Indlela yokubona nokugwema ama-CAPTCHA mbumbulu kanye nokukhwabanisa kokuqinisekisa

Isibuyekezo sokugcina: 24 September ka-2026
  • Ama-CAPTCHA asemthethweni anqunyelwe ekuhlolweni okulula okubonakalayo noma kokuzwa ngaphakathi kwesiphequluli futhi awalokothi acele ukwenziwa kwemiyalo yangaphandle.
  • Ama-scammers anamuhla asebenzisa ubunjiniyela bezenhlalo ukuze akhohlise umsebenzisi ukuthi afake i-malware efana ne-Lumma Stealer noma i-AsyncRAT.
  • Ukutholwa kusenesikhathi kuncike ekuqapheleni noma yiziphi izicelo zokulanda amafayela noma ukusebenzisa ikhonsoli yesistimu ngesikhathi sokuhlola.

Ikhoni encane yokuqapha ekhibhodi yekhompyutha, efanekisela isidingo sokuma nokuhlola ngaphambi kokusebenzisa i-CAPTCHA.

Cishe usuke wakubona lokhu izikhathi eziyinkulungwane: uphequlula i-inthanethi bese kuthi kungazelelwe kuvele ibhokisi elivamile elithi “Angisiye irobhothi” , noma ucelwe ukuthi ukhethe zonke izithombe ezibonisa amarobhothi. Lawa mathuluzi, aziwa ngokuthi ama-CAPTCHA, ayizingxenye eziyisisekelo zokuphepha kwewebhu ukuvimbela ama-bot ukuthi angagcwalisi i-inthanethi ngogaxekile noma adale ama-akhawunti mbumbulu ngokungakhethi.

Inkinga ukuthi izigebengu ze-inthanethi, ezihlala zifuna izikhala, seziqalile ukusebenzisa ukulingisa okunonya kwalezi zivivinyo. Zisebenzisa iqiniso lokuthi sijwayele ukuzibona futhi zizethemba ngokungaboni ukuthi zizongena nge-malware kumakhompyutha ethu ngaphandle kokuthi siqaphele. Empeleni, ziguqula indlela yokuphepha ibe yihhashi leTrojan ukuze zibeke engcupheni ubumfihlo bethu.

imikhankaso yobugebengu bokweba imininingwane ebucayi ethuthukisiwe
I-athikili ehlobene:
Imikhankaso ye-phishing ethuthukisiwe: amasu, izibonelo kanye nokuzivikela

Iyini ngempela i-CAPTCHA futhi kufanele isebenze kanjani?

Umuntu ophethe uphawu 'lwe-Scam Alert' phezu kwe-laptop, exwayisa ngokukhwabanisa ku-inthanethi kanye nama-CAPTCHA mbumbulu.

Kulabo abangajwayelene nesihloko, i-CAPTCHA isifinyezo sokuhlolwa okuzenzakalelayo kwe-Turing okwenzelwe ukuhlukanisa abantu emishinini . Inhloso yayo ukuvimba izikripthi nezinhlelo ezizenzakalelayo ezingakwazi ukuxazulula amaphazili alula. Izinhlobo ezivame kakhulu yizithombe ezibonakalayo (izinhlamvu ezisontekile noma izithombe), i-auditory, kanye ne -reCAPTCHA ethuthukisiwe ye-Google , ehlaziya ukuziphatha kwegundane kanye nokuzulazula kwangemuva ukuze kutholakale ukuthi ungumuntu wangempela yini.

Into ebaluleke kakhulu okufanele uyikhumbule ukuthi uhlelo lokuqinisekisa lwangempela lwenzeka kuphela kuwebhu . Luzokucela ukuthi uchofoze, uxazulule iphazili, noma uthayiphe ikhodi oyibona esikrinini, kodwa ngeke lukuphoqe ukuthi ushiye isiphequluli ukuze uhlanganyele nokusebenza kwangaphakathi kwesistimu yakho yokusebenza.

