Skip to content

I-akhawunti ye-imeyili entshontshiwe: imithetho yokudlulisela phambili efihliwe nokutholwa

Izinombolo zezimo eziphuthumayo ziyehluka ngezwe. Leli khasi lisebenzisa u-911, inombolo yase-United States naseCanada. Amanye amazwe amaningi asebenzisa u-112, 999, noma enye inombolo. Thola inombolo yezwe lakini.

I-akhawunti yakho ye-imeyili eyinhloko ingukhiye wohlaka lwamathambo kukho konke ubunikazi bakho bedijithali, bezezimali, kanye nomthetho. Ngokungafani nephrofayili yenkundla yezokuxhumana esengozini noma ukungena ngemvume kokusakaza, i-Gmail entshontshiwe, i-Microsoft Outlook / Microsoft 365, Yahoo, Apple iCloud Mail, noma i-akhawunti ye-ProtonMail inika umhlaseli amandla okuchofoza "Ukhohlwe Iphasiwedi" kuma-akhawunti akho asebhange, ukuhwebelana kwe-cryptocurrency, ama-brokerage omhlalaphansi, izingosi zentela, namadrayivu efu. Okuyingozi kakhulu, ukushintsha nje iphasiwedi yakho ye-imeyili bese uvula i-Two-Factor Authentication (2FA) akuvamisile ukukhahlela umhlaseli oyinkimbinkimbi aphume ebhokisini lokungenayo eligqekeziwe. Phakathi nemizuzwana engu-30 yokungena ku-akhawunti ye-imeyili, abahlaseli besimanje batshala izingqimba ezinhlanu zokuphikelela ngemuva kweminyango: kufihlwe Shanela Imithetho Yebhokisi Lokungenayo Shanela Nokudlulisela ( ., .., noma [Blank] ehambisa buthule ama-imeyili okusetha kabusha iphasiwedi iwaqonde ngqo ku Trash noma RSS Feeds ifolda ukuze ungalokothi uyibone), Izibonelelo Zokufaka Isicelo Senkampani Yangaphandle ye-OAuth (eM Client, Thunderbird, noma mbumbulu Google Docs izinhlelo zokusebenza ezigcina ukufinyelela okugcwele kokufunda/ukubhala kwe-API ngaphandle kokudinga iphasiwedi yakho), Izimvume Zebhokisi Lemeyili Elithunyelwe, Amaphasiwedi Ohlelo Lokusebenza (IMAP/SMTP), kanye ne-I-imeyili Yokubuyisela / Izinombolo Zocingo zishintshaniswa.

Uma ukuyekethisa kwe-imeyili kuhilela izinsongo ezisheshayo zodlame olungokomzimba, ukulandelwa, ukuhlukunyezwa kwasekhaya, noma ukuqolwa kwengane encane, shayela inombolo yakho yasendaweni yezimo eziphuthumayo (911 e-United States naseCanada, 112 kwi-European Union, 999 e-United Kingdom) noma uthintane nemibhalo yethu yamazwe ngamazwe izinombolo eziphuthumayo khona manjalo. Kukho konke ukuthathwa kwebhokisi lokungenayo labathengi nebhizinisi, sebenzisa izinyathelo ezi-6 zokulandelana ngezansi ngokulandelana kwazo.

Yenza lokhu manje

  1. UNGAshintshi iphasiwedi yakho ku-Windows PC noma i-Mac efanayo uma usola ukuthi kunegciwane le-Infostealer: Uma i-imeyili yakho itshontshiwe yize ubusuvele uvule i-Two-Factor Authentication (2FA), ikhompuyutha yakho kungenzeka ine Infostealer malware (efana ne-Lumma Stealer, RedLine, noma i-Atomic macOS Stealer) noma iqinisekise iseshini ye-Chrome/eyeba amakhukhi bukhomaSAPISID/SID ku-Google noma ESTSAUTH kuMicrosoft). Thatha i-smartphone ehlanzekile (i-iOS noma i-Android) ukuze wenze ukushintsha iphasiwedi yakho nokuhlanza ukuphepha njengamanje.
  2. Hlola futhi ubuyisele I-imeyili Yokutakula I-akhawunti yakho, Inombolo Yocingo Yokuthola kabusha, kanye namadivayisi Okuqinisekisa i-MFA NGAPHAMBI kokushintsha iphasiwedi yakho (noma phakathi kwamasekhondi angu-30 ngemva): Abahlaseli ngokushesha bangeza inombolo yabo yocingo eshibhile, ikheli le-imeyili elilahlwayo, noma uhlelo lokusebenza Lokufakazela ubuqiniso oluyingozi kuzilungiselelo zakho zokuphepha. Uma ushintsha iphasiwedi yakho ngaphandle kokususa ifoni yokutakula yomhlaseli noma ukhiye wokungena ongekho emthethweni, umhlaseli uzovele achofoze okuthi "Ukhohlwe Iphasiwedi" imizuzwana engu-10 kamuva futhi akukhiyele ngaphandle unaphakade.
  3. Phoqa ukunqanyulwa kwazo zonke izikhathi zokungena ezisebenzayo, amakhukhi esiphequluli aqhubekayo, Namagama Ayimfihlo Ohlelo Lokusebenza emhlabeni jikelele: Ukushintsha iphasiwedi akuhlali kubulala ngokushesha amathokheni eselula e-IMAP noma amakhukhi esikhathi sewebhu asebenzayo. Chofoza ngokucacile "Phuma kuwo wonke amadivayisi / Hoxisa zonke izikhathi" kudeshibhodi yakho yezokuphepha ye-Google, Microsoft, Yahoo, noma ye-Apple, bese ususa zonke izinhlamvu ezingu-16 Iphasiwedi Yohlelo Lokusebenza ku-akhawunti.
  4. Vula isiphequluli sewebhu sedeskithophu (hhayi uhlelo lokusebenza lwemeyili yeselula) bese ususa yonke Imithetho Yebhokisi Lemilayezo Engenayo efihliwe, Izihlungi, Izidluliseli Ezizenzakalelayo, kanye Nemithetho Yokushanela: Izinhlelo zokusebenza zemeyili yeselula (Gmail noma Outlook ku-iOS/Android) ivamise ukufihla imithetho ethuthukisiwe ye-server-side routing. Vula izilungiselelo zakho ze-webmail kusiphequluli sedeskithophu bese uhlola Izihlungi Namakheli Avinjiwe, Ukudlulisela phambili kanye ne-POP/IMAP, kanye Nemithetho / Shanela. Susa noma yimuphi umthetho odlulisela phambili imeyili ngaphandle noma ngokuzenzakalelayo uhambisa ama-imeyili aqukethe amagama afana "bank", "code", "reset", "security", "wire", "invoice", noma "crypto" kwe Trash, Archive, noma RSS Feeds ifolda.
  5. Hoxisa zonke izinhlelo zokusebenza ezixhumene ne-OAuth yenkampani yangaphandle kanye Nezithunywa zebhokisi lemeyili: Zulazulela ku-akhawunti yakho Izinhlelo Zokusebenza Zenkampani Yangaphandle Namasevisi (Google) noma Izinhlelo Zokusebenza Namasevisi onikeze ukufinyelela (Microsoft/Yahoo) futhi uhoxise lonke uhlelo lokusebenza olulodwa ngazo Mail.Read, Mail.ReadWrite, noma Gmail API izimvume, kanye nokuhlola okuthi Nikeza Ukufinyelela Ku-akhawunti Yakho (Ukuthumela) ukuze umhlaseli angakwazi ukufunda ibhokisi lakho lokungenayo esebenzisa ithokheni ye-OAuth eliziba ngokuphelele izinguquko zephasiwedi.
  6. Bheka eyakho Trash (Bin), Sent, futhi Spam amafolda ngokushesha ukuze ubone ukuthi imaphi ama-akhawunti ezezimali noma e-crypto umhlaseli osewasethe kabusha: Abahlaseli basusa izexwayiso zokuphepha ezingenayo ebhange lakho, i-Coinbase/Binance, i-Amazon, i-PayPal, noma imizuzwana ye-Steam ngemva kokuthola ikhodi yokuqinisekisa enezinhlamvu ezingu-6. Vula eyakho Trash futhi Sent amafolda njengamanje: yonke i-imeyili yokusetha kabusha iphasiwedi ehlezi kweyakho Trash i-akhawunti umhlaseli aseyephulile vele noma uzame ukuyephula.

