{"id":41459,"date":"2024-11-14T10:48:30","date_gmt":"2024-11-14T10:48:30","guid":{"rendered":"https:\/\/riyadh.dev\/sua-loi-thuong-gap-khi-khong-vao-duoc-web-nha-cai-uy-tin\/"},"modified":"2024-11-14T10:48:30","modified_gmt":"2024-11-14T10:48:30","slug":"sua-loi-thuong-gap-khi-khong-vao-duoc-web-nha-cai-uy-tin","status":"publish","type":"post","link":"https:\/\/riyadh.dev\/en\/sua-loi-thuong-gap-khi-khong-vao-duoc-web-nha-cai-uy-tin\/","title":{"rendered":"S\u1eeda L\u1ed7i Th\u01b0\u1eddng G\u1eb7p Khi Kh\u00f4ng V\u00e0o \u0110\u01b0\u1ee3c Web nh\u00e0 c\u00e1i uy t\u00edn"},"content":{"rendered":"
\n

S\u1eeda L\u1ed7i Th\u01b0\u1eddng G\u1eb7p Khi Kh\u00f4ng V\u00e0o \u0110\u01b0\u1ee3c Web nh\u00e0 c\u00e1i uy t\u00edn<\/h1>\n

B\u1ea1n v\u1eeba m\u1edf tr\u00ecnh duy\u1ec7t tr\u00ean \u0111i\u1ec7n tho\u1ea1i \u0111\u1ec3 th\u1ef1c hi\u1ec7n thao t\u00e1c n\u1ea1p ti\u1ec1n nhanh nh\u1ea5t cho v\u00ed c\u00e1 nh\u00e2n, nh\u01b0ng m\u00e0n h\u00ecnh ch\u1ec9 hi\u1ec3n th\u1ecb d\u00f2ng ch\u1eef \u201cKh\u00f4ng th\u1ec3 k\u1ebft n\u1ed1i\u201d, l\u00e1 c\u1edd c\u1ea3nh b\u00e1o b\u1ea3o m\u1eadt m\u00e0u \u0111\u1ecf ho\u1eb7c tr\u1ea1ng th\u00e1i l\u00e0m tr\u00f2n m\u00e3i kh\u00f4ng d\u1ee9t. Thay v\u00ec ho\u1ea3ng lo\u1ea1n \u0111\u1ed5i m\u1eadt kh\u1ea9u li\u00ean t\u1ee5c ho\u1eb7c th\u1eed nh\u1ea5p v\u00e0o c\u00e1c li\u00ean k\u1ebft \u201cKh\u00f4i ph\u1ee5c t\u00e0i kho\u1ea3n\u201d xu\u1ea5t hi\u1ec7n ng\u1eabu nhi\u00ean trong k\u1ebft qu\u1ea3 t\u00ecm ki\u1ebfm, h\u00e0nh \u0111\u1ed9ng \u0111\u00fang \u0111\u1eafn nh\u1ea5t l\u00fac n\u00e0y l\u00e0 ng\u1eaft nh\u1ecbp, quay v\u1ec1 ph\u00e2n t\u00edch lu\u1ed3ng d\u1eef li\u1ec7u. Trong m\u00f4i tr\u01b0\u1eddng s\u1ed1, vi\u1ec7c m\u1ea5t kh\u1ea3 n\u0103ng truy c\u1eadp hi\u1ebfm khi l\u00e0 tai h\u1ecda ng\u1eabu nhi\u00ean. N\u00f3 lu\u00f4n b\u1eaft ngu\u1ed3n t\u1eeb m\u1ed9t m\u1eaft x\u00edch c\u1ee5 th\u1ec3 trong chu\u1ed7i: \u0111\u01b0\u1eddng truy\u1ec1n nh\u00e0 m\u1ea1ng, b\u1ed9 nh\u1edb \u0111\u1ec7m thi\u1ebft b\u1ecb, ho\u1eb7c s\u1ef1 l\u1ec7ch pha c\u1ee7a t\u00ean mi\u1ec1n g\u1ed1c. Quy tr\u00ecnh s\u1eeda l\u1ed7i th\u01b0\u1eddng g\u1eb7p khi kh\u00f4ng v\u00e0o \u0111\u01b0\u1ee3c web nh\u00e0 c\u00e1i uy t\u00edn kh\u00f4ng n\u1eb1m \u1edf vi\u1ec7c b\u1ea5m th\u1eed m\u00f9, m\u00e0 n\u1eb1m \u1edf kh\u1ea3 n\u0103ng c\u00f4 l\u1eadp nguy\u00ean nh\u00e2n v\u00e0 \u00e1p d\u1ee5ng gi\u1ea3i ph\u00e1p t\u01b0\u01a1ng \u1ee9ng theo c\u00e2y quy\u1ebft \u0111\u1ecbnh. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 l\u1ed9 tr\u00ecnh ki\u1ec3m so\u00e1t r\u1ee7i ro, x\u00e1c minh danh t\u00ednh h\u1ec7 th\u1ed1ng v\u00e0 kh\u00f4i ph\u1ee5c quy\u1ec1n truy c\u1eadp an to\u00e0n.<\/p>\n

C\u00e2y nguy\u00ean nh\u00e2n d\u1eabn \u0111\u1ebfn tr\u1ea1ng th\u00e1i \u201ckh\u00f4ng th\u1ec3 truy c\u1eadp\u201d<\/h2>\n

Khi \u0111\u1ed1i m\u1eb7t v\u1edbi m\u00e0n h\u00ecnh l\u1ed7i, h\u00e3y t\u01b0\u1edfng t\u01b0\u1ee3ng b\u1ea1n \u0111ang \u0111i ng\u01b0\u1ee3c l\u00ean m\u1ed9t c\u00e2y nguy\u00ean nh\u00e2n t\u1eeb ng\u1ecdn \u0111\u1ebfn g\u1ed1c. Ba nh\u00e1nh ch\u00ednh th\u01b0\u1eddng xu\u1ea5t hi\u1ec7n song song ho\u1eb7c ch\u1ed3ng ch\u00e9o l\u00ean nhau:<\/p>\n

Nh\u00e1nh 1: Ch\u1eb7n t\u1eeb ph\u00eda h\u1ea1 t\u1ea7ng m\u1ea1ng ho\u1eb7c ISP<\/h3>\n

Nhi\u1ec1u nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 Internet \u00e1p d\u1ee5ng b\u1ed9 l\u1ecdc n\u1ed9i dung ho\u1eb7c l\u1ec7nh t\u1ea1m ng\u01b0ng l\u01b0u l\u01b0\u1ee3ng theo quy \u0111\u1ecbnh \u0111\u1ecba ph\u01b0\u01a1ng. Khi l\u1ec7nh n\u00e0y k\u00edch ho\u1ea1t, b\u1ea1n v\u1eabn th\u1ea5y k\u1ebft n\u1ed1i Wi-Fi ho\u1eb7c 4G ho\u1ea1t \u0111\u1ed9ng b\u00ecnh th\u01b0\u1eddng, th\u1ef1c t\u1ebf th\u00ec g\u00f3i tin b\u1ecb ch\u1eb7n \u1edf t\u1ea7ng gateway v\u00e0 kh\u00f4ng bao gi\u1edd t\u1edbi \u0111\u01b0\u1ee3c m\u00e1y ch\u1ee7 \u0111\u00edch. \u0110\u1eb7c \u0111i\u1ec3m nh\u1eadn d\u1ea1ng l\u00e0 l\u1ed7i xu\u1ea5t hi\u1ec7n \u0111\u1ed3ng lo\u1ea1t tr\u00ean nhi\u1ec1u thi\u1ebft b\u1ecb kh\u00e1c nhau c\u00f9ng m\u1ed9t m\u1ea1ng, ho\u1eb7c chuy\u1ec3n sang m\u1ea1ng di \u0111\u1ed9ng kh\u00e1c ngay l\u1eadp t\u1ee9c th\u00ec truy c\u1eadp \u0111\u01b0\u1ee3c tr\u1edf l\u1ea1i. \u0110\u00e2y kh\u00f4ng ph\u1ea3i l\u1ed7i h\u1ec7 th\u1ed1ng \u0111\u00edch, m\u00e0 l\u00e0 r\u00e0o c\u1ea3n trung gian.<\/p>\n

