{"id":47764,"date":"2026-04-28T22:40:38","date_gmt":"2026-04-28T15:40:38","guid":{"rendered":"https:\/\/antoanthongtinhaiphong.gov.vn\/?p=47764"},"modified":"2026-05-05T22:41:31","modified_gmt":"2026-05-05T15:41:31","slug":"ung-dung-ai-tren-microsoft-store-bi-to-bi-mat-ghi-am-va-danh-cap-du-lieu-nguoi-dung","status":"publish","type":"post","link":"https:\/\/antoanthongtinhaiphong.gov.vn\/ung-dung-ai-tren-microsoft-store-bi-to-bi-mat-ghi-am-va-danh-cap-du-lieu-nguoi-dung\/","title":{"rendered":"\u1ee8ng d\u1ee5ng AI tr\u00ean Microsoft Store b\u1ecb t\u1ed1 b\u00ed m\u1eadt ghi \u00e2m v\u00e0 \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u ng\u01b0\u1eddi d\u00f9ng"},"content":{"rendered":"
M\u1ed9t \u1ee9ng d\u1ee5ng c\u00f3 t\u00ean Vibing.exe v\u1eeba b\u1ecb g\u1ee1 kh\u1ecfi Microsoft Store sau khi b\u1ecb ph\u00e1t hi\u1ec7n thu th\u1eadp d\u1eef li\u1ec7u ng\u01b0\u1eddi d\u00f9ng tr\u00e1i ph\u00e9p. D\u00f9 \u0111\u01b0\u1ee3c gi\u1edbi thi\u1ec7u l\u00e0 c\u00f4ng c\u1ee5 AI h\u1ed7 tr\u1ee3 n\u0103ng su\u1ea5t, \u1ee9ng d\u1ee5ng n\u00e0y th\u1ef1c ch\u1ea5t ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t ph\u1ea7n m\u1ec1m gi\u00e1m s\u00e1t ngay t\u1eeb khi h\u1ec7 th\u1ed1ng kh\u1edfi \u0111\u1ed9ng.<\/b>
\n\u200b<\/div>\n
\n
\"vibing.png\"<\/div>\n<\/div>\n
\nTheo c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u, sau khi c\u00e0i \u0111\u1eb7t, Vibing.exe t\u1ef1 \u0111\u1ed9ng kh\u1edfi ch\u1ea1y c\u00f9ng Windows v\u00e0 v\u00e0 \u00e2m th\u1ea7m ch\u1ea1y tr\u00ean h\u1ec7 th\u1ed1ng m\u00e0 kh\u00f4ng c\u00f3 c\u1ea3nh b\u00e1o r\u00f5 r\u00e0ng. Trong qu\u00e1 tr\u00ecnh n\u00e0y, \u1ee9ng d\u1ee5ng tri\u1ec3n khai nhi\u1ec1u c\u01a1 ch\u1ebf thu th\u1eadp d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m nh\u01b0 ch\u1ee5p \u1ea3nh m\u00e0n h\u00ecnh theo chu k\u1ef3, theo d\u00f5i clipboard \u0111\u1ec3 ghi nh\u1eadn n\u1ed9i dung sao ch\u00e9p, bao g\u1ed3m c\u1ea3 m\u1eadt kh\u1ea9u ho\u1eb7c th\u00f4ng tin n\u1ed9i b\u1ed9, \u0111\u1ed3ng th\u1eddi k\u00edch ho\u1ea1t microphone \u0111\u1ec3 ghi \u00e2m m\u00f4i tr\u01b0\u1eddng xung quanh.<\/p>\n

