{"id":32725,"date":"2025-09-22T10:25:11","date_gmt":"2025-09-22T03:25:11","guid":{"rendered":"https:\/\/interdata.vn\/blog\/?p=32725"},"modified":"2026-01-02T16:30:45","modified_gmt":"2026-01-02T09:30:45","slug":"watering-hole-attack-la-gi","status":"publish","type":"post","link":"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/","title":{"rendered":"Watering Hole Attack: C\u00e1ch nh\u1eadn bi\u1ebft, t\u00e1c h\u1ea1i, &#038; C\u00e1ch ph\u00f2ng 2026"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-white ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">N\u1ed8I DUNG<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Watering-Hole-Attack-la-gi\" >Watering Hole Attack l\u00e0 g\u00ec?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Tai-sao-tan-cong-Watering-Hole-nguy-hiem\" >T\u1ea1i sao t\u1ea5n c\u00f4ng Watering Hole nguy hi\u1ec3m?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#1-Ro-ri-du-lieu-nhay-cam-va-mat-cap-tai-san-tri-tue\" >1. R\u00f2 r\u1ec9 d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m v\u00e0 m\u1ea5t c\u1eafp t\u00e0i s\u1ea3n, tr\u00ed tu\u1ec7<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#2-Chiem-quyen-kiem-soat-he-thong-va-mo-rong-tan-cong\" >2. Chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t h\u1ec7 th\u1ed1ng v\u00e0 m\u1edf r\u1ed9ng t\u1ea5n c\u00f4ng<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#3-Thiet-hai-ve-uy-tin-va-phap-ly\" >3. Thi\u1ec7t h\u1ea1i v\u1ec1 uy t\u00edn v\u00e0 ph\u00e1p l\u00fd<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#4-Muc-do-nham-muc-tieu-va-tinh-tinh-vi-cao\" >4. M\u1ee9c \u0111\u1ed9 nh\u1eafm m\u1ee5c ti\u00eau v\u00e0 t\u00ednh tinh vi cao<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Cach-thuc-hoat-dong-cua-tan-cong-Watering-Hole\" >C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a t\u1ea5n c\u00f4ng Watering Hole<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Buoc-1-Xac-dinh-muc-tieu\" >B\u01b0\u1edbc 1: X\u00e1c \u0111\u1ecbnh m\u1ee5c ti\u00eau<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Buoc-2-Nghien-cuu-thoi-quen-cua-nan-nhan\" >B\u01b0\u1edbc 2: Nghi\u00ean c\u1ee9u th\u00f3i quen c\u1ee7a n\u1ea1n nh\u00e2n<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Buoc-3-Giang-bay-bang-cach-chen-ma-doc-vao-website-hop-phap\" >B\u01b0\u1edbc 3: Gi\u0103ng b\u1eaby b\u1eb1ng c\u00e1ch ch\u00e8n m\u00e3 \u0111\u1ed9c v\u00e0o website h\u1ee3p ph\u00e1p<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Buoc-4-Cho-doi-va-thu-thap-du-lieu\" >B\u01b0\u1edbc 4: Ch\u1edd \u0111\u1ee3i v\u00e0 thu th\u1eadp d\u1eef li\u1ec7u<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Dau-hieu-cua-mot-cuoc-tan-cong-vao-ho-nuoc\" >D\u1ea5u hi\u1ec7u c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o h\u1ed1 n\u01b0\u1edbc<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Hieu-suat-may-tinh-va-he-thong-cham-lai\" >Hi\u1ec7u su\u1ea5t m\u00e1y t\u00ednh v\u00e0 h\u1ec7 th\u1ed1ng ch\u1eadm l\u1ea1i<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#He-thong-bi-sap-khong-ro-nguyen-nhan\" >H\u1ec7 th\u1ed1ng b\u1ecb s\u1eadp kh\u00f4ng r\u00f5 nguy\u00ean nh\u00e2n<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Thay-doi-cai-dat-bao-mat-trinh-duyet\" >Thay \u0111\u1ed5i c\u00e0i \u0111\u1eb7t b\u1ea3o m\u1eadt tr\u00ecnh duy\u1ec7t<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Thieu-tap-tin\" >Thi\u1ebfu t\u1eadp tin<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Quang-cao-hoac-cua-so-dan-den-mot-trang-web-cu-the\" >Qu\u1ea3ng c\u00e1o ho\u1eb7c c\u1eeda s\u1ed5 d\u1eabn \u0111\u1ebfn m\u1ed9t trang web c\u1ee5 th\u1ec3<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Ung-dung-moi-hoac-khong-xac-dinh-duoc-tai-xuong\" >\u1ee8ng d\u1ee5ng m\u1edbi ho\u1eb7c kh\u00f4ng x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c t\u1ea3i xu\u1ed1ng<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Vi-du-ve-cac-cuoc-tan-cong-Watering-Hole-gan-day\" >V\u00ed d\u1ee5 v\u1ec1 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Watering Hole g\u1ea7n \u0111\u00e2y<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Nam-2016\" >N\u0103m 2016<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Nam-2017\" >N\u0103m 2017<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Nam-2020\" >N\u0103m 2020<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Nam-2023\" >N\u0103m 2023<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-24\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Nam-2024\" >N\u0103m 2024<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-25\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#So-sanh-Watering-Hole-Attack-voi-tan-cong-Phishing-Malware\" >So s\u00e1nh Watering Hole Attack v\u1edbi t\u1ea5n c\u00f4ng Phishing, Malware<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-26\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Cach-phong-chong-Watering-Hole-Attack-hieu-qua\" >C\u00e1ch ph\u00f2ng ch\u1ed1ng Watering Hole Attack hi\u1ec7u qu\u1ea3<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-27\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#1-Phong-chong-o-cap-do-ca-nhan\" >1. Ph\u00f2ng ch\u1ed1ng \u1edf c\u1ea5p \u0111\u1ed9 c\u00e1 nh\u00e2n<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-28\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#2-Phong-chong-o-cap-do-to-chuc\" >2. Ph\u00f2ng ch\u1ed1ng \u1edf c\u1ea5p \u0111\u1ed9 t\u1ed5 ch\u1ee9c<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-29\" href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/#Cac-hinh-thuc-khai-thac-bao-mat-tuong-tu-Watering-Hole-Attack\" >C\u00e1c h\u00ecnh th\u1ee9c khai th\u00e1c b\u1ea3o m\u1eadt t\u01b0\u01a1ng t\u1ef1 Watering Hole Attack<\/a><\/li><\/ul><\/nav><\/div>\n<p>Trong th\u1eddi \u0111\u1ea1i tr\u1ef1c tuy\u1ebfn ng\u00e0y nay, h\u1ea7u h\u1ebft ch\u00fang ta \u0111\u1ec1u bi\u1ebft c\u00e1ch \u0111\u1ec1 ph\u00f2ng nh\u1eefng m\u1ed1i nguy hi\u1ec3m r\u00f5 r\u00e0ng nh\u01b0 link \u0111\u1ed9c h\u1ea1i hay file \u0111\u00ednh k\u00e8m \u0111\u00e1ng ng\u1edd. Tuy nhi\u00ean, c\u00f3 m\u1ed9t ki\u1ec3u t\u1ea5n c\u00f4ng tinh vi h\u01a1n \u0111\u00f3 ch\u00ednh l\u00e0 Watering Hole Attack. C\u00f9ng t\u00ecm hi\u1ec3u h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng <strong>Watering Hole Attack l\u00e0 g\u00ec<\/strong>, <strong>c\u00e1ch ho\u1ea1t \u0111\u1ed9ng<\/strong> c\u1ee7a ch\u00fang v\u00e0 g\u1ee3i \u00fd c\u00e1c <strong>bi\u1ec7n ph\u00e1p \u0111\u1ec3 nh\u1eadn bi\u1ebft v\u00e0 ph\u00f2ng tr\u00e1nh Watering Hole Attack<\/strong>\u00a0t\u1ed1t nh\u1ea5t.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Watering-Hole-Attack-la-gi\"><\/span>Watering Hole Attack l\u00e0 g\u00ec?