{"id":579531,"date":"2023-12-28T03:09:19","date_gmt":"2023-12-28T03:09:19","guid":{"rendered":"https:\/\/proxyelite.info\/glossary\/spear-phishing\/"},"modified":"2023-12-28T03:09:19","modified_gmt":"2023-12-28T03:09:19","slug":"spear-phishing","status":"publish","type":"glossary","link":"https:\/\/proxyelite.info\/vi\/glossary\/spear-phishing\/","title":{"rendered":"L\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn"},"content":{"rendered":"<h2>Th\u00f4ng tin t\u00f3m t\u1eaft v\u1ec1 Spear Phishing<\/h2>\n<p>Phishing l\u1eeba \u0111\u1ea3o l\u00e0 m\u1ed9t h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng m\u1ea1ng chuy\u00ean bi\u1ec7t t\u1eadp trung v\u00e0o vi\u1ec7c nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c c\u00e1 nh\u00e2n ho\u1eb7c t\u1ed5 ch\u1ee9c c\u1ee5 th\u1ec3 b\u1eb1ng email ho\u1eb7c tin nh\u1eafn l\u1eeba \u0111\u1ea3o. Kh\u00f4ng gi\u1ed1ng nh\u01b0 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o truy\u1ec1n th\u1ed1ng v\u1ed1n gi\u0103ng m\u1ed9t m\u1ea1ng l\u01b0\u1edbi r\u1ed9ng l\u1edbn v\u1edbi hy v\u1ecdng b\u1eaft \u0111\u01b0\u1ee3c nh\u1eefng n\u1ea1n nh\u00e2n kh\u00f4ng nghi ng\u1edd, l\u1eeba \u0111\u1ea3o gi\u00e1o c\u00f3 m\u1ee5c ti\u00eau v\u00e0 c\u00e1 nh\u00e2n h\u00f3a cao. Trong b\u00e0i vi\u1ebft n\u00e0y, ch\u00fang t\u00f4i \u0111i s\u00e2u v\u00e0o s\u1ef1 ph\u1ee9c t\u1ea1p c\u1ee7a l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn, c\u00e1c t\u00ednh n\u0103ng ch\u00ednh, c\u00e1c lo\u1ea1i, ph\u01b0\u01a1ng ph\u00e1p ph\u00f2ng ng\u1eeba kh\u00e1c nhau v\u00e0 vai tr\u00f2 c\u1ee7a m\u00e1y ch\u1ee7 proxy trong vi\u1ec7c gi\u1ea3m thi\u1ec3u m\u1ed1i \u0111e d\u1ecda n\u00e0y.<\/p>\n<h2>Th\u00f4ng tin chi ti\u1ebft v\u1ec1 Spear Phishing<\/h2>\n<p>L\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn l\u00e0 m\u1ed9t h\u00e0nh vi \u0111\u1ed9c h\u1ea1i trong \u0111\u00f3 t\u1ed9i ph\u1ea1m m\u1ea1ng t\u1ea1o ra c\u00e1c tin nh\u1eafn c\u00f3 s\u1ee9c thuy\u1ebft ph\u1ee5c cao, th\u01b0\u1eddng c\u00f3 v\u1ebb nh\u01b0 \u0111\u1ebfn t\u1eeb c\u00e1c ngu\u1ed3n \u0111\u00e1ng tin c\u1eady, \u0111\u1ec3 l\u1eeba n\u1ea1n nh\u00e2n ti\u1ebft l\u1ed9 th\u00f4ng tin nh\u1ea1y c\u1ea3m ho\u1eb7c th\u1ef1c hi\u1ec7n c\u00e1c h\u00e0nh \u0111\u1ed9ng c\u00f3 th\u1ec3 x\u00e2m ph\u1ea1m \u0111\u1ebfn b\u1ea3o m\u1eadt c\u1ee7a h\u1ecd. Nh\u1eefng cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y \u0111\u01b0\u1ee3c \u0111\u1eb7c tr\u01b0ng b\u1edfi s\u1ef1 nghi\u00ean c\u1ee9u k\u1ef9 l\u01b0\u1ee1ng v\u00e0 ch\u00ednh x\u00e1c v\u1ec1 c\u00e1 nh\u00e2n ho\u1eb7c t\u1ed5 ch\u1ee9c m\u1ee5c ti\u00eau.<\/p>\n<h2>Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a Spear Phishing<\/h2>\n<p>\u0110\u1ec3 hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn, \u0111i\u1ec1u c\u1ea7n thi\u1ebft l\u00e0 ph\u1ea3i ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a n\u00f3:<\/p>\n<ul>\n<li><strong>C\u00e1ch ti\u1ebfp c\u1eadn c\u00f3 m\u1ee5c ti\u00eau<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng x\u00e1c \u0111\u1ecbnh c\u00e1c c\u00e1 nh\u00e2n ho\u1eb7c t\u1ed5 ch\u1ee9c c\u1ee5 th\u1ec3 l\u00e0 n\u1ea1n nh\u00e2n c\u1ee7a ch\u00fang.