{"id":476996,"date":"2023-08-09T09:06:01","date_gmt":"2023-08-09T09:06:01","guid":{"rendered":""},"modified":"2023-09-05T11:13:48","modified_gmt":"2023-09-05T11:13:48","slug":"dridex","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/dridex\/","title":{"rendered":"Dridex"},"content":{"rendered":"<p>Dridex l\u00e0 m\u1ed9t Trojan ng\u00e2n h\u00e0ng kh\u00e9t ti\u1ebfng v\u00e0 l\u00e0 m\u1ed9t d\u1ea1ng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 \u0111\u00e1nh c\u1eafp th\u00f4ng tin t\u00e0i ch\u00ednh nh\u1ea1y c\u1ea3m, ch\u1ee7 y\u1ebfu nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o th\u00f4ng tin \u0111\u0103ng nh\u1eadp ng\u00e2n h\u00e0ng tr\u1ef1c tuy\u1ebfn. M\u1ed1i \u0111e d\u1ecda m\u1ea1ng tinh vi n\u00e0y l\u00e0 m\u1ed9t ph\u1ea7n c\u1ee7a lo\u1ea1i Trojan ng\u00e2n h\u00e0ng r\u1ed9ng h\u01a1n, g\u00e2y r\u1ee7i ro \u0111\u00e1ng k\u1ec3 cho c\u00e1c c\u00e1 nh\u00e2n, doanh nghi\u1ec7p v\u00e0 t\u1ed5 ch\u1ee9c t\u00e0i ch\u00ednh tr\u00ean to\u00e0n th\u1ebf gi\u1edbi. Dridex n\u1ed5i ti\u1ebfng v\u00ec h\u00e0nh vi l\u00e9n l\u00fat v\u00e0 \u0111\u00e3 g\u00e2y ra t\u1ed5n th\u1ea5t t\u00e0i ch\u00ednh \u0111\u00e1ng k\u1ec3 cho n\u1ea1n nh\u00e2n trong nhi\u1ec1u n\u0103m.<\/p>\n<h2>L\u1ecbch s\u1eed ngu\u1ed3n g\u1ed1c c\u1ee7a Dridex v\u00e0 l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn n\u00f3<\/h2>\n<p>Dridex l\u1ea7n \u0111\u1ea7u ti\u00ean xu\u1ea5t hi\u1ec7n v\u00e0o n\u0103m 2014 v\u1edbi t\u01b0 c\u00e1ch l\u00e0 ng\u01b0\u1eddi k\u1ebf nhi\u1ec7m c\u1ee7a Trojan ng\u00e2n h\u00e0ng Cridex v\u00e0 Zeus kh\u00e9t ti\u1ebfng. N\u00f3 \u0111\u01b0\u1ee3c cho l\u00e0 \u0111\u01b0\u1ee3c ph\u00e1t tri\u1ec3n b\u1edfi m\u1ed9t nh\u00f3m t\u1ed9i ph\u1ea1m m\u1ea1ng c\u00f3 t\u1ed5 ch\u1ee9c t\u1ed1t, c\u00f3 th\u1ec3 c\u00f3 ngu\u1ed3n g\u1ed1c t\u1eeb \u0110\u00f4ng \u00c2u. Tr\u1ecdng t\u00e2m ban \u0111\u1ea7u c\u1ee7a ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i ch\u1ee7 y\u1ebfu nh\u1eafm v\u00e0o c\u00e1c t\u1ed5 ch\u1ee9c t\u00e0i ch\u00ednh \u1edf Hoa K\u1ef3, V\u01b0\u01a1ng qu\u1ed1c Anh v\u00e0 Ch\u00e2u \u00c2u. L\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn Dridex \u0111\u1ebfn t\u1eeb c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt, ng\u01b0\u1eddi \u0111\u00e3 x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i trong c\u00e1c chi\u1ebfn d\u1ecbch \u0111ang ho\u1ea1t \u0111\u1ed9ng nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o kh\u00e1ch h\u00e0ng ng\u00e2n h\u00e0ng th\u00f4ng qua email spam v\u00e0 c\u00e1c t\u1ec7p \u0111\u00ednh k\u00e8m \u0111\u1ed9c h\u1ea1i.<\/p>\n<h2>Th\u00f4ng tin chi ti\u1ebft v\u1ec1 Dridex. M\u1edf r\u1ed9ng ch\u1ee7 \u0111\u1ec1 Dridex.