{"id":476145,"date":"2023-08-09T07:26:52","date_gmt":"2023-08-09T07:26:52","guid":{"rendered":""},"modified":"2023-09-05T11:12:08","modified_gmt":"2023-09-05T11:12:08","slug":"business-email-compromise-bec","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/business-email-compromise-bec\/","title":{"rendered":"Th\u1ecfa hi\u1ec7p email doanh nghi\u1ec7p (BEC)"},"content":{"rendered":"<p>L\u1eeba \u0111\u1ea3o email doanh nghi\u1ec7p (BEC) l\u00e0 m\u1ed9t chi\u1ebfn thu\u1eadt t\u1ed9i ph\u1ea1m m\u1ea1ng tinh vi v\u00e0 \u0111\u1ed9c h\u1ea1i nh\u1eafm v\u00e0o c\u00e1c doanh nghi\u1ec7p v\u00e0 t\u1ed5 ch\u1ee9c tr\u00ean to\u00e0n th\u1ebf gi\u1edbi. N\u00f3 li\u00ean quan \u0111\u1ebfn vi\u1ec7c thao t\u00fang c\u00e1c c\u00e1 nh\u00e2n trong m\u1ed9t t\u1ed5 ch\u1ee9c, th\u01b0\u1eddng th\u00f4ng qua c\u00e1c email l\u1eeba \u0111\u1ea3o, \u0111\u1ec3 x\u00e2m ph\u1ea1m th\u00f4ng tin nh\u1ea1y c\u1ea3m, th\u1ef1c hi\u1ec7n c\u00e1c giao d\u1ecbch t\u00e0i ch\u00ednh tr\u00e1i ph\u00e9p ho\u1eb7c truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0o h\u1ec7 th\u1ed1ng m\u00e1y t\u00ednh. BEC l\u00e0 m\u1ed9t t\u1eadp h\u1ee3p con c\u1ee7a c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o v\u00e0 \u0111\u00e3 tr\u1edf th\u00e0nh m\u1ed1i lo ng\u1ea1i \u0111\u00e1ng k\u1ec3 \u0111\u1ed1i v\u1edbi c\u00e1c doanh nghi\u1ec7p do kh\u1ea3 n\u0103ng g\u00e2y t\u1ed5n th\u1ea5t t\u00e0i ch\u00ednh \u0111\u00e1ng k\u1ec3 v\u00e0 thi\u1ec7t h\u1ea1i v\u1ec1 danh ti\u1ebfng.<\/p>\n<h2>L\u1ecbch s\u1eed ngu\u1ed3n g\u1ed1c c\u1ee7a Th\u1ecfa thu\u1eadn email doanh nghi\u1ec7p (BEC) v\u00e0 l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn n\u00f3<\/h2>\n<p>Ngu\u1ed3n g\u1ed1c c\u1ee7a L\u1eeba \u0111\u1ea3o qua Email Doanh nghi\u1ec7p c\u00f3 th\u1ec3 b\u1eaft ngu\u1ed3n t\u1eeb \u0111\u1ea7u nh\u1eefng n\u0103m 2000 khi t\u1ed9i ph\u1ea1m m\u1ea1ng b\u1eaft \u0111\u1ea7u khai th\u00e1c email nh\u01b0 m\u1ed9t c\u00f4ng c\u1ee5 \u0111\u1ec3 l\u1eeba \u0111\u1ea3o t\u00e0i ch\u00ednh. Tuy nhi\u00ean, t\u00e0i li\u1ec7u \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn BEC trong b\u1ed1i c\u1ea3nh an ninh m\u1ea1ng c\u00f3 t\u1eeb n\u0103m 2010 khi FBI \u0111\u01b0a ra c\u1ea3nh b\u00e1o v\u1ec1 c\u00e1c v\u1ee5 l\u1eeba \u0111\u1ea3o nh\u1eafm v\u00e0o c\u00e1c doanh nghi\u1ec7p th\u00f4ng qua c\u00e1c email b\u1ecb x\u00e2m nh\u1eadp. K\u1ec3 t\u1eeb \u0111\u00f3, BEC \u0111\u00e3 ph\u00e1t tri\u1ec3n th\u00e0nh m\u1ed9t d\u1ea1ng t\u1ed9i ph\u1ea1m m\u1ea1ng tinh vi, k\u1ebft h\u1ee3p nhi\u1ec1u k\u1ef9 thu\u1eadt l\u1eeba \u0111\u1ea3o x\u00e3 h\u1ed9i kh\u00e1c nhau \u0111\u1ec3 \u0111\u00e1nh l\u1eeba n\u1ea1n nh\u00e2n m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3.