amahhotela, amasayithi amathikithi afana ne-Ticketmaster/StubHub, izinhlelo zokusebenza zokulethwa kokudla njenge-DoorDash/I-crypto exchanges4 phakathi kwe-Eats 2 ne-2 elandelayo, amahora.

Isihlahla sesinqumo: ukulinganisa nokubuyisela emuva ubuqotho bokufaka izifakazelo noma ukudonsa amanzi okuthengisa¶

Sebenzisa lokhu kugeleza komsebenzi ukumisa ukudonsa kwephoyinti okusebenzayo noma ukweba ibhalansi egciniwe futhi ubuyisele ibhalansi yakho:

flowchart TD
    Alert["Isexwayiso: Ukuhlengwa Kwamamayela/Amaphuzu Angagunyaziwe, Ukudonsa Kwekhadi Lesipho Eligciniwe, noma Isikhukhula Esisheshayo sama-imeyili Encwadi Engafuneki angu-500+"] --> SearchBomb["ISINYATHELO 1: Sesha Ibhokisi Lemilayezo Engenayo + Udoti + Ugaxekile ukuze uthole 'Ukuhlenga', 'Amamayela', 'Amaphuzu', 'Ithikithi', 'I-oda', 'Layisha kabusha', noma 'I-imeyili Eshintshiwe'"]

    SearchBomb --> TargetType{"Iluphi Uhlobo Lwe-akhawunti Eyephulwa I-Credential-Stuffing Bot?"}

    TargetType -->|"I-Airline Frequent Flyer (Delta, AA, United, BA, Aeroplan, Qantas)"| AirlinePath["ISINYATHELO 2A: Rekhoda i-Rogue PNR + Igama Lomgibeli -> Shintsha Igama Lokuyimfihlo + Nika amandla i-MFA -> Shayela Ukukhwabanisa Kwezindiza / Ideski Lokuvikela Imali Engenayo Ukuze Ungasebenzi Amathikithi & Umise I-akhawunti"]

    TargetType -->|"Ubuqotho Behhotela (Marriott Bonvoy, Hilton Honours, Hyatt, IHG)"| HotelPath["ISINYATHELO 2B: Hlola 'Umsebenzi Wamaphuzu' Wokudluliswa Kwamaphuzu / Imali Yekhadi Lesipho / Ukubhuka Kwegumbi -> Chaza 'Ukuhlanganisa Amaphuzu' -> Shayela Ithimba Lokukhwabanisa Lobuqotho ukuze Lihlehlise Ukudluliselwa"]

    TargetType -->|"Ikhofi / Ukudla Okusheshayo / Uhlelo Lokuthengisa (Starbucks, Target, Walmart, Sephora, Chick-fil-A)"| RetailPath["ISINYATHELO 2C: Susa Amakhadi Esikweletu Alondoloziwe + Vala 'Layisha Ngokuzenzakalelayo' Ngokushesha -> Shayela Usekelo Lwekhasimende Ukuze Uvale Ibhakhodi Yekhadi Lesipho Elihle Kahle futhi Ukhiphe Futhi Ibhalansi"]

    AirlinePath --> AuditEmail["ISINYATHELO 3: Hlola I-akhawunti Yakho Ye-imeyili Eyisisekelo (i-Gmail/Outlook/Yahoo) ukuze uthole Imithetho Yokudlulisa Okubi noma Izihlungi Ezisusa Ama-imeyili Obuqotho"]
    HotelPath --> AuditEmail
    RetailPath --> AuditEmail

    AuditEmail --> RotateAll["ISINYATHELO 4: Zungezisa Konke Ukwabelana Nge-akhawunti Ephinde Yasebenzisa Iphasiwedi Usebenzisa Umphathi Wephasiwedi + Okhiye Bokungena / TOTP 2FA"]

Indlela ama-bots afaka ngayo imininingwane akhipha ngayo amamayela, amaphuzu, namakhadi esipho ngaphansi kwamasekhondi angu-90¶

Ukuqonda izinsimbi eziqondile zokuhlasela kokufakwa kwemininingwane kuchaza ukuthi kungani ama-akhawunti ahlala iminyaka engakathintwa avele athululwe ngo-02:00 AM:

