{"id":477861,"date":"2023-08-09T09:21:36","date_gmt":"2023-08-09T09:21:36","guid":{"rendered":""},"modified":"2023-09-05T11:15:35","modified_gmt":"2023-09-05T11:15:35","slug":"locky-ransomware","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/locky-ransomware\/","title":{"rendered":"Ph\u1ea7n m\u1ec1m t\u1ed1ng ti\u1ec1n b\u1ecb kh\u00f3a"},"content":{"rendered":"<p>Locky ransomware l\u00e0 m\u1ed9t ch\u01b0\u01a1ng tr\u00ecnh ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i n\u1ed5i ti\u1ebfng v\u00ec t\u00e1c \u0111\u1ed9ng t\u00e0n ph\u00e1 c\u1ee7a n\u00f3 \u0111\u1ed1i v\u1edbi c\u00e1c h\u1ec7 th\u1ed1ng v\u00e0 m\u1ea1ng m\u00e1y t\u00ednh tr\u00ean to\u00e0n th\u1ebf gi\u1edbi. Lo\u1ea1i ransomware n\u00e0y \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 m\u00e3 h\u00f3a c\u00e1c t\u1ec7p c\u1ee7a n\u1ea1n nh\u00e2n v\u00e0 y\u00eau c\u1ea7u thanh to\u00e1n ti\u1ec1n chu\u1ed9c, th\u01b0\u1eddng b\u1eb1ng ti\u1ec1n \u0111i\u1ec7n t\u1eed nh\u01b0 Bitcoin, \u0111\u1ec3 \u0111\u1ed5i l\u1ea5y kh\u00f3a gi\u1ea3i m\u00e3 \u0111\u1ec3 l\u1ea5y l\u1ea1i quy\u1ec1n truy c\u1eadp v\u00e0o d\u1eef li\u1ec7u. Xu\u1ea5t hi\u1ec7n l\u1ea7n \u0111\u1ea7u ti\u00ean v\u00e0o \u0111\u1ea7u n\u0103m 2016, Locky nhanh ch\u00f3ng tr\u1edf th\u00e0nh m\u1ed9t trong nh\u1eefng m\u1ed1i \u0111e d\u1ecda ransomware ph\u1ed5 bi\u1ebfn v\u00e0 nguy hi\u1ec3m nh\u1ea5t cho \u0111\u1ebfn nay.<\/p>\n<h2>L\u1ecbch s\u1eed ngu\u1ed3n g\u1ed1c c\u1ee7a ransomware Locky v\u00e0 nh\u1eefng l\u1ea7n \u0111\u1ea7u \u0111\u1ec1 c\u1eadp \u0111\u1ebfn n\u00f3<\/h2>\n<p>Locky \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n l\u1ea7n \u0111\u1ea7u ti\u00ean trong t\u1ef1 nhi\u00ean v\u00e0o th\u00e1ng 2 n\u0103m 2016. N\u00f3 l\u00e2y lan ch\u1ee7 y\u1ebfu th\u00f4ng qua c\u00e1c t\u1ec7p \u0111\u00ednh k\u00e8m email \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c ng\u1ee5y trang d\u01b0\u1edbi d\u1ea1ng t\u00e0i li\u1ec7u tr\u00f4ng v\u00f4 h\u1ea1i, ch\u1eb3ng h\u1ea1n nh\u01b0 t\u1ec7p Word ho\u1eb7c PDF. Khi ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng nghi ng\u1edd m\u1edf t\u1ec7p \u0111\u00ednh k\u00e8m, ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i s\u1ebd x\u00e2m nh\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng v\u00e0 b\u1eaft \u0111\u1ea7u m\u00e3 h\u00f3a c\u00e1c t\u1ec7p, khi\u1ebfn ch\u00fang kh\u00f4ng th\u1ec3 truy c\u1eadp \u0111\u01b0\u1ee3c. Sau \u0111\u00f3, n\u1ea1n nh\u00e2n \u0111\u01b0\u1ee3c \u0111\u01b0a cho c\u00e1c ghi ch\u00fa \u0111\u00f2i ti\u1ec1n chu\u1ed9c, trong \u0111\u00f3 c\u00f3 h\u01b0\u1edbng d\u1eabn v\u1ec1 c\u00e1ch tr\u1ea3 ti\u1ec1n chu\u1ed9c v\u00e0 l\u1ea5y l\u1ea1i quy\u1ec1n truy c\u1eadp v\u00e0o t\u1eadp tin c\u1ee7a h\u1ecd.