{"id":2859,"date":"2023-09-30T01:01:47","date_gmt":"2023-09-29T18:01:47","guid":{"rendered":"https:\/\/dangngocduy.vn\/?p=2859"},"modified":"2023-09-30T03:17:07","modified_gmt":"2023-09-29T20:17:07","slug":"trick-to-take-over-accounts-by-sending-quotation-files","status":"publish","type":"post","link":"https:\/\/dangngocduy.vn\/vi\/trick-to-take-over-accounts-by-sending-quotation-files\/","title":{"rendered":"Th\u1ee7 thu\u1eadt chi\u1ebfm \u0111o\u1ea1t t\u00e0i kho\u1ea3n b\u1eb1ng c\u00e1ch g\u1eedi file \u201cb\u00e1o gi\u00e1\u201d"},"content":{"rendered":"<article class=\"fck_detail\">\n<p class=\"Normal\">Cu\u1ed1i th\u00e1ng 8, anh Nh\u00e2n, ch\u1ee7 m\u1ed9t c\u1eeda h\u00e0ng \u1edf H\u00e0 N\u1ed9i nh\u1eadn \u0111\u01b0\u1ee3c tin nh\u1eafn h\u1ecfi th\u0103m d\u1ecbch v\u1ee5 t\u1eeb m\u1ed9t kh\u00e1ch h\u00e0ng l\u1ea1. Ng\u01b0\u1eddi n\u00e0y ch\u01b0a bao gi\u1edd mua b\u1ea5t c\u1ee9 th\u1ee9 g\u00ec tr\u01b0\u1edbc \u0111\u00e2y. Sau v\u00e0i l\u1eddi ch\u00e0o h\u1ecfi, anh \u0111\u1ec1 ngh\u1ecb h\u1ee3p t\u00e1c v\u00e0 g\u1eedi cho anh m\u1ed9t file ch\u1ee9a nh\u1eefng m\u1eb7t h\u00e0ng c\u1ea7n b\u00e1o gi\u00e1. \u201cCh\u1ec9 l\u00e0 danh s\u00e1ch th\u00f4i, nh\u01b0ng kh\u00f4ng hi\u1ec3u sao kh\u00e1ch h\u00e0ng kh\u00f4ng g\u1eedi tr\u1ef1c ti\u1ebfp m\u00e0 ph\u1ea3i n\u00e9n b\u1eb1ng file rar\u201d, \u00f4ng Nh\u00e2n n\u00f3i.<\/p>\n<p class=\"Normal\">Th\u1ea5y l\u1ea1 nh\u01b0ng ngh\u0129 \u0111\u00f3 l\u00e0 c\u00e1ch l\u00e0m vi\u1ec7c c\u1ee7a h\u1ecd, anh gi\u1ea3i n\u00e9n v\u00e0 nh\u1eadn \u0111\u01b0\u1ee3c m\u1ed9t file c\u00f3 bi\u1ec3u t\u01b0\u1ee3ng Excel. Tuy nhi\u00ean, khi nh\u00ecn k\u1ef9 th\u00ec \u0111\u00f3 l\u00e0 m\u1ed9t file c\u00f3 \u0111u\u00f4i .exe, lo\u1ea1i file d\u00f9ng \u0111\u1ec3 ch\u1ea1y ch\u01b0\u01a1ng tr\u00ecnh n\u00ean anh kh\u00f4ng m\u1edf. Bi\u1ebft kh\u00f4ng l\u1eeba \u0111\u01b0\u1ee3c Nh\u00e2n, ng\u01b0\u1eddi kia \u0111\u00e3 kh\u00f3a t\u00e0i kho\u1ea3n c\u1ee7a anh.