{"id":34225,"date":"2024-06-20T09:42:25","date_gmt":"2024-06-20T02:42:25","guid":{"rendered":"https:\/\/ttud.com.vn\/?p=34225"},"modified":"2024-11-01T14:02:37","modified_gmt":"2024-11-01T07:02:37","slug":"du-doan-xu-huong-tan-cong-mang-nam-2024","status":"publish","type":"post","link":"https:\/\/casta.ttud.com.vn\/index.php\/du-doan-xu-huong-tan-cong-mang-nam-2024\/","title":{"rendered":"D\u1ef1 \u0111o\u00e1n xu h\u01b0\u1edbng t\u1ea5n c\u00f4ng m\u1ea1ng n\u0103m 2024"},"content":{"rendered":"\n

T\u1eeb nh\u1eefng cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng, nh\u1eefng th\u00f3i quen x\u1ea5u g\u00e2y l\u1ed9 l\u1ecdt d\u1eef li\u1ec7u li\u1ec7u trong n\u0103m 2023 s\u1ebd l\u00e0 b\u00e0i h\u1ecdc, \u0111\u1ec3 r\u00fat ra kinh nghi\u1ec7m v\u00e0o n\u0103m 2024.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Theo ph\u00e2n t\u00edch d\u1eef li\u1ec7u t\u1ed5ng h\u1ee3p d\u1eef li\u1ec7u t\u1eeb h\u1ec7 th\u1ed1ng Viettel Threat Intelligence – Gi\u1ea3i ph\u00e1p c\u1eadp nh\u1eadt tri th\u1ee9c an ninh m\u1ea1ng cho doanh nghi\u1ec7p, trong n\u0103m 2023, ph\u00e1t hi\u1ec7n m\u1ed9t s\u1ed1 l\u01b0\u1ee3ng l\u1edbn c\u00e1c tr\u01b0\u1eddng h\u1ee3p l\u1ed9 l\u1ecdt d\u1eef li\u1ec7u c\u1ee7a c\u00e1c c\u00e1 nh\u00e2n, t\u1ed5 ch\u1ee9c v\u00e0 doanh nghi\u1ec7p v\u1edbi m\u1ee9c \u0111\u1ed9 \u1ea3nh h\u01b0\u1edfng nghi\u00eam tr\u1ecdng. C\u1ee5 th\u1ec3, c\u00f3 t\u1edbi 105 tri\u1ec7u t\u00e0i kho\u1ea3n c\u00e1 nh\u00e2n b\u1ecb \u0111\u00e1nh c\u1eafp v\u00e0 40 v\u1ee5 l\u1ed9 l\u1ecdt d\u1eef li\u1ec7u \u0111\u00e1ng ch\u00fa \u00fd.<\/p>\n\n\n\n

Qua ph\u00e2n t\u00edch, C\u00f4ng ty An ninh m\u1ea1ng Viettel (Viettel Cyber Security- VCS) kh\u1eb3ng \u0111\u1ecbnh, vi\u1ec7c l\u1ed9 l\u1ecdt d\u1eef li\u1ec7u th\u1eddi gian qua ch\u1ee7 y\u1ebfu do 3 nguy\u00ean nh\u00e2n ch\u00ednh.<\/p>\n\n\n\n

\u0110\u1ea7u ti\u00ean, \u0111\u00f3 l\u00e0 do l\u1ed9 l\u1ecdt t\u00e0i kho\u1ea3n \u0111\u0103ng nh\u1eadp v\u00e0o c\u00e1c h\u1ec7 th\u1ed1ng quan tr\u1ecdng v\u00e0 nh\u1ea1y c\u1ea3m nh\u01b0 h\u1ec7 th\u1ed1ng email, h\u1ec7 th\u1ed1ng qu\u1ea3n l\u00fd x\u00e1c th\u1ef1c t\u1eadp trung (Single Sign On – SSO) ho\u1eb7c h\u1ec7 th\u1ed1ng VPN d\u00f9ng \u0111\u1ec3 truy c\u1eadp n\u1ed9i b\u1ed9. T\u1eeb \u0111\u00f3, tin t\u1eb7c x\u00e2m nh\u1eadp tr\u00e1i ph\u00e9p v\u00e0 h\u1ec7 th\u1ed1ng, tr\u00edch xu\u1ea5t c\u00e1c d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m nh\u01b0 th\u00f4ng tin kh\u00e1ch h\u00e0ng, th\u00f4ng tin h\u1ec7 th\u1ed1ng v\u00e0 c\u01a1 s\u1edf d\u1eef li\u1ec7u nh\u1eb1m rao b\u00e1n tr\u00ean c\u00e1c di\u1ec5n \u0111\u00e0n ch\u1ee3 \u0111en.<\/p>\n\n\n\n