<\/p>\n<h2>Th\u00f4ng tin chi ti\u1ebft v\u1ec1 Locky ransomware. M\u1edf r\u1ed9ng ch\u1ee7 \u0111\u1ec1 Locky ransomware<\/h2>\n<p>Locky l\u00e0 m\u1ed9t ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i ph\u1ee9c t\u1ea1p, t\u1eadn d\u1ee5ng c\u00e1c thu\u1eadt to\u00e1n m\u00e3 h\u00f3a m\u1ea1nh \u0111\u1ec3 kh\u00f3a n\u1ea1n nh\u00e2n kh\u1ecfi c\u00e1c t\u1eadp tin c\u1ee7a h\u1ecd m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3. Qu\u00e1 tr\u00ecnh m\u00e3 h\u00f3a m\u00e0 Locky s\u1eed d\u1ee5ng l\u00e0 kh\u00f4ng \u0111\u1ed1i x\u1ee9ng, trong \u0111\u00f3 m\u1ed9t kh\u00f3a chung duy nh\u1ea5t \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 m\u00e3 h\u00f3a c\u00e1c t\u1ec7p v\u00e0 ch\u1ec9 kh\u00f3a ri\u00eang t\u01b0\u01a1ng \u1ee9ng do k\u1ebb t\u1ea5n c\u00f4ng n\u1eafm gi\u1eef m\u1edbi c\u00f3 th\u1ec3 gi\u1ea3i m\u00e3 ch\u00fang. \u0110i\u1ec1u n\u00e0y khi\u1ebfn n\u1ea1n nh\u00e2n g\u1ea7n nh\u01b0 kh\u00f4ng th\u1ec3 kh\u00f4i ph\u1ee5c d\u1eef li\u1ec7u n\u1ebfu kh\u00f4ng c\u00f3 kh\u00f3a gi\u1ea3i m\u00e3.<\/p>\n<p>Y\u00eau c\u1ea7u ti\u1ec1n chu\u1ed9c c\u1ee7a Locky thay \u0111\u1ed5i theo th\u1eddi gian, v\u1edbi s\u1ed1 ti\u1ec1n t\u1eeb h\u00e0ng tr\u0103m \u0111\u1ebfn h\u00e0ng ngh\u00ecn \u0111\u00f4 la. Ngo\u00e0i ra, th\u00f4ng b\u00e1o \u0111\u00f2i ti\u1ec1n chu\u1ed9c th\u01b0\u1eddng bao g\u1ed3m th\u1eddi h\u1ea1n \u0111\u1ec3 g\u00e2y \u00e1p l\u1ef1c bu\u1ed9c n\u1ea1n nh\u00e2n ph\u1ea3i nhanh ch\u00f3ng tr\u1ea3 ti\u1ec1n, \u0111e d\u1ecda t\u0103ng s\u1ed1 ti\u1ec1n chu\u1ed9c ho\u1eb7c x\u00f3a v\u0129nh vi\u1ec5n kh\u00f3a gi\u1ea3i m\u00e3 n\u1ebfu kh\u00f4ng k\u1ecbp th\u1eddi h\u1ea1n.<\/p>\n<h2>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a ransomware Locky. C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a ransomware Locky<\/h2>\n<p>Locky ransomware ho\u1ea1t \u0111\u1ed9ng theo nhi\u1ec1u giai \u0111o\u1ea1n. Khi m\u1edf t\u1ec7p \u0111\u00ednh k\u00e8m b\u1ecb nhi\u1ec5m, n\u00f3 s\u1ebd tri\u1ec3n khai macro ho\u1eb7c t\u1eadp l\u1ec7nh \u0111\u1ec3 t\u1ea3i xu\u1ed1ng t\u1ea3i tr\u1ecdng Locky t\u1eeb m\u00e1y ch\u1ee7 t\u1eeb xa. Sau khi t\u1ea3i xu\u1ed1ng v\u00e0 th\u1ef1c thi t\u1ea3i tr\u1ecdng, Locky b\u1eaft \u0111\u1ea7u m\u00e3 h\u00f3a c\u00e1c t\u1ec7p tr\u00ean h\u1ec7 th\u1ed1ng c\u1ee5c b\u1ed9 v\u00e0 chia s\u1ebb m\u1ea1ng b\u1eb1ng thu\u1eadt to\u00e1n m\u00e3 h\u00f3a RSA-2048 v\u00e0 AES. C\u00e1c t\u1ec7p \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a s\u1ebd nh\u1eadn \u0111\u01b0\u1ee3c c\u00e1c ph\u1ea7n m\u1edf r\u1ed9ng nh\u01b0 \u201c.locky,\u201d \u201c.zepto\u201d ho\u1eb7c \u201c.odin.