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><strong><a href=\"https:\/\/interdata.vn\/blog\/watering-hole-attack-la-gi\/\">Watering Hole Attack<\/a> (t\u1ea5n c\u00f4ng &#8220;\u1ed5 n\u01b0\u1edbc&#8221;)<\/strong> l\u00e0 m\u1ed9t chi\u1ebfn thu\u1eadt t\u1ea5n c\u00f4ng m\u1ea1ng c\u00f3 ch\u1ee7 \u0111\u00edch, nh\u1eafm v\u00e0o m\u1ed9t nh\u00f3m ng\u01b0\u1eddi d\u00f9ng c\u1ee5 th\u1ec3 l\u00e0 c\u00e1c website m\u00e0 n\u1ea1n nh\u00e2n th\u01b0\u1eddng xuy\u00ean truy c\u1eadp, kh\u00e1c v\u1edbi c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng ph\u00e1t t\u00e1n r\u1ed9ng r\u00e3i nh\u01b0 l\u1eeba \u0111\u1ea3o qua email,&#8230;<\/p>\n<figure id=\"attachment_32732\" aria-describedby=\"caption-attachment-32732\" style=\"width: 800px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-32732\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Watering-Hole-Attack-la-gi.jpg\" alt=\"Watering Hole Attack l\u00e0 g\u00ec\" width=\"800\" height=\"500\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Watering-Hole-Attack-la-gi.jpg 800w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Watering-Hole-Attack-la-gi-300x188.jpg 300w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Watering-Hole-Attack-la-gi-768x480.jpg 768w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><figcaption id=\"caption-attachment-32732\" class=\"wp-caption-text\">Watering Hole Attack l\u00e0 g\u00ec?<\/figcaption><\/figure>\n<p>B\u1ea1n h\u00e3y h\u00ecnh dung m\u1ed9t con th\u00fa s\u0103n m\u1ed3i kh\u00f4ng \u0111u\u1ed5i theo t\u1eebng con m\u1ed3i \u0111\u01a1n l\u1ebb, thay v\u00e0o \u0111\u00f3, n\u00f3 r\u00ecnh r\u1eadp ngay t\u1ea1i &#8220;\u1ed5 n\u01b0\u1edbc&#8221; \u2013 n\u01a1i c\u00e1c con m\u1ed3i th\u01b0\u1eddng xuy\u00ean \u0111\u1ebfn u\u1ed1ng n\u01b0\u1edbc. K\u1ebb t\u1ea5n c\u00f4ng Watering Hole Attack c\u0169ng h\u00e0nh \u0111\u1ed9ng t\u01b0\u01a1ng t\u1ef1.<\/p>\n<p>Ch\u00fang kh\u00f4ng t\u1ea5n c\u00f4ng t\u1eebng c\u00e1 nh\u00e2n m\u00e0 t\u1ea5n c\u00f4ng m\u1ed9t trang web h\u1ee3p ph\u00e1p, \u0111\u01b0\u1ee3c nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng tin c\u1eady v\u00e0 c\u00f3 chung \u0111\u1eb7c \u0111i\u1ec3m (v\u00ed d\u1ee5: c\u00f9ng ng\u00e0nh ngh\u1ec1, c\u00f9ng s\u1edf th\u00edch), sau khi t\u1ea5n c\u00f4ng th\u00e0nh c\u00f4ng, ch\u00fang s\u1ebd l\u00e9n l\u00fat c\u00e0i m\u00e3 \u0111\u1ed9c v\u00e0o trang web \u0111\u00f3.<\/p>\n<p>Khi nh\u1eefng ng\u01b0\u1eddi d\u00f9ng m\u1ee5c ti\u00eau truy c\u1eadp v\u00e0o trang web \u0111\u00e3 b\u1ecb nhi\u1ec5m \u0111\u1ed9c, m\u00e1y t\u00ednh c\u1ee7a h\u1ecd s\u1ebd t\u1ef1 \u0111\u1ed9ng b\u1ecb l\u00e2y nhi\u1ec5m m\u00e0 h\u1ecd kh\u00f4ng h\u1ec1 hay bi\u1ebft, \u0111\u00e2y ch\u00ednh l\u00e0 l\u00fd do t\u1ea1i sao Watering Hole Attack \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m.<\/p>\n<div>\n<h2><span class=\"ez-toc-section\" id=\"Tai-sao-tan-cong-Watering-Hole-nguy-hiem\"><\/span>T\u1ea1i sao t\u1ea5n c\u00f4ng Watering Hole nguy hi\u1ec3m?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>T\u1ea5n c\u00f4ng &#8220;\u1ed5 n\u01b0\u1edbc&#8221; kh\u00f4ng ch\u1ec9 \u0111\u01a1n thu\u1ea7n l\u00e0 vi\u1ec7c l\u00e2y nhi\u1ec5m m\u00e3 \u0111\u1ed9c. M\u1ee9c \u0111\u1ed9 nguy hi\u1ec3m c\u1ee7a n\u00f3 n\u1eb1m \u1edf t\u00ednh ch\u1ea5t nh\u1eafm m\u1ee5c ti\u00eau cao v\u00e0 kh\u1ea3 n\u0103ng g\u00e2y ra nh\u1eefng h\u1eadu qu\u1ea3 s\u00e2u r\u1ed9ng, v\u01b0\u1ee3t xa thi\u1ec7t h\u1ea1i t\u00e0i ch\u00ednh th\u00f4ng th\u01b0\u1eddng.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"1-Ro-ri-du-lieu-nhay-cam-va-mat-cap-tai-san-tri-tue\"><\/span><strong>1. R\u00f2 r\u1ec9 d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m v\u00e0 m\u1ea5t c\u1eafp t\u00e0i s\u1ea3n, tr\u00ed tu\u1ec7<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u00e2y l\u00e0 t\u00e1c \u0111\u1ed9ng nguy hi\u1ec3m nh\u1ea5t c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng &#8220;\u1ed5 n\u01b0\u1edbc&#8221; th\u00e0nh c\u00f4ng. M\u00e3 \u0111\u1ed9c \u0111\u01b0\u1ee3c c\u00e0i v\u00e0o m\u00e1y n\u1ea1n nh\u00e2n th\u01b0\u1eddng c\u00f3 ch\u1ee9c n\u0103ng gi\u00e1n \u0111i\u1ec7p, thu th\u1eadp th\u00f4ng tin m\u1ed9t c\u00e1ch th\u1ea7m l\u1eb7ng trong th\u1eddi gian d\u00e0i. Thay v\u00ec ch\u1ec9 l\u1ea5y c\u1eafp th\u00f4ng tin th\u1ebb t\u00edn d\u1ee5ng, ki\u1ec3u t\u1ea5n c\u00f4ng Watering Hole c\u00f3 th\u1ec3 nh\u1eafm v\u00e0o:<\/p>\n<ul>\n<li><strong>D\u1eef li\u1ec7u kh\u00e1ch h\u00e0ng:<\/strong> Danh s\u00e1ch kh\u00e1ch h\u00e0ng, th\u00f4ng tin c\u00e1 nh\u00e2n (PII &#8211; Personally Identifiable Information).<\/li>\n<li><strong>B\u00ed m\u1eadt kinh doanh:<\/strong> M\u00e3 ngu\u1ed3n, k\u1ebf ho\u1ea1ch s\u1ea3n ph\u1ea9m, c\u00f4ng th\u1ee9c, h\u1ed3 s\u01a1 th\u1ea7u.<\/li>\n<li><strong>T\u00e0i s\u1ea3n tr\u00ed tu\u1ec7:<\/strong> Nghi\u00ean c\u1ee9u khoa h\u1ecdc, b\u1ea3n quy\u1ec1n, thi\u1ebft k\u1ebf \u0111\u1ed9c quy\u1ec1n.<\/li>\n<\/ul>\n<p>S\u1ef1 r\u00f2 r\u1ec9 n\u00e0y kh\u00f4ng ch\u1ec9 g\u00e2y thi\u1ec7t h\u1ea1i t\u00e0i ch\u00ednh m\u00e0 c\u00f2n ph\u00e1 h\u1ee7y uy t\u00edn, v\u1ecb th\u1ebf c\u1ea1nh tranh c\u1ee7a doanh nghi\u1ec7p.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"2-Chiem-quyen-kiem-soat-he-thong-va-mo-rong-tan-cong\"><\/span><strong>2. Chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t h\u1ec7 th\u1ed1ng v\u00e0 m\u1edf r\u1ed9ng t\u1ea5n c\u00f4ng<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Khi \u0111\u00e3 l\u00e2y nhi\u1ec5m v\u00e0o m\u1ed9t thi\u1ebft b\u1ecb, m\u00e3 \u0111\u1ed9c c\u00f3 th\u1ec3 bi\u1ebfn thi\u1ebft b\u1ecb \u0111\u00f3 th\u00e0nh &#8220;b\u01b0\u1edbc \u0111\u1ec7m&#8221; \u0111\u1ec3 m\u1edf r\u1ed9ng t\u1ea5n c\u00f4ng sang c\u00e1c h\u1ec7 th\u1ed1ng kh\u00e1c trong c\u00f9ng m\u1ea1ng l\u01b0\u1edbi. K\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3:<\/p>\n<ul>\n<li><strong>T\u1ea5n c\u00f4ng theo chi\u1ec1u ngang (Lateral Movement):<\/strong> Di chuy\u1ec3n t\u1eeb m\u00e1y t\u00ednh n\u00e0y sang m\u00e1y t\u00ednh kh\u00e1c trong n\u1ed9i b\u1ed9 m\u1ea1ng c\u00f4ng ty \u0111\u1ec3 t\u00ecm ki\u1ebfm c\u00e1c t\u00e0i nguy\u00ean c\u00f3 gi\u00e1 tr\u1ecb h\u01a1n.<\/li>\n<li><strong>C\u00e0i \u0111\u1eb7t c\u00e1c lo\u1ea1i m\u00e3 \u0111\u1ed9c kh\u00e1c:<\/strong> M\u00e3 \u0111\u1ed9c ban \u0111\u1ea7u ch\u1ec9 l\u00e0 &#8220;c\u1eeda ng\u00f5&#8221; \u0111\u1ec3 c\u00e0i th\u00eam c\u00e1c ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i nguy hi\u1ec3m h\u01a1n nh\u01b0 ransomware (m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n) ho\u1eb7c spyware (ph\u1ea7n m\u1ec1m gi\u00e1n \u0111i\u1ec7p).<\/li>\n<\/ul>\n<p>M\u1ee9c \u0111\u1ed9 nguy hi\u1ec3m \u1edf \u0111\u00e2y l\u00e0 m\u1ed9t thi\u1ebft b\u1ecb c\u00e1 nh\u00e2n b\u1ecb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh \u0111i\u1ec3m kh\u1edfi \u0111\u1ea7u cho vi\u1ec7c x\u00e2m nh\u1eadp to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng c\u1ee7a t\u1ed5 ch\u1ee9c.<\/p>\n<figure id=\"attachment_32733\" aria-describedby=\"caption-attachment-32733\" style=\"width: 600px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-32733\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Tac-dong-va-muc-do-nguy-hiem-cua-Watering-Hole-Attack.webp\" alt=\"T\u00e1c \u0111\u1ed9ng v\u00e0 m\u1ee9c \u0111\u1ed9 nguy hi\u1ec3m c\u1ee7a Watering Hole Attack\" width=\"600\" height=\"534\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Tac-dong-va-muc-do-nguy-hiem-cua-Watering-Hole-Attack.webp 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Tac-dong-va-muc-do-nguy-hiem-cua-Watering-Hole-Attack-300x267.webp 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><figcaption id=\"caption-attachment-32733\" class=\"wp-caption-text\">T\u00e1c \u0111\u1ed9ng v\u00e0 m\u1ee9c \u0111\u1ed9 nguy hi\u1ec3m c\u1ee7a Watering Hole Attack<\/figcaption><\/figure>\n<h3><span class=\"ez-toc-section\" id=\"3-Thiet-hai-ve-uy-tin-va-phap-ly\"><\/span><strong>3. Thi\u1ec7t h\u1ea1i v\u1ec1 uy t\u00edn v\u00e0 ph\u00e1p l\u00fd<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u1ed1i v\u1edbi m\u1ed9t doanh nghi\u1ec7p, vi\u1ec7c b\u1ecb t\u1ea5n c\u00f4ng &#8220;\u1ed5 n\u01b0\u1edbc&#8221; kh\u00f4ng ch\u1ec9 g\u00e2y thi\u1ec7t h\u1ea1i v\u1ec1 t\u00e0i ch\u00ednh m\u00e0 c\u00f2n k\u00e9o theo nh\u1eefng h\u1eadu qu\u1ea3 v\u1ec1 m\u1eb7t uy t\u00edn. Khi th\u00f4ng tin r\u00f2 r\u1ec9, ni\u1ec1m tin c\u1ee7a kh\u00e1ch h\u00e0ng v\u00e0 \u0111\u1ed1i t\u00e1c s\u1ebd b\u1ecb s\u1ee5t gi\u1ea3m nghi\u00eam tr\u1ecdng.