{"id":47450,"date":"2026-03-01T08:24:27","date_gmt":"2026-03-01T01:24:27","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47450"},"modified":"2026-03-04T08:25:20","modified_gmt":"2026-03-04T01:25:20","slug":"canh-bao-chien-dich-lua-dao-quy-mo-lon-nham-vao-nganh-van-tai-va-logistics","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/canh-bao-chien-dich-lua-dao-quy-mo-lon-nham-vao-nganh-van-tai-va-logistics\/","title":{"rendered":"C\u1ea3nh b\u00e1o chi\u1ebfn d\u1ecbch l\u1eeba \u0111\u1ea3o quy m\u00f4 l\u1edbn nh\u1eafm v\u00e0o ng\u00e0nh v\u1eadn t\u1ea3i v\u00e0 logistics"},"content":{"rendered":"
\n
<\/i>\u00a0H\u1ed3ng \u0110\u1ea1t<\/a><\/div>\n<\/div>\n

M\u1ed9t nh\u00f3m t\u1ed9i ph\u1ea1m m\u1ea1ng c\u00f3 \u0111\u1ed9ng c\u01a1 t\u00e0i ch\u00ednh c\u00f3 t\u00ean l\u00e0 \u201cDiesel Vortex\u201d \u0111ang \u0111\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp c\u1ee7a c\u00e1c nh\u00e0 \u0111i\u1ec1u h\u00e0nh v\u1eadn t\u1ea3i v\u00e0 logistics \u1edf M\u1ef9 c\u0169ng nh\u01b0 ch\u00e2u \u00c2u, th\u00f4ng qua c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o (phishing) s\u1eed d\u1ee5ng 52 t\u00ean mi\u1ec1n.<\/p>\n

Trong m\u1ed9t chi\u1ebfn d\u1ecbch di\u1ec5n ra t\u1eeb th\u00e1ng 9\/2025, nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 \u0111\u00e1nh c\u1eafp 1.649 th\u00f4ng tin \u0111\u0103ng nh\u1eadp t\u1eeb \u200b\u200bc\u00e1c n\u1ec1n t\u1ea3ng v\u00e0 nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 quan tr\u1ecdng trong ng\u00e0nh v\u1eadn t\u1ea3i h\u00e0ng h\u00f3a. M\u1ed9t s\u1ed1 n\u1ea1n nh\u00e2n bao g\u1ed3m DAT Truckstop, TIMOCOM, Teleroute, Penske Logistics, Girteka v\u00e0 Electronic Funds Source (EFS).<\/p>\n

C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u t\u1ea1i n\u1ec1n t\u1ea3ng gi\u00e1m s\u00e1t Have I Been Squatted \u0111\u00e3 ph\u00e1t hi\u1ec7n ra chi\u1ebfn d\u1ecbch n\u00e0y, sau khi t\u00ecm th\u1ea5y m\u1ed9t kho l\u01b0u tr\u1eef b\u1ecb r\u00f2 r\u1ec9 ch\u1ee9a c\u01a1 s\u1edf d\u1eef li\u1ec7u SQL t\u1eeb m\u1ed9t d\u1ef1 \u00e1n l\u1eeba \u0111\u1ea3o m\u00e0 k\u1ebb t\u1ea5n c\u00f4ng \u0111\u1eb7t t\u00ean l\u00e0 Global Profit v\u00e0 ti\u1ebfp th\u1ecb n\u00f3 cho t\u1ed9i ph\u1ea1m m\u1ea1ng d\u01b0\u1edbi t\u00ean g\u1ecdi MC Profit Always. Nh\u1eefng n\u1ed7 l\u1ef1c ph\u00e2n t\u00edch c\u1ee7a Have I Been Squatted \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3 b\u1edfi nh\u00e0 cung c\u1ea5p c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng tokenization Ctrl-Alt-Intel<\/p>\n

