{"id":10413,"date":"2025-07-30T12:30:11","date_gmt":"2025-07-30T05:30:11","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=10413"},"modified":"2026-02-05T12:30:28","modified_gmt":"2026-02-05T05:30:28","slug":"redhook-ma-doc-nguy-hiem-tan-cong-nguoi-viet-duoi-vo-boc-co-quan-nha-nuoc-ngan-hang","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/2025\/07\/30\/redhook-ma-doc-nguy-hiem-tan-cong-nguoi-viet-duoi-vo-boc-co-quan-nha-nuoc-ngan-hang\/","title":{"rendered":"RedHook: M\u00e3 \u0111\u1ed9c nguy hi\u1ec3m t\u1ea5n c\u00f4ng ng\u01b0\u1eddi Vi\u1ec7t d\u01b0\u1edbi v\u1ecf b\u1ecdc c\u01a1 quan nh\u00e0 n\u01b0\u1edbc, ng\u00e2n h\u00e0ng"},"content":{"rendered":"<p><b>M\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng \u0111\u00e1ng b\u00e1o \u0111\u1ed9ng m\u1edbi xu\u1ea5t hi\u1ec7n t\u1ea1i Vi\u1ec7t Nam, trong \u0111\u00f3 k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng m\u00e3 \u0111\u1ed9c RedHook \u0111\u1ec3 ng\u1ee5y trang d\u01b0\u1edbi l\u1edbp v\u1ecf b\u1ecdc c\u1ee7a c\u00e1c c\u01a1 quan nh\u00e0 n\u01b0\u1edbc v\u00e0 t\u1ed5 ch\u1ee9c t\u00e0i ch\u00ednh l\u1edbn. Th\u00f4ng qua nh\u1eefng website l\u1eeba \u0111\u1ea3o \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf tinh vi, RedHook nh\u1eafm th\u1eb3ng v\u00e0o ng\u01b0\u1eddi d\u00f9ng ph\u1ed5 th\u00f4ng \u0111\u1ec3 \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u c\u00e1 nh\u00e2n, t\u00e0i kho\u1ea3n ng\u00e2n h\u00e0ng v\u00e0 chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t thi\u1ebft b\u1ecb m\u1ed9t c\u00e1ch to\u00e0n di\u1ec7n.<\/b><\/p>\n<div style=\"text-align: center\">\n<div class=\"bbImageWrapper  js-lbImage\" title=\"1753857377973.png\" data-src=\"https:\/\/whitehat.vn\/attachments\/1753857377973-png.17392\/\" data-lb-sidebar-href=\"\" data-lb-caption-extra-html=\"\" data-single-image=\"1\"><img fetchpriority=\"high\" decoding=\"async\" class=\"bbImage\" title=\"1753857377973.png\" src=\"https:\/\/whitehat.vn\/attachments\/1753857377973-png.17392\/\" alt=\"1753857377973.png\" width=\"672\" height=\"378\" data-url=\"\" data-zoom-target=\"1\" \/><\/div>\n<p>\u200b<\/p><\/div>\n<p>RedHook l\u00e0 m\u00e3 \u0111\u1ed9c Android \u0111\u01b0\u1ee3c ph\u00e1t t\u00e1n c\u00f3 ch\u1ee7 \u0111\u00edch t\u1ea1i Vi\u1ec7t Nam th\u00f4ng qua vi\u1ec7c gi\u1ea3 m\u1ea1o c\u01a1 quan nh\u00e0 n\u01b0\u1edbc, ph\u00e2n ph\u1ed1i file APK qua SMS l\u1eeba \u0111\u1ea3o, m\u00e3 QR, qu\u1ea3ng c\u00e1o gi\u1ea3 v\u00e0 l\u01b0u tr\u1eef tr\u00ean AWS. Khi x\u00e2m nh\u1eadp thi\u1ebft b\u1ecb, RedHook c\u00f3 th\u1ec3 ki\u1ec3m so\u00e1t ho\u00e0n to\u00e0n h\u1ec7 th\u1ed1ng, thu th\u1eadp OTP, d\u1eef li\u1ec7u c\u00e1 nh\u00e2n, t\u00e0i kho\u1ea3n ng\u00e2n h\u00e0ng v\u00e0 th\u1ef1c thi c\u00e1c l\u1ec7nh \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa \u1edf m\u1ee9c \u0111\u1ed9 m\u00e0 chuy\u00ean gia WhiteHat \u0111\u00e1nh gi\u00e1 l\u00e0 &#8220;\u0111\u00e1ng b\u00e1o \u0111\u1ed9ng&#8221;.