{"id":10467,"date":"2025-07-20T12:35:15","date_gmt":"2025-07-20T05:35:15","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=10467"},"modified":"2026-02-05T12:35:23","modified_gmt":"2026-02-05T05:35:23","slug":"chien-dich-toan-cau-chan-dung-ma-doc-lumma-ngan-ro-ri-du-lieu-ca-nhan-tren-dien-rong","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/2025\/07\/20\/chien-dich-toan-cau-chan-dung-ma-doc-lumma-ngan-ro-ri-du-lieu-ca-nhan-tren-dien-rong\/","title":{"rendered":"Chi\u1ebfn d\u1ecbch to\u00e0n c\u1ea7u ch\u1eb7n \u0111\u1ee9ng m\u00e3 \u0111\u1ed9c Lumma, ng\u0103n r\u00f2 r\u1ec9 d\u1eef li\u1ec7u c\u00e1 nh\u00e2n tr\u00ean di\u1ec7n r\u1ed9ng"},"content":{"rendered":"
M\u1ed9t chi\u1ebfn d\u1ecbch truy qu\u00e9t to\u00e0n c\u1ea7u v\u1edbi s\u1ef1 ph\u1ed1i h\u1ee3p gi\u1eefa Microsoft, FBI, Europol v\u00e0 nhi\u1ec1u t\u1ed5 ch\u1ee9c an ninh m\u1ea1ng h\u00e0ng \u0111\u1ea7u th\u1ebf gi\u1edbi v\u1eeba \u0111\u00e1nh s\u1eadp m\u1ea1ng l\u01b0\u1edbi ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c Lumma Infostealer – m\u1ed9t lo\u1ea1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111ang \u00e2m th\u1ea7m \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u t\u1eeb h\u00e0ng tr\u0103m ngh\u00ecn m\u00e1y t\u00ednh tr\u00ean kh\u1eafp th\u1ebf gi\u1edbi.<\/b>
\n\u200b<\/div>\n
\"Thi\u1ebft<\/a>\u200b<\/div>\n
\nLumma, c\u00f2n \u0111\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn v\u1edbi t\u00ean g\u1ecdi LummaC2, l\u00e0 m\u1ed9t lo\u1ea1i m\u00e3 \u0111\u1ed9c theo m\u00f4 h\u00ecnh “malware-as-a-service”, \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng nh\u01b0 m\u1ed9t d\u1ecbch v\u1ee5 cho thu\u00ea. K\u1ebb t\u1ea5n c\u00f4ng kh\u00f4ng c\u1ea7n c\u00f3 ki\u1ebfn th\u1ee9c k\u1ef9 thu\u1eadt s\u00e2u, ch\u1ec9 c\u1ea7n b\u1ecf ra t\u1eeb 250 \u0111\u1ebfn 1.000 USD l\u00e0 \u0111\u00e3 c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng Lumma \u0111\u1ec3 thu th\u1eadp m\u1eadt kh\u1ea9u, th\u1ebb t\u00edn d\u1ee5ng, cookie tr\u00ecnh duy\u1ec7t, l\u1ecbch s\u1eed truy c\u1eadp v\u00e0 th\u1eadm ch\u00ed c\u1ea3 v\u00ed ti\u1ec1n \u0111i\u1ec7n t\u1eed. Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i n\u00e0y \u0111\u01b0\u1ee3c ph\u00e1t t\u00e1n th\u00f4ng qua nhi\u1ec1u h\u00ecnh th\u1ee9c tinh vi nh\u01b0 email gi\u1ea3 m\u1ea1o, qu\u1ea3ng c\u00e1o \u0111\u1ed9c h\u1ea1i, c\u00e1c ph\u1ea7n m\u1ec1m crack ho\u1eb7c c\u00e1c trang web gi\u1ea3 m\u1ea1o CAPTCHA. Trong nhi\u1ec1u tr\u01b0\u1eddng h\u1ee3p, ng\u01b0\u1eddi d\u00f9ng ho\u00e0n to\u00e0n kh\u00f4ng hay bi\u1ebft thi\u1ebft b\u1ecb c\u1ee7a m\u00ecnh \u0111\u00e3 b\u1ecb x\u00e2m nh\u1eadp.<\/p>\n

Chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng Lumma di\u1ec5n ra r\u1ea7m r\u1ed9 t\u1eeb gi\u1eefa th\u00e1ng 3 \u0111\u1ebfn gi\u1eefa th\u00e1ng 5 n\u0103m 2025. Trong th\u1eddi gian n\u00e0y, \u0111\u00e3 c\u00f3 h\u01a1n 394.000 thi\u1ebft b\u1ecb Windows b\u1ecb l\u00e2y nhi\u1ec5m, tr\u1ea3i r\u1ed9ng tr\u00ean h\u01a1n 40 qu\u1ed1c gia. Thi\u1ec7t h\u1ea1i \u01b0\u1edbc t\u00ednh l\u00ean t\u1edbi h\u00e0ng ch\u1ee5c tri\u1ec7u \u0111\u00f4 la M\u1ef9, \u0111\u1eb7c bi\u1ec7t l\u00e0 t\u1eeb vi\u1ec7c \u0111\u00e1nh c\u1eafp v\u00e0 b\u00e1n d\u1eef li\u1ec7u th\u1ebb t\u00edn d\u1ee5ng tr\u00ean c\u00e1c ch\u1ee3 \u0111en tr\u1ef1c tuy\u1ebfn. M\u1ed9t ph\u1ea7n l\u1edbn d\u1eef li\u1ec7u n\u00e0y \u0111\u00e3 b\u1ecb r\u00f2 r\u1ec9 qua c\u00e1c n\u1ec1n t\u1ea3ng nh\u01b0 Telegram, n\u01a1i t\u1ed9i ph\u1ea1m m\u1ea1ng trao \u0111\u1ed5i th\u00f4ng tin nhanh v\u00e0 kh\u00f3 ki\u1ec3m so\u00e1t.<\/p>\n