<\/p>\n<figure class=\"tplCaption\" data-size=\"true\">\n<div class=\"fig-picture\" style=\"padding-bottom: 59.982862039417%; position: relative;\"><picture><source data-srcset=\"https:\/\/i1-sohoa.vnecdn.net\/2023\/09\/20\/380764008-720044826616151-6716-6246-4960-1695205973.jpg?w=680&amp;h=0&amp;q=100&amp;dpr=1&amp;fit=crop&amp;s=EfSN4X26aM59dKUhl1Lmig 1x, https:\/\/i1-sohoa.vnecdn.net\/2023\/09\/20\/380764008-720044826616151-6716-6246-4960-1695205973.jpg?w=1020&amp;h=0&amp;q=100&amp;dpr=1&amp;fit=crop&amp;s=Vg37ucLiIaEzIgipX6OehQ 1.5x, https:\/\/i1-sohoa.vnecdn.net\/2023\/09\/20\/380764008-720044826616151-6716-6246-4960-1695205973.jpg?w=680&amp;h=0&amp;q=100&amp;dpr=2&amp;fit=crop&amp;s=LMQOsRpG3HSzO6QDJW9-Dg 2x\" \/><img decoding=\"async\" class=\"lazy\" style=\"position: absolute; width: 100%; left: 0;\" src=\"https:\/\/dangngocduy.vn\/wp-content\/uploads\/2023\/09\/trick-to-take-over-accounts-by-sending-quotation-files_6517109109ab7.jpeg\" alt=\"A quote message in rar file format. Photo: Luu Quy\" \/><\/picture><\/div><figcaption>\n<p class=\"Image\">Th\u00f4ng b\u00e1o \u201ctr\u00edch d\u1eabn\u201d \u1edf \u0111\u1ecbnh d\u1ea1ng t\u1ec7p rar. H\u00ecnh ch\u1ee5p: <em>L\u01b0u Qu\u00fd<\/em><\/p>\n<\/figcaption><\/figure>\n<p class=\"Normal\">Ng\u1ecdc Tr\u00e2m, m\u1ed9t ng\u01b0\u1eddi kinh doanh tr\u1ef1c tuy\u1ebfn \u1edf H\u00e0 N\u1ed9i, c\u0169ng su\u00fdt b\u1ecb l\u1eeba trong t\u00ecnh hu\u1ed1ng t\u01b0\u01a1ng t\u1ef1. \u0110\u1ea7u th\u00e1ng 9, m\u1ed9t ng\u01b0\u1eddi t\u1ef1 nh\u1eadn l\u00e0m cho c\u00f4ng ty c\u00f9ng ng\u00e0nh d\u1ecda ki\u1ec7n c\u1eeda h\u00e0ng c\u1ee7a Tr\u00e2m v\u00ec vi ph\u1ea1m b\u1ea3n quy\u1ec1n h\u00ecnh \u1ea3nh. L\u1ea5y l\u00fd do c\u00f3 nhi\u1ec1u h\u1ed3 s\u01a1 ch\u1ee9ng c\u1ee9, h\u1ecd g\u1eedi cho c\u00f4 m\u1ed9t t\u1eadp tin n\u00e9n. \u201cT\u00f4i th\u1ea5y nghi ng\u1edd v\u00e0 y\u00eau c\u1ea7u g\u1eedi tr\u1ef1c ti\u1ebfp nh\u01b0ng h\u1ecd kh\u00f4ng nh\u1eadn v\u00e0 b\u1ea3o t\u00f4i t\u1ea3i file v\u1ec1 xem. Khi li\u00ean h\u1ec7 tr\u1ef1c ti\u1ebfp v\u1edbi c\u00f4ng ty kia th\u00ec t\u00f4i m\u1edbi bi\u1ebft kh\u00f4ng c\u00f3 chuy\u1ec7n \u0111\u00f3\u201d, Tr\u00e2m n\u00f3i.<\/p>\n<p class=\"Normal\">Theo \u00f4ng V\u0169 Ng\u1ecdc S\u01a1n, Gi\u00e1m \u0111\u1ed1c c\u00f4ng ngh\u1ec7 C\u00f4ng ty An ninh m\u1ea1ng NCS, trong v\u00e0i tu\u1ea7n qua, nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng t\u1ea1i Vi\u1ec7t Nam nh\u1eadn \u0111\u01b0\u1ee3c tin nh\u1eafn l\u1eeba \u0111\u1ea3o d\u01b0\u1edbi d\u1ea1ng file n\u00e9n. H\u1ea7u h\u1ebft nh\u1eafm \u0111\u1ebfn c\u00e1c doanh nghi\u1ec7p tr\u1ef1c tuy\u1ebfn, c\u00e1c trang fan h\u00e2m m\u1ed9 b\u00e1n h\u00e0ng ho\u1eb7c c\u00e1c t\u00e0i kho\u1ea3n c\u00f3 l\u01b0\u1ee3ng ng\u01b0\u1eddi theo d\u00f5i l\u1edbn.