\u201d<\/p>\n<p>Trong qu\u00e1 tr\u00ecnh m\u00e3 h\u00f3a, Locky t\u1ea1o c\u00e1c m\u00e3 \u0111\u1ecbnh danh duy nh\u1ea5t cho m\u1ed7i m\u00e1y b\u1ecb nhi\u1ec5m, g\u00e2y kh\u00f3 kh\u0103n cho vi\u1ec7c theo d\u00f5i v\u00e0 theo d\u00f5i s\u1ef1 l\u00e2y lan c\u1ee7a ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i. Sau khi qu\u00e1 tr\u00ecnh m\u00e3 h\u00f3a ho\u00e0n t\u1ea5t, th\u00f4ng b\u00e1o \u0111\u00f2i ti\u1ec1n chu\u1ed9c s\u1ebd \u0111\u01b0\u1ee3c t\u1ea1o v\u00e0 l\u01b0u tr\u00ean h\u1ec7 th\u1ed1ng, h\u01b0\u1edbng d\u1eabn n\u1ea1n nh\u00e2n c\u00e1ch tr\u1ea3 ti\u1ec1n chu\u1ed9c.<\/p>\n<h2>Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a Locky ransomware<\/h2>\n<p>Locky n\u1ed5i b\u1eadt nh\u1edd m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng ch\u00ednh \u0111\u00e3 g\u00f3p ph\u1ea7n t\u1ea1o n\u00ean t\u00e1c \u0111\u1ed9ng r\u1ed9ng r\u00e3i c\u1ee7a n\u00f3:<\/p>\n<ol>\n<li>\n<p><strong>Giao h\u00e0ng d\u1ef1a tr\u00ean email<\/strong>: Locky ch\u1ee7 y\u1ebfu l\u00e2y lan qua c\u00e1c email spam \u0111\u1ed9c h\u1ea1i c\u00f3 ch\u1ee9a c\u00e1c t\u1ec7p \u0111\u00ednh k\u00e8m ho\u1eb7c li\u00ean k\u1ebft b\u1ecb nhi\u1ec5m \u0111\u1ec3 t\u1ea3i xu\u1ed1ng ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i.<\/p>\n<\/li>\n<li>\n<p><strong>M\u00e3 h\u00f3a m\u1ea1nh<\/strong>: Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i s\u1eed d\u1ee5ng c\u00e1c thu\u1eadt to\u00e1n m\u00e3 h\u00f3a m\u1ea1nh m\u1ebd nh\u01b0 RSA-2048 v\u00e0 AES, khi\u1ebfn vi\u1ec7c gi\u1ea3i m\u00e3 c\u00e1c t\u1ec7p m\u00e0 kh\u00f4ng c\u00f3 kh\u00f3a ti\u1ec1n chu\u1ed9c tr\u1edf n\u00ean kh\u00f3 kh\u0103n.<\/p>\n<\/li>\n<li>\n<p><strong>S\u1ef1 ti\u1ebfn h\u00f3a v\u00e0 c\u00e1c bi\u1ebfn th\u1ec3<\/strong>: Locky \u0111\u00e3 ch\u1ee9ng ki\u1ebfn nhi\u1ec1u l\u1ea7n l\u1eb7p l\u1ea1i v\u00e0 bi\u1ebfn th\u1ec3, th\u00edch \u1ee9ng v\u1edbi c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt v\u00e0 ph\u00e1t tri\u1ec3n \u0111\u1ec3 tr\u00e1nh b\u1ecb ph\u00e1t hi\u1ec7n.<\/p>\n<\/li>\n<li>\n<p><strong>Thanh to\u00e1n ti\u1ec1n chu\u1ed9c b\u1eb1ng ti\u1ec1n \u0111i\u1ec7n t\u1eed<\/strong>: \u0110\u1ec3 duy tr\u00ec t\u00ednh \u1ea9n danh, nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng y\u00eau c\u1ea7u thanh to\u00e1n ti\u1ec1n chu\u1ed9c b\u1eb1ng ti\u1ec1n \u0111i\u1ec7n t\u1eed nh\u01b0 Bitcoin, khi\u1ebfn vi\u1ec7c theo d\u00f5i d\u00f2ng ti\u1ec1n tr\u1edf n\u00ean kh\u00f3 kh\u0103n h\u01a1n.