1. Kungani Ama-Akhawunti Obuqotho Nawokudayisa Eyi-#1 Okuhloswe Ngayo Amabhodlela Ohlu Lwe-Combo¶

Lapho iwebhusayithi enkulu ihlangabezana nokuphulwa kwedatha, izigidi ze email:password amapheya ahlanganiswa abe amafayela ombhalo abizwa ngokuthi Uhlu Lwenhlanganisela. Abahlaseli balayisha lolu hlu lwe-combo kumathuluzi wokuzenzakalelayo wesiphequluli esingenakhanda esisheshayo (OpenBullet 2 / SilverBullet) usebenzisa Lungisa amafayela (.anom / .loli / .opk) kubhalelwe inkampani ethile yezindiza, ihhotela, nama-API okuthengisa: 1. Isigaba 1 (Ukuskena "Ukuthwebula" Okuzenzakalelayo): Ukuhlolwa kwe-bot okuputshuziwe okungu-50,000 email:password amapheya ngomzuzu ngokusebenzisa ama-proxi azungezayo okuhlala ngokumelene ne-API yokungena ye-app yeselula Marriott, Hilton, American Airlines, United, Delta, Starbucks, Target, noma Sephora. 2. Isigaba 2 (Ibhalansi Ezenzakalelayo): Noma nini lapho ukungena kuphumelela (ngoba isisulu saphinda sasebenzisa igama-mfihlo elifanayo esilisebenzisile esithangamini sokwephulwa komthetho noma indawo yokuthenga eminyakeni emi-4 edlule), umbhalo we-bot uklwebha ngokuzenzakalela ibhalansi ye-akhawunti ethi Point/Mile Balance, Ikhadi Lesipho Eligciniwe Liyi-Value Yekhadi Lesipho libe yi-Card Card Value Value **, kanye ne-4 Tiger Diver. (isibonelo, "100,000+ Miles" noma "$50+ Gift Card"). 3. Isigaba 3 (Indlela yokwenza imali esheshayo / i-Cashout): - Iziphothali Zokuguqula Ikhadi Lesipho (Points-to-Gift-Card): Izingosi eziningi zokwethembeka zamahhotela, izinkampani zezindiza, kanye namakhadi esikweletu zivumela ukusetshenziswa ngokushesha ku-inthanethi kwamaphuzu amakhadi edijithali Apple, Best Buy, Amazon, Target, Walmart, noma i-Visa eGift amakhadi athunyelwe nge-imeyili, umhlaseli anqamula noma awaqondise kabusha. - Ukudluliswa Kwamaphoyinti & Amachibi Omkhaya: Umhlaseli udlulisela eyakho Hilton Honors, Marriott Bonvoy, noma Airline ukhomba ku-akhawunti yokwethembeka "yemnyuzi", noma ixhumanise i-akhawunti yakho ne-Iphuli Yasekhaya futhi iwakhulule ekungeneni komnyuzi. - Izindiza Zosuku olufanayo / Zosuku Olulandelayo Zomklomelo Wamazwe Ngamazwe & Nezindawo Zokuhlala Ezinehhotela Elinethezeka: Amaqembu okukhwabanisa okuhamba kwe-Underground Telegram athatha i-akhawunti yakho entshontshiwe ngamamayela angu-150,000 futhi abhukhe indiza yamazwe ngamazwe yosuku olufanayo noma ukuhlala ehhotela eliwubukhazikhazi lobusuku obu-5 ngomthengi wenkampani yangaphandle ekhokhela isigebengu amasenti angu-30 ngedola nge-cryptocurrency. - Ukukhipha Ibhakhodi Yeselula Esitolo (Starbucks, Target Wallet, Walmart Pay, Sephora, Ulta): Ngezinhlelo zokusebenza zokuthengisa nekhofi, i-bot ikhipha inombolo yebhakhodi yekhadi lesipho/ikhodi ye-QR (noma ingene ngokuqondile kuhlelo lwakho lokusebenza ngefoni eshisa izikhotha endaweni yokuphuma kuyo, ivula okuthi Layisha kabusha ngokuzenzakalelayo ku-Visa/Mastercard yakho elondoloziwe, futhi ithenge okuthengiswayo okuthengiswa kakhulu noma amakhadi esipho aphathekayo esitolo.

2. Kungani Ungasitholanga Isexwayiso Se-imeyili: "Ibhomu Le-imeyili" & Neqhinga Lokuhlunga Lebhokisi Lemilayezo Engenayo¶

