Jump to content

সাহায্য:কম্প্রোমাইজড একাউন্ট

From Meta, a Wikimedia project coordination wiki
This page is a translated version of the page Help:Compromised accounts and the translation is 30% complete.
This page explains a general process to follow when dealing with accounts that may be compromised.

Compromised accounts are user accounts that have been maliciously taken over by someone other than the rightful owner. This is often achieved through a phishing attack, a weak password, or a security breach.

How to deal with accounts suspected to be compromised is not always clear, and will vary on a case-by-case basis depending on who first responds and who is around to take action. In general, the following provides a guide to the steps that can be taken.

ঘটনা অনুসন্ধান

The first step is to determine whether or not the account is actually compromised. If disruptive actions are being taken, then this step can be skipped because the first objective is to protect the wiki. But if the account is not vandalizing, then it can be useful to check through some of their past edits before suggesting that their account is compromised. Are they editing in places that they usually do? Do they have a history of making similar comments to the ones you suspect someone else of making?

Referring

Once you are reasonably certain that the account may be compromised, it is best to refer the case to someone who can take technical action to prevent disruption to the wiki and help return the account to its original owner. The following groups of people are useful to contact:

  • Stewards, who can lock the account to prevent the password/email from being changed, as well as stopping any immediate abuse. Stewards can also remove the advanced permissions of compromised accounts in an emergency, though this is usually not done if the account has been locked already.
  • WMF's Trust and Safety team can investigate further, by using CheckUser tools or contacting system administrators to check the account's login history.
  • Local CheckUsers, who can confirm if a different IP is being used to access the account.
  • Local administrators, who can block the account if it is taking disruptive actions. Please note that in such cases, a global lock is preferred, since it stops disruption to all projects where the account is active and preserves the user information.

Each group will end up contacting others during the process, either for confirmation or to perform local actions after the emergency has subsided. Advanced permissions may be removed for this portion of the case, if it is suspected that the agent(s) responsible for compromising the account are still trying to access it.

পুনরুদ্ধার

একবার একটি কম্প্রোমাইজ করা অ্যাকাউন্ট স্টুয়ার্ডদের দ্বারা লক হয়ে গেলে, মামলাটি সাধারণত আস্থা এবং নিরাপত্তা টিমের কাছে তদন্তের জন্য পাঠানো হয় এবং একবার অ্যাকাউন্টের সঠিক মালিকের সাথে যোগাযোগ করা হলে, অ্যাকাউন্টটি তাদের কাছে ফেরত দেয়।

ফলো-আপ

Once the account has been returned to the original owner, it will be up to the affected local communities to move forward with other measures to prevent damage to the wiki, which might include removal of advanced permissions and/or blocking the account.