Iyunithi yocwaningo lwe-Treat Intelligence ye-NordVPN imemezela ukuthi ithole umkhankaso we-phishing oyinkimbinkimbi ohlose abafaka izicelo zomsebenzi, ozenza ezinye zezinkampani eziqashelwa kakhulu emhlabeni. Lo msebenzi usebenzisa amagama ezikhondlakhondla zomhlaba njenge-Meta (kanye nezinkampani ezingaphansi kwayo, njenge-Facebook ne-WhatsApp), i-Disney, i-Coca-Cola, kanye ne-Spotify ukuze kwebiwe iziqinisekiso ze-Facebook zezisulu kanye nokuntshontsha ama-akhawunti azo.
Uphenyo luveze umsebenzi wezigaba eziningi. Kuwo, abahlaseli basebenzisa ama-hidden domains (“HUBs”), izindlela zokwenza izixhumanisi zokudlulisela, kanye nezindawo zokukhangisa umsebenzi ezingokoqobo ukuze baqondise izisulu endleleni eyakhiwe ngokucophelela. Isinyathelo sokugcina sibaqondisa ekhasini lokungena le-Facebook elingamanga, elenzelwe ukuthwebula iziqinisekiso zabo.
“Abafuna umsebenzi basengozini enkulu ngoba sebejwayele ukwabelana ngolwazi lomuntu siqu nokulandela imiyalelo evela koxhumana nabo abangaziwa,” kusho uDomininkas Virbickas, umqondisi womkhiqizo kwa-NordVPN. “Le mikhankaso isebenzisa lokhu kuthembana isebenzisa ukuxhumana okuyinkimbinkimbi kanye nezingosi zomsebenzi ezingamanga ezikholisayo ezingahlukaniseki nezeqiniso.”
Umkhankaso uqala nge-imeyili ebandayo, evame ukuthunyelwa ngezinsizakalo ezisemthethweni njenge-Google AppSheet ukuze kugwenywe izihlungi zogaxekile. Le milayezo ibonakala icocekile futhi inobungcweti, inohlelo lolimi olungenaphutha kanye nethoni elilingisa izindlela zangempela zokuqasha. Uhlu loxhumana nabo cishe luhlanganiswa ngokuqoqwa kwedatha okuzenzakalelayo kusuka kumapulatifomu afana ne-LinkedIn noma olutholwe ekuphulweni kwedatha kwangaphambilini.
Isixhumanisi esiku-imeyili siqondisa izisulu kusizinda esithi "HUB" (njenge-careers.meta-findyourjob[.]com). Lawa masayithi aklanywe ngendlela yokugwema eyakhelwe ngaphakathi. Uma othile, kungaba umhlaziyi wezokuphepha noma iskena ezenzakalelayo, evakashela isizinda ngqo, uzobona kuphela ikhasi elijwayelekile, elingasebenzisi lutho elingenamsebenzi osebenzayo.
Ngakho-ke, okuqukethwe okunonya kusebenza kuphela uma isayithi lifinyelelwa ngesixhumanisi esithile sokudlulisela esifakwe ku-imeyili yobugebengu bokweba imininingwane ebucayi. Lesi sixhumanisi sokudlulisela sisebenza njengesihluthulelo, sivula inkinobho ethi "Sesha umsebenzi" echofozekayo ebingahlala ifihliwe ngaphandle kwalokho.
Lapho nje isisulu sichofoza kusixhumanisi, siqondiswa kusizinda somlamuleli esilingisa iphothali yomsebenzi esemthethweni. I-interface ivumela abasebenzisi ukuthi baphequlule okuthunyelwe kwemisebenzi okubonakala kunokwethenjelwa okuvela kumkhiqizo mbumbulu, okuqinisa inkohliso yokuthi bahlanganyela enkambisweni yokukhetha yangempela.
Izibonelo zifaka phakathi i-plus.jobfusion-mt[.]com kanye ne-official.professionlaunch-mt[.]com ye-Meta, i-careers.coca-contactnow[.]info ye-Coca-Cola, i-connect.spotifycareerapply[.]com ye-Spotify, kanye ne-jobquest.wdcfuturesteps[.]com ye-Disney.