<\/h2>\n<p>Dridex ho\u1ea1t \u0111\u1ed9ng b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng c\u00e1c chi\u1ebfn thu\u1eadt l\u1eeba \u0111\u1ea3o x\u00e3 h\u1ed9i \u0111\u1ec3 d\u1ee5 n\u1ea1n nh\u00e2n m\u1edf c\u00e1c t\u1ec7p \u0111\u00ednh k\u00e8m email \u0111\u1ed9c h\u1ea1i, th\u01b0\u1eddng \u0111\u01b0\u1ee3c ng\u1ee5y trang d\u01b0\u1edbi d\u1ea1ng h\u00f3a \u0111\u01a1n, b\u00e1o c\u00e1o t\u00e0i ch\u00ednh ho\u1eb7c c\u00e1c t\u00e0i li\u1ec7u c\u00f3 v\u1ebb h\u1ee3p ph\u00e1p kh\u00e1c. Sau khi m\u1edf t\u1ec7p \u0111\u00ednh k\u00e8m, Trojan s\u1ebd \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t \u00e2m th\u1ea7m tr\u00ean h\u1ec7 th\u1ed1ng c\u1ee7a n\u1ea1n nh\u00e2n v\u00e0 b\u1eaft \u0111\u1ea7u c\u00e1c ho\u1ea1t \u0111\u1ed9ng b\u00ed m\u1eadt. Dridex s\u1eed d\u1ee5ng ki\u1ebfn tr\u00fac m\u00f4-\u0111un, cho ph\u00e9p t\u1ea3i xu\u1ed1ng v\u00e0 th\u1ef1c thi c\u00e1c th\u00e0nh ph\u1ea7n \u0111\u1ed9c h\u1ea1i b\u1ed5 sung, ch\u1eb3ng h\u1ea1n nh\u01b0 keylogger v\u00e0 tr\u00ecnh l\u1ea5y bi\u1ec3u m\u1eabu, \u0111\u1ec3 \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m.<\/p>\n<p>M\u1ed9t trong nh\u1eefng t\u00ednh n\u0103ng \u0111\u00e1ng ch\u00fa \u00fd nh\u1ea5t c\u1ee7a Dridex l\u00e0 vi\u1ec7c s\u1eed d\u1ee5ng c\u01a1 ch\u1ebf ti\u00eam web. N\u00f3 ti\u00eam m\u00e3 \u0111\u1ed9c v\u00e0o tr\u00ecnh duy\u1ec7t web c\u1ee7a n\u1ea1n nh\u00e2n, cho ph\u00e9p ch\u1eb7n v\u00e0 s\u1eeda \u0111\u1ed5i c\u00e1c trang web li\u00ean quan \u0111\u1ebfn ng\u00e2n h\u00e0ng tr\u1ef1c tuy\u1ebfn, l\u1eeba ng\u01b0\u1eddi d\u00f9ng nh\u1eadp th\u00f4ng tin \u0111\u0103ng nh\u1eadp v\u00e0 th\u00f4ng tin nh\u1ea1y c\u1ea3m kh\u00e1c tr\u00ean c\u00e1c trang web gi\u1ea3 m\u1ea1o. K\u1ef9 thu\u1eadt n\u00e0y, \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 cu\u1ed9c t\u1ea5n c\u00f4ng \u201cman-in-the-browser\u201d, khi\u1ebfn n\u1ea1n nh\u00e2n kh\u00f3 ph\u00e1t hi\u1ec7n c\u00e1c ho\u1ea1t \u0111\u1ed9ng l\u1eeba \u0111\u1ea3o.<\/p>\n<h2>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a Dridex. Dridex ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o<\/h2>\n<p>Dridex ch\u1ee7 y\u1ebfu \u0111\u01b0\u1ee3c vi\u1ebft b\u1eb1ng C++ v\u00e0 s\u1eed d\u1ee5ng nhi\u1ec1u k\u1ef9 thu\u1eadt tr\u1ed1n tr\u00e1nh kh\u00e1c nhau \u0111\u1ec3 tr\u00e1nh b\u1ecb ph\u1ea7n m\u1ec1m b\u1ea3o m\u1eadt ph\u00e1t hi\u1ec7n. Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i s\u1eed d\u1ee5ng c\u00e1c ph\u01b0\u01a1ng ph\u00e1p m\u00e3 h\u00f3a v\u00e0 l\u00e0m x\u00e1o tr\u1ed9n \u0111\u1ec3 \u1ea9n m\u00e3 \u0111\u1ed9c h\u1ea1i v\u00e0 li\u00ean l\u1ea1c v\u1edbi c\u00e1c m\u00e1y ch\u1ee7 ra l\u1ec7nh v\u00e0 ki\u1ec3m so\u00e1t (C&amp;C), khi\u1ebfn c\u00e1c nh\u00e0 ph\u00e2n t\u00edch b\u1ea3o m\u1eadt g\u1eb7p kh\u00f3 kh\u0103n trong vi\u1ec7c ph\u00e2n t\u00edch v\u00e0 thi\u1ebft k\u1ebf ng\u01b0\u1ee3c Trojan. Vi\u1ec7c li\u00ean l\u1ea1c v\u1edbi m\u00e1y ch\u1ee7 C&amp;C cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng \u0111i\u1ec1u khi\u1ec3n v\u00e0 c\u1eadp nh\u1eadt t\u1eeb xa ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng b\u1ecb nhi\u1ec5m.<\/p>\n<p>Chu\u1ed7i l\u00e2y nhi\u1ec5m c\u1ee7a Dridex th\u01b0\u1eddng bao g\u1ed3m c\u00e1c b\u01b0\u1edbc sau:<\/p>\n<ol>\n<li><strong>V\u1eadn chuy\u1ec3n<\/strong>: Dridex \u0111\u01b0\u1ee3c g\u1eedi \u0111\u1ebfn n\u1ea1n nh\u00e2n th\u00f4ng qua email spam c\u00f3 t\u1ec7p \u0111\u00ednh k\u00e8m ho\u1eb7c li\u00ean k\u1ebft \u0111\u1ed9c h\u1ea1i \u0111\u1ec3 t\u1ea3i xu\u1ed1ng tr\u1ecdng t\u1ea3i t\u1eeb c\u00e1c trang web b\u1ecb x\u00e2m nh\u1eadp.