{"id":7518,"date":"2023-08-10T14:39:45","date_gmt":"2023-08-10T07:39:45","guid":{"rendered":"https:\/\/vacif.com\/?p=7518"},"modified":"2024-06-24T04:02:15","modified_gmt":"2024-06-24T04:02:15","slug":"6-xu-huong-va-phat-trien-cua-ransomware-cho-nam-2023","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/6-xu-huong-va-phat-trien-cua-ransomware-cho-nam-2023\/","title":{"rendered":"6 XU H\u01af\u1edaNG V\u00c0 PH\u00c1T TRI\u1ec2N C\u1ee6A RANSOMWARE CHO N\u0102M 2023"},"content":{"rendered":"\n

T\u1ed5ng quan :<\/strong><\/p>\n\n\n\n

Trong b\u1ed1i c\u1ea3nh kh\u00f4ng ng\u1eebng ti\u1ebfn xa c\u1ee7a th\u1ebf gi\u1edbi k\u1ef9 thu\u1eadt s\u1ed1, m\u1ed1i \u0111e d\u1ecda t\u1eeb ransomware ti\u1ebfp t\u1ee5c gia t\u0103ng v\u00e0 ti\u1ebfn h\u00f3a m\u1ed9t c\u00e1ch \u0111\u00e1ng lo ng\u1ea1i. N\u0103m 2023 d\u1ef1 ki\u1ebfn \u200b\u200bs\u1ebd ch\u1ee9ng ki\u1ebfn s\u1ef1 xu\u1ea5t hi\u1ec7n c\u1ee7a nhi\u1ec1u xu h\u01b0\u1edbng m\u1edbi v\u00e0 ph\u00e1t tri\u1ec3n \u0111\u00e1ng ch\u00fa \u00fd trong l\u0129nh v\u1ef1c n\u00e0y. Nh\u1eefng t\u00ean t\u1ed9i ph\u1ea1m c\u00f4ng ngh\u1ec7 th\u00f4ng tin ng\u00e0y c\u00e0ng tinh vi v\u00e0 t\u00e1o b\u1ea1o h\u01a1n trong vi\u1ec7c t\u1ea5n c\u00f4ng c\u00e1c t\u1ed5 ch\u1ee9c, c\u00e1 nh\u00e2n v\u00e0 ngay c\u1ea3 h\u1ea1 t\u1ea7ng qu\u1ed1c gia. Trong b\u1ed1i c\u1ea3nh n\u00e0y, ch\u00fang ta s\u1ebd \u0111i\u1ec3m qua 6 xu h\u01b0\u1edbng v\u00e0 ph\u00e1t tri\u1ec3n quan tr\u1ecdng c\u1ee7a ransomware d\u1ef1 ki\u1ebfn \u200b\u200bx\u1ea3y ra trong n\u0103m 2023.<\/p>\n\n\n\n

N\u1ed9i dung b\u00e0i vi\u1ebft :<\/strong><\/p>\n\n\n\n

I. S\u01a1 l\u01b0\u1ee3c ransomware<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Ransomware l\u00e0 m\u1ed9t lo\u1ea1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 t\u1ea5n c\u00f4ng v\u00e0 m\u00e3 h\u00f3a d\u1eef li\u1ec7u tr\u00ean m\u00e1y t\u00ednh ho\u1eb7c h\u1ec7 th\u1ed1ng, sau \u0111\u00f3 y\u00eau c\u1ea7u m\u1ed9t kho\u1ea3n ti\u1ec1n chu\u1ed9c (ransom) t\u1eeb ng\u01b0\u1eddi d\u00f9ng \u0111\u1ec3 gi\u1ea3i m\u00e3 d\u1eef li\u1ec7u b\u1ecb m\u00e3 h\u00f3a. \u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a l\u00e0 n\u1ea1n nh\u00e2n kh\u00f4ng th\u1ec3 truy c\u1eadp d\u1eef li\u1ec7u c\u1ee7a h\u1ecd cho \u0111\u1ebfn khi h\u1ecd tr\u1ea3 ti\u1ec1n chu\u1ed9c cho c\u00e1c t\u1ed9i ph\u1ea1m \u0111i\u1ec1u h\u00e0nh ransomware.<\/p>\n\n\n\n

II. 6 xu h\u01b0\u1edbng v\u00e0 ph\u00e1t tri\u1ec3n c\u1ee7a ransomware cho n\u0103m 2023<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

1. Ransomware nh\u1eafm m\u1ee5c ti\u00eau c\u00e1c ng\u00e0nh c\u00f4ng nghi\u1ec7p ,d\u1ecbch v\u1ee5 \u0111\u1eb7c th\u00f9<\/strong><\/p>\n\n\n\n

