{"id":9351,"date":"2024-03-28T11:55:57","date_gmt":"2024-03-28T04:55:57","guid":{"rendered":"https:\/\/tapchicntt.com\/?p=9351"},"modified":"2024-03-28T11:57:23","modified_gmt":"2024-03-28T04:57:23","slug":"canh-bao-thu-doan-hack-icloud-moi-cuc-ky-tinh-vi-su-dung-chinh-cong-cu-do-apple-tao-ra","status":"publish","type":"post","link":"https:\/\/tapchicntt.com\/canh-bao-thu-doan-hack-icloud-moi-cuc-ky-tinh-vi-su-dung-chinh-cong-cu-do-apple-tao-ra\/","title":{"rendered":"C\u1ea3nh b\u00e1o th\u1ee7 \u0111o\u1ea1n hack iCloud m\u1edbi c\u1ef1c k\u1ef3 tinh vi, s\u1eed d\u1ee5ng ch\u00ednh c\u00f4ng c\u1ee5 do Apple t\u1ea1o ra"},"content":{"rendered":"\n

Ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 m\u1ea5t quy\u1ec1n truy c\u1eadp t\u00e0i kho\u1ea3n iCloud n\u1ebfu “sa l\u01b0\u1edbi” v\u00e0o h\u00ecnh th\u1ee9c l\u1eeba \u0111\u1ea3o m\u1edbi n\u00e0y.<\/p>\n\n\n\n

Theo b\u00e1o c\u00e1o t\u1eeb KrebsOnSecurity, c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng phishing l\u1ee3i d\u1ee5ng l\u1ed7 h\u1ed5ng trong t\u00ednh n\u0103ng \u0111\u1eb7t l\u1ea1i m\u1eadt kh\u1ea9u c\u1ee7a Apple ng\u00e0y c\u00e0ng tr\u1edf n\u00ean ph\u1ed5 bi\u1ebfn.<\/p>\n\n\n\n

K\u1ebb gian \u0111ang nh\u1eafm \u0111\u1ebfn nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng Apple b\u1eb1ng c\u00e1ch t\u1ea5n c\u00f4ng d\u1ed3n d\u1eadp, li\u00ean t\u1ee5c g\u1eedi v\u00f4 s\u1ed1 th\u00f4ng b\u00e1o ho\u1eb7c tin nh\u1eafn x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 (MFA) nh\u1eb1m l\u1eeba h\u1ecd ch\u1ea5p thu\u1eadn thay \u0111\u1ed5i m\u1eadt kh\u1ea9u Apple ID.<\/p>\n\n\n\n

K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 khi\u1ebfn iPhone, Apple Watch ho\u1eb7c m\u00e1y Mac c\u1ee7a n\u1ea1n nh\u00e2n hi\u1ec3n th\u1ecb li\u00ean t\u1ee5c c\u00e1c th\u00f4ng b\u00e1o x\u00e1c nh\u1eadn thay \u0111\u1ed5i m\u1eadt kh\u1ea9u \u1edf c\u1ea5p \u0111\u1ed9 h\u1ec7 th\u1ed1ng.<\/p>\n\n\n\n

M\u1ee5c \u0111\u00edch l\u00e0 khi\u1ebfn n\u1ea1n nh\u00e2n nh\u1ea7m l\u1eabn ch\u1ea5p thu\u1eadn y\u00eau c\u1ea7u ho\u1eb7c c\u1ea3m th\u1ea5y phi\u1ec1n ph\u1ee9c v\u00e0 b\u1ea5m v\u00e0o n\u00fat ch\u1ea5p nh\u1eadn. N\u1ebfu y\u00eau c\u1ea7u \u0111\u01b0\u1ee3c ch\u1ea5p thu\u1eadn, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 \u0111\u1ed5i m\u1eadt kh\u1ea9u Apple ID v\u00e0 kh\u00f3a t\u00e0i kho\u1ea3n c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/p>\n\n\n\n

V\u00ec nh\u1eafm v\u00e0o Apple ID, c\u00e1c y\u00eau c\u1ea7u \u0111\u1eb7t l\u1ea1i m\u1eadt kh\u1ea9u s\u1ebd hi\u1ec3n th\u1ecb tr\u00ean t\u1ea5t c\u1ea3 thi\u1ebft b\u1ecb c\u1ee7a ng\u01b0\u1eddi d\u00f9ng. C\u00e1c th\u00f4ng b\u00e1o n\u00e0y khi\u1ebfn t\u1ea5t c\u1ea3 c\u00e1c thi\u1ebft b\u1ecb Apple \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi Apple ID \u0111\u00f3 kh\u00f4ng th\u1ec3 s\u1eed d\u1ee5ng cho \u0111\u1ebfn khi ng\u01b0\u1eddi d\u00f9ng t\u1eaft h\u1ebft th\u00f4ng b\u00e1o tr\u00ean t\u1eebng thi\u1ebft b\u1ecb.<\/p>\n\n\n\n

