I-QR Code Phishing (Quishing), Izitika Zemitha Yokupaka Okungelona iqiniso, nama-URL anobungozi¶

Ukuskena ikhodi ye-Quick Response (QR) ngekhamera ye-smartphone yakho sekuphenduke umkhuba ozenzakalelayo wansuku zonke wokukhokha amamitha okupaka kamasipala, ukuqalisa iziteshi zokushaja imoto kagesi (EV), ukubuka amamenyu wezindawo zokudlela, ukulandelela ukulethwa kwamaphasela, kanye nokuqedela ukuqinisekiswa kwezinto eziningi zebhizinisi (MFA). Abalingisi abasabisayo baxhaphaza lokhu kuthenjwa okusobala ngokuthi Quishing (QR Code Phishing): ukunamathisela amadeli e-QR mbumbulu e-vinyl ngokuqondile phezu kwezitikha ezisemthethweni ezitodlwaneni zokupaka zomphakathi, ukuthumela amakhadi okuposa "aphuthiwe" mbumbulu, noma ukushumeka izithombe ze-QR ezakhiwe ngamandla ngaphakathi kwama-PDF ezinkampani ukuze uvikele i-imeyili yesango lokungena.

Ngenxa yokuthi ikhodi ye-QR imane iyiyunithi yedatha ebhalwe ngekhodi, ekwazi ukubamba izinhlamvu ze-alphanumeric ezingafika ku-4,296, iso lakho alikwazi ukuhlola i-URL yendawo ngaphambi kokukhomba ikhamera yakho ku-matrix. Okubi nakakhulu, ukuskena ikhodi ye-QR kushintsha ukuhlaselwa kusuke kukhompuyutha ephathekayo yenkampani eqashwe kakhulu kuye ku-smartphone yakho yomuntu siqu, lapho amakheli esiphequluli seselula anciphisa izizinda ezingaphansi ezinde futhi abameleli abahlehlayo be-Adversary-in-the-Middle (AiTM) bangathwebula ikhadi lakho lesikweletu, ithokheni yokuhlinzeka ye-Apple Pay / Google Pay, noma ikhukhi leseshini ye-Microsoft 365 ngemizuzwana. Lo mhlahlandlela uchaza ngezinyathelo ezisheshayo zokuthi uzithathe emizuzwini embalwa yokuskena ikhodi ye-QR enonya, kuye ngokuthi kwenzekeni esikrinini sakho.

