{"id":13369,"date":"2023-12-18T14:18:29","date_gmt":"2023-12-18T08:18:29","guid":{"rendered":"https:\/\/dtasiagroup.com\/?p=13369"},"modified":"2023-12-18T14:21:16","modified_gmt":"2023-12-18T08:21:16","slug":"yubikey-ngan-chan-cac-cuoc-tan-cong-lua-dao-gia-mao-nhu-the-nao","status":"publish","type":"post","link":"https:\/\/dtasiagroup.com\/vi\/yubikey-ngan-chan-cac-cuoc-tan-cong-lua-dao-gia-mao-nhu-the-nao\/","title":{"rendered":"YubiKey ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o gi\u1ea3 m\u1ea1o nh\u01b0 th\u1ebf n\u00e0o?"},"content":{"rendered":"

Kho\u1ea3ng 10 n\u0103m tr\u01b0\u1edbc, n\u1ebfu h\u1ecfi m\u1ed9t ng\u01b0\u1eddi “phishing” l\u00e0 g\u00ec, c\u00f3 l\u1ebd h\u1ecd ch\u1ec9 bi\u1ebft tr\u1ea3 l\u1eddi “t\u00f4i kh\u00f4ng bi\u1ebft”. Tuy nhi\u00ean \u1edf th\u1eddi \u0111i\u1ec3m hi\u1ec7n t\u1ea1i, t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o gi\u1ea3 m\u1ea1o – phishing attack – \u0111\u00e3 tr\u1edf th\u00e0nh nguy\u00ean nh\u00e2n ch\u00ednh cho r\u1ea5t nhi\u1ec1u v\u1ee5 vi ph\u1ea1m d\u1eef li\u1ec7u nghi\u00eam tr\u1ecdng. Theo b\u00e1o c\u00e1o c\u1ee7a KnowBe4 – nh\u00e0 cung c\u1ea5p h\u00e0ng \u0111\u1ea7u v\u1ec1 N\u1ec1n t\u1ea3ng Gi\u1ea3 l\u1eadp t\u1ea5n c\u00f4ng gi\u1ea3 m\u1ea1o – c\u00f3 \u0111\u1ebfn 91% c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng b\u1eaft \u0111\u1ea7u t\u1eeb m\u1ed9t email gi\u1ea3 m\u1ea1o.<\/p>\n

H\u00e3y c\u00f9ng ph\u00e2n t\u00edch m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o gi\u1ea3 m\u1ea1o \u0111\u1ec3 xem k\u1ebb gian l\u00e0m th\u1ebf n\u00e0o v\u01b0\u1ee3t qua ph\u01b0\u01a1ng th\u1ee9c 2FA truy\u1ec1n th\u1ed1ng (SMS OTP) v\u00e0 chi\u1ebfm \u0111o\u1ea1t t\u00e0i kho\u1ea3n c\u1ee7a n\u1ea1n nh\u00e2n.<\/p>\n

\"\"<\/p>\n

Tr\u00ean \u0111\u00e2y l\u00e0 s\u01a1 \u0111\u1ed3 m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng gi\u1ea3 m\u1ea1o. G\u00f3c tr\u00ean b\u00ean tr\u00e1i ta c\u00f3 N\u1ea1n nh\u00e2n. H\u00e3y g\u1ecdi anh ta l\u00e0 Jack.<\/p>\n

B\u01b0\u1edbc 1 v\u00e0 2: Jack nh\u1eadn \u0111\u01b0\u1ee3c m\u1ed9t \u0111\u01b0\u1eddng link gi\u1ea3 m\u1ea1o t\u1eeb k\u1ebb t\u1ea5n c\u00f4ng qua email ho\u1eb7c b\u00e0i vi\u1ebft tr\u00ean m\u1ea1ng x\u00e3 h\u1ed9i. Jack nh\u1ea5p v\u00e0o li\u00ean k\u1ebft d\u1eabn anh \u0111\u1ebfn m\u1ed9t trang web gi\u1ea3 m\u1ea1o, tr\u00f4ng gi\u1ed1ng nh\u01b0 trang web th\u1eadt.<\/p>\n

B\u01b0\u1edbc 2 v\u00e0 3: Tr\u00ean trang web gi\u1ea3 m\u1ea1o n\u00e0y, Jack nh\u1eadp t\u00ean ng\u01b0\u1eddi d\u00f9ng v\u00e0 m\u1eadt kh\u1ea9u v\u00ec ngh\u0129 r\u1eb1ng m\u00ecnh \u0111ang \u0111\u0103ng nh\u1eadp v\u00e0o trang web th\u1eadt. K\u1ebb t\u1ea5n c\u00f4ng l\u1ea5y nh\u1eefng th\u00f4ng tin x\u00e1c th\u1ef1c m\u00e0 Jack \u0111\u00e3 nh\u1eadp.<\/p>\n