<\/p>\n<p class=\"Normal\">Ph\u01b0\u01a1ng th\u1ee9c ph\u1ed5 bi\u1ebfn l\u00e0 nh\u1eefng k\u1ebb l\u1eeba \u0111\u1ea3o ti\u1ebfp c\u1eadn n\u1ea1n nh\u00e2n qua Messenger ho\u1eb7c Zalo. L\u1ea5y l\u00fd do c\u1ea7n g\u1eedi b\u00e1o gi\u00e1 ho\u1eb7c c\u00f3 b\u1eb1ng ch\u1ee9ng t\u1ed1 c\u00e1o, ch\u00fang g\u1eedi file rar ho\u1eb7c zip khi\u1ebfn ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng th\u1ec3 xem tr\u1ef1c ti\u1ebfp m\u00e0 ph\u1ea3i t\u1ea3i v\u1ec1 m\u00e1y. Khi gi\u1ea3i n\u00e9n, ng\u01b0\u1eddi nh\u1eadn s\u1ebd th\u1ea5y m\u1ed9t file tr\u00f4ng gi\u1ed1ng nh\u01b0 file Excel nh\u01b0ng th\u1ef1c ch\u1ea5t l\u00e0 file th\u1ef1c thi .exe ho\u1eb7c .bat c\u00f3 logo \u0111\u00e3 \u0111\u01b0\u1ee3c thay \u0111\u1ed5i. Trong m\u1ed9t s\u1ed1 tr\u01b0\u1eddng h\u1ee3p, k\u1ebb x\u1ea5u c\u00f2n d\u00f9ng th\u1ee7 \u0111o\u1ea1n t\u0103ng dung l\u01b0\u1ee3ng \u1ea3o c\u1ee7a file nh\u1eb1m v\u01b0\u1ee3t qua gi\u1edbi h\u1ea1n c\u1ee7a m\u00e1y qu\u00e9t virus.<\/p>\n<figure class=\"tplCaption\" data-size=\"true\">\n<div class=\"fig-picture\" style=\"padding-bottom: 46.567164179104%; position: relative;\"><picture><source data-srcset=\"https:\/\/i1-sohoa.vnecdn.net\/2023\/09\/20\/luadao-1873-1695205973.jpg?w=680&amp;h=0&amp;q=100&amp;dpr=1&amp;fit=crop&amp;s=fXZDLoRkJ0dMb2VJOgaP8w 1x, https:\/\/i1-sohoa.vnecdn.net\/2023\/09\/20\/luadao-1873-1695205973.jpg?w=1020&amp;h=0&amp;q=100&amp;dpr=1&amp;fit=crop&amp;s=SZ1335dBqgZSFHOCFUY-Rw 1.5x, https:\/\/i1-sohoa.vnecdn.net\/2023\/09\/20\/luadao-1873-1695205973.jpg?w=680&amp;h=0&amp;q=100&amp;dpr=2&amp;fit=crop&amp;s=sQ6NVla8Yj0qBzs4xalxfA 2x\" \/><img decoding=\"async\" class=\"lazy\" style=\"position: absolute; width: 520px; left: 75px;\" src=\"https:\/\/dangngocduy.vn\/wp-content\/uploads\/2023\/09\/trick-to-take-over-accounts-by-sending-quotation-files_651710912942f.jpeg\" alt=\"An exe file disguised as the Excel logo. Photo: CookieArena\" \/><\/picture><\/div><figcaption>\n<p class=\"Image\">T\u1ec7p .exe \u0111\u01b0\u1ee3c ng\u1ee5y trang d\u01b0\u1edbi d\u1ea1ng logo