<\/p>\n<h2>Th\u00f4ng tin chi ti\u1ebft v\u1ec1 L\u1eeba \u0111\u1ea3o Email Doanh nghi\u1ec7p (BEC)<\/h2>\n<p>Th\u1ecfa thu\u1eadn email doanh nghi\u1ec7p bao g\u1ed3m m\u1ed9t quy tr\u00ecnh g\u1ed3m nhi\u1ec1u giai \u0111o\u1ea1n nh\u1eb1m khai th\u00e1c c\u00e1c l\u1ed7 h\u1ed5ng c\u1ee7a con ng\u01b0\u1eddi thay v\u00ec ch\u1ec9 d\u1ef1a v\u00e0o c\u00e1c l\u1ed7 h\u1ed5ng k\u1ef9 thu\u1eadt. C\u00e1c b\u01b0\u1edbc \u0111i\u1ec3n h\u00ecnh trong m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng BEC bao g\u1ed3m:<\/p>\n<ol>\n<li>\n<p><strong>Trinh s\u00e1t:<\/strong> T\u1ed9i ph\u1ea1m m\u1ea1ng thu th\u1eadp th\u00f4ng tin v\u1ec1 t\u1ed5 ch\u1ee9c m\u1ee5c ti\u00eau v\u00e0 nh\u00e2n vi\u00ean c\u1ee7a t\u1ed5 ch\u1ee9c \u0111\u00f3, th\u01b0\u1eddng th\u00f4ng qua c\u00e1c ngu\u1ed3n c\u00f4ng khai v\u00e0 n\u1ec1n t\u1ea3ng truy\u1ec1n th\u00f4ng x\u00e3 h\u1ed9i.<\/p>\n<\/li>\n<li>\n<p><strong>L\u1eeba \u0111\u1ea3o:<\/strong> B\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng th\u00f4ng tin thu th\u1eadp \u0111\u01b0\u1ee3c, k\u1ebb t\u1ea5n c\u00f4ng t\u1ea1o ra c\u00e1c email l\u1eeba \u0111\u1ea3o \u0111\u01b0\u1ee3c c\u00e1 nh\u00e2n h\u00f3a v\u00e0 thuy\u1ebft ph\u1ee5c, c\u00f3 v\u1ebb nh\u01b0 \u0111\u1ebfn t\u1eeb c\u00e1c ngu\u1ed3n \u0111\u00e1ng tin c\u1eady, ch\u1eb3ng h\u1ea1n nh\u01b0 gi\u00e1m \u0111\u1ed1c \u0111i\u1ec1u h\u00e0nh ho\u1eb7c \u0111\u1ed1i t\u00e1c kinh doanh.<\/p>\n<\/li>\n<li>\n<p><strong>L\u1eeba d\u1ed1i:<\/strong> C\u00e1c email c\u00f3 th\u1ec3 ch\u1ee9a c\u00e1c y\u00eau c\u1ea7u kh\u1ea9n c\u1ea5p, h\u00f3a \u0111\u01a1n gi\u1ea3 ho\u1eb7c h\u01b0\u1edbng d\u1eabn chuy\u1ec3n ti\u1ec1n, l\u1eeba ng\u01b0\u1eddi nh\u1eadn th\u1ef1c hi\u1ec7n h\u00e0nh \u0111\u1ed9ng ngay l\u1eadp t\u1ee9c.<\/p>\n<\/li>\n<li>\n<p><strong>Th\u1ecfa hi\u1ec7p:<\/strong> N\u1ebfu th\u00e0nh c\u00f4ng, ng\u01b0\u1eddi nh\u1eadn v\u00f4 t\u00ecnh l\u00e0m theo h\u01b0\u1edbng d\u1eabn c\u1ee7a k\u1ebb t\u1ea5n c\u00f4ng, d\u1eabn \u0111\u1ebfn chuy\u1ec3n ti\u1ec1n tr\u00e1i ph\u00e9p ho\u1eb7c ti\u1ebft l\u1ed9 d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a Th\u1ecfa hi\u1ec7p email doanh nghi\u1ec7p (BEC) v\u00e0 c\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng<\/h2>\n<p>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a cu\u1ed9c t\u1ea5n c\u00f4ng L\u1ea5n chi\u1ebfm email doanh nghi\u1ec7p c\u00f3 th\u1ec3 li\u00ean quan \u0111\u1ebfn m\u1ed9t s\u1ed1 t\u00e1c nh\u00e2n c\u00f3 vai tr\u00f2 ri\u00eang bi\u1ec7t:<\/p>\n<ol>\n<li>\n<p><strong>Ch\u1ee7 m\u01b0u:<\/strong> Ng\u01b0\u1eddi ch\u1ee7 m\u01b0u l\u00e0 ng\u01b0\u1eddi \u0111\u1ee9ng \u0111\u1ea7u ho\u1ea1t \u0111\u1ed9ng, ch\u1ecbu tr\u00e1ch nhi\u1ec7m l\u1eadp k\u1ebf ho\u1ea1ch v\u00e0 \u0111i\u1ec1u ph\u1ed1i c\u00e1c chi\u1ebfn d\u1ecbch BEC. H\u1ecd th\u01b0\u1eddng c\u00f3 ki\u1ebfn th\u1ee9c s\u00e2u r\u1ed9ng v\u1ec1 chi\u1ebfn thu\u1eadt k\u1ef9 thu\u1eadt x\u00e3 h\u1ed9i.<\/p>\n<\/li>\n<li>\n<p><strong>H\u01b0\u1edbng \u0111\u1ea1o:<\/strong> Ng\u01b0\u1eddi trinh s\u00e1t c\u00f3 tr\u00e1ch nhi\u1ec7m ti\u1ebfn h\u00e0nh nghi\u00ean c\u1ee9u ban \u0111\u1ea7u v\u1ec1 c\u00e1c m\u1ee5c ti\u00eau ti\u1ec1m n\u0103ng v\u00e0 thu th\u1eadp th\u00f4ng tin v\u1ec1 t\u1ed5 ch\u1ee9c v\u00e0 nh\u00e2n vi\u00ean c\u1ee7a t\u1ed5 ch\u1ee9c.