<\/li>\n<li><strong>Ch\u1ea5p h\u00e0nh<\/strong>: Khi t\u1ec7p \u0111\u00ednh k\u00e8m \u0111\u01b0\u1ee3c m\u1edf ho\u1eb7c li\u00ean k\u1ebft \u0111\u01b0\u1ee3c nh\u1ea5p v\u00e0o, ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i s\u1ebd \u0111\u01b0\u1ee3c th\u1ef1c thi tr\u00ean h\u1ec7 th\u1ed1ng c\u1ee7a n\u1ea1n nh\u00e2n, th\u01b0\u1eddng s\u1eed d\u1ee5ng macro ho\u1eb7c c\u00e1c ng\u00f4n ng\u1eef k\u1ecbch b\u1ea3n kh\u00e1c.<\/li>\n<li><strong>S\u1ef1 nhi\u1ec5m tr\u00f9ng<\/strong>: Dridex \u0111\u1ea1t \u0111\u01b0\u1ee3c s\u1ef1 \u1ed5n \u0111\u1ecbnh tr\u00ean h\u1ec7 th\u1ed1ng b\u1eb1ng c\u00e1ch t\u1ea1o c\u00e1c m\u1ee5c \u0111\u0103ng k\u00fd ho\u1eb7c s\u1eed d\u1ee5ng c\u00e1c ph\u01b0\u01a1ng ph\u00e1p kh\u00e1c \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o n\u00f3 ch\u1ea1y m\u1ed7i khi h\u1ec7 th\u1ed1ng kh\u1edfi \u0111\u1ed9ng.<\/li>\n<li><strong>Tr\u1ed9m c\u1eafp d\u1eef li\u1ec7u<\/strong>: Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i b\u1eaft \u0111\u1ea7u ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1nh c\u1eafp th\u00f4ng tin b\u1eb1ng c\u00e1ch ghi l\u1ea1i c\u00e1c thao t\u00e1c g\u00f5 ph\u00edm, gi\u00e1m s\u00e1t ho\u1ea1t \u0111\u1ed9ng tr\u00ean web v\u00e0 \u0111\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp cho t\u00e0i kho\u1ea3n ng\u00e2n h\u00e0ng tr\u1ef1c tuy\u1ebfn.<\/li>\n<li><strong>Ch\u1ec9 huy v\u00e0 ki\u1ec3m so\u00e1t<\/strong>: Dridex thi\u1ebft l\u1eadp k\u1ebft n\u1ed1i v\u1edbi m\u00e1y ch\u1ee7 C&amp;C \u0111\u1ec3 nh\u1eadn l\u1ec7nh v\u00e0 l\u1ecdc d\u1eef li\u1ec7u b\u1ecb \u0111\u00e1nh c\u1eafp.<\/li>\n<\/ol>\n<h2>Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a Dridex<\/h2>\n<p>Dridex c\u00f3 m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng ch\u00ednh khi\u1ebfn n\u00f3 tr\u1edf th\u00e0nh m\u1ed9t Trojan ng\u00e2n h\u00e0ng m\u1ea1nh m\u1ebd v\u00e0 l\u00e0 m\u1ed1i \u0111e d\u1ecda \u0111\u00e1ng k\u1ec3 \u0111\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng ng\u00e2n h\u00e0ng tr\u1ef1c tuy\u1ebfn:<\/p>\n<ol>\n<li>\n<p><strong>K\u1ef9 thu\u1eadt x\u00e3 h\u1ed9i<\/strong>: Dridex ch\u1ee7 y\u1ebfu d\u1ef1a v\u00e0o c\u00e1c chi\u1ebfn thu\u1eadt k\u1ef9 thu\u1eadt x\u00e3 h\u1ed9i \u0111\u1ec3 l\u1eeba ng\u01b0\u1eddi d\u00f9ng m\u1edf c\u00e1c t\u1ec7p \u0111\u00ednh k\u00e8m \u0111\u1ed9c h\u1ea1i ho\u1eb7c nh\u1ea5p v\u00e0o li\u00ean k\u1ebft \u0111\u1ed9c h\u1ea1i, l\u1ee3i d\u1ee5ng h\u00e0nh vi c\u1ee7a con ng\u01b0\u1eddi \u0111\u1ec3 b\u1eaft \u0111\u1ea7u qu\u00e1 tr\u00ecnh l\u00e2y nhi\u1ec5m.<\/p>\n<\/li>\n<li>\n<p><strong>Ti\u00eam web<\/strong>: Vi\u1ec7c s\u1eed d\u1ee5ng t\u00ednh n\u0103ng ch\u00e8n web cho ph\u00e9p Dridex thao t\u00fang c\u00e1c trang web v\u00e0 hi\u1ec3n th\u1ecb c\u00e1c trang l\u1eeba \u0111\u1ea3o thuy\u1ebft ph\u1ee5c cho n\u1ea1n nh\u00e2n, t\u0103ng c\u01a1 h\u1ed9i thu \u0111\u01b0\u1ee3c d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m.