Kwentekeni Ekwephulweni kwe-ASOS?

Nga-6 iMphala 2026, labasebentisa lu-app lwesitolo semfashini sase-Britain i-ASOS batfola sitfumelo etingcingweni tabo lesinesihloko lesitsi "ASOS HACKED", lesibhekiswe kusikhulu sekuvikela imininingwane nelicembu le-IT lenkampani: "Siyingene ngalokuphelele i-instance ye-Snowflake. Khulumani natsi, noma sitayivuta." Besinesixhumanisi lesiya esiteshini se-Telegram lesiphatfwa licembu leti tibita ngekutsi yi-Xuanye Group. I-ASOS yacinisekisa kutsi lesitfumelo besingakavunyelwa futsi yatsi imininingwane yemuntfu lesisekelo, lehlanganisa emagama nemininingwane yekuchumana, kungenteka kutsi ifinyelelwe ngumuntfu longakavunyelwa, kodvwa ayikholwa kutsi imininingwane yemakhadi ekukhokha noma emaphasiwedi ema-akhawunti atsintsekile. Nawune-akhawunti ye-ASOS, ungatsinti sixhumanisi, shintja liphasiwedi lakho nawulisebentisa nakuletinye tindzawo, futsi uwusole nome ngumuphi umlayeto lotsi uvela ku-ASOS emalangeni lalandzelako.

Loko I-ASOS Lesikucinisekisile, Nalokungakacinisekiswa

Sitatimende senkampani sachaza emaphuzu lamatsatfu:

  • Lapho kusuka khona: imisebenti lengakavunyelwa lehlanganisa tinkhundla tebantfu bangaphandle i-ASOS letisebentisako kuchumana nemakhasimende. Inkampani yashesha yavimbela kungena etinkhundleni tayo tetitfumelo futsi isebenta nebeluleki labangochwepheshe kanye netiphatsimandla letifanele.
  • Imininingwane lesengotini: emagama nemininingwane yekuchumana, kodvwa hhayi imininingwane yemakhadi ekukhokha noma emaphasiwedi, ngekwekuhlola kwayo kwanyalo.
  • Lusito: iwebhusayithi nelu-app kusebenta kahle njengenjwayelo. I-ASOS yacolisa kumakhasimende ngema-imeyili futsi yawacela kutsi angasinaki lesitfumelo futsi angachofoti sixhumanisi.

Loko lokungakavetwa: kutsi mangaki bantfu labatfola lesitfumelo, kutsi mangaki emarekhodi lokungenteka kutsi atsatfwa, nekutsi nguyiphi inkhundla leyasetjentiswa kusitfumela. I-Snowflake, inkhundla ye-cloud yekugcina nekuhlatiya imininingwane, yatsi luphenyo lwayo alutfolanga kwephulwa kwenkhundla yayo uqobo. Inkampani yetekuvikela i-Sophos yatsi lelicembu belingakaze likhulunywe ngalo ngaphambilini etinkhundleni temahacker noma kuletinye titeshi te-Telegram. Sikhungo Savelonkhe Sekuvikeleka kwe-Inthanethi sase-UK (NCSC) siyasita i-ASOS.

Ngakaletimali, emasheya e-ASOS ehla ngetulu kwa-14% ngesikhatsi sekuhwebelana ku-London Stock Exchange futsi avala ehle nga-9,56%. Inkampani yatsi inemshwalensi we-inthanethi lofaka ekhatsi kuvikelwa kwekuchubeka kwebhizinisi, nekutsi kusesheshe kakhulu kulinganisa nome ngumuphi umtselela ekuhwebeni. Kusesha kwa-"asos hacked" nako kwavela ekusesheni lokudvumile eSaudi Arabia ku-Google Trends, ngako loku kutsintsa nalabasebentisi balapha.

Yini Lokufanele Uyente Nyalo Nawune-akhawunti ye-ASOS

  • Ungatsinti sixhumanisi sesitfumelo futsi ungaxhumani nalesiteshi. Lena yincwadzi ye-ASOS uqobo.
  • Shintja liphasiwedi lakho ku-ASOS nakuyo yonkhe lenye iwebhusayithi lapho usebentisa lelifanako.
  • Vula kucinisekisa ngetinyatselo letimbili ku-imeyili yakho nakuma-app ebhange. I-NCSC yase-UK itsi ngulenye yetindlela letisebenta kahle kakhulu tekuvikela ema-akhawunti e-inthanethi.
  • Buka sitatimende sakho sebhange uma kukhona lokungajwayelekile.
  • Lindzela kuntjontjwa (phishing). Libito, inombolo yelucingo ne-imeyili kwenele kutsi sigebengu sibhale umlayeto lokholisako mayelana "nekubuyiselwa kwemali" noma "nekusetha kabusha liphasiwedi". Ngena ku-ASOS ngca ngewebhusayithi yayo noma ngelu-app, ungaze ungene ngesixhumanisi lositfole emlayetweni.

Kutfola lesitfumelo akusho kutsi lucingo lwakho lwephuliwe. Satfunyelwa etinhlelweni tenkampani, hhayi kudivayisi yakho.