Danger

Kungani ungabonanga ukuthi ibhange lakho, i-PayPal, noma i-crypto exchange ikuthumelele ama-imeyili ayi-10 ezixwayiso zokuphepha ngenkathi ugetshengwa? Ngoba into yokuqala ngqa umhlaseli ayenzayo ngaphakathi kwebhokisi lokungenayo le-Gmail noma le-Outlook eligqekeziwe ukwakha Umthetho Wokucindezela Okuthulile (ngokwesibonelo: Uma Umthumeli equkethe @chase.com, @coinbase.com, @paypal.com, noma Isihloko siqukethe Verification Code, Security Alert, Password, Login -> Maka njengokufundiwe FUTHI Weqa Ibhokisi Lemilayezo Engenayo bese Uhambisa Kudoti / Kungobo yomlando / Okuphakelayo kwe-RSS). Njalo hlola ithebhu yakho ethi Imithetho / Izihlungi kanye namafolda akho okuthi Udoti / Ingobo yomlando kuqala, Ibhokisi lakho lokungenayo eliyinhloko lihlolwa ngenhloso umhlaseli.

Isihlahla sesinqumo: ukuthola kabusha ukulawula nokuhlanza ukuphikelela kwangemuva

Landela lesi sihlahla sokunquma sesinyathelo ngesinyathelo noma ngabe usenakho ukufinyelela ibhokisi lakho lokungenayo noma ukhiyelwe ngaphandle ngokuphelele umhlaseli:

flowchart TD
    A["I-akhawunti ye-imeyili esolwayo noma eqinisekisiwe"] --> B{"Ungakwazi yini ukungena ku-akhawunti yakho ye-imeyili njengamanje?"}
    B -->|"Yebo: Ngisenakho ukufinyelela"| C["Shintshela Kumakhalekhukhwini Ohlanzekile (Gwema I-PC Engase Itheleleke)"]
    C --> D["1. Susa Ifoni Yokubuyisela Yomhlaseli, I-imeyili Yokubuyisela & Nokhiye Wokudlula We-MFA"]
    D --> E["2. Change Password to Unique 20+ Char Passphrase & Enable Phishing-Resistant 2FA"]
    E --> F["3. Chofoza okuthi 'Phuma Kuwo Wonke Amadivayisi' & Usule Wonke Amaphasiwedi Ohlelo Lokusebenza Lwe-16-Char"]
    F --> G["4. Vula i-Webmail yedeskithophu: Hlanza Ukudlulisa Okufihliwe, Izihlungi, Shanela Imithetho Nezithunywa"]
    G --> H["5. Hoxisa Izinhlelo zokusebenza Zenkampani Yangaphandle ye-OAuth futhi Uhlole Udoti/Amafolda Athunyelwe Ukuze Uthole Ama-akhawunti Angaphandle Aphuliwe"]
    B -->|"Cha: Umhlaseli ushintshe iphasiwedi nefoni yokutakula/i-MFA"| I{"Iluphi uhlobo lwe-akhawunti ye-imeyili ekhiyiwe?"}
    I -->|"Umsebenzi / Isikole / Isizinda Sebhizinisi (@company.com)"| J["Xhumana Nomphathi We-IT Ngokushesha: Umlawuli Angakwazi Ukusetha Kabusha i-MFA, Ahoxise Amathokheni futhi Abuyisele Ukufinyelela Ngemizuzwana engama-60 nge-Admin Console"]
    I -->|"I-Gmail yomuntu siqu / Outlook.com / Yahoo / iCloud"| K["Qalisa Ifomu Lokubuyisela I-akhawunti Ngokuzenzakalelayo Kusuka Ku-IP Yakho Yomlando Ye-Wi-Fi Yasekhaya kanye Nesiphequluli/Ifoni Ejwayelekile"]
    K --> L["Shayela Ngokushesha Amabhange Akho, Inkampani Yenethiwekhi Yeselula & Ukuhwebelana Kwe-Crypto Ngefoni Ukuze Umise Ama-Akhawunti Ahlanganiswe Kuleyo I-imeyili"]

Isigaba 1: Ukuhlolwa kokuphikelela okujulile ngomhlinzeki we-imeyili (i-Gmail, Outlook/M365, Yahoo, iCloud)

Bonke abahlinzeki be-imeyili abakhulu bagcina imithetho yokudlulisela phambili, izihlungi, amathokheni e-OAuth, nezihambeli zebhokisi lemeyili kumamenyu ahluke kancane. Ngisho noma usebenzisa i-Apple Mail noma ideskithophu ye-Outlook kukhompuyutha yakho, kumele ungene ngemvume kusixhumanisi esisemthethweni se-webmail yomhlinzeki kusiphequluli sedeskithophu (noma ucele "Isizinda Sedeskithophu" kusiphequluli sakho seselula) ukuze ubone lezi zilungiselelo eziseceleni kweseva.