  Amathuluzi e-DAEMON atheleleke nge-malware: okwenzekile nokuthi ungazivikela kanjani

Ugibe lwama-CAPTCHA mbumbulu kanye nendlela ye-ClickFix

Isithombe esingokomqondo somuntu osebenzisa imaski endaweni emnyama, emele usongo olungemuva kokuhlaselwa kwe-CAPTCHA mbumbulu.

Abakhohlisi bathuthukise ubuciko bokukhohlisa. Manje abagcini nje ngokudala amakhasi afana nalawo emikhiqizo eyaziwayo, kodwa futhi bathelela amasayithi asemthethweni (ikakhulukazi lawo asekelwe ku -WordPress endala ) ukuze bafake amasheke abo mbumbulu. Elinye lamaqhinga ayingozi kakhulu libizwa ngokuthi i-ClickFix.

Kulesi simo, umsebenzisi ubona i-CAPTCHA ebonakala ijwayelekile ngokuphelele. Kodwa-ke, lapho ezama ukuqinisekisa ubunikazi bakhe, isayithi libonisa umlayezo othi kukhona iphutha lobuchwepheshe noma ukuthi kudingeka ukuqinisekiswa okwengeziwe . Nasi isibambo: isayithi likopisha ngokuzenzakalelayo ikhodi enonya ebhodini lokunamathisela bese litshela umsebenzisi ukuthi acindezele u-Win + R, Ctrl + V, no-Enter ku-Windows, noma asebenzise i-Terminal ku-Mac.

Kuyini ukuhlasela kwe-ClickFix futhi kusebenza kanjani?
I-athikili ehlobene:
Kuyini ukuhlasela kwe-ClickFix futhi kusebenza kanjani ngokuningiliziwe?

Ngokwenza lokhu, umsebenzisi usebenzisa umyalo we-PowerShell noma i-mshta.exe ngesandla . Lokhu kuyingozi kakhulu ngoba isiphequluli asikwazi ukuvimba into umnikazi wekhompyutha anquma ukuyenza. Kungubunjiniyela bezenhlalo kuphela: basenza sikholwe ukuthi silungisa iphutha kanti empeleni sivulela umhlaseli umnyango wethu wangaphambili.

Ingozi engabonakali: Ukucasha kwe-Ether kanye nokwebiwa kwedatha

Izinhlamvu zokhuni ezakha igama elithi 'Phishing', ezibonisa umqondo wokukhohlisa kwedijithali okusetshenziswa ekukhwabaniseni kokuqinisekisa.

Ukuze kube nzima nakakhulu ukulandelela la ma-scandal, amanye amaqembu afana ne -ClearFake asebenzisa indlela ebizwa ngokuthi i-EtherHiding . Esikhundleni sokugcina igciwane kuseva yewebhusayithi ethelelekile, baligcina ezinkontilekeni ezihlakaniphile ku- blockchain (njenge-Binance Smart Chain ). Ngenxa yokuthi i-blockchain ayiguquki futhi ayihambisani, izinhlelo ze-antivirus zendabuko kanye nabaphathi bezinhlelo banenkinga enkulu yokususa ikhodi enonya.

  Ukuphepha Kwamafu Nokuvikelwa Kwedatha: Umhlahlandlela Ophelele Wamabhizinisi

Futhi yini abayifakile uma usuyithathile? Ngokuyinhloko ama-infostealers afana ne-Lumma Stealer noma i-Vidar Stealer. Lawa ma-malware awakhi umsindo; aphenya ngesiphequluli sakho ukuze eba amakhukhi weseshini , agcine amaphasiwedi, futhi, okubaluleke kakhulu, afinyelele ama-wallet akho e-cryptocurrency . Angafaka futhi ama-trojan okufinyelela kude (ama-RAT) afana ne-AsyncRAT noma i-SecTopRAT, avumela i-hacker ukuthi ibuke isikrini sakho , ibhale phansi yonke inkinobho, futhi ihambe kunethiwekhi yenkampani yakho uma ungene ngemvume ukuze usebenze.

