{"id":28881,"date":"2024-10-22T09:11:09","date_gmt":"2024-10-22T02:11:09","guid":{"rendered":"https:\/\/cdcangiang.vn\/?p=28881"},"modified":"2024-10-22T09:12:03","modified_gmt":"2024-10-22T02:12:03","slug":"tin-019-10-24","status":"publish","type":"post","link":"https:\/\/cdcangiang.vn\/index.php\/2024\/10\/22\/tin-019-10-24\/","title":{"rendered":"Th\u00f4ng tin chi ti\u1ebft v\u1ec1 chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng CobaltStrike"},"content":{"rendered":"

Trong qu\u00e1 tr\u00ecnh gi\u00e1m s\u00e1t an to\u00e0n th\u00f4ng tin tr\u00ean kh\u00f4ng gian m\u1ea1ng, Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n th\u00f4ng tin, C\u1ee5c An to\u00e0n th\u00f4ng tin ghi nh\u1eadn th\u00f4ng tin li\u00ean quan \u0111\u1ebfn chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng c\u00f3 ch\u1ee7 \u0111\u00edch s\u1eed d\u1ee5ng k\u1ef9 thu\u1eadt AppDomainManager Injection \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c k\u1ec3 t\u1eeb th\u00e1ng 7\/2024. Qua ph\u00e2n t\u00edch, m\u00e3 \u0111\u1ed9c trong chi\u1ebfn d\u1ecbch n\u00e0y \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh l\u00e0 CobaltStrike, v\u1edbi c\u00e1c d\u1ea5u hi\u1ec7u k\u1ef9 thu\u1eadt v\u00e0 h\u1ea1 t\u1ea7ng t\u01b0\u01a1ng t\u1ef1 nh\u00f3m APT41.<\/span><\/p>\n

Chi\u1ebfn d\u1ecbch n\u00e0y \u0111\u00e3 g\u00e2y ra nh\u1eefng t\u00e1c \u0111\u1ed9ng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn c\u00e1c t\u1ed5 ch\u1ee9c ch\u00ednh ph\u1ee7 t\u1ea1i \u0110\u00e0i Loan, c\u00e1c \u0111\u01a1n v\u1ecb qu\u00e2n s\u1ef1 \u1edf Philippines… \u0110i\u1ec1u n\u00e0y, cho th\u1ea5y quy m\u00f4 v\u00e0 t\u00ednh ch\u1ea5t nguy hi\u1ec3m c\u1ee7a cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0 c\u00f3 kh\u1ea3 n\u0103ng t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c h\u1ec7 th\u1ed1ng th\u00f4ng tin t\u1ea1i Vi\u1ec7t Nam.<\/span><\/p>\n

D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 IoC li\u00ean quan \u0111\u1ebfn c\u00e1c t\u1ea5n c\u00f4ng g\u1ea7n \u0111\u00e2y<\/strong>: <\/strong><\/span><\/p>\n

krislab[.] site;<\/span><\/p>\n

msn-microsoft[.] org;<\/span><\/p>\n

s2cloud-amazon[.] com;<\/span><\/p>\n

s3bucket-azure[.] online;<\/span><\/p>\n

s3cloud-azure[.] com;<\/span><\/p>\n

s3-microsoft[.] com;<\/span><\/p>\n

trendmicrotech[.] com;<\/span><\/p>\n

visualstudio-microsoft[.] com;<\/span><\/p>\n

xtools[.] lol<\/span><\/p>\n

Khuy\u1ebfn c\u00e1o ph\u00f2ng ng\u1eeba:\u00a0<\/strong>Ki\u1ec3m tra, r\u00e0 so\u00e1t h\u1ec7 th\u1ed1ng th\u00f4ng tin \u0111ang s\u1eed d\u1ee5ng c\u00f3 kh\u1ea3 n\u0103ng b\u1ecb \u1ea3nh h\u01b0\u1edfng b\u1edfi chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng tr\u00ean. Ch\u1ee7 \u0111\u1ed9ng theo d\u00f5i c\u00e1c th\u00f4ng tin li\u00ean quan \u0111\u1ebfn chi\u1ebfn d\u1ecbch nh\u1eb1m th\u1ef1c hi\u1ec7n ng\u0103n ch\u1eb7n nh\u1eb1m tr\u00e1nh nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng.<\/span><\/p>\n

Trong tr\u01b0\u1eddng h\u1ee3p c\u1ea7n thi\u1ebft, c\u00f3 th\u1ec3 li\u00ean h\u1ec7 \u0111\u1ea7u m\u1ed1i h\u1ed7 tr\u1ee3:<\/strong><\/span><\/p>\n

\u2013 Th\u01b0\u1eddng tr\u1ef1c \u0110\u1ed9i \u1ee9ng c\u1ee9u \u2013 S\u1edf Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng (th\u00f4ng qua Trung t\u00e2m C\u00f4ng ngh\u1ec7 Th\u00f4ng tin v\u00e0 Truy\u1ec1n th\u00f4ng), \u0111i\u1ec7n tho\u1ea1i: 02963.856.188, Email:\u00a0hotro@angiang.gov.vn<\/a>.<\/span><\/p>\n

\u2013 C\u1ee5c An to\u00e0n th\u00f4ng tin: Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n kh\u00f4ng gian m\u1ea1ng qu\u1ed1c gia, \u0111i\u1ec7n tho\u1ea1i: 02432.09.16.16, th\u01b0 \u0111i\u1ec7n t\u1eed:\u00a0ncsc@ais.gov.vn<\/a>.\u00a0<\/span><\/p>\n

Minh H\u1ea3i – <\/em><\/span>Khoa TT-GDSK, TT.KSBT An Giang<\/em><\/span><\/span><\/strong><\/p>\n

(Theo C\u00f4ng v\u0103n s\u1ed1: 1435\/\u0110\u01afCSCATTTM ng\u00e0y 29\/8\/2024 c\u1ee7a \u0110\u1ed9i \u1ee9ng c\u1ee9u s\u1ef1 c\u1ed1 an to\u00e0n th\u00f4ng tin m\u1ea1ng)<\/em><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Trong qu\u00e1 tr\u00ecnh gi\u00e1m s\u00e1t an to\u00e0n th\u00f4ng tin tr\u00ean kh\u00f4ng gian m\u1ea1ng, Trung t\u00e2m Gi\u00e1m s\u00e1t an to\u00e0n th\u00f4ng tin, C\u1ee5c An to\u00e0n th\u00f4ng tin ghi nh\u1eadn th\u00f4ng tin li\u00ean quan \u0111\u1ebfn chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng c\u00f3 ch\u1ee7 \u0111\u00edch s\u1eed d\u1ee5ng k\u1ef9 thu\u1eadt AppDomainManager Injection \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c k\u1ec3 t\u1eeb th\u00e1ng 7\/2024. […]<\/p>\n","protected":false},"author":8,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"limit_modified_date":"","last_modified_date":"","footnotes":""},"categories":[322,311,350],"tags":[],"class_list":["post-28881","post","type-post","status-publish","format-standard","hentry","category-cham-nhuan-but","category-tin-cds","category-tin-viet-van-ban"],"_links":{"self":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts\/28881","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/comments?post=28881"}],"version-history":[{"count":1,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts\/28881\/revisions"}],"predecessor-version":[{"id":28882,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/posts\/28881\/revisions\/28882"}],"wp:attachment":[{"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/media?parent=28881"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/categories?post=28881"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cdcangiang.vn\/index.php\/wp-json\/wp\/v2\/tags?post=28881"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}