Ukuphikelela Indlela I-Google Gmail / Google Workspace I-Microsoft Outlook.com / Microsoft 365 Yahoo Mail / AOL Mail I-Apple iCloud Mail
1. Ulwazi Lokubuyisela Namadivayisi e-MFA myaccount.google.com/security -> Ukuqinisekiswa okuzinyathelo ezimbili, Okhiye bokungena, Ifoni yokutakula, I-imeyili yokutakula. account.microsoft.com/security -> Phatha ukuthi ngingena kanjani ngemvume (Okomuntu siqu) noma mysignins.microsoft.com/security-info (Emsebenzini/Isikole). login.yahoo.com/myaccount/security -> Ukuqinisekisa okuyizinyathelo ezimbili, Izinombolo zocingo zokutakula, Amakheli we-imeyili wokutakula. account.apple.com -> Ngena Ngemvume Nokuphepha -> Ukuphepha Kwe-akhawunti (Izinombolo Zefoni Ethembekile Namadivayisi Athenjwayo).
2. Phoqa Ukuphuma Kuwo Wonke Amaseshini myaccount.google.com/device-activity -> Chofoza idivayisi ngayinye ongayijwayele -> Phuma. account.microsoft.com/security -> Ngikhiphe yonke indawo (kuthatha kufika ku-24h kumthengi; khona manjalo ku-Entra ID Revoke sessions). login.yahoo.com/myaccount/activity -> Umsebenzi wakamuva -> Phuma ezindaweni/iziphequluli ezingajwayelekile. Settings -> [Your Name] ku-iPhone -> Skrolela phansi ohlwini lwamadivayisi -> Thepha idivayisi ongayijwayele -> Susa ku-Akhawunti.
3. Imithetho Yebhokisi Lemilayezo Engenayo Efihliwe Nezihlungi Iwebhu ye-Gmail -> Izilungiselelo (Igiya) -> Bona zonke izilungiselelo -> Izihlungi namakheli avinjiwe ithebhu. Iwebhu ye-Outlook -> Izilungiselelo (Igiya) -> Imeyili -> Imithetho, KANYE Nemeyili -> Tshanela, KANYE I-imeyili Engafuneki (Abathumeli abavinjiwe). I-Yahoo Web -> Izilungiselelo (Igiya) -> Izilungiselelo Eziningi -> Izihlungi. icloud.com/mail -> Izilungiselelo (Igiya eliphezulu ohlwini Lwemeyili) -> Izilungiselelo -> Imithetho.
4. Ukudlulisela ngokuzenzakalelayo ne-POP/IMAP Iwebhu ye-Gmail -> Izilungiselelo -> Bona zonke izilungiselelo -> Ukudlulisela kanye nethebhu ye-POP/IMAP. Iwebhu ye-Outlook -> Izilungiselelo (Igiya) -> Imeyili -> Idlulisela (kanye ne-Ukudlulisela kanye ne-IMAP*). I-Yahoo Web -> Izilungiselelo -> Izilungiselelo Eziningi -> Amabhokisi Emeyili -> Chofoza ikheli lakho le-imeyili -> Dlulisela. icloud.com/mail -> Izilungiselelo (Igiya) -> Izilungiselelo -> Idlulisela (Forward my email to).
5. Ukudluliselwa Kwebhokisi Lemeyili Neziteketiso Iwebhu ye-Gmail -> Izilungiselelo -> Bona zonke izilungiselelo -> Ama-akhawunti Nokungenisa -> Hlola Nikeza ukufinyelela ku-akhawunti yakho & Thumela imeyili njengo. Microsoft 365 Exchange Admin Center -> Amabhokisi eposi -> Amandla (Read and manage / Send as / Send on behalf). I-Yahoo Web -> Izilungiselelo -> Izilungiselelo Ezengeziwe -> Amabhokisi Emeyili -> Ikheli le-imeyili lokuthumela kuphela & Amakheli alahlwayo. icloud.com/mail -> Izilungiselelo -> Amakheli (Hlola iziteketiso ezingagunyaziwe ze-iCloud noma ziyakhipha Phendula-To).
6. Izinhlelo zokusebenza ze-OAuth zenkampani yangaphandle kanye namaphasiwedi ohlelo lokusebenza myaccount.google.com/connections (Izinhlelo zokusebenza ze-OAuth) & myaccount.google.com/apppasswords (amaphasiwedi e-IMAP enezinhlamvu ezingu-16). account.live.com/consent/Manage (I-OAuth yomuntu siqu) noma myapps.microsoft.com (Sebenza) + Amaphasiwedi ohlelo lokusebenza ngaphansi kokuthi Ukuphepha. login.yahoo.com/myaccount/security -> Amaphasiwedi ohlelo lokusebenza & Ukuxhumana kwangaphandle. account.apple.com -> Ngena Ngemvume Nokuphepha -> Amaphasiwedi Akhethekile Wohlelo Lokusebenza -> Hoxisa Konke.

