{"id":27246,"date":"2024-07-12T14:06:54","date_gmt":"2024-07-12T07:06:54","guid":{"rendered":"https:\/\/cdcangiang.vn\/?p=27246"},"modified":"2024-07-12T14:06:54","modified_gmt":"2024-07-12T07:06:54","slug":"thong-tin-chi-tiet-ve-chien-dich-tan-cong-cua-mustang-panda","status":"publish","type":"post","link":"https:\/\/cdcangiang.vn\/index.php\/2024\/07\/12\/thong-tin-chi-tiet-ve-chien-dich-tan-cong-cua-mustang-panda\/","title":{"rendered":"Th\u00f4ng tin chi ti\u1ebft v\u1ec1 chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng c\u1ee7a \u201cMustang Panda\u201d"},"content":{"rendered":"

Trong qu\u00e1 tr\u00ecnh gi\u00e1m s\u00e1t an to\u00e0n th\u00f4ng tin tr\u00ean kh\u00f4ng gian m\u1ea1ng, Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n kh\u00f4ng gian m\u1ea1ng qu\u1ed1c gia (NCSC), thu\u1ed9c C\u1ee5c An to\u00e0n th\u00f4ng tin, B\u1ed9 Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng, \u0111\u00e3 ph\u00e1t hi\u1ec7n v\u00e0 ghi nh\u1eadn c\u00e1c th\u00f4ng tin li\u00ean quan \u0111\u1ebfn chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng nh\u1eb1m v\u00e0o Vi\u1ec7t Nam \u0111\u01b0\u1ee3c th\u1ef1c hi\u1ec7n b\u1edfi nh\u00f3m t\u1ea5n c\u00f4ng APT \u201cMustang Panda\u201d. M\u1ee5c ti\u00eau m\u00e0 nh\u00f3m h\u01b0\u1edbng t\u1edbi l\u00e0 c\u00e1c t\u1ed5 ch\u1ee9c ch\u00ednh ph\u1ee7, t\u1ed5 ch\u1ee9c phi l\u1ee3i nhu\u1eadn, t\u1ed5 ch\u1ee9c gi\u00e1o d\u1ee5c, c\u01a1 quan thu\u1ebf.<\/span><\/p>\n

Hai chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng \u0111\u01b0\u1ee3c ghi nh\u1eadn v\u00e0o th\u00e1ng 04 v\u00e0 05\/2024 nh\u1eb1m t\u1edbi Vi\u1ec7t Nam \u0111\u00e3 s\u1eed d\u1ee5ng t\u1eadp tin v\u0103n b\u1ea3n c\u00f3 n\u1ed9i dung li\u00ean quan t\u1edbi c\u01a1 quan thu\u1ebf v\u00e0 t\u1ed5 ch\u1ee9c gi\u00e1o d\u1ee5c. C\u1ea3 hai chi\u1ebfn d\u1ecbch \u0111\u1ec1u c\u00f3 \u0111i\u1ec3m chung l\u00e0 b\u1eaft ngu\u1ed3n t\u1eeb c\u00e1c email l\u1eeba \u0111\u1ea3o c\u00f3 \u0111\u00ednh k\u00e8m t\u1eadp tin \u0111\u1ed9c h\u1ea1i.<\/span><\/p>\n

Chi\u1ebfn d\u1ecbch c\u1ee7a nh\u00f3m Mustang Panda c\u00f3 nhi\u1ec1u giai \u0111o\u1ea1n ph\u1ee9c t\u1ea1p, khai th\u00e1c c\u00e1c c\u00f4ng c\u1ee5 nh\u01b0 \u201cforfiles.exe\u201d \u0111\u1ec3 th\u1ef1c thi t\u1eadp tin HTA \u0111\u1ed9c h\u1ea1i l\u01b0u tr\u00ean m\u00e1y ch\u1ee7 t\u1eeb xa C&C. Ngo\u00e0i ra, Mustang Panda c\u00f2n s\u1eed d\u1ee5ng PowerShell, VBScript v\u00e0 batch file trong chi\u1ebfn d\u1ecbch. \u0110\u1ec3 tr\u00e1nh b\u1ecb ph\u00e1t hi\u1ec7n, nh\u00f3m \u0111\u1ed1i t\u01b0\u1ee3ng \u0111\u00e3 nh\u00fang c\u00e1c file v\u0103n b\u1ea3n n\u00e0y v\u00e0o c\u00e1c file .LNK \u0111\u1ed9c h\u1ea1i. Chi\u1ebfn d\u1ecbch s\u1eed d\u1ee5ng k\u1ef9 thu\u1eadt DLL sideloading v\u1edbi rundll32 \u0111\u1ec3 th\u1ef1c thi DLL \u0111\u1ed9c h\u1ea1i tr\u00ean h\u1ec7 th\u1ed1ng.<\/span><\/p>\n

Nh\u1eb1m \u0111\u1ea3m b\u1ea3o an to\u00e0n th\u00f4ng tin cho h\u1ec7 th\u1ed1ng th\u00f4ng tin li\u00ean quan \u0111\u1ebfn t\u1ed5 ch\u1ee9c gi\u00e1o d\u1ee5c, c\u01a1 quan thu\u1ebf, C\u1ee5c An to\u00e0n th\u00f4ng tin khuy\u1ebfn c\u00e1o th\u1ef1c hi\u1ec7n nh\u01b0 sau:<\/span><\/p>\n

