{"id":477029,"date":"2023-08-09T09:06:26","date_gmt":"2023-08-09T09:06:26","guid":{"rendered":""},"modified":"2023-09-05T11:13:53","modified_gmt":"2023-09-05T11:13:53","slug":"dyreza","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/dyreza\/","title":{"rendered":"Dyreza"},"content":{"rendered":"<p>Dyreza, c\u00f2n \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 Dyre, l\u00e0 m\u1ed9t lo\u1ea1i ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i kh\u00e9t ti\u1ebfng, c\u1ee5 th\u1ec3 l\u00e0 Trojan ng\u00e2n h\u00e0ng, nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c giao d\u1ecbch ng\u00e2n h\u00e0ng tr\u1ef1c tuy\u1ebfn \u0111\u1ec3 \u0111\u00e1nh c\u1eafp th\u00f4ng tin t\u00e0i ch\u00ednh nh\u1ea1y c\u1ea3m. S\u1ef1 tinh t\u1ebf c\u1ee7a Dyreza n\u1eb1m \u1edf kh\u1ea3 n\u0103ng v\u01b0\u1ee3t qua m\u00e3 h\u00f3a SSL, c\u1ea5p cho n\u00f3 quy\u1ec1n truy c\u1eadp v\u00e0o d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m \u1edf d\u1ea1ng v\u0103n b\u1ea3n g\u1ed1c.<\/p>\n<h2>Ngu\u1ed3n g\u1ed1c v\u00e0 s\u1ef1 nh\u1eafc \u0111\u1ebfn \u0111\u1ea7u ti\u00ean c\u1ee7a Dyreza<\/h2>\n<p>Trojan ng\u00e2n h\u00e0ng Dyreza l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n v\u00e0o n\u0103m 2014 khi n\u00f3 \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n b\u1edfi c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u t\u1ea1i PhishMe, m\u1ed9t c\u00f4ng ty an ninh m\u1ea1ng. N\u00f3 \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh trong m\u1ed9t chi\u1ebfn d\u1ecbch l\u1eeba \u0111\u1ea3o tinh vi nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o nh\u1eefng n\u1ea1n nh\u00e2n kh\u00f4ng nghi ng\u1edd b\u1eb1ng &#039;b\u00e1o c\u00e1o chuy\u1ec3n kho\u1ea3n ng\u00e2n h\u00e0ng&#039; c\u00f3 \u0111\u00ednh k\u00e8m ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i trong t\u1ec7p ZIP. T\u00ean \u201cDyreza\u201d c\u00f3 ngu\u1ed3n g\u1ed1c t\u1eeb chu\u1ed7i \u201cdyre\u201d \u0111\u01b0\u1ee3c t\u00ecm th\u1ea5y trong t\u1ec7p nh\u1ecb ph\u00e2n c\u1ee7a Trojan v\u00e0 \u201cza\u201d l\u00e0 t\u1eeb vi\u1ebft t\u1eaft c\u1ee7a \u201cZeus thay th\u1ebf\u201d, \u00e1m ch\u1ec9 nh\u1eefng \u0111i\u1ec3m t\u01b0\u01a1ng \u0111\u1ed3ng c\u1ee7a n\u00f3 v\u1edbi Trojan Zeus kh\u00e9t ti\u1ebfng.<\/p>\n<h2>X\u00e2y d\u1ef1ng tr\u00ean Dyreza<\/h2>\n<p>Dyreza \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 thu th\u1eadp th\u00f4ng tin x\u00e1c th\u1ef1c v\u00e0 th\u00f4ng tin nh\u1ea1y c\u1ea3m kh\u00e1c t\u1eeb c\u00e1c h\u1ec7 th\u1ed1ng b\u1ecb nhi\u1ec5m, \u0111\u1eb7c bi\u1ec7t nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c trang web ng\u00e2n h\u00e0ng. N\u00f3 s\u1eed d\u1ee5ng m\u1ed9t k\u1ef9 thu\u1eadt \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 \u201cn\u1ed1i tr\u00ecnh duy\u1ec7t\u201d \u0111\u1ec3 ch\u1eb7n v\u00e0 thao t\u00fang l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp web. Trojan n\u00e0y kh\u00e1c v\u1edbi c\u00e1c Trojan ng\u00e2n h\u00e0ng kh\u00e1c do kh\u1ea3 n\u0103ng v\u01b0\u1ee3t qua m\u00e3 h\u00f3a SSL (L\u1edbp c\u1ed5ng b\u1ea3o m\u1eadt), cho ph\u00e9p n\u00f3 \u0111\u1ecdc v\u00e0 thao t\u00fang l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp web \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a.