Trong qu\u00e1 kh\u1ee9, c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng ransomware \u0111\u00e3 t\u1eadp trung v\u00e0o vi\u1ec7c t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c doanh nghi\u1ec7p trong c\u00e1c ng\u00e0nh ngh\u1ec1 m\u00e0 vi\u1ec7c duy tr\u00ec th\u1eddi gian ho\u1ea1t \u0111\u1ed9ng li\u00ean t\u1ee5c l\u00e0 r\u1ea5t quan tr\u1ecdng. Th\u1eadm ch\u00ed, vi\u1ec7c m\u1ea5t ch\u1ec9 m\u1ed9t gi\u1edd do vi\u1ec7c m\u00e3 h\u00f3a c\u00e1c t\u1ec7p ho\u1eb7c t\u1ea1m ng\u1eebng qu\u00e1 tr\u00ecnh s\u1ea3n xu\u1ea5t c\u00f3 th\u1ec3 g\u00e2y ra nh\u1eefng chi ph\u00ed c\u1ea3n tr\u1edf \u0111\u00e1ng k\u1ec3. Tuy nhi\u00ean, c\u00f3 m\u1ed9t s\u1ed1 nh\u00f3m \u0111\u1ed1i th\u1ee7 \u0111ang \u0111\u1ea1t \u0111\u01b0\u1ee3c th\u00e0nh c\u00f4ng m\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i tri\u1ec3n khai t\u1ea3i tr\u1ecdng \u0111\u1ed9c h\u1ea1i.<\/p>\n\n\n\n

Nh\u00f3m LAPSU$, \u0111\u01b0\u1ee3c cho l\u00e0 \u0111\u00e3 nh\u1eafm v\u00e0o c\u00e1c t\u00ean tu\u1ed5i l\u1edbn nh\u01b0 Microsoft, Nvidia, Uber v\u00e0 Rockstar Games, \u0111\u00e3 n\u1ed5i ti\u1ebfng th\u00f4ng qua vi\u1ec7c t\u1ed1ng ti\u1ec1n n\u1ea1n nh\u00e2n c\u1ee7a h\u1ecd v\u00e0 \u0111\u0103ng t\u1ea3i d\u1eef li\u1ec7u b\u1ecb \u0111\u00e1nh c\u1eafp l\u00ean internet khi h\u1ecd kh\u00f4ng th\u1ec3 \u0111\u00e1p \u1ee9ng \u0111\u01b0\u1ee3c c\u00e1c y\u00eau c\u1ea7u c\u1ee7a nh\u00f3m. Khi c\u00e1c \u0111\u1ed1i th\u1ee7 t\u00ecm th\u1ea5y nhi\u1ec1u c\u00e1ch ti\u1ebfp c\u1eadn kh\u00e1c nhau \u0111\u1ec3 t\u1ea1o l\u1ee3i t\u1eeb m\u1ee5c ti\u00eau c\u1ee7a h\u1ecd, c\u00e1c nh\u00e0 l\u00e3nh \u0111\u1ea1o v\u1ec1 an ninh m\u1ea1ng s\u1ebd c\u1ea7n xem x\u00e9t k\u1ef9 c\u00e0ng t\u1ea5t c\u1ea3 c\u00e1c \u0111i\u1ec3m y\u1ebfu m\u00e0 t\u1ed5 ch\u1ee9c c\u1ee7a h\u1ecd c\u00f3 th\u1ec3 m\u1eafc ph\u1ea3i.<\/p>\n\n\n\n

2. T\u1eadn d\u1ee5ng L\u1ee3i \u00edch t\u1eeb vi\u1ec7c th\u01b0\u01a1ng m\u1ea1i h\u00f3a d\u1eef li\u1ec7u<\/strong><\/p>\n\n\n\n

Trong th\u1eddi \u0111\u1ea1i hi\u1ec7n nay, vi\u1ec7c \u0103n c\u1eafp ho\u1eb7c m\u00e3 h\u00f3a d\u1eef li\u1ec7u \u0111\u1ec3 t\u1ed1ng ti\u1ec1n n\u1ea1n nh\u00e2n \u0111\u00e3 tr\u1edf th\u00e0nh m\u1ed9t th\u1ef1c t\u1ebf th\u00f4ng th\u01b0\u1eddng \u0111\u1ed1i v\u1edbi c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng ransomware. Tuy nhi\u00ean, d\u1eef li\u1ec7u b\u1ecb \u0111\u00e1nh c\u1eafp kh\u00f4ng ch\u1ec9 mang gi\u00e1 tr\u1ecb cho ng\u01b0\u1eddi s\u1edf h\u1eefu h\u1ee3p ph\u00e1p c\u1ee7a n\u00f3. M\u1ed9t m\u00e1y t\u00ednh b\u1ecb x\u00e2m nh\u1eadp c\u00f3 th\u1ec3 cung c\u1ea5p cho k\u1ebb \u0111\u1ecbch m\u1ed9t kho t\u00e0ng c\u00e1c b\u00ed m\u1eadt c\u1ee7a c\u00f4ng ty v\u00e0 t\u00e0i li\u1ec7u nh\u1ea1y c\u1ea3m, s\u1eb5n s\u00e0ng \u0111\u1ec3 b\u00e1n cho ng\u01b0\u1eddi tr\u1ea3 gi\u00e1 cao nh\u1ea5t.<\/p>\n\n\n\n

