{"id":2381,"date":"2024-07-22T02:58:12","date_gmt":"2024-07-22T02:58:12","guid":{"rendered":"https:\/\/tastycounter.net\/index.php\/2024\/07\/22\/crowdstrike-cong-bo-trung-tam-huong-dan-moi-de-xu-ly-su-co-ngung-hoat-dong-cua-windows\/"},"modified":"2024-07-22T02:58:12","modified_gmt":"2024-07-22T02:58:12","slug":"crowdstrike-cong-bo-trung-tam-huong-dan-moi-de-xu-ly-su-co-ngung-hoat-dong-cua-windows","status":"publish","type":"post","link":"https:\/\/tastycounter.net\/index.php\/2024\/07\/22\/crowdstrike-cong-bo-trung-tam-huong-dan-moi-de-xu-ly-su-co-ngung-hoat-dong-cua-windows\/","title":{"rendered":"CrowdStrike c\u00f4ng b\u1ed1 trung t\u00e2m h\u01b0\u1edbng d\u1eabn m\u1edbi \u0111\u1ec3 x\u1eed l\u00fd s\u1ef1 c\u1ed1 ng\u1eebng ho\u1ea1t \u0111\u1ed9ng c\u1ee7a Windows"},"content":{"rendered":"<\/p>\n
\n

CrowdStrike<\/a> \u0111\u00e3 xu\u1ea5t b\u1ea3n \u201cTrung t\u00e2m h\u01b0\u1edbng d\u1eabn v\u00e0 kh\u1eafc ph\u1ee5c\u201d m\u1edbi thu th\u1eadp th\u00f4ng tin chi ti\u1ebft li\u00ean quan \u0111\u1ebfn b\u1ea3n c\u1eadp nh\u1eadt b\u1ecb l\u1ed7i khi\u1ebfn 8,5 tri\u1ec7u m\u00e1y t\u00ednh Windows tr\u00ean to\u00e0n c\u1ea7u g\u1eb7p s\u1ef1 c\u1ed1 v\u00e0o th\u1ee9 S\u00e1u tu\u1ea7n tr\u01b0\u1edbc<\/a>.<\/p>\n

<\/figure>\n

Trang n\u00e0y bao g\u1ed3m th\u00f4ng tin k\u1ef9 thu\u1eadt v\u1ec1 nguy\u00ean nh\u00e2n g\u00e2y ra s\u1ef1 c\u1ed1 ng\u1eebng ho\u1ea1t \u0111\u1ed9ng, h\u1ec7 th\u1ed1ng n\u00e0o b\u1ecb \u1ea3nh h\u01b0\u1edfng v\u00e0 tuy\u00ean b\u1ed1 c\u1ee7a Gi\u00e1m \u0111\u1ed1c \u0111i\u1ec1u h\u00e0nh George Kurtz. N\u00f3 c\u0169ng ch\u1ee9a c\u00e1c li\u00ean k\u1ebft \u0111\u1ebfn nh\u1eefng quy tr\u00ecnh kh\u00f4i ph\u1ee5c kh\u00f3a Bitlocker v\u00e0 c\u00e1c trang kh\u00e1c nhau c\u1ee7a nh\u00e0 cung c\u1ea5p b\u00ean th\u1ee9 ba v\u1ec1 c\u00e1ch x\u1eed l\u00fd s\u1ef1 c\u1ed1 ng\u1eebng ho\u1ea1t \u0111\u1ed9ng.<\/p>\n

Trang n\u00e0y tr\u1ecf \u0111\u1ebfn m\u1ed9t b\u00e0i vi\u1ebft c\u01a1 s\u1edf ki\u1ebfn \u200b\u200bth\u1ee9c (ch\u1ec9 nh\u1eefng kh\u00e1ch h\u00e0ng \u0111\u00e3 \u0111\u0103ng nh\u1eadp m\u1edbi c\u00f3 th\u1ec3 truy c\u1eadp) v\u1ec1 c\u00e1ch s\u1eed d\u1ee5ng USB boot. Microsoft \u0111\u00e3 ph\u00e1t h\u00e0nh m\u1ed9t c\u00f4ng c\u1ee5 nh\u01b0 v\u1eady ng\u00e0y h\u00f4m qua \u0111\u1ec3 t\u1ef1 \u0111\u1ed9ng x\u00f3a file k\u00eanh c\u00f3 v\u1ea5n \u0111\u1ec1 khi\u1ebfn m\u00e1y b\u1ecb l\u1ed7i m\u00e0n h\u00ecnh xanh<\/a>.<\/p>\n