Ng\u01b0\u1eddi d\u00f9ng Twitter Parth Patel g\u1ea7n \u0111\u00e2y \u0111\u00e3 chia s\u1ebb tr\u1ea3i nghi\u1ec7m b\u1ecb t\u1ea5n c\u00f4ng theo c\u00e1ch n\u00e0y. Anh \u1ea5y cho bi\u1ebft m\u00ecnh kh\u00f4ng th\u1ec3 s\u1eed d\u1ee5ng thi\u1ebft b\u1ecb cho \u0111\u1ebfn khi b\u1ea5m “Kh\u00f4ng cho ph\u00e9p” tr\u00ean h\u01a1n 100 th\u00f4ng b\u00e1o.<\/p>\n\n\n

\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n

Khi kh\u00f4ng th\u1ec3 d\u1ee5 ng\u01b0\u1eddi d\u00f9ng b\u1ea5m “Cho ph\u00e9p” tr\u00ean th\u00f4ng b\u00e1o \u0111\u1ed5i m\u1eadt kh\u1ea9u, k\u1ebb t\u1ea5n c\u00f4ng th\u01b0\u1eddng th\u1ef1c hi\u1ec7n cu\u1ed9c g\u1ecdi \u0111i\u1ec7n tho\u1ea1i gi\u1ea3 m\u1ea1o t\u1eeb Apple.<\/p>\n\n\n\n

Trong c\u00e1c cu\u1ed9c g\u1ecdi n\u00e0y, k\u1ebb t\u1ea5n c\u00f4ng gi\u1ea3 v\u1edd bi\u1ebft n\u1ea1n nh\u00e2n \u0111ang b\u1ecb t\u1ea5n c\u00f4ng v\u00e0 c\u1ed1 g\u1eafng l\u1ea5y m\u00e3 OTP \u0111\u01b0\u1ee3c g\u1eedi \u0111\u1ebfn s\u1ed1 \u0111i\u1ec7n tho\u1ea1i c\u1ee7a ng\u01b0\u1eddi d\u00f9ng khi h\u1ecd c\u1ed1 g\u1eafng \u0111\u1ed5i m\u1eadt kh\u1ea9u.<\/p>\n\n\n\n

Trong tr\u01b0\u1eddng h\u1ee3p c\u1ee7a Patel, k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 s\u1eed d\u1ee5ng th\u00f4ng tin b\u1ecb r\u00f2 r\u1ec9 t\u1eeb m\u1ed9t trang web t\u00ecm ki\u1ebfm ng\u01b0\u1eddi bao g\u1ed3m t\u00ean, \u0111\u1ecba ch\u1ec9 hi\u1ec7n t\u1ea1i, \u0111\u1ecba ch\u1ec9 c\u0169 v\u00e0 s\u1ed1 \u0111i\u1ec7n tho\u1ea1i, cung c\u1ea5p cho k\u1ebb x\u1ea5u nhi\u1ec1u th\u00f4ng tin \u0111\u1ec3 th\u1ef1c hi\u1ec7n h\u00e0nh vi.<\/p>\n\n\n\n

Tuy nhi\u00ean, may m\u1eafn l\u00e0 k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 x\u01b0ng h\u00f4 sai t\u00ean Patel v\u00e0 h\u1eafn ta c\u0169ng tr\u1edf n\u00ean \u0111\u00e1ng nghi ng\u1edd khi y\u00eau c\u1ea7u m\u00e3 OTP – th\u1ee9 m\u00e0 Apple s\u1ebd kh\u00f4ng bao gi\u1edd y\u00eau c\u1ea7u ng\u01b0\u1eddi d\u00f9ng cung c\u1ea5p.<\/p>\n\n\n\n

Cu\u1ed9c t\u1ea5n c\u00f4ng d\u01b0\u1eddng nh\u01b0 ph\u1ee5 thu\u1ed9c v\u00e0o vi\u1ec7c k\u1ebb gian c\u00f3 \u0111\u01b0\u1ee3c th\u00f4ng tin v\u1ec1 \u0111\u1ecba ch\u1ec9 email v\u00e0 s\u1ed1 \u0111i\u1ec7n tho\u1ea1i \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi Apple ID.<\/p>\n\n\n\n