<\/p>\n<div style=\"text-align: center\">\n<div class=\"bbImageWrapper  js-lbImage\" title=\"1753851918380.png\" data-src=\"https:\/\/whitehat.vn\/attachments\/1753851918380-png.17386\/\" data-lb-sidebar-href=\"\" data-lb-caption-extra-html=\"\" data-single-image=\"1\"><img decoding=\"async\" class=\"bbImage\" title=\"1753851918380.png\" src=\"https:\/\/whitehat.vn\/attachments\/1753851918380-png.17386\/\" alt=\"1753851918380.png\" width=\"904\" height=\"466\" data-url=\"\" data-zoom-target=\"1\" \/><\/div>\n<p><i>\u1ea2nh: Trang web l\u1eeba \u0111\u1ea3o ph\u00e2n ph\u1ed1i t\u1ec7p APK \u0111\u1ed9c h\u1ea1i<\/i>\u200b<\/div>\n<p>C\u00e1c website gi\u1ea3 m\u1ea1o \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf tinh vi nh\u1eb1m \u0111\u00e1nh l\u1eeba ng\u01b0\u1eddi d\u00f9ng r\u1eb1ng h\u1ecd \u0111ang t\u1ea3i v\u1ec1 \u1ee9ng d\u1ee5ng ch\u00ednh th\u1ed1ng, trong khi th\u1ef1c ch\u1ea5t l\u00e0 c\u00e1c t\u1ec7p APK ch\u1ee9a m\u00e3 \u0111\u1ed9c RedHook \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef tr\u00ean d\u1ecbch v\u1ee5 AWS S3 c\u00f4ng khai v\u00e0 ph\u00e2n ph\u1ed1i qua c\u00e1c t\u00ean mi\u1ec1n gi\u1ea3 m\u1ea1o, cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng d\u1ec5 d\u00e0ng thay \u0111\u1ed5i h\u1ea1 t\u1ea7ng v\u00e0 \u0111i\u1ec1u ch\u1ec9nh chi\u1ebfn d\u1ecbch theo m\u1ee5c ti\u00eau.<\/p>\n<p>Chuy\u00ean gia WhiteHat \u0111\u00e1nh gi\u00e1 RedHook \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m v\u00ec c\u00f3 kh\u1ea3 n\u0103ng \u1ea9n m\u00ecnh tr\u01b0\u1edbc ph\u1ea7n m\u1ec1m di\u1ec7t virus v\u1edbi t\u1ec9 l\u1ec7 ph\u00e1t hi\u1ec7n r\u1ea5t th\u1ea5p t\u00ednh \u0111\u1ebfn th\u1eddi \u0111i\u1ec3m hi\u1ec7n t\u1ea1i, khi\u1ebfn nhi\u1ec1u thi\u1ebft b\u1ecb b\u1ecb l\u00e2y nhi\u1ec5m m\u00e0 kh\u00f4ng h\u1ec1 hay bi\u1ebft. M\u00e3 \u0111\u1ed9c n\u00e0y c\u00f2n nh\u1eafm v\u00e0o ng\u01b0\u1eddi d\u00f9ng t\u1ea1i \u0110\u00f4ng Nam \u00c1, khu v\u1ef1c c\u00f3 m\u1ee9c \u0111\u1ed9 ph\u1ee5 thu\u1ed9c cao v\u00e0o thi\u1ebft b\u1ecb di \u0111\u1ed9ng trong giao d\u1ecbch t\u00e0i ch\u00ednh, l\u00e0m gia t\u0103ng r\u1ee7i ro m\u1ea5t d\u1eef li\u1ec7u v\u00e0 t\u00e0i s\u1ea3n. Ngo\u00e0i ra, chi\u1ebfn d\u1ecbch ph\u00e1t t\u00e1n RedHook c\u00f2n t\u00e1i s\u1eed d\u1ee5ng c\u00e1c m\u1eabu gi\u1ea3 m\u1ea1o b\u1eb1ng nhi\u1ec1u ng\u00f4n ng\u1eef kh\u00e1c nhau, cho th\u1ea5y kh\u1ea3 n\u0103ng m\u1edf r\u1ed9ng sang c\u00e1c khu v\u1ef1c kh\u00e1c tr\u00ean to\u00e0n c\u1ea7u trong t\u01b0\u01a1ng lai.