Uma umhlaseli ekhipha amaphuzu akho, inkundla yokwethembeka ihlala ithumela i-imeyili yokuqinisekisa ezenzakalelayo ("Your Marriott Bonvoy Points Transfer is Complete" noma "Your Delta eTicket Receipt"). Ukukuvimba ekuboneni leyo imeyili kusenesikhathi ukuze ushayele inkampani yezindiza futhi ukhansele ithikithi ngaphambi kokusuka, abahlaseli basebenzisa amaqhinga amabili: - Iqhinga A (Uma bengenakho ukufinyelela ku-akhawunti yakho ye-imeyili): Bethula Ibhomu Lokubhalisa (Email Bomb), usebenzisa imibhalo ezenzakalelayo ukuhambisa ikheli lakho le-imeyili kumafomu angu-1,000+ angagunyaziwe okubhalisa incwadi yezindaba yewebhusayithi emhlabeni wonke phakathi nemizuzwana engu-120. Ifoni yakho ikhala ngokungaphezi nabangu-1,000 "Confirm your subscription to..." ama-imeyili emizuzwini eyi-10, okubangela abantu abaningi ukuthi bakhethe wonke ama-imeyili ayi-1,000 bese becindezela okuthi Delete, ngokususa ngephutha inkampani eyodwa yendiza yangempela noma isexwayiso sokukhwabanisa kwebhange esingcwatshwe kulayini 412. - Iqhinga B (Uma usebenzise nephasiwedi EFANAYO KANYE Ku-akhawunti yakho Ye-imeyili): Umhlaseli ungena ngokuqondile ku-Gmail yakho, i-Outlook, noma i-Yahoo Mail, udala engabonakali Umthetho Webhokisi Lemilayezo Engenayo / Isihlungi (If sender contains "delta.com", "marriott.com", "hilton.com", or "starbucks.com" -> Skip Inbox and Delete It / Move to Trash), futhi ithulula ifolda yakho kadoti ukuze ungalokothi ubone isaziso esisodwa.

Isigaba 1: Ukubuyisela Umumo Wamamayela Ezindiza Engasetshenzisiwe Namaphoyinti Ehhotela (Incwadi Yokudlala Yomhlinzeki-ngomhlinzeki)¶

Ngokungafani nokudluliswa kwezintambo noma ukuthengiselana nge-cryptocurrency (okungenakuhlehliswa uma sekuqediwe ku-chain), amamayela endiza, izindawo zamahhotela, namakhadi esipho okuthengisa angaphakathi ahlala ngaphakathi kwesizindalwazi esimaphakathi esilawulwa inkampani engamaphesenti angu-100. Ngisho noma isigebengu sesivele sidlulisele amaphuzu akho kwelinye ilungu noma sikhiphe ithikithi lendiza lokuklonyeliswa, ithimba lendiza noma lehhotela Ithimba Lophenyo Lokukhwabanisa Kwebhizinisi/Imali Engenayo lingakwazi ukulandelela i-akhawunti okuyiwa kuyo ngqo, lichithe ithikithi noma lidlulise, livimbele iphasiphothi/i-akhawunti yomamukeli, futhi libuyisele amaphesenti angu-100 enambolo yakho entshontshiwe, noma amaphuzu ku-akhawunti entsha yokwethembeka.

Landela izinyathelo zokutakula ezithile zohlelo lwakho lokwethembeka ngezansi:

Isigaba sesi-2: Ukumisa okuthi "Layisha kabusha Ngokuzenzakalelayo" kanye Nokukhipha Ithokheni Yokukhokha Elondoloziwe¶

Izisulu eziningi zokupakishwa kwemininingwane yohlelo lokusebenza nekhofi zilahlekelwa imali yangempela ku-akhawunti yazo yokuhlola yasebhange noma ikhadi lesikweletu ngaphezu kwamaphuzu azo okwethembeka agciniwe. Nansi indlela i- Layisha kabusha Ngokuzenzakalelayo & I-Tokenized Wallet Drain isebenza nokuthi uyivala kanjani:

1. Indlela Abahlaseli Abasebenzisa Ngayo "Layisha kabusha Ngokuzenzakalelayo" kanye "Skena futhi Ukhokhe":
2. Kuzinhlelo zokusebenza ezifana Starbucks, Dunkin', Chick-fil-A, Panera, EZ-Pass / Toll Tag accounts, namakhadi ezokuthutha, abasebenzisi bavame ukulondoloza ikhadi lesikweletu noma i-akhawunti ye-PayPal ukuze baphinde bashaje ibhalansi yabo egciniwe.
3. Ngisho noma ikhadi lakho le-Starbucks lalino-\(4.50** kuphela lapho isigebengu singena ngemvume, isigebengu sithepha okuthi **"Layisha kabusha u-\)100.00" izikhathi ezinhlanu zilandelana usebenzisa ithokheni yakho elondoloziwe ye-Visa/Mastercard/PayPal (okuvamise ukuthi enga ukwazisa amadijithi angu-3". CVV ikhodi lapho ulayisha kabusha ibhalansi yekhadi lesipho lenkampani yokuqala ekhona), bese idlulisela ngokushesha leyo bhalansi engu-$500 ekhadini elihlukile elibonakalayo noma liyisebenzise kurejista.
4. Kungani Ukumane Ushintshe Inombolo Yekhadi Lakho Lesikweletu Ngezinye izikhathi Akwanele (Visa VAU / Mastercard ABU):
5. Uma ushayela ibhange lakho ukubika inkokhiso yomgunyathi futhi likuthumelele ikhadi lesikweletu elisha elinenombolo entsha enezinombolo eziyi-16, i-Visa (Isibuyekezi se-Akhawunti ye-Visa VAU) kanye ne-Mastercard (Isibuyekezi Sokukhokha Esizenzakalelayo ABU) phusha ngokuzenzakalelayo inombolo yekhadi lakho elisha elinezinhlamvu eziyi-16 kubathengisi abaphindelelayo kanye nezikhwama zamaselula lapho ikhadi lakho elidala laligcinwe khona.
6. Uma umhlaseli esenethokheni yeseshini ye-OAuth esebenzayo ngaphakathi kohlelo lwakho lokusebenza olusengozini lokudayisa noma lokuletha ukudla, ikhadi lakho elisha sha lingavela khona kanye ngaphakathi kohlelo lokusebenza oluntshontshiwe ngaphambi kokuthi ikhadi lakho lomzimba lifike ngisho nasebhokisini lakho leposi.
7. Ongakutshela ibhange lakho: Noma nini lapho kuntshontshwa i-akhawunti yomthengisi enekhadi elilondoloziwe, tshela uchwepheshe wokukhwabanisa webhange lakho: > "Ngicela ukhansele ikhadi lami, uhoxise wonke amathokheni okukhokha akhona ahlobene nawo [Merchant Name], bese ngibeka ibhulokhi yesikhashana yokuphuma ku-Visa Account Updater / Mastercard Automatic Billing Updater ukuze inombolo yekhadi lami elisha lingaphushwa ngokuzenzakalelayo kumthengisi osengozini."

