{"id":479020,"date":"2023-08-09T10:01:33","date_gmt":"2023-08-09T10:01:33","guid":{"rendered":""},"modified":"2023-09-05T11:18:01","modified_gmt":"2023-09-05T11:18:01","slug":"skimming-attack","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/vn\/wiki\/skimming-attack\/","title":{"rendered":"T\u1ea5n c\u00f4ng l\u01b0\u1edbt qua"},"content":{"rendered":"<p>T\u1ea5n c\u00f4ng l\u01b0\u1edbt th\u1ebb, c\u00f2n \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 l\u01b0\u1edbt th\u1ebb, l\u00e0 m\u1ed9t h\u00ecnh th\u1ee9c t\u1ed9i ph\u1ea1m m\u1ea1ng tinh vi v\u00e0 l\u00e9n l\u00fat li\u00ean quan \u0111\u1ebfn vi\u1ec7c thu th\u1eadp tr\u00e1i ph\u00e9p th\u00f4ng tin th\u1ebb thanh to\u00e1n t\u1eeb nh\u1eefng n\u1ea1n nh\u00e2n kh\u00f4ng nghi ng\u1edd. \u0110\u00e2y l\u00e0 m\u1ed1i \u0111e d\u1ecda ph\u1ed5 bi\u1ebfn trong th\u1eddi \u0111\u1ea1i k\u1ef9 thu\u1eadt s\u1ed1 ng\u00e0y nay, nh\u1eafm v\u00e0o c\u1ea3 h\u1ec7 th\u1ed1ng \u0111i\u1ec3m b\u00e1n h\u00e0ng (POS) v\u1eadt l\u00fd v\u00e0 giao d\u1ecbch tr\u1ef1c tuy\u1ebfn. Th\u1ee7 ph\u1ea1m s\u1eed d\u1ee5ng nhi\u1ec1u k\u1ef9 thu\u1eadt kh\u00e1c nhau \u0111\u1ec3 thu th\u1eadp d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m c\u1ee7a th\u1ebb, bao g\u1ed3m s\u1ed1 th\u1ebb t\u00edn d\u1ee5ng v\u00e0 th\u1ebb ghi n\u1ee3, ng\u00e0y h\u1ebft h\u1ea1n v\u00e0 t\u00ean ch\u1ee7 th\u1ebb, sau n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng cho c\u00e1c ho\u1ea1t \u0111\u1ed9ng gian l\u1eadn nh\u01b0 mua h\u00e0ng tr\u00e1i ph\u00e9p ho\u1eb7c \u0111\u00e1nh c\u1eafp danh t\u00ednh.<\/p>\n<h2>L\u1ecbch s\u1eed ngu\u1ed3n g\u1ed1c c\u1ee7a cu\u1ed9c t\u1ea5n c\u00f4ng Skimming v\u00e0 l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u1ec1 c\u1eadp \u0111\u1ebfn n\u00f3<\/h2>\n<p>Ngu\u1ed3n g\u1ed1c c\u1ee7a c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua c\u00f3 th\u1ec3 b\u1eaft ngu\u1ed3n t\u1eeb cu\u1ed1i nh\u1eefng n\u0103m 1970 khi b\u1ecdn t\u1ed9i ph\u1ea1m b\u1eaft \u0111\u1ea7u gi\u1ea3 m\u1ea1o m\u00e1y ATM \u0111\u1ec3 l\u1ea5y th\u00f4ng tin th\u1ebb. Qua nhi\u1ec1u n\u0103m, k\u1ef9 thu\u1eadt n\u00e0y ng\u00e0y c\u00e0ng ph\u00e1t tri\u1ec3n, ng\u00e0y c\u00e0ng tinh vi h\u01a1n v\u1edbi nh\u1eefng ti\u1ebfn b\u1ed9 v\u1ec1 c\u00f4ng ngh\u1ec7. C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u01b0\u1ee3c \u0111\u1ec1 c\u1eadp \u0111\u1ebfn t\u1eeb nh\u1eefng n\u0103m 1980, ch\u1ee7 y\u1ebfu li\u00ean quan \u0111\u1ebfn \u0111\u1ea7u \u0111\u1ecdc th\u1ebb v\u1eadt l\u00fd \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t tr\u00ean m\u00e1y ATM v\u00e0 m\u00e1y b\u01a1m x\u0103ng.<\/p>\n<h2>Th\u00f4ng tin chi ti\u1ebft v\u1ec1 Skimming attack: M\u1edf r\u1ed9ng ch\u1ee7 \u0111\u1ec1<\/h2>\n<p>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua \u0111\u00e3 ph\u00e1t tri\u1ec3n v\u1ec1 quy m\u00f4 v\u00e0 \u0111\u1ed9 ph\u1ee9c t\u1ea1p c\u00f9ng v\u1edbi s\u1ef1 ph\u00e1t tri\u1ec3n c\u1ee7a th\u01b0\u01a1ng m\u1ea1i \u0111i\u1ec7n t\u1eed v\u00e0 thanh to\u00e1n k\u1ef9 thu\u1eadt s\u1ed1. Ng\u00e0y nay, vi\u1ec7c \u0111\u1ecdc l\u01b0\u1edbt kh\u00f4ng ch\u1ec9 gi\u1edbi h\u1ea1n \u1edf c\u00e1c thi\u1ebft b\u1ecb v\u1eadt l\u00fd m\u00e0 c\u00f2n bao g\u1ed3m c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c