Uchofoze isixhumanisi sokuphishing? Yenza lezi zinto eziyi-6 manje

Phefumula. Ukuchofoza isixhumanisi sokuphishing akuyona inhlekelele ngokuzenzakalela. Ezimweni eziningi, ukuchofoza ngokwako akubeki ama-akhawunti akho noma idivayisi engozini. Okubalulekile yilokho okwenzeke emasekhondini ngemuva kokuchofoza — nalokho okwenzayo emizuzwini elandelayo.

Lo mhlahlandlela ukuqondisa ngokuqondile kulokho: ukuhlukanisa, izinyathelo zesenzo, nendlela yokuqinisekisa ukuthi akuphindi kwenzeke.

Okokuqala: kwenzekeni ngempela uma uchofoza?

Iziphequluli zesimanje nezinhlelo zokusebenza zakhelwe ukuvimba izinsongo. Ukufika nje ekhasini elinonya akuvamile ukufaka lutho ngokwako. Umonakalo wangempela cishe njalo udinga ukuthi wenze isenzo esengeziwe — ukuthayipha okuthile, ukulanda okuthile, noma ukwamukela isikhukhulo.

Zibuze ukuthi yiliphi kulezi zingatsha elifana nesimo sakho:

Ngichofoze nje, ngase ngivala ithebhu ngokushesha. Ingozi ephansi. Idivayisi yakho cishe ilungile. Kodwa dlula ezinyathelweni 1 no-4 ngezansi, kodwa ungethuki.

Ngifake iphasiwedi yami noma igama lokusebenzisa. Ingozi ephezulu. Phatha imininingwane yakho yokungena njengeyingozi. Yiya ngqo esinyathelweni 2 bese wenza ngokushesha — ukwebiwa kwemininingwane yokungena kuwumphumela ovame kunazo zonke wokuchofoza kokuphishing.

Ngilande ngase ngivula ifayela. Ingozi ephezulu. Ifayela elilandiwe lingasebenzisa ikhodi. Isinyathelo 4 — ukuskena kwe-malware — siba yinto yakho ephezulu ndawonye nokushintsha noma yimaphi amaphasiwedi ama-akhawunti owafinyelele kuyo kuleyo divayisi.

Ngifake imininingwane yekhadi lesikweletu noma le-debit. Ingozi ephezulu. Xhumana nebhange lakho ngokushesha (isinyathelo 5) ukuze uvimbe noma uqaphe ikhadi. Isikhathi sibalulekile lapha.

Ngamukele isikhukhulo sokuqinisekisa noma nginika i-app imvume. Ingozi ephezulu. Abahlaseli basebenzisa izihlaselo ze-"MFA fatigue" nezimvume ze-OAuth ukuthatha ama-akhawunti ngisho ngaphandle kokweba iphasiwedi yakho. Iya kuzilungiselelo zokuphepha ze-akhawunti yakho bese ususa noma yiziphi izimvume ze-app ongazazi.

Uma usangaqiniseki ukuthi kwenzekeni, dlula kuzo zonke izinyathelo eziyisithupha ngokulandelana. Kuthatha ngaphansi kwemizuzu engu-20 futhi kuhlanganisa zonke izimo.

Izinyathelo eziyi-6 ozithatha manje

1. Nqamula ekhasini ungafaki okunye

Vala ithebhu ngokushesha uma ungakakwenzi. Ungabuyeli kulo, ungaphindi ufake lutho, futhi ungachofozi noma yisiphi isikhukhulo sesibili noma izinkinobho "zokuvala" ngaphakathi kwekhasi ngokwalo — amanye amakhasi okuphishing asebenzisa lezo ukuqalisa ukulanda.

Uma usasekhasini elizwakala lisolisa, vala lonke iwindi lesiphequluli kunokusuka. Efonini, phoqa ukuvala i-app.

Awudingi ukunqamula idivayisi yakho ku-inthanethi. Ukuhlaselwa kokuphishing kuncike ekunikeni kwakho ulwazi — akuyona ngokuvamile ukusetshenziswa okuzenzakalelayo okusebenza ngokuthula ngemuva ngaso leso sikhathi ikhasi elilayisha ngaso.

