{"id":4063,"date":"2024-06-03T19:55:56","date_gmt":"2024-06-03T19:55:56","guid":{"rendered":"https:\/\/chuyendoiso.haiphong.gov.vn\/?p=4063"},"modified":"2025-04-17T09:26:58","modified_gmt":"2025-04-17T09:26:58","slug":"fbi-huong-dan-go-bo-ung-dung-vpn-cua-mang-botnet-vua-bi-danh-sap","status":"publish","type":"post","link":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/2024\/06\/03\/fbi-huong-dan-go-bo-ung-dung-vpn-cua-mang-botnet-vua-bi-danh-sap\/","title":{"rendered":"FBI h\u01b0\u1edbng d\u1eabn g\u1ee1 b\u1ecf \u1ee9ng d\u1ee5ng VPN c\u1ee7a m\u1ea1ng botnet v\u1eeba b\u1ecb \u0111\u00e1nh s\u1eadp"},"content":{"rendered":"

FBI \u0111\u00e3 ph\u1ed1i h\u1ee3p c\u00e1c c\u01a1 quan ph\u00e1p lu\u1eadt kh\u00e1c tri\u1ec7t ph\u00e1 botnet 911 S5, chuy\u00ean c\u1ea5y m\u00e3 \u0111\u1ed9c l\u00ean thi\u1ebft b\u1ecb th\u00f4ng qua c\u00e1c \u1ee9ng d\u1ee5ng VPN \u0111\u1ed9c h\u1ea1i.<\/strong><\/p>\n

\n

Theo th\u00f4ng b\u00e1o chung c\u1ee7a nh\u00e0 ch\u1ee9c tr\u00e1ch, botnet 911 S5 b\u1eaft \u0111\u1ea7u ho\u1ea1t \u0111\u1ed9ng t\u1eeb th\u00e1ng 5\/2014 v\u00e0 b\u1ecb \u0111\u00e1nh s\u1eadp v\u00e0o th\u00e1ng 7\/2022 tr\u01b0\u1edbc khi \u201ct\u00e1i sinh\u201d d\u01b0\u1edbi t\u00ean Cloudrouter v\u00e0o th\u00e1ng 10\/2023.<\/p>\n

911 S5 c\u00f3 th\u1ec3 l\u00e0 d\u1ecbch v\u1ee5 proxy d\u00e2n c\u01b0 v\u00e0 botnet l\u1edbn nh\u1ea5t th\u1ebf gi\u1edbi v\u1edbi h\u01a1n 19 tri\u1ec7u \u0111\u1ecba ch\u1ec9 IP b\u1ecb x\u00e2m ph\u1ea1m t\u1ea1i h\u01a1n 190 qu\u1ed1c gia, g\u00e2y thi\u1ec7t h\u1ea1i h\u00e0ng t\u1ef7 USD.<\/p>\n

Nh\u00e0 ch\u1ee9c tr\u00e1ch ch\u1ec9 ra c\u00e1c \u1ee9ng d\u1ee5ng VPN mi\u1ec5n ph\u00ed, b\u1ea5t h\u1ee3p ph\u00e1p \u0111\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o ra \u0111\u1ec3 k\u1ebft n\u1ed1i v\u1edbi d\u1ecbch v\u1ee5 c\u1ee7a 911 S5 bao g\u1ed3m: MaskVPN, DewVPN, PaladinVPN, ProxyGate, ShieldVPN, v\u00e0 ShineVPN.<\/p>\n

Khi ng\u01b0\u1eddi d\u00f9ng t\u1ea3i xu\u1ed1ng c\u00e1c \u1ee9ng d\u1ee5ng VPN n\u00e0y, h\u1ecd v\u00f4 t\u00ecnh tr\u1edf th\u00e0nh n\u1ea1n nh\u00e2n c\u1ee7a botnet 911 S5. C\u00e1c c\u1eeda h\u1eadu proxy \u0111\u00f3 cho ph\u00e9p t\u1ed9i ph\u1ea1m th\u1ef1c hi\u1ec7n c\u00e1c h\u00e0nh vi ph\u1ea1m t\u1ed9i nh\u01b0 \u0111e d\u1ecda n\u00e9m bom, l\u1eeba \u0111\u1ea3o t\u00e0i ch\u00ednh, \u0111\u00e1nh c\u1eafp danh t\u00ednh, khai th\u00e1c tr\u1ebb em… B\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng c\u1eeda h\u1eadu proxy, nh\u1eefng h\u00e0nh vi ph\u1ea1m ph\u00e1p d\u01b0\u1eddng nh\u01b0 xu\u1ea5t ph\u00e1t t\u1eeb thi\u1ebft b\u1ecb c\u1ee7a n\u1ea1n nh\u00e2n.<\/p>\n