Sifundvo Sekucala Setitolo: Sitfumelo Sakho Sifinyelela Kuwo Onkhe Emakhasimende

Incenye leyingoti kakhulu yalesehlakalo akusiyo imininingwane yodvwa. Bahlaseli basebentisa inkhundla yetitfumelo yesitolo uqobo kuze babeke lusongo lwabo esikrinini salo lonkhe likhasimende, baguculela ingcindzezi enkampanini ibe yinkinga yemphakatsi ngekhatsi kwema-awa. Bochwepheshe betekuvikela bakhombisa kutsi kutfumela sitfumelo se-push kubasebentisi be-app kudzinga kungena esistimini yetitfumelo, lehlukile enkhundleni yemininingwane bahlaseli labatsi bayifinyelele. Loko kusho kutsi tinkhundla takho tekutfumela imilayeto kumakhasimende, kusukela etitfumelweni te-app kuya ku-SMS, i-imeyili ne-WhatsApp, tidzinga kuvikelwa lokufanana nelekwe-database yakho:

  • Kucinisekisa ngetinyatselo letimbili lokuphoceleleko kuyo yonkhe i-akhawunti lekhona kutfumela, kuhlanganise nema-akhawunti ema-ejensi nebatsengisi bangaphandle.
  • Imvume lehlukile yekutsi "tfumela kuwo onkhe emakhasimende" lebanjwa bantfu lababambalwa kakhulu, kahle kakhulu ledzinga kuvunywa ngumuntfu wesibili.
  • Tikhiye te-API taletinkhundla tigcinwa endzaweni yekugcina timfihlo, hhayi ekhodini, tishintjwa njalo, futsi tichitjwa ngekushesha nakuhamba sisebenti noma nakuphela inkontileka ye-ejensi.
  • Secwayiso lesisheshako nome nini kutfunyelwa imilayeto leminyenti ngaphandle kweluhlelo lolujwayelekile.

Sifundvo Sesibili: Indlu Yemininingwane Ingawa Ngeliphasiwedi Linye Lelebiwe

Akukabi khona imininingwane lecinisekisiwe yekutsi bahlaseli bangena njani etinhlelweni te-ASOS. Kodvwa kukhona sehlakalo lesatiwako: nga-2024 i-Mandiant yalandzelela umkhankaso lobewuhlasela ema-akhawunti emakhasimende e-Snowflake, futsi i-Mandiant ne-Snowflake yatisa tinhlangano letilinganiselwa ku-165 lebetingaba sengotini. Imbangela bekungesiko kuba nesici kwalenkhundla. Bekungimininingwane yekungena leyebiwa yi-malware yekuntjontja imininingwane (infostealer) etinhlelweni lebetingasito te-Snowflake, leminye yayo isukela nga-2020, leyasetjentiswa kuma-akhawunti lebekangenako kucinisekisa ngetindlela letinyenti. Kutivikela akulukhuni:

  • Kucinisekisa ngetinyatselo letimbili kuwo onkhe umsebenzisi wenkhundla yakho yemininingwane, netikhiye esikhundleni semaphasiwedi kuma-akhawunti etinhlelo.
  • Kungena kukhawulelwe kuphela kumakheli enethiwekhi latiwako enkampani yakho.
  • Ungakopishi endlini yakho yekuhlatiya ngetulu kwaloko kuhlatiya lokukudzingako. Tinombolo tetingcingo nema-imeyili kungafihlwa noma kushintjaniswe ngema-token.
  • Tecwayiso tekukhishwa kwemininingwane lemikhulu nemibuto lengajwayelekile.

Sifundvo Sesitsatfu: Bhala Lisu Lekubhekana Netehlakalo Ngaphambi Kwesehlakalo

I-ASOS yakhipha sitatimende ngalo lelo langa, yacolisa kumakhasimende ngema-imeyili, futsi yaveta simo semshwalensi wayo. Loko akwentiwa ngekucabanga ngalesikhatsi ngelilanga lenkinga. ESaudi Arabia, umhlahlandlela wetinyatselo weSiphatsimandla seMininingwane neBuhlakani Lobentiwe saseSaudi (SDAIA) mayelana netehlakalo tekwephulwa kwemininingwane yemuntfu ufuna kutsi umphatsi wemininingwane atise sikhungo lesifanele ngekhatsi kwema-awa langu-72 emva kwekutsi atfole ngesehlakalo lesingalimata imininingwane noma bantfu labangabanikati bayo, nekutsi atise labanikati bemininingwane labatsintsekile ngaphandle kwekulibala nangabe balimele. Lungiselela kusenesikhatsi: ngubani lotsatsa sincumo, ngubani lokhuluma egameni lenkampani, umbhalo wemlayeto lotfunyelwa kumakhasimende, nekutsi ungativala njani tonkhe titeshi tekutfumela ngekhatsi kwemaminitsi. Kute utfole imininingwane, fundza umhlahlandlela wetfu ngeMtsetfo Wekuvikela Imininingwane Yemuntfu (PDPL).

Indlela Lesikwakha Ngayo Ku-Origami

Nasakhela emakhasimende etfu sitolo noma lu-app, setsatsa tinkhundla tetitfumelo nemilayeto njengencenye yendzawo lengahlaselwa, hhayi njengelithulusi lekumaketha lelisemaceleni: timvume tekutfumela letibanjwe ngekucinile, tikhiye letigcinwe ngaphandle kwekhodi, lirekhodi lalo lonkhe kutfumela, kanye nenkinobho yinye yekucisha titeshi tonkhe ngesikhatsi seluphutfuma. Nangabe sitolo sakho sesivele sisebenta, sicala ngekubuyeketa lokufishane: ngubani lokhona kutfumela imilayeto kumakhasimende akho lamuhla, imininingwane yawo ikopishwa iye kuphi, nekutsi yonkhe i-akhawunti inako yini kucinisekisa ngetinyatselo letimbili. Imibuto lelula, kodvwa timphendvulo tayo nato letehlukanisa sehlakalo lesilawulwe buthule nesitfumelo lesifika elucingweni lwalo lonkhe likhasimende. Fundza futsi tisekelo tekuvikeleka kwe-inthanethi kumabhizinisi lamancane nalamakhulu laphakatsi.

Imitfombo