{"id":10404,"date":"2024-08-15T11:27:32","date_gmt":"2024-08-15T04:27:32","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=10404"},"modified":"2026-02-05T11:27:40","modified_gmt":"2026-02-05T04:27:40","slug":"canh-bao-tien-ich-cho-tro-ly-ai-bi-loi-dung-de-phat-tan-ma-doc-hay-bo-thoi-quen-thay-tien-la-cai","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/2024\/08\/15\/canh-bao-tien-ich-cho-tro-ly-ai-bi-loi-dung-de-phat-tan-ma-doc-hay-bo-thoi-quen-thay-tien-la-cai\/","title":{"rendered":"C\u1ea3nh b\u00e1o: Ti\u1ec7n \u00edch cho tr\u1ee3 l\u00fd AI b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c, h\u00e3y b\u1ecf th\u00f3i quen “th\u1ea5y ti\u1ec7n l\u00e0 c\u00e0i”"},"content":{"rendered":"
M\u1ed9t l\u00e0n s\u00f3ng t\u1ea5n c\u00f4ng m\u1edbi \u0111ang nh\u1eafm v\u00e0o ng\u01b0\u1eddi d\u00f9ng OpenClaw – tr\u1ee3 l\u00fd AI c\u00e1 nh\u00e2n m\u00e3 ngu\u1ed3n m\u1edf \u0111ang \u0111\u01b0\u1ee3c nhi\u1ec1u ng\u01b0\u1eddi c\u00e0i \u0111\u1eb7t \u0111\u1ec3 ch\u1ea1y tr\u00ean m\u00e1y t\u00ednh ri\u00eang. Thay v\u00ec t\u1ea5n c\u00f4ng tr\u1ef1c di\u1ec7n, tin t\u1eb7c ch\u1ecdn c\u00e1ch tinh vi h\u01a1n: tr\u00e0 tr\u1ed9n m\u00e3 \u0111\u1ed9c v\u00e0o c\u00e1c \u201ck\u1ef9 n\u0103ng\u201d (skills) – nh\u1eefng ti\u1ec7n \u00edch m\u1edf r\u1ed9ng gi\u00fap OpenClaw l\u00e0m \u0111\u01b0\u1ee3c nhi\u1ec1u vi\u1ec7c h\u01a1n.<\/b>
\n\u200b<\/div>\n
\n
\"1770086108408.png\"<\/div>\n

\u200b<\/p><\/div>\n

\nTheo c\u00e1c nghi\u00ean c\u1ee9u an ninh m\u1ea1ng, trong h\u01a1n 2.800 k\u1ef9 n\u0103ng \u0111\u01b0\u1ee3c \u0111\u0103ng tr\u00ean kho ClawHub, \u0111\u00e3 c\u00f3 \u00edt nh\u1ea5t 300 k\u1ef9 n\u0103ng ch\u1ee9a m\u00e3 \u0111\u1ed9c. \u0110i\u1ec1u \u0111\u00e1ng n\u00f3i l\u00e0 ch\u00fang kh\u00f4ng h\u1ec1 \u201cl\u1ed9 li\u1ec5u\u201d. C\u00e1c ti\u1ec7n \u00edch n\u00e0y \u0111\u01b0\u1ee3c ng\u1ee5y trang th\u00e0nh nh\u1eefng c\u00f4ng c\u1ee5 nghe r\u1ea5t quen tai: theo d\u00f5i gi\u00e1 ti\u1ec1n m\u00e3 h\u00f3a, bot giao d\u1ecbch crypto, c\u00f4ng c\u1ee5 t\u00f3m t\u1eaft YouTube, ti\u1ec7n \u00edch t\u00e0i ch\u00ednh, th\u1eadm ch\u00ed l\u00e0 tr\u00ecnh \u201ct\u1ef1 \u0111\u1ed9ng c\u1eadp nh\u1eadt\u201d. T\u00ean g\u1ecdi v\u00e0 t\u00e0i li\u1ec7u h\u01b0\u1edbng d\u1eabn \u0111\u1ec1u \u0111\u01b0\u1ee3c vi\u1ebft kh\u00e1 ch\u1ec9nh chu, khi\u1ebfn ng\u01b0\u1eddi d\u00f9ng tin r\u1eb1ng \u0111\u00e2y l\u00e0 c\u00f4ng c\u1ee5 th\u1eadt.<\/p>\n