\u0110\u00e1ng ch\u00fa \u00fd, kho l\u01b0u tr\u1eef n\u00e0y c\u0169ng bao g\u1ed3m m\u1ed9t t\u1ec7p ch\u1ee9a nh\u1eadt k\u00fd webhook c\u1ee7a\u00a0Telegram<\/a>, ti\u1ebft l\u1ed9 c\u00e1c cu\u1ed9c li\u00ean l\u1ea1c gi\u1eefa nh\u1eefng k\u1ebb \u0111i\u1ec1u h\u00e0nh d\u1ecbch v\u1ee5 l\u1eeba \u0111\u1ea3o. D\u1ef1a tr\u00ean ng\u00f4n ng\u1eef \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u nh\u1eadn \u0111\u1ecbnh r\u1eb1ng Diesel Vortex l\u00e0 m\u1ed9t nh\u00f3m tin t\u1eb7c n\u00f3i ti\u1ebfng Armenia c\u00f3 li\u00ean k\u1ebft v\u1edbi c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng c\u1ee7a\u00a0Nga<\/a>. Trong m\u1ed9t b\u00e1o c\u00e1o k\u1ef9 thu\u1eadt g\u1ea7n \u0111\u00e2y, Have I Been Squatted cho bi\u1ebft h\u1ecd ph\u00e1t hi\u1ec7n g\u1ea7n 3.500 c\u1eb7p th\u00f4ng tin \u0111\u0103ng nh\u1eadp b\u1ecb \u0111\u00e1nh c\u1eafp.<\/p>\n

<\/p>\n

S\u1ed1 l\u01b0\u1ee3ng th\u00f4ng tin \u0111\u0103ng nh\u1eadp b\u1ecb \u0111\u00e1nh c\u1eafp b\u1edfi Diesel Vortex<\/em><\/p>\n

Have I Been Squatted chia s\u1ebb th\u00eam, h\u1ecd t\u00ecm th\u1ea5y m\u1ed1i li\u00ean h\u1ec7 gi\u1eefa c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u1edbi b\u1ea3n \u0111\u1ed3 mindmap do m\u1ed9t th\u00e0nh vi\u00ean c\u1ee7a Diesel Vortex t\u1ea1o ra, m\u00f4 t\u1ea3 m\u1ed9t \u201cho\u1ea1t \u0111\u1ed9ng \u0111\u01b0\u1ee3c t\u1ed5 ch\u1ee9c r\u1ea5t b\u00e0i b\u1ea3n\u201d, bao g\u1ed3m trung t\u00e2m cu\u1ed9c g\u1ecdi, h\u1ed7 tr\u1ee3 qua mail, vai tr\u00f2 l\u1eadp tr\u00ecnh vi\u00ean v\u00e0 nh\u00e2n vi\u00ean ch\u1ecbu tr\u00e1ch nhi\u1ec7m t\u00ecm ki\u1ebfm t\u00e0i x\u1ebf, ng\u01b0\u1eddi v\u1eadn chuy\u1ec3n v\u00e0 c\u00e1c li\u00ean h\u1ec7 h\u1eadu c\u1ea7n. H\u01a1n n\u1eefa, b\u1ea3n \u0111\u1ed3 n\u00e0y cung c\u1ea5p th\u00f4ng tin chi ti\u1ebft v\u1ec1 c\u00e1c k\u00eanh thu h\u00fat kh\u00e1ch h\u00e0ng, trong \u0111\u00f3 c\u00f3 th\u1ecb tr\u01b0\u1eddng DAT One, c\u00e1c chi\u1ebfn d\u1ecbch\u00a0email<\/a>, gian l\u1eadn gi\u00e1 v\u00e0 doanh thu cho c\u00e1c c\u1ea5p \u0111\u1ed9 ho\u1ea1t \u0111\u1ed9ng kh\u00e1c nhau.<\/p>\n