c\u1ed5ng v\u00e0 trang web thanh to\u00e1n tr\u1ef1c tuy\u1ebfn. \u0110\u00e2y l\u00e0 c\u00e1ch m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua \u0111i\u1ec3n h\u00ecnh ho\u1ea1t \u0111\u1ed9ng:<\/p>\n<ol>\n<li>\n<p><strong>\u0110\u1ecdc l\u01b0\u1edbt v\u1eadt l\u00fd:<\/strong><\/p>\n<ul>\n<li>T\u1ed9i ph\u1ea1m c\u00e0i \u0111\u1eb7t thi\u1ebft b\u1ecb \u0111\u1ecdc l\u01b0\u1edbt tr\u00ean thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i POS, m\u00e1y b\u01a1m x\u0103ng ho\u1eb7c m\u00e1y ATM th\u1ef1c t\u1ebf.<\/li>\n<li>Nh\u1eefng thi\u1ebft b\u1ecb n\u00e0y, \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 skimmer, \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 b\u00ed m\u1eadt ghi l\u1ea1i th\u00f4ng tin th\u1ebb khi kh\u00e1ch h\u00e0ng qu\u1eb9t ho\u1eb7c \u0111\u01b0a th\u1ebb v\u00e0o \u0111\u1ec3 thanh to\u00e1n.<\/li>\n<li>Skimmer c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c \u0111\u1eb7t tr\u00ean c\u00e1c \u0111\u1ea7u \u0111\u1ecdc th\u1ebb h\u1ee3p ph\u00e1p, thu th\u1eadp d\u1eef li\u1ec7u th\u1ebb m\u00e0 ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng h\u1ec1 bi\u1ebft.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>\u0110\u1ecdc l\u01b0\u1edbt \u1ea3o:<\/strong><\/p>\n<ul>\n<li>L\u01b0\u1edbt \u1ea3o, c\u00f2n \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 t\u1ea5n c\u00f4ng Magecart, nh\u1eafm v\u00e0o c\u00e1c trang web th\u01b0\u01a1ng m\u1ea1i \u0111i\u1ec7n t\u1eed v\u00e0 c\u1ed5ng thanh to\u00e1n tr\u1ef1c tuy\u1ebfn.<\/li>\n<li>T\u1ed9i ph\u1ea1m m\u1ea1ng ti\u00eam m\u00e3 \u0111\u1ed9c v\u00e0o trang thanh to\u00e1n c\u1ee7a trang web ho\u1eb7c c\u00e1c t\u1eadp l\u1ec7nh c\u1ee7a b\u00ean th\u1ee9 ba \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng tr\u00ean trang web.<\/li>\n<li>Khi kh\u00e1ch h\u00e0ng th\u1ef1c hi\u1ec7n giao d\u1ecbch, m\u00e3 \u0111\u01b0\u1ee3c ti\u00eam s\u1ebd n\u1eafm b\u1eaft th\u00f4ng tin thanh to\u00e1n c\u1ee7a h\u1ecd v\u00e0 g\u1eedi cho k\u1ebb t\u1ea5n c\u00f4ng.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>\u0110\u1ecdc l\u01b0\u1edbt tr\u00ean thi\u1ebft b\u1ecb di \u0111\u1ed9ng:<\/strong><\/p>\n<ul>\n<li>V\u1edbi s\u1ef1 ph\u1ed5 bi\u1ebfn ng\u00e0y c\u00e0ng t\u0103ng c\u1ee7a thanh to\u00e1n di \u0111\u1ed9ng, b\u1ecdn t\u1ed9i ph\u1ea1m \u0111\u00e3 \u0111i\u1ec1u ch\u1ec9nh c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua thi\u1ebft b\u1ecb di \u0111\u1ed9ng.<\/li>\n<li>C\u00e1c \u1ee9ng d\u1ee5ng di \u0111\u1ed9ng \u0111\u1ed9c h\u1ea1i ho\u1eb7c c\u00e1c trang x\u1eed l\u00fd thanh to\u00e1n gi\u1ea3 m\u1ea1o \u0111\u01b0\u1ee3c t\u1ea1o ra \u0111\u1ec3 l\u1eeba ng\u01b0\u1eddi d\u00f9ng nh\u1eadp th\u00f4ng tin th\u1ebb c\u1ee7a h\u1ecd, sau \u0111\u00f3 nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng s\u1ebd \u0111\u00e1nh c\u1eafp th\u00f4ng tin n\u00e0y.