<\/p>\n<ul>\n<li><strong>M\u1ea5t Ni\u1ec1m tin Kh\u00e1ch h\u00e0ng:<\/strong> Kh\u00e1ch h\u00e0ng s\u1ebd ng\u1ea7n ng\u1ea1i s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 c\u1ee7a m\u1ed9t c\u00f4ng ty kh\u00f4ng \u0111\u1ea3m b\u1ea3o an to\u00e0n d\u1eef li\u1ec7u.<\/li>\n<li><strong>H\u1eadu qu\u1ea3 Ph\u00e1p l\u00fd:<\/strong> Nhi\u1ec1u qu\u1ed1c gia c\u00f3 c\u00e1c quy \u0111\u1ecbnh ch\u1eb7t ch\u1ebd v\u1ec1 b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u (nh\u01b0 GDPR \u1edf ch\u00e2u \u00c2u). Doanh nghi\u1ec7p c\u00f3 th\u1ec3 ph\u1ea3i \u0111\u1ed1i m\u1eb7t v\u1edbi c\u00e1c kho\u1ea3n ph\u1ea1t n\u1eb7ng n\u1ec1 n\u1ebfu kh\u00f4ng b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"4-Muc-do-nham-muc-tieu-va-tinh-tinh-vi-cao\"><\/span><strong>4. M\u1ee9c \u0111\u1ed9 nh\u1eafm m\u1ee5c ti\u00eau v\u00e0 t\u00ednh tinh vi cao<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110i\u1ec3m kh\u00e1c bi\u1ec7t l\u1edbn nh\u1ea5t c\u1ee7a t\u1ea5n c\u00f4ng Watering Hole so v\u1edbi c\u00e1c h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng kh\u00e1c l\u00e0 t\u00ednh nh\u1eafm m\u1ee5c ti\u00eau. K\u1ebb t\u1ea5n c\u00f4ng kh\u00f4ng t\u1ea5n c\u00f4ng tr\u00e0n lan m\u00e0 nghi\u00ean c\u1ee9u r\u1ea5t k\u1ef9 th\u00f3i quen c\u1ee7a n\u1ea1n nh\u00e2n. S\u1ef1 tinh vi n\u00e0y khi\u1ebfn ng\u01b0\u1eddi d\u00f9ng r\u1ea5t kh\u00f3 nh\u1eadn ra m\u00ecnh \u0111\u00e3 b\u1ecb t\u1ea5n c\u00f4ng v\u00ec:<\/p>\n<ul>\n<li><strong>H\u1ecd \u0111ang truy c\u1eadp m\u1ed9t trang web uy t\u00edn, quen thu\u1ed9c.<\/strong> Ni\u1ec1m tin \u0111\u01b0\u1ee3c t\u1eadn d\u1ee5ng \u0111\u1ec3 gi\u1ea3m thi\u1ec3u s\u1ef1 c\u1ea3nh gi\u00e1c.<\/li>\n<li><strong>Kh\u00f4ng c\u00f3 d\u1ea5u hi\u1ec7u b\u1ea5t th\u01b0\u1eddng r\u00f5 r\u1ec7t<\/strong> nh\u01b0 email l\u1eeba \u0111\u1ea3o hay \u0111\u01b0\u1eddng link sai ch\u00ednh t\u1ea3.<\/li>\n<li><strong>M\u00e3 \u0111\u1ed9c t\u1ef1 \u0111\u1ed9ng l\u00e2y nhi\u1ec5m<\/strong> m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea5t k\u1ef3 thao t\u00e1c n\u00e0o t\u1eeb ph\u00eda ng\u01b0\u1eddi d\u00f9ng, l\u00e0m cho qu\u00e1 tr\u00ecnh t\u1ea5n c\u00f4ng g\u1ea7n nh\u01b0 v\u00f4 h\u00ecnh.<\/li>\n<\/ul>\n<p>T\u00f3m l\u1ea1i, <strong>Watering Hole Attack<\/strong> kh\u00f4ng ch\u1ec9 l\u00e0 m\u1ed9t ki\u1ec3u t\u1ea5n c\u00f4ng m\u1ea1ng, m\u00e0 l\u00e0 m\u1ed9t chi\u1ebfn thu\u1eadt chi\u1ebfn tranh m\u1ea1ng \u0111\u1ea7y t\u00ednh to\u00e1n. N\u00f3 l\u1ee3i d\u1ee5ng ni\u1ec1m tin \u0111\u1ec3 t\u1ea1o ra m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng &#8220;v\u00f4 h\u00ecnh&#8221; v\u1edbi m\u1ee5c \u0111\u00edch g\u00e2y ra nh\u1eefng thi\u1ec7t h\u1ea1i t\u1ed1i \u0111a cho c\u00e1c m\u1ee5c ti\u00eau c\u00f3 gi\u00e1 tr\u1ecb cao.<\/p>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"Cach-thuc-hoat-dong-cua-tan-cong-Watering-Hole\"><\/span><strong>C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a t\u1ea5n c\u00f4ng Watering Hole<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>M\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng &#8220;\u1ed5 n\u01b0\u1edbc&#8221; th\u01b0\u1eddng di\u1ec5n ra theo m\u1ed9t quy tr\u00ecnh c\u1ee5 th\u1ec3 v\u00e0 c\u00f3 t\u00ednh to\u00e1n k\u1ef9 l\u01b0\u1ee1ng. Hi\u1ec3u \u0111\u01b0\u1ee3c c\u00e1c b\u01b0\u1edbc n\u00e0y s\u1ebd gi\u00fap ch\u00fang ta \u0111\u1ec1 cao c\u1ea3nh gi\u00e1c h\u01a1n.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-1-Xac-dinh-muc-tieu\"><\/span><strong>B\u01b0\u1edbc 1: X\u00e1c \u0111\u1ecbnh m\u1ee5c ti\u00eau<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Thay v\u00ec nh\u1eafm v\u00e0o h\u00e0ng tri\u1ec7u ng\u01b0\u1eddi d\u00f9ng, k\u1ebb t\u1ea5n c\u00f4ng s\u1ebd khoanh v\u00f9ng m\u1ed9t nh\u00f3m \u0111\u1ed1i t\u01b0\u1ee3ng c\u1ee5 th\u1ec3. \u0110\u00f3 c\u00f3 th\u1ec3 l\u00e0 nh\u00e2n vi\u00ean c\u1ee7a m\u1ed9t c\u00f4ng ty c\u00f4ng ngh\u1ec7, c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u trong m\u1ed9t l\u0129nh v\u1ef1c n\u00e0o \u0111\u00f3, ho\u1eb7c nh\u1eefng ng\u01b0\u1eddi c\u00f3 chung s\u1edf th\u00edch v\u00e0 truy c\u1eadp v\u00e0o c\u00f9ng m\u1ed9t di\u1ec5n \u0111\u00e0n.<\/p>\n<p>M\u1ee5c ti\u00eau c\u00e0ng c\u1ee5 th\u1ec3, kh\u1ea3 n\u0103ng th\u00e0nh c\u00f4ng c\u00e0ng cao. K\u1ebb t\u1ea5n c\u00f4ng <strong>Watering Hole Attack<\/strong> th\u01b0\u1eddng nh\u1eafm v\u00e0o c\u00e1c nh\u00f3m c\u00f3 gi\u00e1 tr\u1ecb th\u00f4ng tin cao.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-2-Nghien-cuu-thoi-quen-cua-nan-nhan\"><\/span><strong>B\u01b0\u1edbc 2: Nghi\u00ean c\u1ee9u th\u00f3i quen c\u1ee7a n\u1ea1n nh\u00e2n<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Sau khi \u0111\u00e3 c\u00f3 m\u1ee5c ti\u00eau, k\u1ebb t\u1ea5n c\u00f4ng b\u1eaft \u0111\u1ea7u theo d\u00f5i v\u00e0 ph\u00e2n t\u00edch th\u00f3i quen tr\u1ef1c tuy\u1ebfn c\u1ee7a nh\u00f3m \u0111\u1ed1i t\u01b0\u1ee3ng n\u00e0y. H\u1ecd t\u00ecm ki\u1ebfm nh\u1eefng trang web m\u00e0 nh\u00f3m ng\u01b0\u1eddi n\u00e0y hay truy c\u1eadp, c\u00e1c trang web n\u00e0y c\u00f3 th\u1ec3 l\u00e0 <a href=\"https:\/\/interdata.vn\/blog\/blog-la-gi\/\">blog<\/a> chuy\u00ean ng\u00e0nh, di\u1ec5n \u0111\u00e0n n\u1ed9i b\u1ed9, trang tin t\u1ee9c c\u00f4ng ty ho\u1eb7c th\u1eadm ch\u00ed l\u00e0 c\u00e1c website b\u00e1n h\u00e0ng ph\u1ed5 bi\u1ebfn. \u0110\u00e2y l\u00e0 b\u01b0\u1edbc quan tr\u1ecdng nh\u1ea5t c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng <strong>Watering Hole Attack<\/strong>.<\/p>\n<figure id=\"attachment_32734\" aria-describedby=\"caption-attachment-32734\" style=\"width: 600px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-32734\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Cach-thuc-hoat-dong-cua-tan-cong-Watering-Hole.webp\" alt=\"C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a t\u1ea5n c\u00f4ng Watering Hole\" width=\"600\" height=\"330\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Cach-thuc-hoat-dong-cua-tan-cong-Watering-Hole.webp 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Cach-thuc-hoat-dong-cua-tan-cong-Watering-Hole-300x165.webp 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><figcaption id=\"caption-attachment-32734\" class=\"wp-caption-text\">C\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a t\u1ea5n c\u00f4ng Watering Hole<\/figcaption><\/figure>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-3-Giang-bay-bang-cach-chen-ma-doc-vao-website-hop-phap\"><\/span><strong>B\u01b0\u1edbc 3: Gi\u0103ng b\u1eaby b\u1eb1ng c\u00e1ch ch\u00e8n m\u00e3 \u0111\u1ed9c v\u00e0o website h\u1ee3p ph\u00e1p<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Khi \u0111\u00e3 t\u00ecm \u0111\u01b0\u1ee3c m\u1ed9t ho\u1eb7c nhi\u1ec1u trang web c\u00f3 l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp l\u1edbn t\u1eeb nh\u00f3m m\u1ee5c ti\u00eau, k\u1ebb t\u1ea5n c\u00f4ng t\u00ecm c\u00e1ch khai th\u00e1c <a href=\"https:\/\/interdata.vn\/blog\/lo-hong-bao-mat-la-gi\/\">l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt<\/a> tr\u00ean c\u00e1c trang web \u0111\u00f3.