{"id":47616,"date":"2026-03-26T15:07:58","date_gmt":"2026-03-26T08:07:58","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47616"},"modified":"2026-03-31T15:08:36","modified_gmt":"2026-03-31T08:08:36","slug":"canh-bao-virus-tang-hinh-glassworm-tan-cong-chuoi-cung-ung-phan-mem","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/canh-bao-virus-tang-hinh-glassworm-tan-cong-chuoi-cung-ung-phan-mem\/","title":{"rendered":"C\u1ea3nh b\u00e1o: \u2018Virus t\u00e0ng h\u00ecnh\u2019 GlassWorm t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng ph\u1ea7n m\u1ec1m"},"content":{"rendered":"
Chi\u1ebfn d\u1ecbch ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c GlassWorm \u0111\u00e3 x\u00e2m nh\u1eadp v\u00e0o h\u01a1n 400 kho m\u00e3 ngu\u1ed3n v\u00e0 ti\u1ec7n \u00edch ph\u1ea7n m\u1ec1m tr\u00ean nhi\u1ec1u n\u1ec1n t\u1ea3ng l\u1eadp tr\u00ecnh ph\u1ed5 bi\u1ebfn nh\u01b0 GitHub, npm, VSCode\/OpenVSX\u2026 C\u00e1c chuy\u00ean gia Bkav \u01b0\u1edbc t\u00ednh hi\u1ec7n c\u00f3 kho\u1ea3ng h\u00e0ng ch\u1ee5c ngh\u00ecn m\u00e1y l\u1eadp tr\u00ecnh vi\u00ean \u0111\u00e3 nhi\u1ec5m GlassWorm. Cu\u1ed9c t\u1ea5n c\u00f4ng t\u1ea1o ra ph\u1ea3n \u1ee9ng d\u00e2y chuy\u1ec1n: tin t\u1eb7c bi\u1ebfn c\u00e1c thi\u1ebft b\u1ecb n\u00e0y th\u00e0nh b\u00e0n \u0111\u1ea1p th\u1ecdc s\u00e2u v\u00e0o m\u1ea1ng n\u1ed9i b\u1ed9 doanh nghi\u1ec7p, thao t\u00fang m\u00e3 ngu\u1ed3n, t\u1eeb \u0111\u00f3 t\u1ef1 \u0111\u1ed9ng nh\u00e2n b\u1ea3n, ph\u00e1t t\u00e1n virus theo c\u1ea5p s\u1ed1 nh\u00e2n ra to\u00e0n b\u1ed9 chu\u1ed7i cung \u1ee9ng ph\u1ea7n m\u1ec1m to\u00e0n c\u1ea7u, trong \u0111\u00f3 c\u00f3 Vi\u1ec7t Nam.<\/b>
\n\u200b<\/div>\n
\n
\"1774493614475.png\"<\/div>\n

\u200bChi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng n\u00e0y kh\u00f4ng t\u1eadp trung v\u00e0o vi\u1ec7c khai th\u00e1c tr\u1ef1c ti\u1ebfp c\u00e1c l\u1ed7 h\u1ed5ng ph\u1ea7n m\u1ec1m. Hacker s\u1eed d\u1ee5ng c\u00e1c t\u00e0i kho\u1ea3n, token truy c\u1eadp \u0111\u00e1nh c\u1eafp \u0111\u01b0\u1ee3c, ch\u00e8n m\u00e3 \u0111\u1ed9c v\u00e0o c\u00e1c b\u1ed9 m\u00e3 ngu\u1ed3n h\u1ee3p ph\u00e1p do l\u1eadp tr\u00ecnh vi\u00ean \u0111\u00e3 chia s\u1ebb tr\u00ean c\u00e1c kho m\u00e3 ngu\u1ed3n v\u00e0 ti\u1ec7n \u00edch ph\u1ea7n m\u1ec1m.<\/p>\n

