{"id":10543,"date":"2025-10-13T13:28:32","date_gmt":"2025-10-13T06:28:32","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=10543"},"modified":"2026-02-05T13:28:39","modified_gmt":"2026-02-05T06:28:39","slug":"toan-canh-vu-tan-cong-salesforce-khi-chuoi-cung-ung-tro-thanh-diem-yeu-chi-mang","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/2025\/10\/13\/toan-canh-vu-tan-cong-salesforce-khi-chuoi-cung-ung-tro-thanh-diem-yeu-chi-mang\/","title":{"rendered":"To\u00e0n c\u1ea3nh v\u1ee5 t\u1ea5n c\u00f4ng Salesforce: Khi chu\u1ed7i cung \u1ee9ng tr\u1edf th\u00e0nh \u0111i\u1ec3m y\u1ebfu ch\u00ed m\u1ea1ng"},"content":{"rendered":"

M\u1ed9t chi\u1ebfn d\u1ecbch r\u00f2 r\u1ec9 d\u1eef li\u1ec7u quy m\u00f4 l\u1edbn \u0111\u00e3 khi\u1ebfn th\u00f4ng tin c\u1ee7a h\u00e0ng ch\u1ee5c tri\u1ec7u kh\u00e1ch h\u00e0ng t\u1eeb h\u01a1n 40 t\u1ed5 ch\u1ee9c b\u1ecb c\u00f4ng khai. Th\u1ee7 ph\u1ea1m l\u00e0 nh\u00f3m tin t\u1eb7c Scattered LAPSUS$ Hunters, m\u1ed9t li\u00ean minh hacker chuy\u00ean nh\u1eafm v\u00e0o c\u00e1c n\u1ec1n t\u1ea3ng doanh nghi\u1ec7p. H\u1ecd khai th\u00e1c c\u00e1c token, quy\u1ec1n \u1ee7y quy\u1ec1n v\u00e0 \u1ee9ng d\u1ee5ng b\u00ean th\u1ee9 ba trong h\u1ec7 th\u1ed1ng Salesforce \u0111\u1ec3 chi\u1ebfm d\u1eef li\u1ec7u, bi\u1ebfn v\u1ee5 vi\u1ec7c th\u00e0nh minh ch\u1ee9ng r\u00f5 r\u00e0ng cho r\u1ee7i ro t\u1eeb chu\u1ed7i cung \u1ee9ng d\u1ecbch v\u1ee5 v\u00e0 c\u00e1c t\u00edch h\u1ee3p kh\u00f4ng \u0111\u01b0\u1ee3c qu\u1ea3n l\u00fd ch\u1eb7t ch\u1ebd.<\/b><\/p>\n

\n
\"3.png\"<\/div>\n

\u200b<\/p><\/div>\n

V\u00ec sao Salesforce tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau\u200b<\/h3>\n

Salesforce l\u00e0 n\u1ec1n t\u1ea3ng qu\u1ea3n l\u00fd quan h\u1ec7 kh\u00e1ch h\u00e0ng (Customer Relationship Management \u2013 CRM) h\u00e0ng \u0111\u1ea7u, \u0111\u01b0\u1ee3c h\u00e0ng ch\u1ee5c ngh\u00ecn doanh nghi\u1ec7p tr\u00ean to\u00e0n c\u1ea7u s\u1eed d\u1ee5ng \u0111\u1ec3 qu\u1ea3n l\u00fd d\u1eef li\u1ec7u kh\u00e1ch h\u00e0ng, \u0111\u1ed1i t\u00e1c v\u00e0 nh\u00e2n vi\u00ean. Ch\u00ednh s\u1ef1 ph\u1ed5 bi\u1ebfn v\u00e0 kh\u1ea3 n\u0103ng t\u00edch h\u1ee3p m\u1ea1nh m\u1ebd v\u1edbi \u1ee9ng d\u1ee5ng b\u00ean th\u1ee9 ba khi\u1ebfn Salesforce tr\u1edf th\u00e0nh \u201cm\u1ecf v\u00e0ng\u201d cho tin t\u1eb7c. C\u00e1c t\u00e0i kho\u1ea3n k\u1ef9 thu\u1eadt ho\u1eb7c token OAuth h\u1ee3p l\u1ec7, n\u1ebfu b\u1ecb l\u1ed9, cho ph\u00e9p truy c\u1eadp tr\u1ef1c ti\u1ebfp v\u00e0o d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m m\u00e0 kh\u00f4ng c\u1ea7n khai th\u00e1c l\u1ed7 h\u1ed5ng ph\u1ea7n m\u1ec1m, khi\u1ebfn n\u1ec1n t\u1ea3ng tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau l\u00fd t\u01b0\u1edfng cho c\u00e1c chi\u1ebfn d\u1ecbch t\u1ed1ng ti\u1ec1n ho\u1eb7c r\u00f2 r\u1ec9 d\u1eef li\u1ec7u quy m\u00f4 l\u1edbn.<\/p>\n