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h2>C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a cu\u1ed9c t\u1ea5n c\u00f4ng Skimming: C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a cu\u1ed9c t\u1ea5n c\u00f4ng Skimming<\/h2>\n<p>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua li\u00ean quan \u0111\u1ebfn c\u1ea3 chuy\u00ean m\u00f4n k\u1ef9 thu\u1eadt v\u00e0 k\u1ef9 thu\u1eadt x\u00e3 h\u1ed9i \u0111\u1ec3 th\u1ef1c hi\u1ec7n h\u00e0nh vi tr\u1ed9m c\u1eafp d\u1eef li\u1ec7u th\u00e0nh c\u00f4ng. C\u1ea5u tr\u00fac b\u00ean trong c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c chia th\u00e0nh nhi\u1ec1u giai \u0111o\u1ea1n:<\/p>\n<ol>\n<li>\n<p><strong>Trinh s\u00e1t v\u00e0 l\u1ef1a ch\u1ecdn m\u1ee5c ti\u00eau:<\/strong><\/p>\n<ul>\n<li>Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng x\u00e1c \u0111\u1ecbnh c\u00e1c m\u1ee5c ti\u00eau ti\u1ec1m n\u0103ng, ch\u1eb3ng h\u1ea1n nh\u01b0 c\u1eeda h\u00e0ng b\u00e1n l\u1ebb, nh\u00e0 h\u00e0ng, m\u00e1y ATM ho\u1eb7c c\u00e1c trang web th\u01b0\u01a1ng m\u1ea1i \u0111i\u1ec7n t\u1eed c\u1ee5 th\u1ec3.<\/li>\n<li>H\u1ecd \u0111\u00e1nh gi\u00e1 c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt \u0111\u01b0\u1ee3c \u00e1p d\u1ee5ng v\u00e0 ch\u1ecdn nh\u1eefng bi\u1ec7n ph\u00e1p d\u1ec5 b\u1ecb t\u1ed5n th\u01b0\u01a1ng nh\u1ea5t \u0111\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro b\u1ecb ph\u00e1t hi\u1ec7n.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>V\u1ecb tr\u00ed c\u1ee7a thi\u1ebft b\u1ecb Skimming:<\/strong><\/p>\n<ul>\n<li>Trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua v\u1eadt l\u00fd, b\u1ecdn t\u1ed9i ph\u1ea1m c\u00e0i \u0111\u1eb7t k\u00edn \u0111\u00e1o c\u00e1c thi\u1ebft b\u1ecb l\u01b0\u1edbt qua tr\u00ean c\u00e1c thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i POS, m\u00e1y b\u01a1m x\u0103ng ho\u1eb7c m\u00e1y ATM \u0111\u01b0\u1ee3c nh\u1eafm m\u1ee5c ti\u00eau.<\/li>\n<li>Trong qu\u00e1 tr\u00ecnh \u0111\u1ecdc l\u01b0\u1edbt \u1ea3o, k\u1ebb t\u1ea5n c\u00f4ng ti\u00eam m\u00e3 \u0111\u1ed9c v\u00e0o trang web \u0111\u01b0\u1ee3c nh\u1eafm m\u1ee5c ti\u00eau ho\u1eb7c t\u1eadn d\u1ee5ng c\u00e1c l\u1ed7 h\u1ed5ng trong t\u1eadp l\u1ec7nh c\u1ee7a b\u00ean th\u1ee9 ba \u0111\u1ec3 c\u00f3 quy\u1ec1n truy c\u1eadp v\u00e0o d\u1eef li\u1ec7u thanh to\u00e1n.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>Thu th\u1eadp d\u1eef li\u1ec7u:<\/strong><\/p>\n<ul>\n<li>Thi\u1ebft b\u1ecb \u0111\u1ecdc l\u01b0\u1edbt ghi l\u1ea1i th\u00f4ng tin th\u1ebb thanh to\u00e1n, ch\u1eb3ng h\u1ea1n nh\u01b0 s\u1ed1 th\u1ebb, ng\u00e0y h\u1ebft h\u1ea1n v\u00e0 t\u00ean ch\u1ee7 th\u1ebb khi kh\u00e1ch h\u00e0ng th\u1ef1c hi\u1ec7n giao d\u1ecbch.<\/li>\n<li>\u0110\u1ec3 \u0111\u1ecdc l\u01b0\u1edbt \u1ea3o, m\u00e3 \u0111\u1ed9c s\u1ebd thu th\u1eadp d\u1eef li\u1ec7u \u0111\u01b0\u1ee3c nh\u1eadp v\u00e0o c\u00e1c h\u00ecnh th\u1ee9c thanh to\u00e1n v\u00e0 g\u1eedi n\u00f3 \u0111\u1ebfn m\u1ed9t m\u00e1y ch\u1ee7 t\u1eeb xa do k\u1ebb t\u1ea5n c\u00f4ng ki\u1ec3m so\u00e1t.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>Truy\u1ec1n v\u00e0 l\u01b0u tr\u1eef d\u1eef li\u1ec7u:<\/strong><\/p>\n<ul>\n<li>Trong c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua v\u1eadt l\u00fd, b\u1ecdn t\u1ed9i ph\u1ea1m l\u1ea5y thi\u1ebft b\u1ecb \u0111\u1ecdc l\u01b0\u1edbt v\u00e0 t\u1ea3i xu\u1ed1ng d\u1eef li\u1ec7u b\u1ecb \u0111\u00e1nh c\u1eafp.<\/li>\n<li>Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua \u1ea3o s\u1eed d\u1ee5ng c\u00e1c k\u00eanh \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a \u0111\u1ec3 truy\u1ec1n d\u1eef li\u1ec7u b\u1ecb \u0111\u00e1nh c\u1eafp \u0111\u1ebfn m\u00e1y ch\u1ee7 c\u1ee7a ch\u00fang, khi\u1ebfn vi\u1ec7c ph\u00e1t hi\u1ec7n tr\u1edf n\u00ean kh\u00f3 kh\u0103n h\u01a1n.