{"id":46735,"date":"2025-09-20T14:40:33","date_gmt":"2025-09-20T07:40:33","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=46735"},"modified":"2025-09-26T14:41:28","modified_gmt":"2025-09-26T07:41:28","slug":"chatgpt-dinh-lo-hong-zero-click-du-lieu-gmail-co-the-bi-danh-cap-chi-tu-email-an","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/chatgpt-dinh-lo-hong-zero-click-du-lieu-gmail-co-the-bi-danh-cap-chi-tu-email-an\/","title":{"rendered":"ChatGPT d\u00ednh l\u1ed7 h\u1ed5ng \u201czero-click\u201d, d\u1eef li\u1ec7u Gmail c\u00f3 th\u1ec3 b\u1ecb \u0111\u00e1nh c\u1eafp ch\u1ec9 t\u1eeb email \u1ea9n"},"content":{"rendered":"

M\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt v\u1eeba \u0111\u01b0\u1ee3c c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u c\u00f4ng b\u1ed1 \u0111\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng ChatGPT v\u00e0 \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00f4ng c\u1ee5 Deep Research agent. \u0110\u00e2y l\u00e0 m\u1ed9t d\u1ea1ng t\u1ea5n c\u00f4ng zero-click, ngh\u0129a l\u00e0 ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng c\u1ea7n b\u1ea5m hay thao t\u00e1c g\u00ec, d\u1eef li\u1ec7u c\u00e1 nh\u00e2n trong Gmail v\u1eabn c\u00f3 th\u1ec3 b\u1ecb \u0111\u00e1nh c\u1eafp.<\/b><\/p>\n

\"1758254250882.png\"<\/a>\u200b<\/div>\n

Theo Radware, l\u1ed7 h\u1ed5ng \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n v\u00e0o ng\u00e0y 18\/6\/2025 khi nh\u00f3m nghi\u00ean c\u1ee9u ti\u1ebfn h\u00e0nh ki\u1ec3m th\u1eed b\u1ea3o m\u1eadt tr\u00ean ChatGPT\u2019s Deep Research agent. C\u01a1 ch\u1ebf t\u1ea5n c\u00f4ng xu\u1ea5t ph\u00e1t t\u1eeb m\u1ed9t email c\u00f3 ch\u1ee9a m\u00e3 \u0111\u1ed9c \u1ea9n b\u00ean trong HTML. C\u00e1c d\u00f2ng l\u1ec7nh nguy hi\u1ec3m n\u00e0y \u0111\u01b0\u1ee3c che gi\u1ea5u b\u1eb1ng k\u1ef9 thu\u1eadt nh\u01b0 ch\u1eef tr\u1eafng tr\u00ean n\u1ec1n tr\u1eafng ho\u1eb7c font si\u00eau nh\u1ecf (ho\u00e0n to\u00e0n v\u00f4 h\u00ecnh v\u1edbi m\u1eaft th\u01b0\u1eddng). Khi ng\u01b0\u1eddi d\u00f9ng y\u00eau c\u1ea7u Deep Research \u0111\u1ecdc v\u00e0 ph\u00e2n t\u00edch h\u1ed9p th\u01b0 Gmail, c\u00f4ng c\u1ee5 n\u00e0y c\u0169ng s\u1ebd x\u1eed l\u00fd email \u0111\u1ed9c h\u1ea1i nh\u01b0 b\u00ecnh th\u01b0\u1eddng v\u00e0 \u201cr\u01a1i v\u00e0o b\u1eaby\u201d \u0111\u01b0\u1ee3c c\u00e0i s\u1eb5n.<\/p>\n