Yenza lokhu manje¶

1. Nquma ngokushesha ukuthi wenzeni NGEMVA kokuskena ikhodi ye-QR. Ukuvula kalula ikhasi lewebhu elijwayelekile ku-Apple Safari noma i-Google Chrome kufoni yakamuva ye-iPhone noma ye-Android akuvamisile ukuzifakela i-malware eqhubekayo. Nokho, uma uthayiphe inombolo yekhadi lesikweletu, ufake i-imeyili/Microsoft 365/iphasiwedi ye-Google kanye nekhodi ye-2FA, uskene ikhodi ye-QR ngaphakathi kohlelo lokusebenza olungene ngemvume (njenge-Discord, WhatsApp, noma i-Microsoft Authenticator), noma ifake i- .apk uhlelo lokusebenza noma .mobileconfig iphrofayili, kufanele wenze okoqukatha okuhlosiwe khona manje.
2. Uma uthayiphe ikhadi lakho lesikweletu noma ikhadi ledebhithi imitha yokupaka mbumbulu, umgwaqo okhokhelwayo, noma iwebhusayithi yeshaja ye-EV, shayela inombolo engemuva ekhadini lakho ngokushesha ukuze ukhansele ikhadi FUTHI ucele umenzeli ukuthi "Ahoxise wonke amathokheni enethiwekhi ye-Digital Wallet VTS/MDES." Amakhasi omgunyathi okupaka nezindleko zephasela awakukhokhisi nje amadola angu-3; basebenzisa umbhalo ongemuva obhalisa ikhadi lakho ku-Apple Pay, i-Google Pay, noma isikhwama se-smartphone ye-Samsung Pay* kusetshenziswa iphasikhodi ye-SMS yesikhathi esisodwa oyibhale ekhasini lokuphuma. Uma ucela kuphela ibhange lakho ukuthi likunikeze elinye ikhadi lepulasitiki ngaphandle kokuhoxisa i-Visa Token Service (VTS)* noma Mastercard Digital Enablement Service (MDES) amathokheni ewalethi edijithali, isikhwama socingo somhlaseli sizothola ngokuzenzakalelayo inombolo yekhadi lakho elisha futhi siqhubeke nokushaja i-akhawunti yakho.
3. Uma ungene ngemvume ku-Microsoft 365, i-Google Workspace, noma ikhasi lokungena ebhange ngemva kokuskena ikhodi ye-QR, sebenzisa ikhompuyutha ehlanzekile ukuze ushintshe iphasiwedi yakho FUTHI uchofoze okuthi "Phuma kuzo zonke izikhathi / Hoxisa amathokheni e-OAuth" ngokushesha. Umzila wama-imeyili enkampani udlula Evilginx / Modlishka Adversary-in-the-Middle (i-AiTM) ihlehlisa lelo khasi leseshini lapho ikhukhi liyithumela usebenzisa uhlelo lokusebenza lokufakazela ubuqiniso. Landela wethu I-MFA ubugebengu bokweba imininingwane ebucayi kanye ne-Adversary-in-the-Middle bypass liqondise futhi wazise inkampani yakho IT Security / SOC ithimba phakathi nemizuzu emihlanu.
4. Uma uskene ikhodi ye-QR usebenzisa isithwebuli sekhamera esakhelwe ngaphakathi NGAPHAKATHI kwe-WhatsApp, i-Discord, iTelegram, i-Steam, noma i-WeChat, vula imenyu yalolo hlelo lokusebenza "Yamadivayisi Axhunyiwe" futhi uphume ngokushesha zonke izikhathi ezingaziwa. Ukuskena ikhodi yomhlaseli "Login" yomhlaseli ngaphakathi kweseshini eqinisekisiwe yokulayeza noma yegeyimu *Ngakho uhlelo lokusebenza lwe-Web lunikeza i-akhawunti yakho ukuthi ihlasele idinga iphasiwedi yakho noma ikhodi ye-2FA.
5. Uma ikhodi ye-QR ikutshela ukuthi ulande i-Android .apk ifayela noma faka i-iOS Configuration Profile (.mobileconfig), faka ifoni yakho Kumodi Yendiza bese ukhipha iphrofayela noma uhlelo lokusebenza ngokushesha. Hlola Izilungiselelo > Okuvamile > I-VPN Nokuphathwa Kwedivayisi ku-iOS noma Izilungiselelo > Ukuphepha > Izilungiselelo zokuphepha ezengeziwe > Izinhlelo zokusebenza zokulawula idivayisi ku-Android, futhi uqalise ukuhlola okuphelele kwedivayisi usebenzisa i-stalkerware, i-spyware, nokutholwa kwe-keylogger kumafoni umhlahlandlela.
6. Uma uthole isitikha se-QR esingumgunyathi esingokoqobo kumitha yokupaka kamasipala, i-kiosk, noma ishaja ye-EV, ungabhekani nanoma ubani ozulazula eduze. Hambisa endaweni ephephile, yazisa umqhubi wendawo yokupaka noma inombolo yomthetho wedolobha ephrintwe emzimbeni wensimbi opendiwe wesitolo, futhi uma ubhekana nanoma yikuphi ukwesatshiswa, shayela inombolo yakho ye-91 kanye ne-1 yase-European Union 999 e-United Kingdom, noma uhlole yethu izinombolo eziphuthumayo umkhombandlela).

Isihlahla sesinqumo se-QR code enobungozi (Quishing)¶

flowchart TD
    Root["Usanda Kuskena Ikhodi Ye-QR Esolisayo noma Enonya"] --> ActionTaken{"Kwenzekeni Ngemva Kokuskena Ikhodi Ye-QR?"}

    ActionTaken -->|"1. Ikhasi lewebhu elivuliwe kuphela: Ithebhu evaliwe ngaphandle kokuthayipha noma yini noma ukulanda"| SafeClean["Ingozi Ephansi: Vala ithebhu yesiphequluli -> Sula idatha yesayithi/amakhukhi aleso sizinda -> Hlola ifolda yokulandiwe -> Qinisekisa ukuthi i-iOS/Android OS isesikhathini"]

