{"id":477001,"date":"2023-08-09T09:06:01","date_gmt":"2023-08-09T09:06:01","guid":{"rendered":""},"modified":"2023-09-05T11:13:48","modified_gmt":"2023-09-05T11:13:48","slug":"drive-by-mining","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/drive-by-mining\/","title":{"rendered":"Khai th\u00e1c theo t\u1eebng \u1ed5 \u0111\u0129a"},"content":{"rendered":"<p>Khai th\u00e1c theo t\u1eebng \u1ed5 \u0111\u0129a, c\u00f2n \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed tr\u00ean tr\u00ecnh duy\u1ec7t, l\u00e0 m\u1ed9t ph\u01b0\u01a1ng ph\u00e1p \u0111\u01b0\u1ee3c c\u00e1c t\u00e1c nh\u00e2n \u0111\u1ed9c h\u1ea1i s\u1eed d\u1ee5ng \u0111\u1ec3 b\u00ed m\u1eadt khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed tr\u00ean m\u00e1y t\u00ednh c\u1ee7a ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng nghi ng\u1edd th\u00f4ng qua tr\u00ecnh duy\u1ec7t web. H\u00ecnh th\u1ee9c khai th\u00e1c n\u00e0y khai th\u00e1c t\u00e0i nguy\u00ean t\u00ednh to\u00e1n c\u1ee7a kh\u00e1ch truy c\u1eadp v\u00e0o c\u00e1c trang web m\u00e0 h\u1ecd kh\u00f4ng c\u00f3 s\u1ef1 \u0111\u1ed3ng \u00fd ho\u1eb7c kh\u00f4ng bi\u1ebft. M\u1eb7c d\u00f9 b\u1ea3n th\u00e2n vi\u1ec7c khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed l\u00e0 m\u1ed9t quy tr\u00ecnh h\u1ee3p ph\u00e1p \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e1c th\u1ef1c c\u00e1c giao d\u1ecbch v\u00e0 b\u1ea3o m\u1eadt m\u1ea1ng blockchain, nh\u01b0ng vi\u1ec7c khai th\u00e1c Drive-by l\u1ea1i l\u1ea1m d\u1ee5ng c\u00e1c nguy\u00ean t\u1eafc n\u00e0y cho c\u00e1c m\u1ee5c \u0111\u00edch x\u1ea5u.<\/p>\n<h2>L\u1ecbch s\u1eed v\u1ec1 ngu\u1ed3n g\u1ed1c c\u1ee7a khai th\u00e1c Drive-by v\u00e0 l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn n\u00f3<\/h2>\n<p>Khai th\u00e1c theo t\u1eebng \u1ed5 xu\u1ea5t hi\u1ec7n v\u00e0o \u0111\u1ea7u nh\u1eefng n\u0103m 2010 khi c\u00e1c lo\u1ea1i ti\u1ec1n \u0111i\u1ec7n t\u1eed nh\u01b0 Bitcoin b\u1eaft \u0111\u1ea7u tr\u1edf n\u00ean ph\u1ed5 bi\u1ebfn \u0111\u00e1ng k\u1ec3. T\u1ed9i ph\u1ea1m m\u1ea1ng \u0111\u00e3 nh\u1eadn ra c\u01a1 h\u1ed9i khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed m\u00e0 kh\u00f4ng c\u1ea7n \u0111\u1ea7u t\u01b0 v\u00e0o chi ph\u00ed \u0111i\u1ec7n v\u00e0 ph\u1ea7n c\u1ee9ng \u0111\u1eaft \u0111\u1ecf b\u1eb1ng c\u00e1ch t\u1eadn d\u1ee5ng s\u1ee9c m\u1ea1nh x\u1eed l\u00fd tr\u00ean m\u00e1y t\u00ednh c\u1ee7a ng\u01b0\u1eddi kh\u00e1c. L\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn khai th\u00e1c Drive-by c\u00f3 th\u1ec3 b\u1eaft ngu\u1ed3n t\u1eeb n\u0103m 2011 khi m\u1ed9t nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt n\u1ed5i ti\u1ebfng, Mikko Hypp\u00f6nen, b\u00e1o c\u00e1o \u0111\u00e3 t\u00ecm th\u1ea5y c\u00e1c t\u1eadp l\u1ec7nh khai th\u00e1c Bitcoin \u0111\u01b0\u1ee3c nh\u00fang trong m\u1ed9t qu\u1ea3ng c\u00e1o \u0111\u1ed9c h\u1ea1i tr\u00ean m\u1ed9t trang web.