{"id":13739,"date":"2024-04-11T13:02:10","date_gmt":"2024-04-11T07:02:10","guid":{"rendered":"https:\/\/dtasiagroup.com\/a-tale-of-the-three-ishings-part-1-what-is-phishing\/"},"modified":"2024-04-17T13:11:50","modified_gmt":"2024-04-17T07:11:50","slug":"a-tale-of-the-three-ishings-phan-1-phishing-la-gi","status":"publish","type":"post","link":"https:\/\/dtasiagroup.com\/vi\/a-tale-of-the-three-ishings-phan-1-phishing-la-gi\/","title":{"rendered":"A Tale of the Three *ishings: Ph\u1ea7n 1 \u2013 Phishing l\u00e0 g\u00ec?"},"content":{"rendered":"
\n

Phishing (T\u1ea5n c\u00f4ng gi\u1ea3 m\u1ea1o) \u0111\u00e3, \u0111ang v\u00e0 s\u1ebd ti\u1ebfp t\u1ee5c l\u00e0 m\u1ed9t trong nh\u1eefng ph\u01b0\u01a1ng th\u1ee9c t\u1ea5n c\u00f4ng ch\u00ednh \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng b\u1edfi nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng hi\u1ec7n nay.<\/p>\n

\"\"<\/p>\n

\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n

Trong su\u1ed1t hai m\u01b0\u01a1i n\u0103m qua, nh\u1eefng ng\u01b0\u1eddi trong ng\u00e0nh an ninh m\u1ea1ng \u0111\u00e3 t\u1eadp trung v\u00e0o c\u00e1ch s\u1eed d\u1ee5ng c\u00f4ng ngh\u1ec7 \u0111\u1ec3 b\u1ea3o v\u1ec7 c\u00f4ng ngh\u1ec7, v\u00e0 ch\u00fang ta \u0111\u00e3 l\u00e0m kh\u00e1 t\u1ed1t \u0111i\u1ec1u n\u00e0y. Th\u1eadt kh\u00f4ng may, c\u00e1c t\u1ed5 ch\u1ee9c \u0111\u00e3 b\u1ecf qua y\u1ebfu t\u1ed1 con ng\u01b0\u1eddi v\u00e0 c\u00e1c k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng \u0111\u00e3 nh\u1eadn th\u1ea5y \u0111i\u1ec1u n\u00e0y. Ch\u00fang \u0111\u01a1n gi\u1ea3n chuy\u1ec3n \u0111\u1ed5i ph\u01b0\u01a1ng th\u1ee9c t\u1ea5n c\u00f4ng c\u1ee7a ; con ng\u01b0\u1eddi hi\u1ec7n \u0111ang l\u00e0 m\u1ee5c ti\u00eau ch\u00ednh c\u1ee7a h\u1ecd v\u00ec ch\u00fang ta \u0111\u00e3 d\u00e0nh qu\u00e1 \u00edt s\u1ef1 quan t\u00e2m t\u1edbi y\u1ebfu t\u1ed1 . Ba c\u00e1ch ph\u1ed5 bi\u1ebfn nh\u1ea5t m\u00e0 c\u00e1c k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng \u0111ang nh\u1eafm v\u00e0o con ng\u01b0\u1eddi th\u01b0\u1eddng \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 “ba *ishings”, bao g\u1ed3m: phishing, smishing, v\u00e0 vishing. Trong lo\u1ea1t ba b\u00e0i \u0111\u0103ng tr\u00ean blog n\u00e0y, ch\u00fang t\u00f4i s\u1ebd tr\u00ecnh b\u00e0y chi ti\u1ebft h\u01a1n v\u1ec1 ba ph\u01b0\u01a1ng ph\u00e1p n\u00e0y, c\u00e1ch m\u00e0 nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng \u0111ang thay \u0111\u1ed5i chi\u1ebfn thu\u1eadt v\u00e0 k\u1ef9 thu\u1eadt c\u1ee7a ch\u00fang nh\u01b0 th\u1ebf n\u00e0o c\u0169ng nh\u01b0 nh\u1eefng g\u00ec b\u1ea1n c\u00f3 th\u1ec3 l\u00e0m \u0111\u1ec3 ph\u00f2ng tr\u00e1nh nh\u1eefng ph\u01b0\u01a1ng th\u1ee9c l\u1eeba \u0111\u1ea3o n\u00e0y.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

