{"id":580016,"date":"2023-12-28T03:14:31","date_gmt":"2023-12-28T03:14:31","guid":{"rendered":"https:\/\/proxyelite.info\/glossary\/drive-by-download\/"},"modified":"2023-12-28T03:14:31","modified_gmt":"2023-12-28T03:14:31","slug":"drive-by-download","status":"publish","type":"glossary","link":"https:\/\/proxyelite.info\/vi\/glossary\/drive-by-download\/","title":{"rendered":"T\u1ea3i xu\u1ed1ng theo \u1ed5 \u0111\u0129a"},"content":{"rendered":"<p>Drive-By Download l\u00e0 m\u1ed9t thu\u1eadt ng\u1eef bao g\u1ed3m m\u1ed9t t\u1eadp h\u1ee3p c\u00e1c k\u1ef9 thu\u1eadt \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c t\u1ed9i ph\u1ea1m m\u1ea1ng s\u1eed d\u1ee5ng \u0111\u1ec3 l\u00e9n l\u00fat ph\u00e2n ph\u1ed1i v\u00e0 c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u00e0o thi\u1ebft b\u1ecb c\u1ee7a ng\u01b0\u1eddi d\u00f9ng m\u00e0 h\u1ecd kh\u00f4ng c\u00f3 s\u1ef1 \u0111\u1ed3ng \u00fd ho\u1eb7c kh\u00f4ng bi\u1ebft. Ph\u01b0\u01a1ng ph\u00e1p x\u1ea3o quy\u1ec7t n\u00e0y khai th\u00e1c c\u00e1c l\u1ed7 h\u1ed5ng trong tr\u00ecnh duy\u1ec7t web v\u00e0 c\u00e1c plugin li\u00ean quan c\u1ee7a ch\u00fang, khi\u1ebfn c\u00e1c c\u00e1 nh\u00e2n v\u00e0 doanh nghi\u1ec7p ph\u1ea3i s\u1eed d\u1ee5ng c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt m\u1ea1nh m\u1ebd, ch\u1eb3ng h\u1ea1n nh\u01b0 m\u00e1y ch\u1ee7 proxy, \u0111\u1ec3 b\u1ea3o v\u1ec7 kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda n\u00e0y.<\/p>\n<h2>Th\u00f4ng tin chi ti\u1ebft v\u1ec1 T\u1ea3i xu\u1ed1ng theo xe<\/h2>\n<p>T\u1ea3i xu\u1ed1ng t\u1eeb Drive th\u01b0\u1eddng x\u1ea3y ra khi ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp trang web \u0111\u1ed9c h\u1ea1i ho\u1eb7c b\u1ecb x\u00e2m nh\u1eadp ho\u1eb7c t\u01b0\u01a1ng t\u00e1c v\u1edbi qu\u1ea3ng c\u00e1o tr\u1ef1c tuy\u1ebfn \u0111\u1ed9c h\u1ea1i. C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y d\u1ef1a v\u00e0o vi\u1ec7c khai th\u00e1c c\u00e1c l\u1ed7 h\u1ed5ng trong ph\u1ea7n m\u1ec1m ho\u1eb7c h\u1ec7 \u0111i\u1ec1u h\u00e0nh c\u1ee7a ng\u01b0\u1eddi d\u00f9ng, th\u01b0\u1eddng nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c plugin, tr\u00ecnh duy\u1ec7t ho\u1eb7c h\u1ec7 \u0111i\u1ec1u h\u00e0nh \u0111\u00e3 l\u1ed7i th\u1eddi. Sau khi x\u00e1c \u0111\u1ecbnh v\u00e0 khai th\u00e1c l\u1ed7 h\u1ed5ng, ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i s\u1ebd \u0111\u01b0\u1ee3c t\u1ea3i xu\u1ed1ng v\u00e0 th\u1ef1c thi \u00e2m th\u1ea7m tr\u00ean thi\u1ebft b\u1ecb c\u1ee7a n\u1ea1n nh\u00e2n.