<\/p>\n<h2>Th\u00f4ng tin chi ti\u1ebft v\u1ec1 Khai th\u00e1c theo t\u1eebng \u1ed5: M\u1edf r\u1ed9ng ch\u1ee7 \u0111\u1ec1 Khai th\u00e1c theo t\u1eebng \u1ed5<\/h2>\n<p>Khai th\u00e1c theo t\u1eebng \u1ed5 ho\u1ea1t \u0111\u1ed9ng th\u00f4ng qua s\u1ef1 k\u1ebft h\u1ee3p c\u1ee7a c\u00e1c t\u1eadp l\u1ec7nh \u0111\u1ed9c h\u1ea1i v\u00e0 l\u1ed7 h\u1ed5ng trong tr\u00ecnh duy\u1ec7t web v\u00e0 plugin. Qu\u00e1 tr\u00ecnh n\u00e0y th\u01b0\u1eddng b\u1eaft \u0111\u1ea7u khi ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp trang web b\u1ecb x\u00e2m nh\u1eadp c\u00f3 l\u01b0u tr\u1eef t\u1eadp l\u1ec7nh khai th\u00e1c. T\u1eadp l\u1ec7nh, th\u01b0\u1eddng \u0111\u01b0\u1ee3c vi\u1ebft b\u1eb1ng JavaScript, t\u1ef1 \u0111\u1ed9ng th\u1ef1c thi trong tr\u00ecnh duy\u1ec7t c\u1ee7a kh\u00e1ch truy c\u1eadp m\u00e0 h\u1ecd kh\u00f4ng bi\u1ebft ho\u1eb7c kh\u00f4ng \u0111\u1ed3ng \u00fd. Sau \u0111\u00f3, n\u00f3 khai th\u00e1c s\u1ee9c m\u1ea1nh CPU c\u1ee7a ng\u01b0\u1eddi d\u00f9ng \u0111\u1ec3 khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed, \u0111i\u1ec3n h\u00ecnh l\u00e0 Monero do c\u00e1c t\u00ednh n\u0103ng b\u1ea3o m\u1eadt c\u1ee7a n\u00f3, v\u00ec n\u00f3 mang l\u1ea1i t\u00ednh \u1ea9n danh cao h\u01a1n so v\u1edbi Bitcoin.<\/p>\n<p>T\u1eadp l\u1ec7nh khai th\u00e1c ch\u1ea1y \u1edf ch\u1ebf \u0111\u1ed9 n\u1ec1n trong khi ng\u01b0\u1eddi d\u00f9ng t\u01b0\u01a1ng t\u00e1c v\u1edbi n\u1ed9i dung c\u1ee7a trang web v\u00e0 kh\u00f4ng \u0111\u01b0\u1ee3c ch\u00fa \u00fd trong h\u1ea7u h\u1ebft c\u00e1c tr\u01b0\u1eddng h\u1ee3p. Khi CPU c\u1ee7a ng\u01b0\u1eddi d\u00f9ng b\u1ecb khai th\u00e1c \u0111\u1ec3 khai th\u00e1c, \u0111i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 khi\u1ebfn m\u1ee9c s\u1eed d\u1ee5ng b\u1ed9 x\u1eed l\u00fd t\u0103ng l\u00ean, d\u1eabn \u0111\u1ebfn gi\u1ea3m hi\u1ec7u su\u1ea5t thi\u1ebft b\u1ecb, qu\u00e1 n\u00f3ng v\u00e0 gi\u1ea3m tu\u1ed5i th\u1ecd pin tr\u00ean thi\u1ebft b\u1ecb di \u0111\u1ed9ng.<\/p>\n<h2>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a khai th\u00e1c Drive-by: C\u00e1ch khai th\u00e1c Drive-by ho\u1ea1t \u0111\u1ed9ng<\/h2>\n<p>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a khai th\u00e1c Drive-by bao g\u1ed3m m\u1ed9t s\u1ed1 th\u00e0nh ph\u1ea7n ch\u00ednh:<\/p>\n<ol>\n<li>\n<p><strong>T\u1eadp l\u1ec7nh \u0111\u1ed9c h\u1ea1i<\/strong>: Khai th\u00e1c theo t\u1eebng \u1ed5 s\u1eed d\u1ee5ng JavaScript ho\u1eb7c c\u00e1c ng\u00f4n ng\u1eef l\u1eadp tr\u00ecnh kh\u00e1c \u0111\u1ec3 nh\u00fang m\u00e3 khai th\u00e1c v\u00e0o c\u00e1c trang web. M\u00e3 n\u00e0y k\u1ebft n\u1ed1i v\u1edbi m\u1ed9t nh\u00f3m khai th\u00e1c, n\u01a1i s\u1ee9c m\u1ea1nh t\u00ednh to\u00e1n t\u1ed5ng h\u1ee3p c\u1ee7a nhi\u1ec1u m\u00e1y b\u1ecb nhi\u1ec5m s\u1ebd khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed.<\/p>\n<\/li>\n<li>\n<p><strong>Trang web b\u1ecb x\u00e2m ph\u1ea1m<\/strong>: T\u1ed9i ph\u1ea1m m\u1ea1ng th\u01b0\u1eddng khai th\u00e1c c\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt tr\u00ean c\u00e1c trang web ho\u1eb7c \u0111\u01b0a c\u00e1c \u0111o\u1ea1n m\u00e3 \u0111\u1ed9c h\u1ea1i v\u00e0o c\u00e1c trang web h\u1ee3p ph\u00e1p. Kh\u00e1ch truy c\u1eadp v\u00e0o c\u00e1c trang web b\u1ecb x\u00e2m nh\u1eadp n\u00e0y v\u00f4 t\u00ecnh ch\u1ea1y m\u00e3 khai th\u00e1c khi h\u1ecd truy c\u1eadp trang.<\/p>\n<\/li>\n<li>\n<p><strong>B\u1ec3 khai th\u00e1c<\/strong>: C\u00e1c t\u1eadp l\u1ec7nh khai th\u00e1c k\u1ebft n\u1ed1i v\u1edbi c\u00e1c nh\u00f3m khai th\u00e1c, l\u00e0 c\u00e1c m\u00e1y ch\u1ee7 \u0111i\u1ec1u ph\u1ed1i n\u1ed7 l\u1ef1c khai th\u00e1c chung c\u1ee7a nhi\u1ec1u m\u00e1y. Ph\u1ea7n th\u01b0\u1edfng \u0111\u01b0\u1ee3c ph\u00e2n ph\u1ed1i gi\u1eefa nh\u1eefng ng\u01b0\u1eddi tham gia d\u1ef1a tr\u00ean kh\u1ea3 n\u0103ng t\u00ednh to\u00e1n \u0111\u00f3ng g\u00f3p c\u1ee7a h\u1ecd.<\/p>\n<\/li>\n<\/ol>\n<h2>Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a khai th\u00e1c Drive-by<\/h2>\n<p>Khai th\u00e1c theo t\u1eebng \u1ed5 s\u1edf h\u1eefu m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng \u0111\u00e1ng ch\u00fa \u00fd, khi\u1ebfn n\u00f3 tr\u1edf th\u00e0nh m\u1ed9t l\u1ef1a ch\u1ecdn h\u1ea5p d\u1eabn \u0111\u1ed1i v\u1edbi nh\u1eefng k\u1ebb \u0111\u1ed9c h\u1ea1i:<\/p>\n<ol>\n<li>\n<p><strong>B\u1ea3n ch\u1ea5t l\u00e9n l\u00fat<\/strong>: Khai th\u00e1c theo ki\u1ec3u Drive-by ho\u1ea1t \u0111\u1ed9ng \u1edf ch\u1ebf \u0111\u1ed9 n\u1ec1n, khi\u1ebfn ng\u01b0\u1eddi d\u00f9ng kh\u00f3 ph\u00e1t hi\u1ec7n ra s\u1ef1 hi\u1ec7n di\u1ec7n c\u1ee7a n\u00f3.<\/p>\n<\/li>\n<li>\n<p><strong>R\u00e0o c\u1ea3n gia nh\u1eadp th\u1ea5p<\/strong>: T\u1ed9i ph\u1ea1m m\u1ea1ng kh\u00f4ng c\u1ea7n ki\u1ebfn th\u1ee9c ho\u1eb7c ph\u1ea7n c\u1ee9ng chuy\u00ean d\u1ee5ng v\u00ec ch\u00fang t\u1eadn d\u1ee5ng t\u00e0i nguy\u00ean c\u1ee7a nh\u1eefng ng\u01b0\u1eddi d\u00f9ng v\u00f4 t\u00ecnh.