 <\/p>\n

Trong b\u00e0i blog n\u00e0y, ch\u00fang t\u00f4i s\u1ebd b\u1eaft \u0111\u1ea7u b\u1eb1ng vi\u1ec7c tr\u1ea3 l\u1eddi c\u00e2u h\u1ecfi \u201cPhishing (T\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o gi\u1ea3 m\u1ea1o) l\u00e0 g\u00ec?\u201d<\/strong><\/p>\n

Phishing l\u00e0 g\u00ec v\u00e0 t\u1ea1i sao?<\/strong><\/p>\n

\u0110\u00e2y c\u00f3 v\u1ebb l\u00e0 m\u1ed9t c\u00e2u h\u1ecfi ng\u1edb ng\u1ea9n v\u00ec m\u1ecdi ng\u01b0\u1eddi \u0111\u1ec1u bi\u1ebft phishing (t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o gi\u1ea3 m\u1ea1o) l\u00e0 g\u00ec, nh\u01b0ng b\u1ea1n s\u1ebd ph\u1ea3i ng\u1ea1c nhi\u00ean khi th\u1ea5y m\u1ecdi ng\u01b0\u1eddi th\u01b0\u1eddng c\u00f3 nh\u1eefng \u0111\u1ecbnh ngh\u0129a kh\u00e1c nhau. Phishing l\u00e0 m\u1ed9t lo\u1ea1i t\u1ea5n c\u00f4ng phi k\u1ef9 thu\u1eadt (social engineering attack). Social engineering l\u00e0 khi k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng l\u1eeba n\u1ea1n nh\u00e2n l\u00e0m \u0111i\u1ec1u g\u00ec \u0111\u00f3 m\u00e0 h\u1ecd kh\u00f4ng n\u00ean l\u00e0m, ch\u1eb3ng h\u1ea1n nh\u01b0 \u0111\u01b0a ti\u1ec1n cho t\u1ed9i ph\u1ea1m, chia s\u1ebb m\u1eadt kh\u1ea9u ho\u1eb7c c\u1ea5p cho k\u1ebb t\u1ea5n c\u00f4ng quy\u1ec1n truy c\u1eadp v\u00e0o m\u00e1y t\u00ednh. Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng n\u00e0y \u0111\u00e3 h\u1ecdc \u0111\u01b0\u1ee3c r\u1eb1ng c\u00e1ch d\u1ec5 nh\u1ea5t \u0111\u1ec3 c\u00f3 \u0111\u01b0\u1ee3c \u0111i\u1ec1u g\u00ec \u0111\u00f3 ch\u00ednh l\u00e0 “y\u00eau c\u1ea7u”. Kh\u00e1i ni\u1ec7m n\u00e0y kh\u00f4ng ph\u1ea3i l\u00e0 m\u1edbi, nh\u1eefng k\u1ebb l\u1ee3i d\u1ee5ng l\u00f2ng tin c\u1ee7a ng\u01b0\u1eddi kh\u00e1c v\u00e0 nh\u1eefng k\u1ebb l\u1eeba \u0111\u1ea3o (con artists and scammers) \u0111\u00e3 t\u1ed3n t\u1ea1i h\u00e0ng ngh\u00ecn n\u0103m, ch\u1ec9 l\u00e0 Internet khi\u1ebfn nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng c\u00f3 th\u1ec3 gi\u1ea3 m\u1ea1o th\u00e0nh b\u1ea5t k\u1ef3 ai ch\u00fang mu\u1ed1n v\u00e0 nh\u1eafm v\u00e0o con m\u1ed3i m\u1ed9t c\u00e1ch h\u1ebft s\u1ee9c \u0111\u01a1n gi\u1ea3n.<\/p>\n