    ActionTaken -->|"2. Ufake Ikhadi Lesikweletu/Ledebhithi Kumitha Yokupaka Okungelona iqiniso, Ishaja ye-EV, noma Ikhasi Lephasela"| CardComp["1. Shayela Umnyango Wokukhwabanisa Wasebhange ngokushesha ukuze ukhiye uphinde ushintshe ikhadi<br/>2. OKUBALULEKILE: Funa ukuhoxiswa kwawo wonke amathokheni e-Apple Pay/Google Pay Digital Wallet (VTS/MDES)<br/>3. Bheka ukuthi imoto yakho ayikhokhile ngempela yini kumitha ukuze ugweme ukudonswa"]

    ActionTaken -->|"3. Ufake Iphasiwedi Yomsebenzi/I-imeyili + 2FA Ikhodi (Microsoft 365, Google, Okta)"| CredComp["1. Thatha i-AiTM Session Cookie Theft (Evilginx)<br/>2. Ku-PC ehlanzekile, shintsha iphasiwedi bese uchofoza okuthi 'Phuma Kuwo Wonke Amaseshini'<br/>3. Susa amadivayisi e-MFA aqinile nemithetho yokudlulisela ibhokisi lemilayezo engenayo<br/>4. Yazisa Corporate IT SOC ngokushesha"]

    ActionTaken -->|"4. Ikhodi ye-QR eskeniwe kusetshenziswa iskena sangaphakathi nohlelo (i-WhatsApp, i-Discord, iTelegram, iSteam)"| SocketHijack["Vula Izilungiselelo Zohlelo Lokusebenza -> 'Amadivayisi Axhunyiwe' / 'Amadivayisi Agunyaziwe' -> Susa Ngokushesha Zonke Izikhathi Zewebhu/Desktop Engaziwa"]

    ActionTaken -->|"5. Ufake Uhlelo Lokusebenza (.apk), Iphrofayela Yokucushwa kwe-iOS, noma Uchofoze okuthi 'Vumela' kokuthi Ukwaziswa"| MalwareCheck["1. VULA Imodi Yendiza ngokushesha<br/>2. I-iOS: Izilungiselelo > Okuvamile > I-VPN Nokuphathwa Kwedivayisi -> Susa iphrofayela engaziwa<br/>3. I-Android: Khipha i-APK ekhohlakele futhi uhoxise Ukufinyeleleka/izimvume zokuphatha"]

Ukuqonda ama-vectors okuhlasela obuchwepheshe angu-5 ahlukene ngemuva kwamakhodi e-QR¶

Ikhodi ye-QR (ISO/IEC 18004 ejwayelekile) ayivuli kuphela https:// amawebhusayithi. Ngokuya ngohlelo lwe-URI olufakwe ikhodi ngaphakathi kwamamojula amnyama namhlophe, ukuskena ikhodi kungabangela izenzo ezinhlanu ezihluke ngokuphelele ku-smartphone yakho:

Isimo A: Uskene isitikha se-QR esingumgunyathi imitha yokupaka, ishaja ye-EV, noma isaziso se-toll futhi wafaka imininingwane yokukhokha.¶

Ukuphazamisa kwe-QR ebonakalayo kudlulele emadolobheni aseNyakatho Melika, eYurophu, e-United Kingdom nase-Australia. Ngenxa yokuthi izisulu zivame ukuma endleleni ephithizelayo zijahile, azivamile ukubona ukuthi isitikha se-vinyl esicwebezelayo sinamathiselwe phezu kobuso bemitha yensimbi ependiwe.