<\/p>\n<\/li>\n<li>\n<p><strong>Chi\u1ebfn l\u01b0\u1ee3c ki\u1ebfm ti\u1ec1n<\/strong>: Ti\u1ec1n \u0111i\u1ec7n t\u1eed \u0111\u01b0\u1ee3c khai th\u00e1c b\u1ea5t h\u1ee3p ph\u00e1p c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c chuy\u1ec3n \u0111\u1ed5i th\u00e0nh ti\u1ec1n \u0111\u1ecbnh danh, t\u1ea1o \u0111\u1ed9ng l\u1ef1c cho nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c lo\u1ea1i h\u00ecnh khai th\u00e1c Drive-by<\/h2>\n<p>Khai th\u00e1c theo t\u1eebng \u1ed5 c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c ph\u00e2n lo\u1ea1i d\u1ef1a tr\u00ean c\u00e1c ph\u01b0\u01a1ng th\u1ee9c th\u1ef1c hi\u1ec7n c\u1ee7a n\u00f3:<\/p>\n<table>\n<thead>\n<tr>\n<th>Ki\u1ec3u<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Khai th\u00e1c d\u1ef1a tr\u00ean tr\u00ecnh duy\u1ec7t<\/td>\n<td>C\u00e1c t\u1eadp l\u1ec7nh \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c nh\u00fang trong c\u00e1c trang web s\u1ebd khai th\u00e1c tr\u00ecnh duy\u1ec7t c\u1ee7a kh\u00e1ch truy c\u1eadp \u0111\u1ec3 khai th\u00e1c.<\/td>\n<\/tr>\n<tr>\n<td>Khai th\u00e1c qu\u1ea3ng c\u00e1o \u0111\u1ed9c h\u1ea1i<\/td>\n<td>Qu\u1ea3ng c\u00e1o ch\u1ee9a ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i cung c\u1ea5p t\u1eadp l\u1ec7nh khai th\u00e1c cho ng\u01b0\u1eddi d\u00f9ng khi h\u1ecd t\u1ea3i qu\u1ea3ng c\u00e1o b\u1ecb x\u00e2m ph\u1ea1m.<\/td>\n<\/tr>\n<tr>\n<td>D\u1ef1a tr\u00ean plugin\/ti\u1ec7n \u00edch m\u1edf r\u1ed9ng<\/td>\n<td>C\u00e1c plugin\/ti\u1ec7n \u00edch m\u1edf r\u1ed9ng c\u1ee7a tr\u00ecnh duy\u1ec7t \u0111\u1ed9c h\u1ea1i s\u1ebd t\u1ef1 \u0111\u1ed9ng th\u1ef1c thi c\u00e1c t\u1eadp l\u1ec7nh khai th\u00e1c khi \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>C\u00e1c c\u00e1ch s\u1eed d\u1ee5ng Khai th\u00e1c Drive-by, c\u00e1c v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p li\u00ean quan \u0111\u1ebfn vi\u1ec7c s\u1eed d\u1ee5ng<\/h2>\n<h3>C\u00e1c c\u00e1ch s\u1eed d\u1ee5ng Khai th\u00e1c theo t\u1eebng \u1ed5 \u0111\u0129a<\/h3>\n<p>Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng vi\u1ec7c khai th\u00e1c t\u1eebng \u1ed5 theo nhi\u1ec1u c\u00e1ch:<\/p>\n<ol>\n<li>\n<p><strong>Ki\u1ebfm ti\u1ec1n t\u1eeb trang web<\/strong>: M\u1ed9t s\u1ed1 ch\u1ee7 s\u1edf h\u1eefu trang web c\u00f3 th\u1ec3 c\u1ed1 t\u00ecnh nh\u00fang c\u00e1c t\u1eadp l\u1ec7nh khai th\u00e1c \u0111\u1ec3 t\u1ea1o doanh thu m\u00e0 th\u01b0\u1eddng kh\u00f4ng ti\u1ebft l\u1ed9 h\u00e0nh vi n\u00e0y cho ng\u01b0\u1eddi d\u00f9ng.<\/p>\n<\/li>\n<li>\n<p><strong>Chi\u1ebfn d\u1ecbch qu\u1ea3ng c\u00e1o \u0111\u1ed9c h\u1ea1i<\/strong>: T\u1ed9i ph\u1ea1m m\u1ea1ng c\u00f3 th\u1ec3 ph\u00e2n ph\u1ed1i c\u00e1c qu\u1ea3ng c\u00e1o \u0111\u1ed9c h\u1ea1i c\u00f3 ch\u1ee9a c\u00e1c t\u1eadp l\u1ec7nh khai th\u00e1c.<\/p>\n<\/li>\n<li>\n<p><strong>L\u01b0u tr\u1eef web b\u1ecb x\u00e2m ph\u1ea1m<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 x\u00e2m ph\u1ea1m c\u00e1c d\u1ecbch v\u1ee5 l\u01b0u tr\u1eef web \u0111\u1ec3 \u0111\u01b0a c\u00e1c t\u1eadp l\u1ec7nh khai th\u00e1c v\u00e0o nhi\u1ec1u trang web \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef tr\u00ean n\u1ec1n t\u1ea3ng.