\u201cC\u00e1c tin t\u1eb7c Diesel Vortex \u0111\u00e3 x\u00e2y d\u1ef1ng c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng l\u1eeba \u0111\u1ea3o chuy\u00ean d\u1ee5ng cho c\u00e1c n\u1ec1n t\u1ea3ng \u0111\u01b0\u1ee3c c\u00e1c nh\u00e0 m\u00f4i gi\u1edbi v\u1eadn t\u1ea3i, c\u00f4ng ty v\u1eadn t\u1ea3i \u0111\u01b0\u1eddng b\u1ed9 v\u00e0 nh\u00e0 \u0111i\u1ec1u h\u00e0nh chu\u1ed7i cung \u1ee9ng s\u1eed d\u1ee5ng h\u00e0ng ng\u00e0y. C\u00e1c b\u1ea3ng th\u00f4ng tin v\u1eadn chuy\u1ec3n h\u00e0ng h\u00f3a, c\u1ed5ng qu\u1ea3n l\u00fd \u0111\u1ed9i xe, h\u1ec7 th\u1ed1ng th\u1ebb nhi\u00ean li\u1ec7u v\u00e0 s\u00e0n giao d\u1ecbch v\u1eadn t\u1ea3i \u0111\u1ec1u n\u1eb1m trong t\u1ea7m ng\u1eafm\u201d, Have I Been Squatted cho bi\u1ebft.<\/p>\n

C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng b\u1eaft \u0111\u1ea7u b\u1eb1ng vi\u1ec7c g\u1eedi email \u0111\u1ed9c h\u1ea1i \u0111\u1ebfn c\u00e1c m\u1ee5c ti\u00eau th\u00f4ng qua ph\u1ea7n m\u1ec1m g\u1eedi th\u01b0 c\u1ee7a b\u1ed9 c\u00f4ng c\u1ee5 l\u1eeba \u0111\u1ea3o, s\u1eed d\u1ee5ng\u00a0Zoho<\/a>\u00a0SMTP v\u00e0 Zeptomail, k\u1ebft h\u1ee3p c\u00e1c k\u00fd t\u1ef1 Cyrillic \u0111\u1ed3ng \u00e2m trong tr\u01b0\u1eddng ng\u01b0\u1eddi g\u1eedi v\u00e0 ti\u00eau \u0111\u1ec1 \u0111\u1ec3 n\u00e9 tr\u00e1nh c\u00e1c b\u1ed9 l\u1ecdc b\u1ea3o m\u1eadt. B\u00ean c\u1ea1nh \u0111\u00f3, c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng c\u0169ng s\u1eed d\u1ee5ng c\u1ea3 h\u00ecnh th\u1ee9c l\u1eeba \u0111\u1ea3o qua \u0111i\u1ec7n tho\u1ea1i v\u00e0 x\u00e2m nh\u1eadp v\u00e0o c\u00e1c k\u00eanh Telegram th\u01b0\u1eddng \u0111\u01b0\u1ee3c nh\u00e2n vi\u00ean v\u1eadn t\u1ea3i v\u00e0 logistics s\u1eed d\u1ee5ng.<\/p>\n

Khi n\u1ea1n nh\u00e2n nh\u1ea5p v\u00e0o nh\u1eefng li\u00ean k\u1ebft \u0111\u1ed9c h\u1ea1i, h\u1ecd s\u1ebd \u0111\u01b0\u1ee3c chuy\u1ec3n \u0111\u1ebfn m\u1ed9t trang HTML t\u1ed1i gi\u1ea3n tr\u00ean t\u00ean mi\u1ec1n \u201c.com\u201d v\u1edbi m\u1ed9t iframe to\u00e0n m\u00e0n h\u00ecnh nh\u00fang n\u1ed9i dung l\u1eeba \u0111\u1ea3o, ti\u1ebfp theo l\u00e0 quy tr\u00ecnh che gi\u1ea5u (cloaking) 9 b\u01b0\u1edbc tr\u00ean t\u00ean mi\u1ec1n h\u1ec7 th\u1ed1ng (.top\/.icu).<\/p>\n