<\/p>\n<\/li>\n<li>\n<p><strong>K\u1ebb l\u1eeba \u0111\u1ea3o:<\/strong> K\u1ebb l\u1eeba \u0111\u1ea3o l\u00e0 ng\u01b0\u1eddi t\u1ea1o v\u00e0 g\u1eedi c\u00e1c email l\u1eeba \u0111\u1ea3o \u0111\u1ebfn m\u1ee5c ti\u00eau, s\u1eed d\u1ee5ng nhi\u1ec1u k\u1ef9 thu\u1eadt kh\u00e1c nhau \u0111\u1ec3 tr\u1ed1n tr\u00e1nh c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt.<\/p>\n<\/li>\n<li>\n<p><strong>Con la:<\/strong> Con la l\u00e0 m\u1ed9t \u0111\u1ed3ng ph\u1ea1m v\u00f4 t\u00ecnh nh\u1eadn v\u00e0 chuy\u1ec3n ti\u1ec1n b\u1ea5t h\u1ee3p ph\u00e1p thay m\u1eb7t cho nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng. Nh\u1eefng con la th\u01b0\u1eddng \u0111\u01b0\u1ee3c tuy\u1ec3n d\u1ee5ng th\u00f4ng qua c\u00e1c v\u1ee5 l\u1eeba \u0111\u1ea3o vi\u1ec7c l\u00e0m tr\u1ef1c tuy\u1ebfn m\u00e0 kh\u00f4ng h\u1ec1 bi\u1ebft v\u1ec1 vi\u1ec7c h\u1ecd tham gia v\u00e0o c\u00e1c ho\u1ea1t \u0111\u1ed9ng t\u1ed9i ph\u1ea1m.<\/p>\n<\/li>\n<\/ol>\n<h2>Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a Th\u1ecfa thu\u1eadn email doanh nghi\u1ec7p (BEC)<\/h2>\n<p>Th\u1ecfa hi\u1ec7p email doanh nghi\u1ec7p c\u00f3 m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng ch\u00ednh khi\u1ebfn n\u00f3 kh\u00e1c bi\u1ec7t v\u1edbi c\u00e1c m\u1ed1i \u0111e d\u1ecda m\u1ea1ng kh\u00e1c:<\/p>\n<ol>\n<li>\n<p><strong>Tr\u1ecdng t\u00e2m k\u1ef9 thu\u1eadt x\u00e3 h\u1ed9i:<\/strong> BEC ch\u1ee7 y\u1ebfu d\u1ef1a v\u00e0o c\u00e1c chi\u1ebfn thu\u1eadt t\u1ea5n c\u00f4ng x\u00e3 h\u1ed9i, nh\u1eafm v\u00e0o c\u00e1c l\u1ed7 h\u1ed5ng c\u1ee7a con ng\u01b0\u1eddi thay v\u00ec khai th\u00e1c c\u00e1c \u0111i\u1ec3m y\u1ebfu v\u1ec1 m\u1eb7t k\u1ef9 thu\u1eadt.<\/p>\n<\/li>\n<li>\n<p><strong>C\u00e1 nh\u00e2n h\u00f3a:<\/strong> Email BEC th\u01b0\u1eddng \u0111\u01b0\u1ee3c c\u00e1 nh\u00e2n h\u00f3a cao, khi\u1ebfn ch\u00fang tr\u1edf n\u00ean thuy\u1ebft ph\u1ee5c h\u01a1n v\u00e0 kh\u00f3 b\u1ecb ph\u00e1t hi\u1ec7n h\u01a1n.<\/p>\n<\/li>\n<li>\n<p><strong>M\u1ea1o danh:<\/strong> Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng kh\u00e9o l\u00e9o m\u1ea1o danh gi\u00e1m \u0111\u1ed1c \u0111i\u1ec1u h\u00e0nh, nh\u00e0 cung c\u1ea5p ho\u1eb7c c\u00e1c ngu\u1ed3n \u0111\u00e1ng tin c\u1eady kh\u00e1c \u0111\u1ec3 \u0111\u00e1nh l\u1eeba n\u1ea1n nh\u00e2n m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3.<\/p>\n<\/li>\n<li>\n<p><strong>Thi\u1ebfu ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i:<\/strong> Kh\u00f4ng gi\u1ed1ng nh\u01b0 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng truy\u1ec1n th\u1ed1ng, c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng BEC kh\u00f4ng d\u1ef1a v\u00e0o ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i, khi\u1ebfn ch\u00fang kh\u00f3 b\u1ecb ph\u00e1t hi\u1ec7n h\u01a1n b\u1eb1ng c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt ti\u00eau chu\u1ea9n.