D\u1eef li\u1ec7u thu th\u1eadp kh\u00f4ng \u0111\u01b0\u1ee3c g\u1eedi \u0111i tr\u1ef1c ti\u1ebfp. Thay v\u00e0o \u0111\u00f3, ch\u00fang \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a d\u01b0\u1edbi d\u1ea1ng base64, g\u1eafn k\u00e8m m\u00e3 \u0111\u1ecbnh danh ph\u1ea7n c\u1ee9ng (GUID) r\u1ed3i chuy\u1ec3n v\u1ec1 m\u00e1y ch\u1ee7 t\u1eeb xa. C\u00e1ch l\u00e0m n\u00e0y gi\u00fap ph\u00eda v\u1eadn h\u00e0nh c\u00f3 th\u1ec3 theo d\u00f5i t\u1eebng thi\u1ebft b\u1ecb trong th\u1eddi gian d\u00e0i v\u00e0 d\u1ea7n d\u1ef1ng l\u00ean h\u1ed3 s\u01a1 h\u00e0nh vi c\u1ee7a ng\u01b0\u1eddi d\u00f9ng. Kh\u00f4ng d\u1eebng l\u1ea1i \u1edf \u0111\u00f3, \u1ee9ng d\u1ee5ng c\u00f2n ghi nh\u1eadn ti\u00eau \u0111\u1ec1 c\u00e1c c\u1eeda s\u1ed5 \u0111ang m\u1edf v\u00e0 m\u1ed9t s\u1ed1 t\u1eeb kh\u00f3a \u0111\u1ecbnh s\u1eb5n, cho th\u1ea5y n\u00f3 c\u00f3 kh\u1ea3 n\u0103ng l\u1ecdc ra nh\u1eefng n\u1ed9i dung nh\u1ea1y c\u1ea3m thay v\u00ec ch\u1ec9 thu th\u1eadp d\u1eef li\u1ec7u m\u1ed9t c\u00e1ch ng\u1eabu nhi\u00ean.<\/p>\n

\u0110\u1ec3 \u00e2m th\u1ea7m truy\u1ec1n d\u1eef li\u1ec7u ra ngo\u00e0i, Vibing.exe s\u1eed d\u1ee5ng k\u1ebft n\u1ed1i WebSocket, qua \u0111\u00f3 d\u1ec5 d\u00e0ng v\u01b0\u1ee3t qua nhi\u1ec1u c\u01a1 ch\u1ebf gi\u00e1m s\u00e1t v\u00e0 l\u1ecdc proxy truy\u1ec1n th\u1ed1ng. L\u01b0u l\u01b0\u1ee3ng \u0111\u01b0\u1ee3c chuy\u1ec3n t\u1edbi endpoint vibing-api-ccegdhbrg2d6bsd7.b02.azurefd.net tr\u00ean h\u1ea1 t\u1ea7ng cloud, cho ph\u00e9p \u1ea9n m\u00ecnh gi\u1eefa c\u00e1c k\u1ebft n\u1ed1i h\u1ee3p l\u1ec7 v\u00e0 l\u00e0m gi\u1ea3m \u0111\u00e1ng k\u1ec3 kh\u1ea3 n\u0103ng b\u1ecb ph\u00e1t hi\u1ec7n. \u0110\u1ed3ng th\u1eddi, \u1ee9ng d\u1ee5ng c\u00f2n thu th\u1eadp th\u00f4ng tin ng\u1eef c\u1ea3nh nh\u01b0 ti\u00eau \u0111\u1ec1 c\u1eeda s\u1ed5 v\u00e0 c\u00e1c t\u1eeb kh\u00f3a \u0111\u1ecbnh s\u1eb5n, l\u00e0m gia t\u0103ng nguy c\u01a1 l\u1ed9 l\u1ecdt d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m.<\/p>\n