B\u00ean c\u1ea1nh \u0111\u00f3, c\u00e1c k\u1ebft n\u1ed1i linh ho\u1ea1t v\u00e0 \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c \u1ee7y quy\u1ec1n s\u1eb5n s\u00e0ng trao quy\u1ec1n truy c\u1eadp s\u00e2u cho h\u1ec7 th\u1ed1ng, trong khi nhi\u1ec1u doanh nghi\u1ec7p v\u1eabn ch\u01b0a tri\u1ec3n khai gi\u00e1m s\u00e1t h\u00e0nh vi API hay x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 \u0111\u1ea7y \u0111\u1ee7. \u0110i\u1ec1u n\u00e0y m\u1edf r\u1ed9ng \u0111\u00e1ng k\u1ec3 b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng c\u1ee7a Salesforce v\u00e0 l\u00e0 l\u00fd do nh\u00f3m Scattered LAPSUS$ Hunters ch\u1ecdn khai th\u00e1c c\u00e1c t\u00edch h\u1ee3p thay v\u00ec nh\u1eafm tr\u1ef1c ti\u1ebfp v\u00e0o h\u1ec7 th\u1ed1ng n\u1ed9i b\u1ed9 c\u1ee7a t\u1eebng doanh nghi\u1ec7p.<\/p>\n

Chi\u1ebfn thu\u1eadt t\u1ea5n c\u00f4ng tinh vi v\u00e0 l\u1eb7ng l\u1ebd\u200b<\/h3>\n

T\u1eeb kho\u1ea3ng th\u00e1ng 4\/2024 \u0111\u1ebfn th\u00e1ng 9\/2025, chi\u1ebfn d\u1ecbch b\u1eaft \u0111\u1ea7u b\u1eb1ng m\u1ed9t giai \u0111o\u1ea1n trinh s\u00e1t k\u1ef9 l\u01b0\u1ee1ng. Theo b\u00e1o c\u00e1o, nh\u00f3m tin t\u1eb7c Scattered LAPSUS$ Hunters l\u1eadp b\u1ea3n \u0111\u1ed3 c\u00e1c \u201cc\u1eeda v\u00e0o\u201d h\u1ee3p ph\u00e1p tr\u00ean t\u1eebng h\u1ec7 th\u1ed1ng Salesforce b\u1eb1ng c\u00e1ch r\u00e0 so\u00e1t \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c \u1ee7y quy\u1ec1n, t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 v\u00e0 c\u00e1c t\u00edch h\u1ee3p b\u00ean th\u1ee9 ba nh\u01b0 Salesloft hay Drift. M\u1ee5c ti\u00eau l\u00e0 x\u00e1c \u0111\u1ecbnh ph\u1ea1m vi quy\u1ec1n c\u1ee7a token, \u0111\u1ecba ch\u1ec9 callback v\u00e0 n\u01a1i l\u01b0u tr\u1eef b\u00ed m\u1eadt c\u00f3 th\u1ec3 b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 truy c\u1eadp d\u1eef li\u1ec7u, t\u1eeb \u0111\u00f3 d\u1ef1ng danh s\u00e1ch m\u1ee5c ti\u00eau c\u00f3 \u0111\u1ed9 r\u1ee7i ro cao nh\u1ea5t. Giai \u0111o\u1ea1n n\u00e0y \u0111\u1eb7t n\u1ec1n t\u1ea3ng cho c\u00e1c b\u01b0\u1edbc ti\u1ebfp theo, khi tin t\u1eb7c ti\u1ebfn h\u00e0nh chi\u1ebfm quy\u1ec1n ban \u0111\u1ea7u v\u00e0 thi\u1ebft l\u1eadp \u0111i\u1ec3m t\u1ed3n t\u1ea1i \u0111\u1ec3 tr\u00edch xu\u1ea5t d\u1eef li\u1ec7u m\u1ed9t c\u00e1ch l\u1eb7ng l\u1ebd nh\u01b0ng hi\u1ec7u qu\u1ea3.<\/p>\n

