{"id":46167,"date":"2025-05-30T15:41:40","date_gmt":"2025-05-30T08:41:40","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46167"},"modified":"2025-06-03T15:41:59","modified_gmt":"2025-06-03T08:41:59","slug":"whitehat-team-administrators-thanh-vien-bqt-09-04-2020-99-822-bai-viet-chien-dich-lua-dao-moi-nham-vao-dien-thoai-nhan-vien-de-chiem-doat-tien-luong","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/whitehat-team-administrators-thanh-vien-bqt-09-04-2020-99-822-bai-viet-chien-dich-lua-dao-moi-nham-vao-dien-thoai-nhan-vien-de-chiem-doat-tien-luong\/","title":{"rendered":"WhiteHat Team Administrators Th\u00e0nh vi\u00ean BQT 09\/04\/2020 99 822 b\u00e0i vi\u1ebft Chi\u1ebfn d\u1ecbch l\u1eeba \u0111\u1ea3o m\u1edbi: Nh\u1eafm v\u00e0o \u0111i\u1ec7n tho\u1ea1i nh\u00e2n vi\u00ean \u0111\u1ec3 chi\u1ebfm \u0111o\u1ea1t ti\u1ec1n l\u01b0\u01a1ng"},"content":{"rendered":"

\u0110\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp, truy c\u1eadp v\u00e0o c\u1ed5ng payroll c\u1ee7a doanh nghi\u1ec7p v\u00e0 chuy\u1ec3n ti\u1ec1n l\u01b0\u01a1ng c\u1ee7a nh\u00e2n vi\u00ean v\u1ec1 t\u00e0i kho\u1ea3n do tin t\u1eb7c ki\u1ec3m so\u00e1t l\u00e0 nh\u1eefng g\u00ec m\u00e0 chi\u1ebfn d\u1ecbch n\u00e0y khi\u1ebfn nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng hoang mang.<\/b><\/p>\n

C\u1ed5ng payroll (hay c\u00f2n g\u1ecdi l\u00e0 c\u1ed5ng thanh to\u00e1n l\u01b0\u01a1ng, c\u1ed5ng qu\u1ea3n l\u00fd l\u01b0\u01a1ng) l\u00e0 m\u1ed9t h\u1ec7 th\u1ed1ng tr\u1ef1c tuy\u1ebfn cho ph\u00e9p nh\u00e2n vi\u00ean v\u00e0 b\u1ed9 ph\u1eadn nh\u00e2n s\u1ef1 c\u1ee7a m\u1ed9t t\u1ed5 ch\u1ee9c qu\u1ea3n l\u00fd v\u00e0 x\u1eed l\u00fd th\u00f4ng tin li\u00ean quan \u0111\u1ebfn ti\u1ec1n l\u01b0\u01a1ng. Trong \u0111\u00f3, Workday, ADP, BambooHR, Paycom l\u00e0 c\u00e1c n\u1ec1n t\u1ea3ng payroll \u0111\u01b0\u1ee3c nhi\u1ec1u doanh nghi\u1ec7p s\u1eed d\u1ee5ng to\u00e0n c\u1ea7u. \u1ede Vi\u1ec7t Nam, c\u00e1c c\u00f4ng ty l\u1edbn c\u0169ng th\u01b0\u1eddng c\u00f3 h\u1ec7 th\u1ed1ng nh\u00e2n s\u1ef1 n\u1ed9i b\u1ed9 t\u00edch h\u1ee3p ch\u1ee9c n\u0103ng qu\u1ea3n l\u00fd l\u01b0\u01a1ng t\u01b0\u01a1ng t\u1ef1.<\/p>\n

\n
\"1748342150552.png\"<\/div>\n

\u200b<\/p>\n<\/div>\n

Th\u1ee7 \u0111o\u1ea1n m\u1edbi: Gi\u1ea3 m\u1ea1o c\u1ed5ng thanh to\u00e1n l\u01b0\u01a1ng th\u00f4ng qua c\u00f4ng c\u1ee5 t\u00ecm ki\u1ebfm\u200b<\/h2>\n