<\/li>\n<li><strong>Tin nh\u1eafn l\u1eeba \u0111\u1ea3o<\/strong>: T\u1ed9i ph\u1ea1m m\u1ea1ng s\u1eed d\u1ee5ng c\u00e1c email, tin nh\u1eafn ho\u1eb7c th\u1eadm ch\u00ed c\u00e1c cu\u1ed9c g\u1ecdi \u0111i\u1ec7n tho\u1ea1i c\u00f3 s\u1ee9c thuy\u1ebft ph\u1ee5c cao \u0111\u1ec3 \u0111\u00e1nh l\u1eeba m\u1ee5c ti\u00eau c\u1ee7a ch\u00fang.<\/li>\n<li><strong>C\u00e1 nh\u00e2n h\u00f3a<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng \u0111i\u1ec1u ch\u1ec9nh tin nh\u1eafn c\u1ee7a ch\u00fang \u0111\u1ec3 khai th\u00e1c th\u00f4ng tin c\u00e1 nh\u00e2n, s\u1edf th\u00edch ho\u1eb7c m\u1ed1i quan h\u1ec7 c\u1ee7a n\u1ea1n nh\u00e2n.<\/li>\n<li><strong>Nghi\u00ean c\u1ee9u<\/strong>: Vi\u1ec7c trinh s\u00e1t k\u1ef9 l\u01b0\u1ee1ng m\u1ee5c ti\u00eau \u0111\u01b0\u1ee3c ti\u1ebfn h\u00e0nh \u0111\u1ec3 t\u0103ng c\u01a1 h\u1ed9i th\u00e0nh c\u00f4ng.<\/li>\n<li><strong>K\u1ef9 thu\u1eadt ti\u1ebfn h\u00f3a cao<\/strong>: C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn kh\u00f4ng ng\u1eebng ph\u00e1t tri\u1ec3n khi\u1ebfn ch\u00fang kh\u00f3 b\u1ecb ph\u00e1t hi\u1ec7n h\u01a1n.<\/li>\n<\/ul>\n<h2>C\u00e1c lo\u1ea1i l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn<\/h2>\n<p>Phishing c\u00f3 nhi\u1ec1u h\u00ecnh th\u1ee9c kh\u00e1c nhau, m\u1ed7i h\u00ecnh th\u1ee9c c\u00f3 ph\u01b0\u01a1ng th\u1ee9c ho\u1ea1t \u0111\u1ed9ng ri\u00eang. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 danh s\u00e1ch c\u00e1c lo\u1ea1i l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn ph\u1ed5 bi\u1ebfn:<\/p>\n<table>\n<thead>\n<tr>\n<th>Ki\u1ec3u<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>CEO l\u1eeba \u0111\u1ea3o<\/strong><\/td>\n<td>M\u1ea1o danh c\u00e1c gi\u00e1m \u0111\u1ed1c \u0111i\u1ec1u h\u00e0nh h\u00e0ng \u0111\u1ea7u \u0111\u1ec3 y\u00eau c\u1ea7u c\u00e1c h\u00e0nh \u0111\u1ed9ng t\u00e0i ch\u00ednh.<\/td>\n<\/tr>\n<tr>\n<td><strong>Th\u1ecfa thu\u1eadn email c\u1ee7a nh\u00e0 cung c\u1ea5p<\/strong><\/td>\n<td>Nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c nh\u00e0 cung c\u1ea5p \u0111\u1ec3 chuy\u1ec3n h\u01b0\u1edbng thanh to\u00e1n.<\/td>\n<\/tr>\n<tr>\n<td><strong>\u0110\u00e1nh b\u1eaft c\u00e1 voi<\/strong><\/td>\n<td>Nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c c\u00e1 nh\u00e2n ho\u1eb7c gi\u00e1m \u0111\u1ed1c \u0111i\u1ec1u h\u00e0nh c\u1ea5p cao.<\/td>\n<\/tr>\n<tr>\n<td><strong>L\u1eeba \u0111\u1ea3o nh\u00e2n b\u1ea3n<\/strong><\/td>\n<td>T\u1ea1o b\u1ea3n sao c\u1ee7a c\u00e1c tin nh\u1eafn h\u1ee3p ph\u00e1p.<\/td>\n<\/tr>\n<tr>\n<td><strong>Th\u1ecfa hi\u1ec7p email doanh nghi\u1ec7p (BEC)<\/strong><\/td>\n<td>Thao t\u00fang nh\u00e2n vi\u00ean \u0111\u1ec3 chuy\u1ec3n ti\u1ec1n.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng Spear Phishing v\u00e0 c\u00e1c v\u1ea5n \u0111\u1ec1 li\u00ean quan<\/h2>\n<p>Phishing c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng theo nhi\u1ec1u c\u00e1ch kh\u00e1c nhau, m\u1ed7i c\u00e1ch \u0111\u1ec1u c\u00f3 nh\u1eefng th\u00e1ch th\u1ee9c v\u00e0 gi\u1ea3i ph\u00e1p li\u00ean quan. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 t\u00ecnh hu\u1ed1ng ph\u1ed5 bi\u1ebfn:<\/p>\n<ol>\n<li>\n<p><strong>Tr\u1ed9m c\u1eafp d\u1eef li\u1ec7u<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng t\u00ecm ki\u1ebfm d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m \u0111\u1ec3 thu l\u1ee3i t\u00e0i ch\u00ednh.