Khi \u0111\u00e3 c\u00f3 b\u1ea3n \u0111\u1ed3 m\u1ee5c ti\u00eau, ch\u00fang chuy\u1ec3n sang chi\u1ebfm quy\u1ec1n ban \u0111\u1ea7u b\u1eb1ng c\u00e1c bi\u1ec7n ph\u00e1p l\u1eeba \u0111\u1ea3o x\u00e3 h\u1ed9i ho\u1eb7c khai th\u00e1c chu\u1ed7i cung \u1ee9ng. Th\u1ef1c ti\u1ec5n ph\u1ed5 bi\u1ebfn l\u00e0 thuy\u1ebft ph\u1ee5c qu\u1ea3n tr\u1ecb vi\u00ean c\u1ea5p quy\u1ec1n cho m\u1ed9t \u1ee9ng d\u1ee5ng gi\u1ea3 m\u1ea1o ho\u1eb7c thu th\u1eadp \u0111\u01b0\u1ee3c refresh token hay client secret t\u1eeb h\u1ec7 th\u1ed1ng b\u00ean th\u1ee9 ba b\u1ecb l\u1ed9. M\u1ed9t khi n\u1eafm trong tay token h\u1ee3p l\u1ec7, ch\u00fang th\u01b0\u1eddng thi\u1ebft l\u1eadp \u0111i\u1ec3m t\u1ed3n t\u1ea1i b\u1eb1ng c\u00e1ch \u0111\u0103ng k\u00fd th\u00eam \u1ee9ng d\u1ee5ng k\u1ebft n\u1ed1i, t\u1ea1o t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 ho\u1eb7c l\u00ean l\u1ecbch c\u00e1c c\u00f4ng vi\u1ec7c t\u1ef1 \u0111\u1ed9ng \u0111\u1ec3 duy tr\u00ec truy c\u1eadp m\u00e0 \u00edt g\u00e2y ch\u00fa \u00fd. M\u1ed9t th\u00e0nh vi\u00ean trong nh\u00f3m, t\u1ef1 x\u01b0ng l\u00e0 Shiny, chia s\u1ebb r\u1eb1ng h\u1ecd kh\u00f4ng t\u1ea5n c\u00f4ng tr\u1ef1c ti\u1ebfp Salesforce, m\u00e0 nh\u1eafm v\u00e0o kh\u00e1ch h\u00e0ng c\u1ee7a Salesforce b\u1eb1ng ph\u01b0\u01a1ng ph\u00e1p l\u1eeba \u0111\u1ea3o qua \u0111i\u1ec7n tho\u1ea1i hay c\u00f2n g\u1ecdi l\u00e0 voice phishing. Trong h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng n\u00e0y, tin t\u1eb7c gi\u1ea3 danh nh\u00e2n vi\u00ean \u0111\u1ec3 g\u1ecdi t\u1edbi b\u1ed9 ph\u1eadn h\u1ed7 tr\u1ee3 IT, nh\u1eb1m \u0111\u00e1nh l\u1eeba v\u00e0 chi\u1ebfm quy\u1ec1n truy c\u1eadp th\u00f4ng tin nh\u1ea1y c\u1ea3m.<\/p>\n