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c lo\u1ea1i th\u1ecfa hi\u1ec7p email doanh nghi\u1ec7p (BEC)<\/h2>\n<p>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng BEC c\u00f3 th\u1ec3 c\u00f3 nhi\u1ec1u h\u00ecnh th\u1ee9c kh\u00e1c nhau, t\u00f9y thu\u1ed9c v\u00e0o m\u1ee5c ti\u00eau c\u1ee7a k\u1ebb t\u1ea5n c\u00f4ng. M\u1ed9t s\u1ed1 lo\u1ea1i BEC ph\u1ed5 bi\u1ebfn bao g\u1ed3m:<\/p>\n<ol>\n<li>\n<p><strong>Gi\u00e1m \u0111\u1ed1c \u0111i\u1ec1u h\u00e0nh l\u1eeba \u0111\u1ea3o:<\/strong> V\u1edbi ki\u1ec3u n\u00e0y, k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1o danh c\u00e1c gi\u00e1m \u0111\u1ed1c \u0111i\u1ec1u h\u00e0nh c\u1ea5p cao v\u00e0 y\u00eau c\u1ea7u chuy\u1ec3n ti\u1ec1n kh\u1ea9n c\u1ea5p ho\u1eb7c th\u00f4ng tin nh\u1ea1y c\u1ea3m t\u1eeb nh\u00e2n vi\u00ean.<\/p>\n<\/li>\n<li>\n<p><strong>L\u1eeba \u0111\u1ea3o h\u00f3a \u0111\u01a1n:<\/strong> Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng g\u1eedi h\u00f3a \u0111\u01a1n gian l\u1eadn cho nh\u00e2n vi\u00ean, nh\u00e0 cung c\u1ea5p ho\u1eb7c kh\u00e1ch h\u00e0ng, y\u00eau c\u1ea7u thanh to\u00e1n v\u00e0o t\u00e0i kho\u1ea3n c\u1ee7a h\u1ecd thay v\u00ec t\u00e0i kho\u1ea3n h\u1ee3p ph\u00e1p.<\/p>\n<\/li>\n<li>\n<p><strong>M\u1ea1o danh lu\u1eadt s\u01b0:<\/strong> T\u1ed9i ph\u1ea1m m\u1ea1ng \u0111\u00f3ng vai lu\u1eadt s\u01b0 x\u1eed l\u00fd c\u00e1c v\u1ea5n \u0111\u1ec1 b\u00ed m\u1eadt v\u00e0 h\u01b0\u1edbng d\u1eabn n\u1ea1n nh\u00e2n chuy\u1ec3n ti\u1ec1n ho\u1eb7c ti\u1ebft l\u1ed9 th\u00f4ng tin nh\u1ea1y c\u1ea3m.<\/p>\n<\/li>\n<li>\n<p><strong>Tr\u1ed9m c\u1eafp d\u1eef li\u1ec7u:<\/strong> M\u1ed9t s\u1ed1 cu\u1ed9c t\u1ea5n c\u00f4ng BEC t\u1eadp trung v\u00e0o vi\u1ec7c l\u1ea5y th\u00f4ng tin nh\u1ea1y c\u1ea3m, ch\u1eb3ng h\u1ea1n nh\u01b0 t\u00e0i s\u1ea3n tr\u00ed tu\u1ec7 ho\u1eb7c d\u1eef li\u1ec7u kh\u00e1ch h\u00e0ng, cho m\u1ee5c \u0111\u00edch x\u1ea5u.<\/p>\n<\/li>\n<\/ol>\n<table>\n<thead>\n<tr>\n<th>Lo\u1ea1i BEC<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>CEO l\u1eeba \u0111\u1ea3o<\/td>\n<td>M\u1ea1o danh c\u00e1c gi\u00e1m \u0111\u1ed1c \u0111i\u1ec1u h\u00e0nh c\u1ea5p cao \u0111\u1ec3 y\u00eau c\u1ea7u chuy\u1ec3n giao tr\u00e1i ph\u00e9p.<\/td>\n<\/tr>\n<tr>\n<td>L\u1eeba \u0111\u1ea3o h\u00f3a \u0111\u01a1n<\/td>\n<td>G\u1eedi h\u00f3a \u0111\u01a1n gi\u1ea3 \u0111\u1ec3 l\u1eeba d\u1ed1i nh\u00e2n vi\u00ean, nh\u00e0 cung c\u1ea5p ho\u1eb7c kh\u00e1ch h\u00e0ng.<\/td>\n<\/tr>\n<tr>\n<td>M\u1ea1o danh lu\u1eadt s\u01b0<\/td>\n<td>Gi\u1ea3 danh lu\u1eadt s\u01b0 \u0111\u1ec3 l\u00f4i k\u00e9o n\u1ea1n nh\u00e2n cung c\u1ea5p th\u00f4ng tin.<\/td>\n<\/tr>\n<tr>\n<td>Tr\u1ed9m c\u1eafp d\u1eef li\u1ec7u<\/td>\n<td>Nh\u1eafm m\u1ee5c ti\u00eau d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m ho\u1eb7c t\u00e0i s\u1ea3n tr\u00ed tu\u1ec7 cho m\u1ee5c \u0111\u00edch x\u1ea5u.