Isigaba sesi-3: Ukuhlola I-akhawunti Yakho Ye-imeyili Ukuze Kutholwe Ukuyekethisa Kanye Nemithetho Yebhokisi Lemilayezo Engenayo¶

Ngenxa yokuthi abantu abangamaphesenti angu-65 baphinde basebenzise igama-mfihlo elifanayo kuma-akhawunti amaningi, noma nini lapho i-bot efaka izifakazelo ingena enkampanini yakho yezindiza, yehhotela, noma ku-akhawunti yezitolo, kufanele uhlole ngokushesha ukuthi leyo bot ingenile yini Ku-akhawunti yakho ye-imeyili eyinhloko (Gmail, Outlook / Hotmail, Yahoo, iCloud, AOL):

1. Hlola Amalogi Okungena Ngemvume Asebenzayo Ku-akhawunti Yakho Ye-imeyili:
2. Gmail: Skrolela ezansi kwesokudla sebhokisi lakho lokungenayo bese uchofoza Imininingwane (Last account activity), noma vakashela myaccount.google.com/device-activity.
3. I-Microsoft Outlook / Hotmail / Live: Vakashela account.live.com/Activity futhi uhlole yonke imizamo yakamuva yokungena ngemvume (ngokuvamile uzobona inqwaba yemizamo ehlulekile nephumelelayo ye-IMAP/POP3/Exchange yokufaka izifakazelo evela kumakheli e-IP angaphandle).
4. Imeyili ye-Yahoo: Iya kokuthi Ulwazi Lwe-akhawunti > Umsebenzi Wakamuva.
5. Hlola Imithetho Yakho Yokudlulisa I-imeyili & Usule Ngokuzenzakalelayo Imithetho Yesihlungi MANJE:
6. Vula izilungiselelo ze-imeyili yakho kusiphequluli sewebhu sedeskithophu (izinhlelo zokusebenza zemeyili ephathwayo zifihla imithetho yokuhlunga):
   • I-Gmail: Izilungiselelo (Isithonjana Segiya) > Bona zonke izilungiselelo > Izihlungi namakheli Avinjiwe KANYE Ukudlulisela phambili kanye ne-POP/IMAP.
   • I-Outlook.com: Izilungiselelo (Isithonjana Segiya) > Imeyili > Imithetho KANYE Nemeyili > Idlulisela KANYE Imeyili > I-imeyili engafuneki > Abathumeli abavinjiwe nezizinda.
   • Imeyili ye-Yahoo: Izilungiselelo > Izilungiselelo ezengeziwe > Izihlungi.
7. Bheka noma yimuphi umthetho othi: If From/Subject contains [Airline / Hotel / Bank / PayPal / Amazon / "Security" / "Code"] -> Delete it / Mark as Read / Move to Trash / Archive. Susa zonke izihlungi eziqinile ngokushesha.
8. Ukuze uthole uhambo oluphelele lokulungisa i-imeyili, landela umhlahlandlela wethu ku i-akhawunti ye-imeyili intshontshiwe, imithetho yokudlulisela phambili, nokutholwa.