B\u01b0\u1edbc 3 v\u00e0 4: K\u1ebb t\u1ea5n c\u00f4ng sau \u0111\u00f3 nh\u1eadp th\u00f4ng tin v\u1eeba l\u1ea5y \u0111\u01b0\u1ee3c v\u00e0o trang web th\u1eadt.<\/p>\n

B\u01b0\u1edbc 4 v\u00e0 5: Trang web th\u1eadt k\u00edch ho\u1ea1t m\u00e3 SMS v\u00e0 g\u1eedi \u0111\u1ebfn \u0111i\u1ec7n tho\u1ea1i c\u1ee7a Jack.<\/p>\n

B\u01b0\u1edbc 2 v\u00e0 6: V\u00e0i gi\u00e2y sau, Jack nh\u1eadp m\u00e3 n\u00e0y v\u00e0o trang web gi\u1ea3 v\u00e0 \u0111\u0103ng nh\u1eadp th\u00e0nh c\u00f4ng trang \u0111\u00f3.<\/p>\n

B\u01b0\u1edbc 4 v\u00e0 7: K\u1ebb t\u1ea5n c\u00f4ng b\u00e2y gi\u1edd l\u1ea5y m\u00e3 SMS m\u00e0 Jack \u0111\u00e3 nh\u1eadp v\u00e0o trang web gi\u1ea3 v\u00e0 nh\u1eadp n\u00f3 v\u00e0o trang web th\u1eadt, \u0111\u0103ng nh\u1eadp th\u00e0nh c\u00f4ng trang n\u00e0y v\u00e0 c\u00f3 to\u00e0n quy\u1ec1n ki\u1ec3m so\u00e1t t\u00e0i kho\u1ea3n c\u1ee7a Jack t\u1ea1i trang web th\u1eadt.<\/p>\n

K\u1ebb t\u1ea5n c\u00f4ng th\u1eadm ch\u00ed c\u00f3 th\u1ec3 ti\u1ebfn th\u00eam m\u1ed9t b\u01b0\u1edbc n\u1eefa: h\u1eafn c\u00f3 th\u1ec3 \u0111\u1ed5i m\u1eadt kh\u1ea9u t\u00e0i kho\u1ea3n v\u00e0 s\u1ed1 \u0111i\u1ec7n tho\u1ea1i c\u1ee7a Jack, kh\u00f3a Jack ho\u00e0n to\u00e0n kh\u1ecfi vi\u1ec7c truy c\u1eadp t\u00e0i kho\u1ea3n c\u1ee7a m\u00ecnh.<\/p>\n

B\u00e2y gi\u1edd, sau khi \u0111\u00e3 hi\u1ec3u c\u00e1ch th\u1ee9c t\u1ea5n c\u00f4ng, h\u00e3y c\u00f9ng xem c\u00e1ch YubiKey ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o gi\u1ea3 m\u1ea1o n\u00e0y. Trong tr\u01b0\u1eddng h\u1ee3p n\u00e0y, n\u1ea1n nh\u00e2n s\u1eed d\u1ee5ng ph\u01b0\u01a1ng th\u1ee9c x\u00e1c th\u1ef1c 2FA l\u00e0 m\u1ed9t chi\u1ebfc YubiKey cho t\u00e0i kho\u1ea3n online c\u1ee7a m\u00ecnh, qua giao th\u1ee9c FIDO (Fast IDentity Online).<\/p>\n

\"\"<\/p>\n

B\u01b0\u1edbc 1: K\u1ebb t\u1ea5n c\u00f4ng g\u1eedi cho n\u1ea1n nh\u00e2n m\u1ed9t email tr\u1ecf \u0111\u1ebfn m\u1ed9t trang web\/trang \u0111\u0103ng nh\u1eadp gi\u1ea3 m\u1ea1o.<\/p>\n

B\u01b0\u1edbc 2: N\u1ea1n nh\u00e2n nh\u1eadp th\u00f4ng tin \u0111\u0103ng nh\u1eadp (UN\/PW)<\/p>\n

B\u01b0\u1edbc 3: Trang \u0111\u0103ng nh\u1eadp gi\u1ea3 m\u1ea1o thu th\u1eadp th\u00f4ng tin \u0111\u0103ng nh\u1eadp v\u00e0 g\u1eedi n\u00f3 \u0111\u1ebfn trang \u0111\u0103ng nh\u1eadp\/trang web th\u1eadt c\u1ee7a kh\u00e1ch h\u00e0ng (m\u00e1y ch\u1ee7 th\u1eadt)<\/p>\n

B\u01b0\u1edbc 4: Trang web th\u1eadt g\u1ecdi ph\u01b0\u01a1ng th\u1ee9c x\u00e1c th\u1ef1c th\u1ee9 2 qua giao th\u1ee9c FIDO, y\u00eau c\u1ea7u ng\u01b0\u1eddi d\u00f9ng s\u1eed d\u1ee5ng kh\u00f3a b\u1ea3o m\u1eadt YubiKey \u0111\u00e3 \u0111\u0103ng k\u00fd v\u1edbi t\u00e0i kho\u1ea3n tr\u01b0\u1edbc \u0111\u00f3 (thay v\u00ec g\u1eedi SMS)<\/p>\n

