{"id":71738,"date":"2022-12-09T09:25:31","date_gmt":"2022-12-09T02:25:31","guid":{"rendered":"https:\/\/tcvn.gov.vn\/?p=71738"},"modified":"2022-12-09T09:25:34","modified_gmt":"2022-12-09T02:25:34","slug":"phan-mem-doc-hai-moi-de-doa-nguoi-dung-thiet-bi-di-dong-tren-toan-the-gioi","status":"publish","type":"post","link":"https:\/\/tcvn.gov.vn\/phan-mem-doc-hai-moi-de-doa-nguoi-dung-thiet-bi-di-dong-tren-toan-the-gioi\/09\/12\/2022\/","title":{"rendered":"Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i- m\u1ed1i \u0111e d\u1ecda ng\u01b0\u1eddi d\u00f9ng thi\u1ebft b\u1ecb di \u0111\u1ed9ng tr\u00ean to\u00e0n th\u1ebf gi\u1edbi"},"content":{"rendered":"

C\u00e1c nh\u00e0 an ninh m\u1ea1ng cho bi\u1ebft, th\u1ecb tr\u01b0\u1eddng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i tr\u00ean di \u0111\u1ed9ng l\u1edbn nh\u1ea5t thu\u1ed9c m\u1ea1ng Darknet \u0111ang l\u00e0 m\u1ed1i \u0111e d\u1ecda ng\u01b0\u1eddi d\u00f9ng tr\u00ean to\u00e0n th\u1ebf gi\u1edbi.<\/span><\/em><\/strong><\/p>\n

Theo The Hacker News, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u an ninh m\u1ea1ng t\u1ea1i Resecurity \u0111\u00e3 c\u00f4ng b\u1ed1 th\u1ecb tr\u01b0\u1eddng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u00e3 xu\u1ea5t hi\u1ec7n InTheBox, \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 ph\u1ee5c v\u1ee5 ri\u00eang cho nh\u1eefng k\u1ebb v\u1eadn h\u00e0nh tr\u00ean thi\u1ebft b\u1ecb di \u0111\u1ed9ng.<\/span><\/p>\n

T\u00e1c gi\u1ea3 \u0111\u1ee9ng sau c\u1eeda h\u00e0ng d\u00e0nh cho t\u1ed9i ph\u1ea1m n\u00e0y \u0111\u01b0\u1ee3c cho l\u00e0 \u0111\u00e3 m\u1edf n\u00f3 t\u1eeb th\u00e1ng 1\/2020. InTheBox \u0111\u00e3 cung c\u1ea5p h\u01a1n 400 n\u1ed9i dung \u0111\u1ed9c h\u1ea1i nh\u1eafm v\u00e0o n\u1ec1n t\u1ea3ng web, \u0111\u01b0\u1ee3c nh\u00f3m theo khu v\u1ef1c \u0111\u1ecba l\u00fd \u0111\u1ec3 c\u00e1c kh\u00e1ch h\u00e0ng \u0111ang t\u00ecm c\u00e1ch th\u1ef1c hi\u1ec7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng c\u1ee7a h\u1ecd c\u00f3 th\u1ec3 t\u00ecm mua \u0111\u01b0\u1ee3c.<\/span><\/p>\n

Resecurity n\u00f3i nh\u1eefng t\u00ednh n\u0103ng t\u1ef1 \u0111\u1ed9ng h\u00f3a gi\u00fap ng\u01b0\u1eddi mua t\u1ea1o ra c\u00e1c \u0111\u01a1n \u0111\u1eb7t h\u00e0ng \u0111\u1ec3 nh\u1eadn “web injection”, t\u1eeb \u0111\u00f3 tri\u1ec3n khai ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i tr\u00ean thi\u1ebft b\u1ecb di \u0111\u1ed9ng. InTheBox c\u00f3 l\u1ebd l\u00e0 l\u1edbn v\u00e0 duy nh\u1ea5t trong danh m\u1ee5c cung c\u1ea5p n\u1ed9i dung web ch\u1ea5t l\u01b0\u1ee3ng cao cho c\u00e1c lo\u1ea1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i di \u0111\u1ed9ng ph\u1ed5 bi\u1ebfn.<\/span><\/p>\n

