{"id":46225,"date":"2025-05-26T17:25:00","date_gmt":"2025-05-26T10:25:00","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46225"},"modified":"2025-06-10T17:26:20","modified_gmt":"2025-06-10T10:26:20","slug":"gian-diep-mang-trung-quoc-khai-thac-lo-hong-ivanti-de-tan-cong-vuot-qua-xac-thuc-va-thuc-thi-ma-tu-xa","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/gian-diep-mang-trung-quoc-khai-thac-lo-hong-ivanti-de-tan-cong-vuot-qua-xac-thuc-va-thuc-thi-ma-tu-xa\/","title":{"rendered":"Gi\u00e1n \u0111i\u1ec7p m\u1ea1ng Trung Qu\u1ed1c khai th\u00e1c l\u1ed7 h\u1ed5ng Ivanti \u0111\u1ec3 t\u1ea5n c\u00f4ng v\u01b0\u1ee3t qua x\u00e1c th\u1ef1c v\u00e0 th\u1ef1c thi m\u00e3 t\u1eeb xa"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-46226\" src=\"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-content\/uploads\/2025\/06\/China-Zero-Days-e1747988330810.jpg\" alt=\"\" width=\"1200\" height=\"674\" srcset=\"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-content\/uploads\/2025\/06\/China-Zero-Days-e1747988330810.jpg 1200w, https:\/\/antoanthongtinhaiphong.gov.vn\/wp-content\/uploads\/2025\/06\/China-Zero-Days-e1747988330810-300x169.jpg 300w, https:\/\/antoanthongtinhaiphong.gov.vn\/wp-content\/uploads\/2025\/06\/China-Zero-Days-e1747988330810-1024x575.jpg 1024w, https:\/\/antoanthongtinhaiphong.gov.vn\/wp-content\/uploads\/2025\/06\/China-Zero-Days-e1747988330810-768x431.jpg 768w, https:\/\/antoanthongtinhaiphong.gov.vn\/wp-content\/uploads\/2025\/06\/China-Zero-Days-e1747988330810-150x84.jpg 150w, https:\/\/antoanthongtinhaiphong.gov.vn\/wp-content\/uploads\/2025\/06\/China-Zero-Days-e1747988330810-696x391.jpg 696w, https:\/\/antoanthongtinhaiphong.gov.vn\/wp-content\/uploads\/2025\/06\/China-Zero-Days-e1747988330810-1068x600.jpg 1068w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<p class=\"mt-3 excerpt\">M\u1ed9t nh\u00f3m gi\u00e1n \u0111i\u1ec7p m\u1ea1ng c\u00f3 li\u00ean quan \u0111\u1ebfn Trung Qu\u1ed1c \u0111\u00e3 khai th\u00e1c hai l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt g\u1ea7n \u0111\u00e2y c\u1ee7a Ivanti Endpoint Manager Mobile (EPMM), trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng nh\u1eafm v\u00e0o c\u00e1c th\u1ef1c th\u1ec3 quan tr\u1ecdng \u1edf ch\u00e2u \u00c2u, B\u1eafc M\u1ef9 v\u00e0 ch\u00e2u \u00c1 &#8211; Th\u00e1i B\u00ecnh D\u01b0\u01a1ng.<\/p>\n<div id=\"relatedPost\" class=\"mt-3 mb-3\">\n<div class=\"\">\n<ul class=\"ms-2\">\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Tin t\u1eb7c \u0111\u00e1nh c\u1eafp th\u00f4ng tin ng\u01b0\u1eddi d\u00f9ng tr\u00ean s\u00e0n giao d\u1ecbch Coinbase\">Tin t\u1eb7c \u0111\u00e1nh c\u1eafp th\u00f4ng tin ng\u01b0\u1eddi d\u00f9ng tr\u00ean s\u00e0n giao d\u1ecbch Coinbase<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Tr\u00ecnh t\u1ea1o video AI gi\u1ea3 m\u1ea1o ph\u00e1t t\u00e1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u00e1nh c\u1eafp th\u00f4ng