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>C\u00e1c c\u00e1ch s\u1eed d\u1ee5ng Th\u1ecfa thu\u1eadn email doanh nghi\u1ec7p (BEC), c\u00e1c v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p<\/h2>\n<h3>C\u00e1c c\u00e1ch s\u1eed d\u1ee5ng Th\u1ecfa thu\u1eadn email doanh nghi\u1ec7p (BEC)<\/h3>\n<ol>\n<li>\n<p><strong>Gian l\u1eadn t\u00e0i ch\u00ednh:<\/strong> Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng khai th\u00e1c BEC \u0111\u1ec3 d\u00e0n x\u1ebfp c\u00e1c giao d\u1ecbch chuy\u1ec3n ti\u1ec1n gian l\u1eadn, chuy\u1ec3n ti\u1ec1n v\u00e0o t\u00e0i kho\u1ea3n c\u1ee7a ch\u00fang.<\/p>\n<\/li>\n<li>\n<p><strong>Tr\u1ed9m c\u1eafp d\u1eef li\u1ec7u:<\/strong> BEC c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 \u0111\u00e1nh c\u1eafp th\u00f4ng tin kinh doanh nh\u1ea1y c\u1ea3m, d\u1eabn \u0111\u1ebfn kh\u1ea3 n\u0103ng t\u1ed1ng ti\u1ec1n ho\u1eb7c l\u1ee3i th\u1ebf c\u1ea1nh tranh.<\/p>\n<\/li>\n<li>\n<p><strong>H\u00e0nh vi tr\u1ed9m c\u1eafp danh t\u00ednh:<\/strong> T\u1ed9i ph\u1ea1m m\u1ea1ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng BEC \u0111\u1ec3 thu th\u1eadp th\u00f4ng tin x\u00e1c th\u1ef1c c\u1ee7a nh\u00e2n vi\u00ean v\u00e0 truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0o h\u1ec7 th\u1ed1ng n\u1ed9i b\u1ed9.<\/p>\n<\/li>\n<\/ol>\n<h3>V\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p<\/h3>\n<ol>\n<li>\n<p><strong>L\u1ed7i c\u1ee7a con ng\u01b0\u1eddi:<\/strong> BEC nh\u1eafm v\u00e0o c\u00e1c l\u1ed7 h\u1ed5ng c\u1ee7a con ng\u01b0\u1eddi, \u0111\u00f2i h\u1ecfi ph\u1ea3i \u0111\u00e0o t\u1ea1o nh\u00e2n vi\u00ean to\u00e0n di\u1ec7n \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh v\u00e0 tr\u00e1nh c\u00e1c n\u1ed7 l\u1ef1c l\u1eeba \u0111\u1ea3o.<\/p>\n<\/li>\n<li>\n<p><strong>X\u00e1c th\u1ef1c email:<\/strong> Vi\u1ec7c tri\u1ec3n khai c\u00e1c giao th\u1ee9c x\u00e1c th\u1ef1c email, ch\u1eb3ng h\u1ea1n nh\u01b0 DMARC, SPF v\u00e0 DKIM, c\u00f3 th\u1ec3 gi\u00fap x\u00e1c minh t\u00ednh h\u1ee3p ph\u00e1p c\u1ee7a c\u00e1c email \u0111\u1ebfn.<\/p>\n<\/li>\n<li>\n<p><strong>X\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1:<\/strong> Vi\u1ec7c th\u1ef1c thi x\u00e1c th\u1ef1c hai y\u1ebfu t\u1ed1 cho c\u00e1c giao d\u1ecbch t\u00e0i ch\u00ednh v\u00e0 truy c\u1eadp d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m c\u00f3 th\u1ec3 b\u1ed5 sung th\u00eam m\u1ed9t l\u1edbp b\u1ea3o m\u1eadt.<\/p>\n<\/li>\n<li>\n<p><strong>X\u00e1c minh t\u00e0i kho\u1ea3n:<\/strong> Tr\u01b0\u1edbc khi th\u1ef1c hi\u1ec7n c\u00e1c giao d\u1ecbch t\u00e0i ch\u00ednh, nh\u00e2n vi\u00ean n\u00ean x\u00e1c minh c\u00e1c y\u00eau c\u1ea7u th\u00f4ng qua c\u00e1c k\u00eanh thay th\u1ebf ho\u1eb7c tr\u1ef1c ti\u1ebfp.