M\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng tinh vi v\u1eeba \u0111\u01b0\u1ee3c c\u00e1c chuy\u00ean gia t\u1ea1i c\u00f4ng ty ReliaQuest ph\u00e1t hi\u1ec7n, trong \u0111\u00f3 tin t\u1eb7c s\u1eed d\u1ee5ng k\u1ef9 thu\u1eadt SEO poisoning t\u1ee9c l\u00e0 l\u00e0m gi\u1ea3 c\u00e1c k\u1ebft qu\u1ea3 t\u00ecm ki\u1ebfm tr\u00ean Google \u0111\u1ec3 l\u1eeba nh\u00e2n vi\u00ean truy c\u1eadp v\u00e0o trang web gi\u1ea3 m\u1ea1o, t\u1eeb \u0111\u00f3 chi\u1ebfm \u0111o\u1ea1t ti\u1ec1n l\u01b0\u01a1ng.<\/p>\n

Chi\u1ebfn d\u1ecbch \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n v\u00e0o th\u00e1ng 5\/2025 li\u00ean quan \u0111\u1ebfn m\u1ed9t c\u00f4ng ty trong ng\u00e0nh s\u1ea3n xu\u1ea5t. Tin t\u1eb7c \u0111\u00e3 t\u1ea1o ra trang \u0111\u0103ng nh\u1eadp gi\u1ea3 c\u00f3 giao di\u1ec7n gi\u1ed1ng c\u1ed5ng thanh to\u00e1n l\u01b0\u01a1ng c\u1ee7a c\u00f4ng ty, r\u1ed3i \u0111\u01b0a l\u00ean top k\u1ebft qu\u1ea3 t\u00ecm ki\u1ebfm Google nh\u1edd qu\u1ea3ng c\u00e1o tr\u1ea3 ph\u00ed. Khi nh\u00e2n vi\u00ean t\u00ecm ki\u1ebfm c\u1ed5ng thanh to\u00e1n l\u01b0\u01a1ng v\u00e0 b\u1ea5m nh\u1ea7m v\u00e0o li\u00ean k\u1ebft gi\u1ea3, h\u1ecd s\u1ebd \u0111\u01b0\u1ee3c chuy\u1ec3n qua m\u1ed9t trang trung gian r\u1ed3i t\u1edbi trang l\u1eeba \u0111\u1ea3o c\u00f3 giao di\u1ec7n gi\u1ed1ng Microsoft.<\/p>\n

\u0110\u1eb7c bi\u1ec7t, n\u1ea1n nh\u00e2n th\u01b0\u1eddng truy c\u1eadp t\u1eeb \u0111i\u1ec7n tho\u1ea1i c\u00e1 nh\u00e2n, v\u1ed1n kh\u00f4ng c\u00f3 l\u1edbp b\u1ea3o v\u1ec7 ch\u1eb7t ch\u1ebd nh\u01b0 m\u00e1y t\u00ednh c\u00f4ng ty. \u0110i\u1ec1u n\u00e0y gi\u00fap tin t\u1eb7c d\u1ec5 d\u00e0ng l\u1ea5y \u0111\u01b0\u1ee3c th\u00f4ng tin \u0111\u0103ng nh\u1eadp m\u00e0 kh\u00f4ng b\u1ecb ph\u00e1t hi\u1ec7n. Sau khi c\u00f3 th\u00f4ng tin, ch\u00fang v\u00e0o th\u1eb3ng h\u1ec7 th\u1ed1ng thanh to\u00e1n l\u01b0\u01a1ng n\u1ed9i b\u1ed9, thay \u0111\u1ed5i th\u00f4ng tin t\u00e0i kho\u1ea3n ng\u00e2n h\u00e0ng v\u00e0 chuy\u1ec3n ti\u1ec1n l\u01b0\u01a1ng v\u00e0o t\u00e0i kho\u1ea3n ri\u00eang c\u1ee7a ch\u00fang.<\/p>\n