tin Noodlophile\">Tr\u00ecnh t\u1ea1o video AI gi\u1ea3 m\u1ea1o ph\u00e1t t\u00e1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u00e1nh c\u1eafp th\u00f4ng tin Noodlophile<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"INFOGRHAPHIC: C\u1ea3nh b\u00e1o l\u1ee3i d\u1ee5ng c\u00f4ng ngh\u1ec7 Deepfake \u0111\u1ec3 l\u1eeba \u0111\u1ea3o\">INFOGRHAPHIC: C\u1ea3nh b\u00e1o l\u1ee3i d\u1ee5ng c\u00f4ng ngh\u1ec7 Deepfake \u0111\u1ec3 l\u1eeba \u0111\u1ea3o<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<article id=\"content\" class=\"content gradient\">Hai l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c g\u1eafn m\u00e3 \u0111\u1ecbnh danh CVE-2025-4427 v\u00e0 CVE-2025-4428, \u0111\u00e2y l\u00e0 c\u00e1c l\u1ed7 h\u1ed5ng cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng v\u01b0\u1ee3t qua x\u00e1c th\u1ef1c (bypass) v\u00e0\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/lo-hong-cve-2025-1240-trong-winzip-cho-phep-ke-tan-cong-thuc-thi-ma-tuy-y\">th\u1ef1c thi m\u00e3 t\u00f9y \u00fd<\/a>\u00a0t\u1eeb xa (RCE). L\u1ed7 h\u1ed5ng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn hai th\u01b0 vi\u1ec7n m\u00e3 ngu\u1ed3n m\u1edf \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p v\u00e0o EPMM, c\u00e1c l\u1ed7i c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi nhau \u0111\u1ec3 t\u1ea5n c\u00f4ng RCE tr\u00ean c\u00e1c thi\u1ebft b\u1ecb d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng. Ivanti \u0111\u00e3 v\u00e1 hai l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt n\u00e0y v\u00e0o ng\u00e0y 13\/5, \u0111\u1ed3ng th\u1eddi c\u1ea3nh b\u00e1o r\u1eb1ng ch\u00fang \u0111\u00e3 b\u1ecb khai th\u00e1c nh\u01b0 l\u1ed7 h\u1ed5ng\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/mozilla-va-lo-hong-zero-day-cua-firefox-bi-khai-thac-trong-cuoc-thi-pwn2own-berlin-2025\">zero-day<\/a>\u00a0\u0111\u1ed1i v\u1edbi m\u1ed9t s\u1ed1 l\u01b0\u1ee3ng kh\u00e1ch h\u00e0ng h\u1ea1n ch\u1ebf.<\/p>\n<p>V\u00e0i ng\u00e0y sau \u0111\u00f3, b\u1eb1ng ch\u1ee9ng kh\u00e1i ni\u1ec7m (PoC) nh\u1eafm v\u00e0o c\u00e1c l\u1ed7 h\u1ed5ng tr\u00ean \u0111\u01b0\u1ee3c c\u00f4ng khai, k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 b\u1eaft \u0111\u1ea7u ph\u00e1t t\u00e1n ch\u00fang ngay sau \u0111\u00f3, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u1ebfn t\u1eeb c\u00f4ng ty b\u1ea3o m\u1eadt \u0111\u00e1m m\u00e2y Wiz (M\u1ef9) \u0111\u00e3 \u0111\u01b0a ra c\u1ea3nh b\u00e1o v\u1ec1 \u0111i\u1ec1u n\u00e0y. X\u00e1c th\u1ef1c v\u1ec1 nh\u1eefng ph\u00e1t hi\u1ec7n c\u1ee7a Wiz, h\u00e3ng b\u1ea3o m\u1eadt EclecticIQ (H\u00e0 Lan) cho bi\u1ebft, c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng \u0111\u01b0\u1ee3c quan s\u00e1t th\u1ea5y l\u00e0 do m\u1ed9t t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u1ebfn t\u1eeb\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/tin-tac-trung-quoc-loi-dung-tinh-nang-ipv6-slaac-de-tan-cong-aitm-thong-qua-cong-cu-spellbinder-doc-hai\">Trung Qu\u1ed1c<\/a>, d\u01b0\u1edbi t\u00ean g\u1ecdi l\u00e0 UNC5221.