Phishing l\u00e0 m\u1ed9t trong nh\u1eefng h\u00ecnh th\u1ee9c social engineering ph\u1ed5 bi\u1ebfn nh\u1ea5t v\u00ec \u0111\u00e2y l\u00e0 m\u1ed9t trong nh\u1eefng h\u00ecnh th\u1ee9c \u0111\u01a1n gi\u1ea3n v\u00e0 hi\u1ec7u qu\u1ea3 nh\u1ea5t. Ch\u00fang ta s\u1ebd \u0111\u1ecbnh ngh\u0129a phishing<\/em> l\u00e0 m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng social engineering d\u1ef1a tr\u00ean email; (smishing l\u00e0 b\u1ea5t k\u1ef3 cu\u1ed9c t\u1ea5n c\u00f4ng social engineering d\u1ef1a tr\u00ean tin nh\u1eafn v\u00e0 vishing l\u00e0 b\u1ea5t k\u1ef3 cu\u1ed9c t\u1ea5n c\u00f4ng social engineering n\u00e0o d\u1ef1a tr\u00ean gi\u1ecdng n\u00f3i\/\u0111i\u1ec7n tho\u1ea1i, c\u1ea3 hai v\u1ea5n \u0111\u1ec1 n\u00e0y s\u1ebd \u0111\u01b0\u1ee3c \u0111\u1ec1 c\u1eadp trong c\u00e1c b\u00e0i \u0111\u0103ng ti\u1ebfp theo c\u1ee7a lo\u1ea1t blog n\u00e0y). \u0110i\u1ec1u khi\u1ebfn phishing tr\u1edf n\u00ean hi\u1ec7u qu\u1ea3 l\u00e0 h\u1ea7u h\u1ebft m\u1ecdi ng\u01b0\u1eddi trong m\u1ecdi t\u1ed5 ch\u1ee9c \u0111\u1ec1u s\u1eed d\u1ee5ng email h\u00e0ng ng\u00e0y, v\u00ec v\u1eady \u0111\u00f3 l\u00e0 c\u00f4ng ngh\u1ec7 m\u00e0 nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng bi\u1ebft ch\u00fang ta \u0111ang s\u1eed d\u1ee5ng. Ngo\u00e0i ra, vi\u1ec7c t\u1ea1o ra nh\u1eefng email gi\u1ea3 m\u1ea1o h\u1ebft s\u1ee9c d\u1ec5 d\u00e0ng, d\u00f9ng \u0111\u1ec3 \u0111\u00e1nh l\u1eeba m\u1ecdi ng\u01b0\u1eddi l\u00e0m nh\u1eefng vi\u1ec7c m\u00e0 h\u1ecd kh\u00f4ng n\u00ean l\u00e0m. Cu\u1ed1i c\u00f9ng, email l\u00e0 c\u00e1ch ti\u1ebfp c\u1eadn h\u00e0ng tri\u1ec7u ng\u01b0\u1eddi tr\u00ean th\u1ebf gi\u1edbi v\u1edbi m\u1ee9c chi ph\u00ed th\u1ea5p.<\/p>\n

H\u00e3y nh\u1edb r\u1eb1ng, nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng c\u0169ng l\u00e0 con ng\u01b0\u1eddi, ch\u00fang kh\u00f4ng \u0111\u01b0\u1ee3c trao gi\u1ea3i th\u01b0\u1edfng c\u00e1ch hack\u00a0 v\u00e0o m\u1ed9t t\u1ed5 ch\u1ee9c s\u00e1ng t\u1ea1o nh\u1ea5t. Ch\u00fang c\u00f3 m\u1ee5c ti\u00eau r\u00f5 r\u00e0ng v\u00e0 mu\u1ed1n \u0111\u1ea1t \u0111\u01b0\u1ee3c m\u1ee5c \u0111\u00edch \u0111\u00f3 theo c\u00e1ch d\u1ec5 d\u00e0ng nh\u1ea5t c\u00f3 th\u1ec3 v\u00e0 \u0111i\u1ec1u n\u00e0y th\u01b0\u1eddng b\u1eaft \u0111\u1ea7u b\u1eb1ng phishing.<\/p>\n

Phishing ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o v\u00e0 \u0111i\u1ec1u g\u00ec \u0111ang thay \u0111\u1ed5i?<\/strong><\/p>\n