Nh\u00e1nh 2: Xung \u0111\u1ed9t d\u1eef li\u1ec7u tr\u00ecnh duy\u1ec7t v\u00e0 phi\u00ean \u0111\u0103ng nh\u1eadp<\/h3>\n

Cache v\u00e0 cookie t\u00edch t\u1ee5 l\u00e2u ng\u00e0y t\u1ea1o ra b\u1ea3n ghi session c\u0169. Khi n\u1ec1n t\u1ea3ng c\u1eadp nh\u1eadt m\u00e3 x\u00e1c th\u1ef1c ho\u1eb7c thay \u0111\u1ed5i ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt, tr\u00ecnh duy\u1ec7t v\u1eabn c\u1ed1 g\u1eafng g\u1eedi phi\u00ean b\u1ea3n c\u0169 v\u1ec1 m\u00e1y ch\u1ee7, d\u1eabn \u0111\u1ebfn ph\u1ea3n h\u1ed3i Timeout, 408 Request Timeout ho\u1eb7c b\u1eaft bu\u1ed9c reset password l\u1eb7p v\u00f4 t\u1eadn. Nh\u00e1nh n\u00e0y r\u1ea5t d\u1ec5 x\u1ea3y ra n\u1ebfu b\u1ea1n th\u01b0\u1eddng xuy\u00ean l\u01b0\u1edbt web tr\u00ean nhi\u1ec1u tab, t\u1eaft tr\u00ecnh duy\u1ec7t \u0111\u1ed9t ng\u1ed9t khi \u0111ang trong qu\u00e1 tr\u00ecnh x\u1eed l\u00fd giao d\u1ecbch, ho\u1eb7c v\u00f4 t\u00ecnh k\u00edch ho\u1ea1t c\u00e1c ti\u1ec7n \u00edch ch\u1eb7n script l\u00e0m gi\u00e1n \u0111o\u1ea1n qu\u00e1 tr\u00ecnh t\u1ea3i t\u1eadp tin JavaScript quan tr\u1ecdng.<\/p>\n

Nh\u00e1nh 3: L\u1ec7ch pha t\u00ean mi\u1ec1n ph\u1ee5 ho\u1eb7c ch\u1ee9ng ch\u1ec9 SSL<\/h3>\n

M\u1ecdi n\u1ec1n t\u1ea3ng l\u1edbn v\u1eadn h\u00e0nh h\u1ec7 sinh th\u00e1i subdomain \u0111\u1ec3 c\u00e2n b\u1eb1ng t\u1ea3i v\u00e0 ph\u00e2n t\u00e1n r\u1ee7i ro. Khi m\u1ed9t node ph\u1ee5 h\u1ebft h\u1ea1n gia h\u1ea1n, b\u1ecb chuy\u1ec3n nh\u01b0\u1ee3ng th\u01b0\u01a1ng m\u1ea1i ho\u1eb7c m\u1ea5t c\u1ea5u h\u00ecnh DNS, b\u1ea3n ghi c\u0169 v\u1eabn c\u00f2n s\u1ed1ng trong b\u1ed9 nh\u1edb cache c\u1ee7a nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 DNS to\u00e0n c\u1ea7u. Ng\u01b0\u1eddi d\u00f9ng s\u1ebd th\u1ea5y c\u1ea3nh b\u00e1o \u201cConnection was interrupted\u201d, \u201cThis site can\u2019t provide a secure connection\u201d ho\u1eb7c l\u1ed7i 403 Forbidden. Nh\u00e1nh n\u00e0y nguy hi\u1ec3m nh\u1ea5t n\u1ebfu k\u00e8m theo s\u1ef1 tinh vi trong vi\u1ec7c gi\u1ea3 m\u1ea1o ch\u00ednh t\u1ea3 t\u00ean mi\u1ec1n, bi\u1ebfn ng\u01b0\u1eddi d\u00f9ng l\u1ea1c v\u00e0o trang phising.<\/p>\n

\"topH\u00ecnh minh ho\u1ea1: top 10 nh\u00e0 c\u00e1i uy t\u00edn<\/a><\/em><\/div>\n

X\u00e1c minh danh t\u00ednh t\u00ean mi\u1ec1n th\u1ef1c t\u1ebf \u0111\u1ec3 tr\u00e1nh sa v\u00e0o b\u1eaby gi\u1ea3 m\u1ea1o<\/h2>\n

Tr\u01b0\u1edbc khi ch\u1ea1m v\u00e0o b\u1ea5t k\u1ef3 c\u00e0i \u0111\u1eb7t n\u00e0o, b\u01b0\u1edbc ph\u00f2ng th\u1ee7 s\u1ed1 quan tr\u1ecdng nh\u1ea5t l\u00e0 ki\u1ec3m ch\u1ee9ng \u0111\u1ecba ch\u1ec9 g\u1ed1c. Sai s\u00f3t nh\u1ecf nh\u1ea5t \u1edf ph\u1ea7n g\u00f5 ph\u00edm ho\u1eb7c s\u1eed d\u1ee5ng li\u00ean k\u1ebft sao ch\u00e9p t\u1eeb nh\u00f3m chat kh\u00f4ng r\u00f5 ngu\u1ed3n g\u1ed1c c\u00f3 th\u1ec3 \u0111\u01b0a b\u1ea1n \u0111\u1ebfn trang trung gian thu th\u1eadp th\u00f4ng tin nh\u1ea1y c\u1ea3m. C\u00f4ng c\u1ee5 ki\u1ec3m tra nhanh nh\u1ea5t l\u00e0 quan s\u00e1t k\u1ef9 thanh URL. T\u00ean mi\u1ec1n ch\u00ednh ch\u1ee7 lu\u00f4n tu\u00e2n th\u1ee7 c\u00fa ph\u00e1p chu\u1ea9n, kh\u00f4ng nh\u1ed3i nh\u00e9t chu\u1ed7i k\u00fd t\u1ef1 v\u00f4 ngh\u0129a ho\u1eb7c k\u00fd t\u1ef1 \u0111\u1eb7c bi\u1ec7t th\u1eeba th\u00e3i. Khi nh\u1ea5p v\u00e0o \u1ed5 kh\u00f3a b\u1ea3o m\u1eadt, h\u00e3y ki\u1ec3m tra m\u1ee5c Chi ti\u1ebft ch\u1ee9ng ch\u1ec9: t\u00ean doanh nghi\u1ec7p s\u1edf h\u1eefu, ng\u00e0y ph\u00e1t h\u00e0nh v\u00e0 ng\u00e0y h\u1ebft h\u1ea1n ph\u1ea3i r\u00f5 r\u00e0ng, kh\u00f4ng b\u1ecb m\u1edd ho\u1eb7c hi\u1ec3n th\u1ecb \u201cUnknown Issuer\u201d. T\u00ean mi\u1ec1n th\u1ef1c t\u1ebf kh\u00f4ng bao gi\u1edd y\u00eau c\u1ea7u b\u1ea1n nh\u1eadp \u0111\u1ea7y \u0111\u1ee7 th\u00f4ng tin th\u1ebb ATM, CVV hay m\u00e3 OTP ch\u1ec9 \u0111\u1ec3 \u201cm\u1edf kh\u00f3a giao di\u1ec7n\u201d ho\u1eb7c \u201cx\u00e1c minh danh t\u00ednh kh\u1ea9n c\u1ea5p\u201d.<\/p>\n