<\/p>\n<ul>\n<li><strong>Gi\u1ea3i ph\u00e1p<\/strong>: S\u1eed d\u1ee5ng x\u00e1c th\u1ef1c v\u00e0 m\u00e3 h\u00f3a m\u1ea1nh m\u1ebd.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>Tr\u1ed9m c\u1eafp th\u00f4ng tin x\u00e1c th\u1ef1c<\/strong>: C\u00e1c c\u00e1 nh\u00e2n m\u1ee5c ti\u00eau b\u1ecb l\u1eeba ti\u1ebft l\u1ed9 th\u00f4ng tin \u0111\u0103ng nh\u1eadp.<\/p>\n<ul>\n<li><strong>Gi\u1ea3i ph\u00e1p<\/strong>: Th\u1ef1c hi\u1ec7n x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>Ph\u00e2n ph\u1ed1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i<\/strong>: Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c g\u1eedi \u0111\u1ebfn c\u00e1c h\u1ec7 th\u1ed1ng b\u1ecb x\u00e2m ph\u1ea1m.<\/p>\n<ul>\n<li><strong>Gi\u1ea3i ph\u00e1p<\/strong>: S\u1eed d\u1ee5ng h\u1ec7 th\u1ed1ng ph\u00e1t hi\u1ec7n x\u00e2m nh\u1eadp v\u00e0 ch\u1ed1ng virus m\u1ea1nh m\u1ebd.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h2>C\u00e1c \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1<\/h2>\n<p>\u0110i\u1ec1u quan tr\u1ecdng l\u00e0 ph\u1ea3i ph\u00e2n bi\u1ec7t l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1:<\/p>\n<table>\n<thead>\n<tr>\n<th>Thu\u1eadt ng\u1eef<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>L\u1eeba \u0111\u1ea3o<\/strong><\/td>\n<td>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng r\u1ed9ng r\u00e3i nh\u1eafm v\u00e0o m\u1ed9t l\u01b0\u1ee3ng l\u1edbn kh\u00e1n gi\u1ea3.<\/td>\n<\/tr>\n<tr>\n<td><strong>Vishing<\/strong><\/td>\n<td>T\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o qua cu\u1ed9c g\u1ecdi \u0111i\u1ec7n tho\u1ea1i.<\/td>\n<\/tr>\n<tr>\n<td><strong>\u0111\u1eadp ph\u00e1<\/strong><\/td>\n<td>T\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o qua tin nh\u1eafn SMS.<\/td>\n<\/tr>\n<tr>\n<td><strong>L\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn<\/strong><\/td>\n<td>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng c\u00f3 m\u1ee5c ti\u00eau v\u00e0o c\u00e1c c\u00e1 nh\u00e2n ho\u1eb7c t\u1ed5 ch\u1ee9c c\u1ee5 th\u1ec3.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Quan \u0111i\u1ec3m v\u00e0 c\u00f4ng ngh\u1ec7 t\u01b0\u01a1ng lai<\/h2>\n<p>B\u1ed1i c\u1ea3nh l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn ng\u00e0y c\u00e0ng ph\u00e1t tri\u1ec3n v\u00e0 c\u00e1c c\u00f4ng ngh\u1ec7 trong t\u01b0\u01a1ng lai s\u1ebd \u0111\u00f3ng m\u1ed9t vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c ch\u1ed1ng l\u1ea1i m\u1ed1i \u0111e d\u1ecda n\u00e0y. Nh\u1eefng ti\u1ebfn b\u1ed9 trong h\u1ecdc m\u00e1y, tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o v\u00e0 ph\u00e2n t\u00edch h\u00e0nh vi s\u1ebd h\u1ed7 tr\u1ee3 ph\u00e1t hi\u1ec7n s\u1edbm c\u00e1c n\u1ed7 l\u1ef1c l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn.<\/p>\n<h2>C\u00e1ch m\u00e1y ch\u1ee7 proxy \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn<\/h2>\n<p>M\u00e1y ch\u1ee7 proxy \u0111\u00f3ng vai tr\u00f2 then ch\u1ed1t trong vi\u1ec7c t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt tr\u01b0\u1edbc c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn. H\u1ecd cung c\u1ea5p t\u00ednh n\u0103ng \u1ea9n danh v\u00e0 c\u00f3 th\u1ec3 tr\u1ee3 gi\u00fap theo nh\u1eefng c\u00e1ch sau:<\/p>\n<ul>\n<li><strong>M\u1eb7t n\u1ea1 IP<\/strong>: M\u00e1y ch\u1ee7 proxy \u1ea9n \u0111\u1ecba ch\u1ec9 IP th\u1ef1c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng, khi\u1ebfn k\u1ebb t\u1ea5n c\u00f4ng kh\u00f3 theo d\u00f5i v\u1ecb tr\u00ed c\u1ee7a h\u1ecd.<\/li>\n<li><strong>L\u1ecdc l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp<\/strong>: Proxy c\u00f3 th\u1ec3 l\u1ecdc v\u00e0 ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111\u00e1ng ng\u1edd, ng\u0103n ch\u1eb7n c\u00e1c n\u1ed7 l\u1ef1c l\u1eeba \u0111\u1ea3o ti\u1ebfp c\u1eadn m\u1ee5c ti\u00eau.<\/li>\n<li><strong>Quy\u1ec1n ri\u00eang t\u01b0 n\u00e2ng cao<\/strong>: Ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 duy\u1ec7t v\u00e0 giao ti\u1ebfp tr\u1ef1c tuy\u1ebfn an to\u00e0n h\u01a1n, gi\u1ea3m nguy c\u01a1 tr\u1edf th\u00e0nh n\u1ea1n nh\u00e2n c\u1ee7a l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn.<\/li>\n<\/ul>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn v\u00e0 c\u00e1ch ng\u0103n ch\u1eb7n n\u00f3, b\u1ea1n c\u00f3 th\u1ec3 kh\u00e1m ph\u00e1 c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n<ul>\n<li><a target=\"_new\" rel=\"noopener\">\u1ee6y ban Th\u01b0\u01a1ng m\u1ea1i Li\u00ean bang: Spear L\u1eeba \u0111\u1ea3o<\/a><\/li>\n<li><a target=\"_new\" rel=\"noopener\">C\u01a1 quan an ninh c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng v\u00e0 an ninh m\u1ea1ng (CISA): L\u1eeba \u0111\u1ea3o v\u00e0 l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn<\/a><\/li>\n<\/ul>\n<p>T\u00f3m l\u1ea1i, l\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn l\u00e0 m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng c\u00f3 m\u1ee5c ti\u00eau cao v\u00e0 l\u1eeba \u0111\u1ea3o, \u0111\u00f2i h\u1ecfi s\u1ef1 c\u1ea3nh gi\u00e1c v\u00e0 c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt ti\u00ean ti\u1ebfn \u0111\u1ec3 ch\u1ed1ng l\u1ea1i. M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 l\u00e0 c\u00f4ng c\u1ee5 c\u00f3 gi\u00e1 tr\u1ecb trong vi\u1ec7c b\u1ea3o v\u1ec7 ch\u1ed1ng l\u1ea1i c\u00e1c m\u1ed1i \u0111e d\u1ecda n\u00e0y b\u1eb1ng c\u00e1ch cung c\u1ea5p c\u00e1c c\u1ea3i ti\u1ebfn v\u1ec1 t\u00ednh \u1ea9n danh v\u00e0 b\u1ea3o m\u1eadt cho ng\u01b0\u1eddi d\u00f9ng c\u0169ng nh\u01b0 t\u1ed5 ch\u1ee9c.<\/p>","protected":false},"featured_media":579532,"menu_order":0,"template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-579531","glossary","type-glossary","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/glossary\/579531","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/glossary"}],"about":[{"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/types\/glossary"}],"version-history":[{"count":0,"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/glossary\/579531\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/media\/579532"}],"wp:attachment":[{"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/media?parent=579531"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}