1. Ki\u1ec3m tra, r\u00e0 so\u00e1t h\u1ec7 th\u1ed1ng th\u00f4ng tin \u0111ang s\u1eed d\u1ee5ng c\u00f3 kh\u1ea3 n\u0103ng b\u1ecb \u1ea3nh h\u01b0\u1edfng b\u1edfi chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng tr\u00ean. Ch\u1ee7 \u0111\u1ed9ng theo d\u00f5i c\u00e1c th\u00f4ng tin li\u00ean quan \u0111\u1ebfn chi\u1ebfn d\u1ecbch nh\u1eb1m th\u1ef1c hi\u1ec7n ng\u0103n ch\u1eb7n nh\u1eb1m tr\u00e1nh nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng.<\/span><\/p>\n

2. T\u0103ng c\u01b0\u1eddng gi\u00e1m s\u00e1t v\u00e0 s\u1eb5n s\u00e0ng ph\u01b0\u01a1ng \u00e1n x\u1eed l\u00fd khi ph\u00e1t hi\u1ec7n c\u00f3 2 d\u1ea5u hi\u1ec7u b\u1ecb khai th\u00e1c, t\u1ea5n c\u00f4ng m\u1ea1ng; \u0111\u1ed3ng th\u1eddi th\u01b0\u1eddng xuy\u00ean theo d\u00f5i k\u00eanh c\u1ea3nh b\u00e1o c\u1ee7a c\u00e1c c\u01a1 quan ch\u1ee9c n\u0103ng v\u00e0 c\u00e1c t\u1ed5 ch\u1ee9c l\u1edbn v\u1ec1 an to\u00e0n th\u00f4ng tin \u0111\u1ec3 ph\u00e1t hi\u1ec7n k\u1ecbp th\u1eddi c\u00e1c nguy c\u01a1 t\u1ea5n c\u00f4ng m\u1ea1ng.<\/span><\/p>\n

3. C\u1ea7n \u0111\u1ea7u t\u01b0 trang thi\u1ebft b\u1ecb m\u00e1y t\u00ednh h\u1ec7 \u0111i\u1ec1u h\u00e0nh v\u00e0 c\u00e1c ph\u1ea7n m\u1ec1m \u1ee9ng d\u1ee5ng c\u00f3 b\u1ea3n quy\u1ec1n nh\u1eb1m h\u1ea1n ch\u1ebf c\u00e1c nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng khai th\u00e1c.<\/span><\/p>\n

Trong tr\u01b0\u1eddng h\u1ee3p c\u1ea7n thi\u1ebft c\u00f3 th\u1ec3 li\u00ean h\u1ec7 \u0111\u1ea7u m\u1ed1i h\u1ed7 tr\u1ee3:<\/strong><\/span><\/p>\n

– Th\u01b0\u1eddng tr\u1ef1c \u0110\u1ed9i \u1ee9ng c\u1ee9u \u2013 S\u1edf Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng (th\u00f4ng qua Trung t\u00e2m C\u00f4ng ngh\u1ec7 Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng), \u0111i\u1ec7n tho\u1ea1i: 02963.856.188, email: hotro@angiang.gov.vn.<\/span><\/p>\n

– C\u1ee5c An to\u00e0n th\u00f4ng tin: Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n kh\u00f4ng gian m\u1ea1ng qu\u1ed1c gia, \u0111i\u1ec7n tho\u1ea1i: 02432.09.16.16, email: ncsc@ais.gov.vn . \/.<\/span><\/p>\n

Minh H\u1ea3i – <\/em><\/span>Khoa TT-GDSK, TT.KSBT An Giang<\/em><\/span><\/strong><\/p>\n

(Theo C\u00f4ng v\u0103n s\u1ed1 954\/\u0110\u01afCSCATTTM ng\u00e0y 19\/06\/2024 c\u1ee7a \u0110\u1ed9i \u1ee9ng c\u1ee9u s\u1ef1 c\u1ed1 an to\u00e0n th\u00f4ng tin m\u1ea1ng)<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Trong qu\u00e1 tr\u00ecnh gi\u00e1m s\u00e1t an to\u00e0n th\u00f4ng tin tr\u00ean kh\u00f4ng gian m\u1ea1ng, Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n kh\u00f4ng gian m\u1ea1ng qu\u1ed1c gia (NCSC), thu\u1ed9c C\u1ee5c An to\u00e0n th\u00f4ng tin, B\u1ed9 Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng, \u0111\u00e3 ph\u00e1t hi\u1ec7n v\u00e0 ghi nh\u1eadn c\u00e1c th\u00f4ng tin li\u00ean quan \u0111\u1ebfn chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng nh\u1eb1m […]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"limit_modified_date":"","last_modified_date":"","footnotes":""},"categories":[311],"tags":[],"class_list":["post-27246","post","type-post","status-publish","format-standard","hentry","category-tin-cds"],"_links":{"self":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts\/27246","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/comments?post=27246"}],"version-history":[{"count":1,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts\/27246\/revisions"}],"predecessor-version":[{"id":27247,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts\/27246\/revisions\/27247"}],"wp:attachment":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/media?parent=27246"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/categories?post=27246"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/tags?post=27246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}