<\/p>\n<div style=\"text-align: center\">\n<div class=\"bbImageWrapper  js-lbImage\" title=\"1753856580348.png\" data-src=\"https:\/\/whitehat.vn\/attachments\/1753856580348-png.17389\/\" data-lb-sidebar-href=\"\" data-lb-caption-extra-html=\"\" data-single-image=\"1\"><img decoding=\"async\" class=\"bbImage\" title=\"1753856580348.png\" src=\"https:\/\/whitehat.vn\/attachments\/1753856580348-png.17389\/\" alt=\"1753856580348.png\" width=\"904\" height=\"344\" data-url=\"\" data-zoom-target=\"1\" \/><\/div>\n<p><i>\u1ea2nh: Ch\u1ec9 s\u1ed1 ph\u00e1t hi\u1ec7n tr\u00ean Virus Total c\u1ef1c th\u1ea5p<\/i>\u200b<\/div>\n<h2><span style=\"font-size: 24px\"><b>RedHook ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/b><\/span>\u200b<\/h2>\n<p>C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u an ninh m\u1ea1ng \u0111\u00e3 ph\u00e1t hi\u1ec7n nhi\u1ec1u d\u1ea5u v\u1ebft cho th\u1ea5y chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng c\u00f3 li\u00ean quan \u0111\u1ebfn c\u00e1c nh\u00f3m n\u00f3i ti\u1ebfng Trung Qu\u1ed1c. C\u1ee5 th\u1ec3, m\u00e3 ngu\u1ed3n \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i v\u00e0 b\u1eb1ng ch\u1ee9ng t\u1eeb m\u1ed9t bucket S3 c\u00f4ng khai cho th\u1ea5y \u0111\u00e2y l\u00e0 h\u00e0nh vi c\u1ee7a m\u1ed9t c\u00e1 nh\u00e2n ho\u1eb7c nh\u00f3m t\u1ea5n c\u00f4ng n\u00f3i ti\u1ebfng Trung. Nhi\u1ec1u chu\u1ed7i v\u0103n b\u1ea3n ti\u1ebfng Trung xu\u1ea5t hi\u1ec7n trong log v\u00e0 \u1ea3nh ch\u1ee5p giao di\u1ec7n WebSocket, cung c\u1ea5p manh m\u1ed1i v\u1ec1 ngu\u1ed3n g\u1ed1c c\u1ee7a m\u00e3 \u0111\u1ed9c.<\/p>\n<p>Bucket S3 n\u00e0y, ho\u1ea1t \u0111\u1ed9ng t\u1eeb \u00edt nh\u1ea5t th\u00e1ng 11\/2024, ch\u1ee9a m\u1ed9t l\u01b0\u1ee3ng l\u1edbn d\u1eef li\u1ec7u v\u1eadn h\u00e0nh nh\u01b0 m\u1eabu giao di\u1ec7n ng\u00e2n h\u00e0ng gi\u1ea3 m\u1ea1o, \u1ea3nh ch\u1ee5p c\u00e1c giai \u0111o\u1ea1n l\u1eeba \u0111\u1ea3o v\u00e0 t\u00e0i li\u1ec7u li\u00ean quan \u0111\u1ebfn c\u00e1c chi\u1ebfn d\u1ecbch nh\u1eafm v\u00e0o ng\u01b0\u1eddi d\u00f9ng t\u1ea1i Vi\u1ec7t Nam.<\/p>\n<p>\u0110\u00e1ng ch\u00fa \u00fd, m\u1ed9t m\u1ed1i li\u00ean h\u1ec7 \u0111\u01b0\u1ee3c x\u00e1c l\u1eadp v\u1edbi t\u00ean mi\u1ec1n mailisa[.]me, t\u1eebng li\u00ean quan \u0111\u1ebfn c\u00e1c v\u1ee5 l\u1eeba \u0111\u1ea3o m\u1ef9 ph\u1ea9m quy m\u00f4 l\u1edbn t\u1ea1i Vi\u1ec7t Nam. \u0110i\u1ec1u n\u00e0y cho th\u1ea5y k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 chuy\u1ec3n t\u1eeb c\u00e1c h\u00ecnh th\u1ee9c l\u1eeba \u0111\u1ea3o \u0111\u01a1n gi\u1ea3n sang s\u1eed d\u1ee5ng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i tinh vi \u0111\u1ec3 m\u1edf r\u1ed9ng quy m\u00f4 v\u00e0 m\u1ee9c \u0111\u1ed9 g\u00e2y h\u1ea1i.