<\/p>\n<p>Sau khi x\u00e2m nh\u1eadp th\u00e0nh c\u00f4ng, h\u1ecd s\u1ebd ch\u00e8n m\u1ed9t \u0111o\u1ea1n m\u00e3 \u0111\u1ed9c ho\u1eb7c m\u00e3 khai th\u00e1c (exploit kit), \u0111o\u1ea1n m\u00e3 n\u00e0y s\u1ebd t\u1ef1 \u0111\u1ed9ng ch\u1ea1y khi ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp v\u00e0o trang web m\u00e0 h\u1ecd \u0111\u00e3 gi\u0103ng b\u1eaby. \u0110\u00e2y l\u00e0 \u0111i\u1ec3m kh\u00e1c bi\u1ec7t l\u1edbn nh\u1ea5t c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng <strong>Watering Hole Attack<\/strong>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Buoc-4-Cho-doi-va-thu-thap-du-lieu\"><\/span><strong>B\u01b0\u1edbc 4: Ch\u1edd \u0111\u1ee3i v\u00e0 thu th\u1eadp d\u1eef li\u1ec7u<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Khi n\u1ea1n nh\u00e2n truy c\u1eadp v\u00e0o trang web \u0111\u00e3 b\u1ecb nhi\u1ec5m \u0111\u1ed9c, m\u00e3 \u0111\u1ed9c s\u1ebd t\u1ef1 \u0111\u1ed9ng \u0111\u01b0\u1ee3c t\u1ea3i xu\u1ed1ng m\u00e1y t\u00ednh c\u1ee7a h\u1ecd m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea5t k\u1ef3 t\u01b0\u01a1ng t\u00e1c n\u00e0o t\u1eeb ph\u00eda ng\u01b0\u1eddi d\u00f9ng.<\/p>\n<p>M\u00e3 \u0111\u1ed9c n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 l\u1ea5y c\u1eafp th\u00f4ng tin, c\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m gi\u00e1n \u0111i\u1ec7p, ho\u1eb7c chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n h\u1ec7 th\u1ed1ng, \u0111\u00e2y l\u00e0 k\u1ebft qu\u1ea3 c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng <strong>Watering Hole Attack<\/strong> th\u00e0nh c\u00f4ng.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Dau-hieu-cua-mot-cuoc-tan-cong-vao-ho-nuoc\"><\/span><strong>D\u1ea5u hi\u1ec7u c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o h\u1ed1 n\u01b0\u1edbc<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>M\u1eb7c d\u00f9 t\u1ea5n c\u00f4ng &#8220;\u1ed5 n\u01b0\u1edbc&#8221; r\u1ea5t tinh vi, nh\u01b0ng \u0111\u00f4i khi v\u1eabn c\u00f3 nh\u1eefng d\u1ea5u hi\u1ec7u gi\u00fap ch\u00fang ta nh\u1eadn ra s\u1ef1 b\u1ea5t th\u01b0\u1eddng tr\u00ean h\u1ec7 th\u1ed1ng c\u1ee7a m\u00ecnh.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Hieu-suat-may-tinh-va-he-thong-cham-lai\"><\/span><strong>Hi\u1ec7u su\u1ea5t m\u00e1y t\u00ednh v\u00e0 h\u1ec7 th\u1ed1ng ch\u1eadm l\u1ea1i<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>N\u1ebfu m\u00e1y t\u00ednh c\u1ee7a b\u1ea1n \u0111\u1ed9t ng\u1ed9t ch\u1ea1y ch\u1eadm h\u01a1n b\u00ecnh th\u01b0\u1eddng, c\u00e1c \u1ee9ng d\u1ee5ng th\u01b0\u1eddng xuy\u00ean b\u1ecb treo ho\u1eb7c th\u1eddi gian kh\u1edfi \u0111\u1ed9ng l\u00e2u h\u01a1n, \u0111\u00f3 c\u00f3 th\u1ec3 l\u00e0 m\u1ed9t d\u1ea5u hi\u1ec7u \u0111\u00e1ng ng\u1edd. M\u00e3 \u0111\u1ed9c ho\u1ea1t \u0111\u1ed9ng ng\u1ea7m c\u00f3 th\u1ec3 ti\u00eau t\u1ed1n t\u00e0i nguy\u00ean h\u1ec7 th\u1ed1ng, d\u1eabn \u0111\u1ebfn gi\u1ea3m hi\u1ec7u su\u1ea5t.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"He-thong-bi-sap-khong-ro-nguyen-nhan\"><\/span><strong>H\u1ec7 th\u1ed1ng b\u1ecb s\u1eadp kh\u00f4ng r\u00f5 nguy\u00ean nh\u00e2n<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>M\u00e1y t\u00ednh c\u1ee7a b\u1ea1n \u0111\u1ed9t nhi\u00ean b\u1ecb t\u1eaft ngu\u1ed3n ho\u1eb7c m\u00e0n h\u00ecnh xanh (Blue Screen of Death) m\u00e0 kh\u00f4ng c\u00f3 l\u00fd do r\u00f5 r\u00e0ng, l\u1ed7i n\u00e0y c\u00f3 th\u1ec3 do m\u00e3 \u0111\u1ed9c \u0111ang xung \u0111\u1ed9t v\u1edbi c\u00e1c ph\u1ea7n m\u1ec1m kh\u00e1c tr\u00ean h\u1ec7 th\u1ed1ng.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Thay-doi-cai-dat-bao-mat-trinh-duyet\"><\/span><strong>Thay \u0111\u1ed5i c\u00e0i \u0111\u1eb7t b\u1ea3o m\u1eadt tr\u00ecnh duy\u1ec7t<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>M\u1ed9t s\u1ed1 m\u00e3 \u0111\u1ed9c c\u00f3 th\u1ec3 thay \u0111\u1ed5i c\u00e0i \u0111\u1eb7t tr\u00ecnh duy\u1ec7t c\u1ee7a b\u1ea1n m\u00e0 kh\u00f4ng \u0111\u01b0\u1ee3c s\u1ef1 cho ph\u00e9p. V\u00ed d\u1ee5, <a href=\"https:\/\/interdata.vn\/blog\/homepage-la-gi\/\">trang ch\u1ee7<\/a> b\u1ecb thay \u0111\u1ed5i, c\u00e1c thanh c\u00f4ng c\u1ee5 m\u1edbi xu\u1ea5t hi\u1ec7n, ho\u1eb7c c\u00e0i \u0111\u1eb7t b\u1ea3o m\u1eadt b\u1ecb h\u1ea1 c\u1ea5p.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Thieu-tap-tin\"><\/span><strong>Thi\u1ebfu t\u1eadp tin<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>N\u1ebfu b\u1ea1n nh\u1eadn th\u1ea5y m\u1ed9t s\u1ed1 file quan tr\u1ecdng c\u1ee7a m\u00ecnh \u0111\u1ed9t nhi\u00ean bi\u1ebfn m\u1ea5t, n\u00f3 c\u00f3 th\u1ec3 l\u00e0 do m\u1ed9t ch\u01b0\u01a1ng tr\u00ecnh \u0111\u1ed9c h\u1ea1i \u0111ang ho\u1ea1t \u0111\u1ed9ng ng\u1ea7m. M\u1ed9t s\u1ed1 lo\u1ea1i m\u00e3 \u0111\u1ed9c \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 x\u00f3a ho\u1eb7c <a href=\"https:\/\/interdata.vn\/blog\/ma-hoa-du-lieu-data-encryption\/\">m\u00e3 h\u00f3a d\u1eef li\u1ec7u<\/a>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Quang-cao-hoac-cua-so-dan-den-mot-trang-web-cu-the\"><\/span><strong>Qu\u1ea3ng c\u00e1o ho\u1eb7c c\u1eeda s\u1ed5 d\u1eabn \u0111\u1ebfn m\u1ed9t trang web c\u1ee5 th\u1ec3<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Tr\u00ecnh duy\u1ec7t c\u1ee7a b\u1ea1n tr\u00e0n ng\u1eadp c\u00e1c c\u1eeda s\u1ed5 pop-up qu\u1ea3ng c\u00e1o, \u0111\u1eb7c bi\u1ec7t l\u00e0 nh\u1eefng qu\u1ea3ng c\u00e1o h\u01b0\u1edbng \u0111\u1ebfn c\u00e1c trang web kh\u00f4ng li\u00ean quan, \u0111\u00e2y l\u00e0 d\u1ea5u hi\u1ec7u r\u00f5 r\u00e0ng c\u1ee7a m\u1ed9t ph\u1ea7n m\u1ec1m qu\u1ea3ng c\u00e1o (adware) \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t, th\u01b0\u1eddng l\u00e0 m\u1ed9t ph\u1ea7n c\u1ee7a t\u1ea5n c\u00f4ng <strong>Watering Hole Attack<\/strong>.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Ung-dung-moi-hoac-khong-xac-dinh-duoc-tai-xuong\"><\/span><strong>\u1ee8ng d\u1ee5ng m\u1edbi ho\u1eb7c kh\u00f4ng x\u00e1c \u0111\u1ecbnh \u0111\u01b0\u1ee3c t\u1ea3i xu\u1ed1ng<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>M\u1ed9t trong nh\u1eefng d\u1ea5u hi\u1ec7u nguy hi\u1ec3m nh\u1ea5t l\u00e0 vi\u1ec7c xu\u1ea5t hi\u1ec7n c\u00e1c ph\u1ea7n m\u1ec1m l\u1ea1 m\u00e0 b\u1ea1n kh\u00f4ng h\u1ec1 c\u00e0i \u0111\u1eb7t. M\u00e3 \u0111\u1ed9c \u0111\u01b0\u1ee3c c\u00e0i v\u00e0o m\u00e1y c\u00f3 th\u1ec3 t\u1ef1 \u0111\u1ed9ng t\u1ea3i v\u1ec1 th\u00eam c\u00e1c \u1ee9ng d\u1ee5ng kh\u00e1c.<\/p>\n<div>\n<div>\n<h2><span class=\"ez-toc-section\" id=\"Vi-du-ve-cac-cuoc-tan-cong-Watering-Hole-gan-day\"><\/span>V\u00ed d\u1ee5 v\u1ec1 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Watering Hole g\u1ea7n \u0111\u00e2y<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>D\u01b0\u1edbi \u0111\u00e2y l\u00e0 m\u1ed9t s\u1ed1 v\u00ed d\u1ee5 \u0111\u00e1ng ch\u00fa \u00fd v\u1ec1 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng g\u1ea7n \u0111\u00e2y:<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Nam-2016\"><\/span>N\u0103m 2016<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>N\u0103m 2016<\/strong>, m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng Watering Hole nh\u1eb1m v\u00e0o T\u1ed5 ch\u1ee9c H\u00e0ng kh\u00f4ng D\u00e2n d\u1ee5ng Qu\u1ed1c t\u1ebf (ICAO) c\u00f3 tr\u1ee5 s\u1edf t\u1ea1i Montreal \u0111\u00e3 ph\u00e1t t\u00e1n ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i, l\u00e2y nhi\u1ec5m v\u00e0o h\u1ec7 th\u1ed1ng m\u1ea1ng c\u1ee7a t\u1ed5 ch\u1ee9c n\u00e0y.