Khi c\u00f3 quy\u1ec1n truy c\u1eadp \u1ed5n \u0111\u1ecbnh, ch\u00fang ti\u1ebfn h\u00e0nh tr\u00edch xu\u1ea5t d\u1eef li\u1ec7u qua c\u00e1c c\u01a1 ch\u1ebf h\u1ee3p ph\u00e1p c\u1ee7a Salesforce. Ch\u00fang d\u00f9ng API xu\u1ea5t d\u1eef li\u1ec7u theo kh\u1ed1i, c\u00f4ng c\u1ee5 Data Loader ho\u1eb7c c\u00e1c truy v\u1ea5n tinh ch\u1ec9nh \u0111\u1ec3 l\u1ea5y ch\u00ednh x\u00e1c nh\u1eefng tr\u01b0\u1eddng ch\u1ee9a th\u00f4ng tin c\u00e1 nh\u00e2n, sau \u0111\u00f3 chia nh\u1ecf c\u00e1c job xu\u1ea5t \u0111\u1ec3 n\u00e9 gi\u1edbi h\u1ea1n t\u1ed1c \u0111\u1ed9 v\u00e0 chuy\u1ec3n k\u1ebft qu\u1ea3 v\u1ec1 kho l\u01b0u tr\u1eef do ch\u00fang ki\u1ec3m so\u00e1t ho\u1eb7c qua webhook. B\u1edfi h\u1ea7u h\u1ebft thao t\u00e1c \u0111\u1ec1u di\u1ec5n ra d\u01b0\u1edbi danh ngh\u0129a \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c \u1ee7y quy\u1ec1n v\u00e0 v\u1edbi token h\u1ee3p l\u1ec7, ho\u1ea1t \u0111\u1ed9ng exfiltration th\u01b0\u1eddng kh\u00f4ng k\u00edch ho\u1ea1t c\u1ea3nh b\u00e1o \u0111\u0103ng nh\u1eadp b\u1ea5t th\u01b0\u1eddng, khi\u1ebfn d\u1eef li\u1ec7u b\u1ecb r\u00fat ra m\u00e0 n\u1ea1n nh\u00e2n kh\u00f3 ph\u00e1t hi\u1ec7n k\u1ecbp th\u1eddi.<\/p>\n

Khi \u0111\u00e3 thu th\u1eadp \u0111\u1ee7,nh\u00f3m Scattered LAPSUS$ Hunters s\u1ebd x\u1eed l\u00fd v\u00e0 c\u00f4ng khai m\u1ed9t ph\u1ea7n d\u1eef li\u1ec7u l\u00e0m b\u1eb1ng ch\u1ee9ng, k\u00e8m y\u00eau c\u1ea7u t\u1ed1ng ti\u1ec1n nh\u1eb1m khu\u1ebfch \u0111\u1ea1i \u00e1p l\u1ef1c truy\u1ec1n th\u00f4ng v\u00e0 ph\u00e1p l\u00fd l\u00ean n\u1ea1n nh\u00e2n.<\/p>\n

\n
\"1.png\"<\/div>\n<\/div>\n

T\u00e1c \u0111\u1ed9ng to\u00e0n c\u1ea7u: Khi h\u01a1n 40 t\u1eadp \u0111o\u00e0n b\u1ecb l\u1ed9 d\u1eef li\u1ec7u Salesforce\u200b<\/h3>\n

H\u1eadu qu\u1ea3 c\u1ee7a chi\u1ebfn d\u1ecbch nhanh ch\u00f3ng hi\u1ec7n r\u00f5 \u1edf quy m\u00f4 v\u00e0 t\u00ednh ch\u1ea5t \u0111a ng\u00e0nh. T\u1ea1i \u00dac, Qantas x\u00e1c nh\u1eadn h\u01a1n 5 tri\u1ec7u b\u1ea3n ghi kh\u00e1ch h\u00e0ng \u0111\u00e3 b\u1ecb ph\u00e1t t\u00e1n sau khi h\u1ea1n ch\u00f3t tr\u1ea3 ti\u1ec1n chu\u1ed9c tr\u00f4i qua, k\u00e8m th\u00f4ng \u0111i\u1ec7p khi\u00eau kh\u00edch c\u1ee7a nh\u00f3m tin t\u1eb7c: “Don\u2019t be the next headline, should have paid the ransom.” t\u1ea1m d\u1ecbch: “\u0110\u1eebng \u0111\u1ec3 m\u00ecnh tr\u1edf th\u00e0nh ti\u00eau \u0111\u1ec1 ti\u1ebfp theo, \u0111\u00e1ng ra c\u00e1c ng\u01b0\u1eddi n\u00ean tr\u1ea3 ti\u1ec1n.”<\/p>\n