B\u01b0\u1edbc 5: Trang web gi\u1ea3 m\u1ea1o kh\u00f4ng c\u00f3 tr\u00ecnh x\u00e1c th\u1ef1c v\u1edbi th\u00f4ng tin \u0111\u0103ng nh\u1eadp FIDO n\u00ean kh\u00f4ng k\u00edch ho\u1ea1t \u0111\u01b0\u1ee3c ph\u01b0\u01a1ng th\u1ee9c 2FA, l\u00fac n\u00e0y n\u1ebfu theo th\u00f3i quen ng\u01b0\u1eddi d\u00f9ng c\u1eafm YubiKey v\u00e0o m\u00e1y t\u00ednh \u0111\u1ec3 x\u00e1c th\u1ef1c th\u00ec YubiKey c\u0169ng nh\u1eadn bi\u1ebft \u0111\u00f3 l\u00e0 trang web gi\u1ea3 v\u00e0 kh\u00f4ng cho ph\u00e9p qu\u00e1 tr\u00ecnh x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c ti\u1ebfp t\u1ee5c, do \u0111\u00f3 cu\u1ed9c t\u1ea5n c\u00f4ng b\u1ecb ng\u0103n ch\u1eb7n!<\/p>\n

B\u01b0\u1edbc 6: \u1edf ph\u00eda k\u1ebb t\u1ea5n c\u00f4ng, do trang web th\u1eadt y\u00eau c\u1ea7u x\u00e1c th\u1ef1c FIDO b\u1eb1ng YubiKey nh\u01b0ng trong tay h\u1eafn kh\u00f4ng c\u00f3 chi\u1ebfc ch\u00eca kh\u00f3a n\u00e0y, v\u00ec v\u1eady kh\u00f4ng th\u1ec3 n\u00e0o \u0111\u0103ng nh\u1eadp \u0111\u1ec3 chi\u1ebfm \u0111o\u1ea1t t\u00e0i kho\u1ea3n!<\/p>\n

Sau khi b\u1ea1n \u0111\u0103ng k\u00fd YubiKey c\u1ee7a m\u00ecnh v\u1edbi m\u1ed9t d\u1ecbch v\u1ee5 online nh\u01b0 Facebook, Google, Microsoft, Dropbox…, chi\u1ebfc kh\u00f3a n\u00e0y s\u1ebd \u0111\u01b0\u1ee3c g\u1eafn v\u1edbi m\u1ed9t URL c\u1ee5 th\u1ec3 v\u00e0 th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u00e3 \u0111\u0103ng k\u00fd kh\u00f4ng th\u1ec3 s\u1eed d\u1ee5ng \u0111\u1ec3 \u0111\u0103ng nh\u1eadp v\u00e0o m\u1ed9t trang web gi\u1ea3 m\u1ea1o. \u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a l\u00e0 ngay c\u1ea3 khi ng\u01b0\u1eddi d\u00f9ng b\u1ecb l\u1eeba nh\u1ea5p v\u00e0o li\u00ean k\u1ebft \u0111\u01b0a h\u1ecd \u0111\u1ebfn m\u1ed9t trang web gi\u1ea3 m\u1ea1o, YubiKey s\u1ebd kh\u00f4ng bao gi\u1edd b\u1ecb l\u1eeba, v\u00ec v\u1eady n\u1ed7 l\u1ef1c l\u1eeba \u0111\u1ea3o s\u1ebd b\u1ecb ng\u0103n ch\u1eb7n!<\/p>\n","protected":false},"excerpt":{"rendered":"

Kho\u1ea3ng 10 n\u0103m tr\u01b0\u1edbc, n\u1ebfu h\u1ecfi m\u1ed9t ng\u01b0\u1eddi “phishing” l\u00e0 g\u00ec, c\u00f3 l\u1ebd h\u1ecd ch\u1ec9 bi\u1ebft tr\u1ea3 l\u1eddi “t\u00f4i kh\u00f4ng bi\u1ebft”. Tuy nhi\u00ean \u1edf th\u1eddi \u0111i\u1ec3m hi\u1ec7n t\u1ea1i, t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o gi\u1ea3 m\u1ea1o – phishing attack – \u0111\u00e3 tr\u1edf th\u00e0nh nguy\u00ean nh\u00e2n ch\u00ednh cho r\u1ea5t nhi\u1ec1u v\u1ee5 vi ph\u1ea1m d\u1eef li\u1ec7u nghi\u00eam tr\u1ecdng. Theo […]<\/p>\n","protected":false},"author":8,"featured_media":13372,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[56,66],"tags":[],"class_list":["post-13369","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-articles","category-news-vi"],"_links":{"self":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/13369","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/comments?post=13369"}],"version-history":[{"count":0,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/posts\/13369\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media\/13372"}],"wp:attachment":[{"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/media?parent=13369"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/categories?post=13369"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dtasiagroup.com\/vi\/wp-json\/wp\/v2\/tags?post=13369"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}