Isigaba 4: Ukuqeda Ukusetshenziswa Kabusha Kwephasiwedi Kuyo Yonke Impilo Yakho Yedijithali¶

Ukuhlasela kokufaka izifakazelo kusebenza kuphela ngaphansi kwesimo esisodwa: usebenzise iphasiwedi kuleyo sayithi yokwethembeka noma yokudayisa eyayivele ngaphambilini ekwephulweni kwedatha (noma eyaqagelwa kalula ngesimiso sokuguqula isichazamazwi).

Ukuze uzigome unomphela ekufakweni kwemininingwane kuwo wonke ama-akhawunti akho, qedela lolu hlu lokuhlola oluyizinyathelo ezi-5:

• 1. Sebenzisa amakheli akho e-imeyili ngokusebenzisa Have I Been Pwned (haveibeenpwned.com):
• Faka amakheli akho e-imeyili omuntu siqu newasemsebenzini kokuthi haveibeenpwned.com ukuze ubone ukuthi yikuphi ukwephulwa kwedatha okungokomlando okuveza imininingwane yakho.
• 2. Vula Isiphequluli Sakho / Isiphathi Sephasiwedi "Ukuhlola Iphasiwedi" Ukuhlola & Ushintshe Wonke Amagama Okungena Asetshenziswe Kabusha Kuqala:
• ** Amaphasiwedi we-Apple (iOS 18 / macOS Sequoia noma Settings > Passwords > Security Recommendations)**, Isiphathi Sephasiwedi ye-Google (passwords.google.com/checkup), 1Iphasiwedi (Watchtower), kanye ne-Bitwarden (Vault Health Reports)* hlanganisa ngokuzenzakalelayo konke okungena kwakho okulondoloziwe ku-"Amagama Ayimfihlo Asengozini" kanye "Amaphasiwedi Asetshenziswe Kabusha".
• Hlunga amagama akho ayimfihlo asetshenziswe kabusha ngokuthi ngcuphe yezezimali/inani bese ushintsha igama ngalinye ufake elehlukile, elakhiwe ngokungahleliwe iphasiwedi enezinhlamvu eziyi-16 kuya kwezingu-24 (noma umushwana wokungena ongahleliwe wamagama angu-4 correct-horse-battery-staple):
  1. Ama-Akhawunti E-imeyili Ayisisekelo (Gmail, Outlook, Yahoo, iCloud)
  2. Amabhange, Amabrokerage, Nezinhlelo Zokusebenza Zokukhokha (PayPal, Venmo, Cash App, Zelle)
  3. I-Airline Frequent-Flyer & Hotel Loyalty Accounts (Delta, AA, United, BA, Marriott, Hilton, Hyatt)
  4. Izinhlelo Zokudayisa, Amathikithi Nezinhlelo Zokulethwa Kokudla Ezinamakhadi/Amabhalansi Agciniwe (Amazon, Target, Walmart, Starbucks, Ticketmaster, Uber, DoorDash, Sephora, Ulta)
• 3. VULA Ukuqinisekiswa Kwezinto Eziningi (MFA) noma ama-Passkeys Kuwo Wonke I-Akhawunti Yobuqotho Neyokudayisa Eyisekelayo:
• Abasebenzisi abaningi bavumela i-2FA ebhange labo kanye ne-imeyili kodwa bayakhohlwa ukuthi Delta SkyMiles, American Airlines, United MileagePlus, British Airways, Air Canada Aeroplan, Marriott Bonvoy, Hilton Honors, Hyatt, Amazon, Target, Walmart, Starbucks, futhi Ticketmaster manje isekela i-2FA noma okhiye bokudlula, nokho abaningi bashiya i-2FA IVALIWE ngokuzenzakalelayo uze uyivule mathupha ngaphakathi kwezilungiselelo zokuvikela ze-akhawunti.
• 4. Ungalokothi Ulondoloze Ikhadi Lesikweletu noma Ikhadi Ledebhithi Ngaphakathi Kokudla Okuvamile, Ikhofi, noma Izinhlelo Zokudayisa:
• Esikhundleni sokugcina inombolo yakho eluhlaza ye-Visa/Mastercard enezinhlamvu ezingu-16 ngaphakathi kwezindawo zokudlela ezingu-40 ezihlukene, ikhofi, nezinhlelo zokusebenza zokuthenga (lapho noma iyiphi i-bot efaka iziqinisekiso ingakukhokhisa), susa wonke amakhadi alondoloziwe kumaphrofayela omthengisi futhi uhlole usebenzisa i-Apple Pay noma i-Google Pay (edinga i-Face ID yakho bukhoma / I-ID Yokuthinta iskena sebhayomethrikhi efonini yakho ephathekayo noma uthenge kabusha ikhadi ngalinye lesikweletu) noma usebenzise ikhadi ngalinye lesikweletu izinombolo** (Privacy.com, Capital One Eno, Citi Virtual Account Numbers, Revolut Disposable Cards) onomkhawulo oqinile wokuchitha imali wanyanga zonke ongu-$25.
• 5. Sebenzisa Iziteketiso Ze-imeyili Ezihlukile Kuma-akhawunti Amanani Aphezulu:
• Cabangela ukushintsha ikheli le-imeyili lokungena ebhange lakho eliyinhloko, inkampani yezindiza, ne-akhawunti yakho yokwethembeka ehhotela libe isibizo se-imeyili esizinikele (you+loyalty@... noma i-Apple Fihla I-imeyili Yami / SimpleLogin / Fastmail alias) engakaze isetshenziselwe ukubhalisela izinkundla zomphakathi, izincwadi zezindaba, noma izitolo zezitolo. Uma uhlu oluhlanganisiwe lomhlaseli lungalazi ikheli lakho le-imeyili lokungena, abakwazi nokuzama ukufaka iphasiwedi ku-akhawunti yakho.