M\u1eb7c d\u00f9 c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng ransomware ch\u01b0a n\u1ed5i danh v\u1edbi vi\u1ec7c khai th\u00e1c d\u1eef li\u1ec7u m\u1ed9t c\u00e1ch r\u1ed9ng r\u00e3i, nh\u01b0ng \u0111\u00e2y l\u00e0 m\u1ed9t ng\u00e0nh c\u00f4ng nghi\u1ec7p ng\u1ea7m \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng s\u1eb5n s\u00e0ng cho c\u00e1c nh\u00f3m n\u00e0y gia nh\u1eadp, h\u1ecd tr\u1edf th\u00e0nh c\u00e1c m\u00f4i gi\u1edbi cho nh\u1eefng t\u1ed9i ph\u1ea1m m\u1ea1ng kh\u00e1c – t\u1ed1i \u0111a h\u00f3a l\u1ee3i nhu\u1eadn \u0111\u1ed3ng th\u1eddi gi\u1ea3m thi\u1ec3u r\u1ee7i ro ti\u1ebft l\u1ed9 th\u00f4ng tin. Tuy nhi\u00ean, ng\u01b0\u1ee3c l\u1ea1i, ngay c\u1ea3 m\u1ed9t vi\u1ec7c x\u00e2m nh\u1eadp duy nh\u1ea5t c\u0169ng c\u00f3 th\u1ec3 g\u00e2y h\u1eadu qu\u1ea3 nghi\u00eam tr\u1ecdng, khi d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m c\u00f3 th\u1ec3 r\u01a1i v\u00e0o tay nh\u1eefng th\u1ee7 ph\u1ea1m x\u1ea5u, ho\u1eb7c b\u1ecb \u0111\u0103ng t\u1ea3i tr\u1ef1c tuy\u1ebfn t\u1ea1o th\u00eam s\u1ef1 ph\u1ea3n \u1ee9ng ti\u00eau c\u1ef1c \u0111\u1ed1i v\u1edbi t\u1ed5 ch\u1ee9c c\u1ee7a b\u1ea1n.<\/p>\n\n\n\n

3. H\u01b0\u1edbng t\u1edbi c\u00e1c \u0111i\u1ec3m endpoint trong m\u00f4i tr\u01b0\u1eddng \u0111\u00e1m m\u00e2y<\/strong><\/p>\n\n\n\n

Trong b\u1ed1i c\u1ea3nh ng\u00e0y c\u00e0ng nhi\u1ec1u t\u1ed5 ch\u1ee9c chuy\u1ec3n sang s\u1eed d\u1ee5ng c\u00e1c d\u1ecbch v\u1ee5 \u0111\u00e1m m\u00e2y, c\u1ea3nh quan li\u00ean quan \u0111\u1ebfn nh\u1eefng \u0111i\u1ec3m endpoint c\u0169ng \u0111ang thay \u0111\u1ed5i t\u01b0\u01a1ng \u1ee9ng. C\u00e1c \u0111\u1ed9i an ninh m\u1ea1ng \u0111\u00e3 ph\u1ea3i th\u00edch nghi v\u1edbi s\u1ef1 ph\u00e2n t\u00e1n trong m\u00f4i tr\u01b0\u1eddng \u0111\u00e1m m\u00e2y, tuy nhi\u00ean, vi\u1ec7c c\u00e0i \u0111\u1eb7t kh\u00f4ng \u0111\u00fang c\u1ea5u h\u00ecnh v\u00e0 c\u00e1c l\u1ed7 h\u1ed5ng ch\u01b0a \u0111\u01b0\u1ee3c kh\u1eafc ph\u1ee5c v\u1eabn l\u00e0 m\u1ee5c ti\u00eau ch\u00ednh c\u1ee7a nh\u1eefng nh\u00f3m t\u1ea5n c\u00f4ng ransomware, m\u00e0 \u0111ang t\u00ecm ki\u1ebfm c\u01a1 h\u1ed9i x\u00e2m nh\u1eadp.<\/p>\n\n\n\n