<\/p>\n<p>Nh\u00f3m gi\u00e1n \u0111i\u1ec7p m\u1ea1ng Emissary Panda (hay c\u00f2n g\u1ecdi l\u00e0 APT27) \u0111\u00e3 x\u00e2m nh\u1eadp v\u00e0o website c\u1ee7a ICAO th\u00f4ng qua c\u00e1c m\u00e1y ch\u1ee7 b\u1ecb chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t. Cu\u1ed9c t\u1ea5n c\u00f4ng nh\u1eafm t\u1edbi d\u1eef li\u1ec7u nh\u00e2n vi\u00ean, d\u1eef li\u1ec7u an to\u00e0n v\u00e0 c\u00e1c th\u00f4ng tin nh\u1ea1y c\u1ea3m t\u1eeb nhi\u1ec1u t\u1ed5 ch\u1ee9c kh\u00e1c.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Nam-2017\"><\/span>N\u0103m 2017<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>N\u0103m 2017<\/strong>, m\u1ed9t lo\u1ea1t c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng \u0111\u00e3 nh\u1eafm v\u00e0o website c\u1ee7a ch\u00ednh ph\u1ee7 Ukraine. Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i Petya \u0111\u00e3 l\u00e0m \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn website c\u1ee7a ng\u00e2n h\u00e0ng, b\u00e1o ch\u00ed, c\u00e1c b\u1ed9 ng\u00e0nh v\u00e0 c\u00f4ng ty \u0111i\u1ec7n l\u1ef1c, ng\u01b0\u1eddi ta cho r\u1eb1ng cu\u1ed9c t\u1ea5n c\u00f4ng c\u00f3 ch\u1ee7 \u0111\u00edch n\u00e0y b\u1eaft ngu\u1ed3n t\u1eeb b\u1ea3n c\u1eadp nh\u1eadt c\u1ee7a m\u1ed9t ph\u1ea7n m\u1ec1m k\u1ebf to\u00e1n thu\u1ebf t\u1ea1i Ukraine.<\/p>\n<figure id=\"attachment_32735\" aria-describedby=\"caption-attachment-32735\" style=\"width: 640px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-32735\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Vi-du-ve-cac-cuoc-tan-cong-Watering-Hole.png\" alt=\"V\u00ed d\u1ee5 v\u1ec1 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Watering Hole\" width=\"640\" height=\"360\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Vi-du-ve-cac-cuoc-tan-cong-Watering-Hole.png 640w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Vi-du-ve-cac-cuoc-tan-cong-Watering-Hole-300x169.png 300w\" sizes=\"auto, (max-width: 640px) 100vw, 640px\" \/><figcaption id=\"caption-attachment-32735\" class=\"wp-caption-text\">V\u00ed d\u1ee5 v\u1ec1 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng Watering Hole<\/figcaption><\/figure>\n<h3><span class=\"ez-toc-section\" id=\"Nam-2020\"><\/span>N\u0103m 2020<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>N\u0103m 2020<\/strong>, SolarWinds \u2013 m\u1ed9t nh\u00e0 cung c\u1ea5p ph\u1ea7n m\u1ec1m qu\u1ea3n l\u00fd chu\u1ed7i cung \u1ee9ng CNTT \u2013 \u0111\u00e3 tr\u1edf th\u00e0nh n\u1ea1n nh\u00e2n c\u1ee7a m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng Watering Hole.<\/p>\n<p>Nh\u00f3m gi\u00e1n \u0111i\u1ec7p m\u1ea1ng Nga Nobelium \u0111\u00e3 c\u00e0i m\u00e3 \u0111\u1ed9c v\u00e0o c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m c\u1ee7a SolarWinds, sau \u0111\u00f3 nh\u1eefng b\u1ea3n c\u1eadp nh\u1eadt n\u00e0y \u0111\u01b0\u1ee3c ph\u00e2n ph\u1ed1i \u0111\u1ebfn kh\u00e1ch h\u00e0ng v\u00e0 \u0111\u1ed1i t\u00e1c c\u1ee7a c\u00f4ng ty, bao g\u1ed3m nhi\u1ec1u t\u1eadp \u0111o\u00e0n l\u1edbn v\u00e0 c\u01a1 quan ch\u00ednh ph\u1ee7. V\u1ee5 t\u1ea5n c\u00f4ng \u0111\u00e3 l\u00e0m l\u1ed9 d\u1eef li\u1ec7u, m\u1ea1ng l\u01b0\u1edbi v\u00e0 h\u1ec7 th\u1ed1ng c\u1ee7a h\u00e0ng ngh\u00ecn t\u1ed5 ch\u1ee9c.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Nam-2023\"><\/span>N\u0103m 2023<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>N\u0103m 2023<\/strong>, website c\u1ee7a m\u1ed9t ph\u00f2ng nghi\u00ean c\u1ee9u \u0111\u1ea1i h\u1ecdc t\u1ea1i Nh\u1eadt B\u1ea3n \u0111\u00e3 b\u1ecb t\u1ea5n c\u00f4ng Watering Hole. Cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y c\u00f3 kh\u1ea3 n\u0103ng nh\u1eafm \u0111\u1ebfn sinh vi\u00ean v\u00e0 c\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u.<\/p>\n<p>M\u1eb7c d\u00f9 kh\u00f4ng tr\u1ef1c ti\u1ebfp l\u00e2y nhi\u1ec5m ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u00e0o h\u1ec7 th\u1ed1ng c\u1ee7a ng\u01b0\u1eddi d\u00f9ng, nh\u01b0ng k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 l\u1eeba h\u1ecd nh\u1ea5p v\u00e0o m\u1ed9t th\u00f4ng b\u00e1o b\u1eadt l\u00ean (pop-up), t\u1eeb \u0111\u00f3 t\u1ea3i xu\u1ed1ng v\u00e0 ch\u1ea1y ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c ng\u1ee5y trang d\u01b0\u1edbi d\u1ea1ng b\u1ea3n c\u1eadp nh\u1eadt Adobe Flash Player.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Nam-2024\"><\/span>N\u0103m 2024<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><strong>N\u0103m 2024<\/strong>, m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng Watering Hole nh\u1eb1m v\u00e0o 25 website c\u00f3 li\u00ean quan \u0111\u1ebfn c\u1ed9ng \u0111\u1ed3ng ng\u01b0\u1eddi Kurd \u0111\u00e3 l\u00e0m l\u1ed9 th\u00f4ng tin nh\u1ea1y c\u1ea3m c\u1ee7a ng\u01b0\u1eddi d\u00f9ng. Cu\u1ed9c t\u1ea5n c\u00f4ng n\u00e0y, \u0111\u01b0\u1ee3c \u0111\u1eb7t t\u00ean l\u00e0 <strong>SilentSelfie<\/strong>, bao g\u1ed3m b\u1ed1n h\u00ecnh th\u1ee9c kh\u00e1c nhau: t\u1eeb vi\u1ec7c \u0111\u00e1nh c\u1eafp th\u00f4ng tin v\u1ecb tr\u00ed ng\u01b0\u1eddi d\u00f9ng cho \u0111\u1ebfn c\u00e0i \u0111\u1eb7t \u1ee9ng d\u1ee5ng \u0111\u1ed9c h\u1ea1i tr\u00ean h\u1ec7 \u0111i\u1ec1u h\u00e0nh Android.<\/p>\n<\/div>\n<\/div>\n<h2><span class=\"ez-toc-section\" id=\"So-sanh-Watering-Hole-Attack-voi-tan-cong-Phishing-Malware\"><\/span>So s\u00e1nh Watering Hole Attack v\u1edbi t\u1ea5n c\u00f4ng Phishing, Malware<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0110\u1ec3 hi\u1ec3u r\u00f5 h\u01a1n v\u1ec1 s\u1ef1 tinh vi c\u1ee7a t\u1ea5n c\u00f4ng &#8220;\u1ed5 n\u01b0\u1edbc&#8221;, InterData s\u1ebd so s\u00e1nh n\u00f3 v\u1edbi hai h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng m\u1ea1ng ph\u1ed5 bi\u1ebfn kh\u00e1c l\u00e0 <a href=\"https:\/\/interdata.vn\/blog\/tan-cong-phishing-la-gi\/\">Phishing<\/a> v\u00e0 <a href=\"https:\/\/interdata.vn\/blog\/malware-la-gi\/\">Malware<\/a>.<\/p>\n<ul>\n<li><strong>Phishing (L\u1eeba \u0111\u1ea3o)<\/strong>: L\u00e0 h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng c\u00e1c email gi\u1ea3 m\u1ea1o, tin nh\u1eafn ho\u1eb7c website gi\u1ea3 \u0111\u1ec3 l\u1eeba ng\u01b0\u1eddi d\u00f9ng ti\u1ebft l\u1ed9 th\u00f4ng tin c\u00e1 nh\u00e2n.<\/li>\n<li><strong>Malware (M\u00e3 \u0111\u1ed9c)<\/strong>: L\u00e0 c\u00e1c ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i nh\u01b0 virus, ransomware, spyware \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1ec3 g\u00e2y h\u1ea1i cho h\u1ec7 th\u1ed1ng m\u00e1y t\u00ednh.<\/li>\n<li><strong>Watering Hole Attack<\/strong>: L\u00e0 m\u1ed9t ph\u01b0\u01a1ng th\u1ee9c t\u1ea5n c\u00f4ng tinh vi h\u01a1n, l\u1ee3i d\u1ee5ng c\u00e1c website uy t\u00edn thay v\u00ec email gi\u1ea3 m\u1ea1o nh\u01b0 Phishing. N\u00f3 c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng Malware nh\u01b0 m\u1ed9t c\u00f4ng c\u1ee5 \u0111\u1ec3 l\u00e2y nhi\u1ec5m v\u00e0o m\u00e1y t\u00ednh n\u1ea1n nh\u00e2n.