<\/p>\n<\/li>\n<li>\n<p><strong>Ki\u00ean tr\u00ec<\/strong>: Dridex \u0111\u1ea3m b\u1ea3o n\u00f3 v\u1eabn t\u1ed3n t\u1ea1i tr\u00ean h\u1ec7 th\u1ed1ng b\u1ecb nhi\u1ec5m b\u1eb1ng c\u00e1ch thi\u1ebft l\u1eadp c\u00e1c c\u01a1 ch\u1ebf t\u1ed3n t\u1ea1i l\u00e2u d\u00e0i, khi\u1ebfn vi\u1ec7c g\u1ee1 b\u1ecf sau khi c\u00e0i \u0111\u1eb7t tr\u1edf n\u00ean kh\u00f3 kh\u0103n.<\/p>\n<\/li>\n<li>\n<p><strong>M\u00e3 h\u00f3a v\u00e0 l\u00e0m x\u00e1o tr\u1ed9n<\/strong>: Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i m\u00e3 h\u00f3a th\u00f4ng tin li\u00ean l\u1ea1c v\u00e0 l\u00e0m x\u00e1o tr\u1ed9n m\u00e3 c\u1ee7a n\u00f3 \u0111\u1ec3 tr\u00e1nh b\u1ecb c\u00e1c c\u00f4ng c\u1ee5 b\u1ea3o m\u1eadt ph\u00e1t hi\u1ec7n v\u00e0 ph\u00e2n t\u00edch.<\/p>\n<\/li>\n<li>\n<p><strong>Thi\u1ebft k\u1ebf m\u00f4-\u0111un<\/strong>: Thi\u1ebft k\u1ebf m\u00f4-\u0111un c\u1ee7a Dridex cho ph\u00e9p n\u00f3 t\u1ea3i xu\u1ed1ng v\u00e0 c\u00e0i \u0111\u1eb7t c\u00e1c th\u00e0nh ph\u1ea7n b\u1ed5 sung, gi\u00fap n\u00f3 c\u00f3 kh\u1ea3 n\u0103ng th\u00edch \u1ee9ng v\u00e0 c\u00f3 kh\u1ea3 n\u0103ng ph\u00e1t tri\u1ec3n \u0111\u1ec3 v\u01b0\u1ee3t qua c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c lo\u1ea1i Dridex<\/h2>\n<p>Dridex \u0111\u00e3 tr\u1ea3i qua nhi\u1ec1u l\u1ea7n l\u1eb7p l\u1ea1i v\u00e0 bi\u1ebfn th\u1ec3 k\u1ec3 t\u1eeb l\u1ea7n ph\u00e1t hi\u1ec7n \u0111\u1ea7u ti\u00ean. Theo th\u1eddi gian, c\u00e1c phi\u00ean b\u1ea3n kh\u00e1c nhau \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh, m\u1ed7i phi\u00ean b\u1ea3n \u0111\u1ec1u c\u00f3 kh\u1ea3 n\u0103ng n\u00e2ng cao v\u00e0 k\u1ef9 thu\u1eadt n\u00e9 tr\u00e1nh \u0111\u01b0\u1ee3c c\u1ea3i ti\u1ebfn. M\u1ed9t s\u1ed1 lo\u1ea1i Dridex \u0111\u00e1ng ch\u00fa \u00fd bao g\u1ed3m:<\/p>\n<table>\n<thead>\n<tr>\n<th>Bi\u1ebfn th\u1ec3 Dridex<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Dridex 220<\/td>\n<td>M\u1ed9t bi\u1ebfn th\u1ec3 ban \u0111\u1ea7u ch\u1ee7 y\u1ebfu t\u1eadp trung v\u00e0o vi\u1ec7c nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c t\u1ed5 ch\u1ee9c t\u00e0i ch\u00ednh \u1edf Hoa K\u1ef3.<\/td>\n<\/tr>\n<tr>\n<td>Dridex 270<\/td>\n<td>Phi\u00ean b\u1ea3n sau n\u00e0y \u0111\u00e3 m\u1edf r\u1ed9ng ph\u1ea1m vi m\u1ee5c ti\u00eau c\u1ee7a n\u00f3 \u0111\u1ec3 bao g\u1ed3m c\u00e1c t\u1ed5 ch\u1ee9c t\u00e0i ch\u00ednh \u1edf Ch\u00e2u \u00c2u v\u00e0 V\u01b0\u01a1ng qu\u1ed1c Anh.<\/td>\n<\/tr>\n<tr>\n<td>Dridex 300<\/td>\n<td>M\u1ed9t bi\u1ebfn th\u1ec3 ti\u00ean ti\u1ebfn \u0111\u00e3 c\u1ea3i ti\u1ebfn h\u01a1n n\u1eefa c\u00e1c k\u1ef9 thu\u1eadt ti\u00eam web v\u00e0 c\u01a1 ch\u1ebf tr\u1ed1n tr\u00e1nh.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u0110i\u1ec1u quan tr\u1ecdng l\u00e0 ng\u01b0\u1eddi d\u00f9ng v\u00e0 t\u1ed5 ch\u1ee9c ph\u1ea3i lu\u00f4n c\u1ea3nh gi\u00e1c v\u00e0 s\u1eed d\u1ee5ng c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt m\u1ea1nh m\u1ebd \u0111\u1ec3 ch\u1ed1ng l\u1ea1i c\u00e1c bi\u1ebfn th\u1ec3 Dridex \u0111ang ph\u00e1t tri\u1ec3n n\u00e0y.