{"id":47523,"date":"2026-03-17T14:13:29","date_gmt":"2026-03-17T07:13:29","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47523"},"modified":"2026-03-18T14:14:21","modified_gmt":"2026-03-18T07:14:21","slug":"microsoft-canh-bao-chien-dich-gia-mao-vpn-phat-tan-ma-doc-danh-cap-thong-tin","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/microsoft-canh-bao-chien-dich-gia-mao-vpn-phat-tan-ma-doc-danh-cap-thong-tin\/","title":{"rendered":"Microsoft c\u1ea3nh b\u00e1o chi\u1ebfn d\u1ecbch gi\u1ea3 m\u1ea1o VPN, ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c \u0111\u00e1nh c\u1eafp th\u00f4ng tin"},"content":{"rendered":"
Microsoft v\u1eeba ph\u00e1t hi\u1ec7n m\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng do nh\u00f3m Storm-2561 th\u1ef1c hi\u1ec7n, s\u1eed d\u1ee5ng b\u1ed9 c\u00e0i VPN gi\u1ea3 m\u1ea1o \u0111\u1ec3 \u0111\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp trong m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p. \u0110\u00e1ng ch\u00fa \u00fd, chi\u1ebfn d\u1ecbch n\u00e0y kh\u00f4ng khai th\u00e1c l\u1ed7 h\u1ed5ng ph\u1ea7n m\u1ec1m m\u00e0 l\u1ee3i d\u1ee5ng th\u1ee9 h\u1ea1ng t\u00ecm ki\u1ebfm, th\u01b0\u01a1ng hi\u1ec7u quen thu\u1ed9c v\u00e0 n\u1ec1n t\u1ea3ng \u0111\u00e1ng tin c\u1eady \u0111\u1ec3 d\u1eabn d\u1ee5 ng\u01b0\u1eddi d\u00f9ng t\u1ef1 t\u1ea3i m\u00e3 \u0111\u1ed9c v\u1ec1 m\u00e1y.<\/b>
\nChuy\u00ean gia WhiteHat nh\u1eadn \u0111\u1ecbnh Storm-2561 \u0111\u00e3 ph\u1ed1i h\u1ee3p nhi\u1ec1u l\u1edbp ng\u1ee5y trang trong c\u00f9ng m\u1ed9t chu\u1ed7i t\u1ea5n c\u00f4ng, t\u1eeb thao t\u00fang k\u1ebft qu\u1ea3 t\u00ecm ki\u1ebfm, gi\u1ea3 m\u1ea1o th\u01b0\u01a1ng hi\u1ec7u, l\u01b0u tr\u1eef m\u00e3 \u0111\u1ed9c tr\u00ean GitHub \u0111\u1ebfn s\u1eed d\u1ee5ng ch\u1ee9ng ch\u1ec9 k\u00fd s\u1ed1 h\u1ee3p l\u1ec7. C\u00e1ch k\u1ebft h\u1ee3p n\u00e0y khi\u1ebfn b\u1ed9 c\u00e0i \u0111\u1ed9c h\u1ea1i d\u1ec5 qua m\u1eaft ng\u01b0\u1eddi d\u00f9ng v\u00e0 l\u00e0m t\u0103ng r\u1ee7i ro t\u1eeb ph\u1ea7n m\u1ec1m gi\u1ea3 m\u1ea1o trong m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p. D\u00f9 ch\u01b0a ph\u1ea3i t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng ph\u1ea7n m\u1ec1m theo ngh\u0129a x\u00e2m nh\u1eadp tr\u1ef1c ti\u1ebfp v\u00e0o nh\u00e0 cung c\u1ea5p, chi\u1ebfn d\u1ecbch cho th\u1ea5y tin t\u1eb7c \u0111ang l\u1ee3i d\u1ee5ng chu\u1ed7i tin c\u1eady trong qu\u00e1 tr\u00ecnh t\u00ecm ki\u1ebfm, t\u1ea3i v\u00e0 c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c.
\n\u200b<\/div>\n
\n
\"1773656781516.png\"<\/div>\n