<\/li>\n<\/ul>\n<p>D\u01b0\u1edbi \u0111\u00e2y l\u00e0 b\u1ea3ng\u00a0so s\u00e1nh gi\u1eefa\u00a0t\u1ea5n c\u00f4ng Watering Hole Attack\u00a0v\u1edbi t\u1ea5n c\u00f4ng\u00a0Phishing v\u00e0 Malware\u00a0d\u1ef1a tr\u00ean c\u00e1c\u00a0\u0111\u1eb7c \u0111i\u1ec3m ch\u00ednh:<\/p>\n<div style=\"overflow-x: auto;\">\n<table style=\"width: 100%; border-collapse: collapse; font-family: Arial, Helvetica, sans-serif; border: 1px solid #e9eef8; min-width: 720px;\">\n<thead>\n<tr>\n<th style=\"background: #0d6efd; color: #ffffff; padding: 12px 14px; border-bottom: 2px solid rgba(0, 0, 0, 0.08); text-align: center;\">Ti\u00eau ch\u00ed<\/th>\n<th style=\"background: #0d6efd; color: #ffffff; padding: 12px 14px; border-bottom: 2px solid rgba(0, 0, 0, 0.08); text-align: center;\">Watering Hole Attack<\/th>\n<th style=\"background: #0d6efd; color: #ffffff; padding: 12px 14px; border-bottom: 2px solid rgba(0, 0, 0, 0.08); text-align: center;\">Phishing<\/th>\n<th style=\"background: #0d6efd; color: #ffffff; padding: 12px 14px; border-bottom: 2px solid rgba(0, 0, 0, 0.08); text-align: center;\">Malware<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr style=\"background: #ffffff;\">\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">M\u1ee5c ti\u00eau<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Nh\u00f3m ng\u01b0\u1eddi d\u00f9ng c\u1ee5 th\u1ec3, d\u1ef1a tr\u00ean website h\u1ecd th\u01b0\u1eddng truy c\u1eadp<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">S\u1ed1 \u0111\u00f4ng ng\u01b0\u1eddi d\u00f9ng r\u1ed9ng l\u1edbn, th\u01b0\u1eddng l\u00e0 qua email ho\u1eb7c tin nh\u1eafn gi\u1ea3 m\u1ea1o<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">B\u1ea5t k\u1ef3 h\u1ec7 th\u1ed1ng hay ng\u01b0\u1eddi d\u00f9ng n\u00e0o, nhi\u1ec5m qua nhi\u1ec1u c\u00e1ch kh\u00e1c nhau<\/td>\n<\/tr>\n<tr style=\"background: #f8fbff;\">\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Ph\u01b0\u01a1ng th\u1ee9c<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">T\u1ea5n c\u00f4ng v\u00e0 nhi\u1ec5m m\u00e3 \u0111\u1ed9c l\u00ean website quen thu\u1ed9c c\u1ee7a n\u1ea1n nh\u00e2n, ch\u1edd ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp \u0111\u1ec3 l\u00e2y nhi\u1ec5m<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">G\u1eedi email ho\u1eb7c tin nh\u1eafn l\u1eeba \u0111\u1ea3o \u0111\u1ec3 d\u1ee5 ng\u01b0\u1eddi d\u00f9ng click link ho\u1eb7c khai b\u00e1o th\u00f4ng tin<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">C\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i tr\u00ean m\u00e1y n\u1ea1n nh\u00e2n \u0111\u1ec3 thao t\u00fang ho\u1eb7c \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u<\/td>\n<\/tr>\n<tr style=\"background: #ffffff;\">\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">\u0110\u00f2i h\u1ecfi v\u1ec1 nghi\u00ean c\u1ee9u<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Cao, c\u1ea7n t\u00ecm hi\u1ec3u k\u1ef9 v\u1ec1 th\u00f3i quen truy c\u1eadp v\u00e0 ph\u1ea7n m\u1ec1m s\u1eed d\u1ee5ng c\u1ee7a n\u1ea1n nh\u00e2n<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Th\u1ea5p h\u01a1n, t\u1ea5n c\u00f4ng r\u1ed9ng r\u00e3i kh\u00f4ng c\u00e1 nh\u00e2n h\u00f3a nhi\u1ec1u<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Thay \u0111\u1ed5i t\u00f9y lo\u1ea1i malware, c\u00f3 th\u1ec3 c\u1ea7n nghi\u00ean c\u1ee9u t\u00f9y m\u1ee5c ti\u00eau<\/td>\n<\/tr>\n<tr style=\"background: #f8fbff;\">\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">H\u00ecnh th\u1ee9c l\u00e2y nhi\u1ec5m<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Qua website b\u1ecb nhi\u1ec5m m\u00e3 \u0111\u1ed9c ho\u1eb7c gi\u1ea3 m\u1ea1o<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Qua link ho\u1eb7c file \u0111\u00ednh k\u00e8m trong email\/tin nh\u1eafn<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Qua nhi\u1ec1u h\u00ecnh th\u1ee9c nh\u01b0 t\u1ea3i file, l\u1ed7 h\u1ed5ng h\u1ec7 th\u1ed1ng, drive-by downloads<\/td>\n<\/tr>\n<tr style=\"background: #ffffff;\">\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">D\u1ec5 ph\u00e1t hi\u1ec7n<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Kh\u00f3 h\u01a1n v\u00ec d\u00f9ng c\u00e1c website h\u1ee3p ph\u00e1p b\u1ecb t\u1ea5n c\u00f4ng ho\u1eb7c gi\u1ea3 m\u1ea1o<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">D\u1ec5 h\u01a1n, ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 nh\u1eadn ra email\/tin nh\u1eafn gi\u1ea3 m\u1ea1o<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">T\u00f9y lo\u1ea1i malware, m\u1ed9t s\u1ed1 d\u1ec5 b\u1ecb ph\u00e1t hi\u1ec7n, m\u1ed9t s\u1ed1 fileless r\u1ea5t kh\u00f3 ph\u00e1t hi\u1ec7n<\/td>\n<\/tr>\n<tr style=\"background: #f8fbff;\">\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">M\u1ee5c \u0111\u00edch ch\u00ednh<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Nhi\u1ec5m m\u00e3 \u0111\u1ed9c ph\u1ee9c t\u1ea1p, truy c\u1eadp m\u1ea1ng n\u1ed9i b\u1ed9 ho\u1eb7c thu th\u1eadp th\u00f4ng tin l\u00e2u d\u00e0i<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">Chi\u1ebfm \u0111o\u1ea1t th\u00f4ng tin \u0111\u0103ng nh\u1eadp, ti\u1ec1n b\u1ea1c m\u1ed9t c\u00e1ch tr\u1ef1c ti\u1ebfp<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; vertical-align: top;\">\u0110i\u1ec1u khi\u1ec3n m\u00e1y t\u00ednh, \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u, m\u00e3 h\u00f3a \u0111\u00f2i ti\u1ec1n chu\u1ed9c, v.v.<\/td>\n<\/tr>\n<tr style=\"background: #ffffff;\">\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; border-bottom: 1px solid #e9eef8; vertical-align: top;\">Ph\u1ea1m vi t\u00e1c \u0111\u1ed9ng<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; border-bottom: 1px solid #e9eef8; vertical-align: top;\">Thu h\u1eb9p, t\u1eadp trung v\u00e0o m\u1ed9t nh\u00f3m ng\u01b0\u1eddi ho\u1eb7c t\u1ed5 ch\u1ee9c c\u1ee5 th\u1ec3<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; border-bottom: 1px solid #e9eef8; vertical-align: top;\">R\u1ed9ng l\u1edbn, nh\u1eafm nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng kh\u00e1c nhau<\/td>\n<td style=\"padding: 12px 14px; border-top: 1px solid #f1f5fb; border-bottom: 1px solid #e9eef8; vertical-align: top;\">R\u1ed9ng ho\u1eb7c h\u1eb9p t\u00f9y lo\u1ea1i v\u00e0 m\u1ee5c ti\u00eau t\u1ea5n c\u00f4ng<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<p>Watering Hole Attack l\u00e0 m\u1ed9t h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng gi\u00e1n ti\u1ebfp, tinh vi h\u01a1n khi t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c website m\u00e0 n\u1ea1n nh\u00e2n th\u01b0\u1eddng xuy\u00ean truy c\u1eadp \u0111\u1ec3 l\u00e2y nhi\u1ec5m malware, t\u1eadp trung cao v\u00e0o \u0111\u1ed1i t\u01b0\u1ee3ng c\u1ee5 th\u1ec3.<\/p>\n<p>Trong khi \u0111\u00f3, Phishing l\u00e0 t\u1ea5n c\u00f4ng tr\u1ef1c ti\u1ebfp qua email ho\u1eb7c tin nh\u1eafn \u0111\u1ec3 d\u1ee5 n\u1ea1n nh\u00e2n cung c\u1ea5p th\u00f4ng tin hay t\u1ea3i malware, c\u00f2n Malware l\u00e0 ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i c\u00f3 th\u1ec3 x\u00e2m nh\u1eadp b\u1eb1ng nhi\u1ec1u c\u00e1ch kh\u00e1c nhau. Watering Hole Attack th\u01b0\u1eddng kh\u00f3 ph\u00e1t hi\u1ec7n h\u01a1n do d\u00f9ng website h\u1ee3p ph\u00e1p b\u1ecb nhi\u1ec5m ho\u1eb7c gi\u1ea3 m\u1ea1o \u0111\u1ec3 t\u1ea5n c\u00f4ng.