C\u00e1c thay \u0111\u1ed5i \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n d\u01b0\u1edbi danh ngh\u0129a c\u00e1c t\u00e0i kho\u1ea3n h\u1ee3p l\u1ec7 ho\u1eb7c \u0111\u01b0\u1ee3c ng\u1ee5y trang v\u1edbi th\u00f4ng tin l\u1ecbch s\u1eed c\u1eadp nh\u1eadt m\u00e3 ngu\u1ed3n (commit) bao g\u1ed3m t\u00e1c gi\u1ea3, n\u1ed9i dung v\u00e0 th\u1eddi gian \u0111\u00f3ng g\u00f3p, t\u01b0\u01a1ng t\u1ef1 c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt h\u1ee3p ph\u00e1p, khi\u1ebfn ch\u00fang tr\u00f4ng gi\u1ed1ng c\u00e1c c\u1eadp nh\u1eadt b\u00ecnh th\u01b0\u1eddng v\u00e0 kh\u00f3 b\u1ecb ph\u00e1t hi\u1ec7n b\u1eb1ng m\u1eaft hay qua ki\u1ec3m tra s\u01a1 b\u1ed9. B\u00ean c\u1ea1nh vi\u1ec7c ch\u00e8n m\u00e3 \u0111\u1ed9c v\u00e0o c\u00e1c kho m\u00e3 ngu\u1ed3n, trong m\u1ed9t s\u1ed1 h\u01b0\u1edbng t\u1ea5n c\u00f4ng kh\u00e1c, GlassWorm c\u00f2n s\u1eed d\u1ee5ng k\u1ef9 thu\u1eadt ch\u00e8n k\u00fd t\u1ef1 Unicode \u201cv\u00f4 h\u00ecnh\u201d nh\u1eb1m qua m\u1eb7t c\u00e1c h\u1ec7 th\u1ed1ng ki\u1ec3m tra t\u1ef1 \u0111\u1ed9ng. Thay v\u00ec d\u00f9ng m\u00e1y ch\u1ee7 th\u00f4ng th\u01b0\u1eddng d\u1ec5 b\u1ecb ph\u00e1t hi\u1ec7n v\u00e0 \u0111\u00e1nh s\u1eadp, chi\u1ebfn d\u1ecbch n\u00e0y l\u1ee3i d\u1ee5ng m\u1ea1ng blockchain Solana \u0111\u1ec3 l\u01b0u tr\u1eef v\u00e0 truy\u1ec1n c\u00e1c l\u1ec7nh \u0111i\u1ec1u khi\u1ec3n. \u0110i\u1ec1u n\u00e0y gi\u00fap h\u1ec7 th\u1ed1ng c\u1ee7a hacker tr\u1edf n\u00ean phi t\u1eadp trung v\u00e0 c\u1ef1c k\u1ef3 kh\u00f3 b\u1ecb ng\u0103n ch\u1eb7n. \u0110\u1ed3ng th\u1eddi, m\u00e3 \u0111\u1ed9c lu\u00e2n phi\u00ean s\u1eed d\u1ee5ng \u00edt nh\u1ea5t 6 \u0111\u1ecba ch\u1ec9 IP m\u00e1y ch\u1ee7 C2 nh\u1eb1m duy tr\u00ec li\u00ean l\u1ea1c v\u00e0 che gi\u1ea5u ho\u1ea1t \u0111\u1ed9ng.<\/p>\n