Excel. H\u00ecnh ch\u1ee5p: <em>CookieArena<\/em><\/p>\n<\/figcaption><\/figure>\n<p class=\"Normal\">Theo \u00f4ng S\u01a1n, ch\u1ec9 c\u1ea7n m\u1edf file l\u00e0 m\u00e1y c\u1ee7a ng\u01b0\u1eddi d\u00f9ng \u0111\u00e3 b\u1ecb nhi\u1ec5m m\u00e3 \u0111\u1ed9c. M\u00e3 n\u00e0y c\u00f3 kh\u1ea3 n\u0103ng \u0111\u00e1nh c\u1eafp cookie c\u1ee7a tr\u00ecnh duy\u1ec7t v\u00e0 g\u1eedi cho tin t\u1eb7c. T\u1eeb \u0111\u00f3, ch\u00fang c\u00f3 th\u1ec3 sao ch\u00e9p tr\u1ea1ng th\u00e1i \u0111\u0103ng nh\u1eadp \u0111\u1ec3 truy c\u1eadp v\u00e0o c\u00e1c t\u00e0i kho\u1ea3n tr\u1ef1c tuy\u1ebfn c\u1ee7a n\u1ea1n nh\u00e2n nh\u01b0 email, m\u1ea1ng x\u00e3 h\u1ed9i, t\u00e0i kho\u1ea3n ch\u1ea1y qu\u1ea3ng c\u00e1o Facebook.<\/p>\n<p class=\"Normal\">Th\u1ee7 \u0111o\u1ea1n \u0111\u00e1nh c\u1eafp t\u00e0i kho\u1ea3n b\u1eb1ng m\u00e3 \u0111\u1ed9c kh\u00f4ng ph\u1ea3i l\u00e0 m\u1edbi nh\u01b0ng \u0111ang l\u00e0 xu h\u01b0\u1edbng v\u00ec m\u00e3 \u0111\u1ed9c c\u00f3 th\u1ec3 l\u00e2y lan theo c\u1ea5p s\u1ed1 nh\u00e2n. \u201cSau khi chi\u1ebfm \u0111\u01b0\u1ee3c m\u1ed9t t\u00e0i kho\u1ea3n, k\u1ebb gian s\u1ebd s\u1eed d\u1ee5ng t\u00e0i kho\u1ea3n \u0111\u00f3 \u0111\u1ec3 ti\u1ebfp c\u1eadn c\u00e1c n\u1ea1n nh\u00e2n kh\u00e1c\u201d, \u00f4ng S\u01a1n n\u00f3i. Nh\u1eefng t\u00e0i kho\u1ea3n uy t\u00edn m\u1ed9t khi b\u1ecb \u0111\u00e1nh c\u1eafp s\u1ebd gi\u00fap hacker d\u1ec5 d\u00e0ng d\u1ee5 d\u1ed7 nh\u1eefng n\u1ea1n nh\u00e2n ti\u1ebfp theo.<\/p>\n<p class=\"Normal\">Tu\u1ea7n tr\u01b0\u1edbc, h\u00e3ng b\u1ea3o m\u1eadt Guardio Labs c\u0169ng c\u00f4ng b\u1ed1 b\u1ea3n ph\u00e2n t\u00edch v\u1ec1 lo\u1ea1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i n\u00e0y v\u00e0 ph\u00e1t hi\u1ec7n ch\u00fang c\u00f3 li\u00ean quan \u0111\u1ebfn hacker \u0111\u1ebfn t\u1eeb Vi\u1ec7t Nam. Trong m\u00e3 ngu\u1ed3n c\u1ee7a m\u00e3 \u0111\u1ed9c thu th\u1eadp \u0111\u01b0\u1ee3c, c\u00e1c chuy\u00ean gia ph\u00e1t hi\u1ec7n c\u00f3 s\u1ef1 hi\u1ec7n di\u1ec7n c\u1ee7a ng\u00f4n ng\u1eef ti\u1ebfng Vi\u1ec7t c\u0169ng nh\u01b0 c\u00f3 \u0111\u1ec1 c\u1eadp \u0111\u1ebfn m\u1ed9t tr\u00ecnh duy\u1ec7t ph\u1ed5 bi\u1ebfn t\u1ea1i n\u01b0\u1edbc n\u00e0y.