<\/p>\n<div style=\"text-align: center\">\n<div class=\"bbImageWrapper  js-lbImage\" title=\"1753862521538.png\" data-src=\"https:\/\/whitehat.vn\/attachments\/1753862521538-png.17393\/\" data-lb-sidebar-href=\"\" data-lb-caption-extra-html=\"\" data-single-image=\"1\"><img loading=\"lazy\" decoding=\"async\" class=\"bbImage\" title=\"1753862521538.png\" src=\"https:\/\/whitehat.vn\/attachments\/1753862521538-png.17393\/\" alt=\"1753862521538.png\" width=\"1575\" height=\"507\" data-url=\"\" data-zoom-target=\"1\" \/><\/div>\n<p><i>\u1ea2nh: M\u00e3 \u0111\u1ed9c nh\u1eadn t\u00ean mi\u1ec1n mailisa.me t\u1eeb m\u00e1y ch\u1ee7<\/i>\u200b<\/div>\n<h4><b>1. L\u1eeba ng\u01b0\u1eddi d\u00f9ng ngay t\u1eeb b\u01b0\u1edbc \u0111\u1ea7u ti\u00ean<\/b>\u200b<\/h4>\n<p>Ngay sau khi \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t, RedHook gi\u1ea3 m\u1ea1o giao di\u1ec7n \u0111\u0103ng nh\u1eadp c\u1ee7a c\u00e1c ng\u00e2n h\u00e0ng quen thu\u1ed9c \u0111\u1ec3 l\u1eeba ng\u01b0\u1eddi d\u00f9ng nh\u1eadp th\u00f4ng tin t\u00e0i kho\u1ea3n. \u0110\u1ed3ng th\u1eddi, n\u00f3 d\u1ee5 ng\u01b0\u1eddi d\u00f9ng c\u1ea5p c\u00e1c quy\u1ec1n truy c\u1eadp cao, bao g\u1ed3m:<\/p>\n<ul>\n<li data-xf-list-type=\"ul\"><b>Accessibility Services<\/b>: m\u1edf c\u00e0i \u0111\u1eb7t d\u1ecbch v\u1ee5 h\u1ed7 tr\u1ee3 ng\u01b0\u1eddi d\u00f9ng.<\/li>\n<li data-xf-list-type=\"ul\"><b>Overlay Permission<\/b>: quy\u1ec1n hi\u1ec3n th\u1ecb \u0111\u00e8 l\u00ean c\u00e1c \u1ee9ng d\u1ee5ng kh\u00e1c.<\/li>\n<\/ul>\n<p>Nh\u1edd c\u00e1c quy\u1ec1n n\u00e0y, RedHook c\u00f3 th\u1ec3 \u1ea9n m\u00ecnh, can thi\u1ec7p s\u00e2u v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng v\u00e0 v\u01b0\u1ee3t qua nhi\u1ec1u c\u01a1 ch\u1ebf b\u1ea3o v\u1ec7 ti\u00eau chu\u1ea9n c\u1ee7a Android.<\/p>\n<h4><b>2. Ghi l\u1ea1i thao t\u00e1c v\u00e0 \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb t\u1eeb xa<\/b>\u200b<\/h4>\n<p>RedHook s\u1eed d\u1ee5ng MediaProjection API &#8211; m\u1ed9t c\u00f4ng c\u1ee5 h\u1ee3p ph\u00e1p c\u1ee7a Android \u0111\u1ec3 quay l\u1ea1i m\u00e0n h\u00ecnh v\u00e0 truy\u1ec1n d\u1eef li\u1ec7u theo th\u1eddi gian th\u1ef1c v\u1ec1 m\u00e1y ch\u1ee7 \u0111i\u1ec1u khi\u1ec3n (C2) th\u00f4ng qua WebSocket, m\u1ed9t k\u00eanh li\u00ean l\u1ea1c hai chi\u1ec1u m\u1ea1nh m\u1ebd nh\u01b0ng hi\u1ebfm g\u1eb7p \u1edf c\u00e1c m\u00e3 \u0111\u1ed9c th\u00f4ng th\u01b0\u1eddng. Nh\u1edd \u0111\u00f3, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 theo d\u00f5i v\u00e0 thao t\u00e1c tr\u1ef1c ti\u1ebfp tr\u00ean thi\u1ebft b\u1ecb c\u1ee7a n\u1ea1n nh\u00e2n nh\u01b0 \u0111ang c\u1ea7m m\u00e1y tr\u00ean tay.