<\/p>\n<\/li>\n<\/ol>\n<h3>V\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p<\/h3>\n<ol>\n<li>\n<p><strong>Nh\u1eadn th\u1ee9c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng<\/strong>: Ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 t\u1ef1 b\u1ea3o v\u1ec7 m\u00ecnh b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng tr\u00ecnh ch\u1eb7n qu\u1ea3ng c\u00e1o v\u00e0 ph\u1ea7n m\u1ec1m ch\u1ed1ng vi-r\u00fat, nh\u1eefng ph\u1ea7n m\u1ec1m n\u00e0y c\u00f3 th\u1ec3 ph\u00e1t hi\u1ec7n v\u00e0 ch\u1eb7n c\u00e1c t\u1eadp l\u1ec7nh \u0111\u1ed9c h\u1ea1i.<\/p>\n<\/li>\n<li>\n<p><strong>B\u1ea3o m\u1eadt trang web<\/strong>: Ch\u1ee7 s\u1edf h\u1eefu trang web n\u00ean \u01b0u ti\u00ean c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt \u0111\u1ec3 ng\u0103n ch\u1eb7n k\u1ebb t\u1ea5n c\u00f4ng \u0111\u01b0a c\u00e1c t\u1eadp l\u1ec7nh khai th\u00e1c v\u00e0o trang web c\u1ee7a h\u1ecd.<\/p>\n<\/li>\n<li>\n<p><strong>M\u1ed1i quan t\u00e2m v\u1ec1 ph\u00e1p l\u00fd v\u00e0 \u0111\u1ea1o \u0111\u1ee9c<\/strong>: M\u1ed9t s\u1ed1 qu\u1ed1c gia \u0111\u00e3 coi vi\u1ec7c m\u00e3 h\u00f3a tr\u00ecnh duy\u1ec7t l\u00e0 b\u1ea5t h\u1ee3p ph\u00e1p. C\u00e1c quy \u0111\u1ecbnh v\u00e0 nh\u1eadn th\u1ee9c c\u00f3 th\u1ec3 ng\u0103n ch\u1eb7n c\u00e1c t\u00e1c nh\u00e2n \u0111\u1ed9c h\u1ea1i.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh kh\u00e1c v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u0111\u1eb7c tr\u01b0ng<\/th>\n<th>Khai th\u00e1c theo ph\u01b0\u01a1ng th\u1ee9c l\u00e1i xe<\/th>\n<th>Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i truy\u1ec1n th\u1ed1ng<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>M\u1ee5c \u0111\u00edch<\/td>\n<td>Khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed tr\u00e1i ph\u00e9p<\/td>\n<td>Tr\u1ed9m c\u1eafp d\u1eef li\u1ec7u, thu l\u1ee3i t\u00e0i ch\u00ednh, v.v.<\/td>\n<\/tr>\n<tr>\n<td>S\u1ef1 \u0111\u1ed3ng \u00fd c\u1ee7a ng\u01b0\u1eddi d\u00f9ng<\/td>\n<td>V\u1eafng m\u1eb7t<\/td>\n<td>V\u1eafng m\u1eb7t ho\u1eb7c c\u00f3 \u0111\u01b0\u1ee3c m\u1ed9t c\u00e1ch l\u1eeba \u0111\u1ea3o<\/td>\n<\/tr>\n<tr>\n<td>Kh\u00f3 ph\u00e1t hi\u1ec7n<\/td>\n<td>V\u1eeba ph\u1ea3i<\/td>\n<td>Th\u00e1ch th\u1ee9c<\/td>\n<\/tr>\n<tr>\n<td>Ti\u00eau th\u1ee5 t\u00e0i nguy\u00ean<\/td>\n<td>Cao (CPU, \u0111i\u1ec7n, pin)<\/td>\n<td>Bi\u1ebfn d\u1ef1a tr\u00ean lo\u1ea1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i<\/td>\n<\/tr>\n<tr>\n<td>Ph\u00e2n ph\u1ed1i t\u1ea3i tr\u1ecdng<\/td>\n<td>Th\u00f4ng qua c\u00e1c trang web b\u1ecb x\u00e2m nh\u1eadp<\/td>\n<td>T\u1ec7p \u0111\u00ednh k\u00e8m email, n\u1ed9i dung t\u1ea3i xu\u1ed1ng, v.v.