N\u1ebfu b\u1ea1n th\u01b0\u1eddng xuy\u00ean nghi\u00ean c\u1ee9u v\u1ec1 top 10 nh\u00e0 c\u00e1i uy t\u00edn \u0111\u1ec3 \u0111\u1ed1i chi\u1ebfu ti\u00eau chu\u1ea9n v\u1eadn h\u00e0nh, b\u1ea1n s\u1ebd nh\u1eadn th\u1ea5y c\u00e1c n\u1ec1n t\u1ea3ng chuy\u00ean nghi\u1ec7p lu\u00f4n c\u00f3 l\u1ecbch s\u1eed WHOIS minh b\u1ea1ch, c\u1ea5u tr\u00fac subdomain \u1ed5n \u0111\u1ecbnh v\u00e0 c\u01a1 ch\u1ebf CDN b\u1ea3o v\u1ec7 DDoS r\u00f5 r\u00e0ng. M\u1ed9t v\u00ed d\u1ee5 tham kh\u1ea3o k\u1ef9 thu\u1eadt l\u00e0 Riyadh.dev, th\u01b0\u1eddng \u0111\u01b0\u1ee3c d\u00f9ng l\u00e0m t\u00e0i li\u1ec7u so s\u00e1nh v\u1ec1 t\u1ed1c \u0111\u1ed9 ph\u1ea3n h\u1ed3i v\u00e0 quy tr\u00ecnh b\u1ea3o m\u1eadt. \u0110i\u1ec1u c\u1ed1t l\u00f5i l\u00e0 phi\u00ean b\u1ea3n b\u1ea1n truy c\u1eadp ph\u1ea3i tr\u00f9ng kh\u1edbp tuy\u1ec7t \u0111\u1ed1i v\u1edbi \u0111\u1ecba ch\u1ec9 g\u1ed1c, kh\u00f4ng th\u00eam b\u1edbt k\u00fd t\u1ef1 con, kh\u00f4ng s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 r\u00fat g\u1ecdn link b\u00ed \u1ea9n. Vi\u1ec7c nh\u1ea7m l\u1eabn subdomain ph\u1ee5 th\u00e0nh domain ch\u00ednh ho\u1eb7c truy c\u1eadp qua proxy kh\u00f4ng x\u00e1c th\u1ef1c l\u00e0 nguy\u00ean nh\u00e2n h\u00e0ng \u0111\u1ea7u khi\u1ebfn ng\u01b0\u1eddi d\u00f9ng r\u01a1i v\u00e0o b\u1eaby gi\u1ea3 m\u1ea1o v\u00e0 m\u1ea5t ki\u1ec3m so\u00e1t t\u00e0i kho\u1ea3n.<\/p>\n

\"top<\/div>\n

G\u1ee1 r\u1ed1i \u0111\u01b0\u1eddng truy\u1ec1n v\u00e0 thi\u1ebft l\u1eadp l\u1ea1i m\u00f4i tr\u01b0\u1eddng duy\u1ec7t web<\/h2>\n

Sau khi kh\u1eb3ng \u0111\u1ecbnh t\u00ean mi\u1ec1n l\u00e0 ch\u00ednh ch\u1ee7, ti\u1ebfn h\u00e0nh kh\u1eed tr\u00f9ng h\u1ec7 th\u1ed1ng theo tr\u00ecnh t\u1ef1 \u01b0u ti\u00ean. Thao t\u00e1c \u0111\u1ea7u ti\u00ean l\u00e0 x\u00f3a d\u1eef li\u1ec7u duy\u1ec7t web ch\u1ecdn l\u1ecdc. Ch\u1ec9 gi\u1eef l\u1ea1i m\u1eadt kh\u1ea9u \u0111\u01b0\u1ee3c l\u01b0u v\u00e0 danh s\u00e1ch y\u00eau th\u00edch, b\u1ecf qua to\u00e0n b\u1ed9 cache, cookie, d\u1eef li\u1ec7u form t\u1ef1 \u0111\u1ed9ng \u0111i\u1ec1n v\u00e0 file t\u1ea3i xu\u1ed1ng t\u1ea1m th\u1eddi. Ti\u1ebfp theo, chuy\u1ec3n sang s\u1eed d\u1ee5ng ch\u1ebf \u0111\u1ed9 \u1ea9n danh (Incognito\/Private). Ch\u1ebf \u0111\u1ed9 n\u00e0y lo\u1ea1i tr\u1eeb ho\u00e0n to\u00e0n \u1ea3nh h\u01b0\u1edfng c\u1ee7a ti\u1ec7n \u00edch m\u1edf r\u1ed9ng nh\u01b0 AdBlocker, Script Blocker, Clean Master ho\u1eb7c plugin VPN \u0111\u1ed9c h\u1ea1i, gi\u00fap b\u1ea1n truy c\u1eadp d\u01b0\u1edbi m\u1ed9t m\u00f4i tr\u01b0\u1eddng s\u1ea1ch ho\u00e0n to\u00e0n. N\u1ebfu v\u1eabn kh\u00f4ng c\u1ea3i thi\u1ec7n, h\u00e3y thay \u0111\u1ed5i m\u00e1y ch\u1ee7 DNS th\u1ee7 c\u00f4ng. Chuy\u1ec3n t\u1eeb DNS m\u1eb7c \u0111\u1ecbnh c\u1ee7a nh\u00e0 m\u1ea1ng sang c\u00e1c resolver c\u00f4ng c\u1ed9ng \u1ed5n \u0111\u1ecbnh nh\u01b0 Cloudflare (1.1.1.1) ho\u1eb7c Google (8.8.8.8). Thao t\u00e1c n\u00e0y bypass \u0111\u01b0\u1ee3c c\u00e1c n\u00fat th\u1eaft \u0111\u1ecbnh tuy\u1ebfn n\u1ed9i b\u1ed9 m\u00e0 kh\u00f4ng l\u00e0m thay \u0111\u1ed5i IP g\u1ed1c c\u1ee7a thi\u1ebft b\u1ecb, gi\u00fap g\u00f3i tin t\u1edbi \u0111\u00fang m\u00e1y ch\u1ee7 \u0111\u00edch.<\/p>\n

V\u1edbi thi\u1ebft b\u1ecb di \u0111\u1ed9ng, h\u00e3y t\u1eaft Wi-Fi v\u00e0 chuy\u1ec3n sang 4G\/5G \u0111\u1ec3 ki\u1ec3m tra xem l\u1ed7i c\u00f3 thu\u1ed9c v\u1ec1 router c\u1ee5c b\u1ed9 hay m\u1ea1ng di\u1ec7n r\u1ed9ng. Ng\u01b0\u1ee3c l\u1ea1i, tr\u00ean m\u00e1y t\u00ednh b\u00e0n, kh\u1edfi \u0111\u1ed9ng l\u1ea1i modem v\u00e0 \u0111\u1ee3i \u0111\u00e8n t\u00edn hi\u1ec7u PON, LAN \u0111\u1ed3ng b\u1ed9 ho\u00e0n to\u00e0n tr\u01b0\u1edbc khi truy c\u1eadp l\u1ea1i. M\u1ed9t b\u01b0\u1edbc th\u01b0\u1eddng b\u1ecb b\u1ecf qua nh\u01b0ng mang t\u00ednh s\u1ed1ng c\u00f2n: ki\u1ec3m tra \u0111\u1ed3ng h\u1ed3 h\u1ec7 th\u1ed1ng. N\u1ebfu th\u1eddi gian m\u00e1y t\u00ednh ho\u1eb7c \u0111i\u1ec7n tho\u1ea1i l\u1ec7ch h\u01a1n v\u00e0i ph\u00fat so v\u1edbi chu\u1ea9n UTC, ch\u1ee9ng ch\u1ec9 TLS s\u1ebd b\u1ecb tr\u00ecnh duy\u1ec7t b\u00e1c b\u1ecf ngay l\u1eadp t\u1ee9c, coi nh\u01b0 m\u1ed1i \u0111e d\u1ecda b\u1ea3o m\u1eadt nghi\u00eam tr\u1ecdng. Sau khi \u0111\u1ed3ng b\u1ed9 gi\u1edd v\u00e0 g\u1ee1 r\u1ed1i xong, k\u1ebft n\u1ed1i tr\u1edf l\u1ea1i \u1ed5n \u0111\u1ecbnh, b\u1ea1n c\u00f3 th\u1ec3 b\u1eaft \u0111\u1ea7u ki\u1ec3m tra b\u1ea3ng t\u1ef7 l\u1ec7 c\u01b0\u1ee3c ho\u1eb7c soi k\u00e8o nh\u00e0 c\u00e1i<\/a> \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o t\u00ednh n\u0103ng c\u1ed1t l\u00f5i \u0111ang v\u1eadn h\u00e0nh \u0111\u00fang quy tr\u00ecnh, kh\u00f4ng c\u00f2n b\u1ecb ch\u1eb7n b\u1edfi layer b\u1ea3o m\u1eadt gi\u1ea3.<\/p>\n