Nguy\u00ean nh\u00e2n ti\u1ebfp theo \u0111\u1ebfn t\u1eeb vi\u1ec7c m\u1ed9t s\u1ed1 t\u1ed5 ch\u1ee9c, doanh nghi\u1ec7p b\u1ecb t\u1ea5n c\u00f4ng, g\u00e2y m\u1ea5t an to\u00e0n th\u00f4ng tin t\u1eeb \u0111\u00f3 d\u1eef li\u1ec7u b\u1ecb \u0111\u00e1nh c\u1eafp v\u00e0 b\u1ecb rao b\u00e1n tr\u00ean kh\u00f4ng gian m\u1ea1ng. Theo nh\u01b0 ghi nh\u1eadn c\u1ee7a Viettel Threat Intelligence, 48% tr\u01b0\u1eddng h\u1ee3p l\u00e0 do k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng c\u00e1c t\u00e0i kho\u1ea3n n\u1ed9i b\u1ed9 b\u1ecb \u0111\u00e1nh c\u1eafp \u0111\u1ec3 tr\u1ef1c hi\u1ec7n tr\u00edch xu\u1ea5t d\u1eef li\u1ec7u v\u00e0 rao b\u00e1n (21 v\u1ee5), 15% l\u00e0 c\u00e1c tr\u01b0\u1eddng h\u1ee3p tin t\u1eb7c t\u1ea5n c\u00f4ng v\u00e0o h\u1ec7 th\u1ed1ng, tr\u00edch xu\u1ea5t d\u1eef li\u1ec7u v\u00e0 rao b\u00e1n (7 v\u1ee5) v\u00e0 37% c\u00f2n l\u1ea1i l\u00e0 c\u00e1c tr\u01b0\u1eddng h\u1ee3p l\u1ed9 l\u1ecdt ch\u01b0a x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c nguy\u00ean nh\u00e2n c\u1ee5 th\u1ec3 (16 v\u1ee5).\"\"Cu\u1ed1i c\u00f9ng l\u00e0 l\u1ed9 l\u1ecdt d\u1eef li\u1ec7u do v\u00f4 t\u00ecnh t\u1ea3i l\u00ean c\u00e1c n\u1ec1n t\u1ea3ng c\u00f4ng khai. Theo \u0111\u00f3, c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n ph\u1ea7n m\u1ec1m (developer) chia s\u1ebb m\u00e3 ngu\u1ed3n c\u1ee7a c\u00e1c d\u1ef1 \u00e1n l\u00ean c\u00e1c n\u1ec1n t\u1ea3ng nh\u01b0 Github \u0111\u1ec3 d\u1ec5 d\u00e0ng qu\u1ea3n l\u00fd. Tuy nhi\u00ean, trong m\u00e3 ngu\u1ed3n c\u1ee7a d\u1ef1 \u00e1n khi \u0111\u1ea9y l\u00ean c\u00f4ng khai c\u00f3 ch\u1ee9a c\u00e1c tr\u01b0\u1eddng th\u00f4ng tin nh\u1ea1y c\u1ea3m nh\u01b0 \u0111\u1ecba ch\u1ec9 IP n\u1ed9i b\u1ed9, th\u00f4ng tin \u0111\u0103ng nh\u1eadp ho\u1eb7c c\u00e1c m\u00e3 b\u00ed m\u1eadt. \u0110i\u1ec1u n\u00e0y d\u1eabn t\u1edbi vi\u1ec7c tin t\u1eb7c c\u00f3 th\u1ec3 \u0111\u1ecdc hi\u1ec3u m\u00e3 ngu\u1ed3n n\u1ed9i b\u1ed9, t\u1eeb \u0111\u00f3 c\u00f3 th\u1ef1c hi\u1ec7n khai th\u00e1c v\u00e0 t\u1ea5n c\u00f4ng n\u1ebfu ph\u00e1t hi\u1ec7n l\u1ed7 h\u1ed5ng (n\u1ebfu c\u00f3) ho\u1eb7c l\u1ea5y m\u00e3 ngu\u1ed3n v\u1ec1 v\u00e0 th\u1ef1c hi\u1ec7n x\u00e2y d\u1ef1ng trang web l\u1eeba \u0111\u1ea3o nh\u1eb1m m\u1ee5c \u0111\u00edch t\u1ea5n c\u00f4ng.<\/p>\n\n\n\n