M\u1ed9t chi ti\u1ebft \u0111\u00e1ng ch\u00fa \u00fd kh\u00e1c do nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt Kevin Beaumont ti\u1ebft l\u1ed9 l\u00e0 ngu\u1ed3n g\u1ed1c th\u1ef1c s\u1ef1 c\u1ee7a ph\u1ea7n m\u1ec1m n\u00e0y. M\u1eb7c d\u00f9 tuy\u00ean b\u1ed1 \u0111\u01b0\u1ee3c ph\u00e1t tri\u1ec3n b\u1edfi m\u1ed9t nh\u00f3m \u1ea9n danh mang t\u00ean “Vibing-Team”, \u1ee9ng d\u1ee5ng l\u1ea1i \u0111\u01b0\u1ee3c k\u00fd s\u1ed1 b\u1edfi Yaoyao Chang, m\u1ed9t nh\u00e0 nghi\u00ean c\u1ee9u thu\u1ed9c ph\u00f2ng th\u00ed nghi\u1ec7m GenAI c\u1ee7a Microsoft t\u1ea1i B\u1eafc Kinh. C\u00e1c \u0111i\u1ec1u tra d\u1ef1a tr\u00ean c\u00f4ng c\u1ee5 t\u00ecnh b\u00e1o ngu\u1ed3n m\u1edf (OSINT) cho th\u1ea5y d\u1eef li\u1ec7u b\u1ecb \u0111\u00e1nh c\u1eafp \u0111\u00e3 \u0111\u01b0\u1ee3c chuy\u1ec3n h\u01b0\u1edbng v\u1ec1 m\u1ed9t ph\u00e2n v\u00f9ng Microsoft Azure thu\u1ed9c quy\u1ec1n s\u1edf h\u1eefu c\u1ee7a ch\u00ednh Microsoft. D\u1ef1 \u00e1n n\u00e0y t\u1eebng \u0111\u01b0\u1ee3c gi\u1edbi thi\u1ec7u l\u00e0 s\u00e1ng ki\u1ebfn m\u00e3 ngu\u1ed3n m\u1edf tr\u00ean GitHub v\u1edbi t\u00ean g\u1ecdi “VibeVoice”, nh\u01b0ng kho l\u01b0u tr\u1eef l\u1ea1i kh\u00f4ng h\u1ec1 c\u00f3 m\u00e3 ngu\u1ed3n m\u00e0 ch\u1ec9 ch\u1ee9a m\u1ed9t t\u1ec7p th\u1ef1c thi dung l\u01b0\u1ee3ng 80MB, cho th\u1ea5y \u0111\u00e2y kh\u00f4ng \u0111\u01a1n thu\u1ea7n l\u00e0 m\u1ed9t \u1ee9ng d\u1ee5ng th\u00f4ng th\u01b0\u1eddng m\u00e0 c\u00f3 d\u1ea5u hi\u1ec7u c\u1ee7a m\u1ed9t c\u00f4ng c\u1ee5 thu th\u1eadp d\u1eef li\u1ec7u c\u00f3 ch\u1ee7 \u0111\u00edch.
\n\u200b<\/p><\/div>\n

\n
\"1777362818744.png\"<\/div>\n

Ph\u1ea7n m\u00f4 t\u1ea3 gi\u1edbi thi\u1ec7u d\u1ef1 \u00e1n n\u00e0y l\u00e0 \u201cm\u00e3 ngu\u1ed3n m\u1edf\u201d (theo Medium)<\/i>
\n\u200b<\/div>\n

Microsoft \u0111\u00e3 g\u1ee1 b\u1ecf \u1ee9ng d\u1ee5ng v\u00e0 v\u00f4 hi\u1ec7u h\u00f3a to\u00e0n b\u1ed9 h\u1ea1 t\u1ea7ng li\u00ean quan t\u1eeb ng\u00e0y 24\/4\/2026, \u0111\u1ed3ng th\u1eddi m\u1edf \u0111i\u1ec1u tra n\u1ed9i b\u1ed9 \u0111\u1ec3 l\u00e0m r\u00f5 c\u00e1ch ph\u1ea7n m\u1ec1m n\u00e0y c\u00f3 th\u1ec3 v\u01b0\u1ee3t qua quy tr\u00ecnh ki\u1ec3m duy\u1ec7t. Tuy nhi\u00ean, v\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng \u0111\u00e3 t\u1eebng c\u00e0i \u0111\u1eb7t, d\u1eef li\u1ec7u c\u00f3 th\u1ec3 \u0111\u00e3 b\u1ecb thu th\u1eadp v\u00e0 r\u00f2 r\u1ec9 ra ngo\u00e0i.
\n\u200b<\/div>\n