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>C\u00e1c quan \u0111i\u1ec3m v\u00e0 c\u00f4ng ngh\u1ec7 c\u1ee7a t\u01b0\u01a1ng lai li\u00ean quan \u0111\u1ebfn khai th\u00e1c Drive-by<\/h2>\n<p>Khi b\u1ed1i c\u1ea3nh an ninh m\u1ea1ng ph\u00e1t tri\u1ec3n, ho\u1ea1t \u0111\u1ed9ng khai th\u00e1c Drive-by c\u00f3 th\u1ec3 s\u1ebd ti\u1ebfp t\u1ee5c th\u00edch \u1ee9ng v\u1edbi nh\u1eefng th\u00e1ch th\u1ee9c v\u00e0 c\u00f4ng ngh\u1ec7 m\u1edbi. Nh\u1eefng ph\u00e1t tri\u1ec3n ti\u1ec1m n\u0103ng trong t\u01b0\u01a1ng lai c\u00f3 th\u1ec3 bao g\u1ed3m:<\/p>\n<ol>\n<li>\n<p><strong>K\u1ef9 thu\u1eadt n\u00e9 tr\u00e1nh n\u00e2ng cao<\/strong>: Khai th\u00e1c theo t\u1eebng \u1ed5 c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng t\u00ednh n\u0103ng che gi\u1ea5u m\u00e3 ngu\u1ed3n v\u00e0 \u0111a h\u00ecnh \u0111\u1ec3 tr\u00e1nh b\u1ecb c\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt ph\u00e1t hi\u1ec7n.<\/p>\n<\/li>\n<li>\n<p><strong>Gi\u1ea3i ph\u00e1p d\u1ef1a tr\u00ean Blockchain<\/strong>: M\u1ed9t s\u1ed1 trang web c\u00f3 th\u1ec3 \u00e1p d\u1ee5ng c\u00e1c kho\u1ea3n thanh to\u00e1n vi m\u00f4 d\u1ef1a tr\u00ean blockchain nh\u01b0 m\u1ed9t gi\u1ea3i ph\u00e1p thay th\u1ebf cho vi\u1ec7c khai th\u00e1c Drive-by \u0111\u1ec3 t\u1ea1o doanh thu trong khi v\u1eabn \u0111\u1ea3m b\u1ea3o s\u1ef1 \u0111\u1ed3ng \u00fd c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/p>\n<\/li>\n<li>\n<p><strong>B\u1ea3o m\u1eadt \u0111\u01b0\u1ee3c h\u1ed7 tr\u1ee3 b\u1edfi AI<\/strong>: C\u00e1c gi\u1ea3i ph\u00e1p b\u1ea3o m\u1eadt d\u1ef1a tr\u00ean AI c\u00f3 th\u1ec3 x\u00e1c \u0111\u1ecbnh v\u00e0 ch\u1eb7n c\u00e1c t\u1eadp l\u1ec7nh \u0111\u1ed9c h\u1ea1i t\u1ed1t h\u01a1n, gi\u1ea3m t\u00e1c \u0111\u1ed9ng c\u1ee7a vi\u1ec7c khai th\u00e1c Drive-by.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng ho\u1eb7c li\u00ean k\u1ebft m\u00e1y ch\u1ee7 proxy v\u1edbi ho\u1ea1t \u0111\u1ed9ng khai th\u00e1c Drive-by<\/h2>\n<p>M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 \u0111\u00f3ng m\u1ed9t vai tr\u00f2 quan tr\u1ecdng trong vi\u1ec7c khai th\u00e1c Drive-by. Nh\u1eefng k\u1ebb \u0111\u1ed9c h\u1ea1i c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng m\u00e1y ch\u1ee7 proxy \u0111\u1ec3 che gi\u1ea5u danh t\u00ednh c\u1ee7a h\u1ecd, khi\u1ebfn c\u01a1 quan ch\u1ee9c n\u0103ng g\u1eb7p kh\u00f3 kh\u0103n h\u01a1n trong vi\u1ec7c truy t\u00ecm ngu\u1ed3n g\u1ed1c c\u1ee7a c\u00e1c t\u1eadp l\u1ec7nh khai th\u00e1c. C\u00e1c m\u00e1y ch\u1ee7 proxy c\u0169ng c\u00f3 th\u1ec3 b\u1ecb l\u1ea1m d\u1ee5ng \u0111\u1ec3 ph\u00e2n ph\u1ed1i c\u00e1c t\u1eadp l\u1ec7nh khai th\u00e1c, tr\u1ed1n tr\u00e1nh c\u00e1c h\u1ea1n