Izinombolo zezimo eziphuthumayo zesifunda kanye nezinqubomgomo ze-ejensi¶

Ukufinyelela okungagunyaziwe kuma-akhawunti okwethembeka, okuvakasha, nawokuthengisa ngokufaka imininingwane ezenzakalelayo kuyicala lobugebengu (ngaphansi kwe-US Computer Fraud and Abuse Act, i-UK Computer Miuse Act 1990, kanye nemithetho efanayo emhlabeni wonke). Ukubika isigameko kukhiqiza inombolo yecala esemthethweni esiza ukuphoqa izindiza ezimanqikanqika, amahhotela, noma amabhange ukuthi abuyisele amabhalansi antshontshiwe:

• I-United States ne-Canada:
• Amasevisi Wezimo Eziphuthumayo: Dayela 911 uma kukhona ukusongelwa ngokomzimba noma izenzo zobugebengu ezenziwa mathupha.
• Isikhungo sezikhalazo ze-FBI Internet Crime (IC3): Faka umbiko ku-inthanethi kokuthi ic3.gov ibhala phansi indawo engagunyaziwe/imayela lokuhlenga, igama lomgibeli elikhohlakele/PNR uma libonakala, kanye nenani lemali elintshontshiwe.
• Ikhomishini Yezohwebo Yezombuso (FTC) kanye Nomnyango Wezokuthutha (DOT) (US): Bika ukuthathwa kwe-akhawunti yezitolo/ikhadi lesipho e-*ReportFraud.ftc.gov**; uma inkampani yezindiza yenqaba ukuphenya noma ukubuyisela amamayela antshontshiwe ngaphandle kwephutha lakho lapho izilawuli zokuphepha zingekho, ungaphinda ufake isikhalazo somthengi U.S. Umnyango Wezokuthutha (airconsumer.dot.gov) noma i-Attorney General yezwe.
• Isikhungo Sokulwa Nokukhwabanisa SaseCanada (CAFC): Bika ku-inthanethi ku- antifraudcentre-centreantifraude.ca noma shayela 1-888-495-8501.
• United Kingdom:
• Amasevisi Wezimo Eziphuthumayo: Dayela 999 (noma 101 yamaphoyisa angewona abezimo eziphuthumayo).
• Ukukhwabanisa Kwezenzo (Isikhungo Sikazwelonke Sase-UK Sokubika Ubugebengu Be-inthanethi): Bika ku-inthanethi kokuthi actionfraud.police.uk noma shayela 0300 123 2040, futhi uthumele noma imaphi ama-imeyili obugebengu bokweba imininingwane ebucayi/ogaxekile ku-NCSC kokuthi report@phishing.gov.uk.
• I-European Union:
• Amasevisi Wezimo Eziphuthumayo: Dayela 112 kuwo wonke amazwe angamalungu e-EU.
• Iziphathimandla Zokuvikeleka Kwe-Cybercrime Kazwelonke kanye Nokuvikelwa Kwabathengi: Faka umbiko wamaphoyisa ngengosi yombiko kazwelonke ye-Europol (europol.europa.eu/report-a-crime/report-cybercrime-online) futhi wazise ibhange lakho ngaphakathi kwewindi le-PSD2 lokuthenga okungagunyaziwe uma indlela yokukhokha elondoloziwe ibikhokhisiwe.
• I-Australia ne-New Zealand:
• Amasevisi Wezimo Eziphuthumayo: Dayela 000 e-Australia noma 111 eNew Zealand.
• ** ReportCyber (ACSC) & Scamwatch (Australia): Bika ku-inthanethi ku-cyber.gov.au/report-and-recover/report** noma shayela 1300 CYBER1 (1300 292 371).
• CERT NZ / NetSafe (New Zealand): Bika kokuthi cert.govt.nz noma shayela 0508 NETSAFE (0508 638 723).
• I-India ne-Asia-Pacific:
• I-India National Cyber Crime Reporting Portal: Dayela 1930 ngokushesha ukubika ukukhwabanisa kwezezimali/isikhwama semali noma ufake isikhalazo ku-*cybercrime.gov.in**.
• Singapore (ScamShield / Isikhungo Sokulwa Nomkhonyovu SPF): Shayela 1799 noma 1800-722-6688.

