{"id":46530,"date":"2025-08-15T09:18:32","date_gmt":"2025-08-15T02:18:32","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46530"},"modified":"2025-08-15T09:18:32","modified_gmt":"2025-08-15T02:18:32","slug":"lo-hong-cong-cu-root-android-nguy-co-mat-toan-quyen-kiem-soat-thiet-bi","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/lo-hong-cong-cu-root-android-nguy-co-mat-toan-quyen-kiem-soat-thiet-bi\/","title":{"rendered":"L\u1ed7 h\u1ed5ng c\u00f4ng c\u1ee5 root Android, nguy c\u01a1 m\u1ea5t to\u00e0n quy\u1ec1n ki\u1ec3m so\u00e1t thi\u1ebft b\u1ecb"},"content":{"rendered":"

C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt t\u1eeb Zimperium\u2019s zLabs v\u1eeba c\u00f4ng b\u1ed1 m\u1ed9t ph\u00e1t hi\u1ec7n \u0111\u00e1ng lo ng\u1ea1i, m\u1ed9t l\u1ed7 h\u1ed5ng nguy hi\u1ec3m trong c\u00e1c c\u00f4ng c\u1ee5 root Android ph\u1ed5 bi\u1ebfn, \u0111\u1eb7c bi\u1ec7t l\u00e0 KernelSU phi\u00ean b\u1ea3n 0.5.7, c\u00f3 th\u1ec3 cho ph\u00e9p \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t ho\u00e0n to\u00e0n thi\u1ebft b\u1ecb \u0111\u00e3 root m\u00e0 ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng h\u1ec1 hay bi\u1ebft.<\/b><\/p>\n

\n
\"gm-60632e8f-20be-4b5a-9ca6-a6a9f5d019e6-android-main.jpeg\"<\/div>\n<\/div>\n

Root l\u00e0 qu\u00e1 tr\u00ecnh m\u1edf kh\u00f3a gi\u1edbi h\u1ea1n m\u1eb7c \u0111\u1ecbnh c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh Android, cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng can thi\u1ec7p s\u00e2u v\u00e0o h\u1ec7 th\u1ed1ng. \u0110i\u1ec1u n\u00e0y mang l\u1ea1i nhi\u1ec1u ti\u1ec7n \u00edch (t\u00f9y ch\u1ec9nh giao di\u1ec7n, c\u00e0i \u1ee9ng d\u1ee5ng \u0111\u1eb7c bi\u1ec7t\u2026), nh\u01b0ng \u0111\u1ed3ng th\u1eddi c\u0169ng m\u1edf ra \u201cc\u1eeda sau\u201d \u0111\u1ec3 m\u00e3 \u0111\u1ed9c khai th\u00e1c. C\u00e1c framework hi\u1ec7n \u0111\u1ea1i nh\u01b0 KernelSU, APatch, SKRoot ho\u1ea1t \u0111\u1ed9ng b\u1eb1ng c\u00e1ch ch\u1ec9nh s\u1eeda tr\u1ef1c ti\u1ebfp nh\u00e2n (kernel) Android, t\u1ea1o k\u00eanh li\u00ean l\u1ea1c b\u00ed m\u1eadt gi\u1eefa \u1ee9ng d\u1ee5ng qu\u1ea3n l\u00fd v\u00e0 h\u1ec7 th\u1ed1ng.<\/p>\n

C\u00e1c chuy\u00ean gia \u0111\u00e3 ph\u00e1t hi\u1ec7n l\u1ed7i x\u00e1c th\u1ef1c trong KernelSU, khi \u1ee9ng d\u1ee5ng y\u00eau c\u1ea7u quy\u1ec1n root, h\u1ec7 th\u1ed1ng s\u1ebd ki\u1ec3m tra ch\u1eef k\u00fd s\u1ed1 c\u1ee7a t\u1ec7p APK \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o \u0111\u00e2y l\u00e0 \u1ee9ng d\u1ee5ng qu\u1ea3n l\u00fd ch\u00ednh th\u1ee9c. Tuy nhi\u00ean, qu\u00e1 tr\u00ecnh ki\u1ec3m tra n\u00e0y ch\u1ec9 l\u1ea5y t\u1ec7p APK \u0111\u1ea7u ti\u00ean t\u00ecm th\u1ea5y trong b\u1ea3ng \u201cfile descriptor\u201d (danh s\u00e1ch c\u00e1c t\u1ec7p \u0111ang m\u1edf).<\/p>\n