\u0110\u1ec3 bi\u1ebft b\u1ea3n th\u00e2n c\u00f3 ph\u1ea3i n\u1ea1n nh\u00e2n c\u1ee7a botnet 911 S5 hay kh\u00f4ng, \u0111\u1ed9c gi\u1ea3 c\u00f3 th\u1ec3 l\u00e0m theo h\u01b0\u1edbng d\u1eabn c\u1ee7a\u00a0FBI\u00a0nh\u01b0 d\u01b0\u1edbi \u0111\u00e2y.<\/p>\n

1. B\u1ea5m t\u1ed5 h\u1ee3p ph\u00edm\u00a0Control + Alt + Delete<\/em>\u00a0tr\u00ean b\u00e0n ph\u00edm v\u00e0 ch\u1ecdn Task Manager ho\u1eb7c b\u1ea5m ph\u1ea3i chu\u1ed9t v\u00e0o tr\u00ecnh \u0111\u01a1n Start, ch\u1ecdn Task Manager.<\/p>\n

2. Khi Task Manager \u0111\u00e3 kh\u1edfi ch\u1ea1y, b\u00ean d\u01b0\u1edbi th\u1ebb Process, t\u00ecm ki\u1ebfm: MaskVPN (mask_svc.exe), DewVPN (dew_svc.exe), PaladinVPN (pldsvc.exe), ProxyGate (proxygate.exe, cloud.exe), ShieldVPN (shieldsvc.exe), ShineVPN (shsvc.exe).<\/p>\n

\"\"
V\u00ed d\u1ee5 v\u1ec1 vi\u1ec7c ShieldVPN v\u00e0 ShieldVPN Svc \u0111ang ho\u1ea1t \u0111\u1ed9ng.<\/figcaption><\/figure>\n

N\u1ebfu Task Manager kh\u00f4ng ph\u00e1t hi\u1ec7n \u0111\u01b0\u1ee3c m\u1ed9t trong c\u00e1c d\u1ecbch v\u1ee5 n\u00f3i tr\u00ean, h\u00e3y ki\u1ec3m tra b\u1eb1ng c\u00e1ch t\u00ecm trong tr\u00ecnh \u0111\u01a1n Start b\u1ea5t k\u1ef3 d\u1ea5u v\u1ebft n\u00e0o c\u1ee7a ph\u1ea7n m\u1ec1m \u0111\u01b0\u1ee3c d\u00e1n nh\u00e3n \u201cMaskVPN,” “DewVPN,” “ShieldVPN,” “PaladinVPN,” “ProxyGate,” ho\u1eb7c “ShineVPN\u201d.<\/p>\n

3. B\u1ea5m v\u00e0o n\u00fat Start \u1edf g\u00f3c d\u01b0\u1edbi c\u00f9ng b\u00ean tr\u00e1i m\u00e0n h\u00ecnh, sau \u0111\u00f3 t\u00ecm ki\u1ebfm c\u00e1c t\u00ean sau \u0111\u00e2y: MaskVPN, DewVPN, ShieldVPN, PaladinVPN, ShineVPN, ProxyGate.<\/p>\n

4. N\u1ebfu ph\u00e1t hi\u1ec7n m\u1ed9t trong c\u00e1c \u1ee9ng d\u1ee5ng VPN, b\u1ea1n c\u00f3 th\u1ec3 t\u00ecm th\u1ea5y c\u00f4ng c\u1ee5 g\u1ee1 c\u00e0i \u0111\u1eb7t \u0111\u1eb7t \u1edf b\u00ean d\u01b0\u1edbi. B\u1ea5m v\u00e0o Uninstall.<\/p>\n

\"\"<\/p>\n

5. N\u1ebfu \u1ee9ng d\u1ee5ng kh\u00f4ng c\u00f3 t\u00f9y ch\u1ecdn g\u1ee1 c\u00e0i \u0111\u1eb7t, th\u1ef1c hi\u1ec7n c\u00e1c b\u01b0\u1edbc sau:<\/p>\n

a. B\u1ea5m v\u00e0o tr\u00ecnh \u0111\u01a1n Start v\u00e0 g\u00f5 \u201cAdd or remove programs\u201d \u0111\u1ec3 m\u1edf ra tr\u00ecnh \u0111\u01a1n \u201cAdd and remove programs\u201d.<\/p>\n

b. T\u00ecm t\u00ean c\u1ee7a \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i. Sau khi t\u00ecm ra, b\u1ea5m v\u00e0o t\u00ean c\u1ee7a \u1ee9ng d\u1ee5ng r\u1ed3i ch\u1ecdn Uninstall.<\/p>\n

c. Sau \u0111\u00f3, b\u1ea1n c\u00f3 th\u1ec3 x\u00e1c minh b\u1eb1ng c\u00e1ch b\u1ea5m v\u00e0o Start, g\u00f5 File Explorer.<\/p>\n

d. B\u1ea5m v\u00e0o \u1ed5 C r\u1ed3i ch\u1ecdn Program Files(x86). T\u1ea1i \u0111\u00e2y, t\u00ecm t\u00ean c\u1ee7a \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i trong danh s\u00e1ch file v\u00e0 th\u01b0 m\u1ee5c \u0111\u01b0\u1ee3c li\u1ec7t k\u00ea.<\/p>\n