Nguy\u00ean nh\u00e2n ch\u00ednh n\u1eb1m \u1edf k\u1ef9 thu\u1eadt gi\u00e1n ti\u1ebfp ti\u00eam l\u1ec7nh (indirect prompt injection). Hacker kh\u00f4ng t\u1ea5n c\u00f4ng tr\u1ef1c di\u1ec7n v\u00e0o ng\u01b0\u1eddi d\u00f9ng, m\u00e0 l\u1ee3i d\u1ee5ng ch\u00ednh c\u00e1ch AI \u0111\u1ecdc d\u1eef li\u1ec7u \u0111\u1ec3 \u201cthao t\u00fang\u201d n\u00f3, bu\u1ed9c h\u1ec7 th\u1ed1ng th\u1ef1c hi\u1ec7n h\u00e0nh vi ngo\u00e0i \u00fd mu\u1ed1n.<\/p>\n

Trong th\u1eed nghi\u1ec7m, k\u1ecbch b\u1ea3n t\u1ea5n c\u00f4ng di\u1ec5n ra theo t\u1eebng b\u01b0\u1edbc:<\/p>\n

    \n
  • K\u1ebb t\u1ea5n c\u00f4ng g\u1eedi email ch\u1ee9a m\u00e3 HTML \u1ea9n l\u1ec7nh.<\/li>\n
  • Khi Deep Research qu\u00e9t h\u1ed9p th\u01b0, email n\u00e0y s\u1ebd \u0111\u01b0\u1ee3c x\u1eed l\u00fd c\u00f9ng c\u00e1c th\u01b0 kh\u00e1c.<\/li>\n
  • L\u1ec7nh \u1ea9n b\u00ean trong ch\u1ec9 th\u1ecb cho AI t\u00ecm th\u00f4ng tin c\u00e1 nh\u00e2n nh\u1ea1y c\u1ea3m (v\u00ed d\u1ee5: h\u1ecd t\u00ean, \u0111\u1ecba ch\u1ec9 trong email t\u1eeb ph\u00f2ng nh\u00e2n s\u1ef1).<\/li>\n
  • Sau \u0111\u00f3, AI b\u1ecb l\u1eeba \u0111\u1ec3 m\u00e3 h\u00f3a d\u1eef li\u1ec7u b\u1eb1ng Base64, nghe c\u00f3 v\u1ebb \u201can to\u00e0n\u201d nh\u01b0ng th\u1ef1c ch\u1ea5t l\u00e0 c\u00e1ch \u0111\u1ec3 che gi\u1ea5u d\u1eef li\u1ec7u b\u1ecb \u0111\u00e1nh c\u1eafp.<\/li>\n
  • Ti\u1ebfp \u0111\u1ebfn, c\u00f4ng c\u1ee5 s\u1ebd g\u1eedi th\u00f4ng tin n\u00e0y t\u1edbi m\u00e1y ch\u1ee7 do hacker ki\u1ec3m so\u00e1t, d\u01b0\u1edbi danh ngh\u0129a \u201ch\u1ec7 th\u1ed1ng x\u00e1c th\u1ef1c tu\u00e2n th\u1ee7\u201d h\u1ee3p ph\u00e1p.<\/li>\n<\/ul>\n

    \u0110i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd l\u00e0 to\u00e0n b\u1ed9 qu\u00e1 tr\u00ecnh x\u1ea3y ra tr\u00ean h\u1ea1 t\u1ea7ng cloud c\u1ee7a OpenAI, ch\u1ee9 kh\u00f4ng h\u1ec1 hi\u1ec3n th\u1ecb tr\u00ean tr\u00ecnh duy\u1ec7t hay m\u00e1y t\u00ednh ng\u01b0\u1eddi d\u00f9ng. Ch\u00ednh \u0111i\u1ec1u n\u00e0y khi\u1ebfn t\u01b0\u1eddng l\u1eeda doanh nghi\u1ec7p, ph\u1ea7n m\u1ec1m b\u1ea3o m\u1eadt \u0111\u1ea7u cu\u1ed1i hay ch\u00ednh tr\u00ecnh duy\u1ec7t ho\u00e0n to\u00e0n kh\u00f4ng ph\u00e1t hi\u1ec7n ra.<\/p>\n