H\u1ea7u h\u1ebft ch\u00fang ta \u0111\u1ec1u quen thu\u1ed9c v\u1edbi\u00a0 email l\u1eeba \u0111\u1ea3o \u0111i\u1ec3n h\u00ecnh v\u1edbi m\u1ee5c ti\u00eau th\u00fac\u00a0 m\u1ecdi ng\u01b0\u1eddi nh\u1ea5p v\u00e0o li\u00ean k\u1ebft ho\u1eb7c m\u1edf t\u1ec7p \u0111\u00ednh k\u00e8m. N\u1ebfu b\u1ea1n nh\u1ea5p v\u00e0o m\u1ed9t li\u00ean k\u1ebft, b\u1ea1n s\u1ebd \u0111\u01b0\u1ee3c d\u1eabn\u00a0 m\u1ed9t trang web c\u1ed1 g\u1eafng x\u00e2m nh\u1eadp v\u00e0 l\u00e2y nhi\u1ec5m virus, m\u00e3 \u0111\u1ed9c ho\u1eb7c chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t m\u00e1y t\u00ednh c\u1ee7a b\u1ea1n (\u0111\u00f4i khi \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 “Drive-by” ho\u1eb7c “watering hole”) ho\u1eb7c b\u1ea1n s\u1ebd \u0111\u01b0\u1ee3c \u0111\u01b0a \u0111\u1ebfn m\u1ed9t trang web gi\u1ea3 m\u1ea1o m\u1ed9t t\u1ed5 ch\u1ee9c h\u1ee3p ph\u00e1p n\u00e0o \u0111\u00f3, sau \u0111\u00f3 \u0111\u00e1nh c\u1eafp th\u00f4ng tin m\u1eadt kh\u1ea9u c\u1ee7a b\u1ea1n. Trong h\u1ea7u h\u1ebft c\u00e1c tr\u01b0\u1eddng h\u1ee3p, li\u00ean k\u1ebft l\u1eeba \u0111\u1ea3o trong c\u00e1c phishing email \u0111\u1ec1u \u0111ang c\u1ed1 g\u1eafng thu th\u1eadp m\u1eadt kh\u1ea9u t\u00e0i kho\u1ea3n c\u00e1 nh\u00e2n c\u1ee7a ng\u01b0\u1eddi d\u00f9ng. T\u01b0\u01a1ng t\u1ef1 v\u1edbi vi\u1ec7c m\u1edf t\u1ec7p \u0111\u00ednh k\u00e8m. T\u1ec7p \u0111\u00ednh k\u00e8m b\u1ecb nhi\u1ec5m virus, m\u00e3 \u0111\u1ed9c s\u1ebd l\u00e2y nhi\u1ec5m v\u00e0o m\u00e1y t\u00ednh c\u1ee7a b\u1ea1n ho\u1eb7c ch\u1ee9a c\u00e1c li\u00ean k\u1ebft \u0111\u01b0a m\u1ecdi ng\u01b0\u1eddi \u0111\u1ebfn m\u1ed9t trang web gi\u1ea3 m\u1ea1o \u0111\u1ec3 \u0111\u00e1nh c\u1eafp m\u1eadt kh\u1ea9u. Th\u1eadt kh\u00f4ng may, th\u1eddi c\u1ee7a c\u00e1c t\u1ec7p \u0111\u00ednh k\u00e8m email b\u1ecb nhi\u1ec5m virus \u0111\u01a1n gi\u1ea3n ho\u1eb7c c\u00e1c li\u00ean k\u1ebft \u0111\u1ed9c h\u1ea1i \u0111\u00e3 qua.<\/p>\n

Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng \u0111ang t\u1ea1o ra nhi\u1ec1u email l\u1eeba \u0111\u1ea3o m\u1edbi h\u01a1n, bao g\u1ed3m:<\/strong><\/p>\n

H\u00ecnh th\u1ee9c l\u1eeba \u0111\u1ea3o qua th\u01b0 \u0111i\u1ec7n t\u1eed c\u1ee7a doanh nghi\u1ec7p<\/b> – Business Email Compromise<\/strong><\/p>\n

