Kurwiswa kuburikidza neQR makodhi: heano matipi kubva kuCisco Talos

Kangani patakashandisa kodhi yeQR kusaina tsamba yetsamba, kuverenga hurongwa hwemubhaisikopo kana kuti zvimwe kungowana menyu yeresitorendi?

Kubva pakatanga denda, mikana yekushandisa maQR makodhi yakawedzera, nekuda kwazvinogoneka kuwana ruzivo pasina kubata kwepanyama; asi ndizvo chaizvo nekuda kwekupararira uku kuti matsotsi epa cyber akawana imwezve, inoshanda uye inotyisa chishandiso kutanga kurwisa kwavo.

Inofungidzirwa nguva yekuverenga: 5 minuti

Maererano neyokupedzisira Cisco Talos chirevo chekota, sangano guru repasi rose rehungwaru rakazvipira kune cybersecurity, rakarekodha a Kuwedzera kwakanyanya mukurwiswa kwe phishing kuburikidza neQR kodhi yekuongorora. Cisco Talos aifanirwa kubata mushandirapamwe wekunyengedza vanhu kuti vatarise hutsinye maQR makodhi akaiswa mumaemail, zvichitungamira mukusaziva kuuraya malware.

Imwe mhando yekurwisa ndeye kutumira kwe pfumo-phishing emails kumunhu kana sangano, maemail ane QR macode ainongedzera kumanyepo eMicrosoft Office 365 mapeji ekupinda kuitira kuba zvitupa zvemushandisi. Izvo zvakakosha kupfuura nakare kose kusimbisa kuti QR kodhi kurwiswa kune njodzi zvakanyanya, sezvo vachishandisa nharembozha yemunhu anenge abatwa, iyo kazhinji ine dziviriro shoma, sevheji yekurwisa.

QR kodhi kurwisa kunoshanda sei?

Kurwiswa kwechinyakare kwephishing kunosanganisira uyo akabatwa achivhura chinongedzo kana chinongedzo kuitira kuti amhare pane peji inodzorwa neanorwisa. Anowanzo mameseji anoitirwa vanhu vanoziva kushandisa email uye vanowanzovhura zvakanamirwa kana kudzvanya pane chinongedzo. Panyaya yekurwiswa kweQR kodhi, mubiki anoisa iyo kodhi mumuviri weemail nechinangwa chekuti iongororwe kuburikidza nechishandiso kana kuburikidza nekamera yenharembozha. Paunenge uchinge wadzvanya pane yakashata chinongedzo, peji rekupinda rakagadzirirwa chaizvo kuba zvitupa rinovhura, kana chinongedzo chinoisa malware pane chako kifaa.

Nei vane ngozi kudaro?

Mazhinji makomputa ebhizinesi uye zvishandiso zvinouya neakavakirwa-mukati ekuchengetedza maturusi akagadzirirwa kuona phishing uye kudzivirira vashandisi kubva kuvhura zvakashata zvinongedzo. Nekudaro, kana mushandisi ashandisa mudziyo wega, aya maturusi ekudzivirira haachashanda. Izvi zvinodaro nekuti kuchengetedzwa kwemakambani uye ekutarisa masisitimu ane kushomeka kwekutonga uye kuoneka pamusoro pemidziyo yemunhu. Pamusoro pezvo, hadzisi dzese email kuchengetedza mhinduro dzinogona kuona dzakaipa QR macode.

Asi pane zvimwe. Nekusimuka kwekushanda kure, vashandi vazhinji uye vazhinji vari kuwana ruzivo rwekambani kuburikidza nenharembozha. Zvinoenderana neazvino Not (Cyber) Yakachengeteka Yebasa 2023 chirevo, ongororo yehuwandu yakaitwa nekambani yecybersecurity Agency, iyo 97% yevakabvunzwa vanowana maakaundi ebasa vachishandisa midziyo yavo.

Unozvidzivirira sei 

Ecco mamwe mazano kubva kuCisco Talos kudzivirira kubva kuQR kodhi-yakavakirwa phishing kurwisa:

• Tumira nharembozha manejimendi (MDM) chikuva kana nhare yekuchengetedza chishandiso seCisco Umbrella pane ese asina kutarisirwa nharembozha inokwanisa kuwana ruzivo rwemakambani. Cisco Umbrella DNS-level chengetedzo inowanikwa kune Android uye iOS munhu midziyo.
• Mhinduro yekuchengetedza yakagadziridzwa yakanangana neemail, senge Cisco Yakachengeteka Email, inogona kuona idzi mhando dzekurwiswa. Cisco Yakachengeteka Imeyili nguva pfupi yadarika yakawedzera hutsva hwekuongorora kodhi yeQR, uko maURL anotorwa nekuongororwa senge chero imwe URL inosanganisirwa muemail.
• Kudzidziswa kwemushandisi kwakakosha kudzivirira QR kodhi-yakavakirwa phishing kurwiswa. Makambani anofanirwa kuve nechokwadi chekuti vashandi vese vakadzidziswa nezve njodzi yekurwiswa kwe phishing uye kushandiswa kuri kukura kweQR makodhi:
  
  
  • Macode akashata eQR anowanzo shandisa mufananidzo wakashata kana kuti ungaite kunge wakasviba zvishoma.
  • QR kodhi scanners inowanzopa tarisiro yekubatanidza iyo kodhi inonongedza, zvakakosha kuti utarise uye unongoshanyira akavimbika mapeji ewebhu ane anozivikanwa maURL.
  • Phishing maemail kazhinji ane typos kana girama zvikanganiso.
    
• Kushandisa multi-factor authentication maturusi, akadai seCisco Duo, anogona kudzivirira kubiwa kwezvitupa, izvo zvinowanzova poindi yekupinda mumabhizinesi masisitimu.

Related Readings

• Kambani yeMilanese Zenyth inotanga "GP-Check", yekutanga otomatiki Green Pass (QR) yekuverenga system isina anoshanda.
• Yanluowang Gang ransomware yakatyora iyo Cisco corporate network
• Cybersecurity: njodzi uye mhinduro kuchengetedza yako eCommerce
• Kurwiswa kweCyber ​​​​: chii, kuti inoshanda sei, chinangwa uye maitiro ekudzivirira: Phishing uye Spear Phishing
• KnowBe4 phishing test results inoratidza maitiro ekutumira maemail ane chekuita nebhizinesi

BlogInnovazione.it