\"\"e. V\u1edbi ProxyGate, truy c\u1eadp “C:\\users\\[Userprofile]\\AppData\\Roaming\\ProxyGate\u201d.<\/p>\n

f. N\u1ebfu kh\u00f4ng th\u1ea5y b\u1ea5t k\u1ef3 th\u01b0 m\u1ee5c n\u00e0o d\u00e1n nh\u00e3n “MaskVPN,” “DewVPN,” “ShineVPN,” “ShieldVPN,” “PaladinVPN,” hay “Proxygate\u201d, c\u00e1c \u1ee9ng d\u1ee5ng n\u00e0y c\u00f3 th\u1ec3 kh\u00f4ng \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t.<\/p>\n

g. N\u1ebfu m\u1ed9t d\u1ecbch v\u1ee5 b\u1ecb ph\u00e1t hi\u1ec7n \u0111ang ch\u1ea1y nh\u01b0ng kh\u00f4ng t\u00ecm th\u1ea5y trong tr\u00ecnh \u0111\u01a1n Start hay Add and remove programs:<\/p>\n

\u0110i \u0111\u1ebfn th\u01b0 m\u1ee5c \u0111\u01b0\u1ee3c m\u00f4 t\u1ea3 trong 5d v\u00e0 5e.<\/p>\n

M\u1edf Task Manager.<\/p>\n

Ch\u1ecdn d\u1ecbch v\u1ee5 li\u00ean quan \u0111\u1ebfn m\u1ed9t trong c\u00e1c \u1ee9ng d\u1ee5ng VPN \u0111\u1ed9c h\u1ea1i \u0111ang ch\u1ea1y trong th\u1ebb quy tr\u00ecnh (process).<\/p>\n

Ch\u1ecdn\u00a0End task<\/em>\u00a0\u0111\u1ec3 d\u1eebng \u1ee9ng d\u1ee5ng ho\u1ea1t \u0111\u1ed9ng. Sau \u0111\u00f3, b\u1ea5m ph\u1ea3i chu\u1ed9t v\u00e0o th\u01b0 m\u1ee5c mang t\u00ean \u201cMaskVPN,\u201d \u201cDewVPN,\u201d \u201cShineVPN,\u201d \u201cShieldVPN,\u201d \u201cPaladinVPN,\u201d ho\u1eb7c “ProxyGate\u201d, ch\u1ecdn Delele. B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 ch\u1ecdn t\u1ea5t c\u1ea3 t\u1eadp tin trong th\u01b0 m\u1ee5c r\u1ed3i ch\u1ecdn Delete.<\/p>\n

\"\"N\u1ebfu nh\u00ecn th\u1ea5y th\u00f4ng b\u00e1o l\u1ed7i khi c\u1ed1 x\u00f3a th\u01b0 m\u1ee5c ho\u1eb7c t\u1ea5t c\u1ea3 c\u00e1c t\u1eadp tin trong th\u01b0 m\u1ee5c, h\u00e3y \u0111\u1ea3m b\u1ea3o \u0111\u00e3 ch\u1ea5m d\u1ee9t m\u1ecdi quy tr\u00ecnh trong Windows Task Manager nh\u01b0 \u0111\u00e3 m\u00f4 t\u1ea3 trong b\u01b0\u1edbc 5g.<\/p>\n

Ngu\u1ed3n tin: https:\/\/vietnamnet.vn\/<\/em><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

FBI \u0111\u00e3 ph\u1ed1i h\u1ee3p c\u00e1c c\u01a1 quan ph\u00e1p lu\u1eadt kh\u00e1c tri\u1ec7t ph\u00e1 botnet 911 S5, chuy\u00ean c\u1ea5y m\u00e3 \u0111\u1ed9c l\u00ean thi\u1ebft b\u1ecb th\u00f4ng qua c\u00e1c \u1ee9ng d\u1ee5ng VPN \u0111\u1ed9c h\u1ea1i. Theo th\u00f4ng b\u00e1o chung c\u1ee7a nh\u00e0 ch\u1ee9c tr\u00e1ch, botnet 911 S5 b\u1eaft \u0111\u1ea7u ho\u1ea1t \u0111\u1ed9ng t\u1eeb th\u00e1ng 5\/2014 v\u00e0 b\u1ecb \u0111\u00e1nh s\u1eadp v\u00e0o th\u00e1ng 7\/2022 […]<\/p>\n","protected":false},"author":6,"featured_media":4065,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[13],"tags":[],"class_list":{"0":"post-4063","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-tin-tuc"},"_links":{"self":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/4063","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/comments?post=4063"}],"version-history":[{"count":1,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/4063\/revisions"}],"predecessor-version":[{"id":4068,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/posts\/4063\/revisions\/4068"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/media\/4065"}],"wp:attachment":[{"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/media?parent=4063"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/categories?post=4063"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/chuyendoiso.haiphong.gov.vn\/index.php\/wp-json\/wp\/v2\/tags?post=4063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}