Isinyathelo ngesinyathelo ukugcinwa kwezimali kanye nemoto¶

1. Khiya ikhadi elonakele futhi ukhiphe Amathokheni Okunikezwayo Kwe-Digital Wallet (VTS / MDES):
2. Vula uhlelo lwakho lokusebenza lweselula lokubhanga ngokushesha futhi uguqule okuthi Khiya / Limise Ikhadi ukuze KUVULIWE.
3. Shayela inombolo yokukhwabanisa engemuva ekhadini lakho bese ucela I-Digital Wallet / Tokenization Fraud Desk.
4. Kungani ukushintshwa kwekhadi elijwayelekile kwehluleka: Uma ufake ikhodi ye-SMS enezinhlamvu ezingu-6 noma ikhodi ye-imeyili ekhasini lomgunyathi lokupaka ngemva kokuthayipha inombolo yekhadi lakho, ugunyaze umhlaseli ungahlosile ukuthi axhumanise ikhadi lakho ne-akhawunti yakhe ye-Apple Pay, Google Pay, Garmin Pay, noma ye-Fitbit Pay*. Cela omele ibhange ukuthi:
   1. Buka konke I-Active Digital Wallet / Amathokheni Wedivayisi axhunywe Nenombolo Ye-akhawunti yakho Eyinhloko (i-PAN).
   2. Susa/Susa wonke amathokheni e-Apple Pay angaziwa, i-Google Pay, namathokheni omthengisi.
   3. Phuma kokuthi Isibuyekezi Se-akhawunti Ye-Visa (VAU) / Isibuyekezi Sokukhokha Esizenzakalelayo Se-Mastercard (ABU) salokhu kukhishwa kabusha ukuze inombolo yekhadi elisha ingadluliselwa ngokuzenzakalelayo kubakhwabanisi abaphindelelayo.
5. Khokha isikhathi sakho sokupaka ngokusemthethweni khona manje ukuze imoto yakho ayinathikithi, ibhuthini, noma idonswe:
6. Khumbula: Ngenxa yokuthi isitikha se-QR ngesesigebengu hhayi isiphathimandla sokupaka sedolobha, inombolo yakho yelayisense okwamanje ipakwe ingakhokhelwanga.
7. Ungalokothi uskene noma yisiphi isitikha emshinini. Kunalokho, hamba uye kumitha bese ukhokha ngohlamvu lwemali olungokoqobo/okungaxhunywanga ngokuthepha ngokuqondile kutheminali yezingxenyekazi zekhompiyutha, noma uye ku-Apple App Store esemthethweni / Google Play Store, landa uhlelo lokusebenza lukamasipala oluqinisekisiwe (njenge-ParkMobile, PayByPhone, RingGo, EasyPark, noma PayStay4-, noma PayStay4-digit - upende idijithi ye-Zone, bese ubhala inombolo
8. Thatha isithombe sesitika esingumgunyathi ngaphambi kokusibika:
9. Thatha isithombe esicacile semitha yokupaka noma ishaja ye-EV ebonisa kokubili isitikha se-QR esingumgunyathi (bheka imiphetho enamathelayo ephakanyisiwe, osayizi befonti abangafani, noma isitikha esimboza ingxenye yelogo esemthethweni) kanye nenombolo ye-serial/pole yesigxobo.
10. Shayela iziphathimandla zokupaka zikamasipala noma inethiwekhi yokushaja ye-EV (i-ChargePoint, i-Electrify America, i-EVgo, i-Ionity, i-Shell Recharge) inombolo yocingo yesevisi yekhasimende ephrintwe ku-kiosk ukuze abasebenzi abalungisayo bakwazi ukusula izitikha ezimbondelene kuwo wonke umgwaqo.

Isimo B: Uskene ikhodi ye-QR ku-imeyili yomsebenzi noma i-PDF futhi ufake ukungena kwakho kwe-Microsoft 365, Google, noma i-Okta¶

Ku-cybersecurity yezinkampani, ubugebengu bokweba imininingwane ebucayi bekhodi ye-QR buyindlela engu-#1 yokulethwa kwe- Adversary-in-the-Middle (AiTM) iseshini yokudunwa. Ngenxa yokuthi iningi labasebenzi lifunda ama-imeyili omsebenzi kumonitha yedeskithophu yabo bese lithatha i-smartphone yomuntu siqu ukuze iskene ikhodi ye-QR esikrinini, ukungena ngemvume kwenzeka ngoxhumo lomsebenzi weselula lwe-5G, kudlule ngokuphelele i-ejenti ye-Endpoint Detection and Response (EDR) yekhompuyutha ephathekayo yenkampani, i-firewall, kanye nesandiso sobugebengu bokweba imininingwane ebucayi besiphequluli.

