{"id":46311,"date":"2025-06-23T08:33:50","date_gmt":"2025-06-23T01:33:50","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46311"},"modified":"2025-06-27T08:34:47","modified_gmt":"2025-06-27T01:34:47","slug":"bo-cong-an-canh-bao-xuat-hien-chieu-tro-hack-facebook-moi-cuc-tinh-vi","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/bo-cong-an-canh-bao-xuat-hien-chieu-tro-hack-facebook-moi-cuc-tinh-vi\/","title":{"rendered":"B\u1ed9 C\u00f4ng an c\u1ea3nh b\u00e1o: Xu\u1ea5t hi\u1ec7n chi\u00eau tr\u00f2 hack Facebook m\u1edbi c\u1ef1c tinh vi"},"content":{"rendered":"<p><b>M\u1ed9t chi\u1ebfn d\u1ecbch l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn m\u1edbi v\u1edbi th\u1ee7 \u0111o\u1ea1n v\u00f4 c\u00f9ng tinh vi v\u00e0 nguy hi\u1ec3m \u0111ang nh\u1eafm v\u00e0o ng\u01b0\u1eddi d\u00f9ng Facebook, l\u1ee3i d\u1ee5ng ch\u00ednh m\u1ed9t d\u1ecbch v\u1ee5 h\u1ee3p ph\u00e1p c\u1ee7a Google \u0111\u1ec3 qua m\u1eb7t c\u00e1c h\u1ec7 th\u1ed1ng b\u1ea3o v\u1ec7 email.<\/b><\/p>\n<div>\n<div class=\"bbImageWrapper  js-lbImage\" title=\"1750643816440.png\" data-src=\"https:\/\/whitehat.vn\/attachments\/1750643816440-png.17175\/\" data-lb-sidebar-href=\"\" data-lb-caption-extra-html=\"\" data-single-image=\"1\"><img loading=\"lazy\" decoding=\"async\" class=\"bbImage\" title=\"1750643816440.png\" src=\"https:\/\/whitehat.vn\/attachments\/1750643816440-png.17175\/\" alt=\"1750643816440.png\" width=\"740\" height=\"417\" data-url=\"\" data-zoom-target=\"1\" \/><\/div>\n<p>\u200b<\/p><\/div>\n<p>Theo \u0111\u00f3, t\u1ed9i ph\u1ea1m m\u1ea1ng \u0111\u00e3 s\u1eed d\u1ee5ng ph\u1ea7n m\u1ec1m Google AppSheet kh\u00f4ng c\u1ea7n m\u00e3 c\u1ee7a Google \u0111\u1ec3 g\u1eedi h\u00e0ng lo\u1ea1t email l\u1eeba \u0111\u1ea3o. Do \u0111\u01b0\u1ee3c g\u1eedi \u0111i t\u1eeb \u0111\u1ecba ch\u1ec9 &#8220;@appsheet.com&#8221; c\u1ee7a Google, nh\u1eefng email n\u00e0y d\u1ec5 d\u00e0ng v\u01b0\u1ee3t qua c\u00e1c c\u01a1 ch\u1ebf ki\u1ec3m tra uy t\u00edn t\u00ean mi\u1ec1n v\u00e0 x\u00e1c th\u1ef1c (nh\u01b0 SPF, DKIM, DMARC) c\u1ee7a Microsoft c\u0169ng nh\u01b0 c\u00e1c Secure Email Gateways (SEG) khi\u1ebfn ch\u00fang xu\u1ea5t hi\u1ec7n nh\u01b0 th\u01b0 h\u1ee3p ph\u00e1p trong h\u1ed9p th\u01b0 \u0111\u1ebfn c\u1ee7a n\u1ea1n nh\u00e2n. M\u1ed7i email c\u00f2n \u0111\u01b0\u1ee3c t\u1ea1o v\u1edbi m\u1ed9t ID ri\u00eang bi\u1ec7t, g\u00e2y kh\u00f3 kh\u0103n cho c\u00e1c h\u1ec7 th\u1ed1ng ph\u00e1t hi\u1ec7n truy\u1ec1n th\u1ed1ng.<\/p>\n<p>N\u1ed9i dung c\u1ee7a c\u00e1c email n\u00e0y gi\u1ea3 m\u1ea1o th\u00f4ng b\u00e1o t\u1eeb Facebook, th\u01b0\u1eddng vi\u1ec7n c\u1edb ng\u01b0\u1eddi d\u00f9ng vi ph\u1ea1m quy\u1ec1n s\u1edf h\u1eefu tr\u00ed tu\u1ec7 v\u00e0 t\u00e0i kho\u1ea3n s\u1ebd b\u1ecb x\u00f3a trong v\u00f2ng 24 gi\u1edd. \u0110\u1ec3 tr\u00e1nh b\u1ecb kh\u00f3a t\u00e0i kho\u1ea3n, ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c y\u00eau c\u1ea7u nh\u1ea5p v\u00e0o n\u00fat &#8220;Submit an Appeal&#8221; (g\u1eedi \u0111\u01a1n kh\u00e1ng ngh\u1ecb). Khi nh\u1ea5p v\u00e0o, n\u1ea1n nh\u00e2n s\u1ebd b\u1ecb d\u1eabn \u0111\u1ebfn m\u1ed9t trang \u0111\u00edch gi\u1ea3 m\u1ea1o thi\u1ebft k\u1ebf gi\u1ed1ng h\u1ec7t trang \u0111\u0103ng nh\u1eadp c\u1ee7a Facebook. \u0110i\u1ec1u \u0111\u00e1ng n\u00f3i, trang gi\u1ea3 m\u1ea1o n\u00e0y l\u1ea1i \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef tr\u00ean Vercel, m\u1ed9t n\u1ec1n t\u1ea3ng uy t\u00edn, c\u00e0ng l\u00e0m t\u0103ng \u0111\u1ed9 tin c\u1eady cho to\u00e0n b\u1ed9 chi\u1ebfn d\u1ecbch l\u1eeba \u0111\u1ea3o.