M\u1ed9t \u0111i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd kh\u00e1c l\u00e0 tin t\u1eb7c s\u1eed d\u1ee5ng c\u00e1c thi\u1ebft b\u1ecb router t\u1ea1i nh\u00e0 ho\u1eb7c m\u1ea1ng di \u0111\u1ed9ng \u0111\u00e3 b\u1ecb x\u00e2m nh\u1eadp \u0111\u1ec3 che gi\u1ea5u danh t\u00ednh, khi\u1ebfn c\u00e1c h\u1ec7 th\u1ed1ng gi\u00e1m s\u00e1t kh\u00f3 ph\u00e1t hi\u1ec7n v\u00ec t\u01b0\u1edfng l\u00e0 nh\u00e2n vi\u00ean \u0111ang \u0111\u0103ng nh\u1eadp t\u1eeb v\u1ecb tr\u00ed b\u00ecnh th\u01b0\u1eddng.<\/p>\n

M\u1eb7c d\u00f9 ch\u01b0a x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c nh\u00f3m \u0111\u1ee9ng sau, nh\u01b0ng c\u00e1c chuy\u00ean gia cho bi\u1ebft \u0111\u00e2y l\u00e0 m\u1ed9t ph\u1ea7n trong chu\u1ed7i chi\u1ebfn d\u1ecbch c\u00f3 t\u1ed5 ch\u1ee9c v\u00ec t\u1eebng c\u00f3 hai v\u1ee5 vi\u1ec7c t\u01b0\u01a1ng t\u1ef1 di\u1ec5n ra cu\u1ed1i n\u0103m 2024.<\/p>\n

\n
\"1748341394786.png\"<\/div>\n<\/div>\n

K\u1ebft h\u1ee3p nhi\u1ec1u k\u1ef9 thu\u1eadt che gi\u1ea5u v\u00e0 n\u00e9 tr\u00e1nh b\u1ea3o m\u1eadt\u200b<\/h2>\n

Theo ph\u00e2n t\u00edch c\u1ee7a c\u00e1c chuy\u00ean gia, chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng di\u1ec5n ra theo c\u00e1c b\u01b0\u1edbc ch\u00ednh:<\/p>\n

    \n
  • Nh\u1eafm v\u00e0o thi\u1ebft b\u1ecb di \u0111\u1ed9ng c\u00e1 nh\u00e2n c\u1ee7a nh\u00e2n vi\u00ean – n\u01a1i th\u01b0\u1eddng thi\u1ebfu c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt doanh nghi\u1ec7p.<\/li>\n
  • Gi\u1ea3 m\u1ea1o giao di\u1ec7n \u0111\u0103ng nh\u1eadp Microsoft th\u00f4ng qua trang trung gian WordPress \u0111\u1ec3 thu th\u1eadp th\u00f4ng tin.<\/li>\n
  • S\u1eed d\u1ee5ng API \u0111\u1ea9y th\u00f4ng b\u00e1o (Push Notification) \u0111\u1ec3 hacker nh\u1eadn \u0111\u01b0\u1ee3c th\u00f4ng tin \u0111\u0103ng nh\u1eadp ngay khi ng\u01b0\u1eddi d\u00f9ng nh\u1eadp v\u00e0o.<\/li>\n
  • \u1ea8n danh IP b\u1eb1ng c\u00e1ch l\u1ee3i d\u1ee5ng router gia \u0111\u00ecnh b\u1ecb x\u00e2m nh\u1eadp (nh\u01b0 ASUS, Pakedge), ng\u1ee5y trang th\u00e0nh truy c\u1eadp t\u1eeb \u0111\u1ecba ch\u1ec9 IP d\u00e2n c\u01b0 nh\u1eb1m tr\u00e1nh b\u1ecb ph\u00e1t hi\u1ec7n.<\/li>\n<\/ul>\n

    C\u00e1c router n\u00e0y c\u00f3 th\u1ec3 \u0111\u00e3 b\u1ecb t\u1ea5n c\u00f4ng qua l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt, t\u00e0i kho\u1ea3n m\u1eb7c \u0111\u1ecbnh ho\u1eb7c c\u1ea5u h\u00ecnh sai, sau \u0111\u00f3 b\u1ecb bi\u1ebfn th\u00e0nh proxy botnet \u0111\u1ec3 thu\u00ea cho c\u00e1c chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng.<\/p>\n

    V\u00ec sao t\u1ea5n c\u00f4ng tr\u00ean di \u0111\u1ed9ng hi\u1ec7u qu\u1ea3 h\u01a1n?\u200b<\/h2>\n