C\u00e1c trang web l\u1eeba \u0111\u1ea3o l\u00e0 b\u1ea3n sao ch\u00ednh x\u00e1c \u0111\u1ebfn t\u1eebng pixel c\u1ee7a c\u00e1c n\u1ec1n t\u1ea3ng logistics m\u1ee5c ti\u00eau. T\u00f9y thu\u1ed9c v\u00e0o \u0111\u1ed1i t\u01b0\u1ee3ng, ch\u00fang c\u00f3 th\u1ec3\u00a0thu th\u1eadp th\u00f4ng tin<\/a>\u00a0\u0111\u0103ng nh\u1eadp, d\u1eef li\u1ec7u gi\u1ea5y ph\u00e9p, s\u1ed1 MC\/DOT, th\u00f4ng tin \u0111\u0103ng nh\u1eadp RMIS, m\u00e3 PIN, m\u00e3 x\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1 (2FA), m\u00e3 b\u1ea3o m\u1eadt, s\u1ed1 ti\u1ec1n thanh to\u00e1n, t\u00ean ng\u01b0\u1eddi nh\u1eadn v\u00e0 s\u1ed1 s\u00e9c.<\/p>\n

<\/p>\n

Hai trang web l\u1eeba \u0111\u1ea3o \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong c\u00f9ng m\u1ed9t chu\u1ed7i t\u1ea5n c\u00f4ng<\/em><\/p>\n

Qu\u00e1 tr\u00ecnh t\u1ea5n c\u00f4ng di\u1ec5n ra d\u01b0\u1edbi s\u1ef1 ki\u1ec3m so\u00e1t tr\u1ef1c ti\u1ebfp c\u1ee7a k\u1ebb \u0111i\u1ec1u h\u00e0nh, ng\u01b0\u1eddi n\u00e0y quy\u1ebft \u0111\u1ecbnh khi n\u00e0o ph\u00ea duy\u1ec7t c\u00e1c b\u01b0\u1edbc v\u00e0 k\u00edch ho\u1ea1t c\u00e1c giai \u0111o\u1ea1n ti\u1ebfp theo th\u00f4ng qua c\u00e1c bot Telegram. C\u00e1c h\u00e0nh \u0111\u1ed9ng c\u00f3 th\u1ec3 bao g\u1ed3m y\u00eau c\u1ea7u m\u1eadt kh\u1ea9u cho Google, Microsoft Office 365 v\u00e0 Yahoo, c\u00e1c ph\u01b0\u01a1ng th\u1ee9c x\u00e1c th\u1ef1c 2FA, chuy\u1ec3n h\u01b0\u1edbng n\u1ea1n nh\u00e2n ho\u1eb7c th\u1eadm ch\u00ed ch\u1eb7n h\u1ecd gi\u1eefa ch\u1eebng.<\/p>\n

<\/p>\n

T\u1ed5ng quan v\u1ec1 cu\u1ed9c t\u1ea5n c\u00f4ng<\/em><\/p>\n

C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u cho bi\u1ebft ho\u1ea1t \u0111\u1ed9ng c\u1ee7a Diesel Vortex, v\u1edbi c\u00e1c t\u00ean mi\u1ec1n gi\u1ea3 m\u1ea1o v\u00e0 c\u00e1c kho l\u01b0u tr\u1eef\u00a0GitLab<\/a>, \u0111\u00e3 b\u1ecb gi\u00e1n \u0111o\u1ea1n sau m\u1ed9t h\u00e0nh \u0111\u1ed9ng ph\u1ed1i h\u1ee3p chung gi\u1eefa GitLab,\u00a0Cloudflare<\/a>, Google Threat Intelligence, CrowdStrike v\u00e0 Microsoft Threat Intelligence Center.<\/p>\n

V\u1ec1 ph\u00eda m\u00ecnh, Ctrl-Alt-Intel \u0111\u00e3 ti\u1ebfn h\u00e0nh m\u1ed9t cu\u1ed9c \u0111i\u1ec1u tra OSINT b\u1eaft \u0111\u1ea7u t\u1eeb c\u00e1c cu\u1ed9c tr\u00f2 chuy\u1ec7n Telegram b\u1eb1ng ti\u1ebfng Armenia c\u1ee7a c\u00e1c \u0111\u1ed1i t\u01b0\u1ee3ng \u0111i\u1ec1u h\u00e0nh, v\u1ec1 vi\u1ec7c \u0111\u00e1nh c\u1eafp h\u00e0ng h\u00f3a ho\u1eb7c ti\u1ec1n b\u1ea1c v\u00e0 m\u1ed9t \u0111\u1ecba ch\u1ec9 email.<\/p>\n