M\u1eb7c d\u00f9 t\u00ednh ph\u00e2n t\u00e1n c\u1ee7a c\u00e1c t\u00e0i nguy\u00ean \u0111\u00e1m m\u00e2y t\u1ea1o ra nh\u1eefng th\u00e1ch th\u1ee9c \u0111\u1ed1i v\u1edbi k\u1ebb th\u00f9, h\u1ecd \u0111ang ph\u00e1t tri\u1ec3n c\u00e1c chi\u1ebfn l\u01b0\u1ee3c m\u1edbi \u0111\u1ec3 khai th\u00e1c nh\u1eefng t\u00e0i nguy\u00ean kh\u00f4ng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng. M\u1ed9t nghi\u00ean c\u1ee9u t\u1eeb Nh\u00f3m H\u00e0nh \u0110\u1ed9ng An Ninh M\u1ea1ng c\u1ee7a Google \u0111\u00e3 ch\u1ec9 ra r\u1eb1ng 86% trong s\u1ed1 c\u00e1c v\u1ee5 x\u00e2m nh\u1eadp v\u00e0o m\u00f4i tr\u01b0\u1eddng \u0111\u00e1m m\u00e2y \u0111\u00e3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed. C\u00e1c \u0111\u1ed1i th\u1ee7 \u0111\u00e3 tham gia v\u00e0o ho\u1ea1t \u0111\u1ed9ng “\u0111\u00e0o ti\u1ec1n \u0111i\u1ec7n t\u1eed” c\u00f3 th\u1ec3 d\u1ec5 d\u00e0ng tri\u1ec3n khai ransomware tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng b\u1ecb x\u00e2m nh\u1eadp, ho\u1eb7c b\u00e1n quy\u1ec1n truy c\u1eadp cho nh\u1eefng nh\u00f3m ransomware \u0111\u00e3 c\u00f3 kinh nghi\u1ec7m h\u01a1n.<\/p>\n\n\n\n

V\u00ed d\u1ee5 nh\u01b0 \u0111\u00e3 \u0111\u01b0\u1ee3c ch\u1ee9ng minh b\u1edfi nh\u00f3m TeamTNT, m\u1ed9t \u0111i\u1ec3m k\u1ebft th\u00fac b\u1ecb x\u00e2m nh\u1eadp c\u00f3 th\u1ec3 mang l\u1ea1i cho \u0111\u1ed1i th\u1ee7 quy\u1ec1n truy c\u1eadp v\u00e0o c\u00e1c d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m trong m\u00f4i tr\u01b0\u1eddng \u0111\u00e1m m\u00e2y \u0111\u1ec3 ti\u1ebfn h\u00e0nh c\u00e1c ho\u1ea1t \u0111\u1ed9ng t\u1ed9i ph\u1ea1m \u0111a d\u1ea1ng.<\/p>\n\n\n\n

4. Ch\u1ecdn m\u1ee5c ti\u00eau tr\u00ean c\u00e1c n\u1ec1n t\u1ea3ng kh\u00f4ng ph\u1ed5 bi\u1ebfn<\/strong><\/p>\n\n\n\n

C\u00e1c chuy\u00ean gia v\u1ec1 an ninh m\u1ea1ng th\u1ea5u hi\u1ec3u r\u1eb1ng kh\u00f4ng c\u00f3 m\u1ed1i \u0111e d\u1ecda n\u00e0o qu\u00e1 nh\u1ecf \u0111\u1ec3 b\u1ecf qua, v\u00ec b\u1ea5t k\u1ef3 cu\u1ed9c x\u00e2m nh\u1eadp n\u00e0o c\u0169ng c\u00f3 th\u1ec3 g\u00e2y ra h\u1eadu qu\u1ea3 nghi\u00eam tr\u1ecdng. C\u00e1c n\u1ec1n t\u1ea3ng kh\u00f4ng ph\u1ed5 bi\u1ebfn th\u1ef1c t\u1ebf c\u00f3 th\u1ec3 t\u1ea1o ra nguy c\u01a1 l\u1edbn nh\u1ea5t cho t\u1ed5 ch\u1ee9c c\u1ee7a b\u1ea1n, b\u1edfi v\u00ec c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng ransomware hi\u1ec3u r\u00f5 gi\u00e1 tr\u1ecb c\u1ee7a nh\u1eefng thi\u1ebft b\u1ecb quan tr\u1ecdng \u0111\u1ed1i v\u1edbi doanh nghi\u1ec7p, \u0111\u1eb7c bi\u1ec7t khi kh\u00f4ng c\u00f3 sao l\u01b0u d\u1eef li\u1ec7u s\u1eb5n c\u00f3.<\/p>\n\n\n\n

Hacker kh\u00f4ng ch\u1ec9 s\u1eed d\u1ee5ng nh\u1eefng l\u1ed7 h\u1ed5ng \u0111\u00e3 \u0111\u01b0\u1ee3c ki\u1ec3m nghi\u1ec7m, m\u00e0 c\u00f2n t\u00ecm c\u00e1ch t\u1ea1o ra nh\u1eefng chi\u1ebfn thu\u1eadt m\u1edbi \u0111\u1ec3 khai th\u00e1c. V\u00e0o n\u0103m 2017, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u t\u1ea1i Vi\u1ec7n C\u00f4ng ngh\u1ec7 Georgia \u0111\u00e3 ph\u00e1t tri\u1ec3n m\u1ed9t b\u1eb1ng ch\u1ee9ng th\u1ef1c nghi\u1ec7m \u0111\u1ec3 tri\u1ec3n khai ransomware l\u00ean m\u1ed9t b\u1ed9 \u0111i\u1ec1u khi\u1ec3n logic ch\u01b0\u01a1ng tr\u00ecnh (PLC). Vi\u1ec7c x\u00e2y d\u1ef1ng l\u1ea1i ho\u1eb7c thay th\u1ebf m\u1ed9t thi\u1ebft b\u1ecb nh\u01b0 v\u1eady c\u00f3 th\u1ec3 t\u1ed1n k\u00e9m \u0111\u00e1ng k\u1ec3, v\u00e0 ch\u00ednh \u0111i\u1ec1u n\u00e0y l\u00e0 \u0111i\u1ec3m m\u00e0 c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng ransomware t\u00ecm ki\u1ebfm khi l\u1ef1a ch\u1ecdn m\u1ee5c ti\u00eau.<\/p>\n\n\n\n