\"top<\/div>\n

K\u1ebft n\u1ed1i v\u1edbi b\u1ed9 ph\u1eadn h\u1ed7 tr\u1ee3 th\u00f4ng qua k\u00eanh an to\u00e0n<\/h2>\n

Ch\u1ec9 li\u00ean h\u1ec7 b\u1ed9 ph\u1eadn ch\u0103m s\u00f3c kh\u00e1ch h\u00e0ng khi b\u1ea1n \u0111\u00e3 ch\u1eafc ch\u1eafn 100% m\u00ecnh \u0111ang \u0111\u1ee9ng tr\u00ean t\u00ean mi\u1ec1n ch\u00ednh ch\u1ee7 v\u00e0 m\u00f4i tr\u01b0\u1eddng duy\u1ec7t web \u0111\u00e3 \u0111\u01b0\u1ee3c kh\u1eed tr\u00f9ng. M\u1ecdi k\u00eanh tr\u1ef1c tuy\u1ebfn ch\u00ednh th\u1ee9c \u0111\u1ec1u \u0111\u01b0\u1ee3c ni\u00eam y\u1ebft r\u00f5 r\u00e0ng trong ch\u00e2n trang, m\u1ee5c Tr\u1ee3 gi\u00fap ho\u1eb7c menu b\u00ean ph\u1ea3i, kh\u00f4ng bao gi\u1edd g\u1eedi link \u0111\u0103ng nh\u1eadp qua tin nh\u1eafn r\u00e1c email, cu\u1ed9c g\u1ecdi nh\u00e1y ng\u1eabu nhi\u00ean ho\u1eb7c h\u1ed9p tho\u1ea1i popup chen ngang. Quy tr\u00ecnh an to\u00e0n nh\u1ea5t l\u00e0 \u0111\u0103ng nh\u1eadp v\u00e0o t\u00e0i kho\u1ea3n ng\u01b0\u1eddi ch\u01a1i, di chuy\u1ec3n \u0111\u1ebfn m\u1ee5c H\u1ed3 s\u01a1, t\u00ecm m\u1ee5c K\u00eanh h\u1ed7 tr\u1ee3 ch\u00ednh th\u1ee9c v\u00e0 s\u1eed d\u1ee5ng ch\u1ee9c n\u0103ng chat tr\u1ef1c ti\u1ebfp ho\u1eb7c g\u1eedi ticket c\u00f3 x\u00e1c th\u1ef1c 2FA. Tr\u00e1nh xa c\u00e1c s\u1ed1 hotline d\u00e1n nh\u00e3n \u201chotline kh\u1ea9n c\u1ea5p\u201d, \u201ct\u1ed5ng \u0111\u00e0i VIP\u201d t\u00ecm th\u1ea5y qua c\u00f4ng c\u1ee5 t\u00ecm ki\u1ebfm t\u1ef1 nhi\u00ean, v\u00ec \u0111\u00e2y th\u01b0\u1eddng l\u00e0 h\u00ecnh th\u1ee9c m\u00f4 ph\u1ecfng nh\u1eb1m thu th\u1eadp th\u00f4ng tin x\u00e1c th\u1ef1c.<\/p>\n

Trong qu\u00e1 tr\u00ecnh trao \u0111\u1ed5i, ch\u1ec9 cung c\u1ea5p m\u00e3 giao d\u1ecbch, s\u1ed1 t\u00e0i kho\u1ea3n ho\u1eb7c ID ng\u01b0\u1eddi ch\u01a1i, tuy\u1ec7t \u0111\u1ed1i kh\u00f4ng chia s\u1ebb m\u1eadt kh\u1ea9u \u0111\u0103ng nh\u1eadp, m\u00e3 OTP hay \u1ea3nh ch\u1ee5p th\u1ebb ng\u00e2n h\u00e0ng d\u00f9 \u0111\u1ed1i ph\u01b0\u01a1ng x\u01b0ng danh nh\u00e2n vi\u00ean c\u1ea5p cao, tr\u01b0\u1edfng b\u1ed9 ph\u1eadn k\u1ef9 thu\u1eadt hay l\u00e3nh \u0111\u1ea1o c\u00f4ng ty. Lu\u00f4n ghi ch\u00e9p l\u1ea1i th\u1eddi gian li\u00ean h\u1ec7, t\u00ean nh\u00e2n vi\u00ean v\u00e0 m\u00e3 ticket \u0111\u1ec3 \u0111\u1ed1i chi\u1ebfu l\u1ea1i n\u1ebfu ph\u00e1t hi\u1ec7n b\u1ea5t th\u01b0\u1eddng. K\u1ef9 thu\u1eadt an to\u00e0n s\u1ed1 kh\u00f4ng ch\u1ec9 n\u1eb1m \u1edf kh\u1ea3 n\u0103ng truy c\u1eadp, m\u00e0 n\u1eb1m \u1edf k\u1ef7 lu\u1eadt gi\u1eef k\u00edn th\u00f4ng tin nh\u1ea1y c\u1ea3m. Tr\u00e1ch nhi\u1ec7m qu\u1ea3n l\u00fd v\u1ed1n, gi\u1edbi h\u1ea1n ng\u00e2n s\u00e1ch v\u00e0 \u00fd th\u1ee9c tham gia c\u00f3 ch\u1eebng m\u1ef1c l\u00e0 n\u1ec1n t\u1ea3ng duy tr\u00ec tr\u1ea3i nghi\u1ec7m l\u00e2u d\u00e0i, gi\u00fap b\u1ea1n tr\u00e1nh kh\u1ecfi nh\u1eefng r\u1ee7i ro \u0111\u00e1ng ti\u1ebfc do l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt ho\u1eb7c l\u1eeba \u0111\u1ea3o \u1ea3o.<\/p>\n

\"top<\/div>\n

Tr\u1ea3 l\u1eddi nh\u1eefng c\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p v\u1ec1 kh\u1ea3 n\u0103ng truy c\u1eadp<\/h2>\n

1. L\u00e0m sao ph\u00e2n bi\u1ec7t r\u00f5 trang b\u1ecb ch\u1eb7n b\u1edfi ISP hay do t\u00ean mi\u1ec1n l\u1ed7i?<\/h3>\n

H\u00e3y d\u00f9ng t\u00ednh n\u0103ng Ping ho\u1eb7c Traceroute tr\u00ean m\u00e1y t\u00ednh ho\u1eb7c \u1ee9ng d\u1ee5ng m\u1ea1ng tr\u00ean \u0111i\u1ec7n tho\u1ea1i. N\u1ebfu g\u00f3i tin d\u1eebng l\u1ea1i \u1edf router c\u1ee7a nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 internet, \u0111\u00f3 l\u00e0 ch\u1eb7n h\u1ea1 t\u1ea7ng. N\u1ebfu g\u00f3i tin \u0111\u1ebfn \u0111\u00edch nh\u01b0ng nh\u1eadn ph\u1ea3n h\u1ed3i \u201cDNS_PROBE_FINISHED_NXDOMAIN\u201d ho\u1eb7c \u201cSSL_ERROR_REPORTED_ANCHOR_UNTRUSTED\u201d, \u0111\u00f3 l\u00e0 l\u1ed7i c\u1ea5u h\u00ecnh t\u00ean mi\u1ec1n ho\u1eb7c ch\u1ee9ng ch\u1ec9.<\/p>\n

2. Vi\u1ec7c tr\u00ecnh duy\u1ec7t t\u1ef1 \u0111\u1ed9ng l\u00e0m s\u1ea1ch d\u1eef li\u1ec7u m\u1ed7i l\u1ea7n \u0111\u00f3ng m\u00e1y c\u00f3 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn \u0111\u0103ng nh\u1eadp kh\u00f4ng?<\/h3>\n