Business Email Compromise (BEC) (\u0111\u00f4i khi \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 l\u1eeba CEO fraud<\/em>) l\u00e0 c\u00e1c email \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf ri\u00eang cho t\u1eebng \u0111\u1ed1i t\u01b0\u1ee3ng c\u1ee5 th\u1ec3 trong doanh nghi\u1ec7p, kh\u00f4ng h\u1ec1 c\u00f3 b\u1ea5t k\u1ef3 li\u00ean k\u1ebft ho\u1eb7c t\u1ec7p \u0111\u00ednh k\u00e8m n\u00e0o trong email. Thay v\u00e0o \u0111\u00f3, ch\u1ec9 ch\u1ee9a v\u0103n b\u1ea3n c\u1ed1 g\u1eafng \u0111\u00e1nh l\u1eeba ai \u0111\u00f3 th\u1ef1c hi\u1ec7n m\u1ed9t h\u00e0nh \u0111\u1ed9ng. Nh\u1eefng email n\u00e0y th\u01b0\u1eddng nh\u1eb1m v\u00e0o c\u00e1c m\u1ee5c ti\u00eau trong l\u0129nh v\u1ef1c t\u00e0i ch\u00ednh v\u1edbi m\u1ee5c \u0111\u00edch l\u1eeba n\u1ea1n nh\u00e2n cho chuy\u1ec3n kho\u1ea3n ng\u00e2n h\u00e0ng, thanh to\u00e1n ho\u1eb7c thay \u0111\u1ed5i t\u00e0i kho\u1ea3n thanh to\u00e1n \u0111\u1ec3 nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng nh\u1eadn \u0111\u01b0\u1ee3c ti\u1ec1n. Nh\u1eefng cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y th\u01b0\u1eddng khi\u1ebfn t\u1ed5 ch\u1ee9c thi\u1ec7t h\u1ea1i h\u00e0ng tri\u1ec7u \u0111\u00f4 la sau m\u1ed7i v\u1ee5 vi\u1ec7c. \u0110i\u1ec1u khi\u1ebfn ch\u00fang tr\u1edf n\u00ean hi\u1ec7u qu\u1ea3 l\u00e0 nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng th\u1ef1c hi\u1ec7n nghi\u00ean c\u1ee9u v\u00e0 t\u1ef1 t\u1ea1o ra c\u00e1c email, v\u00ec v\u1eady nh\u1eefng email n\u00e0y nh\u00ecn c\u00f3 v\u1ebb \u0111\u1ebfn t\u1eeb m\u1ed9t ng\u01b0\u1eddi n\u00e0o \u0111\u00f3 m\u00e0 nh\u00f3m t\u00e0i ch\u00ednh bi\u1ebft v\u00e0 tin t\u01b0\u1edfng, ch\u1eb3ng h\u1ea1n nh\u01b0 CEO, CFO ho\u1eb7c m\u1ed9t nh\u00e0 cung c\u1ea5p m\u00e0 h\u1ecd l\u00e0m vi\u1ec7c c\u00f9ng. B\u1ea1n th\u01b0\u1eddng kh\u00f4ng \u0111\u1ecdc \u0111\u01b0\u1ee3c tin t\u1ee9c v\u1ec1 nh\u1eefng cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y v\u00ec c\u00e1c c\u00f4ng ty b\u1ecb t\u1ea5n c\u00f4ng kh\u00f4ng c\u1ea7n ph\u1ea3i c\u00f4ng khai m\u00e0 thay v\u00e0o \u0111\u00f3 th\u01b0\u1eddng \u00e2m th\u1ea7m li\u00ean h\u1ec7 v\u00e0 l\u00e0m vi\u1ec7c v\u1edbi c\u01a1 quan th\u1ef1c thi ph\u00e1p lu\u1eadt.<\/p>\n