<\/p>\n<h4><b>3. H\u01a1n 30 l\u1ec7nh \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa c\u1ef1c k\u1ef3 nguy hi\u1ec3m<\/b>\u200b<\/h4>\n<p>Ph\u00e2n t\u00edch k\u1ef9 thu\u1eadt cho th\u1ea5y RedHook c\u00f3 th\u1ec3 th\u1ef1c thi t\u1edbi 34 l\u1ec7nh \u0111i\u1ec1u khi\u1ec3n kh\u00e1c nhau, trong \u0111\u00f3 c\u00f3 nh\u1eefng l\u1ec7nh \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m nh\u01b0:<\/p>\n<ul>\n<li data-xf-list-type=\"ul\">Download and install an APK file: Cho ph\u00e9p hacker c\u00e0i \u0111\u1eb7t th\u00eam ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i, backdoor, ho\u1eb7c c\u00f4ng c\u1ee5 gi\u00e1n \u0111i\u1ec7p kh\u00e1c m\u00e0 kh\u00f4ng c\u1ea7n s\u1ef1 \u0111\u1ed3ng \u00fd c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/li>\n<li data-xf-list-type=\"ul\">Opens accessibility service: Quy\u1ec1n n\u00e0y cho ph\u00e9p malware \u0111i\u1ec1u khi\u1ec3n to\u00e0n b\u1ed9 thi\u1ebft b\u1ecb, t\u1ef1 \u0111\u1ed9ng nh\u1ea5n n\u00fat, \u0111\u1ecdc n\u1ed9i dung m\u00e0n h\u00ecnh, v\u00e0 b\u1ecf qua c\u1ea3nh b\u00e1o b\u1ea3o m\u1eadt. \u0110\u00e2y l\u00e0 quy\u1ec1n c\u1ed1t l\u00f5i b\u1ecb l\u1ea1m d\u1ee5ng nhi\u1ec1u nh\u1ea5t trong c\u00e1c trojan ng\u00e2n h\u00e0ng.<\/li>\n<li data-xf-list-type=\"ul\">Starts screen capturing: Cho ph\u00e9p hacker xem to\u00e0n b\u1ed9 ho\u1ea1t \u0111\u1ed9ng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng tr\u00ean \u0111i\u1ec7n tho\u1ea1i (nh\u1eadp m\u1eadt kh\u1ea9u, OTP, th\u00f4ng tin t\u00e0i kho\u1ea3n, tin nh\u1eafn&#8230;).<\/li>\n<li data-xf-list-type=\"ul\">Collects SMS list: C\u00f3 th\u1ec3 \u0111\u00e1nh c\u1eafp m\u00e3 OTP, x\u00e1c th\u1ef1c ng\u00e2n h\u00e0ng, ho\u1eb7c \u0111\u1ecdc th\u00f4ng b\u00e1o quan tr\u1ecdng nh\u01b0 tin nh\u1eafn giao d\u1ecbch.<\/li>\n<\/ul>\n<h2>C\u00e1c chuy\u00ean gia WhiteHat khuy\u1ebfn c\u00e1o\u200b<\/h2>\n<h4>1. Ng\u01b0\u1eddi d\u00f9ng c\u00e1 nh\u00e2n:\u200b<\/h4>\n<ul>\n<li data-xf-list-type=\"ul\">Tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng c\u00e0i \u0111\u1eb7t \u1ee9ng d\u1ee5ng ngo\u00e0i Google Play ho\u1eb7c c\u00e1c ngu\u1ed3n uy t\u00edn; \u0111\u00e2y l\u00e0 ph\u01b0\u01a1ng th\u1ee9c ph\u1ed5 bi\u1ebfn \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c nh\u01b0 RedHook.<\/li>\n<li data-xf-list-type=\"ul\">Kh\u00f4ng c\u00e0i \u0111\u1eb7t file APK t\u1eeb ngu\u1ed3n kh\u00f4ng r\u00f5 r\u00e0ng, \u0111\u1eb7c bi\u1ec7t khi nh\u1eadn \u0111\u01b0\u1ee3c qua SMS, m\u00e3 QR, Zalo, Facebook ho\u1eb7c c\u00e1c trang web kh\u00f4ng ch\u00ednh th\u1ed1ng.