{"id":45503,"date":"2024-12-13T09:13:51","date_gmt":"2024-12-13T02:13:51","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=45503"},"modified":"2024-12-19T09:14:36","modified_gmt":"2024-12-19T02:14:36","slug":"tin-tac-loi-dung-cong-cu-tro-choi-godot-de-lay-nhiem-ma-doc-da-nen-tang","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/tin-tac-loi-dung-cong-cu-tro-choi-godot-de-lay-nhiem-ma-doc-da-nen-tang\/","title":{"rendered":"Tin t\u1eb7c l\u1ee3i d\u1ee5ng c\u00f4ng c\u1ee5 tr\u00f2 ch\u01a1i Godot \u0111\u1ec3 l\u00e2y nhi\u1ec5m m\u00e3 \u0111\u1ed9c \u0111a n\u1ec1n t\u1ea3ng"},"content":{"rendered":"

C\u00e1c tin t\u1eb7c \u0111\u00e3 s\u1eed d\u1ee5ng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i GodLoader m\u1edbi, khai th\u00e1c kh\u1ea3 n\u0103ng c\u1ee7a c\u00f4ng c\u1ee5 tr\u00f2 ch\u01a1i Godot \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i \u0111\u1ec3 tr\u1ed1n tr\u00e1nh ph\u00e1t hi\u1ec7n v\u00e0 l\u00e2y nhi\u1ec5m h\u01a1n 17.000 h\u1ec7 th\u1ed1ng ch\u1ec9 trong v\u00e0i th\u00e1ng, nh\u1eb1m \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u c\u00e1 nh\u00e2n v\u00e0 ti\u1ec1n \u0111i\u1ec7n t\u1eed tr\u00ean m\u00e1y t\u00ednh m\u1ee5c ti\u00eau.<\/strong><\/p>\n

\n
\"Tin<\/a><\/div>\n<\/div>\n

Theo ph\u00e1t hi\u1ec7n c\u1ee7a h\u00e3ng b\u1ea3o m\u1eadt Check Point (Israel)\u00a0trong qu\u00e1 tr\u00ecnh \u0111i\u1ec1u tra c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng, c\u00e1c t\u00e1c nh\u00e2n \u0111e d\u1ecda c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng tr\u00ecnh t\u1ea3i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i GodLoader \u0111\u1ec3 nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o ng\u01b0\u1eddi d\u00f9ng Godot Gaming Engine, m\u1ed9t n\u1ec1n t\u1ea3ng ph\u00e1t tri\u1ec3n\u00a0tr\u00f2 ch\u01a1i<\/a>\u00a0ngu\u1ed3n m\u1edf \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e2y d\u1ef1ng c\u1ea3 tr\u00f2 ch\u01a1i 2D v\u00e0 3D tr\u00ean Windows, macOS,\u00a0Linux<\/a>, Android, iOS, HTML5 v\u00e0 c\u00e1c n\u1ec1n t\u1ea3ng kh\u00e1c.<\/p>\n

B\u00ean c\u1ea1nh \u0111\u00f3, GodLoader c\u0169ng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 t\u1eadn d\u1ee5ng t\u00ednh linh ho\u1ea1t c\u1ee7a Godot v\u00e0 kh\u1ea3 n\u0103ng c\u1ee7a GDScript (ng\u00f4n ng\u1eef l\u1eadp tr\u00ecnh gi\u1ed1ng Python c\u1ee7a Godot) \u0111\u1ec3 th\u1ef1c thi m\u00e3 t\u00f9y \u00fd v\u00e0 v\u01b0\u1ee3t qua c\u00e1c h\u1ec7 th\u1ed1ng ph\u00e1t hi\u1ec7n b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng c\u00e1c t\u1ec7p [.]pck c\u1ee7a c\u00f4ng c\u1ee5 tr\u00f2 ch\u01a1i, \u0111\u00f3ng g\u00f3i c\u00e1c t\u00e0i s\u1ea3n tr\u00f2 ch\u01a1i, \u0111\u1ec3 nh\u00fang c\u00e1c t\u1eadp l\u1ec7nh c\u00f3 h\u1ea1i.<\/p>\n