Call Back – G\u1ecdi l\u1ea1i<\/strong><\/p>\n

M\u1ed9t l\u1ea7n n\u1eefa, kh\u00f4ng c\u00f3 b\u1ea5t k\u1ef3 li\u00ean k\u1ebft ho\u1eb7c t\u1ec7p \u0111\u00ednh k\u00e8m n\u00e0o trong email, thay v\u00e0o \u0111\u00f3 l\u00e0\u00a0 s\u1ed1 \u0111i\u1ec7n tho\u1ea1i. M\u1ee5c \u0111\u00edch l\u00e0 \u0111\u1ec3 n\u1ea1n nh\u00e2n g\u1ecdi \u0111\u1ebfn s\u1ed1 \u0111i\u1ec7n tho\u1ea1i \u0111\u00f3, v\u00e0 khi n\u00f3i chuy\u1ec7n v\u1edbi b\u1ea1n th\u00ec nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng \u0111\u01b0a ra nh\u1eefng l\u00fd l\u1ebd R\u1ea4T thuy\u1ebft ph\u1ee5c. Ch\u00fang th\u01b0\u1eddng n\u00f3i r\u1eb1ng b\u1ea1n \u0111ang c\u00f3 m\u1ed9t h\u00f3a \u0111\u01a1n ho\u1eb7c m\u1ed9t kho\u1ea3n ph\u00ed trong th\u1ebb t\u00edn d\u1ee5ng ch\u01b0a tr\u1ea3 ti\u1ec1n, v\u00e0 c\u1ea7n tr\u1ea3 g\u1ea5p – t\u1ea1o ra m\u1ed9t c\u1ea3m gi\u00e1c v\u00f4 c\u00f9ng c\u1ea5p . Anthony Davis \u0111\u01b0a ra m\u00f4 t\u1ea3 chi ti\u1ebft v\u1ec1 m\u1ed9t trong nh\u1eefng cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y.<\/a><\/p>\n

M\u00e3 QR\u00a0<\/strong><\/p>\n

Thay v\u00ec \u0111\u01b0a c\u00e1c li\u00ean k\u1ebft v\u00e0o email, nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng \u0111\u01b0a m\u00e3 QR v\u00e0o. L\u00fac \u0111\u1ea7u \u0111i\u1ec1u n\u00e0y nghe c\u00f3 v\u1ebb k\u1ef3 qu\u1eb7c nh\u01b0ng n\u00f3 th\u1ef1c s\u1ef1 l\u00e0 m\u1ed9t \u00fd t\u01b0\u1edfng tuy\u1ec7t v\u1eddi. M\u00e3 QR ho\u1ea1t \u0111\u1ed9ng gi\u1ed1ng nh\u01b0 c\u00e1c li\u00ean k\u1ebft \u0111\u01b0a b\u1ea1n \u0111\u1ebfn c\u00e1c trang web. Nh\u01b0ng c\u00f3 nh\u1eefng l\u1ee3i th\u1ebf khi s\u1eed d\u1ee5ng m\u00e3 QR trong email. \u0110\u1ea7u ti\u00ean, kh\u00f4ng ph\u1ea3i b\u1ed9 l\u1ecdc\u00a0 n\u00e0o c\u0169ng c\u00f3 th\u1ec3 ph\u00e2n t\u00edch m\u00e3 QR. Th\u1ee9 hai, n\u1ebfu k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 khi\u1ebfn n\u1ea1n nh\u00e2n s\u1eed d\u1ee5ng thi\u1ebft b\u1ecb di \u0111\u1ed9ng c\u1ee7a h\u1ecd \u0111\u1ec3 truy c\u1eadp trang web, th\u00ec c\u00e1c nh\u00f3m b\u1ea3o m\u1eadt th\u01b0\u1eddng kh\u00f4ng c\u00f3 kh\u1ea3 n\u0103ng nh\u00ecn\u00a0 ho\u1eb7c ki\u1ec3m so\u00e1t thi\u1ebft b\u1ecb di \u0111\u1ed9ng \u0111\u00f3, khi\u1ebfn thi\u1ebft b\u1ecb di \u0111\u1ed9ng \u0111\u00f3 d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng h\u01a1n nhi\u1ec1u.<\/p>\n