<\/p>\n<p>Ph\u01b0\u01a1ng th\u1ee9c ph\u00e2n ph\u1ed1i ch\u00ednh c\u1ee7a Dyreza l\u00e0 c\u00e1c email l\u1eeba \u0111\u1ea3o l\u1eeba n\u1ea1n nh\u00e2n t\u1ea3i xu\u1ed1ng v\u00e0 ch\u1ea1y Trojan, th\u01b0\u1eddng \u0111\u01b0\u1ee3c ng\u1ee5y trang d\u01b0\u1edbi d\u1ea1ng m\u1ed9t t\u00e0i li\u1ec7u ho\u1eb7c t\u1ec7p zip v\u00f4 h\u1ea1i. Sau khi c\u00e0i \u0111\u1eb7t, Dyreza \u0111\u1ee3i cho \u0111\u1ebfn khi ng\u01b0\u1eddi d\u00f9ng \u0111i\u1ec1u h\u01b0\u1edbng \u0111\u1ebfn trang web quan t\u00e2m (th\u01b0\u1eddng l\u00e0 trang web ng\u00e2n h\u00e0ng), l\u00fac n\u00e0y n\u00f3 s\u1ebd k\u00edch ho\u1ea1t v\u00e0 b\u1eaft \u0111\u1ea7u thu th\u1eadp d\u1eef li\u1ec7u.<\/p>\n<h2>C\u1ea5u tr\u00fac b\u00ean trong v\u00e0 ho\u1ea1t \u0111\u1ed9ng c\u1ee7a Dyreza<\/h2>\n<p>Sau khi \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t tr\u00ean m\u00e1y c\u1ee7a n\u1ea1n nh\u00e2n, Dyreza s\u1eed d\u1ee5ng cu\u1ed9c t\u1ea5n c\u00f4ng &#039;man-in-the-browser&#039; \u0111\u1ec3 gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp web. \u0110i\u1ec1u n\u00e0y cho ph\u00e9p ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i ch\u00e8n c\u00e1c tr\u01b0\u1eddng b\u1ed5 sung v\u00e0o bi\u1ec3u m\u1eabu web, l\u1eeba ng\u01b0\u1eddi d\u00f9ng cung c\u1ea5p th\u00f4ng tin b\u1ed5 sung nh\u01b0 s\u1ed1 PIN v\u00e0 TAN. Dyreza c\u0169ng s\u1eed d\u1ee5ng m\u1ed9t k\u1ef9 thu\u1eadt g\u1ecdi l\u00e0 \u201cwebinjects\u201d \u0111\u1ec3 thay \u0111\u1ed5i n\u1ed9i dung c\u1ee7a trang web, th\u01b0\u1eddng th\u00eam c\u00e1c tr\u01b0\u1eddng v\u00e0o bi\u1ec3u m\u1eabu \u0111\u1ec3 thu th\u1eadp th\u00eam d\u1eef li\u1ec7u.<\/p>\n<p>Vi\u1ec7c v\u01b0\u1ee3t qua SSL c\u1ee7a Dyreza \u0111\u1ea1t \u0111\u01b0\u1ee3c b\u1eb1ng c\u00e1ch n\u1ed1i v\u00e0o quy tr\u00ecnh tr\u00ecnh duy\u1ec7t v\u00e0 ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp tr\u01b0\u1edbc khi n\u00f3 \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a b\u1eb1ng SSL ho\u1eb7c sau khi n\u00f3 \u0111\u01b0\u1ee3c gi\u1ea3i m\u00e3. \u0110i\u1ec1u n\u00e0y cho ph\u00e9p Dyreza thu th\u1eadp d\u1eef li\u1ec7u \u1edf d\u1ea1ng v\u0103n b\u1ea3n g\u1ed1c, b\u1ecf qua ho\u00e0n to\u00e0n c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o v\u1ec7 do SSL cung c\u1ea5p.<\/p>\n<h2>T\u00ednh n\u0103ng ch\u00ednh c\u1ee7a Dyreza<\/h2>\n<ul>\n<li>B\u1ecf qua m\u00e3 h\u00f3a SSL: Dyreza c\u00f3 th\u1ec3 ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp web tr\u01b0\u1edbc khi \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a ho\u1eb7c sau khi \u0111\u01b0\u1ee3c gi\u1ea3i m\u00e3, thu th\u1eadp d\u1eef li\u1ec7u \u1edf d\u1ea1ng v\u0103n b\u1ea3n thu\u1ea7n t\u00fay.