    C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u00e1nh gi\u00e1 l\u1ed7 h\u1ed5ng n\u00e0y \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m v\u00ec:<\/p>\n

      \n
    • Ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng c\u1ea7n thao t\u00e1c g\u00ec: Ch\u1ec9 c\u1ea7n AI \u0111\u1ecdc ph\u1ea3i email \u0111\u1ed9c h\u1ea1i l\u00e0 d\u1eef li\u1ec7u \u0111\u00e3 b\u1ecb r\u00f2 r\u1ec9.<\/li>\n
    • Kh\u00f3 ph\u00e1t hi\u1ec7n: T\u1ea5n c\u00f4ng di\u1ec5n ra \u1edf ph\u00eda m\u00e1y ch\u1ee7 OpenAI, kh\u00f4ng c\u00f3 d\u1ea5u hi\u1ec7u n\u00e0o tr\u00ean m\u00e0n h\u00ecnh ng\u01b0\u1eddi d\u00f9ng.<\/li>\n
    • Ph\u1ea1m vi r\u1ed9ng: Gmail ch\u1ec9 l\u00e0 v\u00ed d\u1ee5, nh\u01b0ng k\u1ecbch b\u1ea3n c\u00f3 th\u1ec3 \u00e1p d\u1ee5ng cho Google Drive, Dropbox, Outlook, Teams, Notion, GitHub\u2026 b\u1ea5t c\u1ee9 n\u01a1i n\u00e0o Deep Research \u0111\u01b0\u1ee3c k\u1ebft n\u1ed1i.<\/li>\n
    • M\u1ee9c \u0111\u1ed9 thi\u1ec7t h\u1ea1i ti\u1ec1m t\u00e0ng l\u1edbn: T\u1eeb th\u00f4ng tin c\u00e1 nh\u00e2n, h\u1ee3p \u0111\u1ed3ng, h\u1ed3 s\u01a1 nh\u00e2n s\u1ef1 cho \u0111\u1ebfn d\u1eef li\u1ec7u doanh nghi\u1ec7p quan tr\u1ecdng \u0111\u1ec1u c\u00f3 th\u1ec3 b\u1ecb khai th\u00e1c.<\/li>\n<\/ul>\n

      OpenAI \u0111\u00e3 tri\u1ec3n khai b\u1ea3n v\u00e1 v\u00e0o \u0111\u1ea7u th\u00e1ng 8\/2025 v\u00e0 ch\u00ednh th\u1ee9c \u0111\u00e1nh d\u1ea5u l\u1ed7 h\u1ed5ng n\u00e0y \u0111\u00e3 \u0111\u01b0\u1ee3c x\u1eed l\u00fd v\u00e0o ng\u00e0y 3\/9\/2025. Tuy nhi\u00ean, s\u1ef1 c\u1ed1 \u0111\u1ec3 l\u1ea1i nhi\u1ec1u b\u00e0i h\u1ecdc quan tr\u1ecdng cho c\u1ea3 ng\u01b0\u1eddi d\u00f9ng l\u1eabn c\u00e1c t\u1ed5 ch\u1ee9c:<\/p>\n