2. Shintsha iphasiwedi eveziwe ngokushesha — nayo yonke indawo eyisebenzisa kabusha

Uma uthayiphe iphasiwedi esayithini lokuphishing, cabanga ukuthi leyo phasiwedi manje isezandleni zomhlaseli. Yishintshe esayithini elisemthethweni manje, ngaphambi kokuqeda uhlu olusele.

Bese uma. Cabanga ukuthi yikuphi enye indawo osebenzisa kuyo leyo phasiwedi efanayo. Wonke ama-akhawunti abelana ngayo manje asengozini, ngoba abahlaseli basebenzisa imininingwane yokungena eyebiwe kumasayithi adumile ngokuzenzakalela (lokhu kubizwa nge-credential stuffing). Shintsha iphasiwedi kuwo wonke ama-akhawunti asetshenziswa kabusha.

Sebenzisa iphasiwedi ehlukile, ekhiqizwe ngokungahleliwe kusayithi ngasinye. Umphathi wamaphasiwedi wenza lokhu kube ngokusebenzayo.

3. Vula ukuqinisekisa ngezici ezimbili

Uma usushintshile iphasiwedi eyingozi, vula ukuqinisekisa ngezici ezimbili (2FA) kuleyo akhawunti — nakunoma yimaphi amanye ama-akhawunti abalulekile angakabi nayo.

I-2FA isho ukuthi ngisho noma umhlaseli enephasiwedi yakho entsha kusasa, usangeke akwazi ukungena ngaphandle kwesici sakho sesibili. Sebenzisa i-app yokuqinisekisa (njenge-Google Authenticator noma i-Authy) kunemiyalezo ye-SMS lapho kungenzeka — amakhodi e-SMS angancinzwa, nakuba esengcono kunokungabikho.

4. Sebenzisa ukuskena kwe-malware bese uqaphe ukuziphatha kwedivayisi yakho

Uma ulande wavula ifayela elivela ekhasini lokuphishing, sebenzisa ukuskena okuphelele kwe-malware ngesofthiwe yakho yokuphepha. Ku-Windows, i-Microsoft Defender (efakwe ngaphakathi) iyindawo eqinile yokuqala. Ku-Mac, i-Malwarebytes inezinga lamahhala elihloniphekile.

Ngisho noma ungalandanga lutho, gcina uso kudivayisi yakho amahora angu-48 alandelayo:

Ukwehla okungalindelekile noma ukusetshenziswa okuphezulu kwe-CPU
Izandiso ezintsha zesiphequluli noma ama-toolbar ongazifakanga
Ama-imeyili okusetha kabusha iphasiwedi ongawacelanga
Umsebenzi wokungena ongajwayelekile emlandweni we-akhawunti yakho

Uma ubona noma yikuphi kwalokhu, khuphula udaba — xhumana neqembu lakho le-IT uma lokhu kwenzeke kudivayisi yomsebenzi, noma ucabangele usizo lochwepheshe.

5. Xwayisa ibhange lakho uma imininingwane yenkokhelo ibibandakanyeka

Uma ufake inombolo yekhadi, usuku lokuphelelwa yisikhathi, i-CVV, noma imininingwane yokungena yebhange, shayela ibhange lakho noma umhlinzeki wekhadi manje. Iningi linemigqa yobuqili yamahora angu-24. Bacele ukuthi:

Bafake uphawu ikhadi ukuze liqashwe noma bakhiphe elinye
Babuyekeze ukwenziwa kwezimali kwakamuva ukuze babone noma yini engajwayelekile
Bavimbe noma yiziphi izinkokhelo ezingayaziyo zabathengisi

Ukwenza ngaphakathi kwamahora kwandisa kakhulu ithuba lokumisa noma ukuguqula izikweletu zenkohliso. Ungalindi kuze kuse.