<\/li>\n<li>T\u1ea5n c\u00f4ng ng\u01b0\u1eddi trong tr\u00ecnh duy\u1ec7t: B\u1eb1ng c\u00e1ch theo d\u00f5i l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp web, Dyreza c\u00f3 th\u1ec3 thao t\u00fang c\u00e1c bi\u1ec3u m\u1eabu web \u0111\u1ec3 l\u1eeba ng\u01b0\u1eddi d\u00f9ng cung c\u1ea5p th\u00eam th\u00f4ng tin nh\u1ea1y c\u1ea3m.<\/li>\n<li>Webinjects: T\u00ednh n\u0103ng n\u00e0y cho ph\u00e9p Dyreza thay \u0111\u1ed5i n\u1ed9i dung c\u1ee7a trang web \u0111\u1ec3 thu th\u1eadp th\u00eam d\u1eef li\u1ec7u.<\/li>\n<li>Ph\u01b0\u01a1ng ph\u00e1p ti\u1ebfp c\u1eadn \u0111a vect\u01a1: Dyreza s\u1eed d\u1ee5ng nhi\u1ec1u ph\u01b0\u01a1ng ph\u00e1p kh\u00e1c nhau, bao g\u1ed3m email l\u1eeba \u0111\u1ea3o v\u00e0 b\u1ed9 c\u00f4ng c\u1ee5 khai th\u00e1c, \u0111\u1ec3 x\u00e2m nh\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng.<\/li>\n<\/ul>\n<h2>C\u00e1c lo\u1ea1i Dyreza<\/h2>\n<p>M\u1eb7c d\u00f9 kh\u00f4ng c\u00f3 c\u00e1c lo\u1ea1i Dyreza ri\u00eang bi\u1ec7t nh\u01b0ng \u0111\u00e3 c\u00f3 nhi\u1ec1u phi\u00ean b\u1ea3n kh\u00e1c nhau \u0111\u01b0\u1ee3c quan s\u00e1t th\u1ea5y trong t\u1ef1 nhi\u00ean. C\u00e1c phi\u00ean b\u1ea3n n\u00e0y kh\u00e1c nhau v\u1ec1 vect\u01a1 t\u1ea5n c\u00f4ng, m\u1ee5c ti\u00eau v\u00e0 k\u1ef9 thu\u1eadt c\u1ee5 th\u1ec3, nh\u01b0ng ch\u00fang \u0111\u1ec1u c\u00f3 chung ch\u1ee9c n\u0103ng c\u1ed1t l\u00f5i. Nh\u1eefng bi\u1ebfn th\u1ec3 n\u00e0y th\u01b0\u1eddng \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 c\u00e1c chi\u1ebfn d\u1ecbch kh\u00e1c nhau ch\u1ee9 kh\u00f4ng ph\u1ea3i l\u00e0 c\u00e1c lo\u1ea1i kh\u00e1c nhau.<\/p>\n<h2>S\u1eed d\u1ee5ng, v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p li\u00ean quan \u0111\u1ebfn Dyreza<\/h2>\n<p>Dyreza g\u00e2y ra m\u1ed1i \u0111e d\u1ecda \u0111\u00e1ng k\u1ec3 cho c\u1ea3 ng\u01b0\u1eddi d\u00f9ng c\u00e1 nh\u00e2n v\u00e0 t\u1ed5 ch\u1ee9c do kh\u1ea3 n\u0103ng \u0111\u00e1nh c\u1eafp th\u00f4ng tin ng\u00e2n h\u00e0ng nh\u1ea1y c\u1ea3m. C\u00e1ch ch\u00ednh \u0111\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro c\u1ee7a Dyreza v\u00e0 c\u00e1c Trojan t\u01b0\u01a1ng t\u1ef1 l\u00e0 th\u00f4ng qua c\u00e1c bi\u1ec7n ph\u00e1p an ninh m\u1ea1ng m\u1ea1nh m\u1ebd. Ch\u00fang bao g\u1ed3m vi\u1ec7c duy tr\u00ec ph\u1ea7n m\u1ec1m ch\u1ed1ng vi-r\u00fat c\u1eadp nh\u1eadt, gi\u00e1o d\u1ee5c ng\u01b0\u1eddi d\u00f9ng v\u1ec1 s\u1ef1 nguy hi\u1ec3m c\u1ee7a l\u1eeba \u0111\u1ea3o v\u00e0 s\u1eed d\u1ee5ng h\u1ec7 th\u1ed1ng ph\u00e1t hi\u1ec7n x\u00e2m nh\u1eadp.<\/p>\n<p>N\u1ebfu nghi ng\u1edd nhi\u1ec5m Dyreza, \u0111i\u1ec1u quan tr\u1ecdng l\u00e0 ph\u1ea3i ng\u1eaft k\u1ebft n\u1ed1i m\u00e1y b\u1ecb nhi\u1ec5m kh\u1ecfi m\u1ea1ng \u0111\u1ec3 tr\u00e1nh m\u1ea5t th\u00eam d\u1eef li\u1ec7u v\u00e0 l\u00e0m s\u1ea1ch h\u1ec7 th\u1ed1ng b\u1eb1ng c\u00f4ng c\u1ee5 ch\u1ed1ng vi-r\u00fat \u0111\u00e1ng tin c\u1eady. \u0110\u1ed1i v\u1edbi c\u00e1c t\u1ed5 ch\u1ee9c, c\u00f3 th\u1ec3 c\u1ea7n ph\u1ea3i th\u00f4ng b\u00e1o cho kh\u00e1ch h\u00e0ng v\u00e0 thay \u0111\u1ed5i to\u00e0n b\u1ed9 m\u1eadt kh\u1ea9u ng\u00e2n h\u00e0ng tr\u1ef1c tuy\u1ebfn.