Kh\u00f4ng \u1ea3nh h\u01b0\u1edfng x\u1ea5u, th\u1eadm ch\u00ed t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt. Tuy nhi\u00ean, n\u1ebfu n\u1ec1n t\u1ea3ng y\u00eau c\u1ea7u gi\u1eef phi\u00ean \u0111\u0103ng nh\u1eadp d\u00e0i h\u1ea1n, b\u1ea1n c\u1ea7n ch\u1ee7 \u0111\u1ed9ng chuy\u1ec3n c\u00e0i n\u0103ng \u201cL\u01b0u cookie v\u00e0 d\u1eef li\u1ec7u trang\u201d sang t\u00f9y ch\u1ecdn \u201cKhi tr\u00ecnh duy\u1ec7t ch\u1ea1y\u201d ho\u1eb7c \u201cKh\u00f4ng bao gi\u1edd x\u00f3a\u201d \u0111\u1ec3 tr\u00e1nh b\u1ecb \u0111\u1ea9y v\u1ec1 m\u00e0n h\u00ecnh \u0111\u0103ng nh\u1eadp l\u1eb7p.<\/p>\n

3. T\u1ea1i sao ph\u1ea3i \u0111\u1ed3ng b\u1ed9 gi\u1edd h\u1ec7 th\u1ed1ng tr\u01b0\u1edbc khi truy c\u1eadp?<\/h3>\n

Ch\u1ee9ng ch\u1ec9 TLS ho\u1ea1t \u0111\u1ed9ng d\u1ef1a tr\u00ean m\u1ed1c th\u1eddi gian ch\u00ednh x\u00e1c. M\u00e1y t\u00ednh l\u1ec7ch gi\u1edd d\u00f9 ch\u1ec9 5 ph\u00fat c\u0169ng khi\u1ebfn tr\u00ecnh duy\u1ec7t coi ch\u1ee9ng ch\u1ec9 l\u00e0 \u0111\u00e3 h\u1ebft h\u1ea1n ho\u1eb7c ch\u01b0a c\u00f3 hi\u1ec7u l\u1ef1c, d\u1eabn \u0111\u1ebfn l\u1ed7i \u201cCertificate Date Invalid\u201d v\u00e0 ch\u1eb7n to\u00e0n b\u1ed9 k\u1ebft n\u1ed1i.<\/p>\n

4. C\u00f3 n\u00ean s\u1eed d\u1ee5ng proxy mi\u1ec5n ph\u00ed ho\u1eb7c d\u1ecbch v\u1ee5 v\u01b0\u1ee3t ch\u1eb7n kh\u00f4ng?<\/h3>\n

Tuy\u1ec7t \u0111\u1ed1i tr\u00e1nh. Proxy mi\u1ec5n ph\u00ed kh\u00f4ng m\u00e3 h\u00f3a traffic nghi\u00eam ng\u1eb7t, th\u01b0\u1eddng ch\u00e8n advertisement, record log truy c\u1eadp v\u00e0 c\u00f3 th\u1ec3 c\u1eaft ngang qu\u00e1 tr\u00ecnh \u0111\u0103ng nh\u1eadp \u0111\u1ec3 steal session. Ch\u1ec9 d\u00f9ng VPN c\u00f3 ch\u1ee9ng ch\u1ec9 \u00e2m m\u01b0u zero-knowledge, kh\u00f4ng gi\u1eef log, khi th\u1ef1c s\u1ef1 c\u1ea7n thi\u1ebft v\u00e0 \u0111\u00e3 ki\u1ec3m tra k\u1ef9 rating b\u1ea3o m\u1eadt.<\/p>\n

5. Ph\u1ea3i l\u00e0m g\u00ec n\u1ebfu nghi ng\u1edd t\u00e0i kho\u1ea3n b\u1ecb \u0111\u00e1nh c\u1eafp do truy c\u1eadp nh\u1ea7m link gi\u1ea3?<\/h3>\n

Ng\u1eaft k\u1ebft n\u1ed1i ngay, qu\u00e9t thi\u1ebft b\u1ecb b\u1eb1ng c\u00f4ng c\u1ee5 di\u1ec7t virus, \u0111\u1ed5i m\u1eadt kh\u1ea9u t\u00e0i kho\u1ea3n \u0111\u0103ng nh\u1eadp v\u00e0 m\u1eadt kh\u1ea9u email li\u00ean k\u1ebft. K\u00edch ho\u1ea1t 2FA b\u1eaft bu\u1ed9c, ki\u1ec3m tra l\u1ecbch s\u1eed \u0111\u0103ng nh\u1eadp g\u1ea7n nh\u1ea5t, b\u00e1o c\u00e1o phishing cho nh\u00e0 cung c\u1ea5p t\u00ean mi\u1ec1n v\u00e0 kh\u00f4ng th\u1ef1c hi\u1ec7n giao d\u1ecbch n\u00e0o cho \u0111\u1ebfn khi x\u00e1c minh l\u1ea1i to\u00e0n b\u1ed9.<\/p>\n

Kho\u1ea3ng c\u00e1ch gi\u1eefa c\u00e1c nh\u00f3m ng\u01b0\u1eddi d\u00f9ng v\u00e0 gi\u1ea3i ph\u00e1p t\u1ed1i \u01b0u<\/h2>\n

Y\u00eau c\u1ea7u truy c\u1eadp an to\u00e0n kh\u00e1c nhau t\u00f9y m\u1ee9c \u0111\u1ed9 am hi\u1ec3u v\u00e0 t\u1ea7n su\u1ea5t tham gia. M\u1ed7i nh\u00f3m n\u00ean x\u00e2y d\u1ef1ng th\u00f3i quen ki\u1ec3m so\u00e1t r\u1ee7i ro ri\u00eang bi\u1ec7t \u0111\u1ec3 duy tr\u00ec tr\u1ea3i nghi\u1ec7m b\u1ec1n v\u1eefng.<\/p>\n

Nh\u00f3m ng\u01b0\u1eddi d\u00f9ng m\u1edbi ho\u1eb7c tham gia ng\u1eabu nhi\u00ean: \u01afu ti\u00ean ki\u1ec3m tra k\u1ef9 URL tr\u01b0\u1edbc m\u1ed7i l\u1ea7n click. Ch\u1ec9 s\u1eed d\u1ee5ng ch\u1ebf \u0111\u1ed9 \u1ea9n danh \u0111\u1ec3 tr\u00e1nh nhi\u1ec5m cache \u0111\u1ed9c. Kh\u00f4ng t\u1ea3i \u1ee9ng d\u1ee5ng r\u1eddi kh\u1ecfi c\u1eeda h\u00e0ng \u1ee9ng d\u1ee5ng ch\u00ednh th\u1ee9c ho\u1eb7c trang web t\u1ed5ng h\u1ee3p APK kh\u00f4ng r\u00f5 ngu\u1ed3n g\u1ed1c. Gi\u1eef tr\u00ecnh duy\u1ec7t \u1edf phi\u00ean b\u1ea3n m\u1edbi nh\u1ea5t \u0111\u1ec3 lu\u00f4n c\u00f3 b\u1ed9 nh\u1edb b\u1ea3o m\u1eadt TLS c\u1eadp nh\u1eadt. T\u1ea1m d\u1eebng giao d\u1ecbch n\u1ebfu th\u1ea5y b\u1ea5t k\u1ef3 c\u1ea3nh b\u00e1o l\u1ea1 n\u00e0o, ch\u1edd \u00edt nh\u1ea5t 24 ti\u1ebfng \u0111\u1ec3 \u0111\u1ed1i chi\u1ebfu th\u00f4ng tin tr\u01b0\u1edbc khi thao t\u00e1c ti\u1ebfp.<\/p>\n