\u200bTheo Microsoft, Storm-2561 \u0111\u00e3 ho\u1ea1t \u0111\u1ed9ng \u00edt nh\u1ea5t t\u1eeb th\u00e1ng 5\/2025 v\u00e0 \u0111\u01b0\u1ee3c ghi nh\u1eadn tr\u1edf l\u1ea1i v\u00e0o gi\u1eefa th\u00e1ng 1\/2026. K\u1ecbch b\u1ea3n t\u1ea5n c\u00f4ng b\u1eaft \u0111\u1ea7u khi ng\u01b0\u1eddi d\u00f9ng t\u00ecm ki\u1ebfm c\u00e1c ph\u1ea7n m\u1ec1m doanh nghi\u1ec7p ph\u1ed5 bi\u1ebfn, \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00f4ng c\u1ee5 k\u1ebft n\u1ed1i t\u1eeb xa nh\u01b0 VPN. C\u00e1c li\u00ean k\u1ebft gi\u1ea3 m\u1ea1o \u0111\u01b0\u1ee3c \u0111\u1ea9y l\u00ean v\u1ecb tr\u00ed d\u1ec5 th\u1ea5y tr\u00ean c\u00f4ng c\u1ee5 t\u00ecm ki\u1ebfm khi\u1ebfn n\u1ea1n nh\u00e2n t\u01b0\u1edfng l\u00e0 ngu\u1ed3n t\u1ea3i ch\u00ednh th\u1ed1ng.
\nSau khi b\u1ea5m t\u1ea3i, ng\u01b0\u1eddi d\u00f9ng b\u1ecb chuy\u1ec3n h\u01b0\u1edbng t\u1edbi m\u1ed9t kho l\u01b0u tr\u1eef \u0111\u1ed9c h\u1ea1i tr\u00ean GitHub ch\u1ee9a t\u1ec7p n\u00e9n VPN-CLIENT.zip. B\u00ean trong l\u00e0 m\u1ed9t g\u00f3i c\u00e0i \u0111\u1eb7t MSI gi\u1ea3 m\u1ea1o ph\u1ea7n m\u1ec1m Pulse Secure VPN. Khi ch\u1ea1y, b\u1ed9 c\u00e0i n\u00e0y th\u1ea3 t\u1ec7p Pulse.exe v\u00e0o th\u01b0 m\u1ee5c c\u00f3 \u0111\u01b0\u1eddng d\u1eabn g\u1ea7n gi\u1ed1ng th\u01b0 m\u1ee5c h\u1ee3p ph\u00e1p c\u1ee7a Pulse Secure \u0111\u1ec3 che gi\u1ea5u ho\u1ea1t \u0111\u1ed9ng.
\n\u200b<\/p><\/div>\n

\n
\"1773656800781.png\"<\/div>\n

\u1ea2nh ch\u1ee5p m\u00e0n h\u00ecnh trang web do tin t\u1eb7c ki\u1ec3m so\u00e1t, vpn-fortinet[.]com, gi\u1ea3 m\u1ea1o Fortinet (Ngu\u1ed3n: Microsoft)<\/i>\u200b<\/div>\n

M\u00e3 \u0111\u1ed9c \u0111\u1ed3ng th\u1eddi c\u00e0i th\u00eam hai th\u01b0 vi\u1ec7n dwmapi.dll v\u00e0 inspector.dll. Trong \u0111\u00f3, dwmapi.dll \u0111\u00f3ng vai tr\u00f2 n\u1ea1p m\u00e3 \u0111\u1ed9c tr\u1ef1c ti\u1ebfp v\u00e0o b\u1ed9 nh\u1edb, sau \u0111\u00f3 g\u1ecdi inspector.dll – m\u1ed9t bi\u1ebfn th\u1ec3 c\u1ee7a m\u00e3 \u0111\u1ed9c Hyrax chuy\u00ean \u0111\u00e1nh c\u1eafp th\u00f4ng tin. \u0110\u1ec3 duy tr\u00ec ho\u1ea1t \u0111\u1ed9ng sau khi kh\u1edfi \u0111\u1ed9ng l\u1ea1i, m\u00e3 \u0111\u1ed9c th\u00eam Pulse.exe v\u00e0o kh\u00f3a RunOnce c\u1ee7a Windows Registry.
\n\u200b<\/div>\n
\n
\"1773656853662.png\"<\/div>\n