C\u00e1c chuy\u00ean gia khuy\u1ebfn ngh\u1ecb c\u00e1c \u0111\u1ed9i v\u1eadn h\u00e0nh ch\u1ee7 \u0111\u1ed9ng r\u00e0 so\u00e1t h\u1ec7 th\u1ed1ng, \u0111\u1eb7c bi\u1ec7t l\u00e0 s\u1ef1 xu\u1ea5t hi\u1ec7n c\u1ee7a c\u00e1c t\u1ec7p nh\u01b0 vibing.exe ho\u1eb7c Vibing Installer.exe. \u0110\u1ed3ng th\u1eddi, c\u1ea7n ki\u1ec3m tra c\u00e1c c\u01a1 ch\u1ebf t\u1ef1 kh\u1edfi \u0111\u1ed9ng v\u00e0 theo d\u00f5i c\u00e1c k\u1ebft n\u1ed1i ra ngo\u00e0i t\u1edbi domain li\u00ean quan. Vi\u1ec7c \u0111\u1ed1i chi\u1ebfu log t\u1eeb c\u00e1c gi\u1ea3i ph\u00e1p gi\u00e1m s\u00e1t c\u0169ng c\u1ea7n \u0111\u01b0\u1ee3c \u01b0u ti\u00ean, nh\u1ea5t l\u00e0 nh\u1eefng h\u00e0nh vi b\u1ea5t th\u01b0\u1eddng nh\u01b0 truy c\u1eadp clipboard ho\u1eb7c k\u00edch ho\u1ea1t microphone, nh\u1eb1m k\u1ecbp th\u1eddi ph\u00e1t hi\u1ec7n d\u1ea5u hi\u1ec7u x\u00e2m nh\u1eadp.<\/p>\n

Theo Cyber Press<\/i><\/b><\/div>\n","protected":false},"excerpt":{"rendered":"

M\u1ed9t \u1ee9ng d\u1ee5ng c\u00f3 t\u00ean Vibing.exe v\u1eeba b\u1ecb g\u1ee1 kh\u1ecfi Microsoft Store sau khi b\u1ecb ph\u00e1t hi\u1ec7n thu th\u1eadp d\u1eef li\u1ec7u ng\u01b0\u1eddi d\u00f9ng tr\u00e1i ph\u00e9p. D\u00f9 \u0111\u01b0\u1ee3c gi\u1edbi thi\u1ec7u l\u00e0 c\u00f4ng c\u1ee5 AI h\u1ed7 tr\u1ee3 n\u0103ng su\u1ea5t, \u1ee9ng d\u1ee5ng n\u00e0y th\u1ef1c ch\u1ea5t ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t ph\u1ea7n m\u1ec1m gi\u00e1m s\u00e1t ngay t\u1eeb khi h\u1ec7 th\u1ed1ng […]<\/p>\n","protected":false},"author":20,"featured_media":47765,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[3,24,35],"tags":[],"class_list":["post-47764","post","type-post","status-publish","format-standard","has-post-thumbnail","category-canh-bao-khuyen-nghi","category-tin-noi-bat","category-tin-tuc-su-kien"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47764","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/comments?post=47764"}],"version-history":[{"count":1,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47764\/revisions"}],"predecessor-version":[{"id":47766,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/posts\/47764\/revisions\/47766"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media\/47765"}],"wp:attachment":[{"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/media?parent=47764"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/categories?post=47764"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/antoanthongtinhaiphong.gov.vn\/wp-json\/wp\/v2\/tags?post=47764"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}