{"id":1668,"date":"2024-04-25T04:16:49","date_gmt":"2024-04-25T04:16:49","guid":{"rendered":"https:\/\/tastycounter.net\/index.php\/2024\/04\/25\/mot-lap-trinh-vien-phat-hien-ra-lo-hong-bao-mat-co-the-lam-sap-he-thong-toan-cau\/"},"modified":"2024-04-25T04:16:49","modified_gmt":"2024-04-25T04:16:49","slug":"mot-lap-trinh-vien-phat-hien-ra-lo-hong-bao-mat-co-the-lam-sap-he-thong-toan-cau","status":"publish","type":"post","link":"https:\/\/tastycounter.net\/index.php\/2024\/04\/25\/mot-lap-trinh-vien-phat-hien-ra-lo-hong-bao-mat-co-the-lam-sap-he-thong-toan-cau\/","title":{"rendered":"M\u1ed9t l\u1eadp tr\u00ecnh vi\u00ean ph\u00e1t hi\u1ec7n ra l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt c\u00f3 th\u1ec3 l\u00e0m s\u1eadp h\u1ec7 th\u1ed1ng to\u00e0n c\u1ea7u"},"content":{"rendered":"<\/p>\n
\n

V\u00e0o cu\u1ed1i th\u00e1ng Ba v\u1eeba qua, Andres Freund, m\u1ed9t l\u1eadp tr\u00ecnh vi\u00ean 38 tu\u1ed5i hi\u1ec7n \u0111ang s\u1ed1ng t\u1ea1i San Francisco v\u00e0 l\u00e0m vi\u1ec7c cho Microsoft \u0111\u00e3 ph\u00e1t hi\u1ec7n m\u1ed9t c\u1eeda h\u1eadu (backdoor) \u1ea9n trong m\u1ed9t ph\u1ea7n m\u1ec1m thu\u1ed9c h\u1ec7 \u0111i\u1ec1u h\u00e0nh Linux c\u00f3 th\u1ec3 d\u1eabn l\u1ed1i cho hacker truy c\u1eadp v\u00e0o h\u00e0ng tr\u0103m tri\u1ec7u m\u00e1y t\u00ednh tr\u00ean to\u00e0n th\u1ebf gi\u1edbi. May m\u1eafn l\u00e0 s\u1ef1 c\u1ed1 \u0111\u00e1ng ti\u1ebfc \u0111\u00e3 kh\u00f4ng di\u1ec5n ra.<\/p>\n

H\u1ec7 \u0111i\u1ec1u h\u00e0nh Linux \u0111\u01b0\u1ee3c cho l\u00e0 ph\u1ea7n m\u1ec1m m\u00e3 ngu\u1ed3n m\u1edf quan tr\u1ecdng nh\u1ea5t th\u1ebf gi\u1edbi. Ph\u1ea7n l\u1edbn c\u00e1c server tr\u00ean th\u1ebf gi\u1edbi – bao g\u1ed3m nh\u1eefng server thu\u1ed9c ng\u00e2n h\u00e0ng, b\u1ec7nh vi\u1ec7n, ch\u00ednh ph\u1ee7\u2026 \u0111\u1ec1u \u0111ang ch\u1ea1y tr\u00ean Linux, n\u00ean l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt c\u1ee7a Linux s\u1ebd c\u00f3 nguy c\u01a1 \u1ea3nh h\u01b0\u1edfng to\u00e0n c\u1ea7u.<\/p>\n

\"H\u00ecnh
H\u00ecnh minh h\u1ecda Coder Freund \u0111\u00e3 ng\u0103n ch\u1eb7n m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng quy m\u00f4 l\u1edbn.<\/figcaption><\/figure>\n

L\u1ed7 h\u1ed5ng nguy hi\u1ec3m n\u00e0y \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n khi Freund b\u1ea3o tr\u00ec \u0111\u1ecbnh k\u1ef3 m\u1ed9t ph\u1ea7n c\u1ee7a PostgreSQL – ph\u1ea7n m\u1ec1m m\u00e3 ngu\u1ed3n m\u1edf d\u00f9ng trong x\u1eed l\u00fd c\u01a1 s\u1edf d\u1eef li\u1ec7u.<\/p>\n