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh kh\u00e1c v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1<\/h2>\n<table>\n<thead>\n<tr>\n<th>Thu\u1eadt ng\u1eef<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Th\u1ecfa hi\u1ec7p email doanh nghi\u1ec7p (BEC)<\/td>\n<td>Chi\u1ebfn thu\u1eadt t\u1ed9i ph\u1ea1m m\u1ea1ng tinh vi nh\u1eafm v\u00e0o c\u00e1c doanh nghi\u1ec7p th\u00f4ng qua c\u00e1c email l\u1eeba \u0111\u1ea3o.<\/td>\n<\/tr>\n<tr>\n<td>L\u1eeba \u0111\u1ea3o<\/td>\n<td>Thu\u1eadt ng\u1eef r\u1ed9ng bao g\u1ed3m nhi\u1ec1u k\u1ef9 thu\u1eadt l\u1eeba \u0111\u1ea3o kh\u00e1c nhau, bao g\u1ed3m c\u1ea3 BEC, \u0111\u1ec3 l\u1eeba n\u1ea1n nh\u00e2n.<\/td>\n<\/tr>\n<tr>\n<td>L\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn<\/td>\n<td>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o c\u00f3 ch\u1ee7 \u0111\u00edch, th\u01b0\u1eddng nh\u1eafm v\u00e0o c\u00e1c c\u00e1 nh\u00e2n ho\u1eb7c t\u1ed5 ch\u1ee9c c\u1ee5 th\u1ec3.<\/td>\n<\/tr>\n<tr>\n<td>\u0110\u00e1nh b\u1eaft c\u00e1 voi<\/td>\n<td>M\u1ed9t lo\u1ea1i l\u1eeba \u0111\u1ea3o nh\u1eafm m\u1ee5c ti\u00eau c\u1ee5 th\u1ec3 \u0111\u1ebfn c\u00e1c c\u00e1 nh\u00e2n ho\u1eb7c gi\u00e1m \u0111\u1ed1c \u0111i\u1ec1u h\u00e0nh c\u1ea5p cao.<\/td>\n<\/tr>\n<tr>\n<td>CEO l\u1eeba \u0111\u1ea3o<\/td>\n<td>M\u1ed9t lo\u1ea1i BEC trong \u0111\u00f3 nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng m\u1ea1o danh CEO ho\u1eb7c gi\u00e1m \u0111\u1ed1c \u0111i\u1ec1u h\u00e0nh c\u1ea5p cao \u0111\u1ec3 ti\u1ebfn h\u00e0nh l\u1eeba \u0111\u1ea3o.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>C\u00e1c quan \u0111i\u1ec3m v\u00e0 c\u00f4ng ngh\u1ec7 c\u1ee7a t\u01b0\u01a1ng lai li\u00ean quan \u0111\u1ebfn L\u1eeba \u0111\u1ea3o Email Doanh nghi\u1ec7p (BEC)<\/h2>\n<p>T\u01b0\u01a1ng lai c\u1ee7a BEC c\u00f3 th\u1ec3 s\u1ebd ch\u1ee9ng ki\u1ebfn s\u1ef1 ph\u00e1t tri\u1ec3n h\u01a1n n\u1eefa v\u1ec1 k\u1ef9 thu\u1eadt l\u1eeba \u0111\u1ea3o x\u00e3 h\u1ed9i v\u00e0 c\u00e1 nh\u00e2n h\u00f3a \u0111\u1ec3 \u0111\u00e1nh l\u1eeba n\u1ea1n nh\u00e2n. Ngo\u00e0i ra, nh\u1eefng ti\u1ebfn b\u1ed9 trong AI v\u00e0 x\u1eed l\u00fd ng\u00f4n ng\u1eef t\u1ef1 nhi\u00ean c\u00f3 th\u1ec3 cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng t\u1ea1o ra c\u00e1c email l\u1eeba \u0111\u1ea3o thuy\u1ebft ph\u1ee5c h\u01a1n n\u1eefa. Khi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng BEC ti\u1ebfp t\u1ee5c ph\u00e1t tri\u1ec3n, c\u00e1c doanh nghi\u1ec7p n\u00ean \u0111\u1ea7u t\u01b0 v\u00e0o c\u00e1c bi\u1ec7n ph\u00e1p an ninh m\u1ea1ng m\u1ea1nh m\u1ebd, \u0111\u00e0o t\u1ea1o nh\u00e2n vi\u00ean v\u00e0 c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt email n\u00e2ng cao \u0111\u1ec3 ch\u1ed1ng l\u1ea1i m\u1ed1i \u0111e d\u1ecda ng\u00e0y c\u00e0ng t\u0103ng n\u00e0y.