C\u00f9ng v\u1edbi t\u00ean mi\u1ec1n \u0111\u01b0\u1ee3c t\u00ecm th\u1ea5y trong m\u00e3 ngu\u1ed3n c\u1ee7a b\u1ea3ng \u0111i\u1ec1u khi\u1ec3n c\u00f4ng c\u1ee5, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u00e3 ph\u00e1t hi\u1ec7n ra m\u1ed1i li\u00ean h\u1ec7 v\u1edbi c\u00e1c c\u00e1 nh\u00e2n v\u00e0 c\u00f4ng ty \u1edf Nga tham gia v\u00e0o ho\u1ea1t \u0111\u1ed9ng th\u01b0\u01a1ng m\u1ea1i b\u00e1n bu\u00f4n, v\u1eadn t\u1ea3i v\u00e0 kho b\u00e3i. D\u1ef1a tr\u00ean c\u00e1c b\u1eb1ng ch\u1ee9ng thu th\u1eadp \u0111\u01b0\u1ee3c, Diesel Vortex \u0111\u00e3 \u0111\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp v\u00e0 ph\u1ed1i h\u1ee3p c\u00e1c ho\u1ea1t \u0111\u1ed9ng li\u00ean quan \u0111\u1ebfn m\u1ea1o danh v\u1eadn chuy\u1ec3n h\u00e0ng h\u00f3a, x\u00e2m ph\u1ea1m h\u1ed9p th\u01b0 \u0111i\u1ec7n t\u1eed ho\u1eb7c chuy\u1ec3n h\u01b0\u1edbng h\u00e0ng h\u00f3a.<\/p>\n

C\u00e1c ch\u1ec9 b\u00e1o \u0111\u1ea7y \u0111\u1ee7 v\u1ec1 s\u1ef1 x\u00e2m ph\u1ea1m (IoC), bao g\u1ed3m m\u1ea1ng, Telegram, c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng, email v\u00e0 \u0111\u1ecba ch\u1ec9 ti\u1ec1n \u0111i\u1ec7n t\u1eed, \u0111\u1ec1u c\u00f3 s\u1eb5n \u1edf cu\u1ed1i b\u00e1o c\u00e1o Have I Been Squatted. Qu\u00fd \u0111\u1ed9c gi\u1ea3 c\u00f3 th\u1ec3 theo d\u00f5i th\u00f4ng tin chi ti\u1ebft\u00a0t\u1ea1i \u0111\u00e2y.<\/a><\/p>\n<\/article>\n","protected":false},"excerpt":{"rendered":"

\u00a0H\u1ed3ng \u0110\u1ea1t M\u1ed9t nh\u00f3m t\u1ed9i ph\u1ea1m m\u1ea1ng c\u00f3 \u0111\u1ed9ng c\u01a1 t\u00e0i ch\u00ednh c\u00f3 t\u00ean l\u00e0 \u201cDiesel Vortex\u201d \u0111ang \u0111\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp c\u1ee7a c\u00e1c nh\u00e0 \u0111i\u1ec1u h\u00e0nh v\u1eadn t\u1ea3i v\u00e0 logistics \u1edf M\u1ef9 c\u0169ng nh\u01b0 ch\u00e2u \u00c2u, th\u00f4ng qua c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o (phishing) s\u1eed d\u1ee5ng 52 t\u00ean mi\u1ec1n. Trong m\u1ed9t […]<\/p>\n","protected":false},"author":20,"featured_media":47451,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47450","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47450","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47450"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47450\/revisions"}],"predecessor-version":[{"id":47452,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47450\/revisions\/47452"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47451"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47450"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47450"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47450"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}