{"id":46194,"date":"2025-06-02T17:04:37","date_gmt":"2025-06-02T10:04:37","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46194"},"modified":"2025-06-10T17:05:52","modified_gmt":"2025-06-10T10:05:52","slug":"tin-tac-khai-thac-lo-hong-simplehelp-bang-ma-doc-tong-tien-dragonforce","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/tin-tac-khai-thac-lo-hong-simplehelp-bang-ma-doc-tong-tien-dragonforce\/","title":{"rendered":"Tin t\u1eb7c khai th\u00e1c l\u1ed7 h\u1ed5ng SimpleHelp b\u1eb1ng m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n DragonForce"},"content":{"rendered":"<p class=\"mt-3 excerpt\">Theo c\u1ea3nh b\u00e1o t\u1eeb c\u00f4ng ty b\u1ea3o m\u1eadt Sophos (V\u01b0\u01a1ng qu\u1ed1c Anh), m\u1ed9t nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 qu\u1ea3n l\u00fd (MSP) kh\u00f4ng x\u00e1c \u0111\u1ecbnh v\u00e0 kh\u00e1ch h\u00e0ng c\u1ee7a h\u1ecd \u0111\u00e3 b\u1ecb l\u00e2y nhi\u1ec5m m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n DragonForce, sau khi c\u00e1c t\u00e1c nh\u00e2n \u0111e d\u1ecda khai th\u00e1c m\u1ed9t phi\u00ean b\u1ea3n SimpleHelp d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng.<\/p>\n<div id=\"relatedPost\" class=\"mt-3 mb-3\">\n<div class=\"\">\n<ul class=\"ms-2\">\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Tin t\u1eb7c APT28 khai th\u00e1c l\u1ed7 h\u1ed5ng zero-day MDaemon \u0111\u1ec3 t\u1ea5n c\u00f4ng m\u00e1y ch\u1ee7 Webmail\">Tin t\u1eb7c APT28 khai th\u00e1c l\u1ed7 h\u1ed5ng zero-day MDaemon \u0111\u1ec3 t\u1ea5n c\u00f4ng m\u00e1y ch\u1ee7 Webmail<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Tin t\u1eb7c Tri\u1ec1u Ti\u00ean t\u0103ng c\u01b0\u1eddng ho\u1ea1t \u0111\u1ed9ng do th\u00e1m m\u1ea1ng \u1edf Ukraine \">Tin t\u1eb7c Tri\u1ec1u Ti\u00ean t\u0103ng c\u01b0\u1eddng ho\u1ea1t \u0111\u1ed9ng do th\u00e1m m\u1ea1ng \u1edf Ukraine<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Gia t\u0103ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng s\u1eed d\u1ee5ng tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o\">Gia t\u0103ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng s\u1eed d\u1ee5ng tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<article id=\"content\" class=\"content gradient\"><img decoding=\"async\" src=\"https:\/\/dulieu.antoanthongtin.gov.vn\/tapchiantoanthongtin\/8b835186-bb89-409d-ba68-a62fe6bc7b0a\/132312(3).png\" \/><\/p>\n<p>\u0110\u1ed1i v\u1edbi quy\u1ec1n truy c\u1eadp ban \u0111\u1ea7u, Sophos nh\u1eadn \u0111\u1ecbnh r\u1eb1ng k\u1ebb \u0111i\u1ec1u h\u00e0nh m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/co-op-xac-nhan-du-lieu-bi-danh-cap-sau-khi-nhom-tin-tac-dragonforce-tuyen-bo-thuc-hien-tan-cong\">DragonForce<\/a>\u00a0\u0111\u00e3 li\u00ean k\u1ebft v\u1edbi ba l\u1ed7 h\u1ed5ng trong ph\u1ea7n m\u1ec1m gi\u00e1m s\u00e1t v\u00e0 qu\u1ea3n l\u00fd t\u1eeb xa (RMM).<\/p>\n<p>C\u00e1c l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c theo d\u00f5i l\u00e0 CVE-2024-57727, CVE-2024-57728 v\u00e0 CVE-2024-57726, cho ph\u00e9p tin t\u1eb7c truy xu\u1ea5t t\u1ec7p nh\u1eadt k\u00fd, t\u1ec7p c\u1ea5u h\u00ecnh v\u00e0 th\u00f4ng tin x\u00e1c th\u1ef1c. Ngo\u00e0i ra, c\u00e1c t\u00e1c nh\u00e2n \u0111e d\u1ecda c\u00f3 th\u1ec3 \u0111\u0103ng nh\u1eadp h\u1ec7 th\u1ed1ng \u0111\u1ec3 t\u1ea3i t\u1ec7p l\u00ean v\u00e0 th\u1ef1c thi m\u00e3, \u0111\u1eb7c bi\u1ec7t\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/cisco-va-cac-lo-hong-dos-va-leo-thang-dac-quyen-nghiem-trong\">leo thang \u0111\u1eb7c quy\u1ec1n<\/a>\u00a0c\u1ee7a ch\u00fang l\u00ean qu\u1ea3n tr\u1ecb vi\u00ean, d\u1eabn \u0111\u1ebfn x\u00e2m ph\u1ea1m ho\u00e0n to\u00e0n h\u1ec7 th\u1ed1ng m\u1ee5c ti\u00eau.