K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng b\u1eb1ng c\u00e1ch:<\/p>\n

    \n
  • Nh\u00fang t\u1ec7p APK ch\u00ednh th\u1ee9c c\u1ee7a KernelSU v\u00e0o b\u00ean trong \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i.<\/li>\n
  • S\u1eafp x\u1ebfp th\u1ee9 t\u1ef1 file descriptor \u0111\u1ec3 t\u1ec7p gi\u1ea3 n\u00e0y \u0111\u01b0\u1ee3c \u0111\u1ecdc tr\u01b0\u1edbc.<\/li>\n
  • G\u1eedi \u201cm\u1eadt kh\u1ea9u\u201d \u0111\u1eb7c bi\u1ec7t (gi\u00e1 tr\u1ecb 0xDEADBEEF qua l\u1ec7nh h\u1ec7 th\u1ed1ng prctl) \u0111\u1ec3 \u0111\u00e1nh l\u1eeba c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c.<\/li>\n<\/ul>\n

    K\u1ebft qu\u1ea3 l\u00e0 \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i m\u1ea1o danh th\u00e0nh c\u00f4ng \u1ee9ng d\u1ee5ng qu\u1ea3n l\u00fd KernelSU, t\u1eeb \u0111\u00f3 c\u00f3 th\u1ec3 th\u1ef1c thi l\u1ec7nh c\u1ea5p quy\u1ec1n root, thay \u0111\u1ed5i ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt (SEPolicy) v\u00e0 duy tr\u00ec quy\u1ec1n ki\u1ec3m so\u00e1t thi\u1ebft b\u1ecb.<\/p>\n

    Kh\u00f4ng ch\u1ec9 KernelSU, c\u00e1c c\u00f4ng c\u1ee5 root kh\u00e1c nh\u01b0 APatch, Magisk\u2026 c\u0169ng t\u1eebng g\u1eb7p l\u1ed7i t\u01b0\u01a1ng t\u1ef1. \u0110\u00e2y l\u00e0 v\u1ea5n \u0111\u1ec1 mang t\u00ednh h\u1ec7 th\u1ed1ng trong c\u1ed9ng \u0111\u1ed3ng ph\u00e1t tri\u1ec3n c\u00f4ng c\u1ee5 root.<\/p>\n

      \n
    • Ng\u01b0\u1eddi d\u00f9ng c\u00e1 nh\u00e2n: n\u1ebfu c\u00e0i \u1ee9ng d\u1ee5ng kh\u00f4ng r\u00f5 ngu\u1ed3n g\u1ed1c tr\u00ean thi\u1ebft b\u1ecb \u0111\u00e3 root, m\u00e3 \u0111\u1ed9c c\u00f3 th\u1ec3 to\u00e0n quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n m\u00e1y, l\u1ea5y d\u1eef li\u1ec7u c\u00e1 nh\u00e2n, c\u00e0i keylogger ho\u1eb7c c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m gi\u00e1n \u0111i\u1ec7p kh\u00e1c.<\/li>\n
    • Doanh nghi\u1ec7p: thi\u1ebft b\u1ecb di \u0111\u1ed9ng c\u1ee7a nh\u00e2n vi\u00ean b\u1ecb khai th\u00e1c c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh \u0111i\u1ec3m y\u1ebfu, l\u00e0m r\u00f2 r\u1ec9 d\u1eef li\u1ec7u n\u1ed9i b\u1ed9.<\/li>\n<\/ul>\n