\u0110o\u1ea1n m\u00e3 t\u1eeb trang vpn-fortinet[.]com cho th\u1ea5y t\u1ec7p VPN-CLIENT.zip \u0111\u01b0\u1ee3c t\u1ea3i xu\u1ed1ng t\u1eeb GitHub (Ngu\u1ed3n: Microsoft)<\/i>\u200b<\/div>\n

\u0110\u00e1ng ch\u00fa \u00fd, sau khi ho\u00e0n t\u1ea5t l\u00e2y nhi\u1ec5m, b\u1ed9 c\u00e0i gi\u1ea3 v\u1eabn hi\u1ec3n th\u1ecb th\u00f4ng b\u00e1o l\u1ed7i, th\u1eadm ch\u00ed chuy\u1ec3n ng\u01b0\u1eddi d\u00f9ng sang trang VPN h\u1ee3p ph\u00e1p. \u0110i\u1ec1u n\u00e0y khi\u1ebfn n\u1ea1n nh\u00e2n d\u1ec5 nh\u1ea7m r\u1eb1ng qu\u00e1 tr\u00ecnh c\u00e0i \u0111\u1eb7t ch\u1ec9 g\u1eb7p s\u1ef1 c\u1ed1 th\u00f4ng th\u01b0\u1eddng, trong khi th\u00f4ng tin \u0111\u0103ng nh\u1eadp c\u00f3 th\u1ec3 \u0111\u00e3 b\u1ecb thu th\u1eadp.
\nDoanh nghi\u1ec7p n\u00ean k\u00edch ho\u1ea1t \u0111\u1ea7y \u0111\u1ee7 c\u00e1c l\u1edbp b\u1ea3o v\u1ec7 tr\u00ean thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i, web v\u00e0 tr\u00ecnh duy\u1ec7t; \u00e1p d\u1ee5ng x\u00e1c th\u1ef1c \u0111a l\u1edbp; kh\u00f4ng l\u01b0u m\u1eadt kh\u1ea9u c\u00f4ng vi\u1ec7c trong tr\u00ecnh duy\u1ec7t c\u00e1 nh\u00e2n; \u0111\u1ed3ng th\u1eddi ch\u1eb7n th\u1ef1c thi c\u00e1c t\u1ec7p l\u1ea1 ho\u1eb7c c\u00f3 \u0111\u1ed9 ph\u1ed5 bi\u1ebfn th\u1ea5p.
\n\u200b<\/div>\n
Theo Cyber Press<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"

Microsoft v\u1eeba ph\u00e1t hi\u1ec7n m\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng do nh\u00f3m Storm-2561 th\u1ef1c hi\u1ec7n, s\u1eed d\u1ee5ng b\u1ed9 c\u00e0i VPN gi\u1ea3 m\u1ea1o \u0111\u1ec3 \u0111\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp trong m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p. \u0110\u00e1ng ch\u00fa \u00fd, chi\u1ebfn d\u1ecbch n\u00e0y kh\u00f4ng khai th\u00e1c l\u1ed7 h\u1ed5ng ph\u1ea7n m\u1ec1m m\u00e0 l\u1ee3i d\u1ee5ng th\u1ee9 h\u1ea1ng t\u00ecm ki\u1ebfm, th\u01b0\u01a1ng […]<\/p>\n","protected":false},"author":20,"featured_media":47524,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47523","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47523","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47523"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47523\/revisions"}],"predecessor-version":[{"id":47525,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47523\/revisions\/47525"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47524"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47523"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47523"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47523"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}