KrebsOnSecurity \u0111\u00e3 \u0111i\u1ec1u tra v\u1ea5n \u0111\u1ec1 n\u00e0y v\u00e0 ph\u00e1t hi\u1ec7n ra r\u1eb1ng k\u1ebb t\u1ea5n c\u00f4ng \u0111ang s\u1eed d\u1ee5ng trang kh\u00f4i ph\u1ee5c m\u1eadt kh\u1ea9u Apple ID. Trang n\u00e0y y\u00eau c\u1ea7u email ho\u1eb7c s\u1ed1 \u0111i\u1ec7n tho\u1ea1i Apple ID c\u1ee7a ng\u01b0\u1eddi d\u00f9ng v\u00e0 c\u00f3 m\u00e3 CAPTCHA.<\/p>\n\n\n

\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n

Khi nh\u1eadp \u0111\u1ecba ch\u1ec9 email, trang s\u1ebd hi\u1ec3n th\u1ecb hai ch\u1eef s\u1ed1 cu\u1ed1i c\u1ee7a s\u1ed1 \u0111i\u1ec7n tho\u1ea1i \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi t\u00e0i kho\u1ea3n Apple. B\u1eb1ng c\u00e1ch \u0111i\u1ec1n v\u00e0o c\u00e1c ch\u1eef s\u1ed1 c\u00f2n thi\u1ebfu v\u00e0 nh\u1ea5n g\u1eedi, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 k\u00edch ho\u1ea1t c\u1ea3nh b\u00e1o h\u1ec7 th\u1ed1ng.<\/p>\n\n\n\n

Hi\u1ec7n t\u1ea1i ch\u01b0a r\u00f5 k\u1ebb t\u1ea5n c\u00f4ng \u0111ang l\u1ee3i d\u1ee5ng h\u1ec7 th\u1ed1ng nh\u01b0 th\u1ebf n\u00e0o \u0111\u1ec3 g\u1eedi nhi\u1ec1u tin nh\u1eafn cho ng\u01b0\u1eddi d\u00f9ng Apple, nh\u01b0ng c\u00f3 v\u1ebb nh\u01b0 \u0111\u00e2y l\u00e0 m\u1ed9t l\u1ed7 h\u1ed5ng \u0111ang b\u1ecb khai th\u00e1c. H\u1ec7 th\u1ed1ng c\u1ee7a Apple kh\u00f4ng \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 g\u1eedi h\u01a1n 100 y\u00eau c\u1ea7u \u0111\u1eb7t l\u1ea1i m\u1eadt kh\u1ea9u, v\u00ec v\u1eady c\u00f3 th\u1ec3 gi\u1ea3 \u0111\u1ecbnh r\u1eb1ng gi\u1edbi h\u1ea1n n\u00e0y \u0111\u00e3 b\u1ecb hacker v\u01b0\u1ee3t qua.<\/p>\n\n\n\n

Ng\u01b0\u1eddi d\u00f9ng thi\u1ebft b\u1ecb Apple l\u00e0 m\u1ee5c ti\u00eau c\u1ee7a ki\u1ec3u t\u1ea5n c\u00f4ng n\u00e0y n\u00ean \u0111\u1ea3m b\u1ea3o ch\u1ecdn “Kh\u00f4ng cho ph\u00e9p” tr\u00ean t\u1ea5t c\u1ea3 c\u00e1c y\u00eau c\u1ea7u, v\u00e0 l\u01b0u \u00fd r\u1eb1ng Apple kh\u00f4ng bao gi\u1edd th\u1ef1c hi\u1ec7n cu\u1ed9c g\u1ecdi \u0111i\u1ec7n tho\u1ea1i y\u00eau c\u1ea7u cung c\u1ea5p m\u00e3 OTP. <\/p>\n","protected":false},"excerpt":{"rendered":"

Ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 m\u1ea5t quy\u1ec1n truy c\u1eadp t\u00e0i kho\u1ea3n iCloud n\u1ebfu “sa l\u01b0\u1edbi” v\u00e0o h\u00ecnh th\u1ee9c l\u1eeba \u0111\u1ea3o m\u1edbi […]<\/p>\n","protected":false},"author":6,"featured_media":9355,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-9351","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bao-mat"],"views":772,"_links":{"self":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts\/9351","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/comments?post=9351"}],"version-history":[{"count":3,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts\/9351\/revisions"}],"predecessor-version":[{"id":9356,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/posts\/9351\/revisions\/9356"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/media\/9355"}],"wp:attachment":[{"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/media?parent=9351"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/categories?post=9351"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tapchicntt.com\/rest-api\/wp\/v2\/tags?post=9351"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}