\u201cC\u00e1i b\u1eaby\u201d th\u01b0\u1eddng n\u1eb1m \u1edf ph\u1ea7n h\u01b0\u1edbng d\u1eabn c\u00e0i \u0111\u1eb7t. Ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c y\u00eau c\u1ea7u t\u1ea3i th\u00eam m\u1ed9t file ph\u1ee5, ho\u1eb7c sao ch\u00e9p m\u1ed9t d\u00f2ng l\u1ec7nh \u0111\u1ec3 ch\u1ea1y trong m\u00e1y t\u00ednh. Tr\u00ean b\u1ec1 m\u1eb7t, \u0111\u00f3 c\u00f3 v\u1ebb l\u00e0 b\u01b0\u1edbc k\u1ef9 thu\u1eadt b\u00ecnh th\u01b0\u1eddng. Nh\u01b0ng th\u1ef1c ch\u1ea5t, ch\u00ednh h\u00e0nh \u0111\u1ed9ng n\u00e0y m\u1edf c\u1eeda cho m\u00e3 \u0111\u1ed9c x\u00e2m nh\u1eadp. Sau khi \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t, m\u00e3 \u0111\u1ed9c \u00e2m th\u1ea7m thu th\u1eadp \u0111\u1ee7 lo\u1ea1i th\u00f4ng tin nh\u1ea1y c\u1ea3m: m\u1eadt kh\u1ea9u tr\u00ecnh duy\u1ec7t, kh\u00f3a v\u00ed ti\u1ec1n m\u00e3 h\u00f3a, kh\u00f3a API c\u1ee7a s\u00e0n giao d\u1ecbch, t\u00e0i kho\u1ea3n SSH, d\u1eef li\u1ec7u l\u01b0u trong m\u00e1y\u2026 N\u00f3i c\u00e1ch kh\u00e1c, n\u1ebfu m\u00e1y t\u00ednh c\u00f3 g\u00ec \u201c\u0111\u00e1ng gi\u00e1\u201d, ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i s\u1ebd t\u00ecm c\u00e1ch l\u1ea5y \u0111i.
\n\u200b<\/p><\/div>\n

\n
\"1770086204286.png\"<\/div>\n


\nC\u00e1c ti\u1ec7n \u00edch (skills) \u0111\u1ed9c h\u1ea1i c\u00f3 li\u00ean quan \u0111\u1ebfn c\u00f9ng m\u1ed9t t\u00e0i kho\u1ea3n ph\u00e1t h\u00e0nh – \u1ea2nh: OpenSourceMalware<\/i>\u200b<\/div>\n

\nR\u1ee7i ro c\u00f2n l\u1edbn h\u01a1n v\u00ec OpenClaw l\u00e0 m\u1ed9t tr\u1ee3 l\u00fd AI c\u00f3 quy\u1ec1n truy c\u1eadp s\u00e2u v\u00e0o h\u1ec7 th\u1ed1ng: \u0111\u1ecdc file, k\u1ebft n\u1ed1i email, g\u1ecdi API, t\u01b0\u01a1ng t\u00e1c Internet v\u00e0 l\u01b0u \u201ctr\u00ed nh\u1edb\u201d l\u00e2u d\u00e0i. Khi m\u1ed9t ti\u1ec7n \u00edch \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c c\u00e0i v\u00e0o, k\u1ebb t\u1ea5n c\u00f4ng kh\u00f4ng ch\u1ec9 \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u ng\u01b0\u1eddi d\u00f9ng m\u00e0 c\u00f2n c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng ch\u00ednh tr\u1ee3 l\u00fd AI nh\u01b0 m\u1ed9t \u201ctay trong\u201d \u0111\u1ec3 ph\u1ee5c v\u1ee5 c\u00e1c m\u1ee5c \u0111\u00edch x\u1ea5u v\u1ec1 sau.<\/p>\n