\u0110\u00f3 l\u00e0 t\u1ea1i Vi\u1ec7t Nam, c\u00f2n tr\u00ean to\u00e0n th\u1ebf gi\u1edbi C\u00f4ng ty Google c\u0169ng \u0111\u00e3 ti\u1ebft l\u1ed9 m\u1ed9t s\u1ed1 l\u1ed7i b\u1ea3o m\u1eadt ph\u1ed5 bi\u1ebfn ng\u01b0\u1eddi d\u00f9ng th\u01b0\u1eddng m\u1eafc ph\u1ea3i g\u00e2y l\u1ed9 l\u1ecdt d\u1eef li\u1ec7u nh\u01b0: s\u1eed d\u1ee5ng m\u1ed9t m\u1eadt kh\u1ea9u cho nhi\u1ec1u t\u00e0i kho\u1ea3n; b\u1ecf qua vi\u1ec7c c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m; kh\u00f4ng x\u00e1c minh 2 b\u01b0\u1edbc khi thi\u1ebft l\u1eadp h\u1ed3 s\u01a1; kh\u00f4ng thi\u1ebft l\u1eadp kh\u00f3a m\u00e0n h\u00ecnh; nh\u1ea5p v\u00e0o nh\u1eefng \u0111\u01b0\u1eddng link \u0111\u1ed9c h\u1ea1i; kh\u00f4ng c\u00f3 k\u1ebf ho\u1ea1ch kh\u00f4i ph\u1ee5c m\u1eadt kh\u1ea9u \u1edf c\u00e1c t\u00e0i kho\u1ea3n quan tr\u1ecdng.<\/p>\n\n\n\n

T\u1eeb nh\u1eefng d\u1eef li\u1ec7u tr\u00ean VCS d\u1ef1 \u0111o\u00e1n xu h\u01b0\u1edbng t\u1ea5n c\u00f4ng m\u1ea1ng n\u0103m 2024, tin t\u1eb7c s\u1ebd t\u1eadp trung khai th\u00e1c l\u1ed7 h\u1ed5ng t\u1eeb nh\u1eefng ph\u1ea7n m\u1ec1m ph\u1ed5 bi\u1ebfn\/m\u00e3 ngu\u1ed3n m\u1edf hay c\u00e1c thi\u1ebft b\u1ecb IoT, \u0111i\u1ec7n to\u00e1n \u0111\u00e1m m\u00e2y\u2026<\/p>\n\n\n\n

Ngo\u00e0i ra, vi\u1ec7c rao b\u00e1n m\u00e3 khai th\u00e1c c\u1ee7a c\u00e1c l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng c\u0169ng s\u1ebd di\u1ec5n ra nhi\u1ec1u h\u01a1n khi\u1ebfn vi\u1ec7c c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng c\u00e1c l\u1ed7 h\u1ed5ng zero-day, one-day \u0111\u1ec3 l\u00e0m b\u00e0n \u0111\u1ea1p x\u00e2m ph\u1ea1m h\u1ec7 th\u1ed1ng s\u1ebd tr\u1edf n\u00ean ph\u1ed5 bi\u1ebfn trong n\u0103m 2024. \u0110i k\u00e8m v\u1edbi \u0111\u00f3, xu h\u01b0\u1edbng t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng (supply chain attack) c\u0169ng \u0111\u01b0\u1ee3c d\u1ef1 \u0111o\u00e1n s\u1ebd t\u0103ng trong n\u0103m sau.<\/p>\n\n\n\n

\u0110\u1ed3ng th\u1eddi, c\u00e1c xu h\u01b0\u1edbng t\u1ea5n c\u00f4ng th\u00f4ng qua thi\u1ebft b\u1ecb th\u00f4ng minh, ph\u1ea7n m\u1ec1m gi\u1ea3 m\u1ea1o, email, tin nh\u1eafn r\u00e1c c\u0169ng s\u1ebd c\u00f3 s\u1ef1 gia t\u0103ng trong b\u1ed1i c\u1ea3nh suy tho\u00e1i kinh t\u1ebf v\u1eabn ti\u1ebfp di\u1ec5n. C\u00e1c t\u1ed5 ch\u1ee9c thu\u1ed9c l\u0129nh v\u1ef1c t\u00e0i ch\u00ednh, ng\u00e2n h\u00e0ng, c\u01a1 quan ch\u1ee9c n\u0103ng v\u00e0 h\u1ea1 t\u1ea7ng tr\u1ecdng y\u1ebfu v\u1eabn ti\u1ebfp t\u1ee5c l\u00e0 c\u00e1c m\u1ee5c ti\u00eau ch\u00ednh.<\/p>\n\n\n\n