<\/p>\n<p>T\u1ea1i \u0111\u00e2y, n\u1ebfu ng\u01b0\u1eddi d\u00f9ng nh\u1eadp th\u00f4ng tin \u0111\u0103ng nh\u1eadp v\u00e0 m\u00e3 x\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1 (2FA), to\u00e0n b\u1ed9 d\u1eef li\u1ec7u n\u00e0y s\u1ebd \u0111\u01b0\u1ee3c g\u1eedi th\u1eb3ng \u0111\u1ebfn cho k\u1ebb t\u1ea5n c\u00f4ng. Chi\u00eau tr\u00f2 c\u00f2n tinh vi h\u01a1n khi l\u1ea7n \u0111\u0103ng nh\u1eadp \u0111\u1ea7u ti\u00ean tr\u00ean trang gi\u1ea3 m\u1ea1o th\u01b0\u1eddng b\u00e1o &#8220;sai m\u1eadt kh\u1ea9u&#8221; \u0111\u1ec3 n\u1ea1n nh\u00e2n nh\u1eadp l\u1ea1i, nh\u1eb1m x\u00e1c nh\u1eadn th\u00f4ng tin.<\/p>\n<p>Nguy hi\u1ec3m h\u01a1n, m\u00e3 2FA sau khi \u0111\u01b0\u1ee3c cung c\u1ea5p s\u1ebd \u0111\u01b0\u1ee3c t\u1ed9i ph\u1ea1m s\u1eed d\u1ee5ng ngay \u0111\u1ec3 chi\u1ebfm \u0111o\u1ea1t m\u00e3 token c\u1ee7a phi\u00ean \u0111\u0103ng nh\u1eadp (session token) t\u1eeb Facebook, cho ph\u00e9p ch\u00fang duy tr\u00ec quy\u1ec1n truy c\u1eadp t\u00e0i kho\u1ea3n ngay c\u1ea3 khi n\u1ea1n nh\u00e2n \u0111\u00e3 \u0111\u1ed5i m\u1eadt kh\u1ea9u.<\/p>\n<p><b>Khuy\u1ebfn c\u00e1o ng\u01b0\u1eddi d\u00f9ng<\/b>: C\u1ea7n h\u1ebft s\u1ee9c c\u1ea3nh gi\u00e1c v\u1edbi c\u00e1c email y\u00eau c\u1ea7u h\u00e0nh \u0111\u1ed9ng kh\u1ea9n c\u1ea5p ho\u1eb7c cung c\u1ea5p th\u00f4ng tin c\u00e1 nh\u00e2n, ngay c\u1ea3 khi ch\u00fang c\u00f3 v\u1ebb \u0111\u1ebfn t\u1eeb ngu\u1ed3n \u0111\u00e1ng tin c\u1eady. Lu\u00f4n ki\u1ec3m tra k\u1ef9 \u0111\u1ecba ch\u1ec9 ng\u01b0\u1eddi g\u1eedi v\u00e0 kh\u00f4ng nh\u1ea5p v\u00e0o c\u00e1c li\u00ean k\u1ebft \u0111\u00e1ng ng\u1edd.<\/p>\n<div style=\"text-align: right;\">\n<b><i>Theo C\u00f4ng an t\u1ec9nh Long An, Th\u00f4ng tin Ch\u00ednh ph\u1ee7<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"<p>M\u1ed9t chi\u1ebfn d\u1ecbch l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn m\u1edbi v\u1edbi th\u1ee7 \u0111o\u1ea1n v\u00f4 c\u00f9ng tinh vi v\u00e0 nguy hi\u1ec3m \u0111ang nh\u1eafm v\u00e0o ng\u01b0\u1eddi d\u00f9ng Facebook, l\u1ee3i d\u1ee5ng ch\u00ednh m\u1ed9t d\u1ecbch v\u1ee5 h\u1ee3p ph\u00e1p c\u1ee7a Google \u0111\u1ec3 qua m\u1eb7t c\u00e1c h\u1ec7 th\u1ed1ng b\u1ea3o v\u1ec7 email. \u200b Theo \u0111\u00f3, t\u1ed9i ph\u1ea1m m\u1ea1ng \u0111\u00e3 s\u1eed d\u1ee5ng ph\u1ea7n m\u1ec1m Google [&hellip;]<\/p>\n","protected":false},"author":20,"featured_media":46312,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,35],"tags":[],"class_list":["post-46311","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46311","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46311"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46311\/revisions"}],"predecessor-version":[{"id":46313,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46311\/revisions\/46313"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46312"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46311"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46311"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46311"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}