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c lo\u1ea1i ransomware Locky<\/h2>\n<p>Locky \u0111\u00e3 c\u00f3 m\u1ed9t s\u1ed1 bi\u1ebfn th\u1ec3 trong su\u1ed1t th\u1eddi gian t\u1ed3n t\u1ea1i c\u1ee7a n\u00f3. D\u01b0\u1edbi \u0111\u00e2y l\u00e0 danh s\u00e1ch m\u1ed9t s\u1ed1 bi\u1ebfn th\u1ec3 Locky \u0111\u00e1ng ch\u00fa \u00fd c\u00f9ng v\u1edbi c\u00e1c t\u00ednh n\u0103ng ph\u00e2n bi\u1ec7t c\u1ee7a ch\u00fang:<\/p>\n<table>\n<thead>\n<tr>\n<th>T\u00ean bi\u1ebfn th\u1ec3<\/th>\n<th>S\u1ef1 m\u1edf r\u1ed9ng<\/th>\n<th>C\u00e1c t\u00ednh n\u0103ng ch\u00ednh<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>kh\u00f3a<\/td>\n<td>.locky<\/td>\n<td>Bi\u1ebfn th\u1ec3 ban \u0111\u1ea7u \u0111\u00e3 b\u1eaft \u0111\u1ea7u l\u00e0n s\u00f3ng ransomware<\/td>\n<\/tr>\n<tr>\n<td>Zepto<\/td>\n<td>.zepto<\/td>\n<td>Phi\u00ean b\u1ea3n c\u1ea3i ti\u1ebfn v\u1edbi nh\u1eefng thay \u0111\u1ed5i nh\u1ecf<\/td>\n<\/tr>\n<tr>\n<td>Odin<\/td>\n<td>.odin<\/td>\n<td>T\u1eadp trung v\u00e0o vi\u1ec7c nh\u1eafm m\u1ee5c ti\u00eau v\u00e0 m\u00e3 h\u00f3a chia s\u1ebb m\u1ea1ng<\/td>\n<\/tr>\n<tr>\n<td>Th\u1ea7n s\u1ea5m<\/td>\n<td>.Th\u1ea7n s\u1ea5m<\/td>\n<td>\u0110\u00e3 s\u1eed d\u1ee5ng m\u1ed9t \u0111\u1ecbnh d\u1ea1ng ghi ch\u00fa ti\u1ec1n chu\u1ed9c kh\u00e1c<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng Locky ransomware, c\u00e1c v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p li\u00ean quan \u0111\u1ebfn vi\u1ec7c s\u1eed d\u1ee5ng<\/h2>\n<p>V\u1edbi t\u01b0 c\u00e1ch l\u00e0 m\u1ed9t c\u00e1 nh\u00e2n ho\u1eb7c t\u1ed5 ch\u1ee9c, vi\u1ec7c s\u1eed d\u1ee5ng ransomware Locky cho b\u1ea5t k\u1ef3 m\u1ee5c \u0111\u00edch n\u00e0o l\u00e0 c\u1ef1c k\u1ef3 b\u1ea5t h\u1ee3p ph\u00e1p v\u00e0 phi \u0111\u1ea1o \u0111\u1ee9c. Tham gia v\u00e0o c\u00e1c ho\u1ea1t \u0111\u1ed9ng ransomware c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn h\u1eadu qu\u1ea3 ph\u00e1p l\u00fd nghi\u00eam tr\u1ecdng, t\u1ed5n th\u1ea5t t\u00e0i ch\u00ednh \u0111\u00e1ng k\u1ec3 v\u00e0 t\u1ed5n h\u1ea1i \u0111\u1ebfn danh ti\u1ebfng c\u1ee7a m\u1ed9t ng\u01b0\u1eddi ho\u1eb7c c\u00f4ng ty.