<\/p>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng ho\u1eb7c li\u00ean k\u1ebft m\u00e1y ch\u1ee7 proxy v\u1edbi L\u1eeba \u0111\u1ea3o qua email doanh nghi\u1ec7p (BEC)<\/h2>\n<p>M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 v\u00f4 t\u00ecnh \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng nh\u01b0 m\u1ed9t ph\u1ea7n c\u1ee7a c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng t\u1ea5n c\u00f4ng BEC. T\u1ed9i ph\u1ea1m m\u1ea1ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng m\u00e1y ch\u1ee7 proxy \u0111\u1ec3 \u1ea9n \u0111\u1ecba ch\u1ec9 v\u00e0 v\u1ecb tr\u00ed IP th\u1ef1c c\u1ee7a ch\u00fang, khi\u1ebfn c\u01a1 quan ch\u1ee9c n\u0103ng g\u1eb7p kh\u00f3 kh\u0103n h\u01a1n trong vi\u1ec7c theo d\u00f5i ho\u1ea1t \u0111\u1ed9ng c\u1ee7a ch\u00fang. Ngo\u00e0i ra, nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 \u0111\u1ecbnh tuy\u1ebfn c\u00e1c email l\u1eeba \u0111\u1ea3o c\u1ee7a ch\u00fang th\u00f4ng qua m\u00e1y ch\u1ee7 proxy \u0111\u1ec3 tr\u00e1nh b\u1ecb ph\u00e1t hi\u1ec7n b\u1edfi c\u00e1c b\u1ed9 l\u1ecdc b\u1ea3o m\u1eadt email ch\u1eb7n c\u00e1c \u0111\u1ecba ch\u1ec9 IP \u0111\u1ed9c h\u1ea1i \u0111\u00e3 bi\u1ebft. Tuy nhi\u00ean, \u0111i\u1ec1u quan tr\u1ecdng c\u1ea7n l\u01b0u \u00fd l\u00e0 b\u1ea3n th\u00e2n m\u00e1y ch\u1ee7 proxy kh\u00f4ng \u0111\u1ed9c h\u1ea1i v\u00e0 c\u00f3 th\u1ec3 ph\u1ee5c v\u1ee5 c\u00e1c m\u1ee5c \u0111\u00edch h\u1ee3p ph\u00e1p, ch\u1eb3ng h\u1ea1n nh\u01b0 t\u0103ng c\u01b0\u1eddng quy\u1ec1n ri\u00eang t\u01b0 tr\u1ef1c tuy\u1ebfn v\u00e0 v\u01b0\u1ee3t qua c\u00e1c h\u1ea1n ch\u1ebf tr\u00ean internet.<\/p>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 Th\u1ecfa thu\u1eadn email doanh nghi\u1ec7p (BEC), vui l\u00f2ng tham kh\u1ea3o c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n<ol>\n<li><a href=\"https:\/\/www.ic3.gov\/Media\/News\/2015\/150827.aspx\" target=\"_new\" rel=\"noopener nofollow\">Th\u00f4ng b\u00e1o D\u1ecbch v\u1ee5 C\u00f4ng c\u1ee7a FBI v\u1ec1 Th\u1ecfa thu\u1eadn Email Doanh nghi\u1ec7p<\/a><\/li>\n<li><a href=\"https:\/\/www.ic3.gov\/Home\/FileComplaint\" target=\"_new\" rel=\"noopener nofollow\">Trung t\u00e2m Khi\u1ebfu n\u1ea1i T\u1ed9i ph\u1ea1m Internet (IC3)<\/a><\/li>\n<li><a href=\"https:\/\/www.cisa.gov\/sites\/default\/files\/publications\/2020-06\/20-03-ICS-ALERT-Business-Email-Compromise.pdf\" target=\"_new\" rel=\"noopener nofollow\">C\u01a1 quan An ninh m\u1ea1ng v\u00e0 C\u01a1 s\u1edf h\u1ea1 t\u1ea7ng (CISA) Th\u00f4ng tin chi ti\u1ebft v\u1ec1 BEC<\/a><\/li>\n<\/ol>\n<p>H\u00e3y nh\u1edb r\u1eb1ng, lu\u00f4n c\u1eadp nh\u1eadt th\u00f4ng tin v\u00e0 c\u1ea3nh gi\u00e1c l\u00e0 \u0111i\u1ec1u quan tr\u1ecdng \u0111\u1ec3 b\u1ea3o v\u1ec7 doanh nghi\u1ec7p c\u1ee7a b\u1ea1n kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda do L\u1eeba \u0111\u1ea3o qua Email Doanh nghi\u1ec7p g\u00e2y ra.<\/p>","protected":false},"featured_media":467816,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476145","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Business Email Compromise (BEC): An Encyclopedia Article<\/mark>","faq_items":[{"question":"What is Business Email Compromise (BEC)?","answer":"<p>Business Email Compromise (BEC) is a sophisticated cybercrime tactic that targets businesses through deceptive emails. It involves manipulating individuals within an organization to compromise sensitive information, initiate unauthorized financial transactions, or gain unauthorized access to computer systems.