\"\"<\/span><\/p>\n
C\u1ea3nh b\u00e1o c\u00e1c ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i nh\u1eafm \u0111\u1ebfn thi\u1ebft b\u1ecb di \u0111\u1ed9ng. \u1ea2nh minh h\u1ecda\u00a0<\/span><\/strong><\/em><\/div>\n<\/div>\n

“Web injection” l\u00e0 c\u00e1c g\u00f3i \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong malware t\u00e0i ch\u00ednh, trong \u0111\u00f3 hacker khai th\u00e1c c\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt ho\u1eb7c c\u00e1c ch\u1ee9c n\u0103ng c\u1ee7a tr\u00ecnh duy\u1ec7t web \u0111\u1ec3 ph\u00e2n ph\u00e1t m\u00e3 HTML ho\u1eb7c JavaScript \u0111\u1ed9c h\u1ea1i d\u01b0\u1edbi d\u1ea1ng l\u1edbp ph\u1ee7. \u0110i\u1ec1u n\u00e0y nh\u1eb1m l\u1eeba \u0111\u1ea3o v\u00e0 khai th\u00e1c th\u00f4ng tin khi n\u1ea1n nh\u00e2n ch\u1ea1y c\u00e1c \u1ee9ng d\u1ee5ng ng\u00e2n h\u00e0ng, ti\u1ec1n \u0111i\u1ec7n t\u1eed, email ho\u1eb7c \u1ee9ng d\u1ee5ng m\u1ea1ng x\u00e3 h\u1ed9i.<\/span><\/p>\n

C\u00e1c trang n\u00e0y th\u01b0\u1eddng gi\u1ed1ng v\u1edbi website \u0111\u0103ng nh\u1eadp ng\u00e2n h\u00e0ng v\u00e0 nh\u1eafc ng\u01b0\u1eddi d\u00f9ng nh\u1eadp d\u1eef li\u1ec7u ri\u00eang t\u01b0 nh\u01b0 th\u00f4ng tin \u0111\u0103ng nh\u1eadp, d\u1eef li\u1ec7u th\u1ebb thanh to\u00e1n, s\u1ed1 an sinh x\u00e3 h\u1ed9i… sau \u0111\u00f3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e2m ph\u1ea1m t\u00e0i kho\u1ea3n ng\u00e2n h\u00e0ng v\u00e0 th\u1ef1c hi\u1ec7n h\u00e0nh vi l\u1eeba \u0111\u1ea3o \u0111\u1ebfn n\u1ea1n nh\u00e2n.<\/span><\/p>\n

InTheBox c\u00f3 th\u1ec3 truy c\u1eadp \u0111\u01b0\u1ee3c qua m\u1ea1ng \u1ea9n danh Tor v\u00e0 qu\u1ea3ng c\u00e1o nhi\u1ec1u m\u1eabu “web injection” \u0111\u1ec3 b\u00e1n, v\u1edbi danh s\u00e1ch ch\u1ec9 c\u00f3 th\u1ec3 truy c\u1eadp sau khi kh\u00e1ch h\u00e0ng \u0111\u01b0\u1ee3c qu\u1ea3n tr\u1ecb vi\u00ean xem x\u00e9t v\u00e0 t\u00e0i kho\u1ea3n \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t.<\/span><\/p>\n

C\u00f4ng ty an ninh m\u1ea1ng c\u00f3 tr\u1ee5 s\u1edf t\u1ea1i California cho bi\u1ebft c\u00f3 m\u1ed9t s\u1ed1 trojan ng\u00e2n h\u00e0ng Android \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3 th\u00f4ng qua d\u1ecbch v\u1ee5 n\u00e0y bao g\u1ed3m Alien, Cerberus, ERMAC (MetaDroid), Hydra v\u00e0 Octo.<\/span><\/p>\n