Nh\u1eefng l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng nh\u01b0 v\u1eady th\u01b0\u1eddng ph\u1ed5 bi\u1ebfn h\u01a1n nh\u1eefng g\u00ec b\u1ea1n t\u01b0\u1edfng. V\u00e0o n\u0103m 2017, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u c\u1ee7a Trend Micro \u0111\u00e3 ph\u00e1t hi\u1ec7n r\u1eb1ng c\u00e1c m\u00e1y ch\u1ee7 trung t\u00e2m c\u0169 h\u01a1n, c\u1ea7n thi\u1ebft cho nhi\u1ec1u h\u1ec7 th\u1ed1ng quan tr\u1ecdng trong doanh nghi\u1ec7p, c\u00f3 th\u1ec3 b\u1ecb k\u1ebb th\u00f9 b\u1eaft gi\u1eef khi ch\u00fang \u0111\u01b0\u1ee3c k\u1ebft n\u1ed1i v\u1edbi internet. C\u00e1c h\u00e0nh \u0111\u1ed9ng \u0111\u1ed9c h\u1ea1i m\u00e0 c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng ransomware c\u00f3 th\u1ec3 th\u1ef1c hi\u1ec7n bao g\u1ed3m vi\u1ec7c thay \u0111\u1ed5i m\u1eadt kh\u1ea9u qu\u1ea3n tr\u1ecb v\u00e0 l\u00e0m cho vi\u1ec7c kh\u1edfi \u0111\u1ed9ng l\u1ea1i m\u1ea1ng ho\u1eb7c thi\u1ebft b\u1ecb tr\u1edf n\u00ean kh\u00f3 kh\u0103n h\u01a1n.<\/p>\n\n\n\n

5. M\u1edf r\u1ed9ng quy m\u00f4 th\u00f4ng qua c\u01a1 ch\u1ebf t\u1ef1 \u0111\u1ed9ng h\u00f3a<\/strong><\/p>\n\n\n\n

Ng\u00e0y nay, th\u1eadm ch\u00ed hacker c\u0169ng t\u1eadn d\u1ee5ng s\u1ef1 t\u1ef1 \u0111\u1ed9ng h\u00f3a \u0111\u1ec3 ti\u1ebft ki\u1ec7m th\u1eddi gian v\u00e0 gi\u1ea3m thi\u1ec3u chi ph\u00ed. T\u01b0\u01a1ng t\u1ef1 nh\u01b0 c\u00e1c t\u1ed5 ch\u1ee9c chuy\u00ean nghi\u1ec7p, nh\u00f3m t\u1ea5n c\u00f4ng ransomware \u0111ang m\u1edf r\u1ed9ng quy m\u00f4 \u0111\u1ec3 t\u1ed1i \u0111a h\u00f3a doanh thu b\u1eb1ng c\u00e1ch t\u1ef1 \u0111\u1ed9ng h\u00f3a nhi\u1ec7m v\u1ee5 v\u00e0 h\u1ea1n ch\u1ebf l\u1ed7i con ng\u01b0\u1eddi.<\/p>\n\n\n\n

Giai \u0111o\u1ea1n x\u00e2m nh\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng, giai \u0111o\u1ea1n t\u1ed1n k\u00e9m nh\u1ea5t trong cu\u1ed9c t\u1ea5n c\u00f4ng ransomware v\u1ec1 c\u1ea3 th\u1eddi gian v\u00e0 n\u1ed7 l\u1ef1c, hi\u1ec7n nay c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c t\u1ed1i \u01b0u h\u00f3a – t\u1ea1o \u0111i\u1ec1u ki\u1ec7n thu\u1eadn l\u1ee3i cho c\u00e1c nh\u00f3m hacker \u00edt th\u00e0nh vi\u00ean ho\u1eb7c ngu\u1ed3n t\u00e0i nguy\u00ean h\u01a1n. \u0110\u1ed1i v\u1edbi nh\u1eefng nh\u00e0 chuy\u00ean gia v\u1ec1 an ninh m\u1ea1ng, \u0111i\u1ec1u n\u00e0y mang \u00fd ngh\u0129a ph\u1ea3i \u0111\u1ed1i m\u1eb7t v\u1edbi nhi\u1ec1u cu\u1ed9c t\u1ea5n c\u00f4ng h\u01a1n trong l\u00fac h\u1ecd \u0111ang di chuy\u1ec3n ngang qua c\u00e1c m\u00f4i tr\u01b0\u1eddng b\u1ecb \u1ea3nh h\u01b0\u1edfng, \u0111i\u1ec1u m\u00e0 \u0111\u00e1ng l\u1ea1 thay, ch\u00ednh l\u00e0 l\u00fac \u0111e d\u1ecda tr\u1edf n\u00ean t\u1ed1n k\u00e9m nh\u1ea5t.<\/p>\n\n\n\n