\u1ede Vi\u1ec7t Nam, Vietnam Airlines \u0111\u01b0\u1ee3c ghi nh\u1eadn c\u00f3 kho\u1ea3ng 7,3 tri\u1ec7u th\u00f4ng tin kh\u00e1ch h\u00e0ng b\u1ecb l\u1ed9, bao g\u1ed3m t\u00ean, email, s\u1ed1 \u0111i\u1ec7n tho\u1ea1i, ng\u00e0y sinh v\u00e0 chi ti\u1ebft h\u1ed9i vi\u00ean ch\u01b0\u01a1ng tr\u00ecnh kh\u00e1ch h\u00e0ng th\u00e2n thi\u1ebft. \u0110\u1ebfn nay Vietnam Airlines ch\u01b0a c\u00f4ng b\u1ed1 con s\u1ed1 c\u1ee5 th\u1ec3 v\u1ec1 ph\u1ea1m vi \u1ea3nh h\u01b0\u1edfng hay c\u00e1c b\u01b0\u1edbc kh\u1eafc ph\u1ee5c \u0111ang tri\u1ec3n khai. Salesforce kh\u1eb3ng \u0111\u1ecbnh kh\u00f4ng c\u00f3 d\u1ea5u hi\u1ec7u n\u1ec1n t\u1ea3ng l\u00f5i b\u1ecb x\u00e2m nh\u1eadp v\u00e0 t\u1eeb ch\u1ed1i b\u00ecnh lu\u1eadn chi ti\u1ebft v\u1ec1 c\u00e1c kh\u00e1ch h\u00e0ng t\u1ea1i khu v\u1ef1c ch\u00e2u \u00c1.<\/p>\n

M\u1ee9c \u0111\u1ed9 \u1ea3nh h\u01b0\u1edfng kh\u00f4ng d\u1eebng l\u1ea1i \u1edf v\u00e0i h\u00e3ng h\u00e0ng kh\u00f4ng. Danh s\u00e1ch do nh\u00f3m c\u00f4ng b\u1ed1 bao g\u1ed3m nhi\u1ec1u t\u1eadp \u0111o\u00e0n to\u00e0n c\u1ea7u n\u1ed5i b\u1eadt trong l\u0129nh v\u1ef1c b\u00e1n l\u1ebb, logistics, gi\u1ea3i tr\u00ed v\u00e0 t\u00e0i ch\u00ednh, nh\u01b0 Toyota, Disney, McDonald\u2019s, Ikea, Adidas, Gap, FedEx, Marriott hay AirFrance-KLM. Khi d\u1eef li\u1ec7u t\u1eeb nhi\u1ec1u ng\u00e0nh \u0111\u01b0\u1ee3c khai th\u00e1c \u0111\u1ed3ng th\u1eddi, h\u1eadu qu\u1ea3 tr\u1edf th\u00e0nh h\u1ec7 th\u1ed1ng: t\u1ed5n th\u1ea5t ni\u1ec1m tin, chi ph\u00ed \u1ee9ng ph\u00f3, nguy c\u01a1 ki\u1ec7n t\u1ee5ng v\u00e0 l\u00e0n s\u00f3ng t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o nh\u1eafm v\u00e0o kh\u00e1ch h\u00e0ng c\u1ee7a t\u1eebng th\u01b0\u01a1ng hi\u1ec7u. Ch\u00ednh v\u00ec v\u1eady v\u1ee5 vi\u1ec7c kh\u00f4ng th\u1ec3 \u0111\u01b0\u1ee3c nh\u00ecn nh\u1eadn nh\u01b0 m\u1ed9t s\u1ef1 c\u1ed1 \u0111\u01a1n l\u1ebb m\u00e0 ph\u1ea3i \u0111\u01b0\u1ee3c coi l\u00e0 l\u1eddi c\u1ea3nh b\u00e1o c\u1ea5p cao v\u1ec1 qu\u1ea3n tr\u1ecb r\u1ee7i ro trong m\u00f4i tr\u01b0\u1eddng SaaS v\u00e0 t\u00edch h\u1ee3p \u1ee9ng d\u1ee5ng.<\/p>\n

B\u1ea3n ch\u1ea5t chi\u1ebfn d\u1ecbch: kh\u00f4ng ch\u1ec9 l\u00e0 t\u1ed1ng ti\u1ec1n\u200b<\/h3>\n