Tr\u01b0\u1edbc \u0111\u00f3, c\u00f4ng ty b\u1ea3o m\u1eadt Cyble c\u0169ng ti\u1ebft l\u1ed9 m\u1ed9t ho\u1ea1t \u0111\u1ed9ng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i d\u01b0\u1edbi d\u1ea1ng d\u1ecbch v\u1ee5 (MaaS) c\u00f3 t\u00ean DuckLogs, \u0111\u01b0\u1ee3c b\u00e1n tr\u00ean th\u1ecb tr\u01b0\u1eddng v\u1edbi gi\u00e1 69,99 USD \u0111\u1ec3 truy c\u1eadp tr\u1ecdn \u0111\u1eddi, mang l\u1ea1i cho nh\u1eefng k\u1ebb l\u1eeba \u0111\u1ea3o kh\u1ea3 n\u0103ng thu th\u1eadp th\u00f4ng tin nh\u1ea1y c\u1ea3m, chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n c\u00e1c giao d\u1ecbch ti\u1ec1n \u0111i\u1ec7n t\u1eed v\u00e0 \u0111i\u1ec1u khi\u1ec3n m\u00e1y t\u1eeb xa.<\/span><\/p>\n

Li\u00ean quan t\u1edbi ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i, theo b\u00e1o c\u00e1o c\u1ee7a Kaspersky cho th\u1ea5y, trong 6 th\u00e1ng \u0111\u1ea7u n\u0103m 2022 \u0111\u00e3 ghi nh\u1eadn 122.526 tr\u01b0\u1eddng h\u1ee3p m\u00e3 \u0111\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c thi\u1ebft b\u1ecb di \u0111\u1ed9ng t\u1ea1i \u0110\u00f4ng Nam \u00c1, th\u1ea5p h\u01a1n \u0111\u00e1ng k\u1ec3 so v\u1edbi 382.575 tr\u01b0\u1eddng h\u1ee3p \u0111\u01b0\u1ee3c ghi nh\u1eadn \u1edf c\u00f9ng k\u1ef3 n\u0103m ngo\u00e1i.<\/span><\/p>\n

M\u1eb7c d\u00f9 gi\u1ea3m v\u1ec1 s\u1ed1 l\u01b0\u1ee3ng c\u00e1c tr\u01b0\u1eddng h\u1ee3p t\u1ea5n c\u00f4ng, tuy nhi\u00ean, c\u00e1c lo\u1ea1i m\u00e3 \u0111\u1ed9c nh\u1eb1m v\u00e0o thi\u1ebft b\u1ecb di \u0111\u1ed9ng v\u1eabn g\u00e2y ra nhi\u1ec1u nguy hi\u1ec3m, v\u1edbi c\u00e1c ho\u1ea1t \u0111\u1ed9ng nh\u01b0: \u0111\u00e1nh c\u1eafp th\u00f4ng tin tr\u00ean thi\u1ebft b\u1ecb, t\u1ef1 \u0111\u1ed9ng t\u1ea3i xu\u1ed1ng c\u00e1c lo\u1ea1i m\u00e3 \u0111\u1ed9c, l\u00e2y nhi\u1ec5m m\u00e3 \u0111\u1ed9c l\u00ean m\u00e1y t\u00ednh \u0111\u1ec3 t\u1ea5n c\u00f4ng ho\u1eb7c chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n h\u1ec7 th\u1ed1ng…<\/span><\/p>\n

