{"id":46498,"date":"2025-07-24T09:43:33","date_gmt":"2025-07-24T02:43:33","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46498"},"modified":"2025-07-29T09:44:21","modified_gmt":"2025-07-29T02:44:21","slug":"lo-hong-nghiem-trong-anh-huong-den-hon-1-000-may-chu-crushftp","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/lo-hong-nghiem-trong-anh-huong-den-hon-1-000-may-chu-crushftp\/","title":{"rendered":"L\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn h\u01a1n 1.000 m\u00e1y ch\u1ee7 CrushFTP"},"content":{"rendered":"<div class=\"d-flex flex-wrap\">\n<div class=\"h6 text-dark\"><i class=\"fas fa-user-edit\"><\/i>\u00a0<a href=\"https:\/\/antoanthongtin.vn\/bai-viet?AuthorIds=H%E1%BB%93ng%20%C4%90%E1%BA%A1t\">H\u1ed3ng \u0110\u1ea1t<\/a><\/div>\n<\/div>\n<p class=\"mt-3 excerpt\">H\u01a1n 1.000 m\u00e1y ch\u1ee7 CrushFTP tr\u1ef1c tuy\u1ebfn hi\u1ec7n t\u1ea1i b\u1ecb ph\u00e1t hi\u1ec7n d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n, b\u1eb1ng c\u00e1ch khai th\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng CVE-2025-54309, tin t\u1eb7c cung c\u1ea5p quy\u1ec1n truy c\u1eadp qu\u1ea3n tr\u1ecb v\u00e0o giao di\u1ec7n web.<\/p>\n<div id=\"relatedPost\" class=\"mt-3 mb-3\">\n<div class=\"\">\n<ul class=\"ms-2\">\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"Kh\u00e1m ph\u00e1 v\u1ec1 t\u1ea5n c\u00f4ng PerfektBlue nh\u1eb1m khai th\u00e1c Bluetooth BlueSDK\">Kh\u00e1m ph\u00e1 v\u1ec1 t\u1ea5n c\u00f4ng PerfektBlue nh\u1eb1m khai th\u00e1c Bluetooth BlueSDK<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"CISA c\u1ea3nh b\u00e1o nguy c\u01a1 t\u00e0u h\u1ecfa b\u1ecb t\u1ea5n c\u00f4ng t\u1eeb xa qua l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn h\u1ec7 th\u1ed1ng phanh\">CISA c\u1ea3nh b\u00e1o nguy c\u01a1 t\u00e0u h\u1ecfa b\u1ecb t\u1ea5n c\u00f4ng t\u1eeb xa qua l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn h\u1ec7 th\u1ed1ng phanh<\/li>\n<\/ul>\n<\/li>\n<li class=\"d-flex\">\n<ul class=\"d-flex flex-column gap-2\">\n<li class=\"title bullet\" title=\"C\u1ea3nh b\u00e1o l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong WinRAR\">C\u1ea3nh b\u00e1o l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng trong WinRAR<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<article id=\"content\" class=\"content gradient\"><img decoding=\"async\" src=\"https:\/\/dulieu.antoanthongtin.gov.vn\/tapchiantoanthongtin\/d9011adc-d4c7-4b9c-b1a5-8e680928f30d\/1752893613128.jpg\" \/><\/p>\n<p>Nguy\u00ean nh\u00e2n d\u1eabn \u0111\u1ebfn l\u1ed7 h\u1ed5ng n\u00e0y do x\u00e1c th\u1ef1c AS2 b\u1ecb x\u1eed l\u00fd kh\u00f4ng \u0111\u00fang c\u00e1ch, \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn t\u1ea5t c\u1ea3 c\u00e1c phi\u00ean b\u1ea3n CrushFTP d\u01b0\u1edbi 10.8.5 v\u00e0 11.3.4_23. Nh\u00e0 cung c\u1ea5p \u0111\u00e3 g\u1eafn th\u1ebb l\u1ed7 h\u1ed5ng n\u00e0y \u0111ang b\u1ecb\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/canh-bao-lo-hong-nghiem-trong-tren-projectsend-dang-bi-khai-thac-tich-cuc\">khai th\u00e1c t\u00edch c\u1ef1c<\/a>, l\u01b0u \u00fd r\u1eb1ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 \u0111\u00e3 b\u1eaft \u0111\u1ea7u s\u1edbm h\u01a1n, m\u1eb7c d\u00f9 v\u1eabn ch\u01b0a t\u00ecm th\u1ea5y b\u1eb1ng ch\u1ee9ng x\u00e1c nh\u1eadn \u0111i\u1ec1u n\u00e0y.