ch\u1ebf trong khu v\u1ef1c v\u00e0 t\u0103ng s\u1ed1 l\u01b0\u1ee3ng n\u1ea1n nh\u00e2n ti\u1ec1m n\u0103ng. Do \u0111\u00f3, c\u00e1c nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 proxy, nh\u01b0 OneProxy, c\u1ea7n tri\u1ec3n khai c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt nghi\u00eam ng\u1eb7t \u0111\u1ec3 ng\u0103n m\u00e1y ch\u1ee7 c\u1ee7a h\u1ecd tr\u1edf th\u00e0nh \u0111\u01b0\u1eddng d\u1eabn cho c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u1ed9c h\u1ea1i.<\/p>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 khai th\u00e1c Drive-by v\u00e0 m\u00e3 h\u00f3a tr\u00ecnh duy\u1ec7t, b\u1ea1n c\u00f3 th\u1ec3 tham kh\u1ea3o c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n<ol>\n<li><a href=\"https:\/\/www.trendmicro.com\/vinfo\/us\/security\/news\/cybercrime-and-digital-threats\/understanding-drive-by-cryptocurrency-mining\" target=\"_new\" rel=\"noopener nofollow\">T\u00ecm hi\u1ec3u v\u1ec1 khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed Drive-By<\/a><\/li>\n<li><a href=\"https:\/\/www.symantec.com\/blogs\/threat-intelligence\/browser-cryptojacking-end-innocence\" target=\"_new\" rel=\"noopener nofollow\">Tr\u00ecnh duy\u1ec7t Cryptojacking: S\u1ef1 k\u1ebft th\u00fac c\u1ee7a s\u1ef1 ng\u00e2y th\u01a1<\/a><\/li>\n<li><a href=\"https:\/\/www.digitalshadows.com\/blog-and-research\/the-rise-of-in-browser-cryptocurrency-mining\/\" target=\"_new\" rel=\"noopener nofollow\">S\u1ef1 tr\u1ed7i d\u1eady c\u1ee7a vi\u1ec7c khai th\u00e1c ti\u1ec1n \u0111i\u1ec7n t\u1eed trong tr\u00ecnh duy\u1ec7t<\/a><\/li>\n<\/ol>","protected":false},"featured_media":468280,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477001","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Drive-by Mining: Unraveling the Stealthy Resource Acquisition<\/mark>","faq_items":[{"question":"What is Drive-by mining?","answer":"<p>Drive-by mining, also known as browser cryptojacking, is a malicious method used by cybercriminals to secretly mine cryptocurrencies on users' computers through web browsers. It exploits visitors to compromised websites, harnessing their device's CPU power without their consent or knowledge.<\/p>"},{"question":"How did Drive-by mining originate?","answer":"<p>Drive-by mining emerged in the early 2010s with the rise of cryptocurrencies like Bitcoin. Malicious actors saw an opportunity to mine cryptocurrencies without investing in expensive hardware by using the processing power of unsuspecting users. The first mention of Drive-by mining was reported in 2011 when a security researcher discovered Bitcoin mining scripts in a malicious advertisement on a website.