<\/p>\n<h2>Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a t\u1ea3i xu\u1ed1ng Drive-By<\/h2>\n<p>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Drive-By Download c\u00f3 chung m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng ch\u00ednh, bao g\u1ed3m:<\/p>\n<ol>\n<li>\n<p><strong>Th\u1ef1c thi im l\u1eb7ng:<\/strong> Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c t\u1ea3i xu\u1ed1ng v\u00e0 th\u1ef1c thi m\u00e0 ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng h\u1ec1 bi\u1ebft ho\u1eb7c kh\u00f4ng \u0111\u1ed3ng \u00fd.<\/p>\n<\/li>\n<li>\n<p><strong>Khai th\u00e1c l\u1ed7 h\u1ed5ng:<\/strong> T\u1ed9i ph\u1ea1m m\u1ea1ng l\u1ee3i d\u1ee5ng c\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt trong ph\u1ea7n m\u1ec1m \u0111\u1ec3 ph\u00e1t t\u00e1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i.<\/p>\n<\/li>\n<li>\n<p><strong>C\u00e1c vect\u01a1 t\u1ea5n c\u00f4ng \u0111a d\u1ea1ng:<\/strong> T\u1ea3i xu\u1ed1ng qua Drive c\u00f3 th\u1ec3 x\u1ea3y ra th\u00f4ng qua c\u00e1c trang web, qu\u1ea3ng c\u00e1o \u0111\u1ed9c h\u1ea1i ho\u1eb7c th\u1eadm ch\u00ed c\u00e1c trang web h\u1ee3p ph\u00e1p b\u1ecb x\u00e2m ph\u1ea1m.<\/p>\n<\/li>\n<li>\n<p><strong>Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111a h\u00ecnh:<\/strong> C\u00e1c bi\u1ebfn th\u1ec3 ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong T\u1ea3i xu\u1ed1ng qua Drive th\u01b0\u1eddng thay \u0111\u1ed5i m\u00e3 c\u1ee7a ch\u00fang \u0111\u1ec3 tr\u00e1nh b\u1ecb ph\u00e1t hi\u1ec7n.<\/p>\n<\/li>\n<li>\n<p><strong>\u0110a d\u1ea1ng t\u1ea3i tr\u1ecdng:<\/strong> Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 ph\u00e1t t\u00e1n nhi\u1ec1u lo\u1ea1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i kh\u00e1c nhau, ch\u1eb3ng h\u1ea1n nh\u01b0 ransomware, Trojan ho\u1eb7c ph\u1ea7n m\u1ec1m gi\u00e1n \u0111i\u1ec7p.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c lo\u1ea1i t\u1ea3i xu\u1ed1ng theo \u1ed5 \u0111\u0129a<\/h2>\n<p>T\u1ea3i xu\u1ed1ng qua Drive c\u00f3 nhi\u1ec1u h\u00ecnh th\u1ee9c kh\u00e1c nhau v\u00e0 nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng li\u00ean t\u1ee5c ph\u00e1t tri\u1ec3n chi\u1ebfn thu\u1eadt c\u1ee7a ch\u00fang. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 lo\u1ea1i ph\u1ed5 bi\u1ebfn:<\/p>\n<table>\n<thead>\n<tr>\n<th>Ki\u1ec3u<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Trang web \u0111\u1ed9c h\u1ea1i<\/td>\n<td>C\u00e1c trang web b\u1ecb nhi\u1ec5m t\u1ef1 \u0111\u1ed9ng t\u1ea3i xu\u1ed1ng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i.