<\/ins><\/div>\n

Trong khi tra so\u00e1t m\u1ed9t lo\u1ea1t nh\u1eefng b\u00e0i th\u1eed t\u1ef1 \u0111\u1ed9ng, anh nh\u1eadn ra m\u1ed9t \u1ee9ng d\u1ee5ng c\u00f3 t\u00ean SSH – v\u1ed1n \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 truy c\u1eadp m\u00e1y t\u00ednh t\u1eeb xa – \u0111ang d\u00f9ng nhi\u1ec1u t\u00e0i nguy\u00ean h\u01a1n b\u00ecnh th\u01b0\u1eddng. Ti\u1ebfp t\u1ee5c l\u1ea7n theo d\u1ea5u v\u1ebft, anh th\u1ea5y m\u1ed9t c\u00f4ng c\u1ee5 n\u00e9n d\u1eef li\u1ec7u c\u00f3 t\u00ean xz Utils khi\u1ebfn anh nh\u1edb t\u1edbi th\u00f4ng b\u00e1o l\u1ed7i c\u00e1ch \u0111\u00e2y kh\u00f4ng l\u00e2u.<\/p>\n

Sau khi \u2018\u0111\u00e0o s\u00e2u\u2019 v\u00e0o m\u00e3 ngu\u1ed3n c\u1ee7a xz Utils, Freund th\u1ea5y d\u1ea5u v\u1ebft ch\u1ec9nh s\u1eeda c\u1ee7a m\u1ed9t ai \u0111\u00f3 hay m\u1ed9t t\u1ed5 ch\u1ee9c n\u00e0o \u0111\u00f3. C\u1ee5 th\u1ec3, m\u00e3 \u0111\u1ed9c \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00e0i c\u1eafm v\u00e0o phi\u00ean b\u1ea3n m\u1edbi nh\u1ea5t c\u1ee7a xz Utils. C\u1eeda h\u1eadu n\u00e0y s\u1ebd cho ph\u00e9p k\u1ebb c\u00e0i m\u00e3 \u0111\u1ed9c t\u1eadn d\u1ee5ng k\u1ebft n\u1ed1i SSH v\u00e0 b\u00ed m\u1eadt ch\u1ea1y ph\u1ea7n m\u1ec1m t\u1eeb xa.<\/p>\n

Anh \u0111\u00e3 thu th\u1eadp \u0111\u01b0\u1ee3c nhi\u1ec1u b\u1eb1ng ch\u1ee9ng khi \u2018\u0111\u00e0o s\u00e2u\u2019 h\u01a1n. Cu\u1ed1i th\u00e1ng Ba v\u1eeba qua, anh Freund g\u1eedi ch\u1ee9ng c\u1ee9 thu th\u1eadp \u0111\u01b0\u1ee3c t\u1edbi m\u1ed9t nh\u00f3m c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n ph\u1ea7n m\u1ec1m m\u00e3 ngu\u1ed3n m\u1edf v\u00e0 khi\u1ebfn c\u1ed9ng \u0111\u1ed3ng d\u1eady s\u00f3ng. Ch\u1ec9 trong v\u00f2ng v\u00e0i ti\u1ebfng, l\u1ed7i nghi\u00eam tr\u1ecdng n\u00e0y \u0111\u00e3 \u0111\u01b0\u1ee3c v\u00e1.<\/p>\n

M\u1ed9t s\u1ed1 l\u1eadp tr\u00ecnh vi\u00ean kh\u1eb3ng \u0111\u1ecbnh n\u1ebfu Freund kh\u00f4ng ph\u00e1t hi\u1ec7n ra, m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng \u0111\u1ec3 l\u1ea1i v\u1ebft nh\u01a1 trong s\u1eed s\u00e1ch \u0111\u00e3 c\u00f3 th\u1ec3 x\u1ea3y ra.<\/p>\n