\u0110\u00e1ng l\u01b0u \u00fd, b\u00e1o c\u00e1o ghi nh\u1eadn, s\u1ed1 l\u01b0\u1ee3ng c\u00e1c tr\u01b0\u1eddng h\u1ee3p m\u00e3 \u0111\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o thi\u1ebft b\u1ecb di \u0111\u1ed9ng t\u1ea1i Vi\u1ec7t Nam trong 6 th\u00e1ng \u0111\u1ea7u n\u0103m 2022 \u0111\u00e3 gi\u1ea3m h\u01a1n so v\u1edbi c\u00f9ng k\u1ef3 n\u0103m ngo\u00e1i. Theo Kaspersky, s\u1ed1 l\u01b0\u1ee3ng m\u00e3 \u0111\u1ed9c di \u0111\u1ed9ng \u0111\u01b0\u1ee3c ghi nh\u1eadn t\u1ea1i Vi\u1ec7t Nam trong n\u1eeda \u0111\u1ea7u n\u0103m 2022 l\u00e0 208, g\u00e2y ra 10.114 tr\u01b0\u1eddng h\u1ee3p t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c thi\u1ebft b\u1ecb di \u0111\u1ed9ng.<\/span><\/p>\n

Theo b\u00e1o c\u00e1o c\u1ee7a Kaspersky, Vi\u1ec7t Nam l\u00e0 qu\u1ed1c gia c\u00f3 s\u1ed1 l\u01b0\u1ee3ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o thi\u1ebft b\u1ecb di \u0111\u1ed9ng thu\u1ed9c nh\u00f3m th\u1ea5p \u1edf khu v\u1ef1c \u0110\u00f4ng Nam \u00c1 v\u00e0 tr\u00ean to\u00e0n th\u1ebf gi\u1edbi. D\u1eabn \u0111\u1ea7u t\u1ea1i khu v\u1ef1c \u0110\u00f4ng Nam \u00c1 v\u1ec1 s\u1ed1 l\u01b0\u1ee3ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o thi\u1ebft b\u1ecb di \u0111\u1ed9ng l\u00e0 Indonesia v\u1edbi h\u01a1n 90 ngh\u00ecn m\u1ed1i \u0111e d\u1ecda trong 6 th\u00e1ng \u0111\u1ea7u n\u0103m 2022, x\u1ebfp th\u1ee9 4 tr\u00ean to\u00e0n c\u1ea7u.<\/span><\/p>\n

C\u00e1c chuy\u00ean gia cho r\u1eb1ng, vi\u1ec7c gi\u1ea3m s\u1ed1 l\u01b0\u1ee3ng c\u00e1c ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i t\u1ea5n c\u00f4ng v\u00e0o thi\u1ebft b\u1ecb di \u0111\u1ed9ng t\u1ea1i Vi\u1ec7t Nam t\u00edn hi\u1ec7u t\u1ed1t, cho th\u1ea5y ng\u01b0\u1eddi d\u00f9ng \u0111\u00e3 c\u00f3 nh\u1eadn th\u1ee9c v\u00e0 quan t\u00e2m nhi\u1ec1u h\u01a1n v\u1ec1 v\u1ea5n \u0111\u1ec1 b\u1ea3o m\u1eadt tr\u00ean thi\u1ebft b\u1ecb di \u0111\u1ed9ng c\u1ee7a m\u00ecnh.<\/span><\/p>\n

Trong giai \u0111o\u1ea1n \u0111\u1ea1i d\u1ecbch COVID-19 b\u00f9ng ph\u00e1t, nhi\u1ec1u doanh nghi\u1ec7p \u0111\u00e3 \u00e1p d\u1ee5ng ch\u00ednh s\u00e1ch l\u00e0m vi\u1ec7c t\u1eeb xa, cho ph\u00e9p nh\u00e2n vi\u00ean s\u1eed d\u1ee5ng thi\u1ebft b\u1ecb c\u00e1 nh\u00e2n nh\u1eb1m \u0111\u1ea3m b\u1ea3o hi\u1ec7u su\u1ea5t v\u00e0 ho\u1ea1t \u0111\u1ed9ng c\u1ee7a doanh nghi\u1ec7p. Tuy nhi\u00ean, \u0111i\u1ec1u n\u00e0y c\u0169ng \u0111\u1ed3ng th\u1eddi gia t\u0103ng c\u00e1c m\u1ed1i nguy v\u1ec1 b\u1ea3o m\u1eadt khi c\u00e1c thi\u1ebft b\u1ecb n\u00e0y \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng c\u1ee7a c\u00f4ng ty.<\/span><\/p>\n