    Vi\u1ec7c nh\u1eafm v\u00e0o \u0111i\u1ec7n tho\u1ea1i c\u00e1 nh\u00e2n cho ph\u00e9p tin t\u1eb7c:<\/p>\n

      \n
    • Tr\u00e1nh c\u00e1c bi\u1ec7n ph\u00e1p gi\u00e1m s\u00e1t v\u00e0 ph\u00e1t hi\u1ec7n tr\u00ean h\u1ec7 th\u1ed1ng doanh nghi\u1ec7p.<\/li>\n
    • H\u1ea1n ch\u1ebf kh\u1ea3 n\u0103ng \u0111i\u1ec1u tra v\u00e0 thu th\u1eadp b\u1eb1ng ch\u1ee9ng, v\u00ec c\u00e1c thi\u1ebft b\u1ecb n\u00e0y th\u01b0\u1eddng kh\u00f4ng \u0111\u01b0\u1ee3c ghi log chi ti\u1ebft nh\u01b0 m\u00e1y t\u00ednh c\u00f4ng ty.<\/li>\n
    • T\u0103ng t\u1ef7 l\u1ec7 th\u00e0nh c\u00f4ng trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng phishing, nh\u1edd giao di\u1ec7n nh\u1ecf v\u00e0 \u00edt kh\u1ea3 n\u0103ng x\u00e1c minh t\u00ednh ch\u00ednh ch\u1ee7 c\u1ee7a trang web.<\/li>\n<\/ul>\n

      C\u00e1c chi\u1ebfn d\u1ecbch phishing kh\u00e1c \u0111ang b\u00f9ng ph\u00e1t\u200b<\/h2>\n

      Song song v\u1edbi chi\u1ebfn d\u1ecbch tr\u00ean, nhi\u1ec1u chi\u1ebfn d\u1ecbch phishing kh\u00e1c c\u0169ng \u0111ang \u0111\u01b0\u1ee3c ghi nh\u1eadn v\u1edbi quy m\u00f4 v\u00e0 m\u1ee9c \u0111\u1ed9 tinh vi ng\u00e0y c\u00e0ng gia t\u0103ng. \u0110\u00e1ng ch\u00fa \u00fd, CoGUI phishing kit \u0111ang nh\u1eafm v\u00e0o ng\u01b0\u1eddi d\u00f9ng t\u1ea1i Nh\u1eadt B\u1ea3n th\u00f4ng qua vi\u1ec7c gi\u1ea3 m\u1ea1o c\u00e1c th\u01b0\u01a1ng hi\u1ec7u l\u1edbn nh\u01b0 Amazon, PayPay, Apple, Orico, Rakuten\u2026 v\u1edbi h\u01a1n 580 tri\u1ec7u email l\u1eeba \u0111\u1ea3o \u0111\u01b0\u1ee3c ph\u00e1t t\u00e1n ch\u1ec9 trong 4 th\u00e1ng \u0111\u1ea7u n\u0103m 2025.<\/p>\n

      Trong khi \u0111\u00f3, Panda Shop – m\u1ed9t b\u1ed9 c\u00f4ng c\u1ee5 m\u1edbi n\u1ed5i t\u1eeb Trung Qu\u1ed1c cho ph\u00e9p t\u1ed9i ph\u1ea1m m\u1ea1ng ph\u00e1t t\u00e1n tin nh\u1eafn l\u1eeba \u0111\u1ea3o qua iMessage v\u00e0 Android RCS b\u1eb1ng c\u00e1c t\u00e0i kho\u1ea3n Apple v\u00e0 Gmail b\u1ecb mua b\u00e1n tr\u00f4i n\u1ed5i nh\u1eb1m \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u th\u1ebb v\u00e0 b\u00e1n l\u1ea1i tr\u00ean ch\u1ee3 \u0111en. B\u00ean c\u1ea1nh \u0111\u00f3, c\u00e1c nh\u00f3m nh\u01b0 Smishing Triad, Darcula v\u00e0 Lucid c\u0169ng \u0111ang \u0111\u1ea9y m\u1ea1nh m\u00f4 h\u00ecnh t\u1ed9i ph\u1ea1m d\u01b0\u1edbi d\u1ea1ng d\u1ecbch v\u1ee5 (Crime-as-a-Service), chuy\u00ean bi\u1ec7t h\u00f3a c\u00e1c k\u1ef9 thu\u1eadt phishing nh\u1eafm tr\u1ef1c ti\u1ebfp v\u00e0o ng\u01b0\u1eddi d\u00f9ng di \u0111\u1ed9ng khi\u1ebfn vi\u1ec7c ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n ng\u00e0y c\u00e0ng tr\u1edf n\u00ean th\u00e1ch th\u1ee9c h\u01a1n.<\/p>\n