<\/p>\n<p>\u201cC\u00e1c tin t\u1eb7c c\u00f3 th\u1ec3 \u0111\u00e3 th\u1ef1c hi\u1ec7n k\u1ef9 thu\u1eadt d\u1ecbch ng\u01b0\u1ee3c v\u00e0 t\u00ecm th\u1ea5y m\u1ed9t s\u1ed1 l\u1ed7i m\u00e0 ch\u00fang t\u00f4i \u0111\u00e3 kh\u1eafc ph\u1ee5c tr\u01b0\u1edbc \u0111\u00f3. Ch\u00fang \u0111ang l\u1ee3i d\u1ee5ng l\u1ed7 h\u1ed5ng n\u00e0y \u0111\u1ec3 khai th\u00e1c \u0111\u1ebfn c\u00e1c m\u1ee5c ti\u00eau ch\u01b0a c\u1eadp nh\u1eadt phi\u00ean b\u1ea3n m\u1edbi. Nh\u01b0 th\u01b0\u1eddng l\u1ec7, ch\u00fang t\u00f4i khuy\u1ebfn ngh\u1ecb kh\u00e1ch h\u00e0ng n\u00ean v\u00e1 l\u1ed7i th\u01b0\u1eddng xuy\u00ean. N\u1ebfu \u0111\u00e3 c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 m\u1edbi nh\u1ea5t c\u1ee7a ch\u00fang t\u00f4i \u0111\u1ec1u kh\u00f4ng b\u1ecb \u1ea3nh h\u01b0\u1edfng b\u1edfi l\u1ed7 h\u1ed5ng CVE-2025-54309\u201d,\u00a0 th\u00f4ng b\u00e1o m\u1edbi \u0111\u00e2y c\u1ee7a CrushFTP cho bi\u1ebft.<\/p>\n<p>B\u00ean c\u1ea1nh \u0111\u00f3, c\u00f4ng ty chia s\u1ebb c\u00e1c t\u1ed5 ch\u1ee9c n\u00ean xem l\u1ea1i log t\u1ea3i l\u00ean (upload) v\u00e0 t\u1ea3i xu\u1ed1ng (download) \u0111\u1ec3 ph\u00e1t hi\u1ec7n ho\u1ea1t \u0111\u1ed9ng b\u1ea5t th\u01b0\u1eddng, c\u0169ng nh\u01b0 b\u1eadt t\u00ednh n\u0103ng c\u1eadp nh\u1eadt t\u1ef1 \u0111\u1ed9ng v\u00e0 \u0111\u01b0a IP v\u00e0o danh s\u00e1ch tr\u1eafng \u0111\u1ec3 truy c\u1eadp m\u00e1y ch\u1ee7, nh\u1eb1m gi\u1ea3m thi\u1ec3u h\u01a1n n\u1eefa c\u00e1c n\u1ed7 l\u1ef1c khai th\u00e1c.<\/p>\n<p>Theo c\u00e1c b\u1ea3n b\u00e1o b\u00e1o t\u1eeb n\u1ec1n t\u1ea3ng gi\u00e1m s\u00e1t m\u1ed1i \u0111e d\u1ecda b\u1ea3o m\u1eadt Shadowserver, hi\u1ec7n v\u1eabn c\u00f2n kho\u1ea3ng 1.040 phi\u00ean b\u1ea3n CrushFTP ch\u01b0a \u0111\u01b0\u1ee3c v\u00e1 l\u1ed7 h\u1ed5ng CVE-2025-54309 v\u00e0 c\u00f3 nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/dulieu.antoanthongtin.gov.vn\/tapchiantoanthongtin\/aa0d48f2-47f4-4cac-a907-bf96dfe1a767\/CVE-2025-54309_exposure(1).jpg\" \/><\/p>\n<p><em>M\u00e1y ch\u1ee7 CrushFTP ch\u01b0a \u0111\u01b0\u1ee3c v\u00e1<\/em><\/p>\n<p>ShadowServer hi\u1ec7n \u0111ang th\u00f4ng b\u00e1o cho kh\u00e1ch h\u00e0ng CrushFTP r\u1eb1ng m\u00e1y ch\u1ee7 c\u1ee7a h\u1ecd kh\u00f4ng \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 tr\u01b0\u1edbc l\u1ed7 h\u1ed5ng CVE-2025-54309 \u0111ang di\u1ec5n ra, khi\u1ebfn th\u00f4ng tin c\u1ee7a h\u1ecd d\u1ec5 b\u1ecb \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u.<\/p>\n<p>M\u1eb7c d\u00f9 v\u1eabn ch\u01b0a r\u00f5 li\u1ec7u c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng \u0111ang di\u1ec5n ra n\u00e0y c\u00f3 tri\u1ec3n khai m\u00e3 \u0111\u1ed9c hay ph\u1ea7n m\u1ec1m \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u hay kh\u00f4ng, c\u00e1c gi\u1ea3i ph\u00e1p truy\u1ec1n t\u1ec7p \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd nh\u01b0 CrushFTP \u0111\u00e3 tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau c\u00f3 gi\u00e1 tr\u1ecb cao \u0111\u1ed1i v\u1edbi c\u00e1c b\u0103ng nh\u00f3m m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n trong nh\u1eefng n\u0103m g\u1ea7n \u0111\u00e2y.