<\/p>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng Dridex, c\u00e1c v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p li\u00ean quan \u0111\u1ebfn vi\u1ec7c s\u1eed d\u1ee5ng<\/h2>\n<p>\u0110i\u1ec1u quan tr\u1ecdng c\u1ea7n l\u00e0m r\u00f5 l\u00e0 Dridex l\u00e0 m\u1ed9t c\u00f4ng c\u1ee5 \u0111\u1ed9c h\u1ea1i v\u00e0 b\u1ea5t h\u1ee3p ph\u00e1p \u0111\u01b0\u1ee3c t\u1ed9i ph\u1ea1m m\u1ea1ng s\u1eed d\u1ee5ng \u0111\u1ec3 \u0111\u00e1nh c\u1eafp th\u00f4ng tin nh\u1ea1y c\u1ea3m, \u0111\u1eb7c bi\u1ec7t li\u00ean quan \u0111\u1ebfn ng\u00e2n h\u00e0ng tr\u1ef1c tuy\u1ebfn. Do \u0111\u00f3, kh\u00f4ng c\u00f3 c\u00e1ch h\u1ee3p ph\u00e1p n\u00e0o \u0111\u1ec3 s\u1eed d\u1ee5ng Dridex v\u00e0 m\u1ecdi n\u1ed7 l\u1ef1c l\u00e0m nh\u01b0 v\u1eady \u0111\u1ec1u l\u00e0 b\u1ea5t h\u1ee3p ph\u00e1p v\u00e0 ph\u1ea3i ch\u1ecbu h\u1eadu qu\u1ea3 ph\u00e1p l\u00fd nghi\u00eam tr\u1ecdng.<\/p>\n<p>C\u00e1c v\u1ea5n \u0111\u1ec1 li\u00ean quan \u0111\u1ebfn vi\u1ec7c s\u1eed d\u1ee5ng Dridex r\u1ea5t s\u00e2u r\u1ed9ng v\u00e0 c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn t\u1ed5n th\u1ea5t t\u00e0i ch\u00ednh \u0111\u00e1ng k\u1ec3, \u0111\u00e1nh c\u1eafp danh t\u00ednh v\u00e0 x\u00e2m ph\u1ea1m quy\u1ec1n ri\u00eang t\u01b0. Gi\u1ea3i ph\u00e1p hi\u1ec7u qu\u1ea3 nh\u1ea5t l\u00e0 ng\u0103n ng\u1eeba l\u00e2y nhi\u1ec5m ngay t\u1eeb \u0111\u1ea7u b\u1eb1ng c\u00e1ch \u00e1p d\u1ee5ng c\u00e1c bi\u1ec7n ph\u00e1p th\u1ef1c h\u00e0nh t\u1ed1t nh\u1ea5t sau:<\/p>\n<ol>\n<li>\n<p><strong>V\u1ec7 sinh email<\/strong>: H\u00e3y th\u1eadn tr\u1ecdng khi m\u1edf email t\u1eeb nh\u1eefng ng\u01b0\u1eddi g\u1eedi kh\u00f4ng x\u00e1c \u0111\u1ecbnh v\u00e0 tr\u00e1nh nh\u1ea5p v\u00e0o c\u00e1c li\u00ean k\u1ebft \u0111\u00e1ng ng\u1edd ho\u1eb7c t\u1ea3i xu\u1ed1ng t\u1ec7p \u0111\u00ednh k\u00e8m t\u1eeb c\u00e1c ngu\u1ed3n kh\u00f4ng \u0111\u00e1ng tin c\u1eady.<\/p>\n<\/li>\n<li>\n<p><strong>Ph\u1ea7n m\u1ec1m b\u1ea3o m\u1eadt<\/strong>: S\u1eed d\u1ee5ng ph\u1ea7n m\u1ec1m di\u1ec7t virus v\u00e0 ch\u1ed1ng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i uy t\u00edn c\u00f3 th\u1ec3 ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c m\u1ed1i \u0111e d\u1ecda nh\u01b0 Dridex.<\/p>\n<\/li>\n<li>\n<p><strong>N\u00e2ng c\u1ea5p ph\u1ea7n m\u1ec1m<\/strong>: Lu\u00f4n c\u1eadp nh\u1eadt t\u1ea5t c\u1ea3 ph\u1ea7n m\u1ec1m, bao g\u1ed3m h\u1ec7 \u0111i\u1ec1u h\u00e0nh, tr\u00ecnh duy\u1ec7t web v\u00e0 \u1ee9ng d\u1ee5ng v\u1edbi c\u00e1c b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt m\u1edbi nh\u1ea5t.<\/p>\n<\/li>\n<li>\n<p><strong>Gi\u00e1o d\u1ee5c v\u00e0 Nh\u1eadn th\u1ee9c<\/strong>: Gi\u00e1o d\u1ee5c nh\u00e2n vi\u00ean v\u00e0 ng\u01b0\u1eddi d\u00f9ng v\u1ec1 s\u1ef1 nguy hi\u1ec3m c\u1ee7a email l\u1eeba \u0111\u1ea3o v\u00e0 c\u00e1c k\u1ef9 thu\u1eadt l\u1eeba \u0111\u1ea3o qua m\u1ea1ng nh\u1eb1m gi\u1ea3m nguy c\u01a1 tr\u1edf th\u00e0nh n\u1ea1n nh\u00e2n c\u1ee7a c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng nh\u01b0 v\u1eady.