<\/p>\n<p>SimpleHelp \u0111\u00e3 ph\u00e1t h\u00e0nh b\u1ea3n s\u1eeda l\u1ed7i cho ba l\u1ed7 h\u1ed5ng ph\u1ea7n m\u1ec1m v\u00e0o gi\u1eefa th\u00e1ng 01\/2025, tuy nh\u00e2n k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 k\u1ebft h\u1ee3p ch\u00fang trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng hai tu\u1ea7n sau \u0111\u00f3 \u0111\u1ec3 t\u1ea5n c\u00f4ng c\u00e1c phi\u00ean b\u1ea3n SimpleHelp ch\u01b0a \u0111\u01b0\u1ee3c v\u00e1 tr\u00ean Internet.<\/p>\n<p>Hi\u1ec7n t\u1ea1i, Sophos cho bi\u1ebft ba l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt n\u00e0y c\u00f3 kh\u1ea3 n\u0103ng li\u00ean quan \u0111\u1ebfn vi\u1ec7c truy c\u1eadp v\u00e0o tri\u1ec3n khai\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/tin-tac-khai-thac-lo-hong-simplehelp-rmm-de-trien-khai-phan-mem-doc-hai-sliver\">SimpleHelp<\/a>\u00a0c\u1ee7a MSP (gi\u1ea5u ti\u00ean) m\u00e0 MSP n\u00e0y \u0111ang l\u01b0u tr\u1eef v\u00e0 v\u1eadn h\u00e0nh cho kh\u00e1ch h\u00e0ng c\u1ee7a m\u00ecnh. Sophos cho bi\u1ebft, nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 s\u1eed d\u1ee5ng RMM \u0111\u1ec3 thu th\u1eadp th\u00f4ng tin v\u1ec1 kh\u00e1ch h\u00e0ng c\u1ee7a MSP, thu th\u1eadp h\u1ecd t\u00ean v\u00e0 c\u1ea5u h\u00ecnh thi\u1ebft b\u1ecb, ng\u01b0\u1eddi d\u00f9ng c\u0169ng nh\u01b0 k\u1ebft n\u1ed1i m\u1ea1ng.<\/p>\n<p>C\u00e1c tin t\u1eb7c c\u0169ng \u0111\u00e1nh c\u1eafp th\u00f4ng tin nh\u1ea1y c\u1ea3m v\u00e0 tri\u1ec3n khai m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n DragonForce, g\u00e2y \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn c\u1ea3 MSP v\u00e0 kh\u00e1ch h\u00e0ng c\u1ee7a h\u1ecd. Nh\u00f3m tin t\u1eb7c m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n DragonForce \u0111\u00e3 thu h\u00fat \u0111\u01b0\u1ee3c nhi\u1ec1u s\u1ef1 ch\u00fa \u00fd trong th\u00e1ng qua, sau khi tuy\u00ean b\u1ed1 t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c nh\u00e0 b\u00e1n l\u1ebb t\u1ea1i Anh nh\u01b0 Marks &amp; Spencer (M&amp;S), Co-op, Harrods v\u00e0 sau khi Google c\u1ea3nh b\u00e1o r\u1eb1ng nh\u00f3m n\u00e0y \u0111ang chuy\u1ec3n h\u01b0\u1edbng m\u1ee5c ti\u00eau sang c\u00e1c nh\u00e0 b\u00e1n l\u1ebb t\u1ea1i Hoa K\u1ef3.<\/p>\n<p>\u0110\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn t\u1eeb gi\u1eefa n\u0103m 2023 v\u00e0 ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t d\u1ecbch v\u1ee5 ransomware-as-a-service (RaaS), DragonForce \u0111\u00e3 ti\u1ebfp qu\u1ea3n c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng c\u1ee7a\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/ransomhub-tro-thanh-moi-de-doa-lon-trong-nam-2024-khi-tan-cong-hon-600-to-chuc-tren-toan-cau\">RansomHub<\/a>. M\u1ed9t t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 Scattered Spider v\u00e0 UNC3944, l\u00e0 chi nh\u00e1nh c\u1ee7a RansomHub, \u0111\u00e3 s\u1eed d\u1ee5ng DragonForce trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng g\u1ea7n \u0111\u00e2y.<\/p>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>Theo c\u1ea3nh b\u00e1o t\u1eeb c\u00f4ng ty b\u1ea3o m\u1eadt Sophos (V\u01b0\u01a1ng qu\u1ed1c Anh), m\u1ed9t nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 qu\u1ea3n l\u00fd (MSP) kh\u00f4ng x\u00e1c \u0111\u1ecbnh v\u00e0 kh\u00e1ch h\u00e0ng c\u1ee7a h\u1ecd \u0111\u00e3 b\u1ecb l\u00e2y nhi\u1ec5m m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n DragonForce, sau khi c\u00e1c t\u00e1c nh\u00e2n \u0111e d\u1ecda khai th\u00e1c m\u1ed9t phi\u00ean b\u1ea3n SimpleHelp d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":46195,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,4,24,35],"tags":[],"class_list":["post-46194","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-kien-thuc-an-toan-thong-tin","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46194"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46194\/revisions"}],"predecessor-version":[{"id":46196,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46194\/revisions\/46196"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46195"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}