<\/p>\n<h2>So s\u00e1nh v\u1edbi ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i t\u01b0\u01a1ng t\u1ef1<\/h2>\n<p>Dyreza c\u00f3 nhi\u1ec1u \u0111\u1eb7c \u0111i\u1ec3m gi\u1ed1ng v\u1edbi c\u00e1c Trojan ng\u00e2n h\u00e0ng kh\u00e1c, ch\u1eb3ng h\u1ea1n nh\u01b0 Zeus v\u00e0 Bebloh. T\u1ea5t c\u1ea3 ch\u00fang \u0111\u1ec1u s\u1eed d\u1ee5ng c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng man-in-the-browser, s\u1eed d\u1ee5ng webinjects \u0111\u1ec3 thay \u0111\u1ed5i n\u1ed9i dung web v\u00e0 ch\u1ee7 y\u1ebfu \u0111\u01b0\u1ee3c ph\u00e2n ph\u1ed1i th\u00f4ng qua c\u00e1c chi\u1ebfn d\u1ecbch l\u1eeba \u0111\u1ea3o. Tuy nhi\u00ean, Dyreza n\u1ed5i b\u1eadt v\u1edbi kh\u1ea3 n\u0103ng v\u01b0\u1ee3t qua m\u00e3 h\u00f3a SSL, \u0111\u00e2y kh\u00f4ng ph\u1ea3i l\u00e0 t\u00ednh n\u0103ng ph\u1ed5 bi\u1ebfn c\u1ee7a c\u00e1c Trojan ng\u00e2n h\u00e0ng.<\/p>\n<table>\n<thead>\n<tr>\n<th style=\"text-align: center;\">Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i<\/th>\n<th style=\"text-align: center;\">Ng\u01b0\u1eddi trong tr\u00ecnh duy\u1ec7t<\/th>\n<th style=\"text-align: center;\">Webinject<\/th>\n<th style=\"text-align: center;\">B\u1ecf qua SSL<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: center;\">Dyreza<\/td>\n<td style=\"text-align: center;\">\u0110\u00fang<\/td>\n<td style=\"text-align: center;\">\u0110\u00fang<\/td>\n<td style=\"text-align: center;\">\u0110\u00fang<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: center;\">th\u1ea7n Zeus<\/td>\n<td style=\"text-align: center;\">\u0110\u00fang<\/td>\n<td style=\"text-align: center;\">\u0110\u00fang<\/td>\n<td style=\"text-align: center;\">KH\u00d4NG<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: center;\">Bebloh<\/td>\n<td style=\"text-align: center;\">\u0110\u00fang<\/td>\n<td style=\"text-align: center;\">\u0110\u00fang<\/td>\n<td style=\"text-align: center;\">KH\u00d4NG<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Quan \u0111i\u1ec3m t\u01b0\u01a1ng lai v\u00e0 c\u00f4ng ngh\u1ec7 li\u00ean quan \u0111\u1ebfn Dyreza<\/h2>\n<p>M\u1ed1i \u0111e d\u1ecda t\u1eeb c\u00e1c Trojan ng\u00e2n h\u00e0ng nh\u01b0 Dyreza ti\u1ebfp t\u1ee5c gia t\u0103ng khi t\u1ed9i ph\u1ea1m m\u1ea1ng ng\u00e0y c\u00e0ng tinh vi h\u01a1n. C\u00f4ng ngh\u1ec7 an ninh m\u1ea1ng trong t\u01b0\u01a1ng lai c\u00f3 th\u1ec3 s\u1ebd t\u1eadp trung v\u00e0o vi\u1ec7c c\u1ea3i thi\u1ec7n kh\u1ea3 n\u0103ng ph\u00e1t hi\u1ec7n s\u1edbm c\u00e1c m\u1ed1i \u0111e d\u1ecda n\u00e0y v\u00e0 tinh ch\u1ec9nh c\u00e1c k\u1ef9 thu\u1eadt \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh email l\u1eeba \u0111\u1ea3o v\u00e0 c\u00e1c vect\u01a1 t\u1ea5n c\u00f4ng kh\u00e1c.<\/p>\n<p>H\u1ecdc m\u00e1y v\u00e0 AI \u0111ang \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng ng\u00e0y c\u00e0ng nhi\u1ec1u trong an ninh m\u1ea1ng nh\u1edd kh\u1ea3 n\u0103ng x\u00e1c \u0111\u1ecbnh c\u00e1c m\u00f4 h\u00ecnh v\u00e0 \u0111i\u1ec3m b\u1ea5t th\u01b0\u1eddng c\u00f3 th\u1ec3 ch\u1ec9 ra m\u1ed1i \u0111e d\u1ecda. Nh\u1eefng c\u00f4ng ngh\u1ec7 n\u00e0y c\u00f3 th\u1ec3 t\u1ecf ra quan tr\u1ecdng trong vi\u1ec7c ch\u1ed1ng l\u1ea1i s\u1ef1 ph\u00e1t tri\u1ec3n c\u1ee7a c\u00e1c m\u1ed1i \u0111e d\u1ecda nh\u01b0 Dyreza trong t\u01b0\u01a1ng lai.