{"id":47731,"date":"2026-04-19T23:59:00","date_gmt":"2026-04-19T16:59:00","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47731"},"modified":"2026-04-23T23:59:52","modified_gmt":"2026-04-23T16:59:52","slug":"phan-mem-hop-phap-bi-loi-dung-de-phat-tan-ma-doc-vo-hieu-hoa-phan-mem-diet-virus","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/phan-mem-hop-phap-bi-loi-dung-de-phat-tan-ma-doc-vo-hieu-hoa-phan-mem-diet-virus\/","title":{"rendered":"Ph\u1ea7n m\u1ec1m h\u1ee3p ph\u00e1p b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c v\u00f4 hi\u1ec7u h\u00f3a ph\u1ea7n m\u1ec1m di\u1ec7t virus"},"content":{"rendered":"
C\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt v\u1eeba ph\u00e1t hi\u1ec7n m\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng tinh vi, trong \u0111\u00f3 ph\u1ea7n m\u1ec1m c\u00f3 ch\u1eef k\u00fd s\u1ed1 h\u1ee3p l\u1ec7 \u0111\u00e3 b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c ch\u1ea1y v\u1edbi quy\u1ec1n cao nh\u1ea5t (SYSTEM), nh\u1eb1m v\u00f4 hi\u1ec7u h\u00f3a c\u00e1c ph\u1ea7n m\u1ec1m di\u1ec7t virus tr\u00ean di\u1ec7n r\u1ed9ng.<\/b>
\n\u200b<\/div>\n
\n
\"1776418411739.png\"<\/div>\n

\u200b<\/p><\/div>\n

\nCh\u1ec9 trong m\u1ed9t ng\u00e0y, h\u01a1n 23.500 m\u00e1y t\u00ednh t\u1ea1i 124 qu\u1ed1c gia \u0111\u00e3 b\u1ecb \u1ea3nh h\u01b0\u1edfng v\u00e0 k\u1ebft n\u1ed1i t\u1edbi m\u00e1y ch\u1ee7 \u0111i\u1ec1u khi\u1ec3n. \u0110\u00e1ng ch\u00fa \u00fd, nhi\u1ec1u h\u1ec7 th\u1ed1ng thu\u1ed9c c\u00e1c l\u0129nh v\u1ef1c quan tr\u1ecdng nh\u01b0 gi\u00e1o d\u1ee5c, n\u0103ng l\u01b0\u1ee3ng, c\u01a1 quan nh\u00e0 n\u01b0\u1edbc v\u00e0 y t\u1ebf c\u0169ng n\u1eb1m trong s\u1ed1 n\u1ea1n nh\u00e2n.<\/p>\n

Ph\u1ea7n m\u1ec1m li\u00ean quan \u0111\u01b0\u1ee3c k\u00fd b\u1edfi c\u00f4ng ty Dragon Boss Solutions LLC, \u0111\u01a1n v\u1ecb ph\u00e1t tri\u1ec3n m\u1ed9t s\u1ed1 tr\u00ecnh duy\u1ec7t nh\u01b0 Chromstera hay Web Genius. C\u00e1c ph\u1ea7n m\u1ec1m n\u00e0y thu\u1ed9c nh\u00f3m \u201cph\u1ea7n m\u1ec1m kh\u00f4ng mong mu\u1ed1n\u201d (PUP), t\u1ee9c l\u00e0 kh\u00f4ng ph\u1ea3i nhi\u1ec5m m\u00e3 \u0111\u1ed9c ngay t\u1eeb \u0111\u1ea7u, nh\u01b0ng th\u01b0\u1eddng g\u00e2y phi\u1ec1n to\u00e1i nh\u01b0 hi\u1ec3n th\u1ecb qu\u1ea3ng c\u00e1o ho\u1eb7c chuy\u1ec3n h\u01b0\u1edbng tr\u00ecnh duy\u1ec7t.<\/p>\n

Tuy nhi\u00ean, trong chi\u1ebfn d\u1ecbch l\u1ea7n n\u00e0y, ch\u00ednh c\u01a1 ch\u1ebf c\u1eadp nh\u1eadt c\u1ee7a c\u00e1c ph\u1ea7n m\u1ec1m n\u00e0y \u0111\u00e3 b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 t\u1ea3i v\u00e0 th\u1ef1c thi th\u00eam m\u00e3 \u0111\u1ed9c. C\u1ee5 th\u1ec3, h\u1ec7 th\u1ed1ng s\u1ebd t\u1ef1 \u0111\u1ed9ng t\u1ea3i v\u1ec1 c\u00e1c g\u00f3i c\u00e0i \u0111\u1eb7t \u1ea9n (MSI) v\u00e0 ch\u1ea1y c\u00e1c script PowerShell m\u00e0 kh\u00f4ng c\u1ea7n t\u01b0\u01a1ng t\u00e1c t\u1eeb ng\u01b0\u1eddi d\u00f9ng, v\u1edbi quy\u1ec1n qu\u1ea3n tr\u1ecb cao nh\u1ea5t.<\/p>\n

Tr\u01b0\u1edbc khi tri\u1ec3n khai m\u00e3 \u0111\u1ed9c ch\u00ednh, ch\u01b0\u01a1ng tr\u00ecnh s\u1ebd \u201ctrinh s\u00e1t\u201d h\u1ec7 th\u1ed1ng: ki\u1ec3m tra quy\u1ec1n qu\u1ea3n tr\u1ecb, ph\u00e1t hi\u1ec7n m\u00f4i tr\u01b0\u1eddng m\u00e1y \u1ea3o, x\u00e1c nh\u1eadn k\u1ebft n\u1ed1i m\u1ea1ng v\u00e0 d\u00f2 t\u00ecm c\u00e1c ph\u1ea7n m\u1ec1m b\u1ea3o m\u1eadt nh\u01b0 Malwarebytes, Kaspersky, McAfee hay ESET.<\/p>\n