Theo th\u00f4ng tin t\u1eeb c\u00e1c c\u01a1 quan ch\u1ee9c n\u0103ng, h\u01a1n 2.300 t\u00ean mi\u1ec1n \u0111\u1ed9c h\u1ea1i \u0111\u00e3 b\u1ecb ki\u1ec3m so\u00e1t, c\u1eaft \u0111\u1ee9t chu\u1ed7i li\u00ean l\u1ea1c \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa (C2) gi\u1eefa hacker v\u00e0 thi\u1ebft b\u1ecb n\u1ea1n nh\u00e2n.<\/p>\n

C\u00e1c chuy\u00ean gia c\u1ea3nh b\u00e1o r\u1eb1ng, m\u1eb7c d\u00f9 chi\u1ebfn d\u1ecbch tri\u1ec7t ph\u00e1 \u0111\u00e3 thu \u0111\u01b0\u1ee3c k\u1ebft qu\u1ea3 \u0111\u00e1ng k\u1ec3 nh\u01b0ng m\u1ed1i \u0111e d\u1ecda t\u1eeb Lumma v\u1eabn ch\u01b0a ho\u00e0n to\u00e0n bi\u1ebfn m\u1ea5t. Nhi\u1ec1u h\u1ea1 t\u1ea7ng m\u00e1y ch\u1ee7 t\u1ea1i Nga – n\u01a1i \u0111\u01b0\u1ee3c cho l\u00e0 trung t\u00e2m \u0111i\u1ec1u ph\u1ed1i ch\u00ednh, v\u1eabn c\u00f2n ho\u1ea1t \u0111\u1ed9ng. C\u00e1c nh\u00f3m \u0111\u1ee9ng sau Lumma th\u1eadm ch\u00ed \u0111\u00e3 b\u1eaft \u0111\u1ea7u x\u00e2y d\u1ef1ng l\u1ea1i h\u1ec7 th\u1ed1ng m\u1edbi \u0111\u1ec3 ti\u1ebfp t\u1ee5c v\u1eadn h\u00e0nh d\u1ecbch v\u1ee5. Theo b\u00e1o c\u00e1o t\u1eeb c\u00e1c c\u00f4ng ty an ninh m\u1ea1ng, Lumma v\u1eabn l\u00e0 m\u1ed9t trong nh\u1eefng c\u00f4ng c\u1ee5 ph\u1ed5 bi\u1ebfn nh\u1ea5t \u0111\u01b0\u1ee3c gi\u1edbi t\u1ed9i ph\u1ea1m m\u1ea1ng s\u1eed d\u1ee5ng, trong \u0111\u00f3 c\u00f3 c\u1ea3 nh\u00f3m Scattered Spider – m\u1ed9t nh\u00f3m hacker kh\u00e9t ti\u1ebfng v\u1edbi nhi\u1ec1u chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng v\u00e0o doanh nghi\u1ec7p l\u1edbn t\u1ea1i M\u1ef9 v\u00e0 ch\u00e2u \u00c2u.<\/p>\n

C\u00e1c c\u01a1 quan ch\u1ee9c n\u0103ng c\u00f3 th\u1ec3 gi\u00e0nh l\u1ea1i quy\u1ec1n ki\u1ec3m so\u00e1t t\u00ean mi\u1ec1n v\u00e0 \u0111\u00f3ng c\u1eeda h\u1ec7 th\u1ed1ng \u0111i\u1ec1u khi\u1ec3n nh\u01b0ng b\u1ea3n th\u00e2n m\u00e3 \u0111\u1ed9c c\u00f3 th\u1ec3 v\u1eabn c\u00f2n t\u1ed3n t\u1ea1i tr\u00ean thi\u1ebft b\u1ecb ng\u01b0\u1eddi d\u00f9ng n\u1ebfu kh\u00f4ng \u0111\u01b0\u1ee3c x\u1eed l\u00fd tri\u1ec7t \u0111\u1ec3. \u0110i\u1ec1u n\u00e0y \u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c r\u1ee7i ro b\u1ecb \u0111\u00e1nh c\u1eafp th\u00f4ng tin v\u1eabn hi\u1ec7n h\u1eefu, \u0111\u1eb7c bi\u1ec7t v\u1edbi nh\u1eefng ai \u0111ang s\u1eed d\u1ee5ng m\u00e1y t\u00ednh c\u00e1 nh\u00e2n ho\u1eb7c h\u1ec7 th\u1ed1ng ch\u01b0a \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 \u0111\u1ea7y \u0111\u1ee7.<\/p>\n

\u0110\u1ec3 ph\u00f2ng tr\u00e1nh nguy c\u01a1 b\u1ecb l\u00e2y nhi\u1ec5m, c\u00e1c chuy\u00ean gia an ninh m\u1ea1ng \u0111\u01b0a ra l\u1eddi c\u1ea3nh b\u00e1o:\u200b<\/p><\/div>\n