<\/td>\n<\/tr>\n<tr>\n<td>Qu\u1ea3ng c\u00e1o \u0111\u1ed9c h\u1ea1i<\/td>\n<td>Qu\u1ea3ng c\u00e1o tr\u1ef1c tuy\u1ebfn b\u1ecb x\u00e2m ph\u1ea1m s\u1ebd ph\u00e1t t\u00e1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i khi \u0111\u01b0\u1ee3c nh\u1ea5p v\u00e0o.<\/td>\n<\/tr>\n<tr>\n<td>T\u1ea5n c\u00f4ng h\u1ed1 t\u01b0\u1edbi n\u01b0\u1edbc<\/td>\n<td>Nh\u1eafm m\u1ee5c ti\u00eau c\u00e1c trang web c\u1ee5 th\u1ec3 m\u00e0 n\u1ea1n nh\u00e2n th\u01b0\u1eddng xuy\u00ean truy c\u1eadp.<\/td>\n<\/tr>\n<tr>\n<td>T\u1ea5n c\u00f4ng k\u1ef9 thu\u1eadt x\u00e3 h\u1ed9i<\/td>\n<td>L\u1eeba ng\u01b0\u1eddi d\u00f9ng nh\u1ea5p v\u00e0o li\u00ean k\u1ebft \u0111\u1ed9c h\u1ea1i.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng t\u00ednh n\u0103ng t\u1ea3i xu\u1ed1ng Drive-By, s\u1ef1 c\u1ed1 v\u00e0 gi\u1ea3i ph\u00e1p<\/h2>\n<p>Trong khi t\u1ed9i ph\u1ea1m m\u1ea1ng s\u1eed d\u1ee5ng T\u1ea3i xu\u1ed1ng t\u1eeb xe cho m\u1ee5c \u0111\u00edch b\u1ea5t ch\u00ednh th\u00ec c\u00e1c chuy\u00ean gia an ninh m\u1ea1ng h\u1ee3p ph\u00e1p l\u1ea1i s\u1eed d\u1ee5ng c\u00e1c k\u1ef9 thu\u1eadt t\u01b0\u01a1ng t\u1ef1 \u0111\u1ec3 ki\u1ec3m tra v\u00e0 t\u0103ng c\u01b0\u1eddng h\u1ec7 th\u1ed1ng b\u1ea3o m\u1eadt. Tuy nhi\u00ean, nh\u1eefng chuy\u00ean gia n\u00e0y ph\u1ea3i \u0111\u1ed1i m\u1eb7t v\u1edbi nh\u1eefng th\u00e1ch th\u1ee9c, bao g\u1ed3m c\u1ea3 nh\u1eefng k\u1ebft qu\u1ea3 d\u01b0\u01a1ng t\u00ednh gi\u1ea3 v\u00e0 nh\u1eefng lo ng\u1ea1i v\u1ec1 \u0111\u1ea1o \u0111\u1ee9c. C\u00e1c gi\u1ea3i ph\u00e1p bao g\u1ed3m ki\u1ec3m tra c\u00f3 tr\u00e1ch nhi\u1ec7m v\u00e0 s\u1eed d\u1ee5ng m\u00f4i tr\u01b0\u1eddng an to\u00e0n, \u0111\u01b0\u1ee3c ki\u1ec3m so\u00e1t.<\/p>\n<h2>\u0110\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh<\/h2>\n<p>D\u01b0\u1edbi \u0111\u00e2y l\u00e0 so s\u00e1nh Drive-By Download v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1:<\/p>\n<table>\n<thead>\n<tr>\n<th>Thu\u1eadt ng\u1eef<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>T\u1ea3i xu\u1ed1ng theo \u1ed5 \u0111\u0129a<\/td>\n<td>Ph\u00e2n ph\u1ed1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i th\u00f4ng qua khai th\u00e1c web.<\/td>\n<\/tr>\n<tr>\n<td>Qu\u1ea3ng c\u00e1o \u0111\u1ed9c h\u1ea1i<\/td>\n<td>Ph\u00e1t t\u00e1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i th\u00f4ng qua c\u00e1c qu\u1ea3ng c\u00e1o tr\u1ef1c tuy\u1ebfn \u0111\u1ed9c h\u1ea1i.