C\u00e1c t\u00e1c nh\u00e2n ransomware ho\u1ea1t \u0111\u1ed9ng v\u1edbi s\u1ed1 l\u01b0\u1ee3ng cu\u1ed9c vi ph\u1ea1m cao, nh\u01b0 Cerber ch\u1eb3ng h\u1ea1n, \u0111\u00e3 s\u1eed d\u1ee5ng c\u00f4ng ngh\u1ec7 blockchain \u0111\u1ec3 th\u1ef1c hi\u1ec7n cu\u1ed9c t\u1ea5n c\u00f4ng c\u1ee7a h\u1ecd m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3 h\u01a1n. C\u00e1c nh\u00f3m th\u00e0nh c\u00f4ng s\u1ebd \u0111\u1ed1i \u0111\u1ea7u v\u1edbi nguy c\u01a1 b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng c\u00e1c gi\u1ea3i ph\u00e1p t\u1eadn d\u1ee5ng tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o v\u00e0 h\u1ecdc m\u00e1y \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh v\u00e0 ph\u1ea3n \u1ee9ng nhanh ch\u00f3ng h\u01a1n tr\u01b0\u1edbc c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng.<\/p>\n\n\n\n

6. Khai th\u00e1c l\u1ed7 h\u1ed5ng zero-day<\/strong><\/p>\n\n\n\n

C\u00f3 nhi\u1ec1u c\u00e1ch m\u00e0 nh\u1eefng hacker tinh qu\u00e1i c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e2m nh\u1eadp v\u00e0o c\u00e1c m\u1ea1ng m\u1ee5c ti\u00eau c\u1ee7a h\u1ecd. Ch\u1ee9ng ch\u1ec9 ng\u01b0\u1eddi d\u00f9ng – b\u1ecb \u0111\u00e1nh c\u1eafp, r\u00f2 r\u1ec9, ho\u1eb7c \u0111\u01b0\u1ee3c mua t\u1eeb c\u00e1c th\u1ecb tr\u01b0\u1eddng tr\u1ef1c tuy\u1ebfn – l\u00e0 con \u0111\u01b0\u1eddng tr\u1ef1c ti\u1ebfp v\u00e0 ph\u1ed5 bi\u1ebfn nh\u1ea5t, trong khi ph\u1ea7n m\u1ec1m c\u0169ng d\u1ec5 b\u1ecb khai th\u00e1c th\u00f4ng qua c\u00e1c l\u1ed7 h\u1ed5ng. Tuy nhi\u00ean, \u0111\u1ed1i v\u1edbi nh\u1eefng nh\u00f3m t\u1ea5n c\u00f4ng ransomware chuy\u00ean nghi\u1ec7p \u0111ang ph\u00e1t tri\u1ec3n, vi\u1ec7c t\u1eadn d\u1ee5ng c\u00e1c l\u1ed7 h\u1ed5ng zero-day kh\u00f4ng ph\u1ea3i l\u00e0 \u0111i\u1ec1u kh\u00f4ng kh\u1ea3 thi.<\/p>\n\n\n\n

V\u1edbi s\u1ef1 gi\u00fap \u0111\u1ee1 c\u1ee7a m\u1ed9t nh\u00e0 ph\u00e1t tri\u1ec3n khai th\u00e1c \u0111\u01b0\u1ee3c thu\u00ea \u0111\u1ec3 t\u00ecm l\u1ed7 h\u1ed5ng cho h\u1ecd, c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng ransomware c\u00f3 th\u1ec3 khai th\u00e1c c\u00f9ng m\u1ed9t l\u1ed7 h\u1ed5ng ch\u01b0a \u0111\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn nhi\u1ec1u l\u1ea7n tr\u01b0\u1edbc khi \u0111i\u1ec3m y\u1ebfu \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n v\u00e0 v\u00e1. Ch\u01b0a c\u00f3 nh\u00f3m n\u00e0o \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh s\u1eed d\u1ee5ng ph\u01b0\u01a1ng ph\u00e1p n\u00e0y cho \u0111\u1ebfn nay, nh\u01b0ng \u0111i\u1ec1u n\u00e0y kh\u00f4ng ph\u1ea3i l\u00e0 \u0111i\u1ec1u kh\u00f4ng kh\u1ea3 thi, \u0111\u1eb7c bi\u1ec7t khi xem x\u00e9t gi\u00e1 tr\u1ecb m\u00e0 m\u1ed9t l\u1ed7 h\u1ed5ng khai th\u00e1c nh\u01b0 v\u1eady c\u00f3 th\u1ec3 mang l\u1ea1i cho m\u1ed9t nh\u00f3m t\u00e1c nh\u00e2n \u0111\u1ed9c h\u1ea1i. Th\u1eadm ch\u00ed nh\u00f3m t\u1ea5n c\u00f4ng ransomware LockBit c\u00f2n \u0111\u00e3 \u0111\u01b0a ra m\u1ed9t ph\u1ea7n th\u01b0\u1edfng tr\u1ecb gi\u00e1 50,000 \u0111\u00f4 la \u0111\u1ec3 t\u00ecm ra c\u00e1c l\u1ed7 h\u1ed5ng trong thu\u1eadt to\u00e1n m\u00e3 h\u00f3a c\u1ee7a h\u1ecd.<\/p>\n\n\n\n