Iphrothokholi esheshayo yokuqukatha i-akhawunti yemizuzu engu-15¶

1. Ungacabangi ukuthi Uhlelo lwakho Lokufakazela ubuqiniso likuvikele:
2. Amakhasi wesimanjemanje asebenzisa i-Evilginx, Modlishka, noma i-Muraena* ama-proxies ahlanekezelwe. Uma uthayipha i-imeyili yakho yebhizinisi, iphasiwedi, kanye nekhodi Yokuqinisekisa enezinhlamvu ezingu-6 (noma ugunyaza Ukuphusha Kokuqinisekisa / ukufanisa inombolo) ekhasini leselula elingumgunyathi, iseva yomhlaseli idlulisela izifakazelo zakho ku- login.microsoftonline.com ngesikhathi sangempela futhi ithwebula umphumela ESTSAUTH / ESTSAUTHPERSISTENT ikhukhi yeseshini.
3. Kukhompyutha ehlanzekile, zungezisa iphasiwedi yakho FUTHI uhoxise wonke amathokheni esikhathi asebenzayo:
4. I-Microsoft 365 / I-ID Yokungenela: Iya kokuthi https://mysignins.microsoft.com/security-info. Okokuqala, chofoza okuthi Phuma kuyo yonke indawo (ukuze wenze ikhukhi leseshini lingasebenzi). Okwesibili, shintsha iphasiwedi yakho. Okwesithathu, bhekisisa uhlu lwezindlela zokungena ngemvume kulelo khasi ngqo, abahlaseli basebenzisa imibhalo ezenzakalelayo ebhalisa inkohlakalo yabo I-Authenticator App noma ukhiye we-FIDO2 ku-akhawunti yakho phakathi nemizuzwana engu-8 yokweba ikhukhi lakho. Susa noma iyiphi idivayisi Yokufakazela ubuqiniso ongayazi.
5. I-Google Workspace / Gmail: Iya kokuthi https://myaccount.google.com/device-activity, chofoza iseshini engaziwa yeselula/Linux -> Phuma, shintsha iphasiwedi yakho, futhi uqinisekise Amadivayisi okuqinisekisa okuyizinyathelo ezimbili.
6. Hlola ibhokisi lakho lokungenayo le-imeyili ukuze uthole ukuphikelela kokuthi "Umthetho / Ukudlulisa":
7. Abahlaseli abantshontsha ibhokisi leposi lebhizinisi ngekhodi ye-QR ngokushesha bakha umthetho ofihliwe othi Umthetho Webhokisi lokungenayo kuwebhu ye-Outlook (Settings > Mail > Rules futhi Forwarding) ehambisa yonke i-imeyili engenayo equkethe amagama afana nalawa "Invoice", "Wire", "Payment", "ACH", noma "DocuSign" kokuthi Okubhaliselwe Kwe-RSS noma Faka kungobo yomlando ifolda ngenkathi uyimaka njengefundiwe. Hlola futhi ususe yonke imithetho engaziwa usebenzisa yethu i-akhawunti ye-imeyili intshontshiwe, imithetho yokudlulisela phambili, nokutholwa umhlahlandlela.
8. Yazisa Ideski lakho Losizo le-IT noma Isikhungo Sokusebenza Kwezokuphepha (SOC) ngokushesha:
9. Ungalokothi ufihle ukuskena kwe-QR ngephutha emsebenzini ngenxa yokuphoxeka. Ukushayela i-IT phakathi nemizuzu engu-5 kuvumela umlawuli ukuthi achofoze "Hoxisa izikhathi" kanye nokuthi "Dinga ukubhalisa kabusha i-MFA" ku-Entra ID / Okta ngaphambi kokuba umhlaseli aqalise Ukukhwabanisa kwe-Business Email Compromise (BEC). ukuhlasela amaklayenti akho.

Isimo C: Uskene ikhodi ye-QR usebenzisa iskena sangaphakathi nohlelo (i-WhatsApp, i-Discord, iTelegram, iSteam)¶

Uma umngane, iseva yegeyimu "I-Verification Bot," noma ikhasi lokunikeza okungelona iqiniso likutshela ukuthi "Vula i-Discord / WhatsApp / Steam -> Vula i-QR Scanner -> Skena le khodi ukuze ufune umklomelo noma uqinisekise iminyaka yakho", awuvakashelanga iwebhusayithi, usanda kugunyaza Ukungena ngemvume Kwedeskithophu Ekude / Iklayenti Lewebhu (QRLJacking):