Nguy\u00ean nh\u00e2n s\u00e2u xa do m\u00f4 h\u00ecnh m\u1edf c\u1ee7a kho ClawHub: g\u1ea7n nh\u01b0 ai c\u0169ng c\u00f3 th\u1ec3 \u0111\u0103ng k\u1ef9 n\u0103ng l\u00ean, vi\u1ec7c ki\u1ec3m duy\u1ec7t c\u00f2n h\u1ea1n ch\u1ebf. D\u00f9 nh\u00e0 ph\u00e1t tri\u1ec3n \u0111\u00e3 b\u1ed5 sung t\u00ednh n\u0103ng cho ng\u01b0\u1eddi d\u00f9ng b\u00e1o c\u00e1o k\u1ef9 n\u0103ng \u0111\u00e1ng ng\u1edd nh\u01b0ng c\u00e1ch l\u00e0m n\u00e0y ch\u1ee7 y\u1ebfu mang t\u00ednh \u201cch\u1eefa ch\u00e1y\u201d, kh\u00f3 theo k\u1ecbp t\u1ed1c \u0111\u1ed9 tung ra h\u00e0ng lo\u1ea1t ti\u1ec7n \u00edch \u0111\u1ed9c h\u1ea1i.<\/p>\n

V\u1edbi ng\u01b0\u1eddi d\u00f9ng Vi\u1ec7t Nam, b\u1ea5t k\u1ef3 ai c\u00f3 th\u00f3i quen \u201cth\u1ea5y ti\u1ec7n l\u00e0 c\u00e0i\u201d \u0111\u1ec1u c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh n\u1ea1n nh\u00e2n. M\u1ed9t v\u00e0i nguy\u00ean t\u1eafc \u0111\u01a1n gi\u1ea3n nh\u01b0ng hi\u1ec7u qu\u1ea3: \u0111\u1eebng v\u1ed9i c\u00e0i plugin l\u1ea1 ch\u1ec9 v\u00ec t\u00ean nghe hay; tuy\u1ec7t \u0111\u1ed1i c\u1ea3nh gi\u00e1c v\u1edbi nh\u1eefng h\u01b0\u1edbng d\u1eabn y\u00eau c\u1ea7u ch\u1ea1y l\u1ec7nh, c\u00e0i th\u00eam file ngo\u00e0i; h\u1ea1n ch\u1ebf \u0111\u1ec3 tr\u1ee3 l\u00fd AI c\u00f3 quy\u1ec1n truy c\u1eadp qu\u00e1 r\u1ed9ng v\u00e0o m\u00e1y; n\u1ebfu c\u00f3 \u0111i\u1ec1u ki\u1ec7n, n\u00ean ch\u1ea1y OpenClaw trong m\u00f4i tr\u01b0\u1eddng t\u00e1ch bi\u1ec7t (m\u00e1y \u1ea3o, container).
\n\u200b<\/p><\/div>\n

Theo The Hacker News, Bleeping Computer<\/i><\/b>\u200b<\/div>\n
Theo: https:\/\/whitehat.vn\/threads\/canh-bao-tien-ich-cho-tro-ly-ai-bi-loi-dung-de-phat-tan-ma-doc-hay-bo-thoi-quen-thay-tien-la-cai.19193\/<\/a><\/i><\/div>\n","protected":false},"excerpt":{"rendered":"

M\u1ed9t l\u00e0n s\u00f3ng t\u1ea5n c\u00f4ng m\u1edbi \u0111ang nh\u1eafm v\u00e0o ng\u01b0\u1eddi d\u00f9ng OpenClaw – tr\u1ee3 l\u00fd AI c\u00e1 nh\u00e2n m\u00e3 ngu\u1ed3n m\u1edf \u0111ang \u0111\u01b0\u1ee3c nhi\u1ec1u ng\u01b0\u1eddi c\u00e0i \u0111\u1eb7t \u0111\u1ec3 ch\u1ea1y tr\u00ean m\u00e1y t\u00ednh ri\u00eang. Thay v\u00ec t\u1ea5n c\u00f4ng tr\u1ef1c di\u1ec7n, tin t\u1eb7c ch\u1ecdn c\u00e1ch tinh vi h\u01a1n: tr\u00e0 tr\u1ed9n m\u00e3 \u0111\u1ed9c v\u00e0o c\u00e1c \u201ck\u1ef9 n\u0103ng\u201d (skills) […]<\/p>\n","protected":false},"author":46,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[],"class_list":["post-10404","post","type-post","status-publish","format-standard","hentry","category-tin-tuc-cua-vien"],"_links":{"self":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10404","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/users\/46"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/comments?post=10404"}],"version-history":[{"count":0,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10404\/revisions"}],"wp:attachment":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/media?parent=10404"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/categories?post=10404"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/tags?post=10404"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}