III. Bi\u1ec7n ph\u00e1p s\u01a1 l\u01b0\u1ee3c ph\u00f2ng ch\u1ed1ng rasomware 2023<\/strong><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n
    \n
  • C\u1eadp Nh\u1eadt H\u1ec7 Th\u1ed1ng v\u00e0 Ph\u1ea7n M\u1ec1m:<\/strong> \u0110\u1ea3m b\u1ea3o r\u1eb1ng t\u1ea5t c\u1ea3 h\u1ec7 th\u1ed1ng v\u00e0 ph\u1ea7n m\u1ec1m trong t\u1ed5 ch\u1ee9c c\u1ee7a b\u1ea1n \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt \u0111\u1ea7y \u0111\u1ee7, bao g\u1ed3m c\u1ea3 c\u00e1c b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt m\u1edbi nh\u1ea5t. C\u00e1c l\u1ed7 h\u1ed5ng trong h\u1ec7 th\u1ed1ng l\u00e0 m\u1ee5c ti\u00eau ch\u00ednh cho ransomware, v\u00e0 c\u1eadp nh\u1eadt th\u01b0\u1eddng c\u00f3 ch\u1ee9a c\u00e1c s\u1eeda l\u1ed7i cho c\u00e1c l\u1ed7 h\u1ed5ng n\u00e0y.<\/li>\n\n\n\n
  • Sao L\u01b0u Th\u01b0\u1eddng Xuy\u00ean:<\/strong> Th\u1ef1c hi\u1ec7n sao l\u01b0u \u0111\u1ecbnh k\u1ef3 v\u00e0 l\u01b0u tr\u1eef sao l\u01b0u ngo\u1ea1i tuy\u1ebfn \u0111\u1ec3 tr\u00e1nh m\u1ea5t d\u1eef li\u1ec7u trong tr\u01b0\u1eddng h\u1ee3p b\u1ecb t\u1ea5n c\u00f4ng ransomware. Sao l\u01b0u l\u00e0 m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3 \u0111\u1ec3 kh\u00f4i ph\u1ee5c d\u1eef li\u1ec7u m\u00e0 kh\u00f4ng ph\u1ea3i tr\u1ea3 ti\u1ec1n chu\u1ed9c.<\/li>\n\n\n\n
  • Ph\u00e2n Quy\u1ec1n:<\/strong> H\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng ch\u1ec9 \u0111\u1ebfn nh\u1eefng th\u00f4ng tin v\u00e0 t\u00e0i nguy\u00ean c\u1ea7n thi\u1ebft. \u0110i\u1ec1u n\u00e0y gi\u1ea3m nguy c\u01a1 lan truy\u1ec1n c\u1ee7a ransomware trong tr\u01b0\u1eddng h\u1ee3p m\u1ed9t t\u00e0i kho\u1ea3n b\u1ecb nhi\u1ec5m.<\/li>\n\n\n\n
  • Chuy\u00ean M\u00f4n H\u00f3a:<\/strong> S\u1eed d\u1ee5ng c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt chuy\u00ean m\u00f4n, ch\u1eb3ng h\u1ea1n nh\u01b0 ph\u1ea7n m\u1ec1m ch\u1ed1ng malware v\u00e0 firewall, \u0111\u1ec3 ng\u0103n ch\u1eb7n s\u1ef1 x\u00e2m nh\u1eadp v\u00e0 lan truy\u1ec1n c\u1ee7a ransomware.<\/li>\n\n\n\n
  • Kh\u1ea3o S\u00e1t Email \u0110\u1ed9c H\u1ea1i:<\/strong> Ransomware th\u01b0\u1eddng \u0111\u01b0\u1ee3c ph\u00e2n ph\u1ed1i qua email \u0111\u1ed9c h\u1ea1i ho\u1eb7c c\u00e1c t\u1ec7p \u0111\u00ednh k\u00e8m. \u0110i\u1ec1u n\u00e0y \u0111\u00f2i h\u1ecfi vi\u1ec7c t\u0103ng c\u01b0\u1eddng kh\u1ea3o s\u00e1t email \u0111\u1ec3 ph\u00e1t hi\u1ec7n c\u00e1c t\u1ea5n c\u00f4ng d\u1ef1a tr\u00ean email.<\/li>\n\n\n\n
  • \u0110\u00e0o T\u1ea1o Nh\u00e2n Vi\u00ean:<\/strong> Gi\u00e1o d\u1ee5c nh\u00e2n vi\u00ean v\u1ec1 c\u00e1ch nh\u1eadn bi\u1ebft v\u00e0 tr\u00e1nh c\u00e1c t\u00ecnh hu\u1ed1ng r\u1ee7i ro nh\u01b0 m\u1edf c\u00e1c t\u1ec7p \u0111\u00ednh k\u00e8m ho\u1eb7c nh\u1ea5p v\u00e0o c\u00e1c li\u00ean k\u1ebft \u0111\u00e1ng ng\u1edd.<\/li>\n\n\n\n
  • Ph\u00f2ng Th\u1ee7 24\/7:<\/strong> Tri\u1ec3n khai gi\u1ea3i ph\u00e1p theo d\u00f5i v\u00e0 ph\u00e1t hi\u1ec7n s\u1ef1 t\u1ea5n c\u00f4ng li\u00ean t\u1ee5c \u0111\u1ec3 nhanh ch\u00f3ng ph\u00e1t hi\u1ec7n v\u00e0 \u1ee9ng ph\u00f3 v\u1edbi ransomware.<\/li>\n\n\n\n
  • Thi\u1ebft L\u1eadp K\u1ebf Ho\u1ea1ch Ph\u1ee5c H\u1ed3i:<\/strong> \u0110\u1ea3m b\u1ea3o r\u1eb1ng b\u1ea1n c\u00f3 k\u1ebf ho\u1ea1ch ph\u1ee5c h\u1ed3i d\u1eef li\u1ec7u sau m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng ransomware, bao g\u1ed3m c\u1ea3 vi\u1ec7c \u0111\u00e1nh gi\u00e1 kh\u1ea3 n\u0103ng t\u00e1i t\u1ea1o d\u1eef li\u1ec7u t\u1eeb sao l\u01b0u.<\/li>\n\n\n\n
  • S\u1eed D\u1ee5ng C\u00f4ng Ngh\u1ec7 Hi\u1ec7n \u0110\u1ea1i:<\/strong> Thi\u1ebft b\u1ecb firewall , ph\u1ea7n m\u1ec1m Sophos endpoint ,kaspersky,AVG.<\/strong><\/li>\n\n\n\n
  • Li\u00ean T\u1ee5c C\u1eadp Nh\u1eadt Ki\u1ebfn Th\u1ee9c:<\/strong> Theo d\u00f5i c\u00e1c xu h\u01b0\u1edbng m\u1edbi v\u1ec1 ransomware v\u00e0 ph\u00e1t tri\u1ec3n c\u00e1c bi\u1ec7n ph\u00e1p ph\u00f2ng ch\u1ed1ng ph\u00f9 h\u1ee3p \u0111\u1ec3 b\u1ea3o v\u1ec7 kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda ti\u1ec1m \u1ea9n.<\/li>\n<\/ul>\n\n\n\n