CrowdStrike c\u0169ng \u0111\u00e3 xu\u1ea5t b\u1ea3n m\u1ed9t blog ng\u00e0y h\u00f4m qua c\u1ea3nh b\u00e1o r\u1eb1ng c\u00e1c t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u00e3 l\u1ee3i d\u1ee5ng t\u00ecnh h\u00ecnh n\u00e0y \u0111\u1ec3 ph\u00e1t t\u00e1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng \u201ckho l\u01b0u tr\u1eef ZIP \u0111\u1ed9c h\u1ea1i c\u00f3 t\u00ean l\u00e0 Crowstrike-hotfix.zip\u201d.<\/p>\n

Kho l\u01b0u tr\u1eef ZIP ch\u1ee9a payload HijackLoader m\u00e0 khi \u0111\u01b0\u1ee3c th\u1ef1c thi s\u1ebd load RemCos. \u0110\u00e1ng ch\u00fa \u00fd, t\u00ean file v\u00e0 h\u01b0\u1edbng d\u1eabn b\u1eb1ng ti\u1ebfng T\u00e2y Ban Nha trong kho l\u01b0u tr\u1eef ZIP cho th\u1ea5y chi\u1ebfn d\u1ecbch n\u00e0y c\u00f3 th\u1ec3 nh\u1eafm m\u1ee5c ti\u00eau \u0111\u1ebfn kh\u00e1ch h\u00e0ng CrowdStrike c\u00f3 tr\u1ee5 s\u1edf t\u1ea1i Ch\u00e2u M\u1ef9 Latinh (LATAM).<\/em><\/p>\n

Sau n\u00e0y trong m\u1ed9t blog, CrowdStrike cho bi\u1ebft:<\/p>\n

Sau s\u1ef1 c\u1ed1 c\u1eadp nh\u1eadt n\u1ed9i dung, m\u1ed9t s\u1ed1 domain m\u1ea1o danh CrowdStrike \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh. Chi\u1ebfn d\u1ecbch n\u00e0y \u0111\u00e1nh d\u1ea5u tr\u01b0\u1eddng h\u1ee3p \u0111\u1ea7u ti\u00ean \u0111\u01b0\u1ee3c quan s\u00e1t th\u1ea5y trong \u0111\u00f3 t\u00e1c nh\u00e2n \u0111e d\u1ecda \u0111\u00e3 l\u1ee3i d\u1ee5ng v\u1ea5n \u0111\u1ec1 n\u1ed9i dung Falcon \u0111\u1ec3 ph\u00e2n ph\u1ed1i c\u00e1c file \u0111\u1ed9c h\u1ea1i nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o kh\u00e1ch h\u00e0ng CrowdStrike d\u1ef1a tr\u00ean LATAM.<\/em><\/p>\n

CrowdStrike cho bi\u1ebft c\u00e1c t\u1ed5 ch\u1ee9c ch\u1ec9 n\u00ean l\u00e0m vi\u1ec7c tr\u1ef1c ti\u1ebfp v\u1edbi \u0111\u1ea1i di\u1ec7n c\u1ee7a CrowdStrike b\u1eb1ng nh\u1eefng k\u00eanh ch\u00ednh th\u1ee9c v\u00e0 ch\u1ec9 n\u00ean s\u1eed d\u1ee5ng h\u01b0\u1edbng d\u1eabn m\u00e0 nh\u00f3m h\u1ed7 tr\u1ee3 c\u1ee7a h\u1ecd cung c\u1ea5p.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

CrowdStrike \u0111\u00e3 xu\u1ea5t b\u1ea3n \u201cTrung t\u00e2m h\u01b0\u1edbng d\u1eabn v\u00e0 kh\u1eafc ph\u1ee5c\u201d m\u1edbi thu th\u1eadp th\u00f4ng tin chi ti\u1ebft li\u00ean quan \u0111\u1ebfn b\u1ea3n c\u1eadp nh\u1eadt b\u1ecb l\u1ed7i khi\u1ebfn 8,5 tri\u1ec7u m\u00e1y t\u00ednh Windows tr\u00ean to\u00e0n c\u1ea7u g\u1eb7p s\u1ef1 c\u1ed1 v\u00e0o th\u1ee9 S\u00e1u tu\u1ea7n tr\u01b0\u1edbc. Trang n\u00e0y bao g\u1ed3m th\u00f4ng tin k\u1ef9 thu\u1eadt v\u1ec1 nguy\u00ean nh\u00e2n g\u00e2y […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2381","post","type-post","status-publish","format-standard","hentry","category-khong-phan-loai"],"_links":{"self":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts\/2381","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/comments?post=2381"}],"version-history":[{"count":0,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts\/2381\/revisions"}],"wp:attachment":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/media?parent=2381"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/categories?post=2381"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/tags?post=2381"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}