Imibuzo ejwayelekile ukubuzwa¶

Ngabe abagebengu bangene kanjani ku-akhawunti yami yendiza noma yehhotela ngenkathi leyo nkampani yezindiza noma ihhotela ithi AKUNGEKHO igetshengwa?¶

Ekuhlaselweni kokufakwa kwemininingwane, inkampani yezindiza noma isizindalwazi sehhotela akuzange kuphulwe. Kunalokho, a ezahlukene iwebhusayithi lapho udale khona i-akhawunti eminyakeni edlule (efana ne-app yokufaneleka, isayithi lamathikithi, inkundla, noma isitolo sokudayisa) yephule umthetho wedatha eputshuze ikheli lakho le-imeyili nephasiwedi. Ngenxa yokuthi usebenzise lelo phasiwedi ncamashi (noma okuhlukile okucishe kufane) kunkampani yakho yezindiza, ihhotela, noma uhlelo lokusebenza lwekhofi, ama-bots azenzakalelayo avele "agcwalise" ipheya yakho ye-imeyili nephasiwedi eputshuziwe ekhasini lokungena lenkampani yezindiza noma yehhotela futhi wangena ngqo.

Kungani kungazelelwe ngithole ama-imeyili angu-1,000 we-junk "Qinisekisa ukubhaliswa kwakho kwencwadi yezindaba" emizuzwini eyi-10 khona kanye lapho amaphuzu ami noma amakhadi esipho entshontshwa?¶

Lezo zikhukhula zokubhalisela udoti zibizwa ngokuthi i Ibhomu le-imeyili (noma ibhomu lokubhaliselwe). Iskripthi sokukhipha imali esizenzakalelayo somhlaseli sisayine ngamabomu ikheli lakho le-imeyili ukuze lithole izincwadi zezindaba ezingahleliwe eziyi-1,000 kuyo yonke i-inthanethi ngesikhathi esiqondile sihlenge ngaso amamayela enkampani yendiza yakho, zadlulisela amaphoyinti akho ehhotela, noma zafaka i-oda ku-akhawunti yakho yokudayisa. Umgomo wabo uwukumboza izaziso zefoni yakho futhi ufihle i-imeyili eyodwa yerisidi esemthethweni evela kunkampani yezindiza, ihhotela, noma isitolo ukuze ukhethe wonke ama-imeyili angu-1,000 futhi uwasuse ngaphandle kokuqaphela ukuthi iyiphi i-akhawunti esanda kukhishwa. Ungalokothi ususe ngobuningi ibhomu le-imeyili ngaphambi kokusesha ibhokisi lakho lokungenayo nefolda yogaxekile ukuze uthole amagama afana nala "I-oda", "Amaphuzu", "Amamayela", "Ithikithi", "Dlulisa", noma "Irisidi".

Ngingakwazi ukubheka igama langempela lomuntu ondiza ngethikithi elibhukhiwe nendiza yami entshontshiwe ngamamayela bese ngiwabika emaphoyiseni?¶

Kufanele nakanjani uthwebule isithombe-skrini Irekhodi Legama Lomgibeli (`PNR`), igama lomgibeli, iphasiphothi/imininingwane Yomhambi Owaziyo (uma ibonakala esikrinini sokubhuka), kanye nenombolo yendiza futhi uzinikeze kokubili Ihhovisi lenkampani yezindiza I-Corporate Fraud / Revenue Protection Desk kanye nokugcinwa komthetho (`ic3.gov`). Kodwa-ke, khumbula ukuthi umuntu ohlezi kuleso sihlalo sendiza uvamise ukuba ngumhambi wenkampani yangaphandle ongaqaphile othenge "ithikithi elinesaphulelo" kumthengisi wokuvakasha ongaphansi komhlaba onenkohliso kuTelegram, WeChat, noma i-Instagram, kunomgebengu osebenzisa i-botnet efaka imininingwane. Ithimba lenkampani yezindiza elikhwabanisayo lizokhansela ithikithi futhi liphenye i-IP yokubhuka kanye nendlela yokukhokha esetshenziselwa izintela/izinkokhelo.