<\/td>\n<\/tr>\n<tr>\n<td>T\u1ea5n c\u00f4ng h\u1ed1 t\u01b0\u1edbi n\u01b0\u1edbc<\/td>\n<td>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng c\u00f3 m\u1ee5c ti\u00eau v\u00e0o c\u00e1c trang web ho\u1eb7c c\u1ed9ng \u0111\u1ed3ng c\u1ee5 th\u1ec3.<\/td>\n<\/tr>\n<tr>\n<td>K\u1ef9 thu\u1eadt x\u00e3 h\u1ed9i<\/td>\n<td>Thao t\u00fang c\u00e1c c\u00e1 nh\u00e2n \u0111\u1ec3 th\u1ef1c hi\u1ec7n m\u1ed9t s\u1ed1 h\u00e0nh \u0111\u1ed9ng nh\u1ea5t \u0111\u1ecbnh.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Quan \u0111i\u1ec3m v\u00e0 c\u00f4ng ngh\u1ec7 t\u01b0\u01a1ng lai<\/h2>\n<p>T\u01b0\u01a1ng lai c\u1ee7a Drive-By Download bao g\u1ed3m c\u00e1c k\u1ef9 thu\u1eadt ti\u00ean ti\u1ebfn v\u00e0 l\u1ea9n tr\u00e1nh h\u01a1n c\u1ee7a t\u1ed9i ph\u1ea1m m\u1ea1ng. \u0110\u1ec3 \u0111\u1ed1i ph\u00f3, c\u00e1c chuy\u00ean gia an ninh m\u1ea1ng \u0111ang ph\u00e1t tri\u1ec3n c\u00e1c h\u1ec7 th\u1ed1ng ph\u00e1t hi\u1ec7n x\u00e2m nh\u1eadp m\u1ea1nh m\u1ebd h\u01a1n v\u00e0 c\u00e1c chi\u1ebfn l\u01b0\u1ee3c qu\u1ea3n l\u00fd b\u1ea3n v\u00e1 \u0111\u1ec3 gi\u1ea3m thi\u1ec3u l\u1ed7 h\u1ed5ng m\u1ed9t c\u00e1ch nhanh ch\u00f3ng.<\/p>\n<h2>M\u00e1y ch\u1ee7 proxy v\u00e0 t\u1ea3i xu\u1ed1ng theo \u1ed5 \u0111\u0129a<\/h2>\n<p>C\u00e1c m\u00e1y ch\u1ee7 proxy, ch\u1eb3ng h\u1ea1n nh\u01b0 c\u00e1c m\u00e1y ch\u1ee7 proxy \u0111\u01b0\u1ee3c cung c\u1ea5p b\u1edfi ProxyElite (proxyelite.info), \u0111\u00f3ng m\u1ed9t vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c b\u1ea3o v\u1ec7 ng\u01b0\u1eddi d\u00f9ng v\u00e0 t\u1ed5 ch\u1ee9c kh\u1ecfi T\u1ea3i xu\u1ed1ng b\u1eb1ng Drive. H\u1ecd cung c\u1ea5p nh\u1eefng l\u1ee3i \u00edch sau:<\/p>\n<ul>\n<li>\n<p><strong>\u1ea8n danh:<\/strong> M\u00e1y ch\u1ee7 proxy \u1ea9n \u0111\u1ecba ch\u1ec9 IP c\u1ee7a ng\u01b0\u1eddi d\u00f9ng, khi\u1ebfn k\u1ebb t\u1ea5n c\u00f4ng kh\u00f3 theo d\u00f5i v\u00e0 nh\u1eafm m\u1ee5c ti\u00eau h\u01a1n.<\/p>\n<\/li>\n<li>\n<p><strong>L\u1ecdc n\u1ed9i dung:<\/strong> Proxy c\u00f3 th\u1ec3 l\u1ecdc n\u1ed9i dung \u0111\u1ed9c h\u1ea1i, ch\u1eb7n quy\u1ec1n truy c\u1eadp v\u00e0o c\u00e1c trang web v\u00e0 qu\u1ea3ng c\u00e1o \u0111\u1ed9c h\u1ea1i \u0111\u00e3 bi\u1ebft.<\/p>\n<\/li>\n<li>\n<p><strong>Thanh tra giao th\u00f4ng:<\/strong> M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 ki\u1ec3m tra l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp web \u0111\u1ec3 t\u00ecm ch\u1eef k\u00fd ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u00e0 ng\u0103n ch\u1eb7n vi\u1ec7c ph\u00e2n ph\u1ed1i t\u1ea3i tr\u1ecdng \u0111\u1ed9c h\u1ea1i.