Nh\u00f3m ng\u01b0\u1eddi d\u00f9ng th\u01b0\u1eddng xuy\u00ean ho\u1eb7c tham gia \u0111\u1ecbnh k\u1ef3: Duy tr\u00ec nh\u1eadt k\u00fd t\u00ean mi\u1ec1n ch\u00ednh th\u1ee9c, sao l\u01b0u screenshot ch\u00e2n trang m\u1ed7i khi c\u00f3 thay \u0111\u1ed5i c\u1ea5u h\u00ecnh. B\u1eadt 2FA b\u1eaft bu\u1ed9c cho m\u1ecdi t\u00e0i kho\u1ea3n li\u00ean quan. S\u1eed d\u1ee5ng DNS c\u1ed1 \u0111\u1ecbnh c\u00f3 ch\u1ea5t l\u01b0\u1ee3ng cao \u0111\u1ec3 gi\u1ea3m lag v\u00e0 tr\u00e1nh l\u1ed7i \u0111\u1ecbnh tuy\u1ebfn. T\u00e1ch bi\u1ec7t thi\u1ebft b\u1ecb: m\u1ed9t m\u00e1y ch\u1ec9 d\u00f9ng cho qu\u1ea3n l\u00fd t\u00e0i ch\u00ednh v\u00e0 \u0111\u0103ng nh\u1eadp n\u1eb7ng, m\u1ed9t m\u00e1y kh\u00e1c ch\u1ec9 d\u00f9ng cho l\u01b0\u1edbt web nh\u1eb9 v\u00e0 tham kh\u1ea3o n\u1ed9i dung. \u0110\u1ecbnh k\u1ef3 d\u1ecdn d\u1eb9p certificate store v\u00e0 update firmware router.<\/p>\n

Nh\u00f3m am hi\u1ec3u k\u1ef9 thu\u1eadt ho\u1eb7c ng\u01b0\u1eddi qu\u1ea3n l\u00fd h\u1ec7 th\u1ed1ng: T\u00f9y ch\u1ec9nh file hosts file c\u00f3 gi\u00e1m s\u00e1t ch\u1eb7t ch\u1ebd, ch\u1ec9 tr\u1ecf \u0111\u1ebfn IP \u0111\u00edch \u0111\u00e3 x\u00e1c th\u1ef1c qua dig ho\u1eb7c nslookup. D\u00f9ng c\u00f4ng c\u1ee5 traceroute v\u00e0 tcpdump \u0111\u1ec3 ph\u00e2n t\u00edch packet loss, x\u00e1c \u0111\u1ecbnh ch\u00ednh x\u00e1c node b\u1ecb ch\u1eb7n. Kh\u00f4ng d\u1ef1a v\u00e0o extension auto-login hay password manager c\u00f4ng khai, ch\u1ec9 d\u00f9ng vault m\u00e3 h\u00f3a c\u1ee5c b\u1ed9. Thi\u1ebft l\u1eadp rule firewall ch\u1eb7n outbound k\u1ebft n\u1ed1i \u0111\u1ebfn c\u00e1c subnet kh\u00f4ng thu\u1ed9c danh s\u00e1ch nh\u00e0 cung c\u1ea5p ch\u00ednh th\u1ee9c. \u00c1p d\u1ee5ng nguy\u00ean t\u1eafc zero-trust: kh\u00f4ng tin t\u01b0\u1edfng b\u1ea5t k\u1ef3 request n\u00e0o t\u1eeb client ch\u01b0a \u0111\u01b0\u1ee3c verify b\u1eb1ng token ng\u1eafn h\u1ea1n.<\/p>\n

Tr\u1ea3i nghi\u1ec7m s\u1ed1 l\u00e0nh m\u1ea1nh kh\u00f4ng \u0111\u01b0\u1ee3c x\u00e2y d\u1ef1ng tr\u00ean may r\u1ee7i hay t\u1ed1c \u0111\u1ed9, m\u00e0 tr\u00ean k\u1ef7 lu\u1eadt ki\u1ec3m so\u00e1t th\u00f4ng tin v\u00e0 th\u00f3i quen x\u00e1c minh \u0111a l\u1edbp. D\u00f9 b\u1ea1n thu\u1ed9c nh\u00f3m n\u00e0o, vi\u1ec7c n\u1eafm v\u1eefng quy tr\u00ecnh s\u1eeda l\u1ed7i th\u01b0\u1eddng g\u1eb7p khi kh\u00f4ng v\u00e0o \u0111\u01b0\u1ee3c web nh\u00e0 c\u00e1i uy t\u00edn ch\u00ednh l\u00e0 b\u01b0\u1edbc \u0111\u1ea7u ti\u00ean \u0111\u1ec3 b\u1ea3o v\u1ec7 t\u00e0i s\u1ea3n, d\u1eef li\u1ec7u c\u00e1 nh\u00e2n v\u00e0 quy\u1ec1n l\u1ee3i h\u1ee3p ph\u00e1p. Khi n\u1ec1n t\u1ea3ng k\u1ef9 thu\u1eadt v\u1eefng ch\u1eafc, m\u1ecdi thao t\u00e1c giao d\u1ecbch hay tham kh\u1ea3o n\u1ed9i dung s\u1ebd di\u1ec5n ra su\u00f4n s\u1ebb, minh b\u1ea1ch v\u00e0 ki\u1ec3m so\u00e1t \u0111\u01b0\u1ee3c r\u1ee7i ro.<\/p>\n

\"top<\/div>\n<\/article>","protected":false},"excerpt":{"rendered":"