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cach-phong-chong-Watering-Hole-Attack-hieu-qua\"><\/span>C\u00e1ch ph\u00f2ng ch\u1ed1ng Watering Hole Attack hi\u1ec7u qu\u1ea3<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<div>\n<div>\n<p>\u0110\u1ed1i m\u1eb7t v\u1edbi m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng tinh vi nh\u01b0 <strong>Watering Hole Attack<\/strong>, vi\u1ec7c ph\u00f2ng ch\u1ed1ng kh\u00f4ng th\u1ec3 ch\u1ec9 d\u1eebng l\u1ea1i \u1edf c\u00e1c bi\u1ec7n ph\u00e1p c\u01a1 b\u1ea3n. Ch\u00fang ta c\u1ea7n \u00e1p d\u1ee5ng m\u1ed9t chi\u1ebfn l\u01b0\u1ee3c \u0111a l\u1edbp, k\u1ebft h\u1ee3p gi\u1eefa c\u00f4ng ngh\u1ec7, ch\u00ednh s\u00e1ch v\u00e0 n\u00e2ng cao nh\u1eadn th\u1ee9c.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"1-Phong-chong-o-cap-do-ca-nhan\"><\/span><strong>1. Ph\u00f2ng ch\u1ed1ng \u1edf c\u1ea5p \u0111\u1ed9 c\u00e1 nh\u00e2n<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng c\u00e1 nh\u00e2n, vi\u1ec7c b\u1ea3o v\u1ec7 b\u1ea3n th\u00e2n b\u1eaft \u0111\u1ea7u t\u1eeb nh\u1eefng th\u00f3i quen l\u01b0\u1edbt web h\u00e0ng ng\u00e0y.<\/p>\n<h4><strong>C\u1eadp nh\u1eadt Ph\u1ea7n m\u1ec1m v\u00e0 H\u1ec7 \u0111i\u1ec1u h\u00e0nh Th\u01b0\u1eddng xuy\u00ean<\/strong><\/h4>\n<p>\u0110\u00e2y l\u00e0 l\u1edbp ph\u00f2ng th\u1ee7 \u0111\u1ea7u ti\u00ean v\u00e0 quan tr\u1ecdng nh\u1ea5t. K\u1ebb t\u1ea5n c\u00f4ng Watering Hole Attack th\u01b0\u1eddng khai th\u00e1c c\u00e1c l\u1ed7 h\u1ed5ng b\u1ea3o m\u1eadt ch\u01b0a \u0111\u01b0\u1ee3c v\u00e1 trong tr\u00ecnh duy\u1ec7t web, h\u1ec7 \u0111i\u1ec1u h\u00e0nh (nh\u01b0 Windows, macOS) v\u00e0 c\u00e1c plugin. Lu\u00f4n b\u1eadt t\u00ednh n\u0103ng c\u1eadp nh\u1eadt t\u1ef1 \u0111\u1ed9ng \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o c\u00e1c b\u1ea3n v\u00e1 b\u1ea3o m\u1eadt m\u1edbi nh\u1ea5t \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t k\u1ecbp th\u1eddi, b\u1ecbt k\u00edn nh\u1eefng &#8220;l\u1ed7 h\u1ed5ng&#8221; m\u00e0 k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng.<\/p>\n<h4><strong>S\u1eed d\u1ee5ng Tr\u00ecnh duy\u1ec7t v\u00e0 Ph\u1ea7n m\u1ec1m B\u1ea3o m\u1eadt M\u1ea1nh m\u1ebd<\/strong><\/h4>\n<p>L\u1ef1a ch\u1ecdn c\u00e1c tr\u00ecnh duy\u1ec7t web hi\u1ec7n \u0111\u1ea1i c\u00f3 t\u00ednh n\u0103ng b\u1ea3o m\u1eadt t\u00edch h\u1ee3p. Quan tr\u1ecdng h\u01a1n, h\u00e3y s\u1eed d\u1ee5ng m\u1ed9t ph\u1ea7n m\u1ec1m di\u1ec7t virus ho\u1eb7c EDR (Endpoint Detection and Response) uy t\u00edn. Nh\u1eefng c\u00f4ng c\u1ee5 n\u00e0y c\u00f3 th\u1ec3 ph\u00e1t hi\u1ec7n h\u00e0nh vi b\u1ea5t th\u01b0\u1eddng, ngay c\u1ea3 khi m\u00e3 \u0111\u1ed9c ch\u01b0a \u0111\u01b0\u1ee3c ghi nh\u1eadn trong c\u01a1 s\u1edf d\u1eef li\u1ec7u.<\/p>\n<h4><strong>C\u00e0i \u0111\u1eb7t c\u00e1c Ti\u1ec7n \u00edch m\u1edf r\u1ed9ng B\u1ea3o m\u1eadt<\/strong><\/h4>\n<p>C\u00e1c ti\u1ec7n \u00edch nh\u01b0 ch\u1eb7n qu\u1ea3ng c\u00e1o (Ad Blocker) hay ch\u1eb7n script (NoScript) c\u00f3 th\u1ec3 ng\u0103n ch\u1eb7n c\u00e1c \u0111o\u1ea1n m\u00e3 \u0111\u1ed9c h\u1ea1i ch\u1ea1y t\u1ef1 \u0111\u1ed9ng khi b\u1ea1n truy c\u1eadp m\u1ed9t trang web. \u0110i\u1ec1u n\u00e0y s\u1ebd gi\u00fap l\u00e0m gi\u1ea3m \u0111\u00e1ng k\u1ec3 r\u1ee7i ro b\u1ecb t\u1ea5n c\u00f4ng &#8220;\u1ed5 n\u01b0\u1edbc&#8221;.<\/p>\n<figure id=\"attachment_32736\" aria-describedby=\"caption-attachment-32736\" style=\"width: 709px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-32736\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Cach-phong-chong-Watering-Hole-Attack-hieu-qua.webp\" alt=\"C\u00e1ch ph\u00f2ng ch\u1ed1ng Watering Hole Attack hi\u1ec7u qu\u1ea3\" width=\"709\" height=\"403\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Cach-phong-chong-Watering-Hole-Attack-hieu-qua.webp 709w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/08\/Cach-phong-chong-Watering-Hole-Attack-hieu-qua-300x171.webp 300w\" sizes=\"auto, (max-width: 709px) 100vw, 709px\" \/><figcaption id=\"caption-attachment-32736\" class=\"wp-caption-text\">C\u00e1ch ph\u00f2ng ch\u1ed1ng Watering Hole Attack hi\u1ec7u qu\u1ea3<\/figcaption><\/figure>\n<h3><span class=\"ez-toc-section\" id=\"2-Phong-chong-o-cap-do-to-chuc\"><\/span><strong>2. Ph\u00f2ng ch\u1ed1ng \u1edf c\u1ea5p \u0111\u1ed9 t\u1ed5 ch\u1ee9c<\/strong><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u1ed1i v\u1edbi doanh nghi\u1ec7p, m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng &#8220;\u1ed5 n\u01b0\u1edbc&#8221; c\u00f3 th\u1ec3 g\u00e2y ra nh\u1eefng h\u1eadu qu\u1ea3 nghi\u00eam tr\u1ecdng. Do \u0111\u00f3, c\u1ea7n c\u00f3 m\u1ed9t chi\u1ebfn l\u01b0\u1ee3c b\u1ea3o m\u1eadt to\u00e0n di\u1ec7n.<\/p>\n<h4><strong>\u0110\u00e0o t\u1ea1o Nh\u1eadn th\u1ee9c B\u1ea3o m\u1eadt cho Nh\u00e2n vi\u00ean<\/strong><\/h4>\n<p>Con ng\u01b0\u1eddi lu\u00f4n l\u00e0 &#8220;m\u1eaft x\u00edch&#8221; y\u1ebfu nh\u1ea5t. Doanh nghi\u1ec7p c\u1ea7n t\u1ed5 ch\u1ee9c c\u00e1c bu\u1ed5i \u0111\u00e0o t\u1ea1o \u0111\u1ecbnh k\u1ef3 \u0111\u1ec3 nh\u00e2n vi\u00ean hi\u1ec3u r\u00f5 c\u00e1c m\u1ed1i \u0111e d\u1ecda, nh\u1eadn di\u1ec7n c\u00e1c d\u1ea5u hi\u1ec7u b\u1ea5t th\u01b0\u1eddng v\u00e0 bi\u1ebft c\u00e1ch b\u00e1o c\u00e1o s\u1ef1 c\u1ed1. V\u00ed d\u1ee5, \u0111\u00e0o t\u1ea1o h\u1ecd c\u00e1ch nh\u1eadn bi\u1ebft m\u1ed9t website uy t\u00edn v\u00e0 c\u00e1c r\u1ee7i ro khi truy c\u1eadp v\u00e0o nh\u1eefng trang web kh\u00f4ng li\u00ean quan \u0111\u1ebfn c\u00f4ng vi\u1ec7c.<\/p>\n<h4><strong>Tri\u1ec3n khai H\u1ec7 th\u1ed1ng B\u1ea3o m\u1eadt M\u1ea1ng chuy\u00ean s\u00e2u<\/strong><\/h4>\n<ul>\n<li><strong>H\u1ec7 th\u1ed1ng IDS\/IPS (Intrusion Detection\/Prevention System):<\/strong> Gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp m\u1ea1ng \u0111\u1ec3 ph\u00e1t hi\u1ec7n v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c ho\u1ea1t \u0111\u1ed9ng \u0111\u00e1ng ng\u1edd. IDS s\u1ebd c\u1ea3nh b\u00e1o, c\u00f2n IPS s\u1ebd ch\u1ee7 \u0111\u1ed9ng ch\u1eb7n c\u00e1c lu\u1ed3ng d\u1eef li\u1ec7u c\u00f3 d\u1ea5u hi\u1ec7u \u0111\u1ed9c h\u1ea1i.<\/li>\n<li><strong>T\u01b0\u1eddng l\u1eeda \u1ee8ng d\u1ee5ng Web (WAF &#8211; Web Application Firewall):<\/strong> B\u1ea3o v\u1ec7 c\u00e1c m\u00e1y ch\u1ee7 web c\u1ee7a b\u1ea1n. WAF s\u1ebd l\u1ecdc v\u00e0 gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng HTTP\/HTTPS gi\u1eefa \u1ee9ng d\u1ee5ng web v\u00e0 Internet, ng\u0103n ch\u1eb7n vi\u1ec7c ch\u00e8n m\u00e3 \u0111\u1ed9c v\u00e0o c\u00e1c website c\u1ee7a b\u1ea1n, t\u1eeb \u0111\u00f3 ph\u00f2ng ng\u1eeba r\u1ee7i ro cho ng\u01b0\u1eddi d\u00f9ng.<\/li>\n<li><strong>Ph\u00e2n \u0111o\u1ea1n M\u1ea1ng (Network Segmentation):<\/strong> Chia m\u1ea1ng n\u1ed9i b\u1ed9 th\u00e0nh c\u00e1c ph\u00e2n v\u00f9ng nh\u1ecf. \u0110i\u1ec1u n\u00e0y s\u1ebd h\u1ea1n ch\u1ebf kh\u1ea3 n\u0103ng &#8220;t\u1ea5n c\u00f4ng theo chi\u1ec1u ngang&#8221; c\u1ee7a k\u1ebb x\u1ea5u. N\u1ebfu m\u1ed9t m\u00e1y t\u00ednh b\u1ecb l\u00e2y nhi\u1ec5m, m\u00e3 \u0111\u1ed9c s\u1ebd kh\u00f3 c\u00f3 th\u1ec3 di chuy\u1ec3n sang c\u00e1c m\u00e1y ch\u1ee7 ho\u1eb7c h\u1ec7 th\u1ed1ng quan tr\u1ecdng kh\u00e1c.<\/li>\n<\/ul>\n<h4><strong>\u00c1p d\u1ee5ng Nguy\u00ean t\u1eafc \u0110\u1eb7c quy\u1ec1n T\u1ed1i thi\u1ec3u (Principle of Least Privilege)<\/strong><\/h4>\n<p>Nh\u00e2n vi\u00ean ch\u1ec9 n\u00ean c\u00f3 quy\u1ec1n truy c\u1eadp v\u00e0o nh\u1eefng t\u00e0i nguy\u00ean c\u1ea7n thi\u1ebft cho c\u00f4ng vi\u1ec7c c\u1ee7a h\u1ecd s\u1ebd l\u00e0m gi\u1ea3m \u0111\u00e1ng k\u1ec3 ph\u1ea1m vi thi\u1ec7t h\u1ea1i n\u1ebfu m\u1ed9t t\u00e0i kho\u1ea3n b\u1ecb x\u00e2m nh\u1eadp.