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh kh\u00e1c v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u0111\u1eb7c tr\u01b0ng<\/th>\n<th>Dridex<\/th>\n<th>th\u1ea7n Zeus<\/th>\n<th>Bi\u1ec3u t\u01b0\u1ee3ng c\u1ea3m x\u00fac<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Ki\u1ec3u<\/td>\n<td>Trojan ng\u00e2n h\u00e0ng<\/td>\n<td>Trojan ng\u00e2n h\u00e0ng<\/td>\n<td>Tr\u00ecnh t\u1ea3i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i<\/td>\n<\/tr>\n<tr>\n<td>Ch\u1ee9c n\u0103ng ch\u00ednh<\/td>\n<td>\u0102n c\u1eafp d\u1eef li\u1ec7u ng\u00e2n h\u00e0ng tr\u1ef1c tuy\u1ebfn<\/td>\n<td>\u0102n c\u1eafp d\u1eef li\u1ec7u ng\u00e2n h\u00e0ng tr\u1ef1c tuy\u1ebfn<\/td>\n<td>Cung c\u1ea5p ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i kh\u00e1c<\/td>\n<\/tr>\n<tr>\n<td>Ph\u01b0\u01a1ng ph\u00e1p l\u00e2y nhi\u1ec5m<\/td>\n<td>T\u1ec7p \u0111\u00ednh k\u00e8m email, li\u00ean k\u1ebft<\/td>\n<td>Khai th\u00e1c, t\u1ea3i xu\u1ed1ng theo t\u1eebng \u1ed5 \u0111\u0129a<\/td>\n<td>T\u1ec7p \u0111\u00ednh k\u00e8m email, li\u00ean k\u1ebft<\/td>\n<\/tr>\n<tr>\n<td>M\u1ee5c ti\u00eau \u0111\u00e1ng ch\u00fa \u00fd<\/td>\n<td>H\u1ecdc vi\u1ec7n T\u00e0i ch\u00ednh<\/td>\n<td>H\u1ecdc vi\u1ec7n T\u00e0i ch\u00ednh<\/td>\n<td>T\u1ed5 ch\u1ee9c, c\u00e1 nh\u00e2n<\/td>\n<\/tr>\n<tr>\n<td>L\u1ea7n xu\u1ea5t hi\u1ec7n \u0111\u1ea7u ti\u00ean<\/td>\n<td>2014<\/td>\n<td>2007<\/td>\n<td>2014<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Tri\u1ec3n v\u1ecdng v\u00e0 c\u00f4ng ngh\u1ec7 c\u1ee7a t\u01b0\u01a1ng lai li\u00ean quan \u0111\u1ebfn Dridex<\/h2>\n<p>Khi c\u00f4ng ngh\u1ec7 ti\u1ebfp t\u1ee5c ph\u00e1t tri\u1ec3n, kh\u1ea3 n\u0103ng c\u1ee7a c\u00e1c Trojan ng\u00e2n h\u00e0ng nh\u01b0 Dridex c\u0169ng v\u1eady. T\u01b0\u01a1ng lai n\u1eafm gi\u1eef nh\u1eefng ti\u1ebfn b\u1ed9 ti\u1ec1m n\u0103ng trong k\u1ef9 thu\u1eadt tr\u1ed1n tr\u00e1nh, c\u01a1 ch\u1ebf t\u00e0ng h\u00ecnh v\u00e0 khai th\u00e1c c\u00e1c c\u00f4ng ngh\u1ec7 m\u1edbi n\u1ed5i. \u0110i\u1ec1u quan tr\u1ecdng l\u00e0 c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u v\u00e0 t\u1ed5 ch\u1ee9c b\u1ea3o m\u1eadt ph\u1ea3i lu\u00f4n c\u1ea3nh gi\u00e1c v\u00e0 li\u00ean t\u1ee5c \u0111i\u1ec1u ch\u1ec9nh bi\u1ec7n ph\u00e1p ph\u00f2ng v\u1ec7 c\u1ee7a m\u00ecnh \u0111\u1ec3 ch\u1ed1ng l\u1ea1i nh\u1eefng m\u1ed1i \u0111e d\u1ecda \u0111ang gia t\u0103ng n\u00e0y.<\/p>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng ho\u1eb7c li\u00ean k\u1ebft m\u00e1y ch\u1ee7 proxy v\u1edbi Dridex<\/h2>\n<p>M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 \u0111\u00f3ng m\u1ed9t vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c gi\u1ea3m thi\u1ec3u nguy c\u01a1 l\u00e2y nhi\u1ec5m Dridex. B\u1eb1ng c\u00e1ch \u0111\u1ecbnh tuy\u1ebfn l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp web th\u00f4ng qua m\u00e1y ch\u1ee7 proxy, c\u00e1c t\u1ed5 ch\u1ee9c c\u00f3 th\u1ec3 l\u1ecdc v\u00e0 ch\u1eb7n quy\u1ec1n truy c\u1eadp m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3 v\u00e0o c\u00e1c t\u00ean mi\u1ec1n v\u00e0 \u0111\u1ecba ch\u1ec9 IP \u0111\u1ed9c h\u1ea1i \u0111\u00e3 bi\u1ebft \u0111\u01b0\u1ee3c li\u00ean k\u1ebft v\u1edbi m\u00e1y ch\u1ee7 Dridex C&amp;C. Ngo\u00e0i ra, m\u00e1y ch\u1ee7 proxy v\u1edbi c\u00e1c t\u00ednh n\u0103ng b\u1ea3o m\u1eadt n\u00e2ng cao, ch\u1eb3ng h\u1ea1n nh\u01b0 l\u1ecdc n\u1ed9i dung web v\u00e0 ph\u00e2n t\u00edch d\u1ef1a tr\u00ean h\u00e0nh vi, c\u00f3 th\u1ec3 gi\u00fap ph\u00e1t hi\u1ec7n v\u00e0 ch\u1eb7n c\u00e1c ho\u1ea1t \u0111\u1ed9ng li\u00ean quan \u0111\u1ebfn Dridex trong th\u1eddi gian th\u1ef1c.