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>Khai th\u00e1c d\u1eef li\u1ec7u:<\/strong><\/p>\n<ul>\n<li>D\u1eef li\u1ec7u th\u1ebb thanh to\u00e1n b\u1ecb \u0111\u00e1nh c\u1eafp th\u01b0\u1eddng \u0111\u01b0\u1ee3c b\u00e1n tr\u00ean c\u00e1c th\u1ecb tr\u01b0\u1eddng web \u0111en ho\u1eb7c b\u1ecb nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng tr\u1ef1c ti\u1ebfp \u0111\u1ec3 th\u1ef1c hi\u1ec7n c\u00e1c giao d\u1ecbch mua h\u00e0ng gian l\u1eadn.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h2>Ph\u00e2n t\u00edch c\u00e1c \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh c\u1ee7a t\u1ea5n c\u00f4ng Skimming<\/h2>\n<p>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua c\u00f3 m\u1ed9t s\u1ed1 \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh gi\u00fap ph\u00e2n bi\u1ec7t ch\u00fang v\u1edbi c\u00e1c d\u1ea1ng t\u1ed9i ph\u1ea1m m\u1ea1ng kh\u00e1c:<\/p>\n<ol>\n<li>\n<p><strong>T\u00e0ng h\u00ecnh v\u00e0 l\u1eeba d\u1ed1i:<\/strong><\/p>\n<ul>\n<li>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 ho\u1ea1t \u0111\u1ed9ng b\u00ed m\u1eadt, tr\u00e1nh b\u1ecb c\u1ea3 n\u1ea1n nh\u00e2n v\u00e0 h\u1ec7 th\u1ed1ng an ninh ph\u00e1t hi\u1ec7n.<\/li>\n<li>T\u1ed9i ph\u1ea1m s\u1eed d\u1ee5ng nhi\u1ec1u k\u1ef9 thu\u1eadt l\u1eeba \u0111\u1ea3o kh\u00e1c nhau \u0111\u1ec3 tr\u1ed9n l\u1eabn c\u00e1c thi\u1ebft b\u1ecb \u0111\u1ecdc l\u01b0\u1edbt c\u1ee7a ch\u00fang v\u1edbi c\u00e1c \u0111\u1ea7u \u0111\u1ecdc th\u1ebb ho\u1eb7c trang web h\u1ee3p ph\u00e1p.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>T\u00e1c \u0111\u1ed9ng s\u00e2u r\u1ed9ng:<\/strong><\/p>\n<ul>\n<li>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua c\u00f3 th\u1ec3 \u1ea3nh h\u01b0\u1edfng \u0111\u1ed3ng th\u1eddi \u0111\u1ebfn m\u1ed9t s\u1ed1 l\u01b0\u1ee3ng l\u1edbn n\u1ea1n nh\u00e2n, \u0111\u1eb7c bi\u1ec7t l\u00e0 khi nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c khu v\u1ef1c c\u00f3 l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp cao ho\u1eb7c c\u00e1c n\u1ec1n t\u1ea3ng th\u01b0\u01a1ng m\u1ea1i \u0111i\u1ec7n t\u1eed ph\u1ed5 bi\u1ebfn.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>R\u1ee7i ro th\u1ea5p v\u00e0 ph\u1ea7n th\u01b0\u1edfng cao:<\/strong><\/p>\n<ul>\n<li>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua c\u00f3 th\u1ec3 mang l\u1ea1i l\u1ee3i \u00edch t\u00e0i ch\u00ednh \u0111\u00e1ng k\u1ec3 cho t\u1ed9i ph\u1ea1m v\u1edbi r\u1ee7i ro b\u1ecb b\u1eaft gi\u1eef ngay l\u1eadp t\u1ee9c \u1edf m\u1ee9c t\u1ed1i thi\u1ec3u v\u00ec ch\u00fang c\u00f3 th\u1ec3 ho\u1ea1t \u0111\u1ed9ng t\u1eeb xa v\u00e0 \u1ea9n danh.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>Ti\u1ebfn h\u00f3a li\u00ean t\u1ee5c:<\/strong><\/p>\n<ul>\n<li>Khi c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt \u0111\u01b0\u1ee3c c\u1ea3i thi\u1ec7n, nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng l\u01b0\u1edbt web s\u1ebd th\u00edch nghi v\u00e0 ph\u00e1t tri\u1ec3n c\u00e1c ph\u01b0\u01a1ng ph\u00e1p m\u1edbi \u0111\u1ec3 v\u01b0\u1ee3t qua h\u1ec7 th\u1ed1ng ph\u00f2ng th\u1ee7.