<\/p>\n<h2>Hi\u1ec7p h\u1ed9i m\u00e1y ch\u1ee7 proxy v\u1edbi Dyreza<\/h2>\n<p>M\u00e1y ch\u1ee7 proxy th\u01b0\u1eddng \u0111\u01b0\u1ee3c ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i nh\u01b0 Dyreza s\u1eed d\u1ee5ng \u0111\u1ec3 \u1ea9n th\u00f4ng tin li\u00ean l\u1ea1c c\u1ee7a ch\u00fang v\u1edbi m\u00e1y ch\u1ee7 ra l\u1ec7nh v\u00e0 ki\u1ec3m so\u00e1t. B\u1eb1ng c\u00e1ch \u0111\u1ecbnh tuy\u1ebfn l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp qua nhi\u1ec1u proxy, t\u1ed9i ph\u1ea1m m\u1ea1ng c\u00f3 th\u1ec3 \u1ea9n v\u1ecb tr\u00ed c\u1ee7a ch\u00fang v\u00e0 khi\u1ebfn l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp c\u1ee7a ch\u00fang kh\u00f3 b\u1ecb theo d\u00f5i h\u01a1n.<\/p>\n<p>M\u1eb7t kh\u00e1c, m\u00e1y ch\u1ee7 proxy c\u0169ng c\u00f3 th\u1ec3 l\u00e0 m\u1ed9t ph\u1ea7n c\u1ee7a gi\u1ea3i ph\u00e1p. V\u00ed d\u1ee5: ch\u00fang c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c \u0111\u1ecbnh c\u1ea5u h\u00ecnh \u0111\u1ec3 ch\u1eb7n c\u00e1c \u0111\u1ecba ch\u1ec9 IP \u0111\u1ed9c h\u1ea1i \u0111\u00e3 bi\u1ebft ho\u1eb7c \u0111\u1ec3 ph\u00e1t hi\u1ec7n v\u00e0 ch\u1eb7n c\u00e1c m\u1eabu l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111\u00e1ng ng\u1edd, khi\u1ebfn ch\u00fang tr\u1edf th\u00e0nh m\u1ed9t ph\u1ea7n c\u00f3 gi\u00e1 tr\u1ecb trong chi\u1ebfn l\u01b0\u1ee3c an ninh m\u1ea1ng m\u1ea1nh m\u1ebd.<\/p>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 Dyreza v\u00e0 c\u00e1ch b\u1ea3o v\u1ec7 kh\u1ecfi n\u00f3, b\u1ea1n c\u00f3 th\u1ec3 truy c\u1eadp c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n<ul>\n<li><a href=\"https:\/\/cofense.com\/dyre-banking-trojan-not-zeus-or-really-close-relative\/\" target=\"_new\" rel=\"noopener nofollow\">Ph\u00e2n t\u00edch ban \u0111\u1ea7u c\u1ee7a PhishMe v\u1ec1 Dyreza<\/a><\/li>\n<li><a href=\"https:\/\/www.symantec.com\/security-center\/writeup\/2014-061923-2821-99\" target=\"_new\" rel=\"noopener nofollow\">B\u00e0i vi\u1ebft c\u1ee7a Symantec v\u1ec1 Dyreza<\/a><\/li>\n<li><a href=\"https:\/\/malware.dontneedcoffee.com\/2014\/06\/dyre-za.html\" target=\"_new\" rel=\"noopener nofollow\">Ph\u00e2n t\u00edch chi ti\u1ebft v\u1ec1 ch\u1ee9c n\u0103ng c\u1ee7a Dyreza<\/a><\/li>\n<li><a href=\"https:\/\/www.accenture.com\/us-en\/blogs\/cyber-defense\/banking-trojan-dyre-or-dyreza\" target=\"_new\" rel=\"noopener nofollow\">H\u01b0\u1edbng d\u1eabn b\u1ea3o v\u1ec7 ch\u1ed1ng l\u1ea1i Trojan ng\u00e2n h\u00e0ng<\/a><\/li>\n<\/ul>","protected":false},"featured_media":477030,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477029","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Dyreza: A Deep Dive into the Banking Trojan<\/mark>","faq_items":[{"question":"What is Dyreza?","answer":"<p>Dyreza, also known as Dyre, is a type of malware, specifically a banking Trojan, that targets online banking transactions to steal sensitive financial information. This Trojan is known for its ability to bypass SSL encryption.