6. Bika umzamo wokuphishing

Ukubika kuthatha imizuzu emibili futhi kusiza ngempela ukuvikela abanye. Nazi izindawo zokubika:

Umhlinzeki wakho we-imeyili: Sebenzisa inkinobho ethi "Bika ukuphishing" ku-Gmail, Outlook, noma Apple Mail. Lokhu kuqeqesha izihluzi zabo ukubamba ukuhlasela okufanayo okuqondiswe kwabanye.
Iqembu lakho le-IT noma lokuphepha (uma lokhu bekuyi-akhawunti yomsebenzi): Kufanele bazi ukuze baphenye ukuthi abanye enhlanganweni yakho baqondiswe yini.
Inkampani elingiselwe: Uma i-imeyili yokuphishing izenza ivela ebhange lakho, i-Netflix, i-PayPal, noma nayiphi enye impawu, iyithumele eqenjini lenkampani lokuhlukumeza noma lokuphepha (iningi lishicilela ikheli lokubika ukuphishing, isb. phishing@paypal.com). Bangathatha isinyathelo sokwenza isayithi lisuswe.
Izikhungo zezwe zobugebengu be-cyber: E-US, bika ku-Anti-Phishing Working Group ku-reportphishing@apwg.org bese udlulisela i-imeyili ku-phishing-report@us-cert.gov. E-UK, sebenzisa ithuluzi lokubika le-National Cyber Security Centre.

Iphuzu uma uchofoze ku-iPhone noma i-Android

Abantu abaningi basesha "uchofoze isixhumanisi sokuphishing ku-iPhone" noma "uchofoze isixhumanisi sokuphishing ku-Android" bethukile. Nansi impendulo eqotho: izinhlelo zokusebenza zeselula zesimanje zinokuhlukaniswa okuqinile. Ukuthepha isixhumanisi — ngisho nesinonya — akuvamile ukuholela ekusebenzeni kwekhodi okuzenzakalelayo noma ukutheleleka.

Ingozi yangempela kuselula ifana neyedeskithophu: yilokho okuthayiphile. Izikrini zeselula zincane, ama-URL anzima ukuwahlola, futhi abahlaseli bayakwazi lokhu — amasayithi okuphishing enziwa ngokwengeziwe ukubukeka aphelele efonini. Uma ufake imininingwane yokungena noma yenkokhelo esayithini leselula, landela izinyathelo 2 no-5 ngenhla kungakhathaliseki ukuthi yisiphi idivayisi osisebenzisile.

Ukusetha kabusha ifoni yakho ngemuva kokuchofoza isixhumanisi (ngaphandle kokulanda noma ukufaka lutho) cishe akudingeki nhlobo. Gcinela ukusetha kabusha izimo lapho ufake i-app esolisayo futhi ungakwazi ukuyisusa.

Ukuvimbela: hlola isixhumanisi ngaphambi kokusichofoza ngokuzayo

Indlela engcono kunazo zonke yokugwema lesi simo ukuqinisekisa isixhumanisi ngaphambi kokusivula kudivayisi yakho yangempela.

Izinketho ezimbili zenza lokhu kube lula:

Funda ukufunda isixhumanisi kuqala. Umhlahlandlela wethu wesihloli sezixhumanisi esiphephile uchaza ukuthi kungani izihloli ze-URL ezingaguquki zishiya izizinda zokuphishing ezintsha — nokuthi ungahlola kanjani isixhumanisi esisolisayo ngokuphepha esikhundleni. Kuthatha imizuzu futhi akubizi lutho.

Sivule kusiphequluli esingeke sisaba khona emizuzwini kusukela manje. I-Tempbrowser Analyzer ivula isixhumanisi ngaphakathi kwebhokisi lesihlabathi samafu lesikhashana eligeleziswa esikrinini sakho. Ikhasi lisebenza endaweni ehlukanisiwe — hhayi kudivayisi yakho. Uma iseshini yakho iphela, lonke ibhokisi lesihlabathi liyasulwa: awukho umlando, awukho amakhukhi, alukho uphawu. Uma ikhasi lizama okuthile, kwenzeka kwenye indawo ngokuphelele. Uhlelo lwe-Mahhala aludingi ukubhalisa noma ikhadi lesikweletu — uthola ukuqalisa okuthathu ngosuku, ngakunye kufike kwemizuzu emi-3. Lokho kungaphezu kokwanele ukuhlola isixhumanisi esisolisayo ngaphambi kokunquma ukuthi usithembe yini.