Qua \u0111\u00f3, VCS \u0111\u00e3 \u0111\u01b0a ra c\u00e1c khuy\u1ebfn ngh\u1ecb \u0111\u1ed1i v\u1edbi c\u00e1c doanh nghi\u1ec7p t\u1ed5 ch\u1ee9c, do nguy c\u01a1 ng\u00e0y c\u00e0ng nhi\u1ec1u v\u1edbi m\u1ee9c \u0111\u1ed9 nghi\u00eam tr\u1ecdng t\u0103ng cao n\u00ean c\u1ea7n x\u00e2y d\u1ef1ng m\u1ed9t quy tr\u00ecnh ho\u00e0n thi\u1ec7n: Sao l\u01b0u v\u00e0 \u0111\u1ea3m b\u1ea3o kh\u1ea3 n\u0103ng kh\u00f4i ph\u1ee5c \u0111\u1ea7y \u0111\u1ee7 n\u1ebfu c\u00f3 s\u1ef1 c\u1ed1; X\u00e2y d\u1ef1ng, \u0111\u1ea3m b\u1ea3o gi\u00e1m s\u00e1t, ph\u1ea3n \u1ee9ng v\u1edbi c\u00e1c nguy c\u01a1 k\u1ecbp th\u1eddi v\u00e0 thi\u1ebft l\u1eadp k\u1ecbch b\u1ea3n \u1ee9ng ph\u00f3 v\u1edbi nh\u1eefng nguy c\u01a1 c\u00f3 th\u1ec3 x\u1ea3y \u0111\u1ebfn; Ch\u1ee7 \u0111\u1ed9ng s\u0103n t\u00ecm nguy c\u01a1 trong h\u1ec7 th\u1ed1ng c\u1ee7a t\u1ed5 ch\u1ee9c; Ph\u00e2n lo\u1ea1i, qu\u1ea3n l\u00fd, sao ch\u00e9p, l\u01b0u tr\u1eef v\u00e0 chia s\u1ebb d\u1eef li\u1ec7u r\u00f5 r\u00e0ng, \u0111\u1ed3ng b\u1ed9 v\u00e0 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng xuy\u00ean su\u1ed1t trong t\u1ed5 ch\u1ee9c; Th\u1ed1ng nh\u1ea5t c\u00e1c quan \u0111i\u1ec3m, ch\u00ednh s\u00e1ch v\u1ec1 b\u1ea3o m\u1eadt th\u00f4ng tin v\u1edbi c\u00e1c \u0111\u1ed1i t\u00e1c thu\u00ea ngo\u00e0i ph\u00e1t tri\u1ec3n ph\u1ea7n m\u1ec1m.<\/p>\n\n\n\n

Nh\u00ecn chung, v\u1edbi c\u00e1c nguy\u00ean nh\u00e2n v\u00e0 xu h\u01b0\u1edbng t\u1ea5n c\u00f4ng n\u00e0y, Vi\u1ec7t Nam v\u00e0 to\u00e0n th\u1ebf gi\u1edbi \u0111\u1ec1u \u0111\u1ed1i m\u1eb7t v\u1edbi th\u00e1ch th\u1ee9c l\u1edbn trong vi\u1ec7c b\u1ea3o v\u1ec7 th\u00f4ng tin v\u00e0 d\u1eef li\u1ec7u c\u00e1 nh\u00e2n, \u0111\u1eb7c bi\u1ec7t trong b\u1ed1i c\u1ea3nh m\u00f4i tr\u01b0\u1eddng an ninh m\u1ea1ng ng\u00e0y c\u00e0ng ph\u1ee9c t\u1ea1p.<\/p>\n\n\n\n

Duy Trinh<\/strong><\/p>\n\n\n\n

https:\/\/vietq.vn\/nguyen-nhan-gay-lo-lot-du-lieu-ca-nhan-vao-nam-2023-xu-huong-tan-cong-mang-nam-2024-d218831.html<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

T\u1eeb nh\u1eefng cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng, nh\u1eefng th\u00f3i quen x\u1ea5u g\u00e2y l\u1ed9 l\u1ecdt d\u1eef li\u1ec7u li\u1ec7u trong n\u0103m 2023 s\u1ebd l\u00e0 b\u00e0i h\u1ecdc, \u0111\u1ec3 r\u00fat ra kinh nghi\u1ec7m v\u00e0o n\u0103m 2024. Theo ph\u00e2n t\u00edch d\u1eef li\u1ec7u t\u1ed5ng h\u1ee3p d\u1eef li\u1ec7u t\u1eeb h\u1ec7 th\u1ed1ng Viettel Threat Intelligence – Gi\u1ea3i ph\u00e1p c\u1eadp nh\u1eadt tri th\u1ee9c an ninh […]<\/p>\n","protected":false},"author":26,"featured_media":34226,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47],"tags":[],"class_list":["post-34225","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc"],"_links":{"self":[{"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/posts\/34225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/users\/26"}],"replies":[{"embeddable":true,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/comments?post=34225"}],"version-history":[{"count":1,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/posts\/34225\/revisions"}],"predecessor-version":[{"id":34227,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/posts\/34225\/revisions\/34227"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/media\/34226"}],"wp:attachment":[{"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/media?parent=34225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/categories?post=34225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/casta.ttud.com.vn\/index.php\/wp-json\/wp\/v2\/tags?post=34225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}