<\/p>\n<p>\u0110\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn v\u1edbi m\u1ee5c ti\u00eau th\u01b0\u1eddng nh\u1eafm v\u00e0o c\u00e1c l\u1ed7 h\u1ed5ng zero-day trong c\u00e1c thi\u1ebft b\u1ecb bi\u00ean \u00edt nh\u1ea5t t\u1eeb n\u0103m 2023, nh\u00f3m gi\u00e1n \u0111i\u1ec7p m\u1ea1ng n\u00e0y \u0111\u00e3 b\u1ecb ph\u00e1t hi\u1ec7n \u0111\u00e1nh c\u1eafp kh\u1ed1i l\u01b0\u1ee3ng l\u1edbn d\u1eef li\u1ec7u t\u1eeb c\u00e1c thi\u1ebft b\u1ecb d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng, bao g\u1ed3m th\u00f4ng tin nh\u1eadn d\u1ea1ng c\u00e1 nh\u00e2n (PII), th\u00f4ng tin \u0111\u0103ng nh\u1eadp v\u00e0 c\u00e1c d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m kh\u00e1c.<\/p>\n<p>K\u1ec3 t\u1eeb ng\u00e0y 15\/5 \u0111\u1ebfn nay, nh\u00f3m tin t\u1eb7c n\u00e0y \u0111\u00e3 nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c phi\u00ean b\u1ea3n EPMM b\u1ecb \u1ea3nh h\u01b0\u1edfng tr\u00ean Internet c\u1ee7a c\u00e1c t\u1ed5 ch\u1ee9c\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/to-chuc-hang-khong-dan-dung-quoc-te-dieu-tra-ve-su-co-bao-mat-thong-tin\">h\u00e0ng kh\u00f4ng<\/a>, qu\u1ed1c ph\u00f2ng, t\u00e0i ch\u00ednh, ch\u00ednh quy\u1ec1n \u0111\u1ecba ph\u01b0\u01a1ng,\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/mao-danh-trung-tam-cham-soc-suc-khoe-chiem-doat-tai-san\">ch\u0103m s\u00f3c s\u1ee9c kh\u1ecfe<\/a>\u00a0v\u00e0 vi\u1ec5n th\u00f4ng, \u0111\u1ec3 \u0111\u00e1nh c\u1eafp c\u00e1c t\u1ec7p ch\u1ee9a d\u1eef li\u1ec7u ho\u1ea1t \u0111\u1ed9ng quan tr\u1ecdng v\u00e0 n\u1eafm \u0111\u01b0\u1ee3c th\u00f4ng tin v\u1ec1 c\u00e1c thi\u1ebft b\u1ecb \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd.<\/p>\n<p>C\u00e1c m\u1ee5c ti\u00eau \u0111\u01b0\u1ee3c EclecticIQ x\u00e1c \u0111\u1ecbnh bao g\u1ed3m m\u1ed9t trong nh\u1eefng nh\u00e0 cung c\u1ea5p vi\u1ec5n th\u00f4ng l\u1edbn nh\u1ea5t c\u1ee7a \u0110\u1ee9c, m\u1ed9t c\u00f4ng ty an ninh m\u1ea1ng, m\u1ed9t nh\u00e0 s\u1ea3n xu\u1ea5t v\u0169 kh\u00ed c\u00f3 tr\u1ee5 s\u1edf t\u1ea1i M\u1ef9 v\u00e0 m\u1ed9t ng\u00e2n h\u00e0ng \u0111a qu\u1ed1c gia t\u1ea1i H\u00e0n Qu\u1ed1c.<\/p>\n<p>EclecticIQ l\u01b0u \u00fd: \u201cDo vai tr\u00f2 c\u1ee7a EPMM trong vi\u1ec7c qu\u1ea3n l\u00fd v\u00e0 \u0111\u1ea9y c\u1ea5u h\u00ecnh t\u1edbi c\u00e1c thi\u1ebft b\u1ecb di \u0111\u1ed9ng c\u1ee7a doanh nghi\u1ec7p, vi\u1ec7c khai th\u00e1c th\u00e0nh c\u00f4ng c\u00f3 th\u1ec3 cho ph\u00e9p tin t\u1eb7c truy c\u1eadp, thao t\u00fang ho\u1eb7c x\u00e2m ph\u1ea1m t\u1eeb xa h\u00e0ng ngh\u00ecn thi\u1ebft b\u1ecb \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd tr\u00ean to\u00e0n t\u1ed5 ch\u1ee9c\u201d<\/p>\n<p>L\u00e0 m\u1ed9t ph\u1ea7n c\u1ee7a c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng, c\u00e1c tin t\u1eb7c UNC5221 \u0111\u00e3 tri\u1ec3n khai FRP (Fast Reverse Proxy), m\u1ed9t c\u00f4ng c\u1ee5 m\u00e3 ngu\u1ed3n m\u1edf thi\u1ebft l\u1eadp reverse proxy SOCKS5 \u0111\u1ec3 truy c\u1eadp li\u00ean t\u1ee5c v\u00e0 KrustyLoader, th\u01b0\u1eddng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 tri\u1ec3n khai backdoor Sliver. \u201cNh\u00f3m tin t\u1eb7c n\u00e0y c\u0169ng b\u1ecb ph\u00e1t hi\u1ec7n s\u1eed d\u1ee5ng l\u1ec7nh shell \u0111\u1ec3 do th\u00e1m v\u00e0 che gi\u1ea5u h\u00e0nh vi theo th\u1eddi gian th\u1ef1c, c\u00f3 kh\u1ea3 n\u0103ng s\u1eed d\u1ee5ng c\u00e1c request HTTP GET \u0111\u1ec3 \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u\u201d, EclecticIQ cho bi\u1ebft.<\/p>\n<p>Trong c\u00e1c chi\u1ebfn d\u1ecbch tr\u01b0\u1edbc \u0111\u00f3, k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 khai th\u00e1c c\u00e1c thi\u1ebft b\u1ecb Palo Alto Networks, Ivanti v\u00e0 SAP \u0111\u1ec3 tri\u1ec3n khai c\u00e1c beacon KrustyLoader v\u00e0 Sliver. \u201cEclecticIQ \u0111\u00e1nh gi\u00e1 v\u1edbi \u0111\u1ed9 tin c\u1eady cao r\u1eb1ng ho\u1ea1t \u0111\u1ed9ng khai th\u00e1c Ivanti EPMM \u0111\u01b0\u1ee3c quan s\u00e1t r\u1ea5t c\u00f3 th\u1ec3 c\u00f3 li\u00ean quan \u0111\u1ebfn c\u00e1c tin t\u1eb7c UNC5221, m\u1ed9t nh\u00f3m gi\u00e1n \u0111i\u1ec7p m\u1ea1ng c\u1ee7a Trung Qu\u1ed1c. Vi\u1ec7c t\u00e1i s\u1eed d\u1ee5ng c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng v\u00e0 c\u00e1c ho\u1ea1t \u0111\u1ed9ng th\u01b0\u01a1ng m\u1ea1i \u0111\u01b0\u1ee3c quan s\u00e1t c\u00f3 li\u00ean quan ch\u1eb7t ch\u1ebd \u0111\u1ebfn c\u00e1c chi\u1ebfn d\u1ecbch tr\u01b0\u1edbc \u0111\u00e2y \u0111\u01b0\u1ee3c cho l\u00e0 do t\u00e1c nh\u00e2n n\u00e0y th\u1ef1c hi\u1ec7n\u201d, EclecticIQ l\u01b0u \u00fd.<\/p>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>M\u1ed9t nh\u00f3m gi\u00e1n \u0111i\u1ec7p m\u1ea1ng c\u00f3 li\u00ean quan \u0111\u1ebfn Trung Qu\u1ed1c \u0111\u00e3 khai th\u00e1c hai l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt g\u1ea7n \u0111\u00e2y c\u1ee7a Ivanti Endpoint Manager Mobile (EPMM), trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng nh\u1eafm v\u00e0o c\u00e1c th\u1ef1c th\u1ec3 quan tr\u1ecdng \u1edf ch\u00e2u \u00c2u, B\u1eafc M\u1ef9 v\u00e0 ch\u00e2u \u00c1 &#8211; Th\u00e1i B\u00ecnh D\u01b0\u01a1ng. Tin t\u1eb7c \u0111\u00e1nh c\u1eafp [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":46226,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[24,35],"tags":[],"class_list":["post-46225","post","type-post","status-publish","format-standard","has-post-thumbnail","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46225"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46225\/revisions"}],"predecessor-version":[{"id":46227,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46225\/revisions\/46227"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46226"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}