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h2>C\u00e1c ki\u1ec3u t\u1ea5n c\u00f4ng Skimming<\/h2>\n<p>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c ph\u00e2n th\u00e0nh nhi\u1ec1u lo\u1ea1i d\u1ef1a tr\u00ean ph\u01b0\u01a1ng ph\u00e1p v\u00e0 m\u1ee5c ti\u00eau c\u1ee7a ch\u00fang:<\/p>\n<table>\n<thead>\n<tr>\n<th>Ki\u1ec3u t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u0110\u1ecdc l\u01b0\u1edbt th\u1ec3 ch\u1ea5t<\/td>\n<td>Li\u00ean quan \u0111\u1ebfn vi\u1ec7c gi\u1ea3 m\u1ea1o thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i thanh to\u00e1n v\u1eadt l\u00fd, m\u00e1y ATM ho\u1eb7c m\u00e1y b\u01a1m x\u0103ng \u0111\u1ec3 l\u1ea5y d\u1eef li\u1ec7u th\u1ebb.<\/td>\n<\/tr>\n<tr>\n<td>\u0110\u1ecdc l\u01b0\u1edbt \u1ea3o<\/td>\n<td>Nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c trang web th\u01b0\u01a1ng m\u1ea1i \u0111i\u1ec7n t\u1eed v\u00e0 c\u1ed5ng thanh to\u00e1n tr\u1ef1c tuy\u1ebfn th\u00f4ng qua vi\u1ec7c ti\u00eam m\u00e3 \u0111\u1ed9c.<\/td>\n<\/tr>\n<tr>\n<td>\u0110\u1ecdc l\u01b0\u1edbt tr\u00ean thi\u1ebft b\u1ecb di \u0111\u1ed9ng<\/td>\n<td>T\u1eadp trung v\u00e0o thi\u1ebft b\u1ecb di \u0111\u1ed9ng, s\u1eed d\u1ee5ng \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i ho\u1eb7c c\u00e1c trang x\u1eed l\u00fd thanh to\u00e1n gi\u1ea3 m\u1ea1o.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>C\u00e1c c\u00e1ch s\u1eed d\u1ee5ng Skimming attack, c\u00e1c v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p li\u00ean quan \u0111\u1ebfn vi\u1ec7c s\u1eed d\u1ee5ng<\/h2>\n<ol>\n<li>\n<p><strong>Khai th\u00e1c h\u00ecnh s\u1ef1:<\/strong><\/p>\n<ul>\n<li>T\u1ed9i ph\u1ea1m s\u1eed d\u1ee5ng d\u1eef li\u1ec7u th\u1ebb thanh to\u00e1n b\u1ecb \u0111\u00e1nh c\u1eafp \u0111\u1ec3 mua h\u00e0ng tr\u00e1i ph\u00e9p, d\u1eabn \u0111\u1ebfn thi\u1ec7t h\u1ea1i t\u00e0i ch\u00ednh cho n\u1ea1n nh\u00e2n.<\/li>\n<li>Gi\u1ea3i ph\u00e1p: Th\u01b0\u1eddng xuy\u00ean theo d\u00f5i sao k\u00ea ng\u00e2n h\u00e0ng, \u0111\u1eb7t c\u1ea3nh b\u00e1o giao d\u1ecbch v\u00e0 s\u1eed d\u1ee5ng s\u1ed1 th\u1ebb t\u00edn d\u1ee5ng \u1ea3o c\u00f3 th\u1ec3 gi\u00fap gi\u1ea3m thi\u1ec3u r\u1ee7i ro.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>H\u00e0nh vi tr\u1ed9m c\u1eafp danh t\u00ednh:<\/strong><\/p>\n<ul>\n<li>Nh\u1eefng k\u1ebb t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng th\u00f4ng tin thu \u0111\u01b0\u1ee3c \u0111\u1ec3 th\u1ef1c hi\u1ec7n h\u00e0nh vi tr\u1ed9m c\u1eafp danh t\u00ednh, \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn \u0111i\u1ec3m t\u00edn d\u1ee5ng c\u1ee7a n\u1ea1n nh\u00e2n v\u00e0 g\u00e2y \u0111au kh\u1ed5 v\u1ec1 m\u1eb7t tinh th\u1ea7n.<\/li>\n<li>Gi\u1ea3i ph\u00e1p: S\u1eed d\u1ee5ng m\u1eadt kh\u1ea9u m\u1ea1nh v\u00e0 duy nh\u1ea5t, cho ph\u00e9p x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 v\u00e0 s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 gi\u00e1m s\u00e1t t\u00edn d\u1ee5ng c\u00f3 th\u1ec3 mang l\u1ea1i s\u1ef1 b\u1ea3o v\u1ec7.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>L\u1eeba \u0111\u1ea3o tr\u1ef1c tuy\u1ebfn:<\/strong><\/p>\n<ul>\n<li>C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua \u1ea3o c\u00f3 th\u1ec3 d\u1eabn \u0111\u1ebfn c\u00e1c giao d\u1ecbch gian l\u1eadn tr\u00ean c\u00e1c trang web b\u1ecb x\u00e2m nh\u1eadp.