• WhatsApp: Vula i-WhatsApp ngokushesha ocingweni lwakho -> cindezela okuthi Izilungiselelo (noma amachashazi amathathu ⋮ ku-Android) -> thepha Amadivayisi Axhunyiwe -> cindezela zonke ezisohlwini Google Chrome (Windows/Linux/Mac) noma iseshini engaziwa -> cindezela okuthi Phuma.
• I-Discord: Vula ngokushesha i-Discord -> thepha Izilungiselelo -> Amadivayisi -> Phuma Wonke Amadivayisi Aziwayo, bese ushintsha iphasiwedi yakho ye-Discord (ukushintsha iphasiwedi yakho ye-Discord kwenza okuntshontshiwe kungasebenzi ngokuzenzakalelayo Authorization uphawu esipheqululini somhlaseli).
• I-Telegram: Vula iTelegramu -> Izilungiselelo > Amadivayisi -> Qeda Zonke Ezinye Izikhathi.
• I-Steam: Vula Uhlelo Lokusebenza Lweselula Le-Steam -> cindezela isithonjana esithi Shield (I-Steam Guard) -> Isithonjana segiya -> Amadivayisi Agunyaziwe -> Susa ukufinyelela kunoma iyiphi i-PC engaziwa.

Isimo D: Uskene ikhodi ye-QR kuphela futhi wavula ikhasi lewebhu (Awuzange uthayiphe lutho)¶

Uma ukhombe i-iPhone yakho noma ikhamera ye-Android ngekhodi ye-QR esolisayo, uthephe isibhengezo se-URL ephuzi, wabona ukulayisha kwekhasi lewebhu elidwetshiwe ku-Safari noma ku-Chrome, futhi walivala ngokushesha ngaphandle kokuthayipha noma imaphi amaphasiwedi, amakhadi esikweletu, noma ukuchofoza "Faka":

1. Yehlisa umoya: Ukusebenzisa isiphequluli ngokuchofoza iqanda-ukushayela okuvela kusitikha sokupaka umgwaqo kuyivelakancane ngokungavamile. Ukuxhashazwa kwesiphequluli seselula ngokuchofoza okuthi zero kwezentengiso kubiza izigidi zamaRandi futhi kugcinwa ama-ejensi wezobunhloli wezwe ukuze enze ubunhloli, hhayi imikhonyovu yamamitha okupaka amaningi.
2. Vala ithebhu yesiphequluli futhi ukhiphe isitoreji sesayithi:
3. i-iOS (Safari): Vala ithebhu, bese uvula Izilungiselelo > Izinhlelo zokusebenza > Safari > Okuthuthukile > Idatha Yewebhusayithi, sesha igama lesizinda elisolisayo, bese uswayiphela kwesokunxele ukuze Susa amakhukhi ayo kanye nenqolobane.
4. I-Android (Chrome): Thepha isithonjana esithi sengidi / yokushuna kwesokunxele sebha yekheli -> Amakhukhi nedatha yesayithi -> Susa (noma iya kokuthi Izilungiselelo > Ubumfihlo Nokuphepha > Susa idatha yokuphequlula -> Ihora lokugcina).
5. Hlola ukuthi isiphequluli sakho asizange sivumele buthule ugaxekile wesaziso sohlelo lokusebenza noma silande ifayela:
6. Ku-Android Chrome, hamba kokuthi Izilungiselelo > Izilungiselelo zesayithi > Izaziso futhi uqinisekise ukuthi ayikho iwebhusayithi engaziwa enikezwe imvume yokukuthumelela izigelekeqe zesaziso sohlelo lokusebenza ezingamanga "Esitholwe Igciwane".
7. Vula ifolda ethi Amafayela / Okulandiwe efonini yakho bese ususa noma iyiphi .apk, .pdf, .ics (ugaxekile wekhalenda), noma .mobileconfig ifayela elilayishwe ngokuzenzakalelayo lapho ikhasi lilayishwa.
8. Qinisekisa ukuthi akukho Ukudluliselwa Kwezingcingo kwe-GSM okucushiwe (uma ikhodi ye-QR ivule Ukudayela Kwefoni yakho):
9. Vula ikhiphedi yefoni yakho bese udayela *#21# (ihlola isimo sokudlulisela ucingo olungenamibandela). Uma kukhona inombolo esohlwini, shayela ##002# bese ucindezela u-Call ukuze usule yonke imithetho ye-GSM yokudlulisela ikholi kulayini wakho wenkampani yenethiwekhi.