Ukuhamba Okuningiliziwe 1: Ukuhlanza I-akhawunti Ye-Google / Gmail Eyebiwe

Lapho uhlanza i-akhawunti esengozini ye-Gmail noma ye-Google Workspace, sebenzisa lawa mathebhu ayisikhombisa ngaphandle kokweqa neyodwa:

  1. Hlola Ukuphepha Nokhiye Wokungena (myaccount.google.com/security):
    • Chofoza Okhiye bokungena kanye nokhiye bokuqinisekisa ubunikazi: Abahlaseli ngokushesha babhalisa ukhiye wokungena ovumelanisiwe noma isifakazeli sobuqiniso esibonakalayo kusiphequluli sabo ukuze bakwazi ukungena ngemvume ngephasiwedi enguziro kanye nomyalo we-SMS onguziro. Susa noma yimuphi ukhiye wokudlula ongawuboni ngokuqiniseka okungamaphesenti angu-100.
    • Chofoza Ukuqinisekisa okuyizinyathelo ezimbili -> hlola Isiqinisekisi, Amadivayisi okwaziswa kwe-Google, Ifoni yokutakula, kanye Nekhodi yesipele. Chofoza okuthi Khiqiza amakhodi amasha ukuze wenze noma imaphi amakhodi ayisipele anezinhlamvu ezingu-8 angasebenzi ngokushesha umhlaseli ashuthwe isithombe-skrini.
  2. ** Bhubhisa amaphasiwedi ohlelo lokusebenza olusebenzayo (myaccount.google.com/apppasswords)**:
    • Iphasiwedi Yohlelo Lokusebenza iyikhodi yokudlula enezinhlamvu ezingu-16 evumela iklayenti lemeyili ye-IMAP (njenge-Thunderbird noma umbhalo wePython yomgebengu we-inthanethi) ukuthi lidawunilode lonke ibhokisi lakho lokungenayo unomphela ngenkathi yeqa ngokuphelele Ukuqinisekiswa Kwezinyathelo Ezimbili. Susa yonke Iphasiwedi Yohlelo Lokusebenza esohlwini.
  3. Hoxisa ukuxhunywa kwe-OAuth yenkampani yangaphandle (myaccount.google.com/connections):
    • Bheka noma yiluphi uhlelo lokusebenza olunikezwe ukufinyelela ku-Gmail*, Google Drayivu, noma I-Google Contacts (abahlaseli bavame ukusebenzisa amaklayenti e-imeyili abukeka esemthethweni njenge eM Client, Newton Mail, Cleanfox, noma imibhalo ye-OAuth yangokwezifiso). Chofoza uhlelo lokusebenza -> Susa konke ukuxhumana onakho nge-[Igama Lohlelo Lokusebenza].
  4. Hlola i-Gmail Accounts and Import Ithebhu (Ukuthunyelwa Kwemeyili & Reply-To Ukuduna):
    • Ku-Gmail kukhompuyutha yedeskithophu, chofoza okuthi Isithonjana Segiya -> Bona zonke izilungiselelo -> Ama-akhawunti Nokungenisa.
    • Ngaphansi kokuthi Nikeza ukufinyelela ku-akhawunti yakho, qinisekisa ukuthi ZERO amakheli e-imeyili asohlwini. Umsebenzisi othunyiwe angakwazi ukufunda, ukuthumela, nokususa ama-imeyili akho ngaphandle kokwazi iphasiwedi yakho.
    • Ngaphansi kokuthi Thumela imeyili njenge, chofoza okuthi hlela ulwazi eduze kwegama lakho bese uqinisekisa ukuthi umhlaseli akazange afake imfihlo Specify a different "reply-to" address (isibonelo, ukusetha Impendulo yakho Kuyo ku yourname.company@gmail.com noma isizinda esifana nesihlaseli ukuze noma nini lapho othile ephendula ama-imeyili akho asemthethweni, impendulo yakhe iye kumgebengu we-inthanethi esikhundleni sakho).
  5. Hlola i-Gmail Filters and Blocked Addresses Ithebhu:
    • Bhekisisa kuzo zonke izihlungi. Abahlaseli bavame ukudala ukufanisa izihlungi from:(a|e|i|o|u) noma size > 0 noma has:attachment noma amagama angukhiye afana invoice, wire, bank, security, alert, code ngesenzo Skip the Inbox (Archive it), Mark as read, Delete it, noma Forward it to:. Susa zonke izihlungi ezingajwayelekile.
  6. Hlola i-Gmail Forwarding and POP/IMAP Ithebhu:
    • Qinisekisa okuthi Ukudlulisela kusethelwe kokuthi Khubaza ukudlulisa, susa noma yiliphi ikheli lokudlulisela phambili elingaziwa ohlwini olwehliswayo, bese usetha ukufinyelela kwe-IMAP kokuthi Khubaza i-IMAP (ngaphandle kwalapho usebenzisa ngokuqondile iklayenti ledeskithophu evikelekile).
  7. Hlola Udoti we-Google Drayivu kanye Nomlando Wokukhipha we-Google:
    • Abahlaseli bavamise ukucupha Google Takeout (takeout.google.com) gcina kungobo yomlando ukuze ulande i-a .zip awo wonke ama-imeyili akho, Izithombe ze-Google, namadokhumenti e-Google Drayivu, okuhlanganisa ukubuyiselwa kwentela nohlu lwamaphasiwedi. Vakashela takeout.google.com njengamanje: uma ubona ukuthekelisa okusebenzayo noma okuqediwe ongakucelanga, chofoza okuthi Khansela ukuthekelisa bese ubona ukuthi yiziphi izigaba zedatha ezipakishiwe.

I-Walkthrough 2 enemininingwane: Ukuhlanza i-Akhawunti ye-Microsoft Outlook.com / Hotmail / Microsoft 365 Eyebiwe

Ama-akhawunti e-Microsoft (@outlook.com, @hotmail.com, @live.com, @msn.com, kanye namabhokisi eposi ebhizinisi e-Microsoft 365 Exchange Online) anezindawo ezimbalwa zokucasha ezihlukile abahlaseli abazisebenzisayo phakathi ne-Business Email Compromise (BEC) kanye nokugebenga kwabathengi:

  1. Okufihliwe RSS Feeds futhi Conversation History Ucupho Lwefolda:
    • Ku-Outlook, abahlaseli abavamile ukuhambisa ama-imeyili acindezelwe kakhulu Deleted Items ifolda ngoba abasebenzisi bayahlola Deleted Items. Esikhundleni salokho, bakha uMthetho we-Outlook oqanjwe ngawo . noma 1 okuhambisa ama-imeyili angenayo ku-*RSS Feeds**, Archive, noma Conversation History ifolda bese imaka njengefundiwe. Hlola wonke amafolda kubha yakho eseceleni engakwesobunxele, ikakhulukazi RSS Feeds, manje.
  2. Hlola Kokubili Rules KANYE Sweep kuwebhu ye-Outlook (outlook.live.com noma outlook.office.com):
    • Chofoza okuthi Igiya Lezilungiselelo (phezulu kwesokudla) -> Imeyili -> Imithetho. Susa noma yimuphi umthetho ongawudalanga.
    • Qaphela ibhokisi likaqhwi ngaphansi komthetho womhlaseli: Stop processing more rules. Abahlaseli maka leli bhokisi emthethweni wabo ophezulu ukuze kungabikho nowodwa wemithetho yakho esemthethweni esebenzayo.
    • Okulandelayo, chofoza okuthi Imeyili -> Shanela kanye nokuthi Imeyili -> klzzwxh:0364 -> **Abathumeli avinjiwe nezizinda. Abahlaseli bayengeza njalo kzwxh:0355, @google.com, @apple.com, @chase.com, @bankofamerica.com, futhi @coinbase.com ohlwini lwakho Abathumeli Abavinjiwe Nezizinda ukuze izexwayiso zokuphepha zigxume noma ziye buthule ku-Junk. Sula uhlu lwakho lwabaThumeli Abavinjiwe lwanoma yiziphi izinkampani ezisemthethweni.
  3. Bheka Mail -> Forwarding and IMAP:
    • Qinisekisa ukuthi okuthi Vumela ukudlulisa akuhloliwe. Uma ikheli le-imeyili lomhlaseli lihlezi ebhokisini elithi "Keep a copy of forwarded messages" uma ungahloliwe, wonke ama-imeyili athunyelwe kuwe abedluliselwa kumgebengu we-inthanethi futhi asuswe ebhokisini lakho leposi ngaphambi kokuthi ashaye iBhokisi lokungenayo lakho.
  4. Kubaphathi be-Corporate Microsoft 365: Qalisa i-PowerShell ukuze Uveze I-MAPI Efihliwe / Imithetho Yebhokisi Lemilayezo Engenayo Ekhohlakele (MFCMAPI):
    • Abalingisi be-BEC abayinkimbinkimbi basebenzisa i-Exchange Web Services (EWS) API noma MFCMAPI ukuze udale imithetho yeBhokisi lokungenayo efihliweyo (ngokukhumula i- PR_RULE_MSG_NAME futhi PR_RULE_MSG_PROVIDER Izakhiwo ze-MAPI) ezingabonakali nhlobo ku-Outlook Web GUI noma Isikhungo Sokulawula Sokushintshana esijwayelekile.
    • Umlawuli we-IT kufanele axhume ku-Exchange Online PowerShell* bese eqhuba: 
      Get-InboxRule -Mailbox victim@yourdomain.com -IncludeHidden | Format-List Name,Enabled,Description,ForwardTo,ForwardAsAttachmentTo,RedirectTo,DeleteMessage,MoveToFolder
    • Ukungeza i--IncludeHidden ifulegi lidalula imithetho ye-MAPI ecashile ecashe kuthebula Lokuqukethwe Okuhlotshaniswa Nebhokisi leposi (FAI), okungase kuhlanzwe nge Remove-InboxRule -Mailbox victim@yourdomain.com -Identity "<RuleID>" noma ngokwethula outlook.exe /cleanrules.
    • Futhi hlola Imithetho Yezokuthutha Yezinga Lokuqasha (Imithetho Yokugeleza Kwemeyili) nge Get-TransportRule: uma umhlaseli ephule i-akhawunti ye-Exchange Administrator, kungenzeka ukuthi udale isimiso somhlaba wonke sokugeleza kwemeyili kunomthetho webhokisi leposi ngalinye.

Warning

Kungani umhlaseli esangena ku-imeyili yami ngemva kokuba ngishintshe iphasiwedi yami FUTHI ngivule i-Two-Factor Authentication? Ngenxa Yekudlalwa Kwekhukhi Le Session Eyebiwe (Infostealer Malware) noma Izandiso Zesiphequluli Esinonya. Uma ulande uhlelo lokuntshontshelwa, ithuluzi le-PDF/invoyisi mbumbulu, ikhodekhi yevidiyo engelona iqiniso, noma isandiso esinonya se-Chrome ku-Windows PC noma i-Mac yakho, leyo uhlelo olungayilungele ikhompuyutha ikopisha imininingo egciniwe ye-SQLite Cookie esusiwe kusiphequluli sakho (%LocalAppData%\Google\Chrome\User Data\Default\Network\Cookies). Ngokungenisa ikhukhi lakho esipheqululini esingatholi lutho, umhlaseli udlula nje iphasiwedi yakho kanye ne-2FA. Uma usola uhlelo olungayilungele ikhompuyutha yakho, bheka umhlahlandlela wethu ku i-malware, i-ransomware, kanye nokutheleleka kwe-spyware futhi uhlanze-ukufaka kabusha i-OS yakho ngaphambi kokungena futhi ku-imeyili yakho kuleyo khompyutha.

Isigaba sesi-2: Okufanele ukwenze uma uvaleleke ngaphandle (Umhlaseli ushintshe iphasiwedi & 2FA)

Uma umhlaseli esevele eshintshile iphasiwedi yakho, washintsha inombolo yakho yefoni yokutakula wafaka eyakhe, futhi wavula uhlelo lwakhe lokusebenza Lokufakazela ubuqiniso noma ukhiye wehadiwe, umzuzu ngamunye ubalulekile ngoba umhlaseli umatasatasa uphanga ama-akhawunti akho axhunyiwe kuyilapho uvalelwe ngaphandle.