<\/p>\n<\/li>\n<li>\n<p><strong>\u0110\u1ecbnh v\u1ecb \u0111\u1ecba l\u00fd:<\/strong> Proxy cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng xu\u1ea5t hi\u1ec7n nh\u01b0 th\u1ec3 h\u1ecd \u0111ang k\u1ebft n\u1ed1i t\u1eeb m\u1ed9t v\u1ecb tr\u00ed kh\u00e1c, b\u1ed5 sung th\u00eam m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt.<\/p>\n<\/li>\n<li>\n<p><strong>Ki\u1ec3m so\u00e1t truy c\u1eadp:<\/strong> C\u00e1c t\u1ed5 ch\u1ee9c c\u00f3 th\u1ec3 h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp v\u00e0o c\u00e1c trang web c\u1ee5 th\u1ec3, gi\u1ea3m nguy c\u01a1 T\u1ea3i xu\u1ed1ng theo Drive.<\/p>\n<\/li>\n<\/ul>\n<p>B\u1eb1ng c\u00e1ch k\u1ebft h\u1ee3p c\u00e1c m\u00e1y ch\u1ee7 proxy v\u00e0o chi\u1ebfn l\u01b0\u1ee3c an ninh m\u1ea1ng c\u1ee7a m\u00ecnh, c\u00e1c doanh nghi\u1ec7p v\u00e0 c\u00e1 nh\u00e2n c\u00f3 th\u1ec3 t\u0103ng c\u01b0\u1eddng \u0111\u00e1ng k\u1ec3 kh\u1ea3 n\u0103ng ph\u00f2ng th\u1ee7 tr\u01b0\u1edbc c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Drive-By Download.<\/p>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 T\u1ea3i xu\u1ed1ng qua Drive v\u00e0 c\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t v\u1ec1 an ninh m\u1ea1ng, h\u00e3y c\u00e2n nh\u1eafc kh\u00e1m ph\u00e1 c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n<ul>\n<li><a target=\"_new\" href=\"https:\/\/www.cisa.gov\/\" rel=\"noopener\">C\u01a1 quan An ninh m\u1ea1ng v\u00e0 C\u01a1 s\u1edf h\u1ea1 t\u1ea7ng (CISA)<\/a><\/li>\n<li><a target=\"_new\" href=\"https:\/\/www.nist.gov\/\" rel=\"noopener\">Vi\u1ec7n Ti\u00eau chu\u1ea9n v\u00e0 C\u00f4ng ngh\u1ec7 Qu\u1ed1c gia (NIST)<\/a><\/li>\n<li><a target=\"_new\" rel=\"noopener\">H\u01b0\u1edbng d\u1eabn b\u1ea3o v\u1ec7 t\u1ea3i xu\u1ed1ng b\u1eb1ng c\u00e1ch t\u1ea3i xu\u1ed1ng OWASP<\/a><\/li>\n<\/ul>","protected":false},"featured_media":580017,"menu_order":0,"template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-580016","glossary","type-glossary","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/glossary\/580016","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/glossary"}],"about":[{"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/types\/glossary"}],"version-history":[{"count":0,"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/glossary\/580016\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/media\/580017"}],"wp:attachment":[{"href":"https:\/\/proxyelite.info\/vi\/wp-json\/wp\/v2\/media?parent=580016"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}