Isimo E: Amakhodi we-QR we-Cryptocurrency Hardware Wallet yomgunyathi kanye nezitika ze-"AirDrop / Claim" ezingamanga¶

Enye i-Quishing vector ekhula ngokushesha iqondise abanikazi be-cryptocurrency ngokusebenzisa ama-mail aphathekayo kanye nokupakishwa okuphazamisayo:

1. I-Tampered Ledger/Trezor/Coldcard Packaging Insert:
2. Abakhwabanisi bathenga izikhwama zehadiwe, bafake ikhadi lemiyalo elinomgunyathi elinomgunyathi eliqukethe ukufunda kwekhodi ye-QR "Skena ukuze usebenzise Hlola Ubuqotho Be-Firmware eyisibopho noma uqalise imbewu yakho yokutakula enamagama angu-24", shwabanisa-goqa ibhokisi, bese ulibuyisela ezimakethe zezinkampani zangaphandle.
3. Umthetho Osagolide: Izikhwama zehadiwe ezisemthethweni angalokothi zikucele ukuthi uthayiphe ibinzana lakho lokutakula le-BIP-39 lamagama angu-12 noma angu-24 ekhasini lewebhu le-smartphone noma uskene ikhodi ye-QR ecela amagama embewu yakho. Uma ufake ibinzana lakho lembewu ngemva kokuskena ikhodi ye-QR, isikhwama sakho semali sesivele sigadwe i-automated sweeper bot; yenza okwethu I-cryptocurrency wallet drain kanye ne-seed phrase compromise protocol ngokushesha.
4. I-WalletConnect (wc:) Amakhodi e-QR e-DApp Draner:
5. Ukuskena a wc: Ikhodi ye-QR engaphakathi kwe-MetaMask, i-Phantom, i-Rabby, noma i-Trust Wallet ixhuma isikhwama sakho se-Web3 kuhlelo lokusebenza lwenkampani yangaphandle (i-DApp). Uma isayithi livela ngokushesha isicelo sokusayina (Permit2, setApprovalForAll, noma increaseAllowance), chofoza okuthi Nqaba bese unqamula iseshini ye-WalletConnect ngaphansi kokuthi Izilungiselelo > Amasayithi Axhunyiwe / Amaseshini Wokuxhumana Wallet.

I-Forensics: Ungasikhipha kanjani ikhodi ngokuphepha futhi uhlole isithombe sekhodi ye-QR esolisayo ngaphandle kokuskena ngocingo lwakho¶

Uma uthole i-PDF esolisayo noma i-imeyili equkethe ikhodi ye-QR futhi ufuna ukubona ukuthi iholela kuphi ngaphandle kokuyithinta nge-smartphone yakho, sebenzisa lezi zindlela zomugqa womyalo eziphephile noma ezinebhokisi lesihlabathi kukhompuyutha yedeskithophu:

# 1. Decode the raw text/URL inside a QR code image offline using 'zbarimg' (Linux/macOS):
# (Does NOT connect to the internet; simply prints the decoded string to your terminal)
zbarimg --raw suspicious_qr_image.png

# 2. Trace all HTTP 301/302 redirect hops without executing JavaScript or loading the page:
curl -sIL --max-redirs 10 "https://suspicious-short-url.example/xyz" | grep -iE "^(HTTP/|location:)"

# 3. Inspect DNS registration age (Quishing domains are almost always <14 days old):
whois suspicious-parking-domain.com | grep -iE "Creation Date|Registrar:"

Ukubika ukuhlasela kwe-Quishing okungokoqobo nokudijithali kuziphathimandla ezisemthethweni¶

Ukubika ikhodi ye-QR enonya kuthola kokubili isitikha esibonakalayo sisuswe abasebenzi basedolobheni kanye nesizinda sobugebengu bokweba imininingwane ebucayi esicwiliswe izinhlu zeziphequluli zomhlaba wonke (Ukuphequlula Okuphephile kwe-Google ne-Microsoft SmartScreen):