Isinyathelo 1: Nquma Inzuzo Yezezimali Yomhlaseli Kuqala (Imizuzu yokuqala eyi-15)

Ungachithi amahora amathathu ulwa nefomu lokuthola kabusha i-imeyili elizenzakalelayo kuyilapho isigebengu sikhipha i-akhawunti yakho yasebhange sisebenzisa ibhokisi lakho lokungenayo eliduniwe:

  1. Shayela Amabhange Akho, Abakhiphi Bekhadi Lesikweletu, Nezinkampani Zokutshala Imali Ngocingo:
    • Tshela Umnyango Wokukhwabanisa: "Ikheli lami le-imeyili eliyinhloko [your@email.com] lifakelwe futhi ngivalelwe ngaphandle kwalo njengamanje. Faka iphasiwedi yomlomo ngokushesha / ukumisa ukuphepha kuphrofayela yami, uhoxise izikhathi ezisebenzayo zewebhu/eselula, bese ususa lelo kheli le-imeyili ekusetheni kabusha iphasiwedi yokuzisiza."
  2. Khiya I-akhawunti Yenkampani Yenethiwekhi Yefoni Yakho Umakhalekhukhwini Ngokuphikisana Nokushintshwa Kwe-SIM Okulandelayo:
    • Ngaphakathi kwebhokisi lakho lokungenayo eligqekeziwe, umhlaseli angafunda izikweletu zakho zanyanga zonke ze-AT&T, Verizon, T-Mobile, Rogers, Vodafone, noma O2, amnike inombolo ye-akhawunti yakho yeselula nekheli lokukhokha. Shayela inkampani yakho yenethiwekhi ngokushesha ukuze uqinisekise Iphinikhodi Yokudluliswa Kwenombolo / Ukumisa Imbobo kanye Nekhodi Yokudlula Ye-akhawunti kukhiyiwe.
  3. ** Misa ama-Akhawunti Wakho Wokushintshaniswa Kwe-Cryptocurrency (Coinbase, Binance, Kraken, Gemini)**:
    • Ukuhwebelana okukhulu okuningi kunikeza ngokuchofoza okukodwa noma ifoni ephuthumayo Khiya i-Akhawunti uma i-imeyili yakho isengozini (isibonelo, ukushayela i-Coinbase ngokuzenzakalelayo ilokhi yezimo eziphuthumayo ku- +1 (888) 908-7930 e-US/International noma +44 808 168 4635 e-UK).
  4. Shintsha Ikheli Le-imeyili Elibhalisiwe Kuwo Wonke Ama-akhawunti Osengangena Kuwo:
    • Kungenzeka ukuthi usangenile ku-Amazon, PayPal, Venmo, Steam, Discord, Apple ID, kanye nomphathi wakho wephasiwedi kuhlelo lwakho lokusebenza lwe-smartphone njengamanje. Dala i-akhawunti ye-imeyili yezimo eziphuthumayo entsha sha, ehlanzekile (ngokwesibonelo, ku-ProtonMail noma i-Gmail entsha evikelwe ngokhiye wezingxenyekazi zekhompyutha) futhi ngokushesha ungene kuzilungiselelo zohlelo lokusebenza lwezinhlelo zakho zokusebenza osangene kuzo ukuze ushintshe i-imeyili yazo yokuxhumana isuke ekhelini eligqekeziwe ngaphambi kokuthi umhlaseli awasethe kabusha.

Isinyathelo sesi-2: Ungawadlula Kanjani Ama-Algorithms Okubuyisela I-akhawunti Ezenzakalelayo (Google, Microsoft, Yahoo)

Okwama-akhawunti e-imeyili omthengi wamahhala (@gmail.com, @outlook.com, @hotmail.com, @yahoo.com), ama-agent asekela abantu avinjelwa ngokuqinile izilawuli zobunjiniyela kusukela ekusetheni kabusha amaphasiwedi mathupha noma ukweqa i-2FA ngocingo (ukuvimbela ubunjiniyela bomphakathi). Esikhundleni salokho, ukutakula kubuswa i-Risk & Identity Scoring Engine ezenzakalelayo. Ukuze ukwandise isikolo sakho se-cryptographic trust bese ucupha okufihliwe "Izinsuku Eziyisi-7 / Izinsuku ezingu-30 Zokubamba Ukukhipha Ukuphepha":

  1. UMTHETHO OBALULEKILE: Thumela Ifomu Lokubuyisela Elivela Kudivayisi Yakho Yangempela Yomlando, Isiphequluli, kanye Nekheli Lasekhaya Le-Wi-Fi Yasekhaya:
    • Ungalokothi ugijime accounts.google.com/signin/recovery noma account.live.com/acsr kusuka ewindini elisha lesiphequluli se-incognito kudatha yeselula noma nge-VPN.
    • Sebenzisa ikhompuyutha ephathekayo eqondile, ideskithophu, noma i-smartphone kanye nesiphequluli esinembile (namakhukhi angaphelele/isitoreji sasendaweni) lapho ungene khona ngemvume kuleyo akhawunti ye-imeyili nsuku zonke onyakeni odlule, kuyilapho uxhumeke kumzila wakho we-Wi-Fi wekhaya noma wehhovisi* (ASN kanye nokulinganisa kwe-geolocation). I-algorithm yokutakula ikala kakhulu amathokheni ezigxivizo zeminwe zedivayisi (DeviceID) kanye nama-subnets omlando we-IP.
  2. I-Google / Gmail Recovery (accounts.google.com/signin/recovery):
    • Ngisho noma umhlaseli eguqule ifoni yakho yokutakula kanye ne-imeyili yokutakula emizuzwaneni edlule, I-Google igcina inombolo yakho yefoni yokutakula ENGAPHAMBILI kanye nekheli le-imeyili yokutakula ABANGAPHAMBILI njengezici ezivumelekile zokutakula izinsuku eziyi-7 zekhalenda (amahora angu-168) ngemva kokuba umhlaseli ezilungise.
    • Lapho utshelwa ngesikhathi signin/recovery, chofoza "Zama enye indlela" ize ikunike ukuthumela ikhodi enombolweni yocingo noma ekhelini le-imeyili yokutakula yangempela, noma ikwazisa ifoni/iPhone yakho ye-Android ebhaliswe ngaphambilini nge-Ukwaziswa kwe-Google.
    • Uma Ubhalisela I-Google One (Isitoreji Samafu Esikhokhelwayo) noma i-YouTube Premium / Isiteshi se-YouTube:
      • Ababhalisile be-Google One abakhokhelwayo banokufinyelela komuntu ophilayo Usekelo Lwe-Google One (one.google.com/support) ongakhuphula ama-akhawunti akhiyiwe ngaphakathi.
      • Uma i-akhawunti yakho yakwa-Google entshontshiwe ingumnikazi Isiteshi se-YouTube, xhumana @TeamYouTube ku-X (owayekade engu-Twitter) esidlangalaleni ngaso leso sikhathi. Ngokungafani ne-Gmail ejwayelekile, @TeamYouTube Ukwesekwa kwabadali kunikeza Ifomu Lokukhushulwa Kwe-akhawunti Entshontshiwe elizinikele elivivinywa onjiniyela abangabantu be-Google abangabantu abaqinisekisa ukuthi owakho kwangempela Channel ID (UC..), I-ID ye-AdSense, futhi ulayishe umlando we-IP ukuze ukhumule umhlaseli okhiye bokudlula/i-MFA futhi ubuyisele yonke i-akhawunti yakho ye-Google/Gmail phakathi kwamahora angu-24 kuya kwangu-72.
  3. I-Microsoft Outlook / Hotmail / Xbox Account Recovery (account.live.com/acsr):
    • Okokuqala, zama ukungena bese uchofoza "Anginakho okunye kwalokhu" esikrinini se-2FA: uma une- ikhodi Yokubuyisela ye-Microsoft enezinhlamvu ezingu-25 elondolozwe lapho umisa i-akhawunti yakho ekuqaleni, ukuyifaka kukuvumela ukuthi ungene esikhundleni solwazi lokuphepha lomhlaseli (ngokuya ngesibopho se-Microsoft **izinsuku ezingu-30 uma ungakwazi futhi ukuvimba ulwazi lokuphepha ngesikhathi sokulinda ohlaseli).
    • Lapho ugcwalisa Ifomu Le-akhawunti Ye-Microsoft Lokubuyisela (account.live.com/acsr) kusuka ku-IP yakho yasekhaya ye-Wi-Fi:
      • Nikeza imigqa Yesihloko okuyiyonayona yama-imeyili akamuva angu-3 ukuya kwangu-4 owathumele (cela abangani noma umndeni ukuthi uzibheke ebhokisini lemiyalezo engenayo futhi bakufundele imigqa yesihloko ngqo yesihloko sama-imeyili osanda kuwathumelela wona kamuva).
      • Nikeza amakheli e-imeyili anembile oxhumana nabo osanda kubathumelela i-imeyili.
      • Nikeza I-Xbox Console Hardware yakho LiveDeviceID / Inombolo Ye-serial uma uke wangena ku-Xbox ngaleyo akhawunti ye-Microsoft, kanye namadijithi angu-4 okugcina nosuku lokuphelelwa yisikhathi kwanoma yiliphi ikhadi lesikweletu elake lasetshenziswa ku-Microsoft Store / Skype / Office 365.