<\/li>\n<li>Gi\u1ea3i ph\u00e1p: C\u00e1c trang web n\u00ean tri\u1ec3n khai c\u00e1c ph\u01b0\u01a1ng ph\u00e1p m\u00e3 h\u00f3a an to\u00e0n, th\u01b0\u1eddng xuy\u00ean ki\u1ec3m tra c\u00e1c t\u1eadp l\u1ec7nh c\u1ee7a b\u00ean th\u1ee9 ba v\u00e0 ti\u1ebfn h\u00e0nh th\u1eed nghi\u1ec7m th\u00e2m nh\u1eadp.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>T\u00e1c \u0111\u1ed9ng \u0111\u1ebfn ni\u1ec1m tin c\u1ee7a kh\u00e1ch h\u00e0ng:<\/strong><\/p>\n<ul>\n<li>N\u1ea1n nh\u00e2n c\u1ee7a c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua c\u00f3 th\u1ec3 m\u1ea5t ni\u1ec1m tin v\u00e0o c\u00e1c doanh nghi\u1ec7p ho\u1eb7c n\u1ec1n t\u1ea3ng tr\u1ef1c tuy\u1ebfn b\u1ecb \u1ea3nh h\u01b0\u1edfng.<\/li>\n<li>Gi\u1ea3i ph\u00e1p: Doanh nghi\u1ec7p n\u00ean \u0111\u1ea7u t\u01b0 v\u00e0o c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt m\u1ea1nh m\u1ebd, h\u01b0\u1edbng d\u1eabn kh\u00e1ch h\u00e0ng v\u1ec1 c\u00e1c ph\u01b0\u01a1ng ph\u00e1p thanh to\u00e1n an to\u00e0n v\u00e0 ch\u1ee7 \u0111\u1ed9ng li\u00ean l\u1ea1c trong tr\u01b0\u1eddng h\u1ee3p vi ph\u1ea1m.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h2>C\u00e1c \u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh kh\u00e1c v\u1edbi c\u00e1c thu\u1eadt ng\u1eef t\u01b0\u01a1ng t\u1ef1<\/h2>\n<table>\n<thead>\n<tr>\n<th>Thu\u1eadt ng\u1eef<\/th>\n<th>S\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>T\u1ea5n c\u00f4ng l\u01b0\u1edbt qua<\/td>\n<td>Thu th\u1eadp tr\u00e1i ph\u00e9p d\u1eef li\u1ec7u th\u1ebb thanh to\u00e1n.<\/td>\n<\/tr>\n<tr>\n<td>T\u1ea5n c\u00f4ng l\u1eeba \u0111\u1ea3o<\/td>\n<td>Email ho\u1eb7c trang web l\u1eeba \u0111\u1ea3o \u0111\u1ec3 l\u1ea5y c\u1eafp th\u00f4ng tin.<\/td>\n<\/tr>\n<tr>\n<td>ch\u1ea3i th\u00f4<\/td>\n<td>S\u1eed d\u1ee5ng d\u1eef li\u1ec7u th\u1ebb b\u1ecb \u0111\u00e1nh c\u1eafp \u0111\u1ec3 th\u1ef1c hi\u1ec7n mua h\u00e0ng gian l\u1eadn.<\/td>\n<\/tr>\n<tr>\n<td>H\u00e0nh vi tr\u1ed9m c\u1eafp danh t\u00ednh<\/td>\n<td>\u0102n c\u1eafp th\u00f4ng tin c\u00e1 nh\u00e2n \u0111\u1ec3 m\u1ea1o danh n\u1ea1n nh\u00e2n.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>Tri\u1ec3n v\u1ecdng v\u00e0 c\u00f4ng ngh\u1ec7 t\u01b0\u01a1ng lai li\u00ean quan \u0111\u1ebfn t\u1ea5n c\u00f4ng Skimming<\/h2>\n<p>Cu\u1ed9c chi\u1ebfn ch\u1ed1ng l\u1ea1i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua v\u1eabn ti\u1ebfp t\u1ee5c khi c\u00f4ng ngh\u1ec7 ti\u1ebfn b\u1ed9. C\u00e1c quan \u0111i\u1ec3m trong t\u01b0\u01a1ng lai \u0111\u1ec3 ch\u1ed1ng l\u1ea1i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua bao g\u1ed3m:<\/p>\n<ol>\n<li>\n<p><strong>Ph\u00e1t hi\u1ec7n gian l\u1eadn d\u1ef1a tr\u00ean AI:<\/strong><\/p>\n<ul>\n<li>Tri\u1ec3n khai c\u00e1c thu\u1eadt to\u00e1n tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o v\u00e0 m\u00e1y h\u1ecdc \u0111\u1ec3 ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua trong th\u1eddi gian th\u1ef1c.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>X\u00e1c th\u1ef1c sinh tr\u1eafc h\u1ecdc:<\/strong><\/p>\n<ul>\n<li>S\u1eed d\u1ee5ng c\u00e1c ph\u01b0\u01a1ng ph\u00e1p x\u00e1c th\u1ef1c sinh tr\u1eafc h\u1ecdc nh\u01b0 nh\u1eadn d\u1ea1ng v\u00e2n tay ho\u1eb7c khu\u00f4n m\u1eb7t \u0111\u1ec3 giao d\u1ecbch an to\u00e0n h\u01a1n.