Sau khi t\u1ea3i, c\u00e1c t\u1ec7p \u0111\u01b0\u1ee3c t\u1ea1o \u0111\u1ed9c h\u1ea1i s\u1ebd k\u00edch ho\u1ea1t m\u00e3 \u0111\u1ed9c tr\u00ean thi\u1ebft b\u1ecb c\u1ee7a n\u1ea1n nh\u00e2n, cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp ho\u1eb7c t\u1ea3i xu\u1ed1ng c\u00e1c payload b\u1ed5 sung, bao g\u1ed3m c\u1ea3 ph\u1ea7n m\u1ec1m \u0111\u00e1nh c\u1eafp th\u00f4ng tin RedLine v\u00e0 tr\u00ecnh khai th\u00e1c\u00a0ti\u1ec1n \u0111i\u1ec7n t\u1eed<\/a>\u00a0XMRig. C\u1ea5u h\u00ecnh c\u1ee7a ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i n\u00e0y \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef tr\u00ean t\u1ec7p Pastebin ri\u00eang \u0111\u01b0\u1ee3c t\u1ea3i l\u00ean v\u00e0o th\u00e1ng 5\/2024, \u0111\u00e3 \u0111\u01b0\u1ee3c truy c\u1eadp 206.913 l\u1ea7n trong su\u1ed1t chi\u1ebfn d\u1ecbch.<\/p>\n

RedLine l\u00e0 ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i tinh vi c\u00f3 kh\u1ea3 n\u0103ng \u0111\u00e1nh c\u1eafp m\u1eadt kh\u1ea9u, th\u00f4ng tin chi ti\u1ebft v\u1ec1 v\u00ed ti\u1ec1n \u0111i\u1ec7n t\u1eed v\u00e0 c\u00e1c d\u1eef li\u1ec7u kh\u00e1c \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef trong tr\u00ecnh duy\u1ec7t, d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m, cookie phi\u00ean,… Trong khi \u0111\u00f3, XMRig bi\u1ebfn thi\u1ebft b\u1ecb b\u1ecb l\u00e2y nhi\u1ec5m th\u00e0nh m\u1ed9t c\u00f4ng c\u1ee5 khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed, t\u1ea1o ra c\u00e1c m\u00e3 th\u00f4ng b\u00e1o cho k\u1ebb t\u1ea5n c\u00f4ng.<\/p>\n

\u201cK\u1ec3 t\u1eeb ng\u00e0y 29\/6\/2024, t\u1ed9i ph\u1ea1m m\u1ea1ng \u0111\u00e3 l\u1ee3i d\u1ee5ng Godot Engine \u0111\u1ec3 th\u1ef1c thi m\u00e3 GDScript \u0111\u01b0\u1ee3c t\u1ea1o ra \u0111\u1ec3 k\u00edch ho\u1ea1t c\u00e1c l\u1ec7nh \u0111\u1ed9c h\u1ea1i v\u00e0 ph\u00e1t t\u00e1n ph\u1ea7n m\u00e3 \u0111\u1ed9c. K\u1ef9 thu\u1eadt n\u00e0y h\u1ea7u nh\u01b0 ch\u01b0a b\u1ecb c\u00e1c c\u00f4ng c\u1ee5 antivirus tr\u00ean VirusTotal ph\u00e1t hi\u1ec7n,\u00a0n\u00ean\u00a0c\u00f3 kh\u1ea3 n\u0103ng \u0111\u00e3\u00a0l\u00e2y nhi\u1ec5m cho h\u01a1n 17.000 m\u00e1y ch\u1ec9 trong v\u00e0i th\u00e1ng\u201d, Check Point cho bi\u1ebft.<\/p>\n