Scattered LAPSUS$ Hunters kh\u00f4ng ch\u1ec9 l\u00e0 nh\u00f3m t\u1ea5n c\u00f4ng \u0111\u01a1n l\u1ebb, m\u00e0 \u0111\u01b0\u1ee3c xem nh\u01b0 li\u00ean minh gi\u1eefa c\u00e1c t\u1eadp \u0111o\u00e0n tin t\u1eb7c gi\u00e0u kinh nghi\u1ec7m trong c\u00e1c chi\u1ebfn d\u1ecbch r\u00f2 r\u1ec9 d\u1eef li\u1ec7u to\u00e0n c\u1ea7u. H\u1ecd v\u1eadn h\u00e0nh chi\u1ebfn d\u1ecbch theo k\u1ecbch b\u1ea3n tinh vi, k\u1ebft h\u1ee3p y\u1ebfu t\u1ed1 k\u1ef9 thu\u1eadt v\u00e0 \u00e1p l\u1ef1c truy\u1ec1n th\u00f4ng, bu\u1ed9c c\u00e1c t\u1ed5 ch\u1ee9c \u0111\u1ed1i m\u1eb7t \u0111\u1ed3ng th\u1eddi v\u1edbi kh\u1ee7ng ho\u1ea3ng ph\u00e1p l\u00fd v\u00e0 uy t\u00edn. Vi\u1ec7c c\u00f4ng b\u1ed1 d\u1eef li\u1ec7u t\u1eeb h\u01a1n 40 t\u1ed5 ch\u1ee9c c\u00f9ng l\u00fac kh\u00f4ng ch\u1ec9 g\u00e2y ch\u00fa \u00fd t\u1ed1i \u0111a m\u00e0 c\u00f2n t\u1ea1o hi\u1ec7u \u1ee9ng domino, khi\u1ebfn n\u1ea1n nh\u00e2n ph\u1ea3i ph\u1ea3n \u1ee9ng nhanh v\u00e0 t\u1ed1n k\u00e9m, t\u1eeb \u0111i\u1ec1u tra n\u1ed9i b\u1ed9 \u0111\u1ebfn t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt, c\u1ea3nh b\u00e1o kh\u00e1ch h\u00e0ng v\u00e0 \u0111\u1ed1i ph\u00f3 v\u1edbi truy\u1ec1n th\u00f4ng.<\/p>\n

Chi\u1ebfn l\u01b0\u1ee3c n\u00e0y cho th\u1ea5y m\u1ee5c ti\u00eau c\u1ee7a nh\u00f3m kh\u00f4ng d\u1eebng l\u1ea1i \u1edf l\u1ee3i nhu\u1eadn tr\u1ef1c ti\u1ebfp t\u1eeb ti\u1ec1n chu\u1ed9c. Khi d\u1eef li\u1ec7u b\u1ecb ph\u01a1i b\u00e0y, h\u1eadu qu\u1ea3 lan t\u1ecfa: t\u1ed5n th\u1ea5t ni\u1ec1m tin, r\u1ee7i ro ph\u00e1p l\u00fd v\u00e0 l\u00e0n s\u00f3ng t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o nh\u1eafm v\u00e0o kh\u00e1ch h\u00e0ng c\u00f3 th\u1ec3 v\u01b0\u1ee3t xa gi\u00e1 tr\u1ecb kho\u1ea3n ti\u1ec1n ban \u0111\u1ea7u. \u0110\u00e2y l\u00e0 c\u00e1ch nh\u00f3m tin t\u1eb7c t\u1eadn d\u1ee5ng s\u1ee9c m\u1ea1nh c\u1ee7a d\u01b0 lu\u1eadn v\u00e0 hi\u1ec7u \u1ee9ng truy\u1ec1n th\u00f4ng \u0111\u1ec3 nh\u00e2n r\u1ed9ng t\u00e1c \u0111\u1ed9ng, bi\u1ebfn m\u1ed9t v\u1ee5 r\u00f2 r\u1ec9 d\u1eef li\u1ec7u th\u00e0nh m\u1ed9t cu\u1ed9c kh\u1ee7ng ho\u1ea3ng to\u00e0n di\u1ec7n, bu\u1ed9c c\u00e1c doanh nghi\u1ec7p ph\u1ea3i \u0111\u1ed1i m\u1eb7t v\u1edbi c\u00e1c r\u1ee7i ro chi\u1ebfn l\u01b0\u1ee3c ch\u1ee9 kh\u00f4ng ch\u1ec9 l\u00e0 v\u1ea5n \u0111\u1ec1 k\u1ef9 thu\u1eadt.<\/p>\n

B\u00e0i h\u1ecdc v\u1ec1 b\u1ea3o m\u1eadt chu\u1ed7i cung \u1ee9ng d\u1eef li\u1ec7u\u200b<\/h3>\n

