{"id":3969,"date":"2024-05-09T18:30:45","date_gmt":"2024-05-09T18:30:45","guid":{"rendered":"https:\/\/chuyendoiso.haiphong.gov.vn\/?p=3969"},"modified":"2025-04-17T09:12:57","modified_gmt":"2025-04-17T09:12:57","slug":"phan-mem-gian-diep-moi-co-ten-cuckoo-de-doa-nguoi-dung-macos","status":"publish","type":"post","link":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/2024\/05\/09\/phan-mem-gian-diep-moi-co-ten-cuckoo-de-doa-nguoi-dung-macos\/","title":{"rendered":"Ph\u1ea7n m\u1ec1m gi\u00e1n \u0111i\u1ec7p m\u1edbi c\u00f3 t\u00ean Cuckoo \u0111e d\u1ecda ng\u01b0\u1eddi d\u00f9ng MacOS"},"content":{"rendered":"

C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u00e3 ghi nh\u1eadn r\u1ee7i ro an ninh m\u1ea1ng m\u1edbi \u0111\u1ed1i v\u1edbi h\u1ec7 th\u1ed1ng MacOS c\u1ee7a Apple. N\u00f3 c\u00f3 th\u1ec3 t\u1ed3n t\u1ea1i l\u00e2u d\u00e0i tr\u00ean c\u00e1c m\u00e1y t\u00ednh m\u1ee5c ti\u00eau v\u00e0 ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t ph\u1ea7n m\u1ec1m gi\u00e1n \u0111i\u1ec7p, c\u00f3 kh\u1ea3 n\u0103ng thu th\u1eadp th\u00f4ng tin t\u1eeb c\u00e1c m\u00e1y ch\u1ee7 \u0111\u00e3 b\u1ecb nhi\u1ec5m.<\/b><\/p>\n

\"1715138967446.png\"<\/div>\n

\u200b<\/p>\n

Ph\u1ea7n m\u1ec1m \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 Cuckoo, ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t c\u00f4ng c\u1ee5 gi\u00e1n \u0111i\u1ec7p tr\u00ean c\u00e1c m\u00e1y Mac d\u1ef1a tr\u00ean c\u1ea3 Intel v\u00e0 Arm. D\u01b0\u1eddng nh\u01b0, ph\u1ea7n m\u1ec1m \u0111\u01b0\u1ee3c ph\u00e2n ph\u1ed1i th\u00f4ng qua c\u00e1c trang web nh\u01b0 dumpmedia.com, tunesolo.com, Fonedog.com, tunesfun.com v\u00e0 tunefab.com, c\u00e1c trang n\u00e0y th\u01b0\u1eddng cung c\u1ea5p c\u00e1c d\u1ecbch v\u1ee5 tr\u00edch xu\u1ea5t nh\u1ea1c t\u1eeb c\u00e1c n\u1ec1n t\u1ea3ng ph\u00e1t tr\u1ef1c tuy\u1ebfn.<\/p>\n

Cuckoo s\u1eed d\u1ee5ng k\u1ef9 thu\u1eadt LaunchAgent \u0111\u1ec3 duy tr\u00ec s\u1ef1 t\u1ed3n t\u1ea1i tr\u00ean h\u1ec7 th\u1ed1ng, c\u00f9ng v\u1edbi vi\u1ec7c s\u1eed d\u1ee5ng osascript \u0111\u1ec3 hi\u1ec3n th\u1ecb l\u1eddi nh\u1eafc m\u1eadt kh\u1ea9u gi\u1ea3, nh\u1eb1m l\u1eeba ng\u01b0\u1eddi d\u00f9ng cung c\u1ea5p m\u1eadt kh\u1ea9u. Ngo\u00e0i ra, n\u00f3 c\u00f2n th\u1ef1c hi\u1ec7n c\u00e1c l\u1ec7nh \u0111\u1ec3 tr\u00edch xu\u1ea5t th\u00f4ng tin t\u1eeb h\u1ec7 th\u1ed1ng, bao g\u1ed3m c\u1ea3 th\u00f4ng tin ph\u1ea7n c\u1ee9ng v\u00e0 d\u1eef li\u1ec7u t\u1eeb iCloud Keychain, Apple Notes, v\u00e0 c\u00e1c \u1ee9ng d\u1ee5ng nh\u01b0 Discord, FileZilla, Steam v\u00e0 Telegram.<\/p>\n

B\u00ean c\u1ea1nh \u0111\u00f3, m\u1ed9t m\u00e3 \u0111\u1ed9c kh\u00e1c l\u00e0 CloudChat \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1, chuy\u00ean gi\u1ea3 m\u1ea1o \u1ee9ng d\u1ee5ng nh\u1eafn tin v\u00e0 c\u00f3 th\u1ec3 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn ng\u01b0\u1eddi d\u00f9ng MacOS. N\u00f3 li\u00ean quan \u0111\u1ebfn m\u1ed9t bi\u1ebfn th\u1ec3 m\u1edbi c\u1ee7a ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i AdLoad (Rload ho\u1eb7c Lador), c\u00f3 th\u1ec3 tr\u00e1nh \u0111\u01b0\u1ee3c danh s\u00e1ch ch\u1eef k\u00fd ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i c\u1ee7a Apple XProtect.<\/p>\n

Tr\u00ean MacOS c\u00f3 m\u1ed9t lo\u1ea1t \u1ee9ng d\u1ee5ng \u0111a d\u1ea1ng, l\u00e0m cho vi\u1ec7c x\u00e1c \u0111\u1ecbnh t\u00ednh an to\u00e0n c\u1ee7a ch\u00fang tr\u1edf n\u00ean kh\u00f3 kh\u0103n \u0111\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng. Do \u0111\u00f3, ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c khuy\u1ebfn c\u00e1o c\u1ea7n th\u1eadn tr\u1ecdng khi t\u1ea3i \u1ee9ng d\u1ee5ng t\u1eeb c\u00e1c trang web kh\u00f4ng r\u00f5 ngu\u1ed3n g\u1ed1c.<\/p>\n

Ngu\u1ed3n tin: https:\/\/whitehat.vn\/<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u \u0111\u00e3 ghi nh\u1eadn r\u1ee7i ro an ninh m\u1ea1ng m\u1edbi \u0111\u1ed1i v\u1edbi h\u1ec7 th\u1ed1ng MacOS c\u1ee7a Apple. N\u00f3 c\u00f3 th\u1ec3 t\u1ed3n t\u1ea1i l\u00e2u d\u00e0i tr\u00ean c\u00e1c m\u00e1y t\u00ednh m\u1ee5c ti\u00eau v\u00e0 ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t ph\u1ea7n m\u1ec1m gi\u00e1n \u0111i\u1ec7p, c\u00f3 kh\u1ea3 n\u0103ng thu th\u1eadp th\u00f4ng tin t\u1eeb c\u00e1c m\u00e1y ch\u1ee7 \u0111\u00e3 b\u1ecb […]<\/p>\n","protected":false},"author":6,"featured_media":3972,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[13],"tags":[],"class_list":{"0":"post-3969","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-tin-tuc"},"_links":{"self":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/3969","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/comments?post=3969"}],"version-history":[{"count":1,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/3969\/revisions"}],"predecessor-version":[{"id":3979,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/3969\/revisions\/3979"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/media\/3972"}],"wp:attachment":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/media?parent=3969"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/categories?post=3969"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/tags?post=3969"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}