Trong phishing, b\u1ea1n s\u1ebd th\u01b0\u1eddng nghe th\u1ea5y c\u00e1c thu\u1eadt ng\u1eef phishing<\/em> ho\u1eb7c whaling<\/em>. \u0110\u00e2y l\u00e0 nh\u1eefng thu\u1eadt ng\u1eef \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 ch\u1ec9 c\u00e1c email l\u1eeba \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf chuy\u00ean bi\u1ec7t nh\u1eafm \u0111\u1ebfn nh\u1eefng \u0111\u1ed1i t\u01b0\u1ee3ng c\u1ee5 th\u1ec3. Nh\u1eefng thu\u1eadt ng\u1eef n\u00e0y ng\u1ee5 \u00fd r\u1eb1ng ch\u1ec9 c\u00f3 hai lo\u1ea1i email l\u1eeba \u0111\u1ea3o, nh\u1eb1m v\u00e0o t\u1ea5t c\u1ea3 m\u1ecdi ng\u01b0\u1eddi ho\u1eb7c t\u1eadp trung v\u00e0o s\u1ed1 \u00edt \u0111\u1ed1i t\u01b0\u1ee3ng c\u1ee5. Tuy nhi\u00ean, v\u1eabn c\u00f3 c\u00f3 m\u1ed9t s\u1ef1 \u0111a d\u1ea1ng v\u00e0 m\u1ee9c \u0111\u1ed9 t\u00f9y ch\u1ec9nh kh\u00e1c nhau, nh\u01b0 c\u00e1c email phishing \u0111\u01b0\u1ee3c t\u00f9y ch\u1ec9nh m\u1ed9t ph\u1ea7n n\u00e0o \u0111\u00f3 nh\u01b0ng v\u1eabn nh\u1eafm v\u00e0o c\u00e1c nh\u00f3m m\u1ee5c ti\u00eau l\u1edbn \u1edf nhi\u1ec1u c\u00f4ng ty kh\u00e1c nhau.<\/p>\n

Cu\u1ed1i c\u00f9ng, phishing s\u1ebd ng\u00e0y c\u00e0ng ph\u1ee9c t\u1ea1p h\u01a1n. Nhi\u1ec1u k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng kh\u00f4ng c\u00f2n th\u1ef1c hi\u1ec7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng email l\u1eeba \u0111\u1ea3o ho\u1eb7c x\u00e2y d\u1ef1ng c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng l\u1eeba \u0111\u1ea3o c\u1ee7a ri\u00eang m\u00ecnh n\u1eefa, thay v\u00e0o \u0111\u00f3 ch\u00fang \u0111\u01a1n gi\u1ea3n ch\u1ec9 thu\u00ea email phishing nh\u01b0 m\u1ed9t d\u1ecbch v\u1ee5. B\u1ea1n c\u00f3 th\u1ec3 \u0111\u00e3 nghe n\u00f3i v\u1ec1 Software-as-a-Service (SaaS), gi\u1edd \u0111\u00e2y t\u1ed9i ph\u1ea1m m\u1ea1ng s\u1ebd cho thu\u00ea Phishing-as-a-Service (PaaS). V\u1edbi m\u1ed9t kho\u1ea3n ph\u00ed h\u00e0ng th\u00e1ng \u0111\u01a1n gi\u1ea3n, b\u1ea5t k\u1ef3 ai c\u0169ng c\u00f3 th\u1ec3 c\u00f3 quy\u1ec1n truy c\u1eadp v\u00e0o t\u1ea5t c\u1ea3 c\u00e1c m\u1eabu v\u00e0 c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng l\u1eeba \u0111\u1ea3o ti\u00ean ti\u1ebfn nh\u1ea5t c\u1ea7n cho c\u00e1c cu\u1ed9c t\u1ea5n ch\u1ec9 b\u1eb1ng m\u1ed9t n\u00fat nh\u1ea5n. N\u00f3 th\u1eadm ch\u00ed th\u01b0\u1eddng bao g\u1ed3m c\u1ea3 h\u1ed7 tr\u1ee3 k\u1ef9 thu\u1eadt!<\/p>\n

