{"id":46202,"date":"2025-05-30T17:15:07","date_gmt":"2025-05-30T10:15:07","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46202"},"modified":"2025-06-10T17:16:11","modified_gmt":"2025-06-10T10:16:11","slug":"nhom-tin-tac-unc6032-phat-tan-phan-mem-doc-hai-thong-qua-cac-trang-web-gia-mao-ve-cong-cu-ai","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/nhom-tin-tac-unc6032-phat-tan-phan-mem-doc-hai-thong-qua-cac-trang-web-gia-mao-ve-cong-cu-ai\/","title":{"rendered":"Nh\u00f3m tin t\u1eb7c UNC6032 ph\u00e1t t\u00e1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i th\u00f4ng qua c\u00e1c trang web gi\u1ea3 m\u1ea1o v\u1ec1 c\u00f4ng c\u1ee5 AI"},"content":{"rendered":"<p class=\"mt-3 excerpt\">Theo b\u00e1o c\u00e1o m\u1edbi \u0111\u00e2y t\u1eeb c\u00f4ng ty an ninh m\u1ea1ng Mandiant (M\u1ef9), trong n\u0103m qua, m\u1ed9t t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u00e3 l\u1ee3i d\u1ee5ng s\u1ef1 ph\u1ed5 bi\u1ebfn c\u1ee7a c\u00e1c c\u00f4ng c\u1ee5 tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o (AI) \u0111\u1ec3 \u0111\u00e1nh l\u1eeba ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp v\u00e0o c\u00e1c trang web t\u1ea1o n\u1ed9i dung gi\u1ea3 m\u1ea1o, t\u1eeb \u0111\u00f3 l\u00e2y nhi\u1ec5m ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u00e0o h\u1ec7 th\u1ed1ng c\u1ee7a h\u1ecd.<\/p>\n<div id=\"relatedPost\" class=\"mt-3 mb-3\">\n<div class=\"\">\n<ul class=\"ms-2\">\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Tin t\u1eb7c APT28 khai th\u00e1c l\u1ed7 h\u1ed5ng zero-day MDaemon \u0111\u1ec3 t\u1ea5n c\u00f4ng m\u00e1y ch\u1ee7 Webmail\">Tin t\u1eb7c APT28 khai th\u00e1c l\u1ed7 h\u1ed5ng zero-day MDaemon \u0111\u1ec3 t\u1ea5n c\u00f4ng m\u00e1y ch\u1ee7 Webmail<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Tin t\u1eb7c Tri\u1ec1u Ti\u00ean t\u0103ng c\u01b0\u1eddng ho\u1ea1t \u0111\u1ed9ng do th\u00e1m m\u1ea1ng \u1edf Ukraine \">Tin t\u1eb7c Tri\u1ec1u Ti\u00ean t\u0103ng c\u01b0\u1eddng ho\u1ea1t \u0111\u1ed9ng do th\u00e1m m\u1ea1ng \u1edf Ukraine<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Gia t\u0103ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng s\u1eed d\u1ee5ng tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o\">Gia t\u0103ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng s\u1eed d\u1ee5ng tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<article id=\"content\" class=\"content gradient\"><img decoding=\"async\" src=\"https:\/\/dulieu.antoanthongtin.gov.vn\/tapchiantoanthongtin\/2cb46c76-ecd5-469d-acee-33431cb58f89\/1723301060472.png\" \/><\/p>\n<p>S\u1eed d\u1ee5ng c\u00e1c trang web gi\u1ea3 m\u1ea1o d\u01b0\u1edbi d\u1ea1ng c\u00f4ng c\u1ee5 t\u1ea1o video AI h\u1ee3p ph\u00e1p, Mandiant c\u1ea3nh b\u00e1o r\u1eb1ng nh\u00f3m tin t\u1eb7c UNC6032 \u0111\u1ebfn t\u1eeb Vi\u1ec7t Nam \u0111\u00e3 th\u1ef1c hi\u1ec7n c\u00e1c t\u1ea5n c\u00f4ng m\u1ea1ng \u0111\u00e1nh c\u1eafp th\u00f4ng tin, nh\u1eafm v\u00e0o c\u00e1c n\u1ea1n nh\u00e2n tr\u00ean kh\u1eafp c\u00e1c khu v\u1ef1c \u0111\u1ecba l\u00fd v\u00e0 ng\u00e0nh c\u00f4ng nghi\u1ec7p kh\u00e1c nhau.