1. Bika i-URL enonya ku-Google Safe Browsing & Cloudflare Radar: Thumela i-URL ekhishwe ikhodi ku- safebrowsing.google.com/safebrowsing/report_phish/ futhi radar.cloudflare.com/scan. Uma imakiwe, zonke isiphequluli se-iPhone Safari ne-Android Chrome emhlabeni wonke zizobonisa okubomvu kwesikrini esigcwele "Indawo Ekhohlisayo Phambili" isexwayiso phakathi kwemizuzu eyi-15 kuya kwengama-30 noma nini lapho ohamba ngezinyawo eskena leso sitikha semitha yokupaka.
2. Faka umbiko osemthethweni wobugebengu be-inthanethi:
3. I-United States: Fakela umbiko ne- FBI Internet Crime Comlaint Center (ic3.gov) kanye ne-*Federal Trade Commission (reportfraud.ftc.gov)**, futhi wazise iziphathimandla zokupaka zedolobha langakini.
4. United Kingdom: Dlulisela phambili ama-imeyili acela ku-report@phishing.gov.uk (Isikhungo Sikazwelonke Sokuphepha Kwe-Cyber ​​) futhi sibike ukulahlekelwa kwezimali ku-Isenzo Sokukhwabanisa (actionfraud.police.uk).
5. I-European Union, Canada, ne-Australia: Bika Isikhungo Sokulwa Nokukhwabanisa SaseCanada (antifraudcentre-centreantifraude.ca), Iwashi lomkhonyovu lase-Australia (scamwatch.gov.au), noma ithimba lakho likazwelonke lokuphendula izimo eziphuthumayo zekhompuyutha (CERT).

Uyihlola kanjani noma iyiphi ikhodi ye-QR ngokuphephile NGAPHAMBI kokuvakashela i-URL (Uhlu Lokuhlola Lokuvimbela)¶

Awudingi ukuqagela ukuthi ikhodi ye-QR iholela kuphi. Landela le mithetho emihlanu njalo lapho uhlangabezana nekhodi ye-QR esidlangalaleni noma ngeposi:

• Sebenzisa uzipho lwakho kuwo wonke amakhodi e-QR aphathekayo kumamitha okupaka, amashaja e-EV, namathebula okudlela: Indawo yokupaka esemthethweni kanye neshaja ye-EV amakhodi e-QR angaba ahlolwe usilika ngokuqondile kucwecwe lwensimbi noma avalwe ngaphansi kweshidi elicacile lokuvikela i-polycarbonate. Uma uzipho lwakho lubamba umphetho ophakanyisiwe wephepha noma isitika se-vinyl esinamathiselwe phezu kophawu, ungalokothi usiskene.
• Funda ukubuka kuqala kwe-URL egcwele kuhlelo lwakho lokusebenza lwekhamera futhi uzibe izinqamuleli ze-URL: Kokubili uhlelo lokusebenza lwekhamera ye-iOS eyakhelwe ngaphakathi kanye nekhamera ye-Android kubonisa isibhengezo sephilisi esincane esibonisa igama lesizinda ngaphambi kokuvula isiphequluli. Uma imitha yokupaka kamasipala noma isaziso sasebhange sibonisa i-URL efushanisiwe noma ejwayelekile (bit.ly, tinyurl.com, qrco.de, t.co, lnkd.in, noma page.link), ungawuthinti, izikhungo zikahulumeni namabhange amakhulu awalokothi asebenzise izinqamuleli zezixhumanisi zezinkampani zangaphandle ezikhiqizweni zokukhokha.
• Vala "Vula Izixhumanisi Ngokuzenzakalelayo" kuzilungiselelo zekhamera yefoni yakho: Qiniseka ukuthi uhlelo lwakho lokusebenza lwekhamera ludinga ukuthi ufunde mathupha futhi uthephe isibhengezo sokubuka kuqala se-URL kunokuba uqalise isiphequluli lapho ikhodi ye-QR ingena khona manjalo kuzimele.
• Ungalokothi uskene ikhodi ye-QR efika ngaphakathi kwencwadi engokoqobo engaceliwe noma ikhadi leposi ("USPS / Royal Mail / Amazon Mystery Package"): Abakhohlisi bathumela amaphakheji aphathekayo aqukethe into eshibhile, enga-odiwe (njengendandatho yepulasitiki noma ishaja yocingo, "Umkhonyovu Wokuxubha") ephelezelwa nokufunda ikhadi "Skena le khodi ye-QR ukuze ubone ukuthi ubani okuthumelele ikhadi le-QR lesipho sakho."
• Landa izinhlelo zokusebenza zokupaka ne-EV zokushaja ngokuqondile kusuka ku-App Store / Play Store: Esikhundleni sokuskena ikhodi ye-QR yomgwaqo, vula uhlelo lokusebenza olusemthethweni lwe-ParkMobile, PayByPhone, RingGo, noma i-ChargePoint* bese uthayipha Inombolo Yendawo ephrintwe ophawini.

Imibuzo ejwayelekile ukubuzwa¶