Alex Stamos, gi\u00e1m \u0111\u1ed1c c\u1ea5p cao t\u1ea1i SentinelOne, m\u1ed9t c\u00f4ng ty nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt m\u1ea1ng cho hay, c\u1eeda h\u1eadu do Freund ph\u00e1t hi\u1ec7n \u0111\u00e3 c\u00f3 th\u1ec3 l\u00e0 c\u1eeda h\u1eadu lan r\u1ed9ng nh\u1ea5t, hi\u1ec7u qu\u1ea3 nh\u1ea5t t\u1eebng \u0111\u01b0\u1ee3c c\u00e0i c\u1eafm v\u00e0o b\u1ea5t c\u1ee9 ph\u1ea7n m\u1ec1m n\u00e0o, c\u00f3 th\u1ec3 \u201ctrao cho k\u1ebb t\u1ea1o ra n\u00f3 ch\u00eca kh\u00f3a t\u1ed5ng \u0111\u1ec3 truy c\u1eadp h\u00e0ng tr\u0103m tri\u1ec7u m\u00e1y t\u00ednh s\u1eed d\u1ee5ng SSH tr\u00ean to\u00e0n c\u1ea7u\u201d. Khi \u0111\u00f3, k\u1ebb gian \u0111\u00e3 c\u00f3 th\u1ec3 \u0111\u00e1nh c\u1eafp \u0111\u01b0\u1ee3c th\u00f4ng tin nh\u1ea1y c\u1ea3m, c\u00e0i c\u1eafm malware, g\u00e2y ra nhi\u1ec5u lo\u1ea1n c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng to\u00e0n c\u1ea7u \u2026 m\u00e0 kh\u00f4ng h\u1ec1 b\u1ecb b\u1eaft.<\/p>\n

Freund cho bi\u1ebft, k\u1ebb \u0111\u1ee9ng sau s\u1ef1 vi\u1ec7c n\u00e0y \u0111\u1ee7 kh\u00f4n kh\u00e9o v\u00e0 tinh ranh \u0111\u1ec3 x\u00f3a d\u1ea5u v\u1ebft, khi\u1ebfn m\u00e3 \u0111\u1ed9c kh\u00f3 t\u00ecm ra h\u01a1n.<\/p>\n

Sau khi ph\u00e1t hi\u1ec7n ra l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt, Freund v\u1eabn \u0111ang gi\u00fap nh\u00f3m c\u00e1c l\u1eadp tr\u00ecnh vi\u00ean ph\u00e2n t\u00edch v\u00e0 t\u00ecm ra k\u1ebb ch\u1ee7 m\u01b0u. C\u00f9ng v\u1edbi \u0111\u00f3, Freund c\u0169ng \u0111ang t\u1ef1 ph\u00e1t tri\u1ec3n v\u00e0 ho\u00e0n thi\u1ec7n m\u1ed9t phi\u00ean b\u1ea3n c\u1ee7a PostgreSQL, d\u1ef1 ki\u1ebfn s\u1ebd ra m\u1eaft cu\u1ed1i n\u0103m nay.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

V\u00e0o cu\u1ed1i th\u00e1ng Ba v\u1eeba qua, Andres Freund, m\u1ed9t l\u1eadp tr\u00ecnh vi\u00ean 38 tu\u1ed5i hi\u1ec7n \u0111ang s\u1ed1ng t\u1ea1i San Francisco v\u00e0 l\u00e0m vi\u1ec7c cho Microsoft \u0111\u00e3 ph\u00e1t hi\u1ec7n m\u1ed9t c\u1eeda h\u1eadu (backdoor) \u1ea9n trong m\u1ed9t ph\u1ea7n m\u1ec1m thu\u1ed9c h\u1ec7 \u0111i\u1ec1u h\u00e0nh Linux c\u00f3 th\u1ec3 d\u1eabn l\u1ed1i cho hacker truy c\u1eadp v\u00e0o h\u00e0ng tr\u0103m tri\u1ec7u m\u00e1y […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1668","post","type-post","status-publish","format-standard","hentry","category-khong-phan-loai"],"_links":{"self":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts\/1668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/comments?post=1668"}],"version-history":[{"count":0,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts\/1668\/revisions"}],"wp:attachment":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/media?parent=1668"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/categories?post=1668"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/tags?post=1668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}