    <\/p>\n","protected":false},"excerpt":{"rendered":"

    T\u1ed5ng quan : Trong b\u1ed1i c\u1ea3nh kh\u00f4ng ng\u1eebng ti\u1ebfn xa c\u1ee7a th\u1ebf gi\u1edbi k\u1ef9 thu\u1eadt s\u1ed1, m\u1ed1i \u0111e d\u1ecda t\u1eeb ransomware ti\u1ebfp t\u1ee5c gia t\u0103ng v\u00e0 ti\u1ebfn h\u00f3a m\u1ed9t c\u00e1ch \u0111\u00e1ng lo ng\u1ea1i. N\u0103m 2023 d\u1ef1 ki\u1ebfn \u200b\u200bs\u1ebd ch\u1ee9ng ki\u1ebfn s\u1ef1 xu\u1ea5t hi\u1ec7n c\u1ee7a nhi\u1ec1u xu h\u01b0\u1edbng m\u1edbi v\u00e0 ph\u00e1t tri\u1ec3n \u0111\u00e1ng ch\u00fa \u00fd trong […]<\/p>\n","protected":false},"author":11,"featured_media":7234,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[18,80,17],"tags":[92,241,97],"class_list":["post-7518","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-endpoint","category-huong-dan-tai-lieu","category-bao-mat","tag-ransomware","tag-rasomware-2023","tag-sophos-endpoint","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/7518","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=7518"}],"version-history":[{"count":1,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/7518\/revisions"}],"predecessor-version":[{"id":10148,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/7518\/revisions\/10148"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/7234"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=7518"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=7518"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=7518"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}