\u201cHacker nh\u00fang tr\u1ef1c ti\u1ebfp c\u00e1c l\u1ec7nh ph\u00e1 ho\u1ea1i v\u00e0o nh\u1eefng k\u00fd t\u1ef1 Unicode \u201cv\u00f4 h\u00ecnh\u201d trong \u0111o\u1ea1n m\u00e3, bi\u1ebfn nh\u1eefng d\u00f2ng ch\u1eef t\u01b0\u1edfng tr\u1ed1ng r\u1ed7ng th\u00e0nh c\u00f4ng c\u1ee5 t\u1ea5n c\u00f4ng ng\u1ea7m. Khi nh\u00ecn b\u1eb1ng m\u1eaft th\u01b0\u1eddng ho\u1eb7c khi ki\u1ec3m tra s\u01a1 b\u1ed9, \u0111o\u1ea1n m\u00e3 v\u1eabn tr\u00f4ng ho\u00e0n to\u00e0n b\u00ecnh th\u01b0\u1eddng. \u0110i\u1ec1u n\u00e0y khi\u1ebfn c\u1ea3 l\u1eadp tr\u00ecnh vi\u00ean l\u1eabn c\u00e1c c\u00f4ng c\u1ee5 ki\u1ec3m tra truy\u1ec1n th\u1ed1ng kh\u00f3 ph\u00e1t hi\u1ec7n ra d\u1ea5u hi\u1ec7u b\u1ea5t th\u01b0\u1eddng\u201d<\/i>, \u00f4ng Nguy\u1ec5n \u0110\u00ecnh Th\u1ee7y, chuy\u00ean gia m\u00e3 \u0111\u1ed9c c\u1ee7a Bkav, cho bi\u1ebft.<\/p>\n

Khi \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t, m\u00e3 \u0111\u1ed9c \u0111\u00e1nh c\u1eafp c\u00e1c d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m nh\u01b0 v\u00ed ti\u1ec1n \u0111i\u1ec7n t\u1eed, kh\u00f3a b\u1ea3o m\u1eadt SSH, m\u00e3 x\u00e1c th\u1ef1c truy c\u1eadp v\u00e0 th\u00f4ng tin h\u1ec7 th\u1ed1ng c\u1ee7a l\u1eadp tr\u00ecnh vi\u00ean\u2026 t\u1eeb \u0111\u00f3 ti\u1ebfp t\u1ee5c m\u1edf r\u1ed9ng x\u00e2m nh\u1eadp s\u00e2u h\u01a1n v\u00e0o h\u1ec7 th\u1ed1ng c\u1ee7a t\u1ed5 ch\u1ee9c. \u0110\u1eb7c bi\u1ec7t, ph\u1ea1m vi t\u1ea5n c\u00f4ng n\u00e0y \u0111\u00e3 lan r\u1ed9ng sang m\u00f4i tr\u01b0\u1eddng l\u00e0m vi\u1ec7c h\u00e0ng ng\u00e0y c\u1ee7a gi\u1edbi l\u1eadp tr\u00ecnh, th\u00f4ng qua c\u00e1c c\u00f4ng c\u1ee5 ph\u00e1t tri\u1ec3n, ti\u1ec7n \u00edch m\u1edf r\u1ed9ng ho\u1eb7c c\u00e1c \u0111o\u1ea1n m\u00e3 ph\u1ee5 thu\u1ed9c b\u1ecb nh\u00fang m\u00e3 \u0111\u1ed9c.<\/p>\n

T\u1ea1i Vi\u1ec7t Nam, nhi\u1ec1u doanh nghi\u1ec7p c\u00f4ng ngh\u1ec7 v\u00e0 startup, c\u0169ng b\u1eaft nh\u1ecbp v\u1edbi xu h\u01b0\u1edbng chung c\u1ee7a th\u1ebf gi\u1edbi, ph\u00e1t tri\u1ec3n ph\u1ea7n m\u1ec1m d\u1ef1a tr\u00ean m\u00e3 ngu\u1ed3n m\u1edf v\u00e0 c\u00e1c th\u01b0 vi\u1ec7n mi\u1ec5n ph\u00ed. C\u00e1c n\u1ec1n t\u1ea3ng nh\u01b0 GitHub hay npm \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i trong qu\u00e1 tr\u00ecnh ph\u00e1t tri\u1ec3n s\u1ea3n ph\u1ea9m, t\u1eeb \u1ee9ng d\u1ee5ng web, \u1ee9ng d\u1ee5ng di \u0111\u1ed9ng cho \u0111\u1ebfn h\u1ec7 th\u1ed1ng doanh nghi\u1ec7p. N\u1ebfu m\u1ed9t th\u01b0 vi\u1ec7n ph\u1ed5 bi\u1ebfn b\u1ecb ch\u00e8n m\u00e3 \u0111\u1ed9c, r\u1ee7i ro c\u00f3 th\u1ec3 lan sang nhi\u1ec1u d\u1ef1 \u00e1n ph\u1ea7n m\u1ec1m v\u00e0 h\u1ec7 th\u1ed1ng doanh nghi\u1ec7p trong n\u01b0\u1edbc th\u00f4ng qua c\u00e1c ph\u1ee5 thu\u1ed9c (dependencies) m\u00e0 l\u1eadp tr\u00ecnh vi\u00ean s\u1eed d\u1ee5ng.<\/p>\n