<\/p>\n<p>C\u00e1ch hi\u1ec7u qu\u1ea3 nh\u1ea5t \u0111\u1ec3 b\u1ea3o v\u1ec7 kh\u1ecfi ph\u1ea7n m\u1ec1m t\u1ed1ng ti\u1ec1n Locky v\u00e0 c\u00e1c m\u1ed1i \u0111e d\u1ecda t\u01b0\u01a1ng t\u1ef1 kh\u00e1c l\u00e0 tri\u1ec3n khai c\u00e1c bi\u1ec7n ph\u00e1p an ninh m\u1ea1ng m\u1ea1nh m\u1ebd. Nh\u1eefng bi\u1ec7n ph\u00e1p n\u00e0y bao g\u1ed3m:<\/p>\n<ol>\n<li>\n<p><strong>Sao l\u01b0u th\u01b0\u1eddng xuy\u00ean<\/strong>: Duy tr\u00ec sao l\u01b0u th\u01b0\u1eddng xuy\u00ean c\u00e1c d\u1eef li\u1ec7u quan tr\u1ecdng v\u00e0 l\u01b0u tr\u1eef ngo\u1ea1i tuy\u1ebfn \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o ph\u1ee5c h\u1ed3i d\u1eef li\u1ec7u trong tr\u01b0\u1eddng h\u1ee3p b\u1ecb t\u1ea5n c\u00f4ng.<\/p>\n<\/li>\n<li>\n<p><strong>B\u1ea3o m\u1eadt email<\/strong>: Tri\u1ec3n khai t\u00ednh n\u0103ng l\u1ecdc email n\u00e2ng cao v\u00e0 \u0111\u00e0o t\u1ea1o ng\u01b0\u1eddi d\u00f9ng c\u00e1ch nh\u1eadn bi\u1ebft c\u0169ng nh\u01b0 tr\u00e1nh c\u00e1c t\u1ec7p \u0111\u00ednh k\u00e8m ho\u1eb7c li\u00ean k\u1ebft email \u0111\u00e1ng ng\u1edd.<\/p>\n<\/li>\n<li>\n<p><strong>B\u1ea3o v\u1ec7 ch\u1ed1ng vi-r\u00fat v\u00e0 \u0111i\u1ec3m cu\u1ed1i<\/strong>: Tri\u1ec3n khai ph\u1ea7n m\u1ec1m ch\u1ed1ng vi-r\u00fat \u0111\u00e1ng tin c\u1eady v\u00e0 c\u00e1c c\u00f4ng c\u1ee5 b\u1ea3o v\u1ec7 \u0111i\u1ec3m cu\u1ed1i \u0111\u1ec3 ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ng\u1eeba l\u00e2y nhi\u1ec5m ransomware.<\/p>\n<\/li>\n<li>\n<p><strong>N\u00e2ng c\u1ea5p ph\u1ea7n m\u1ec1m<\/strong>: Lu\u00f4n c\u1eadp nh\u1eadt t\u1ea5t c\u1ea3 ph\u1ea7n m\u1ec1m v\u00e0 h\u1ec7 \u0111i\u1ec1u h\u00e0nh \u0111\u1ec3 v\u00e1 c\u00e1c l\u1ed7 h\u1ed5ng m\u00e0 ransomware c\u00f3 th\u1ec3 khai th\u00e1c.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1c \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh kh\u00e1c v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1 d\u01b0\u1edbi d\u1ea1ng b\u1ea3ng v\u00e0 danh s\u00e1ch<\/h2>\n<p>D\u01b0\u1edbi \u0111\u00e2y l\u00e0 b\u1ea3ng so s\u00e1nh n\u00eau b\u1eadt nh\u1eefng \u0111i\u1ec3m kh\u00e1c bi\u1ec7t ch\u00ednh gi\u1eefa ph\u1ea7n m\u1ec1m t\u1ed1ng ti\u1ec1n Locky v\u00e0 c\u00e1c ch\u1ee7ng ph\u1ea7n m\u1ec1m t\u1ed1ng ti\u1ec1n n\u1ed5i ti\u1ebfng kh\u00e1c:<\/p>\n<table>\n<thead>\n<tr>\n<th>Ph\u1ea7n m\u1ec1m t\u1ed1ng ti\u1ec1n<\/th>\n<th>Ph\u00e2n b\u1ed5<\/th>\n<th>Thu\u1eadt to\u00e1n m\u00e3 h\u00f3a<\/th>\n<th>T\u00ednh n\u0103ng n\u1ed5i b\u1eadt<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>kh\u00f3a<\/td>\n<td>T\u1ec7p \u0111\u00ednh k\u00e8m email<\/td>\n<td>RSA-2048, AES<\/td>\n<td>Ph\u00e2n ph\u1ed1i h\u00e0ng lo\u1ea1t qua email spam<\/td>\n<\/tr>\n<tr>\n<td>Mu\u1ed1n kh\u00f3c<\/td>\n<td>Khai th\u00e1c<\/td>\n<td>RSA-2048, AES<\/td>\n<td>H\u00e0nh vi gi\u1ed1ng nh\u01b0 s\u00e2u, ch\u0103m s\u00f3c s\u1ee9c kh\u1ecfe c\u00f3 m\u1ee5c ti\u00eau<\/td>\n<\/tr>\n<tr>\n<td>CryptoLocker<\/td>\n<td>T\u1ea3i