<\/p>"},{"question":"When was Dyreza first mentioned?","answer":"<p>Dyreza first came to light in 2014 when it was discovered by cybersecurity researchers at PhishMe. The Trojan was found in a sophisticated phishing campaign that tricked victims into downloading and running the malware.<\/p>"},{"question":"How does Dyreza work?","answer":"<p>Dyreza works by infiltrating a user's computer, typically through a phishing email. Once installed, it waits until the user navigates to a banking website and activates to start capturing sensitive data. It can also bypass SSL encryption, allowing it to read and manipulate encrypted web traffic.<\/p>"},{"question":"What are some key features of Dyreza?","answer":"<p>Key features of Dyreza include the ability to bypass SSL encryption, carry out man-in-the-browser attacks, use webinjects to alter the content of web pages, and employ a multi-vector approach for infiltration.<\/p>"},{"question":"Are there different types of Dyreza?","answer":"<p>There aren't different types of Dyreza per se, but different versions or campaigns have been observed, which differ in their attack vectors, targets, and specific techniques.<\/p>"},{"question":"How can one protect themselves from Dyreza?","answer":"<p>Protection against Dyreza involves robust cybersecurity practices such as maintaining up-to-date antivirus software, educating users about the dangers of phishing, and employing intrusion detection systems. If infection is suspected, it's crucial to disconnect the machine from the network and clean the system using a reliable antivirus tool.<\/p>"},{"question":"How does Dyreza compare to other similar malware like Zeus and Bebloh?","answer":"<p>Dyreza, Zeus, and Bebloh all use man-in-the-browser attacks and webinjects, and are primarily spread through phishing campaigns. However, Dyreza distinguishes itself with its ability to bypass SSL encryption, a feature not common among other banking Trojans.<\/p>"},{"question":"How are proxy servers associated with Dyreza?","answer":"<p>Proxy servers can be used by malware like Dyreza to hide their communication with command-and-control servers. However, they can also be part of the solution, as they can be configured to block known malicious IP addresses or to detect and block suspicious traffic patterns.<\/p>"},{"question":"What are some future perspectives and technologies related to Dyreza?","answer":"<p>The threat of banking Trojans like Dyreza continues to evolve as cybercriminals become more sophisticated. Future technologies in cybersecurity, like machine learning and AI, may prove crucial in combating threats like Dyreza by improving early detection and refining techniques for identifying phishing emails and other attack vectors.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477029\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media\/477030"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=477029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}