<\/p>\n<p>H\u01a1n n\u1eefa, \u0111\u1ed1i v\u1edbi nh\u1eefng c\u00e1 nh\u00e2n lo ng\u1ea1i v\u1ec1 b\u1ea3o m\u1eadt tr\u1ef1c tuy\u1ebfn c\u1ee7a m\u00ecnh, vi\u1ec7c s\u1eed d\u1ee5ng m\u00e1y ch\u1ee7 proxy uy t\u00edn c\u00f3 th\u1ec3 b\u1ed5 sung th\u00eam m\u1ed9t l\u1edbp b\u1ea3o v\u1ec7 khi truy c\u1eadp c\u00e1c d\u1ecbch v\u1ee5 ng\u00e2n h\u00e0ng tr\u1ef1c tuy\u1ebfn. M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 gi\u00fap che d\u1ea5u \u0111\u1ecba ch\u1ec9 IP th\u1ef1c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng, khi\u1ebfn k\u1ebb t\u1ea5n c\u00f4ng g\u1eb7p kh\u00f3 kh\u0103n h\u01a1n khi nh\u1eafm m\u1ee5c ti\u00eau tr\u1ef1c ti\u1ebfp v\u00e0o h\u1ecd.<\/p>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 Dridex v\u00e0 c\u00e1ch ph\u00f2ng ng\u1eeba n\u00f3:<\/p>\n<ul>\n<li><a href=\"https:\/\/attack.mitre.org\/groups\/G0021\/\" target=\"_new\" rel=\"noopener nofollow\">Li\u00ean k\u1ebft 1: Ph\u00e2n t\u00edch ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i Dridex \u2013 MITER ATT&amp;CK<\/a><\/li>\n<li><a href=\"https:\/\/www.us-cert.gov\/ncas\/alerts\/TA17-181A\" target=\"_new\" rel=\"noopener nofollow\">Li\u00ean k\u1ebft 2: Trojan ng\u00e2n h\u00e0ng Dridex \u2013 US-CERT<\/a><\/li>\n<li><a href=\"https:\/\/us.norton.com\/internetsecurity-malware-dridex-banking-trojan.html\" target=\"_new\" rel=\"noopener nofollow\">Li\u00ean k\u1ebft 3: C\u00e1ch b\u1ea3o v\u1ec7 ch\u1ed1ng l\u1ea1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i Dridex \u2013 Norton<\/a><\/li>\n<\/ul>\n<p>Xin l\u01b0u \u00fd r\u1eb1ng c\u00e1c li\u00ean k\u1ebft \u0111\u01b0\u1ee3c cung c\u1ea5p ch\u1ec9 nh\u1eb1m m\u1ee5c \u0111\u00edch gi\u00e1o d\u1ee5c v\u00e0 OneProxy kh\u00f4ng x\u00e1c nh\u1eadn ho\u1eb7c h\u1ed7 tr\u1ee3 b\u1ea5t k\u1ef3 ho\u1ea1t \u0111\u1ed9ng b\u1ea5t h\u1ee3p ph\u00e1p ho\u1eb7c phi \u0111\u1ea1o \u0111\u1ee9c n\u00e0o li\u00ean quan \u0111\u1ebfn Dridex ho\u1eb7c b\u1ea5t k\u1ef3 ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i n\u00e0o kh\u00e1c.<\/p>","protected":false},"featured_media":476997,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476996","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Dridex: An In-Depth Analysis<\/mark>","faq_items":[{"question":"<strong>FAQs about Dridex<\/strong>","answer":""},{"question":"What is Dridex?","answer":"<p>Dridex is a notorious banking Trojan, a type of malware designed to steal sensitive financial information, particularly online banking credentials. It employs social engineering tactics and web injection techniques to trick victims into revealing their login credentials and other personal data.<\/p>"},{"question":"How did Dridex originate?","answer":"<p>Dridex first emerged in 2014 as an evolution of previous banking Trojans like Cridex and Zeus. It is believed to have been developed by a well-organized cybercriminal group, possibly from Eastern Europe. The malware was initially focused on targeting financial institutions in the United States, the United Kingdom, and Europe.