Izimpawu ezicacile zokuthola ukukhwabanisa

Uma ungafuni ukukhohliswa, qaphela lezi zimpawu. Okokuqala, qaphela uma i-CAPTCHA ivela efasiteleni elivelayo noma kusizinda esinegama elingavamile eligcwele izinombolo nezinhlamvu ezingenamsebenzi. Izinhlelo ezisemthethweni zivame ukufakwa ekhasini ngendlela yemvelo.

Isibonakaliso se-telltale siyisicelo sezenzo zangaphandle. Uma iwebhusayithi ikucela ukuthi ulande ifayela , ufake isandiso sesiphequluli, noma usebenzise noma iyiphi inhlanganisela yokhiye ngaphandle kwethebhu yamanje, baleka ngokushesha . Ayikho inkampani ehloniphekile, ngisho ne-Google noma i-Cloudflare, ezokucela ukuthi uvule umyalo ukuze ufakazele ukuthi ungumuntu.

I-hacker ene-hooded esebenza endaweni emnyama enama-monitor amaningi, emelela usongo lwezigebengu ze-inthanethi ngemuva kwe-ClickFix.
I-athikili ehlobene:
Umhlahlandlela ophelele we-ClickFix ne-FileFix: ukuthi ziyini nokuthi ungayivikela kanjani ikhompyutha yakho

Yini okufanele uyenze uma usuvele uqedile umyalo?

Uma usuqaphele sekwephuzile futhi usuvele unamathisele ikhodi, ungesabi, kodwa thatha isinyathelo ngokushesha. Into yokuqala okufanele uyenze ukunqamula i-inthanethi (vala i-Wi-Fi noma ukhiphe ikhebula). Lokhu kubalulekile ngoba i-malware idinga ukuxhumana neseva yomhlaseli ukuze ithumele idatha yakho; ngokunqamula uxhumano, ukhawulela ukuphuma kwe-inthanethi.

  Izinqubomgomo zokufinyelela ifu: umhlahlandlela ophelele wamabhizinisi

Okulandelayo, landela lezi zinyathelo ngokuqinile:

  • Ungayiqali kabusha ikhompyutha yakho ngokushesha, njengoba amanye amagciwane ehlala isikhathi eside ngesikhathi sokuqalisa.
  • gijima a i-virus scan ephelele futhi kubuyekeziwe (ukuskena ungaxhunyiwe ku-inthanethi uma kungenzeka).
  • Hlanza isiphequluli sakho: sula i-cache, amakhukhi, bese ususa noma yikuphi isandiso esisolisayo ukuthi awuzifakanga wena.
  • Kusuka enye idivayisi evikelekileShintsha amaphasiwedi ama-akhawunti akho abalulekile (i-imeyili, ibhange, izinkundla zokuxhumana).
  • Vala konke izikhathi ezisebenzayo kuma-akhawunti akho, njengoba ukwebiwa kwamakhukhi kuvumela umhlaseli ukuthi angene noma ngabe ushintsha iphasiwedi yakho.

Indlela yokuvikela ukuphequlula kwakho kanye newebhusayithi yakho

Ukuze ugweme lezi zimanga, ithuluzi elingcono kakhulu ukuma isikhashana. Ungasheshi lapho kuvela ukuqinisekiswa okungalindelekile. Gcina uhlelo lwakho lokusebenza kanye nesofthiwe ye-antivirus kusesikhathini, futhi uma usebenzisa isiphequluli sesimanje, vumela zonke izivikelo kumawebhusayithi ayingozi.

Uma ungumnikazi wewebhusayithi ye-WordPress, ungakhohlwa izibuyekezo. Gcina ama-plugin akho nezindikimba zisesikhathini , sebenzisa ukuqinisekiswa kwezinto ezimbili (2FA) kwi-akhawunti yomlawuli, futhi usebenzise amathuluzi okuqapha afana ne-Wordfence ukuthola ukuthi othile ufake ikhodi esolisayo kumafayela akho. Khumbula ukuthi uma ufaka ama-plugins ambalwa angadingekile, indawo yakho yokuhlasela iba ncane.