Tip

Uma usuphinde wathola ukufinyelela ku-akhawunti ye-imeyili entshontshiwe, hlola eyakho Sent ifolda neyakho Trash ifolda yokuqola noma ama-imeyili omkhonyovu athunyelwe umhlaseli koxhumana nabo. Abahlaseli bavame ukuskena ibhokisi lakho lokungenayo ukuze bathole izithombe ezibucayi, amadokhumenti entela, noma ama-invoyisi ebhizinisi, futhi bathumele ama-imeyili "amakhadi esipho esiphuthumayo / ukudluliselwa kwezintambo" mbumbulu kubangani bakho, abazali asebekhulile, noma amaklayenti. Thumela i-imeyili ecacile yesexwayiso (nomlayezo wombhalo) kunoma ubani umhlaseli amthumelele umlayezo phakathi newindi lokwephulwa komthetho.

Isigaba sesi-3: Ukulawulwa kokulimala kwezimfihlo ezivezwe ngaphakathi kwama-imeyili akho amadala

Uma usukhiyele umhlaseli ngaphandle futhi wahlanza yonke imithetho namathokheni e-OAuth, kufanele ubhekane neqiniso elimangalisayo le-forensic: uma umhlaseli abe ne-IMAP, OAuth, noma ukufinyelela kwewebhu ebhokisini lakho leposi ngisho nemizuzu engu-15, cabanga ukuthi usebenzise ukusesha kwegama elingukhiye elizenzakalelayo kuyo yonke ingobo yakho yomlando ye-imeyili.

Abahlaseli abawafundi ngesandla ama-imeyili akho amadala angu-50,000. Imibhalo yabo ezenzakalelayo isesha ngokushesha ibhokisi lakho lokungenayo ukuze uthole lawa magama angukhiye enani eliphezulu ayishumi futhi ulande yonke imilayezo efanayo nokunamathiselwe kwe-PDF:

  1. "seed", "mnemonic", "recovery phrase", "24 words", "wallet", "Coinbase", "Binance", "Ledger": If you ever emailed yourself a photo, text note, or encrypted zip of a cryptocurrency seed phrase or 2FA backup code, consider that wallet compromised immediately and move all funds to a brand-new hardware wallet.
  2. "tax", "1040", "W-2", "1099", "SSN", "Social Security", "passport", "driver license", "mortgage", "closing": Loan applications, apartment leases, and CPA emails inside your inbox almost certainly contain PDFs with your unredacted Social Security Number (or national ID), date of birth, and driver's license photo. Place an immediate Credit Freeze with Equifax, Experian, and TransUnion (see our guide on identity theft response).
  3. "password", "login", "credentials", "welcome to", "backup codes": Search your own inbox right now for the words password futhi backup code, delete those dangerous plaintext emails after rotating every single password mentioned in them.
  4. "invoice", "ACH", "wire", "routing", "escrow", "closing costs", "docusign": If you are in the middle of buying a house, paying a contractor, or running a business, the attacker now has copies of your real invoices and banking routing details and will attempt to impersonate you or your title company to steal the wire transfer. Call your real estate title company, escrow officer, or clients on the telephone immediately to warn them.

Imibuzo evame ukubuzwa

I changed my email password and turned on 2FA, yet the hacker is STILL sending emails from my account. How is that possible?

There are four technical mechanisms that survive a password change and 2FA setup: **1. Active Third-Party OAuth Tokens**: The hacker connected an OAuth application (like `eM Client`, `Thunderbird`, or a malicious script) to your account; OAuth tokens authenticate via API refresh tokens and never check your password again until you explicitly revoke the app at `myaccount.google.com/connections` or `account.live.com/consent/Manage`. **2. 16-Character App Passwords**: The hacker generated an IMAP/SMTP App Password in your security settings, which bypasses 2FA completely. **3. Mailbox Delegation**: In Gmail (`Settings -> Accounts and Import -> Grant access to your account`) or Microsoft 365 Exchange Delegation, the hacker added their own account as a delegate. **4. Infostealer Malware on Your PC**: Your computer has a trojan stealing the live session cookie from your web browser every time you log in with your new password.