        \n
      • Lu\u00f4n c\u1ea9n tr\u1ecdng khi t\u00edch h\u1ee3p AI v\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng ch\u1ee9a d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m.<\/li>\n
      • Theo d\u00f5i h\u00e0nh vi c\u1ee7a AI: C\u1ea7n c\u00f3 c\u01a1 ch\u1ebf gi\u00e1m s\u00e1t \u0111\u1ec3 ph\u00e1t hi\u1ec7n khi AI th\u1ef1c hi\u1ec7n h\u00e0nh \u0111\u1ed9ng kh\u00f4ng \u0111\u00fang v\u1edbi m\u1ee5c \u0111\u00edch ban \u0111\u1ea7u c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/li>\n
      • N\u00e2ng cao nh\u1eadn th\u1ee9c: Hi\u1ec3u r\u1eb1ng AI c\u00f3 th\u1ec3 b\u1ecb thao t\u00fang b\u1edfi nh\u1eefng \u0111o\u1ea1n v\u0103n b\u1ea3n \u1ea9n, kh\u00f4ng ch\u1ec9 b\u1edfi m\u00e3 \u0111\u1ed9c truy\u1ec1n th\u1ed1ng.<\/li>\n
      • C\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng th\u01b0\u1eddng xuy\u00ean: \u0110\u1ea3m b\u1ea3o s\u1eed d\u1ee5ng c\u00e1c phi\u00ean b\u1ea3n m\u1edbi nh\u1ea5t \u0111\u00e3 \u0111\u01b0\u1ee3c v\u00e1 l\u1ed7i.<\/li>\n
      • Xem x\u00e9t \u00e1p d\u1ee5ng ki\u1ec3m so\u00e1t nhi\u1ec1u l\u1edbp, k\u1ebft h\u1ee3p c\u1ea3 gi\u1ea3i ph\u00e1p ph\u00eda nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 l\u1eabn ch\u00ednh s\u00e1ch n\u1ed9i b\u1ed9 doanh nghi\u1ec7p.<\/li>\n<\/ul>\n

        L\u1ed7 h\u1ed5ng \u201czero-click\u201d trong ChatGPT Deep Research l\u00e0 minh ch\u1ee9ng r\u00f5 r\u00e0ng cho th\u1ea5y AI kh\u00f4ng ch\u1ec9 mang l\u1ea1i s\u1ee9c m\u1ea1nh m\u00e0 c\u00f2n m\u1edf ra nh\u1eefng b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng ho\u00e0n to\u00e0n m\u1edbi. Khi AI c\u00f3 th\u1ec3 truy c\u1eadp d\u1eef li\u1ec7u c\u00e1 nh\u00e2n v\u00e0 doanh nghi\u1ec7p theo y\u00eau c\u1ea7u ng\u01b0\u1eddi d\u00f9ng, vi\u1ec7c hacker t\u00ecm c\u00e1ch thao t\u00fang ch\u00fang \u0111\u1ec3 chi\u1ebfm \u0111o\u1ea1t th\u00f4ng tin l\u00e0 \u0111i\u1ec1u kh\u00f3 tr\u00e1nh kh\u1ecfi. \u0110\u1eebng m\u1eb7c \u0111\u1ecbnh coi AI an to\u00e0n tuy\u1ec7t \u0111\u1ed1i, m\u00e0 c\u1ea7n x\u00e2y d\u1ef1ng l\u1edbp gi\u00e1m s\u00e1t v\u00e0 ki\u1ec3m so\u00e1t ch\u1eb7t ch\u1ebd \u0111i k\u00e8m, \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o c\u00f4ng ngh\u1ec7 ph\u1ee5c v\u1ee5 con ng\u01b0\u1eddi thay v\u00ec tr\u1edf th\u00e0nh c\u00f4ng c\u1ee5 cho t\u1ed9i ph\u1ea1m m\u1ea1ng.<\/p>\n

        WhiteHat<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"

        M\u1ed9t l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt v\u1eeba \u0111\u01b0\u1ee3c c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u c\u00f4ng b\u1ed1 \u0111\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng ChatGPT v\u00e0 \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00f4ng c\u1ee5 Deep Research agent. \u0110\u00e2y l\u00e0 m\u1ed9t d\u1ea1ng t\u1ea5n c\u00f4ng zero-click, ngh\u0129a l\u00e0 ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng c\u1ea7n b\u1ea5m hay thao t\u00e1c g\u00ec, d\u1eef li\u1ec7u c\u00e1 nh\u00e2n trong Gmail v\u1eabn c\u00f3 th\u1ec3 b\u1ecb […]<\/p>\n","protected":false},"author":20,"featured_media":46736,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-46735","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46735","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=46735"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46735\/revisions"}],"predecessor-version":[{"id":46737,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/46735\/revisions\/46737"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/46736"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=46735"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=46735"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=46735"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}