\u201cGlassWorm ph\u1ea3n \u00e1nh xu h\u01b0\u1edbng t\u1ea5n c\u00f4ng d\u1ecbch chuy\u1ec3n t\u1eeb vi\u1ec7c nh\u1eafm tr\u1ef1c ti\u1ebfp v\u00e0o ng\u01b0\u1eddi d\u00f9ng sang c\u00e1c n\u1ec1n t\u1ea3ng v\u00e0 c\u00f4ng c\u1ee5 ph\u00e1t tri\u1ec3n ph\u1ea7n m\u1ec1m. Khi m\u1ed9t th\u00e0nh ph\u1ea7n trong chu\u1ed7i cung \u1ee9ng b\u1ecb nhi\u1ec5m virus, h\u1eadu qu\u1ea3 c\u00f3 th\u1ec3 lan r\u1ed9ng t\u1edbi h\u00e0ng ngh\u00ecn ho\u1eb7c h\u00e0ng tri\u1ec7u ng\u01b0\u1eddi d\u00f9ng cu\u1ed1i. M\u1ee9c \u0111\u1ed9 thi\u1ec7t h\u1ea1i l\u00e0 kh\u00f4ng th\u1ec3 \u0111o \u0111\u1ebfm. Ng\u01b0\u1eddi d\u00f9ng v\u00e0 doanh nghi\u1ec7p n\u00ean ch\u1ee7 \u0111\u1ed9ng tri\u1ec3n khai c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt chuy\u00ean s\u00e2u v\u00e0 ph\u1ea7n m\u1ec1m ch\u1ed1ng m\u00e3 \u0111\u1ed9c to\u00e0n di\u1ec7n, thay v\u00ec ch\u1ec9 d\u1ef1a v\u00e0o c\u00f4ng c\u1ee5 m\u1eb7c \u0111\u1ecbnh c\u1ee7a h\u1ec7 \u0111i\u1ec1u h\u00e0nh v\u1ed1n ch\u1ec9 \u0111\u00e1p \u1ee9ng nhu c\u1ea7u b\u1ea3o v\u1ec7 c\u01a1 b\u1ea3n v\u00e0 kh\u00f3 ph\u00e1t hi\u1ec7n c\u00e1c m\u1ed1i \u0111e d\u1ecda tinh vi, \u1ea9n m\u00ecnh l\u00e2u d\u00e0i trong h\u1ec7 th\u1ed1ng\u201d<\/i>, \u00f4ng L\u00ea Ti\u1ebfn Th\u1ecbnh, Gi\u00e1m \u0111\u1ed1c S\u1ea3n ph\u1ea9m An ninh m\u1ea1ng c\u1ee7a Bkav, nh\u1eadn \u0111\u1ecbnh.<\/p>\n

Tr\u01b0\u1edbc nguy c\u01a1 tr\u00ean, Bkav khuy\u1ebfn c\u00e1o c\u00e1c l\u1eadp tr\u00ecnh vi\u00ean v\u00e0 t\u1ed5 ch\u1ee9c c\u00f4ng ngh\u1ec7:\u200b<\/p><\/div>\n