      \n
      \"1748341482282.png\"<\/div>\n<\/div>\n

      Khuy\u1ebfn c\u00e1o cho doanh nghi\u1ec7p v\u00e0 ng\u01b0\u1eddi d\u00f9ng\u200b<\/h2>\n

      \u0110\u1ec3 ph\u00f2ng tr\u00e1nh c\u00e1c chi\u1ebfn d\u1ecbch l\u1eeba \u0111\u1ea3o t\u01b0\u01a1ng t\u1ef1, c\u00e1c t\u1ed5 ch\u1ee9c v\u00e0 c\u00e1 nh\u00e2n c\u1ea7n l\u01b0u \u00fd:<\/p>\n

        \n
      • Tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng t\u00ecm ki\u1ebfm c\u1ed5ng nh\u00e2n s\u1ef1\/l\u01b0\u01a1ng th\u01b0\u1edfng qua Google; lu\u00f4n s\u1eed d\u1ee5ng \u0111\u01b0\u1eddng d\u1eabn n\u1ed9i b\u1ed9 ch\u00ednh th\u1ee9c.<\/li>\n
      • Tri\u1ec3n khai x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 (MFA) cho c\u00e1c h\u1ec7 th\u1ed1ng t\u00e0i ch\u00ednh v\u00e0 nh\u00e2n s\u1ef1.<\/li>\n
      • C\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m b\u1ea3o m\u1eadt tr\u00ean thi\u1ebft b\u1ecb di \u0111\u1ed9ng c\u00e1 nh\u00e2n, \u0111\u1eb7c bi\u1ec7t \u0111\u1ed1i v\u1edbi nh\u00e2n vi\u00ean l\u00e0m vi\u1ec7c t\u1eeb xa.<\/li>\n
      • Gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp b\u1ea5t th\u01b0\u1eddng t\u1eeb c\u00e1c IP d\u00e2n c\u01b0, \u0111\u1eb7c bi\u1ec7t l\u00e0 IP c\u00f3 ngu\u1ed3n g\u1ed1c t\u1eeb c\u00e1c router gia \u0111\u00ecnh.<\/li>\n
      • T\u0103ng c\u01b0\u1eddng \u0111\u00e0o t\u1ea1o nh\u1eadn th\u1ee9c an ninh m\u1ea1ng cho nh\u00e2n vi\u00ean, \u0111\u1eb7c bi\u1ec7t v\u1ec1 c\u00e1c nguy c\u01a1 t\u1eeb trang gi\u1ea3 m\u1ea1o v\u00e0 \u0111\u01b0\u1eddng link qu\u1ea3ng c\u00e1o.<\/li>\n<\/ul>\n
        Theo The Hacker News<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"

        \u0110\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp, truy c\u1eadp v\u00e0o c\u1ed5ng payroll c\u1ee7a doanh nghi\u1ec7p v\u00e0 chuy\u1ec3n ti\u1ec1n l\u01b0\u01a1ng c\u1ee7a nh\u00e2n vi\u00ean v\u1ec1 t\u00e0i kho\u1ea3n do tin t\u1eb7c ki\u1ec3m so\u00e1t l\u00e0 nh\u1eefng g\u00ec m\u00e0 chi\u1ebfn d\u1ecbch n\u00e0y khi\u1ebfn nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng hoang mang. C\u1ed5ng payroll (hay c\u00f2n g\u1ecdi l\u00e0 c\u1ed5ng thanh to\u00e1n l\u01b0\u01a1ng, c\u1ed5ng qu\u1ea3n l\u00fd […]<\/p>\n","protected":false},"author":20,"featured_media":46168,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-46167","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46167"}],"version-history":[{"count":2,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46167\/revisions"}],"predecessor-version":[{"id":46170,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46167\/revisions\/46170"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46168"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}