S\u1eeda L\u1ed7i Th\u01b0\u1eddng G\u1eb7p Khi Kh\u00f4ng V\u00e0o \u0110\u01b0\u1ee3c Web nh\u00e0 c\u00e1i uy t\u00edn B\u1ea1n v\u1eeba m\u1edf tr\u00ecnh duy\u1ec7t tr\u00ean \u0111i\u1ec7n tho\u1ea1i \u0111\u1ec3 th\u1ef1c hi\u1ec7n thao t\u00e1c n\u1ea1p ti\u1ec1n nhanh nh\u1ea5t cho v\u00ed c\u00e1 nh\u00e2n, nh\u01b0ng m\u00e0n h\u00ecnh ch\u1ec9 hi\u1ec3n th\u1ecb d\u00f2ng ch\u1eef \u201cKh\u00f4ng th\u1ec3 k\u1ebft n\u1ed1i\u201d, l\u00e1 c\u1edd c\u1ea3nh b\u00e1o b\u1ea3o m\u1eadt m\u00e0u \u0111\u1ecf ho\u1eb7c tr\u1ea1ng th\u00e1i l\u00e0m tr\u00f2n m\u00e3i kh\u00f4ng d\u1ee9t. Thay v\u00ec ho\u1ea3ng lo\u1ea1n \u0111\u1ed5i m\u1eadt kh\u1ea9u li\u00ean t\u1ee5c ho\u1eb7c th\u1eed nh\u1ea5p v\u00e0o c\u00e1c li\u00ean k\u1ebft \u201cKh\u00f4i ph\u1ee5c t\u00e0i kho\u1ea3n\u201d xu\u1ea5t hi\u1ec7n ng\u1eabu nhi\u00ean trong k\u1ebft qu\u1ea3 t\u00ecm ki\u1ebfm, h\u00e0nh \u0111\u1ed9ng \u0111\u00fang \u0111\u1eafn nh\u1ea5t l\u00fac n\u00e0y l\u00e0 ng\u1eaft nh\u1ecbp, quay v\u1ec1 ph\u00e2n t\u00edch lu\u1ed3ng d\u1eef li\u1ec7u. Trong m\u00f4i tr\u01b0\u1eddng s\u1ed1, vi\u1ec7c m\u1ea5t kh\u1ea3 n\u0103ng truy c\u1eadp hi\u1ebfm khi l\u00e0 tai h\u1ecda ng\u1eabu nhi\u00ean. N\u00f3 lu\u00f4n b\u1eaft ngu\u1ed3n t\u1eeb m\u1ed9t m\u1eaft x\u00edch c\u1ee5 th\u1ec3 trong chu\u1ed7i: \u0111\u01b0\u1eddng truy\u1ec1n nh\u00e0 m\u1ea1ng, b\u1ed9 nh\u1edb \u0111\u1ec7m thi\u1ebft b\u1ecb, ho\u1eb7c s\u1ef1 l\u1ec7ch pha c\u1ee7a t\u00ean mi\u1ec1n g\u1ed1c. Quy tr\u00ecnh s\u1eeda l\u1ed7i th\u01b0\u1eddng g\u1eb7p khi kh\u00f4ng v\u00e0o \u0111\u01b0\u1ee3c web nh\u00e0 c\u00e1i uy t\u00edn kh\u00f4ng n\u1eb1m \u1edf vi\u1ec7c b\u1ea5m th\u1eed m\u00f9, m\u00e0 n\u1eb1m \u1edf kh\u1ea3 n\u0103ng c\u00f4 l\u1eadp nguy\u00ean nh\u00e2n v\u00e0 \u00e1p d\u1ee5ng gi\u1ea3i ph\u00e1p t\u01b0\u01a1ng \u1ee9ng theo c\u00e2y quy\u1ebft \u0111\u1ecbnh. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 l\u1ed9 tr\u00ecnh ki\u1ec3m so\u00e1t r\u1ee7i ro, x\u00e1c minh danh t\u00ednh h\u1ec7 th\u1ed1ng v\u00e0 kh\u00f4i ph\u1ee5c quy\u1ec1n truy c\u1eadp an to\u00e0n. C\u00e2y nguy\u00ean nh\u00e2n d\u1eabn \u0111\u1ebfn tr\u1ea1ng th\u00e1i \u201ckh\u00f4ng th\u1ec3 truy c\u1eadp\u201d Khi \u0111\u1ed1i m\u1eb7t v\u1edbi m\u00e0n h\u00ecnh l\u1ed7i, h\u00e3y t\u01b0\u1edfng t\u01b0\u1ee3ng b\u1ea1n \u0111ang \u0111i ng\u01b0\u1ee3c l\u00ean m\u1ed9t c\u00e2y nguy\u00ean nh\u00e2n t\u1eeb ng\u1ecdn \u0111\u1ebfn g\u1ed1c. Ba nh\u00e1nh ch\u00ednh th\u01b0\u1eddng xu\u1ea5t hi\u1ec7n song song ho\u1eb7c ch\u1ed3ng ch\u00e9o l\u00ean nhau: Nh\u00e1nh 1: Ch\u1eb7n t\u1eeb ph\u00eda h\u1ea1 t\u1ea7ng m\u1ea1ng ho\u1eb7c ISP Nhi\u1ec1u nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 Internet \u00e1p d\u1ee5ng b\u1ed9 l\u1ecdc n\u1ed9i dung ho\u1eb7c l\u1ec7nh t\u1ea1m ng\u01b0ng l\u01b0u l\u01b0\u1ee3ng theo quy \u0111\u1ecbnh \u0111\u1ecba ph\u01b0\u01a1ng. Khi l\u1ec7nh n\u00e0y k\u00edch ho\u1ea1t, b\u1ea1n v\u1eabn th\u1ea5y k\u1ebft n\u1ed1i Wi-Fi ho\u1eb7c 4G ho\u1ea1t \u0111\u1ed9ng b\u00ecnh th\u01b0\u1eddng, th\u1ef1c t\u1ebf th\u00ec g\u00f3i tin b\u1ecb ch\u1eb7n \u1edf t\u1ea7ng gateway v\u00e0 kh\u00f4ng bao gi\u1edd t\u1edbi \u0111\u01b0\u1ee3c m\u00e1y ch\u1ee7 \u0111\u00edch. \u0110\u1eb7c \u0111i\u1ec3m nh\u1eadn d\u1ea1ng l\u00e0 l\u1ed7i xu\u1ea5t hi\u1ec7n \u0111\u1ed3ng lo\u1ea1t tr\u00ean nhi\u1ec1u thi\u1ebft b\u1ecb kh\u00e1c nhau c\u00f9ng m\u1ed9t m\u1ea1ng, ho\u1eb7c chuy\u1ec3n sang m\u1ea1ng di \u0111\u1ed9ng kh\u00e1c ngay l\u1eadp t\u1ee9c th\u00ec truy c\u1eadp \u0111\u01b0\u1ee3c tr\u1edf l\u1ea1i. \u0110\u00e2y kh\u00f4ng ph\u1ea3i l\u1ed7i h\u1ec7 th\u1ed1ng \u0111\u00edch, m\u00e0 l\u00e0 r\u00e0o c\u1ea3n trung gian. Nh\u00e1nh 2: Xung \u0111\u1ed9t d\u1eef li\u1ec7u tr\u00ecnh duy\u1ec7t v\u00e0 phi\u00ean \u0111\u0103ng nh\u1eadp Cache v\u00e0 cookie t\u00edch t\u1ee5 l\u00e2u ng\u00e0y t\u1ea1o ra b\u1ea3n ghi session c\u0169. Khi n\u1ec1n t\u1ea3ng c\u1eadp nh\u1eadt m\u00e3 x\u00e1c th\u1ef1c ho\u1eb7c thay \u0111\u1ed5i ch\u00ednh s\u00e1ch b\u1ea3o m\u1eadt, tr\u00ecnh duy\u1ec7t v\u1eabn c\u1ed1 g\u1eafng g\u1eedi phi\u00ean b\u1ea3n c\u0169 v\u1ec1 m\u00e1y ch\u1ee7, d\u1eabn \u0111\u1ebfn ph\u1ea3n h\u1ed3i Timeout, 408 Request Timeout ho\u1eb7c b\u1eaft bu\u1ed9c reset password l\u1eb7p v\u00f4 t\u1eadn. Nh\u00e1nh n\u00e0y r\u1ea5t d\u1ec5 x\u1ea3y ra n\u1ebfu b\u1ea1n th\u01b0\u1eddng xuy\u00ean l\u01b0\u1edbt web tr\u00ean nhi\u1ec1u tab, t\u1eaft tr\u00ecnh duy\u1ec7t \u0111\u1ed9t ng\u1ed9t khi \u0111ang trong qu\u00e1 tr\u00ecnh x\u1eed l\u00fd giao d\u1ecbch, ho\u1eb7c v\u00f4 t\u00ecnh k\u00edch ho\u1ea1t c\u00e1c ti\u1ec7n \u00edch ch\u1eb7n script l\u00e0m gi\u00e1n \u0111o\u1ea1n qu\u00e1 tr\u00ecnh t\u1ea3i t\u1eadp tin JavaScript quan tr\u1ecdng. Nh\u00e1nh 3: L\u1ec7ch pha t\u00ean mi\u1ec1n ph\u1ee5 ho\u1eb7c ch\u1ee9ng ch\u1ec9 SSL M\u1ecdi n\u1ec1n t\u1ea3ng l\u1edbn v\u1eadn h\u00e0nh h\u1ec7 sinh th\u00e1i subdomain \u0111\u1ec3 c\u00e2n b\u1eb1ng t\u1ea3i v\u00e0 ph\u00e2n t\u00e1n r\u1ee7i ro. Khi m\u1ed9t node ph\u1ee5 h\u1ebft h\u1ea1n gia h\u1ea1n, b\u1ecb chuy\u1ec3n nh\u01b0\u1ee3ng th\u01b0\u01a1ng m\u1ea1i ho\u1eb7c