Ch\u00fang ta c\u1ea7n l\u00e0m g\u00ec?<\/strong><\/p>\n

H\u1ea7u h\u1ebft c\u00e1c t\u1ed5 ch\u1ee9c \u0111ang t\u00edch c\u1ef1c gi\u1ea3i quy\u1ebft r\u1ee7i ro l\u1eeba \u0111\u1ea3o th\u00f4ng qua c\u1ea3 bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t k\u1ef9 thu\u1eadt v\u00e0 \u0111\u00e0o t\u1ea1o l\u1ef1c l\u01b0\u1ee3ng lao \u0111\u1ed9ng. Trong khi c\u00e1c bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t k\u1ef9 thu\u1eadt kh\u00f4ng ng\u1eebng c\u1ea3i thi\u1ec7n v\u00e0 hi\u1ec7u qu\u1ea3 h\u01a1n trong vi\u1ec7c ph\u00e1t hi\u1ec7n c\u00e1c phishing email, th\u00ec m\u1ed9t s\u1ed1 email trong \u0111\u00f3 v\u1eabn c\u00f3 l\u1ecdt qua \u0111\u01b0\u1ee3c khi nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng ng\u00e0y c\u00e0ng tinh\u00a0 v\u00e0 ngh\u0129 ra c\u00e1c ph\u01b0\u01a1ng ph\u00e1p m\u1edbi. T\u1eeb g\u00f3c \u0111\u1ed9 \u0111\u00e0o t\u1ea1o, ch\u00fang t\u00f4i kh\u00f4ng khuy\u1ebfn kh\u00edch vi\u1ec7c d\u1ea1y t\u1ea5t c\u1ea3 c\u00e1c lo\u1ea1i t\u1ea5n c\u00f4ng phishing v\u00e0 t\u1ea5t c\u1ea3 c\u00e1c ph\u01b0\u01a1ng ti\u1ec7n l\u1eeba \u0111\u1ea3o c\u00f3 th\u1ec3. \u0110i\u1ec1u n\u00e0y kh\u00f4ng ch\u1ec9 g\u00e2y \u00e1p l\u1ef1c l\u1edbn cho \u0111\u1ed9i ng\u0169 nh\u00e2n vi\u00ean m\u00e0 nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng c\u00f2n li\u00ean t\u1ee5c thay \u0111\u1ed5i ph\u01b0\u01a1ng ti\u1ec7n v\u00e0 k\u1ef9 thu\u1eadt c\u1ee7a ch\u00fang. Thay v\u00e0o \u0111\u00f3, h\u00e3y t\u1eadp trung v\u00e0o c\u00e1c d\u1ea5u hi\u1ec7u ph\u1ed5 bi\u1ebfn nh\u1ea5t c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng. B\u1eb1ng c\u00e1ch n\u00e0y, l\u1ef1c l\u01b0\u1ee3ng lao\u00a0 c\u1ee7a b\u1ea1n s\u1ebd \u0111\u01b0\u1ee3c \u0111\u00e0o t\u1ea1o v\u00e0 chu\u1ea9n b\u1ecb s\u1eb5n s\u00e0ng\u00a0 b\u1ea5t k\u1ec3 ph\u01b0\u01a1ng ph\u00e1p ho\u1eb7c chi\u00eau th\u1ee9c m\u00e0 k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1ng s\u1eed d\u1ee5ng. Ngo\u00e0i ra, c\u1ea7n nh\u1ea5n m\u1ea1nh r\u1eb1ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o kh\u00f4ng ch\u1ec9 gi\u1edbi h\u1ea1n trong email m\u00e0 bao g\u1ed3m\u00a0 c\u00e1c c\u00f4ng ngh\u1ec7 nh\u1eafn tin kh\u00e1c nhau.<\/p>\n

\u0110\u00f3 l\u00e0 l\u00fd do t\u1ea1i sao nh\u1eefng ch\u1ec9 b\u00e1o n\u00e0y r\u1ea5t hi\u1ec7u qu\u1ea3, ch\u00fang ph\u1ed5 bi\u1ebfn trong h\u1ea7u h\u1ebft m\u1ecdi cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o, b\u1ea5t k\u1ec3 l\u00e0 qua email hay tin nh\u1eafn.<\/p>\n