<\/p>\n<p class=\"Normal\">Vi\u1ec7c k\u00edch ho\u1ea1t m\u00e3 \u0111\u1ed9c \u0111\u00f2i h\u1ecfi s\u1ef1 t\u01b0\u01a1ng t\u00e1c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng, t\u1eeb vi\u1ec7c t\u1ea3i file, gi\u1ea3i n\u00e9n cho \u0111\u1ebfn m\u1edf file. Tuy nhi\u00ean, theo Guardio Labs, chi\u1ebfn d\u1ecbch n\u00e0y c\u00f3 t\u1ef7 l\u1ec7 th\u00e0nh c\u00f4ng kh\u00e1 cao, \u01b0\u1edbc t\u00ednh c\u1ee9 250 ng\u01b0\u1eddi ti\u1ebfp c\u1eadn th\u00ec s\u1ebd c\u00f3 m\u1ed9t ng\u01b0\u1eddi nhi\u1ec5m b\u1ec7nh.<\/p>\n<p class=\"Normal\">\u201cNg\u01b0\u1eddi d\u00f9ng c\u1ea7n c\u1ea9n th\u1eadn, kh\u00f4ng m\u1edf c\u00e1c file .zip v\u00e0 .rar d\u00f9 ch\u00fang \u0111\u01b0\u1ee3c g\u1eedi t\u1eeb danh s\u00e1ch b\u1ea1n b\u00e8 c\u1ee7a b\u1ea1n. B\u1ea1n c\u1ea7n x\u00e1c nh\u1eadn v\u1edbi ng\u01b0\u1eddi g\u1eedi th\u00f4ng qua m\u1ed9t k\u00eanh kh\u00e1c, ch\u1eb3ng h\u1ea1n nh\u01b0 g\u1ecdi \u0111i\u1ec7n, \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o t\u1ec7p \u0111\u00f3 l\u00e0 c\u1ee7a b\u1ea1n. T\u00f4i g\u1eedi tr\u01b0\u1edbc khi m\u1edf\u201d, \u00f4ng S\u01a1n \u0111\u1ec1 ngh\u1ecb.<\/p>\n<p class=\"Normal\" style=\"text-align: right;\"><strong>L\u01b0u Qu\u00fd<\/strong><\/p>\n<\/article>","protected":false},"excerpt":{"rendered":"<p>Seeing that the customer sent a request for information via a rar file, Nhan Nguyen tried to open it but discovered that it was a file that ran a program containing malicious code.<\/p>","protected":false},"author":1,"featured_media":2860,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[42,41],"tags":[44,43],"class_list":["post-2859","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-tech","tag-security","tag-tech"],"_links":{"self":[{"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/posts\/2859","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/comments?post=2859"}],"version-history":[{"count":0,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/posts\/2859\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/media\/2860"}],"wp:attachment":[{"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/media?parent=2859"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/categories?post=2859"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dangngocduy.vn\/vi\/wp-json\/wp\/v2\/tags?post=2859"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}