      Rooting framework th\u01b0\u1eddng \u0111\u01b0\u1ee3c ph\u00e1t tri\u1ec3n b\u1edfi nh\u00f3m \u0111\u1ed9c l\u1eadp, kh\u00f4ng tr\u1ea3i qua quy tr\u00ecnh ki\u1ec3m th\u1eed b\u1ea3o m\u1eadt ch\u1eb7t ch\u1ebd. H\u01a1n n\u1eefa, do root cho ph\u00e9p quy\u1ec1n t\u1ed1i cao tr\u00ean thi\u1ebft b\u1ecb, ch\u1ec9 m\u1ed9t l\u1ed7i nh\u1ecf trong c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c c\u0169ng \u0111\u1ee7 \u0111\u1ec3 m\u1edf toang c\u1eeda cho tin t\u1eb7c.<\/p>\n

      C\u00e1c chuy\u00ean gia khuy\u1ebfn c\u00e1o<\/p>\n

        \n
      • Ng\u01b0\u1eddi d\u00f9ng ph\u1ed5 th\u00f4ng: Kh\u00f4ng root n\u1ebfu kh\u00f4ng th\u1ef1c s\u1ef1 c\u1ea7n thi\u1ebft. N\u1ebfu \u0111\u00e3 root, h\u00e3y ch\u1ec9 c\u00e0i \u1ee9ng d\u1ee5ng t\u1eeb ngu\u1ed3n tin c\u1eady v\u00e0 c\u1eadp nh\u1eadt framework th\u01b0\u1eddng xuy\u00ean.<\/li>\n
      • Doanh nghi\u1ec7p: C\u1ea7n tri\u1ec3n khai gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt di \u0111\u1ed9ng (Mobile Threat Defense) \u0111\u1ec3 gi\u00e1m s\u00e1t t\u00ecnh tr\u1ea1ng root v\u00e0 ph\u00e1t hi\u1ec7n h\u00e0nh vi b\u1ea5t th\u01b0\u1eddng theo th\u1eddi gian th\u1ef1c.<\/li>\n<\/ul>\n

        Root c\u00f3 th\u1ec3 bi\u1ebfn chi\u1ebfc Android c\u1ee7a b\u1ea1n th\u00e0nh m\u1ed9t c\u00f4ng c\u1ee5 m\u1ea1nh m\u1ebd, nh\u01b0ng \u0111\u1ed3ng th\u1eddi c\u0169ng khi\u1ebfn n\u00f3 tr\u1edf th\u00e0nh \u201cm\u00f3n ngon\u201d trong m\u1eaft tin t\u1eb7c. H\u00e3y c\u1ea9n th\u1eadn v\u00ec ch\u1ec9 m\u1ed9t ch\u00fat l\u01a1 l\u00e0, \u0111i\u1ec7n tho\u1ea1i c\u1ee7a b\u1ea1n s\u1ebd ch\u1eb3ng c\u00f2n l\u00e0 c\u1ee7a b\u1ea1n n\u1eefa.<\/p>\n

        WhiteHat<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"

        C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt t\u1eeb Zimperium\u2019s zLabs v\u1eeba c\u00f4ng b\u1ed1 m\u1ed9t ph\u00e1t hi\u1ec7n \u0111\u00e1ng lo ng\u1ea1i, m\u1ed9t l\u1ed7 h\u1ed5ng nguy hi\u1ec3m trong c\u00e1c c\u00f4ng c\u1ee5 root Android ph\u1ed5 bi\u1ebfn, \u0111\u1eb7c bi\u1ec7t l\u00e0 KernelSU phi\u00ean b\u1ea3n 0.5.7, c\u00f3 th\u1ec3 cho ph\u00e9p \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t ho\u00e0n to\u00e0n thi\u1ebft b\u1ecb \u0111\u00e3 […]<\/p>\n","protected":false},"author":20,"featured_media":46531,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-46530","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46530"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46530\/revisions"}],"predecessor-version":[{"id":46532,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46530\/revisions\/46532"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46531"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46530"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46530"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}