    \n
  • \n
    Ghim phi\u00ean b\u1ea3n v\u00e0 t\u1eaft c\u1eadp nh\u1eadt t\u1ef1 \u0111\u1ed9ng \u0111\u1ed1i v\u1edbi c\u00e1c th\u01b0 vi\u1ec7n v\u00e0 ti\u1ec7n \u00edch m\u1edf r\u1ed9ng \u0111\u1ec3 ng\u0103n m\u00e3 \u0111\u1ed9c l\u00e2y nhi\u1ec5m ch\u00e9o qua c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt m\u1edbi\u200b<\/div>\n<\/li>\n
  • \n
    T\u00edch h\u1ee3p c\u00f4ng c\u1ee5 qu\u00e9t m\u00e3 t\u1ef1 \u0111\u1ed9ng ngay tr\u00ean IDE ho\u1eb7c lu\u1ed3ng CI\/CD \u0111\u1ec3 r\u00e0 qu\u00e9t li\u00ean t\u1ee5c, ph\u00e1t hi\u1ec7n s\u1edbm c\u00e1c \u0111o\u1ea1n m\u00e3 b\u1ecb l\u00e0m r\u1ed1i (obfuscate) ho\u1eb7c ch\u1ee9a k\u00fd t\u1ef1 t\u00e0ng h\u00ecnh\u200b<\/div>\n<\/li>\n
  • \n
    \u0110\u1ed1i v\u1edbi c\u00e1c kho m\u00e3 ngu\u1ed3n, b\u1eaft bu\u1ed9c \u00e1p d\u1ee5ng x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 (MFA) v\u00e0 nguy\u00ean t\u1eafc ph\u00e2n quy\u1ec1n t\u1ed1i thi\u1ec3u; kh\u00f3a t\u00ednh n\u0103ng force-push tr\u00ean c\u00e1c nh\u00e1nh quan tr\u1ecdng\u200b<\/div>\n<\/li>\n
  • \n
    \u0110\u1ea3m b\u1ea3o 100% thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i (endpoint) \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m di\u1ec7t virus chuy\u00ean nghi\u1ec7p, \u0111\u1ed3ng th\u1eddi k\u1ebft h\u1ee3p gi\u1ea3i ph\u00e1p n\u00e2ng cao EDR\/XDR \u0111\u1ec3 t\u1ea1o l\u1edbp ph\u00f2ng th\u1ee7 k\u00e9p, chuy\u00ean tr\u1ecb c\u00e1c lo\u1ea1i m\u00e3 \u0111\u1ed9c t\u00e0ng h\u00ecnh ho\u1eb7c kh\u00f4ng l\u01b0u file\u200b<\/div>\n<\/li>\n
  • \n
    Khi c\u00f3 d\u1ea5u hi\u1ec7u b\u1ea5t th\u01b0\u1eddng, c\u1ea7n ngay l\u1eadp t\u1ee9c \u0111\u1ed5i m\u1eadt kh\u1ea9u, thu h\u1ed3i token truy c\u1eadp v\u00e0 ki\u1ec3m tra l\u1ea1i to\u00e0n b\u1ed9 ho\u1ea1t \u0111\u1ed9ng c\u1ee7a kho m\u00e3 ngu\u1ed3n\u200b<\/div>\n<\/li>\n<\/ul>\n
    Theo Bkav<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"

    Chi\u1ebfn d\u1ecbch ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c GlassWorm \u0111\u00e3 x\u00e2m nh\u1eadp v\u00e0o h\u01a1n 400 kho m\u00e3 ngu\u1ed3n v\u00e0 ti\u1ec7n \u00edch ph\u1ea7n m\u1ec1m tr\u00ean nhi\u1ec1u n\u1ec1n t\u1ea3ng l\u1eadp tr\u00ecnh ph\u1ed5 bi\u1ebfn nh\u01b0 GitHub, npm, VSCode\/OpenVSX\u2026 C\u00e1c chuy\u00ean gia Bkav \u01b0\u1edbc t\u00ednh hi\u1ec7n c\u00f3 kho\u1ea3ng h\u00e0ng ch\u1ee5c ngh\u00ecn m\u00e1y l\u1eadp tr\u00ecnh vi\u00ean \u0111\u00e3 nhi\u1ec5m GlassWorm. Cu\u1ed9c t\u1ea5n c\u00f4ng […]<\/p>\n","protected":false},"author":20,"featured_media":47617,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47616","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47616","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47616"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47616\/revisions"}],"predecessor-version":[{"id":47618,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47616\/revisions\/47618"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47617"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47616"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47616"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47616"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}