m\u1ea5t c\u1ea5u h\u00ecnh DNS, b\u1ea3n ghi c\u0169 v\u1eabn c\u00f2n s\u1ed1ng trong b\u1ed9 nh\u1edb cache c\u1ee7a nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 DNS to\u00e0n c\u1ea7u. Ng\u01b0\u1eddi d\u00f9ng s\u1ebd th\u1ea5y c\u1ea3nh b\u00e1o \u201cConnection was interrupted\u201d, \u201cThis site can\u2019t provide a secure connection\u201d ho\u1eb7c l\u1ed7i 403 Forbidden. Nh\u00e1nh n\u00e0y nguy hi\u1ec3m nh\u1ea5t n\u1ebfu k\u00e8m theo s\u1ef1 tinh vi trong vi\u1ec7c gi\u1ea3 m\u1ea1o ch\u00ednh t\u1ea3 t\u00ean mi\u1ec1n, bi\u1ebfn ng\u01b0\u1eddi d\u00f9ng l\u1ea1c v\u00e0o trang phising. H\u00ecnh minh ho\u1ea1: top 10 nh\u00e0 c\u00e1i uy t\u00edn X\u00e1c minh danh t\u00ednh t\u00ean mi\u1ec1n th\u1ef1c t\u1ebf \u0111\u1ec3 tr\u00e1nh sa v\u00e0o b\u1eaby gi\u1ea3 m\u1ea1o Tr\u01b0\u1edbc khi ch\u1ea1m v\u00e0o b\u1ea5t k\u1ef3 c\u00e0i \u0111\u1eb7t n\u00e0o, b\u01b0\u1edbc ph\u00f2ng th\u1ee7 s\u1ed1 quan tr\u1ecdng nh\u1ea5t l\u00e0 ki\u1ec3m ch\u1ee9ng \u0111\u1ecba ch\u1ec9 g\u1ed1c. Sai s\u00f3t nh\u1ecf nh\u1ea5t \u1edf ph\u1ea7n g\u00f5 ph\u00edm ho\u1eb7c s\u1eed d\u1ee5ng li\u00ean k\u1ebft sao ch\u00e9p t\u1eeb nh\u00f3m chat kh\u00f4ng r\u00f5 ngu\u1ed3n g\u1ed1c c\u00f3 th\u1ec3 \u0111\u01b0a b\u1ea1n \u0111\u1ebfn trang trung gian thu th\u1eadp th\u00f4ng tin nh\u1ea1y c\u1ea3m. C\u00f4ng c\u1ee5 ki\u1ec3m tra nhanh nh\u1ea5t l\u00e0 quan s\u00e1t k\u1ef9 thanh URL. T\u00ean mi\u1ec1n ch\u00ednh ch\u1ee7 lu\u00f4n tu\u00e2n th\u1ee7 c\u00fa ph\u00e1p chu\u1ea9n, kh\u00f4ng nh\u1ed3i nh\u00e9t chu\u1ed7i k\u00fd t\u1ef1 v\u00f4 ngh\u0129a ho\u1eb7c k\u00fd t\u1ef1 \u0111\u1eb7c bi\u1ec7t th\u1eeba th\u00e3i. Khi nh\u1ea5p v\u00e0o \u1ed5 kh\u00f3a b\u1ea3o m\u1eadt, h\u00e3y ki\u1ec3m tra m\u1ee5c Chi ti\u1ebft ch\u1ee9ng ch\u1ec9: t\u00ean doanh nghi\u1ec7p s\u1edf h\u1eefu, ng\u00e0y ph\u00e1t h\u00e0nh v\u00e0 ng\u00e0y h\u1ebft h\u1ea1n ph\u1ea3i r\u00f5 r\u00e0ng, kh\u00f4ng b\u1ecb m\u1edd ho\u1eb7c hi\u1ec3n th\u1ecb \u201cUnknown Issuer\u201d. T\u00ean mi\u1ec1n th\u1ef1c t\u1ebf kh\u00f4ng bao gi\u1edd y\u00eau c\u1ea7u b\u1ea1n nh\u1eadp \u0111\u1ea7y \u0111\u1ee7 th\u00f4ng tin th\u1ebb ATM, CVV hay m\u00e3 OTP ch\u1ec9 \u0111\u1ec3 \u201cm\u1edf kh\u00f3a giao di\u1ec7n\u201d ho\u1eb7c \u201cx\u00e1c minh danh t\u00ednh kh\u1ea9n c\u1ea5p\u201d. N\u1ebfu b\u1ea1n th\u01b0\u1eddng xuy\u00ean nghi\u00ean c\u1ee9u v\u1ec1 top 10 nh\u00e0 c\u00e1i uy t\u00edn \u0111\u1ec3 \u0111\u1ed1i chi\u1ebfu ti\u00eau chu\u1ea9n v\u1eadn h\u00e0nh, b\u1ea1n s\u1ebd nh\u1eadn th\u1ea5y c\u00e1c n\u1ec1n t\u1ea3ng chuy\u00ean nghi\u1ec7p lu\u00f4n c\u00f3 l\u1ecbch s\u1eed WHOIS minh b\u1ea1ch, c\u1ea5u tr\u00fac subdomain \u1ed5n \u0111\u1ecbnh v\u00e0 c\u01a1 ch\u1ebf CDN b\u1ea3o v\u1ec7 DDoS r\u00f5 r\u00e0ng. M\u1ed9t v\u00ed d\u1ee5 tham kh\u1ea3o k\u1ef9 thu\u1eadt l\u00e0 Riyadh.dev, th\u01b0\u1eddng \u0111\u01b0\u1ee3c d\u00f9ng l\u00e0m t\u00e0i li\u1ec7u so s\u00e1nh v\u1ec1 t\u1ed1c \u0111\u1ed9 ph\u1ea3n h\u1ed3i v\u00e0 quy tr\u00ecnh b\u1ea3o m\u1eadt. \u0110i\u1ec1u c\u1ed1t l\u00f5i l\u00e0 phi\u00ean b\u1ea3n b\u1ea1n truy c\u1eadp ph\u1ea3i tr\u00f9ng kh\u1edbp tuy\u1ec7t \u0111\u1ed1i v\u1edbi \u0111\u1ecba ch\u1ec9 g\u1ed1c, kh\u00f4ng th\u00eam b\u1edbt k\u00fd t\u1ef1 con, kh\u00f4ng s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 r\u00fat g\u1ecdn link b\u00ed \u1ea9n. Vi\u1ec7c nh\u1ea7m l\u1eabn subdomain ph\u1ee5 th\u00e0nh domain ch\u00ednh ho\u1eb7c truy c\u1eadp qua proxy kh\u00f4ng x\u00e1c th\u1ef1c l\u00e0 nguy\u00ean nh\u00e2n h\u00e0ng \u0111\u1ea7u khi\u1ebfn ng\u01b0\u1eddi d\u00f9ng r\u01a1i v\u00e0o b\u1eaby gi\u1ea3 m\u1ea1o v\u00e0 m\u1ea5t ki\u1ec3m so\u00e1t t\u00e0i kho\u1ea3n. G\u1ee1 r\u1ed1i \u0111\u01b0\u1eddng truy\u1ec1n v\u00e0 thi\u1ebft l\u1eadp l\u1ea1i m\u00f4i tr\u01b0\u1eddng duy\u1ec7t web Sau khi kh\u1eb3ng \u0111\u1ecbnh t\u00ean mi\u1ec1n l\u00e0 ch\u00ednh ch\u1ee7, ti\u1ebfn h\u00e0nh kh\u1eed tr\u00f9ng h\u1ec7 th\u1ed1ng theo tr\u00ecnh t\u1ef1 \u01b0u ti\u00ean. Thao t\u00e1c \u0111\u1ea7u ti\u00ean l\u00e0 x\u00f3a d\u1eef li\u1ec7u duy\u1ec7t web ch\u1ecdn l\u1ecdc. Ch\u1ec9 gi\u1eef l\u1ea1i<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"hide_page_title":"","footnotes":""},"categories":[],"tags":[],"class_list":["post-41459","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/riyadh.dev\/en\/wp-json\/wp\/v2\/posts\/41459","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/riyadh.dev\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/riyadh.dev\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/riyadh.dev\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/riyadh.dev\/en\/wp-json\/wp\/v2\/comments?post=41459"}],"version-history":[{"count":0,"href":"https:\/\/riyadh.dev\/en\/wp-json\/wp\/v2\/posts\/41459\/revisions"}],"wp:attachment":[{"href":"https:\/\/riyadh.dev\/en\/wp-json\/wp\/v2\/media?parent=41459"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/riyadh.dev\/en\/wp-json\/wp\/v2\/categories?post=41459"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/riyadh.dev\/en\/wp-json\/wp\/v2\/tags?post=41459"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}