Ukuthola okwengeziwe ngokuhlola izixhumanisi ezisolisayo, bheka umhlahlandlela wethu: Ingabe lesi sixhumanisi siphephile? Indlela yokwazi ngaphambi kokuchofoza.

FAQ

Ingabe ukuchofoza isixhumanisi kodwa kungahack ifoni yami?

Cishe kuzo zonke izimo zangempela, cha. Ukuchofoza isixhumanisi nokulayisha ikhasi akufaki ngokwako i-malware noma kubeke ama-akhawunti akho engozini. Ukusetshenziswa kobuthakathaka kwe-"zero-click" okuyingqayizivele kukhona kodwa kuyivelakancane, kuqondiswe, futhi kulungiswa ngokushesha. Iningi elikhulu lokuhlaselwa kokuphishing kudinga ukuthi ufake okuthile — iphasiwedi, inombolo yekhadi, noma ikhodi yokuqinisekisa. Uma uchofoze kodwa ungathayiphanga lutho, ingozi yakho iphansi kakhulu.

Kuthiwani uma ngichofoze kodwa ngangafaki lutho?

Cishe ulungile. Vala ithebhu, sebenzisa ukuskena okusheshayo kwe-malware uma ulande noma yiliphi ifayela, bese ugcina uso kuma-akhawunti akho ukuze ubone umsebenzi ongajwayelekile ezinsukwini ezimbalwa ezizayo. Akudingeki ukushintsha amaphasiwedi ngaphandle kokuthi uthayiphe ngempela imininingwane yakho yokungena.

Ingabe kufanele ngisethe kabusha ngemuva kokuchofoza isixhumanisi sokuphishing?

Cishe cha — ikakhulukazi uma konke okwenzile ukuchofoza wavala. Ukusetha kabusha kuyithuluzi lokugcina ezimweni lapho i-app enonya ifakiwe futhi ingeke isuswe. Ekuchofozeni kokuphishing lapho ungalandanga noma ufaka lutho, ukusetha kabusha kungaba ukweqisa okukhulu futhi kubangele ukulahlekelwa yidatha ngokungadingekile.

Ngihlola kanjani isixhumanisi esisolisayo ngaphandle kokusichofoza?

Izindlela ezimbili zisebenza kahle. Okokuqala, beka isikhombisi phezu kwesixhumanisi (kudeskithophu) ukuze ubone i-URL yangempela ebharini lesimo lesiphequluli sakho — bheka amaphutha wokubhala wempawu ezaziwayo noma izandiso zesizinda ezingajwayelekile. Okwesibili, sivule endaweni elahlwayo: namathisela i-URL ku-Tempbrowser analyzer, lapho noma yikuphi okuqukethwe okunonya kusebenza endaweni yamafu ehlukanisiwe engalokothi ithinte idivayisi yakho. Umhlahlandlela wethu wesihloli sezixhumanisi esiphephile uchaza ukuthi kungani izihloli ezingaguquki zodwa zinganele.

Yini umphumela ovame kunazo zonke ngemuva kokuchofoza isixhumanisi sokuphishing?

Ukwebiwa kwemininingwane yokungena yiwo umphumela ovame kunazo zonke. Abahlaseli bakha amakhasi okungena angamanga akholisayo amabhange, abahlinzeki be-imeyili, nama-app adumile, baqoqe igama lakho lokusebenzisa nephasiwedi, bese besebenzisa leyo mininingwane ngokushesha — ngokuvamile ngaphakathi kwemizuzu. Yingakho ukushintsha iphasiwedi eveziwe ngokushesha kubaluleke kangaka.

Uma ufunda lokhu ngemuva kwesenzo, manje unohlu olucacile lwezenzo. Dlula kulo ngokulandelana, futhi usuwenzile konke umuntu onengqondo angakwenza. Ngokuya phambili, ukuhlola kwemizuzwana emibili ngaphambi kokuchofoza yikho kuphela okudingekayo ukwenza ukuhlaselwa kokuphishing kube yingozi kancane kakhulu.

Vula isixhumanisi sakho esilandelayo esisolisayo ngokuphepha — akudingeki ukubhalisa: Tempbrowser Analyzer