Godot c\u00f3 m\u1ed9t c\u1ed9ng \u0111\u1ed3ng c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n n\u0103ng \u0111\u1ed9ng v\u00e0 ng\u00e0y c\u00e0ng l\u1edbn m\u1ea1nh, nh\u1eefng ng\u01b0\u1eddi coi tr\u1ecdng b\u1ea3n ch\u1ea5t m\u00e3 ngu\u1ed3n m\u1edf v\u00e0 kh\u1ea3 n\u0103ng m\u1ea1nh m\u1ebd c\u1ee7a n\u00f3. H\u01a1n 2.700 nh\u00e0 ph\u00e1t tri\u1ec3n \u0111\u00e3 \u0111\u00f3ng g\u00f3p v\u00e0o c\u00f4ng c\u1ee5 ch\u01a1i game Godot, trong khi tr\u00ean c\u00e1c n\u1ec1n t\u1ea3ng nh\u01b0\u00a0Discord<\/a>, YouTube v\u00e0 c\u00e1c n\u1ec1n t\u1ea3ng truy\u1ec1n th\u00f4ng x\u00e3 h\u1ed9i kh\u00e1c, c\u00f4ng c\u1ee5 Godot c\u00f3 kho\u1ea3ng 80.000 ng\u01b0\u1eddi theo d\u00f5i, nh\u1eefng ng\u01b0\u1eddi lu\u00f4n c\u1eadp nh\u1eadt tin t\u1ee9c m\u1edbi nh\u1ea5t.<\/p>\n

\n
\"Tin<\/a><\/div>\n<\/div>\n

Chu\u1ed7i l\u00e2y nhi\u1ec5m<\/em><\/p>\n

Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 ph\u00e1t t\u00e1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i GodLoader th\u00f4ng qua Stargazers Ghost Network, m\u1ed9t ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i ph\u00e2n ph\u1ed1i d\u1ecbch v\u1ee5 (DaaS) nh\u1eb1m che gi\u1ea5u ho\u1ea1t \u0111\u1ed9ng c\u1ee7a n\u00f3 b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng\u00a0GitHub<\/a>.<\/p>\n

T\u1eeb th\u00e1ng 9\/2024 \u0111\u1ebfn th\u00e1ng 10\/2024, c\u00e1c tin t\u1eb7c \u0111\u00e3 s\u1eed d\u1ee5ng h\u01a1n 200 kho l\u01b0u tr\u1eef do h\u01a1n 225 t\u00e0i kho\u1ea3n Stargazer Ghost ki\u1ec3m so\u00e1t \u0111\u1ec3 tri\u1ec3n khai ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u00e0o h\u1ec7 th\u1ed1ng m\u1ee5c ti\u00eau, l\u1ee3i d\u1ee5ng l\u00f2ng tin c\u1ee7a n\u1ea1n nh\u00e2n ti\u1ec1m n\u0103ng v\u00e0o c\u00e1c n\u1ec1n t\u1ea3ng ngu\u1ed3n m\u1edf v\u00e0 c\u00e1c kho l\u01b0u tr\u1eef ph\u1ea7n m\u1ec1m v\u1edbi v\u1ecf b\u1ecdc h\u1ee3p ph\u00e1p.<\/p>\n

Trong su\u1ed1t chi\u1ebfn d\u1ecbch, Check Point \u0111\u00e3 ph\u00e1t hi\u1ec7n 4 \u0111\u1ee3t t\u1ea5n c\u00f4ng ri\u00eang bi\u1ec7t nh\u1eb1m v\u00e0o c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n v\u00e0 game th\u1ee7 t\u1eeb ng\u00e0y 12\/9 \u0111\u1ebfn ng\u00e0y 3\/10, d\u1ee5 d\u1ed7 h\u1ecd t\u1ea3i xu\u1ed1ng c\u00e1c c\u00f4ng c\u1ee5 v\u00e0 tr\u00f2 ch\u01a1i b\u1ecb nhi\u1ec5m m\u00e3 \u0111\u1ed9c.<\/p>\n

Trong khi c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt ch\u1ec9 ph\u00e1t hi\u1ec7n ra c\u00e1c m\u1eabu GodLoader nh\u1eafm v\u00e0o h\u1ec7 th\u1ed1ng\u00a0Windows<\/a>, h\u1ecd c\u0169ng \u0111\u00e3 ph\u00e1t tri\u1ec3n m\u00e3 khai th\u00e1c PoC GDScript cho th\u1ea5y ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i n\u00e0y c\u00f3 th\u1ec3 d\u1ec5 d\u00e0ng \u0111\u01b0\u1ee3c \u0111i\u1ec1u ch\u1ec9nh \u0111\u1ec3 t\u1ea5n c\u00f4ng h\u1ec7 th\u1ed1ng Linux v\u00e0\u00a0macOS<\/a>\u00a0nh\u01b0 th\u1ebf n\u00e0o.<\/p>\n