<\/p>\n<p>Chi\u1ebfn d\u1ecbch lan r\u1ed9ng n\u00e0y \u0111\u00e3 di\u1ec5n ra \u00edt nh\u1ea5t t\u1eeb \u200b\u200bgi\u1eefa n\u0103m 2024, d\u1ee5 d\u1ed7 nh\u1eefng n\u1ea1n nh\u00e2n nh\u1eb9 d\u1ea1 c\u1ea3 tin truy c\u1eadp v\u00e0o c\u00e1c trang web gi\u1ea3 m\u1ea1o, th\u00f4ng qua h\u00e0ng ngh\u00ecn qu\u1ea3ng c\u00e1o tr\u00ean c\u00e1c n\u1ec1n t\u1ea3ng m\u1ea1ng x\u00e3 h\u1ed9i nh\u01b0 Facebook, LinkedIn v\u00e0 c\u00f3 kh\u1ea3 n\u0103ng l\u00e0 tr\u00ean c\u00e1c n\u1ec1n t\u1ea3ng kh\u00e1c n\u1eefa.<\/p>\n<p>H\u1ea7u h\u1ebft c\u00e1c qu\u1ea3ng c\u00e1o ch\u1ea1y tr\u00ean\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/canh-bao-nhieu-trang-facebook-co-tick-xanh-van-la-lua-dao\">Facebook<\/a>, \u0111\u01b0\u1ee3c xu\u1ea5t b\u1ea3n b\u1eb1ng c\u00e1c trang do k\u1ebb t\u1ea5n c\u00f4ng t\u1ea1o ra ho\u1eb7c c\u00e1c t\u00e0i kho\u1ea3n Facebook b\u1ecb x\u00e2m ph\u1ea1m. Meta b\u1eaft \u0111\u1ea7u x\u00f3a m\u1ed9t s\u1ed1 qu\u1ea3ng c\u00e1o, t\u00ean mi\u1ec1n v\u00e0 t\u00e0i kho\u1ea3n \u0111\u1ed9c h\u1ea1i v\u00e0o n\u0103m 2024, tr\u01b0\u1edbc khi Mandiant th\u00f4ng b\u00e1o v\u1ec1 nh\u1eefng ph\u00e1t hi\u1ec7n c\u1ee7a m\u00ecnh.<\/p>\n<p>Mandiant cho bi\u1ebft h\u1ecd \u0111\u00e3 x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c h\u01a1n 30 trang web gi\u1ea3 m\u1ea1o c\u00e1c c\u00f4ng c\u1ee5 ph\u1ed5 bi\u1ebfn nh\u01b0 Luma AI, Canva Dream Lab v\u00e0 Kling AI, \u0111\u01b0\u1ee3c qu\u1ea3ng b\u00e1 th\u00f4ng qua m\u1ea1ng l\u01b0\u1edbi h\u01a1n 120\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/xoa-ngay-nhung-ung-dung-nay-tren-smartphone-neu-khong-muon-bi-theo-doi\">qu\u1ea3ng c\u00e1o<\/a>\u00a0tr\u00ean m\u1ea1ng x\u00e3 h\u1ed9i g\u00e2y hi\u1ec3u l\u1ea7m, ti\u1ebfp c\u1eadn h\u00e0ng tri\u1ec7u ng\u01b0\u1eddi d\u00f9ng, trong \u0111\u00f3 c\u00f3 h\u01a1n 2,3 tri\u1ec7u ng\u01b0\u1eddi d\u00f9ng \u1edf ch\u00e2u \u00c2u.<\/p>\n<p>H\u1ee9a h\u1eb9n kh\u1ea3 n\u0103ng t\u1ea1o v\u0103n b\u1ea3n th\u00e0nh video ho\u1eb7c h\u00ecnh \u1ea3nh th\u00e0nh video, c\u00e1c trang web gi\u1ea3 m\u1ea1o hi\u1ec3n th\u1ecb c\u00f9ng m\u1ed9t l\u1eddi nh\u1eafc cho b\u1ea5t k\u1ef3 ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp n\u00e0o, sau \u0111\u00f3 cung c\u1ea5p m\u1ed9t t\u1ec7p l\u01b0u tr\u1eef\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/tin-tac-su-dung-tep-zip-bi-loi-va-tai-lieu-office-de-vuot-qua-cac-giai-phap-bao-mat\">ZIP<\/a>\u00a0\u0111\u1ec3 t\u1ea3i xu\u1ed1ng sau khi qu\u00e1 tr\u00ecnh t\u1ea1o video gi\u1ea3 m\u1ea1o \u0111\u01b0\u1ee3c cho l\u00e0 ho\u00e0n t\u1ea5t.