<\/p>\n<p>V\u00ed d\u1ee5, ri\u00eang b\u0103ng nh\u00f3m tin t\u1eb7c Clop \u0111\u01b0\u1ee3c ghi nh\u1eadn li\u00ean quan \u0111\u1ebfn nhi\u1ec1u chi\u1ebfn d\u1ecbch\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/ven-man-phan-mem-gian-diep-batavia-danh-cap-du-lieu-cac-to-chuc-tai-nga-bang-email-doc-hai\">\u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u<\/a>\u00a0nh\u1eafm v\u00e0o c\u00e1c l\u1ed7 h\u1ed5ng zero-day trong c\u00e1c s\u1ea3n ph\u1ea9m Accelion FTA, GoAnywhere MFT, MOVEit Transfer v\u00e0 g\u1ea7n \u0111\u00e2y nh\u1ea5t l\u00e0 ph\u1ea7n m\u1ec1m Cleo.<\/p>\n<p>M\u1ed9t n\u0103m tr\u01b0\u1edbc v\u00e0o th\u00e1ng 4\/2024, CrushFTP c\u0169ng \u0111\u00e3 v\u00e1 m\u1ed9t l\u1ed7 h\u1ed5ng\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/canh-bao-ve-lo-hong-zero-day-nghiem-trong-tren-google-chrome\">zero-day<\/a>\u00a0(CVE-2024-4040) \u0111ang b\u1ecb khai th\u00e1c, cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng ch\u01b0a x\u00e1c th\u1ef1c tho\u00e1t kh\u1ecfi h\u1ec7 th\u1ed1ng VFS v\u00e0 t\u1ea3i xu\u1ed1ng c\u00e1c t\u1ec7p h\u1ec7 th\u1ed1ng.<\/p>\n<p>V\u00e0o th\u1eddi \u0111i\u1ec3m \u0111\u00f3, c\u00f4ng ty an ninh m\u1ea1ng CrowdStrike (M\u1ef9) \u0111\u00e3 t\u00ecm th\u1ea5y b\u1eb1ng ch\u1ee9ng cho th\u1ea5y c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng nh\u1eafm v\u00e0o c\u00e1c phi\u00ean b\u1ea3n CrushFTP t\u1ea1i nhi\u1ec1u t\u1ed5 ch\u1ee9c c\u1ee7a M\u1ef9, t\u1eadp trung v\u00e0o vi\u1ec7c thu th\u1eadp th\u00f4ng tin\u00a0<a href=\"https:\/\/antoanthongtin.vn\/tin\/cap-sac-type-c-co-the-tro-thanh-thiet-bi-tinh-bao\">t\u00ecnh b\u00e1o<\/a>\u00a0c\u00f3 kh\u1ea3 n\u0103ng mang \u0111\u1ed9ng c\u01a1 ch\u00ednh tr\u1ecb.<\/p>\n<\/article>\n","protected":false},"excerpt":{"rendered":"<p>\u00a0H\u1ed3ng \u0110\u1ea1t H\u01a1n 1.000 m\u00e1y ch\u1ee7 CrushFTP tr\u1ef1c tuy\u1ebfn hi\u1ec7n t\u1ea1i b\u1ecb ph\u00e1t hi\u1ec7n d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n, b\u1eb1ng c\u00e1ch khai th\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng CVE-2025-54309, tin t\u1eb7c cung c\u1ea5p quy\u1ec1n truy c\u1eadp qu\u1ea3n tr\u1ecb v\u00e0o giao di\u1ec7n web. Kh\u00e1m ph\u00e1 v\u1ec1 t\u1ea5n c\u00f4ng PerfektBlue nh\u1eb1m khai th\u00e1c [&hellip;]<\/p>\n","protected":false},"author":20,"featured_media":46499,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-46498","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46498","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46498"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46498\/revisions"}],"predecessor-version":[{"id":46500,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46498\/revisions\/46500"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46499"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46498"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46498"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46498"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}