Why am I suddenly receiving 500 to 5,000 random newsletter sign-up emails per hour ("Email Bombing")?

If your inbox suddenly explodes with thousands of automated *"Confirm your newsletter subscription"* emails in every language from random websites around the world, **you are under an active "Subscription Bomb" (Email Bombing) attack.** Do NOT bulk-delete your entire inbox without looking closely. Attackers launch a Subscription Bomb to bury **one specific, critical email** that arrived right at the start of the flood, such as an **Apple Store / Best Buy $3,000 laptop order confirmation**, a **Bank Wire Transfer alert**, a **Zelle / PayPal transfer receipt**, or a **Mobile Carrier SIM Swap notification**. Use your email search bar immediately to filter for: `subject:(order OR receipt OR wire OR transfer OR password OR security OR alert OR SIM)` or check your bank, credit card, Amazon, Walmart, and mobile carrier accounts right now to find the single fraudulent transaction they are trying to hide in the noise.

Can an attacker hack my email just by me opening and reading an email without clicking any links or downloading attachments?

In modern webmail (Gmail, Outlook Web, Yahoo, Apple Mail on updated iOS/macOS), simply opening and reading a plain text or HTML email does **not** hand over your password or infect your device, provided your operating system and browser are up to date. The only thing opening an email can reveal to a sender is a **Tracking Pixel** (an invisible 1x1 pixel external image that tells a spammer your email address is active and reveals the rough IP address of the mail proxy, though Apple Mail Privacy Protection and Gmail image proxies now mask even your real IP). Almost 100 percent of email takeovers come from **1. Credential Reuse** (reusing a password leaked in another website's data breach), **2. Adversary-in-the-Middle (AitM) Phishing Links** (clicking a fake login link), or **3. Infostealer Malware** executed on a PC.

Why did I get an email from MY OWN email address saying a hacker recorded me through my webcam (`Pegasus` / Trojan extortion email)?

If you received an email that appears to be sent **`From: your_own_email@domain.com` `To: your_own_email@domain.com`** claiming a hacker installed "Pegasus spyware" or recorded you via your webcam while browsing adult websites and demanding $500 to $2,000 in Bitcoin, **your email and computer were NOT hacked.** This is a mass-automated **SMTP Header Spoofing scam**. Basic email protocols allow any spam server to type your address into the visual `From:` display header (just like writing a fake return address on a paper envelope). If you check your **`Sent`** folder, you will see that email is not in your `Sent` folder, and if you click **"Show Original" / "View Message Source"**, you will see `SPF: FAIL` or `DMARC: FAIL` from a foreign server IP. Delete the email and never pay.

What is the safest type of Two-Factor Authentication (2FA) to put on my email so it can never be phished or SIM-swapped?

Move away from **SMS Text Message 2FA** (which can be stolen via a SIM swap) and even standard 6-digit TOTP Authenticator codes (which can be intercepted in real time if you accidentally type them into an Adversary-in-the-Middle `Evilginx` phishing page). Instead, enable **FIDO2 / WebAuthn Passkeys or Physical Hardware Security Keys (such as a YubiKey 5 Series or Google Titan Key)**. Because FIDO2 cryptographic signatures are mathematically bound to the genuine browser domain (`google.com` or `login.live.com`), a FIDO2 hardware key or passkey makes it cryptographically impossible for an attacker to phish your login, even if you click a sophisticated fake login link. Enroll at least **two** hardware keys (one primary on your keychain, one backup in a fireproof safe) and enable **Google Advanced Protection Program (`landing.google.com/advancedprotection`)** if you are a high-risk target.

Should I permanently abandon my old email address after a hack and create a brand-new one?

If you thoroughly purge all 6 persistence points (Recovery info, Active sessions, App Passwords, OAuth grants, Filters/Forwarding rules, and Delegation) and lock the account with a strong unique password and FIDO2 MFA, **the technical security of the account is 100 percent restored.** However, you should still ** keep the old email account open and locked down forever** rather than deleting it. If you delete an old `@outlook.com`, `@yahoo.com`, or custom domain email address, an attacker may eventually re-register that recycled username and use it to reset forgotten accounts tied to it. Many security professionals keep their old address locked with a hardware key as a decoy/legacy inbox while migrating their **banking, brokerage, tax, and cryptocurrency logins** to a brand-new, private, unpublicized email address (`myname-vault@proton.me` or a dedicated Gmail) that is never given out on shopping sites, newsletters, or social media.

Imithombo ihloliwe

  • Cybersecurity and Infrastructure Security Agency (CISA, United States): Protecting Against Business Email Compromise (BEC), OAuth Application Abuse, and Phishing-Resistant MFA Guidance (cisa.gov/MFA futhi cisa.gov).
  • Microsoft Security Response Center & Defender Threat Intelligence (United States): Responding to a Compromised Email Account in Microsoft Defender for Office 365 (Hidden Inbox Rules -IncludeHidden, OAuth Consent Grants, and Session Revocation) (learn.microsoft.com/en-us/defender-office-365/responding-to-a-compromised-email-account).
  • Google Account Security & Workspace Admin Help (United States): Secure a Hacked or Compromised Google Account, OAuth Third-Party Connections, and Advanced Protection Program (support.google.com/accounts/answer/6294825).
  • National Cyber Security Centre (NCSC, United Kingdom): Recovering a Compromised Email Account and Mitigating Email Forwarding Rule Persistence (ncsc.gov.uk).
  • Federal Trade Commission (FTC, United States): What To Do if Your Email Account Is Hacked (consumer.ftc.gov).
  • Isikhungo Sezokuphepha Se-Cyber ​​Sase-Australia (ACSC / ASD, Australia): Ukuvikela Ama-akhawunti E-imeyili Nokuthola Imithetho Yebhokisi Lemilayezo Engenayo Engagunyaziwe (cyber.gov.au).

Iziqondiso ezihlobene