<\/p>"},{"question":"How did BEC originate, and when was it first mentioned?","answer":"<p>The origins of BEC can be traced back to the early 2000s, but the first documented mention was in 2010 when the FBI issued a warning about scams targeting businesses through compromised emails.<\/p>"},{"question":"How does Business Email Compromise (BEC) work?","answer":"<p>BEC involves a multi-stage process, starting with reconnaissance where attackers gather information about the targeted organization. Then, they send personalized phishing emails to deceive victims into taking immediate action, leading to unauthorized money transfers or data disclosure.<\/p>"},{"question":"What are the key features of BEC that set it apart from other cyber threats?","answer":"<p>BEC focuses heavily on social engineering tactics, uses personalized emails, and often involves impersonating trusted sources. Unlike traditional cyber attacks, BEC does not rely on malware, making it harder to detect.<\/p>"},{"question":"What are the different types of Business Email Compromise (BEC) attacks?","answer":"<p>Common types of BEC include CEO fraud, invoice scams, attorney impersonation, and data theft, each serving different objectives for the attackers.<\/p>"},{"question":"How can businesses defend against Business Email Compromise (BEC)?","answer":"<p>Businesses can mitigate BEC risks by providing comprehensive employee training, implementing email authentication protocols, enforcing two-factor authentication, and verifying critical requests through alternative channels.<\/p>"},{"question":"How does Business Email Compromise (BEC) compare to other phishing attacks?","answer":"<p>BEC is a subset of phishing attacks but stands out due to its focus on social engineering, personalized approach, and absence of traditional malware.<\/p>"},{"question":"What is the future outlook for BEC and related technologies?","answer":"<p>The future of BEC is likely to see further evolution in social engineering techniques and AI-generated fraudulent emails, making it essential for businesses to invest in advanced cybersecurity measures.<\/p>"},{"question":"How are proxy servers associated with Business Email Compromise (BEC)?","answer":"<p>Proxy servers can unintentionally be used by cybercriminals to hide their identity during BEC attacks. However, proxy servers themselves are not malicious and can serve legitimate purposes, such as enhancing online privacy.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/476145","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/476145\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media\/467816"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=476145"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}