<\/li>\n<li data-xf-list-type=\"ul\">C\u1ea3nh gi\u00e1c v\u1edbi c\u00e1c trang web gi\u1ea3 m\u1ea1o c\u00f3 giao di\u1ec7n gi\u1ed1ng ng\u00e2n h\u00e0ng nh\u01b0ng y\u00eau c\u1ea7u t\u1ea3i \u1ee9ng d\u1ee5ng APK.<\/li>\n<li data-xf-list-type=\"ul\">Th\u1eadn tr\u1ecdng khi \u1ee9ng d\u1ee5ng y\u00eau c\u1ea7u quy\u1ec1n h\u1ec7 th\u1ed1ng b\u1ea5t th\u01b0\u1eddng nh\u01b0: Accessibility, Overlay ho\u1eb7c ghi m\u00e0n h\u00ecnh.<\/li>\n<li data-xf-list-type=\"ul\">Lu\u00f4n c\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh v\u00e0 ph\u1ea7n m\u1ec1m b\u1ea3o m\u1eadt, k\u1ec3 c\u1ea3 tr\u00ean c\u00e1c thi\u1ebft b\u1ecb \u0111\u1eddi c\u0169, \u0111\u1ec3 v\u00e1 c\u00e1c l\u1ed7 h\u1ed5ng c\u00f3 th\u1ec3 b\u1ecb khai th\u00e1c.<\/li>\n<\/ul>\n<h4>2. Ch\u00ednh ph\u1ee7 v\u00e0 c\u00e1c t\u1ed5 ch\u1ee9c\/doanh nghi\u1ec7p\u200b<\/h4>\n<ul>\n<li data-xf-list-type=\"ul\">T\u0103ng c\u01b0\u1eddng gi\u00e1m s\u00e1t v\u00e0 ph\u00e1t hi\u1ec7n m\u00e3 \u0111\u1ed9c tr\u00ean thi\u1ebft b\u1ecb ng\u01b0\u1eddi d\u00f9ng, \u0111\u1eb7c bi\u1ec7t c\u00e1c h\u00e0nh vi b\u1ea5t th\u01b0\u1eddng li\u00ean quan \u0111\u1ebfn quy\u1ec1n h\u1ec7 th\u1ed1ng.<\/li>\n<li data-xf-list-type=\"ul\">Ch\u1ee7 \u0111\u1ed9ng c\u1ea3nh b\u00e1o ng\u01b0\u1eddi d\u00f9ng v\u1ec1 h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng m\u1edbi nh\u01b0 RedHook th\u00f4ng qua email, SMS v\u00e0 \u1ee9ng d\u1ee5ng ch\u00ednh th\u1ee9c.<\/li>\n<li data-xf-list-type=\"ul\">Chia s\u1ebb th\u00f4ng tin t\u00ecnh b\u00e1o m\u1ed1i \u0111e d\u1ecda (threat intelligence) \u0111\u1ec3 nhanh ch\u00f3ng ph\u00e1t hi\u1ec7n, c\u1ea3nh b\u00e1o v\u00e0 ng\u0103n ch\u1eb7n s\u1ef1 l\u00e2y lan.<\/li>\n<li data-xf-list-type=\"ul\">Ph\u1ed1i h\u1ee3p v\u1edbi c\u00e1c nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 nh\u01b0 AWS \u0111\u1ec3 g\u1ee1 b\u1ecf c\u00e1c bucket ho\u1eb7c t\u00ean mi\u1ec1n d\u00f9ng ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c.<\/li>\n<li data-xf-list-type=\"ul\">Ban h\u00e0nh c\u1ea3nh b\u00e1o kh\u1ea9n n\u1ed9i b\u1ed9 v\u00e0 r\u00e0 so\u00e1t h\u1ec7 th\u1ed1ng t\u00ean mi\u1ec1n gi\u1ea3 m\u1ea1o, \u0111\u1ed3ng th\u1eddi c\u1eadp nh\u1eadt c\u00e1c ch\u1ec9 s\u1ed1 nh\u1eadn di\u1ec7n t\u1ea5n c\u00f4ng (IOC) nh\u1eb1m theo d\u00f5i v\u00e0 x\u1eed l\u00fd k\u1ecbp th\u1eddi.