<\/p>"},{"question":"How does Dridex work?","answer":"<p>Dridex is typically delivered through spam emails with malicious attachments or links to infected websites. Once activated, the Trojan installs on the victim's system and starts its covert operations. It utilizes web injection to modify web pages related to online banking, tricking users into divulging sensitive information on fake websites. The stolen data is then sent to remote command-and-control (C&amp;C) servers.<\/p>"},{"question":"What are the key features of Dridex?","answer":"<p>Dridex is characterized by its sophisticated evasion techniques, such as encryption and obfuscation, to avoid detection by security software. It also uses a modular architecture to download and execute additional malicious components for more advanced capabilities. The use of social engineering and web injection makes it a potent threat to online banking users.<\/p>"},{"question":"What types of Dridex exist?","answer":"<p>Over time, different versions of Dridex have been identified, each with enhanced capabilities and improved evasion techniques. Some notable variants include Dridex 220, Dridex 270, and Dridex 300. Each version expanded its target scope and refined its attack methods.<\/p>"},{"question":"Can Dridex be used legally?","answer":"<p>No, Dridex is a malicious tool used for illegal activities, specifically stealing sensitive information. Any attempt to use or distribute Dridex is illegal and subject to severe legal consequences.<\/p>"},{"question":"How can I protect myself from Dridex?","answer":"<p>To protect yourself and your organization from Dridex, follow these best practices:<\/p><ul><li>Be cautious with email attachments and links, especially from unknown senders.<\/li><li>Use reputable antivirus and anti-malware software.<\/li><li>Keep your software and operating system up to date with the latest security patches.<\/li><li>Educate yourself and your employees about the dangers of phishing emails and social engineering.<\/li><\/ul>"},{"question":"How can proxy servers help with Dridex?","answer":"<p>Proxy servers can enhance security against Dridex by filtering and blocking access to known malicious domains and IP addresses associated with Dridex C&amp;C servers. They can also mask users' real IP addresses, making it more difficult for attackers to target them directly.<\/p>"},{"question":"What are the future perspectives of Dridex?","answer":"<p>As technology evolves, Dridex is likely to adapt and develop more advanced evasion techniques. Organizations and security researchers must remain vigilant and continuously update their defenses to counter these evolving threats.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/476996","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/476996\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media\/476997"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=476996"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}