V\u1ee5 r\u00f2 r\u1ec9 Salesforce m\u1ed9t l\u1ea7n n\u1eefa ch\u1ee9ng minh r\u1eb1ng b\u1ea3o m\u1eadt doanh nghi\u1ec7p hi\u1ec7n \u0111\u1ea1i kh\u00f4ng c\u00f2n ch\u1ec9 l\u00e0 b\u1ea3o v\u1ec7 h\u1ec7 th\u1ed1ng n\u1ed9i b\u1ed9. Khi doanh nghi\u1ec7p t\u00edch h\u1ee3p s\u00e2u v\u1edbi n\u1ec1n t\u1ea3ng b\u00ean th\u1ee9 ba, m\u1ecdi c\u1ea5u h\u00ecnh, quy\u1ec1n truy c\u1eadp v\u00e0 \u1ee9ng d\u1ee5ng k\u1ebft n\u1ed1i \u0111\u1ec1u tr\u1edf th\u00e0nh b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng ti\u1ec1m t\u00e0ng. M\u1ed9t token OAuth b\u1ecb l\u1ed9, m\u1ed9t \u1ee9ng d\u1ee5ng \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n qu\u00e1 r\u1ed9ng hay m\u1ed9t t\u00e0i kho\u1ea3n d\u1ecbch v\u1ee5 thi\u1ebfu x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 \u0111\u1ec1u c\u00f3 th\u1ec3 m\u1edf toang c\u00e1nh c\u1eeda d\u1eef li\u1ec7u. Theo chuy\u00ean gia WhiteHat, r\u1ee7i ro th\u1ef1c s\u1ef1 kh\u00f4ng n\u1eb1m \u1edf danh s\u00e1ch d\u1eef li\u1ec7u b\u1ecb r\u00f2 r\u1ec9 m\u00e0 n\u1eb1m \u1edf chu\u1ed7i t\u1ea5n c\u00f4ng ti\u1ebfp theo. Nh\u1eefng th\u00f4ng tin t\u01b0\u1edfng ch\u1eebng v\u00f4 h\u1ea1i nh\u01b0 email, ng\u00e0y sinh hay s\u1ed1 \u0111i\u1ec7n tho\u1ea1i \u0111\u1ee7 \u0111\u1ec3 tin t\u1eb7c d\u1ef1ng chi\u1ebfn d\u1ecbch spear-phishing c\u00e1 nh\u00e2n h\u00f3a, nh\u1eafm v\u00e0o nh\u00e2n vi\u00ean ho\u1eb7c kh\u00e1ch h\u00e0ng \u0111\u1ec3 chi\u1ebfm \u0111o\u1ea1t th\u00eam th\u00f4ng tin nh\u1ea1y c\u1ea3m.<\/p>\n

Chuy\u00ean gia WhiteHat c\u0169ng nh\u1ea5n m\u1ea1nh m\u1ed9t y\u1ebfu t\u1ed1 k\u1ef9 thu\u1eadt th\u01b0\u1eddng b\u1ecb b\u1ecf s\u00f3t l\u00e0 thi\u1ebfu gi\u00e1m s\u00e1t h\u00e0nh vi API. Khi d\u1eef li\u1ec7u b\u1ecb l\u1ea1m d\u1ee5ng th\u00f4ng qua token h\u1ee3p l\u1ec7, c\u00e1c c\u1ea3nh b\u00e1o truy\u1ec1n th\u1ed1ng v\u1ec1 \u0111\u0103ng nh\u1eadp b\u1ea5t th\u01b0\u1eddng hay ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i kh\u00f4ng \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t. Ph\u00e1t hi\u1ec7n s\u1edbm v\u00ec th\u1ebf \u0111\u00f2i h\u1ecfi ph\u00e2n t\u00edch h\u00e0nh vi API, \u00e1p d\u1ee5ng c\u00e1c lu\u1eadt ph\u00e1t hi\u1ec7n b\u1ea5t th\u01b0\u1eddng cho t\u1eebng lo\u1ea1i truy v\u1ea5n v\u00e0 gi\u00e1m s\u00e1t li\u00ean t\u1ee5c c\u00e1c lu\u1ed3ng d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m.<\/p>\n

\u0110\u1ec3 ph\u00f2ng ng\u1eeba hi\u1ec7u qu\u1ea3, c\u00e1c doanh nghi\u1ec7p c\u1ea7n \u00e1p d\u1ee5ng t\u01b0 duy Zero Trust m\u1edf r\u1ed9ng ra to\u00e0n b\u1ed9 h\u1ec7 sinh th\u00e1i SaaS.<\/p>\n