Stargazer Goblin, t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u1ee9ng sau n\u1ec1n t\u1ea3ng DaaS Stargazers Ghost Network \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y, l\u1ea7n \u0111\u1ea7u ti\u00ean b\u1ecb Check Point ph\u00e1t hi\u1ec7n khi \u0111ang qu\u1ea3ng b\u00e1 d\u1ecbch v\u1ee5 ph\u00e2n ph\u1ed1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i n\u00e0y tr\u00ean dark web v\u00e0o th\u00e1ng 6\/2023. Tuy nhi\u00ean, c\u00f3 kh\u1ea3 n\u0103ng n\u00f3 \u0111\u00e3 ho\u1ea1t \u0111\u1ed9ng t\u1eeb \u00edt nh\u1ea5t th\u00e1ng 8\/2022, ki\u1ebfm \u0111\u01b0\u1ee3c h\u01a1n 100.000 USD k\u1ec3 t\u1eeb khi d\u1ecbch v\u1ee5 n\u00e0y ra m\u1eaft.<\/p>\n

Stargazers Ghost Network s\u1eed d\u1ee5ng h\u01a1n 3.000 t\u00e0i kho\u1ea3n \u201cma\u201d tr\u00ean GitHub \u0111\u1ec3 t\u1ea1o ra m\u1ea1ng l\u01b0\u1edbi g\u1ed3m h\u00e0ng tr\u0103m kho l\u01b0u tr\u1eef c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 ph\u00e2n ph\u1ed1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i (ch\u1ee7 y\u1ebfu l\u00e0 c\u00e1c ph\u1ea7n m\u1ec1m \u0111\u00e1nh c\u1eafp th\u00f4ng tin nh\u01b0 RedLine,\u00a0Lumma Stealer<\/a>, Rhadamanthys, RisePro v\u00e0 Atlantida Stealer) v\u00e0 sao ch\u00e9p, ph\u00e2n nh\u00e1nh v\u00e0 \u0111\u0103ng k\u00fd c\u00e1c kho l\u01b0u tr\u1eef \u0111\u1ed9c h\u1ea1i n\u00e0y \u0111\u1ec3 \u0111\u01b0a ch\u00fang l\u00ean ph\u1ea7n th\u1ecbnh h\u00e0nh c\u1ee7a GitHub v\u00e0 t\u0103ng t\u00ednh h\u1ee3p ph\u00e1p.<\/p>\n

\n
Ngu\u1ed3n: https:\/\/antoanthongtin.vn\/<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

C\u00e1c tin t\u1eb7c \u0111\u00e3 s\u1eed d\u1ee5ng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i GodLoader m\u1edbi, khai th\u00e1c kh\u1ea3 n\u0103ng c\u1ee7a c\u00f4ng c\u1ee5 tr\u00f2 ch\u01a1i Godot \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i \u0111\u1ec3 tr\u1ed1n tr\u00e1nh ph\u00e1t hi\u1ec7n v\u00e0 l\u00e2y nhi\u1ec5m h\u01a1n 17.000 h\u1ec7 th\u1ed1ng ch\u1ec9 trong v\u00e0i th\u00e1ng, nh\u1eb1m \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u c\u00e1 nh\u00e2n v\u00e0 ti\u1ec1n \u0111i\u1ec7n t\u1eed tr\u00ean […]<\/p>\n","protected":false},"author":1,"featured_media":45504,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[24,35],"tags":[],"class_list":["post-45503","post","type-post","status-publish","format-standard","has-post-thumbnail","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/45503","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=45503"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/45503\/revisions"}],"predecessor-version":[{"id":45505,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/45503\/revisions\/45505"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/45504"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=45503"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=45503"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=45503"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}