<\/p>\n<p>B\u1eb1ng c\u00e1ch k\u1ebft h\u1ee3p c\u1ea3 bi\u1ec7n ph\u00e1p k\u1ef9 thu\u1eadt v\u00e0 nh\u1eadn th\u1ee9c, InterData tin r\u1eb1ng c\u1ea3 c\u00e1 nh\u00e2n v\u00e0 t\u1ed5 ch\u1ee9c c\u00f3 th\u1ec3 x\u00e2y d\u1ef1ng m\u1ed9t l\u00e1 ch\u1eafn v\u1eefng ch\u1eafc, gi\u1ea3m thi\u1ec3u t\u1ed1i \u0111a r\u1ee7i ro t\u1eeb c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng tinh vi nh\u01b0 <strong>Watering Hole Attack<\/strong>.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cac-hinh-thuc-khai-thac-bao-mat-tuong-tu-Watering-Hole-Attack\"><\/span>C\u00e1c h\u00ecnh th\u1ee9c khai th\u00e1c b\u1ea3o m\u1eadt t\u01b0\u01a1ng t\u1ef1 Watering Hole Attack<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>M\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng Watering Hole c\u00f3 \u0111i\u1ec3m t\u01b0\u01a1ng \u0111\u1ed3ng v\u1edbi m\u1ed9t s\u1ed1 chi\u1ebfn thu\u1eadt kh\u00e1c m\u00e0 tin t\u1eb7c th\u01b0\u1eddng s\u1eed d\u1ee5ng:<\/p>\n<p><strong>T\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng (Supply chain attack)<\/strong><\/p>\n<p>Trong c\u1ea3 t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng v\u00e0 Watering Hole, k\u1ebb t\u1ea5n c\u00f4ng \u0111\u1ec1u <strong>khai th\u00e1c m\u1ed9t d\u1ecbch v\u1ee5 c\u1ee7a b\u00ean th\u1ee9 ba \u0111\u1ec3 l\u00e2y nhi\u1ec5m sang c\u00e1c h\u1ec7 th\u1ed1ng kh\u00e1c<\/strong>. Tuy nhi\u00ean, \u1edf t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng, s\u1ea3n ph\u1ea9m m\u00e0 n\u1ea1n nh\u00e2n mua th\u01b0\u1eddng b\u1ecb c\u00e0i m\u00e3 \u0111\u1ed9c, trong khi \u1edf Watering Hole, k\u1ebb t\u1ea5n c\u00f4ng l\u1ea1i chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n c\u00e1c website trung gian.<\/p>\n<p><strong>T\u1ea5n c\u00f4ng Honeypot<\/strong><\/p>\n<p>Trong t\u1ea5n c\u00f4ng honeypot, k\u1ebb t\u1ea5n c\u00f4ng <strong>t\u1ea1o ra m\u1ed9t m\u1ee5c ti\u00eau h\u1ea5p d\u1eabn \u0111\u1ec3 d\u1ee5 n\u1ea1n nh\u00e2n h\u00e0nh \u0111\u1ed9ng<\/strong>. Ng\u01b0\u1ee3c l\u1ea1i, Watering Hole l\u1ea1i khai th\u00e1c m\u1ed9t website h\u1ee3p ph\u00e1p m\u00e0 n\u1ea1n nh\u00e2n v\u1ed1n \u0111\u00e3 th\u01b0\u1eddng xuy\u00ean truy c\u1eadp.<\/p>\n<p><strong>T\u1ea5n c\u00f4ng Man-in-the-Middle (MitM)<\/strong><\/p>\n<p>Trong ki\u1ec3u t\u1ea5n c\u00f4ng n\u00e0y, <strong>k\u1ebb x\u1ea5u ch\u1eb7n v\u00e0 \u0111\u1ecdc ho\u1eb7c thay \u0111\u1ed5i d\u1eef li\u1ec7u<\/strong> trao \u0111\u1ed5i gi\u1eefa n\u1ea1n nh\u00e2n v\u00e0 b\u00ean th\u1ee9 ba. Tuy nhi\u00ean, website m\u00e0 n\u1ea1n nh\u00e2n truy c\u1eadp kh\u00f4ng tr\u1ef1c ti\u1ebfp b\u1ecb x\u00e2m nh\u1eadp.<\/p>\n<p><strong>Tailgating (t\u1ea5n c\u00f4ng theo sau)<\/strong><\/p>\n<p>Gi\u1ed1ng v\u1edbi Watering Hole \u1edf ch\u1ed7 k\u1ebb t\u1ea5n c\u00f4ng<strong> l\u1ee3i d\u1ee5ng quy\u1ec1n truy c\u1eadp c\u1ee7a m\u1ed9t ng\u01b0\u1eddi d\u00f9ng h\u1ee3p ph\u00e1p<\/strong>. Tuy nhi\u00ean, Tailgating th\u01b0\u1eddng x\u1ea3y ra \u1edf m\u00f4i tr\u01b0\u1eddng v\u1eadt l\u00fd, khi k\u1ebb x\u1ea5u \u0111i theo s\u00e1t m\u1ed9t ng\u01b0\u1eddi \u0111\u01b0\u1ee3c tin c\u1eady \u0111\u1ec3 v\u00e0o trong khu v\u1ef1c h\u1ea1n ch\u1ebf.<\/p>\n<p><strong>Phishing (l\u1eeba \u0111\u1ea3o qua email)<\/strong><\/p>\n<p>K\u1ebb t\u1ea5n c\u00f4ng <strong>g\u1eedi email c\u00f3 file \u0111\u00ednh k\u00e8m ho\u1eb7c \u0111\u01b0\u1eddng link gi\u1ea3 m\u1ea1o<\/strong>, khi\u1ebfn n\u1ea1n nh\u00e2n t\u01b0\u1edfng r\u1eb1ng email \u0111\u01b0\u1ee3c g\u1eedi t\u1eeb m\u1ed9t ng\u01b0\u1eddi quen nh\u01b0 \u0111\u1ed3ng nghi\u1ec7p ho\u1eb7c b\u1ea1n b\u00e8. Khi n\u1ea1n nh\u00e2n m\u1edf file ho\u1eb7c nh\u1ea5p link, ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i s\u1ebd x\u00e2m nh\u1eadp h\u1ec7 th\u1ed1ng. C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng phishing th\u01b0\u1eddng \u0111\u01b0\u1ee3c g\u1eedi h\u00e0ng lo\u1ea1t t\u1edbi nhi\u1ec1u ng\u01b0\u1eddi \u0111\u1ec3 khai th\u00e1c l\u1ed7 h\u1ed5ng tr\u00ean di\u1ec7n r\u1ed9ng.<\/p>\n<p><strong>Spear phishing<\/strong><\/p>\n<p>Kh\u00e1c v\u1edbi phishing th\u00f4ng th\u01b0\u1eddng, spear phishing mang t\u00ednh nh\u1eafm m\u1ee5c ti\u00eau cao. Tin t\u1eb7c s\u1ebd nghi\u00ean c\u1ee9u k\u1ef9 v\u1ec1 t\u1ed5 ch\u1ee9c v\u00e0 ch\u1ecdn ra nh\u1eefng c\u00e1 nh\u00e2n c\u00f3 quy\u1ec1n truy c\u1eadp th\u00f4ng tin quan tr\u1ecdng. Sau \u0111\u00f3, ch\u00fang <strong>t\u1ea1o ra email gi\u1ea3 m\u1ea1o \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf tinh vi, k\u00e8m file \u0111\u00ednh k\u00e8m ho\u1eb7c link<\/strong>, khi\u1ebfn ng\u01b0\u1eddi nh\u1eadn tin r\u1eb1ng email \u0111\u1ebfn t\u1eeb n\u1ed9i b\u1ed9 c\u00f4ng ty. Khi n\u1ea1n nh\u00e2n m\u1edf email, ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i s\u1ebd \u0111\u01b0\u1ee3c c\u00e0i v\u00e0o h\u1ec7 th\u1ed1ng.<\/p>\n<\/div>\n<\/div>\n<div>\n<div>\n<div>Watering Hole Attack l\u00e0 m\u1ed9t l\u1eddi nh\u1eafc nh\u1edf r\u1eb1ng ch\u00fang ta kh\u00f4ng th\u1ec3 ch\u1ee7 quan v\u1ec1 b\u1ea3o m\u1eadt m\u1ea1ng. B\u1eb1ng c\u00e1ch hi\u1ec3u r\u00f5 c\u00e1ch th\u1ee9c ho\u1ea1t \u0111\u1ed9ng v\u00e0 \u00e1p d\u1ee5ng c\u00e1c bi\u1ec7n ph\u00e1p ph\u00f2ng ch\u1ed1ng hi\u1ec7u qu\u1ea3, ch\u00fang ta c\u00f3 th\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro v\u00e0 b\u1ea3o v\u1ec7 th\u00f4ng tin quan tr\u1ecdng. <strong><a href=\"https:\/\/interdata.vn\/\">InterData<\/a> <\/strong>tin r\u1eb1ng, ki\u1ebfn th\u1ee9c l\u00e0 l\u00e1 ch\u1eafn t\u1ed1t nh\u1ea5t \u0111\u1ec3 ch\u1ed1ng l\u1ea1i c\u00e1c m\u1ed1i \u0111e d\u1ecda tr\u1ef1c tuy\u1ebfn.<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Trong th\u1eddi \u0111\u1ea1i tr\u1ef1c tuy\u1ebfn ng\u00e0y nay, h\u1ea7u h\u1ebft ch\u00fang ta \u0111\u1ec1u bi\u1ebft c\u00e1ch \u0111\u1ec1 ph\u00f2ng nh\u1eefng m\u1ed1i nguy hi\u1ec3m r\u00f5 r\u00e0ng nh\u01b0 link \u0111\u1ed9c h\u1ea1i hay file \u0111\u00ednh k\u00e8m \u0111\u00e1ng ng\u1edd. Tuy nhi\u00ean, c\u00f3 m\u1ed9t ki\u1ec3u t\u1ea5n c\u00f4ng tinh vi h\u01a1n \u0111\u00f3 ch\u00ednh l\u00e0 Watering Hole Attack. C\u00f9ng t\u00ecm hi\u1ec3u h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng<\/p>\n","protected":false},"author":11,"featured_media":32739,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[83],"tags":[],"class_list":["post-32725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bao-mat-an-ninh-mang"],"_links":{"self":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/32725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/comments?post=32725"}],"version-history":[{"count":11,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/32725\/revisions"}],"predecessor-version":[{"id":37519,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/32725\/revisions\/37519"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/media\/32739"}],"wp:attachment":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/media?parent=32725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/categories?post=32725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/tags?post=32725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}