<\/li>\n<\/ul>\n<\/li>\n<li>\n<p><strong>C\u00f4ng ngh\u1ec7 chu\u1ed7i kh\u1ed1i:<\/strong><\/p>\n<ul>\n<li>K\u1ebft h\u1ee3p c\u00f4ng ngh\u1ec7 blockchain \u0111\u1ec3 x\u1eed l\u00fd thanh to\u00e1n an to\u00e0n v\u00e0 minh b\u1ea1ch, gi\u1ea3m r\u1ee7i ro thao t\u00fang d\u1eef li\u1ec7u.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<h2>C\u00e1ch s\u1eed d\u1ee5ng ho\u1eb7c li\u00ean k\u1ebft m\u00e1y ch\u1ee7 proxy v\u1edbi cu\u1ed9c t\u1ea5n c\u00f4ng Skimming<\/h2>\n<p>C\u00e1c m\u00e1y ch\u1ee7 proxy, gi\u1ed1ng nh\u01b0 c\u00e1c m\u00e1y ch\u1ee7 do OneProxy cung c\u1ea5p, c\u00f3 th\u1ec3 v\u1eeba c\u00f3 l\u1ee3i v\u1eeba c\u00f3 kh\u1ea3 n\u0103ng li\u00ean quan \u0111\u1ebfn c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua. V\u1ec1 m\u1eb7t t\u00edch c\u1ef1c, m\u00e1y ch\u1ee7 proxy cung c\u1ea5p t\u00ednh b\u1ea3o m\u1eadt v\u00e0 quy\u1ec1n ri\u00eang t\u01b0 n\u00e2ng cao cho ng\u01b0\u1eddi d\u00f9ng b\u1eb1ng c\u00e1ch \u0111\u00f3ng vai tr\u00f2 trung gian gi\u1eefa thi\u1ebft b\u1ecb c\u1ee7a h\u1ecd v\u00e0 internet. Ch\u00fang c\u00f3 th\u1ec3 gi\u00fap ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua b\u1eb1ng c\u00e1ch che gi\u1ea5u \u0111\u1ecba ch\u1ec9 IP th\u1ef1c c\u1ee7a ng\u01b0\u1eddi d\u00f9ng v\u00e0 cung c\u1ea5p t\u00ednh n\u0103ng \u1ea9n danh.<\/p>\n<p>Tuy nhi\u00ean, \u0111i\u1ec1u c\u1ea7n thi\u1ebft l\u00e0 ph\u1ea3i bi\u1ebft r\u1eb1ng nh\u1eefng k\u1ebb \u0111\u1ed9c h\u1ea1i c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng m\u00e1y ch\u1ee7 proxy \u0111\u1ec3 che gi\u1ea5u danh t\u00ednh c\u1ee7a ch\u00fang khi th\u1ef1c hi\u1ec7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng l\u01b0\u1edbt qua. \u0110i\u1ec1u n\u00e0y nh\u1ea5n m\u1ea1nh t\u1ea7m quan tr\u1ecdng c\u1ee7a vi\u1ec7c th\u1ef1c hi\u1ec7n c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt nghi\u00eam ng\u1eb7t v\u00e0 gi\u00e1m s\u00e1t k\u1ef9 l\u01b0\u1ee1ng vi\u1ec7c s\u1eed d\u1ee5ng m\u00e1y ch\u1ee7 proxy \u0111\u1ec3 ph\u00e1t hi\u1ec7n m\u1ecdi ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1ng ng\u1edd.<\/p>\n<h2>Li\u00ean k\u1ebft li\u00ean quan<\/h2>\n<p>\u0110\u1ec3 bi\u1ebft th\u00eam th\u00f4ng tin v\u1ec1 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Skimming v\u00e0 an ninh m\u1ea1ng, b\u1ea1n c\u00f3 th\u1ec3 tham kh\u1ea3o c\u00e1c t\u00e0i nguy\u00ean sau:<\/p>\n<ol>\n<li><a href=\"https:\/\/owasp.org\/www-project-skimming-prevention\/\" target=\"_new\" rel=\"noopener nofollow\">H\u01b0\u1edbng d\u1eabn ng\u0103n ch\u1eb7n vi\u1ec7c \u0111\u1ecdc l\u01b0\u1edbt c\u1ee7a OWASP<\/a><\/li>\n<li><a href=\"https:\/\/www.identitytheft.gov\/\" target=\"_new\" rel=\"noopener nofollow\">\u1ee6y ban Th\u01b0\u01a1ng m\u1ea1i Li\u00ean bang (FTC) \u2013 Tr\u1ed9m danh t\u00ednh<\/a><\/li>\n<li><a href=\"https:\/\/www.pcisecuritystandards.org\/\" target=\"_new\" rel=\"noopener nofollow\">H\u1ed9i \u0111\u1ed3ng Ti\u00eau chu\u1ea9n B\u1ea3o m\u1eadt PCI \u2013 Ti\u00eau chu\u1ea9n B\u1ea3o m\u1eadt D\u1eef li\u1ec7u Ng\u00e0nh Th\u1ebb Thanh to\u00e1n (PCI DSS)<\/a><\/li>\n<\/ol>","protected":false},"featured_media":479021,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-479020","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Skimming