xu\u1ed1ng theo t\u1eebng \u1ed5 \u0111\u0129a<\/td>\n<td>RSA-2048, AES<\/td>\n<td>Ph\u1ea7n m\u1ec1m ransomware ph\u1ed5 bi\u1ebfn r\u1ed9ng r\u00e3i \u0111\u1ea7u ti\u00ean v\u00e0o n\u0103m 2013<\/td>\n<\/tr>\n<tr>\n<td>Petya\/NotPetya<\/td>\n<td>Email, khai th\u00e1c<\/td>\n<td>M\u00e3 h\u00f3a MBR<\/td>\n<td>Cu\u1ed9c t\u1ea5n c\u00f4ng d\u1ef1a tr\u00ean MBR, nh\u1eb1m v\u00e0o Ukraine n\u0103m 2017<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Vi\u1ec5n c\u1ea3nh v\u00e0 c\u00f4ng ngh\u1ec7 t\u01b0\u01a1ng lai li\u00ean quan \u0111\u1ebfn Locky ransomware<\/h2>\n<p>Khi c\u00f4ng ngh\u1ec7 ph\u00e1t tri\u1ec3n, chi\u1ebfn thu\u1eadt c\u1ee7a t\u1ed9i ph\u1ea1m m\u1ea1ng c\u0169ng ph\u00e1t tri\u1ec3n theo. Ransomware nh\u01b0 Locky c\u00f3 kh\u1ea3 n\u0103ng s\u1ebd ti\u1ebfp t\u1ee5c th\u00edch nghi v\u00e0 t\u00ecm ra c\u00e1c ph\u01b0\u01a1ng th\u1ee9c l\u00e2y nhi\u1ec5m m\u1edbi. M\u1ed9t s\u1ed1 xu h\u01b0\u1edbng trong t\u01b0\u01a1ng lai li\u00ean quan \u0111\u1ebfn ransomware c\u00f3 th\u1ec3 bao g\u1ed3m:<\/p>\n<ol>\n<li>\n<p><strong>Ph\u1ea7n m\u1ec1m t\u1ed1ng ti\u1ec1n t\u0103ng c\u01b0\u1eddng AI<\/strong>: T\u1ed9i ph\u1ea1m m\u1ea1ng c\u00f3 th\u1ec3 t\u1eadn d\u1ee5ng AI v\u00e0 h\u1ecdc m\u00e1y \u0111\u1ec3 khi\u1ebfn c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng b\u1eb1ng ransomware tr\u1edf n\u00ean tinh vi h\u01a1n v\u00e0 kh\u00f3 ph\u00e1t hi\u1ec7n h\u01a1n.<\/p>\n<\/li>\n<li>\n<p><strong>T\u1ea5n c\u00f4ng c\u00f3 m\u1ee5c ti\u00eau<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng ransomware c\u00f3 th\u1ec3 t\u1eadp trung v\u00e0o c\u00e1c ng\u00e0nh ho\u1eb7c t\u1ed5 ch\u1ee9c c\u1ee5 th\u1ec3 \u0111\u1ec3 y\u00eau c\u1ea7u s\u1ed1 ti\u1ec1n chu\u1ed9c l\u1edbn h\u01a1n d\u1ef1a tr\u00ean kh\u1ea3 n\u0103ng chi tr\u1ea3 c\u1ee7a n\u1ea1n nh\u00e2n.<\/p>\n<\/li>\n<li>\n<p><strong>Khai th\u00e1c zero-day<\/strong>: Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 khai th\u00e1c c\u00e1c l\u1ed7 h\u1ed5ng ch\u01b0a \u0111\u01b0\u1ee3c bi\u1ebft tr\u01b0\u1edbc \u0111\u00e2y \u0111\u1ec3 ph\u00e1t t\u00e1n ransomware v\u00e0 tr\u1ed1n tr\u00e1nh c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt truy\u1ec1n th\u1ed1ng.