<\/p>"},{"question":"How does Drive-by mining work?","answer":"<p>Drive-by mining uses malicious scripts, typically written in JavaScript, embedded in compromised websites. When a user visits such a site, the script automatically runs in their browser, covertly mining cryptocurrencies, usually Monero, and sending the rewards to a mining pool. Users are often unaware of the mining process, leading to decreased device performance and battery life.<\/p>"},{"question":"What are the key features of Drive-by mining?","answer":"<p>Drive-by mining is characterized by its stealthy nature, low entry barrier for attackers, and the potential for monetization through illicitly mined cryptocurrencies.<\/p>"},{"question":"What types of Drive-by mining exist?","answer":"<p>Drive-by mining can be categorized into three types:<\/p><ol><li>Browser-Based Mining: Malicious scripts embedded in websites exploit visitors' browsers for mining.<\/li><li>Malvertising Mining: Malware-laden advertisements deliver mining scripts to users through compromised ads.<\/li><li>Plugin\/Extension-Based: Malicious browser plugins\/extensions automatically execute mining scripts when installed.<\/li><\/ol>"},{"question":"How can I protect myself from Drive-by mining?","answer":"<p>To protect yourself from Drive-by mining, consider the following measures:<\/p><ol><li>Use ad-blockers and antivirus software to detect and block malicious scripts.<\/li><li>Keep your web browser and plugins\/extensions updated to avoid known vulnerabilities.<\/li><li>Be cautious of visiting suspicious or compromised websites.<\/li><\/ol>"},{"question":"Can Drive-by mining be used legally?","answer":"<p>Drive-by mining, as a form of cybercrime, is generally considered illegal in many jurisdictions. It exploits users' resources without their consent and is often associated with unauthorized activities.<\/p>"},{"question":"What are the potential future developments in Drive-by mining?","answer":"<p>In the future, Drive-by mining may evolve with advanced evasion techniques, adoption of blockchain-based micropayments, and the integration of AI-powered security solutions.<\/p>"},{"question":"How are proxy servers associated with Drive-by mining?","answer":"<p>Proxy servers can be used by malicious actors to hide their identities and deliver mining scripts, making it harder to trace the source of the attack. Proxy service providers must implement robust security measures to prevent their servers from being misused for Drive-by mining.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477001","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477001\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media\/468280"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=477001"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}