Attack: Understanding the Malicious Data Theft Technique<\/mark>","faq_items":[{"question":"What is a Skimming Attack?","answer":"<p>A Skimming Attack, also known as card skimming, is a form of cybercrime where criminals illicitly capture payment card information from unsuspecting individuals. They use various techniques, such as physical skimmers on POS terminals or injecting malicious code on websites, to steal sensitive card data.<\/p>"},{"question":"How did Skimming Attacks originate?","answer":"<p>Skimming Attacks have been around since the late 1970s when criminals started tampering with ATMs. The first mentions of skimming attacks date back to the 1980s when physical card readers were installed on ATMs and gas pumps.<\/p>"},{"question":"How does a Skimming Attack work?","answer":"<p>In a physical Skimming Attack, criminals install skimming devices on POS terminals or ATMs to covertly record card information during transactions. In virtual skimming, malicious code is injected into websites to capture payment data entered by users.<\/p>"},{"question":"What are the key features of Skimming Attacks?","answer":"<p>Skimming Attacks are characterized by their stealth and deception, wide-reaching impact, low risk, high reward, and continuous evolution to bypass security measures.<\/p>"},{"question":"What types of Skimming Attacks exist?","answer":"<p>Skimming Attacks can be classified as physical skimming, virtual skimming (Magecart attacks), and mobile skimming, targeting different payment methods and devices.<\/p>"},{"question":"How can Skimming Attacks be used, and what are the related problems and solutions?","answer":"<p>Skimming Attacks can lead to financial losses, identity theft, and online fraud. Solutions include regular monitoring of bank statements, using strong passwords, and implementing secure coding practices on websites.<\/p>"},{"question":"How does Skimming Attack compare to other similar terms?","answer":"<p>Skimming Attacks involve the illicit collection of payment card data, while phishing attacks deceive users with fake websites or emails. Carding uses stolen card data for fraudulent purchases, and identity theft involves stealing personal information for malicious purposes.<\/p>"},{"question":"What are the future perspectives and technologies related to Skimming Attacks?","answer":"<p>Future technologies may include AI-driven fraud detection, biometric authentication, and blockchain-based payment processing for enhanced security.<\/p>"},{"question":"How can proxy servers be associated with Skimming Attacks?","answer":"<p>Proxy servers, like those provided by OneProxy, can be used to enhance security and privacy, but they may also be exploited by malicious actors to conceal their identities during Skimming Attacks. Implementing strict security measures and monitoring proxy server usage can help prevent such misuse.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/479020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/wiki\/479020\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media\/479021"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/vn\/wp-json\/wp\/v2\/media?parent=479020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}