<\/p>\n<\/li>\n<\/ol>\n<h2>C\u00e1ch m\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng ho\u1eb7c li\u00ean k\u1ebft v\u1edbi Locky ransomware<\/h2>\n<p>M\u00e1y ch\u1ee7 proxy c\u00f3 th\u1ec3 v\u1eeba l\u00e0 c\u00f4ng c\u1ee5 ph\u00e2n ph\u1ed1i ransomware v\u1eeba l\u00e0 bi\u1ec7n ph\u00e1p b\u1ea3o v\u1ec7 ch\u1ed1ng l\u1ea1i n\u00f3. T\u1ed9i ph\u1ea1m m\u1ea1ng c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng m\u00e1y ch\u1ee7 proxy \u0111\u1ec3 \u1ea9n danh t\u00ednh c\u1ee7a ch\u00fang khi g\u1eedi Locky th\u00f4ng qua email spam ho\u1eb7c t\u1ea3i xu\u1ed1ng theo t\u1eebng \u1ed5 \u0111\u0129a. M\u1eb7t kh\u00e1c, m\u00e1y ch\u1ee7 proxy \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng nh\u01b0 m\u1ed9t ph\u1ea7n c\u1ee7a c\u01a1 s\u1edf h\u1ea1 t\u1ea7ng b\u1ea3o m\u1eadt c\u1ee7a t\u1ed5 ch\u1ee9c c\u00f3 th\u1ec3 t\u0103ng c\u01b0\u1eddng kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 ch\u1ed1ng l\u1ea1i ph\u1ea7n m\u1ec1m t\u1ed1ng ti\u1ec1n b\u1eb1ng c\u00e1ch l\u1ecdc l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp \u0111\u1ed9c h\u1ea1i v\u00e0 ph\u00e1t hi\u1ec7n c\u00e1c m\u1eabu \u0111\u00e1ng ng\u1edd.<\/p>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 Locky ransomware v\u00e0 ph\u00f2ng ch\u1ed1ng ransomware, vui l\u00f2ng tham kh\u1ea3o c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n<ol>\n<li><a href=\"https:\/\/www.us-cert.gov\/Ransomware\" target=\"_new\" rel=\"noopener nofollow\">Ph\u00f2ng ch\u1ed1ng v\u00e0 \u1ee9ng ph\u00f3 ph\u1ea7n m\u1ec1m t\u1ed1ng ti\u1ec1n US-CERT<\/a><\/li>\n<li><a href=\"https:\/\/www.kaspersky.com\/ransomware\" target=\"_new\" rel=\"noopener nofollow\">Trung t\u00e2m t\u00e0i nguy\u00ean ransomware Kaspersky Lab<\/a><\/li>\n<li><a href=\"https:\/\/www.symantec.com\/security-center\/writeup\/2016-021714-3522-99\" target=\"_new\" rel=\"noopener nofollow\">M\u00f4 t\u1ea3 v\u1ec1 ph\u1ea7n m\u1ec1m t\u1ed1ng ti\u1ec1n Symantec Locky<\/a><\/li>\n<\/ol>\n<p>H\u00e3y nh\u1edb r\u1eb1ng, vi\u1ec7c c\u1eadp nh\u1eadt th\u00f4ng tin v\u00e0 tri\u1ec3n khai c\u00e1c bi\u1ec7n ph\u00e1p an ninh m\u1ea1ng m\u1ea1nh m\u1ebd l\u00e0 \u0111i\u1ec1u c\u1ea7n thi\u1ebft \u0111\u1ec3 b\u1ea3o v\u1ec7 kh\u1ecfi c\u00e1c m\u1ed1i \u0111e d\u1ecda ng\u00e0y c\u00e0ng gia t\u0103ng nh\u01b0 ph\u1ea7n m\u1ec1m t\u1ed1ng ti\u1ec1n Locky.<\/p>","protected":false},"featured_media":477862,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477861","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Locky Ransomware: A Comprehensive Overview<\/mark>","faq_items":[{"question":"What is Locky ransomware?","answer":"<p>Locky ransomware is a malicious software program designed to encrypt files on a victim's computer and demand a ransom payment, typically in cryptocurrencies, in exchange for the decryption key to regain access to the data.