<\/p>\n<p>Theo Mandiant, chu\u1ed7i l\u00e2y nhi\u1ec5m m\u00e0 c\u00f4ng ty quan s\u00e1t \u0111\u01b0\u1ee3c ph\u1ee5 thu\u1ed9c r\u1ea5t nhi\u1ec1u v\u00e0o k\u1ef9 thu\u1eadt\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/ma-doc-su-dung-ky-thuat-dll-side-loading\">DLL sideloading<\/a>, injection ti\u1ebfn tr\u00ecnh v\u00e0 dropper v\u00e0o b\u1ed9 nh\u1edb, \u0111\u1ed3ng th\u1eddi s\u1eed d\u1ee5ng key registry AutoRun \u0111\u1ec3 duy tr\u00ec t\u00ednh b\u1ec1n b\u1ec9. T\u1ec7p ZIP ch\u1ee9a t\u1ec7p th\u1ef1c thi m\u1edf r\u1ed9ng cung c\u1ea5p dropper Starkveil \u0111\u1ebfn m\u00e1y t\u00ednh c\u1ee7a n\u1ea1n nh\u00e2n. Starkveil sau \u0111\u00f3 th\u1ef1c thi m\u00e3 \u0111\u1ed9c kh\u00e1c l\u00e0 Coilhatch, tri\u1ec3n khai c\u00e1c backdoor XWorm v\u00e0 Frostrift .NET, c\u00f9ng v\u1edbi downloader .NET Grimpull.<\/p>\n<p>Mandiant quan s\u00e1t th\u1ea5y c\u1ea3 XWorm v\u00e0 Frostrift \u0111\u1ec1u thu th\u1eadp th\u00f4ng tin h\u1ec7 th\u1ed1ng, bao g\u1ed3m t\u00ean ng\u01b0\u1eddi d\u00f9ng, th\u00f4ng tin h\u1ec7 \u0111i\u1ec1u h\u00e0nh, m\u00e3 \u0111\u1ecbnh danh ph\u1ea7n c\u1ee9ng v\u00e0 chi ti\u1ebft ph\u1ea7n m\u1ec1m di\u1ec7t vi-r\u00fat. XWorm c\u0169ng ch\u1ee9c n\u0103ng keylogger, trong khi Frostrift ki\u1ec3m tra m\u1ed9t s\u1ed1 \u1ee9ng d\u1ee5ng nh\u1eafn tin, tr\u00ecnh duy\u1ec7t v\u00e0 ti\u1ec7n \u00edch m\u1edf r\u1ed9ng tr\u00ecnh duy\u1ec7t.<\/p>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>Theo b\u00e1o c\u00e1o m\u1edbi \u0111\u00e2y t\u1eeb c\u00f4ng ty an ninh m\u1ea1ng Mandiant (M\u1ef9), trong n\u0103m qua, m\u1ed9t t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u00e3 l\u1ee3i d\u1ee5ng s\u1ef1 ph\u1ed5 bi\u1ebfn c\u1ee7a c\u00e1c c\u00f4ng c\u1ee5 tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o (AI) \u0111\u1ec3 \u0111\u00e1nh l\u1eeba ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp v\u00e0o c\u00e1c trang web t\u1ea1o n\u1ed9i dung gi\u1ea3 m\u1ea1o, t\u1eeb \u0111\u00f3 l\u00e2y [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":46203,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,4,24,35],"tags":[],"class_list":["post-46202","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-kien-thuc-an-toan-thong-tin","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46202","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46202"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46202\/revisions"}],"predecessor-version":[{"id":46204,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46202\/revisions\/46204"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46203"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}