Ugibe luyavalwa lapho isisulu sichofoza ku-“Faka isicelo” noma ku-“Faka isicelo.” Esikhundleni sefomu lesicelo somsebenzi, siqondiswa ekhasini le-phishing elidinga ukuthi singene nge-Facebook ukuze “siqhubeke nesicelo.” Leli khasi lenzelwe ukuthwebula iziqinisekiso ze-Facebook zesisulu, linikeze abahlaseli ukulawula okuphelele kwe-akhawunti kanye nazo zonke izinsizakalo ezixhunywe kuyo.
Lo mkhankaso uqokomisa umkhuba okhulayo wabahlaseli abasebenzisa imikhiqizo ethembekile kanye nezimo zobungcweti njengezikhali zokugwema ukungabaza kwemvelo kwezisulu. Ngenxa yokuthi ukugeleza kobugebengu bokweba imininingwane ebucayi kulingisa inqubo yokuqasha yangempela ngokunembile, ngisho nabasebenzisi abaqaphile bangabanjwa bengalindele.
I-NordVPN iphakamisa izinyathelo ezintathu abasebenzisi okufanele bazithathe lapho bethola noma yiluphi uhlobo lwe-imeyili olunezikhala zemisebenzi:
- Qinisekisa i-URL ngaphambi kokufaka noma yiziphi iziqinisekiso. Izinkampani ezisemthethweni zisingatha amakhasi emisebenzi ezizindeni zazo ezisemthethweni, hhayi kumawebhusayithi ezinkampani zangaphandle anamagama angavamile. Lokhu kusebenza futhi ezicelweni zokungena ezinkundleni zokuxhumana. Izinkinobho ezithi “Ngena ngemvume nge-Facebook” ezinkundleni ezisemthethweni zizohlala zikuqondisa kusizinda esisemthethweni se-facebook.com. Uma ikhasi lokungena lisingathwe ku-URL engaziwa, kungenzeka ukuthi kuwumzamo wobugebengu bokweba imininingwane ebucayi.
- Nika amandla ukuqinisekiswa kwezinto eziningi (i-MFA) kuwo wonke ama-akhawunti ezinkundla zokuxhumana. Ngisho noma iziqinisekiso zisengozini, i-2FA ingavimbela abahlaseli ekufinyeleleni.
- Ungalokothi uthembe iminikelo yemisebenzi ongayicelanga efika nge-imeyili noma izinhlelo zokusebenza zemiyalezo, ikakhulukazi lezo ezikucindezela ukuba uthathe isinyathelo ngokushesha.
Indlela Yokwenza:
Inqubo yokuphenya yasebenzisa izindlela zobuhlakani obuvulekile (i-OSINT) kanye nesidingo esilandela lapho sokuqinisekisa nokuqinisekisa idatha etholwe ngokubhekisela okuphambene.
Ikakhulukazi, ingqikithi yesu lethu lokuqoqwa kwedatha yayihlanganisa ukusetshenziswa kwama-“dorks” athile (izintambo zokusesha ezithuthukisiwe) ezisetshenziswa ezinjinini zokusesha ezinkulu ezijwayelekile, kanye nokusetshenziswa kwezinjini zokusesha ezikhethekile ukukhomba izizinda, amawebhusayithi, namadivayisi avezwe ku-inthanethi. Phakathi kwala mathuluzi akhethekile, sisebenzise kakhulu izinjini zokusesha ze-Internet of Things (IoT) kanye namapulatifomu esevisi afana ne-Shodan, njenge-Fofa.io kanye ne-Shodan.io. Lawa mathuluzi asivumele ukuhlonza hhayi kuphela izizinda kodwa nezinsizakalo namachweba avezwe, eveza ubuthakathaka obungaba khona noma ukuvezwa okungahlosiwe.
Inhloso eyinhloko yale ndlela yokucwaninga ehlukaniswe ngezigaba yayikabili:
- Ukuze uthole umbono ophelele nophelele ngangokunokwenzeka ngesimo sezinto zedijithali ezihilelekile.
- Ukuhlonza ngokunembile izindawo eziye zaphazamiseka, okungaphezu nje kokuhlonza izindawo ezisengozini ngokwemfundiso.
Lokhu kuhlaziywa okuningiliziwe kuqinisekisile ukuthi iziphetho zisekelwe kudatha eqinisekisiwe nokuthi umkhawulo wezinhlelo ezithintekile uchazwe ngokunemba okukhulu ngangokunokwenzeka.