<\/li>\n<\/ul>\n<p>RedHook kh\u00f4ng ph\u1ea3i l\u00e0 tr\u01b0\u1eddng h\u1ee3p c\u00e1 bi\u1ec7t, \u0111\u00e2y l\u00e0 l\u1eddi c\u1ea3nh t\u1ec9nh r\u00f5 r\u00e0ng r\u1eb1ng thi\u1ebft b\u1ecb di \u0111\u1ed9ng v\u1ed1n \u0111\u01b0\u1ee3c ch\u00fang ta s\u1eed d\u1ee5ng h\u00e0ng ng\u00e0y \u0111\u1ec3 giao d\u1ecbch v\u00e0 l\u01b0u tr\u1eef th\u00f4ng tin c\u00e1 nh\u00e2n \u0111ang tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau t\u1ea5n c\u00f4ng h\u00e0ng \u0111\u1ea7u. Khi ch\u1ec9 m\u1ed9t thao t\u00e1c c\u00e0i \u0111\u1eb7t v\u1ed9i v\u00e0ng ho\u1eb7c kh\u00f4ng c\u00f3 s\u1ef1 t\u00ecm hi\u1ec3u k\u1ef9 c\u00e0ng, ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 \u0111\u00e1nh \u0111\u1ed5i b\u1eb1ng to\u00e0n b\u1ed9 d\u1eef li\u1ec7u v\u00e0 t\u00e0i s\u1ea3n.<\/p>\n<p>S\u1ef1 c\u1ea3nh gi\u00e1c kh\u00f4ng c\u00f2n l\u00e0 l\u1ef1a ch\u1ecdn m\u00e0 l\u00e0 y\u00eau c\u1ea7u b\u1eaft bu\u1ed9c trong th\u1eddi \u0111\u1ea1i s\u1ed1.<\/p>\n<div style=\"text-align: right\"><b><i>WhiteHat<\/i><\/b>\u200b<\/div>\n<div style=\"text-align: right;margin-top: 16px\"><i>Theo: <a href=\"https:\/\/whitehat.vn\/threads\/redhook-ma-doc-nguy-hiem-tan-cong-nguoi-viet-duoi-vo-boc-co-quan-nha-nuoc-ngan-hang.18612\/\" target=\"_blank\" rel=\"noopener noreferrer\">https:\/\/whitehat.vn\/threads\/redhook-ma-doc-nguy-hiem-tan-cong-nguoi-viet-duoi-vo-boc-co-quan-nha-nuoc-ngan-hang.18612\/<\/a><\/i><\/div>\n","protected":false},"excerpt":{"rendered":"<p>M\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng \u0111\u00e1ng b\u00e1o \u0111\u1ed9ng m\u1edbi xu\u1ea5t hi\u1ec7n t\u1ea1i Vi\u1ec7t Nam, trong \u0111\u00f3 k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng m\u00e3 \u0111\u1ed9c RedHook \u0111\u1ec3 ng\u1ee5y trang d\u01b0\u1edbi l\u1edbp v\u1ecf b\u1ecdc c\u1ee7a c\u00e1c c\u01a1 quan nh\u00e0 n\u01b0\u1edbc v\u00e0 t\u1ed5 ch\u1ee9c t\u00e0i ch\u00ednh l\u1edbn. Th\u00f4ng qua nh\u1eefng website l\u1eeba \u0111\u1ea3o \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf tinh vi, [&hellip;]<\/p>\n","protected":false},"author":46,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[],"class_list":["post-10413","post","type-post","status-publish","format-standard","hentry","category-tin-tuc-cua-vien"],"_links":{"self":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10413","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/users\/46"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/comments?post=10413"}],"version-history":[{"count":0,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10413\/revisions"}],"wp:attachment":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/media?parent=10413"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/categories?post=10413"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/tags?post=10413"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}