Kungani inkampani yami yezindiza noma i-akhawunti yehhotela ingazange icele isigebengu se-inthanethi ikhodi ye-2FA lapho bengena besuka kwelinye izwe futhi bekhipha amaphuzu angu-200,000?¶

Amafa amaningi ahamba njalo, ukwethembeka kwamahhotela, nezinhlelo zokudayisa zingashiya i-Multi-Factor Authentication (`MFA`) waphenduka KUVALWE ngokuzenzakalelayo (idinga ukuthi umbe mathupha kuzilungiselelo Zokuvikeleka Kwe-akhawunti ukuze uyivule) noma usebenzise kuphela i-2FA kuphothali yabo yewebhu kuyilapho ushiya ama-endpoints amadala we-*API yohlelo lokusebenza lweselula** noma **ama-API wokudlulisela amaphuzu wozakwethu** engavikelwe izinselele ze-2FA. Ukunika amandla i-2FA/Passkeys ngokusobala kuphrofayela yakho yokwethembeka nokusebenzisa iphasiwedi eyingqayizivele, engahleliwe yezinhlamvu ezingu-16+ kumisa ama-bot afaka imininingwane ezenzakalelayo ngisho nakuma-API eselula afa.

Ingabe i-Marriott, i-Hilton, i-Delta, i-American, i-United, noma i-Starbucks empeleni izongibuyisela amaphuzu ami antshontshiwe noma ibhalansi yekhadi lesipho?¶

Yebo, ngobuningi bamacala aqoshiwe, inqobo nje uma ubika ukusetshenziswa okungagunyaziwe ngokushesha kokuthi **Ithimba Lokukhwabanisa Lobuqotho / Ithimba Lokuvikela I-akhawunti** elizinikezele futhi usethe iphasiwedi eyingqayizivele kanye ne-2FA. Ngenxa yokuthi amaphuzu okwethembeka namakhadi esipho esitolo esivalekile kuwukufakwa kweleja yangaphakathi esikhundleni sokudluliswa kwemali ngentambo okungabuyiseleki emuva, ithimba lomkhwabanisi lenkampani lingakhansela ukubhukha ihhotela eliwubugebengu, lichithe ithikithi lendiza, libuyise amaphuzu ku-akhawunti yomamukeli, likukhiphele inombolo entsha yelungu lokwethembeka noma inombolo yekhadi lesipho elibonakalayo, futhi libuyisele ibhalansi yakho ephelele.

Iziqondiso ezihlobene¶

• Impendulo yokwephulwa kwedatha kanye nokuvuza kwephasiwedi: ungawabheka kanjani futhi uwavikele kanjani ama-akhawunti akho
• I-akhawunti ye-imeyili intshontshiwe, imithetho yokudlulisela phambili, nokutholwa
• Ukuphulwa kwe-akhawunti yasebhange: ukukhwabanisa kumiswe ngokushesha kanye nokutholwa
• Ubugebengu bokweba imininingwane ebucayi nama-akhawunti afakwe engcupheni
• Ukudunwa kwekhukhi lesikhathi, i-infostealer malware, nokuhoxiswa kokhiye wokudlula
• Izinombolo zesimo esiphuthumayo ngezwe

Imithombo neziqondiso ezisemthethweni¶

• I-Cybersecurity and Infrastructure Security Agency (CISA) kanye Nesikhungo Sezikhalazo Zobugebengu Be-inthanethi ye-FBI (IC3) (I-United States): Ukunciphisa Ukuhlaselwa Kokufaka Ubufakazi, Ukuthathwa Kwe-akhawunti (ATO), kanye Nemikhankaso Yokubhaliswa Kwebhomu.
• Vula Iphrojekthi Yokuphepha Kohlelo Lomhlaba Wonke (OWASP): I-OWASP Automated Threat Handbook: OAT-008 Ukufaka imininingwane OAT-019 Ukuhlanganisa i-Akhawunti kanye Nokuthola Imali Yephuzu Lobuqotho.
• Isikhungo Sikazwelonke Samazinga Nobuchwepheshe (NIST) (United States): Ukushicilelwa Okukhethekile 800-63B: Izinkombandlela Zobunikazi Bedijithali: Ukuqinisekisa, Ukulawulwa Komjikelezo Wempilo, kanye Nokuhlolwa Kwephasiwedi Okuphuliwe.
• I-National Cyber Security Centre (NCSC) (e-United Kingdom): Ukufaka Ukuqinisekisa, Izingozi Zokusebenzisa Kabusha Iphasiwedi, kanye Nomhlahlandlela Wokuqinisekisa Wezinto Eziningi Wabathengi Namasevisi Aku-inthanethi.
• I-Federal Trade Commission (FTC) kanye Nomnyango Wezokuthutha wase-U.S. (DOT): Ukuvikelwa Kwabathengi kanye Namazinga Okuphenya Ngokukhwabanisa Kwenkampani Yezindiza/Amazinga Wokuphenya Ngokukhwabanisa.