<\/p>"},{"question":"When did Locky ransomware first appear?","answer":"<p>Locky ransomware was first observed in February 2016, when it started spreading through malicious spam emails containing infected attachments.<\/p>"},{"question":"How does Locky ransomware work?","answer":"<p>Locky ransomware operates in several stages. When a user opens a malicious email attachment, the malware is activated and encrypts files on the local system and network shares using strong encryption algorithms like RSA-2048 and AES. After encryption, victims are presented with ransom notes containing instructions on how to pay the ransom.<\/p>"},{"question":"What are the key features of Locky ransomware?","answer":"<p>Locky ransomware is known for its email-based delivery, strong encryption, and evolution through various variants. It demands ransom payments in cryptocurrencies to preserve anonymity and often includes a deadline to pressure victims into paying quickly.<\/p>"},{"question":"What types of Locky ransomware exist?","answer":"<p>Several notable Locky variants include Locky, Zepto, Odin, and Thor. Each variant has unique characteristics and methods of distribution.<\/p>"},{"question":"Can Locky ransomware be used for legitimate purposes?","answer":"<p>No, using Locky ransomware or any ransomware for any purpose, including legitimate ones, is illegal and unethical. Engaging in ransomware activities can lead to severe legal consequences and significant financial losses.<\/p>"},{"question":"How can I protect my system from Locky ransomware?","answer":"<p>To protect against Locky ransomware and similar threats, implement robust cybersecurity measures such as regular backups, email security, antivirus software, and keeping software updated.<\/p>"},{"question":"What are the future trends related to Locky ransomware?","answer":"<p>Future trends related to ransomware may include AI-enhanced attacks, targeted attacks on specific industries, and the exploitation of zero-day vulnerabilities.<\/p>"},{"question":"How can proxy servers be associated with Locky ransomware?","answer":"<p>Proxy servers can be used by cybercriminals to hide their identities when distributing Locky through spam emails or drive-by downloads. However, organizations can use proxy servers as part of their security infrastructure to enhance protection against ransomware by filtering out malicious traffic.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477861","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/477861\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media\/477862"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=477861"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}