Vi\u1ec7c m\u1edf quy\u1ec1n truy c\u1eadp cho thi\u1ebft b\u1ecb c\u1ee7a nh\u00e2n vi\u00ean v\u00e0o h\u1ec7 th\u1ed1ng c\u1ee7a c\u00f4ng ty \u0111\u00e3 cho ph\u00e9p c\u00e1c thi\u1ebft b\u1ecb n\u00e0y v\u01b0\u1ee3t qua t\u01b0\u1eddng l\u1eeda. N\u1ebfu thi\u1ebft b\u1ecb c\u1ee7a ng\u01b0\u1eddi d\u00f9ng b\u1ecb nhi\u1ec5m virus ho\u1eb7c m\u00e3 \u0111\u1ed9c, \u0111\u00f3 s\u1ebd tr\u1edf th\u00e0nh hi\u1ec3m h\u1ecda cho h\u1ec7 th\u1ed1ng c\u1ee7a doanh nghi\u1ec7p. Do \u0111\u00f3, vi\u1ec7c ng\u01b0\u1eddi d\u00f9ng quan t\u00e2m nhi\u1ec1u h\u01a1n v\u1ec1 v\u1ea5n \u0111\u1ec1 b\u1ea3o m\u1eadt kh\u00f4ng ch\u1ec9 h\u1eefu \u00edch cho c\u00e1 nh\u00e2n m\u00e0 c\u00f2n mang l\u1ea1i nhi\u1ec1u l\u1ee3i \u00edch cho doanh nghi\u1ec7p.<\/span><\/p>\n

Theo VietQ<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

C\u00e1c nh\u00e0 an ninh m\u1ea1ng cho bi\u1ebft, th\u1ecb tr\u01b0\u1eddng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i tr\u00ean di \u0111\u1ed9ng l\u1edbn nh\u1ea5t thu\u1ed9c m\u1ea1ng Darknet \u0111ang l\u00e0 m\u1ed1i \u0111e d\u1ecda ng\u01b0\u1eddi d\u00f9ng tr\u00ean to\u00e0n th\u1ebf gi\u1edbi. Theo The Hacker News, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u an ninh m\u1ea1ng t\u1ea1i Resecurity \u0111\u00e3 c\u00f4ng b\u1ed1 th\u1ecb tr\u01b0\u1eddng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u00e3 […]<\/p>\n","protected":false},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[22],"tags":[],"acf":{"linh-vuc":"C\u00e1c l\u0129nh v\u1ef1c kh\u00e1c"},"_links":{"self":[{"href":"https:\/\/tcvn.gov.vn\/wp-json\/wp\/v2\/posts\/71738"}],"collection":[{"href":"https:\/\/tcvn.gov.vn\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tcvn.gov.vn\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tcvn.gov.vn\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/tcvn.gov.vn\/wp-json\/wp\/v2\/comments?post=71738"}],"version-history":[{"count":0,"href":"https:\/\/tcvn.gov.vn\/wp-json\/wp\/v2\/posts\/71738\/revisions"}],"wp:attachment":[{"href":"https:\/\/tcvn.gov.vn\/wp-json\/wp\/v2\/media?parent=71738"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tcvn.gov.vn\/wp-json\/wp\/v2\/categories?post=71738"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tcvn.gov.vn\/wp-json\/wp\/v2\/tags?post=71738"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}