Sau \u0111\u00f3, m\u1ed9t script t\u00ean ClockRemoval.ps1 s\u1ebd ti\u1ebfn h\u00e0nh v\u00f4 hi\u1ec7u h\u00f3a antivirus b\u1eb1ng c\u00e1ch d\u1eebng d\u1ecbch v\u1ee5, x\u00f3a file, g\u1ee1 c\u00e0i \u0111\u1eb7t v\u00e0 ch\u1eb7n k\u1ebft n\u1ed1i t\u1edbi m\u00e1y ch\u1ee7 c\u1ee7a c\u00e1c h\u00e3ng b\u1ea3o m\u1eadt. \u0110i\u1ec1u n\u00e0y khi\u1ebfn ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng th\u1ec3 c\u00e0i l\u1ea1i ho\u1eb7c c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m di\u1ec7t virus.
\n\u200b<\/p><\/div>\n

\n
\"1776417792545.png\"<\/div>\n

S\u01a1 \u0111\u1ed3 m\u00f4 t\u1ea3 to\u00e0n b\u1ed9 chu\u1ed7i t\u1ea5n c\u00f4ng (attack chain) c\u1ee7a chi\u1ebfn d\u1ecbch m\u00e3 \u0111\u1ed9c. – \u1ea2nh:\u00a0Huntress<\/i>\u200b<\/div>\n

\n\u0110\u00e1ng lo ng\u1ea1i, m\u00e3 \u0111\u1ed9c c\u00f2n thi\u1ebft l\u1eadp c\u01a1 ch\u1ebf b\u00e1m tr\u1ee5 b\u1eb1ng c\u00e1ch t\u1ea1o t\u00e1c v\u1ee5 t\u1ef1 \u0111\u1ed9ng v\u00e0 s\u1ef1 ki\u1ec7n h\u1ec7 th\u1ed1ng \u0111\u1ec3 li\u00ean t\u1ee5c kh\u1edfi ch\u1ea1y l\u1ea1i, \u0111\u1ea3m b\u1ea3o v\u1eabn ho\u1ea1t \u0111\u1ed9ng ngay c\u1ea3 khi b\u1ecb ph\u00e1t hi\u1ec7n ho\u1eb7c x\u00f3a m\u1ed9t ph\u1ea7n.<\/p>\n

Ngo\u00e0i ra, h\u1ea1 t\u1ea7ng m\u00e1y ch\u1ee7 c\u1eadp nh\u1eadt ch\u00ednh ch\u01b0a \u0111\u01b0\u1ee3c \u0111\u0103ng k\u00fd t\u00ean mi\u1ec1n, \u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c b\u1ea5t k\u1ef3 ai c\u0169ng c\u00f3 th\u1ec3 chi\u1ebfm quy\u1ec1n v\u00e0 ph\u00e1t t\u00e1n th\u00eam m\u00e3 \u0111\u1ed9c nguy hi\u1ec3m h\u01a1n t\u1edbi c\u00e1c m\u00e1y \u0111\u00e3 nhi\u1ec5m.<\/p>\n

C\u00e1c chuy\u00ean gia khuy\u1ebfn c\u00e1o qu\u1ea3n tr\u1ecb vi\u00ean c\u1ea7n ki\u1ec3m tra c\u00e1c d\u1ea5u hi\u1ec7u b\u1ea5t th\u01b0\u1eddng nh\u01b0 t\u00e1c v\u1ee5 l\u1ea1 (ClockRemoval, WMILoad), thay \u0111\u1ed5i file hosts ch\u1eb7n k\u1ebft n\u1ed1i t\u1edbi h\u00e3ng b\u1ea3o m\u1eadt ho\u1eb7c c\u00e1c ti\u1ebfn tr\u00ecnh mang ch\u1eef k\u00fd c\u1ee7a Dragon Boss Solutions. \u0110\u00e2y c\u00f3 th\u1ec3 l\u00e0 d\u1ea5u hi\u1ec7u h\u1ec7 th\u1ed1ng \u0111\u00e3 b\u1ecb x\u00e2m nh\u1eadp.
\n\u200b<\/p><\/div>\n

Theo Bleeping Computer<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"

C\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt v\u1eeba ph\u00e1t hi\u1ec7n m\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng tinh vi, trong \u0111\u00f3 ph\u1ea7n m\u1ec1m c\u00f3 ch\u1eef k\u00fd s\u1ed1 h\u1ee3p l\u1ec7 \u0111\u00e3 b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c ch\u1ea1y v\u1edbi quy\u1ec1n cao nh\u1ea5t (SYSTEM), nh\u1eb1m v\u00f4 hi\u1ec7u h\u00f3a c\u00e1c ph\u1ea7n m\u1ec1m di\u1ec7t virus tr\u00ean di\u1ec7n r\u1ed9ng. \u200b \u200b Ch\u1ec9 […]<\/p>\n","protected":false},"author":20,"featured_media":47732,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47731","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47731","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47731"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47731\/revisions"}],"predecessor-version":[{"id":47733,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47731\/revisions\/47733"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47732"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47731"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47731"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47731"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}