{"id":1131,"date":"2026-04-25T13:01:34","date_gmt":"2026-04-25T06:01:34","guid":{"rendered":"https:\/\/vncybers.vn\/ho-so-nhom-apt37-reaper-moi-de-doa-dai-dang-nham-vao-ha-tang-khu-vuc\/"},"modified":"2026-04-25T20:59:09","modified_gmt":"2026-04-25T13:59:09","slug":"ho-so-nhom-apt37-reaper-moi-de-doa-dai-dang-nham-vao-ha-tang-khu-vuc","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/ho-so-nhom-apt37-reaper-moi-de-doa-dai-dang-nham-vao-ha-tang-khu-vuc\/","title":{"rendered":"H\u1ed3 s\u01a1 nh\u00f3m APT37 (Reaper): M\u1ed1i \u0111e d\u1ecda dai d\u1eb3ng nh\u1eafm v\u00e0o h\u1ea1 t\u1ea7ng khu v\u1ef1c"},"content":{"rendered":"<p>Nh\u00f3m APT37, c\u00f2n \u0111\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn v\u1edbi t\u00ean g\u1ecdi Reaper ho\u1eb7c Ricochet Chollima, l\u00e0 m\u1ed9t trong nh\u1eefng nh\u00f3m t\u1ea5n c\u00f4ng c\u00f3 t\u1ed5 ch\u1ee9c v\u00e0 tinh vi nh\u1ea5t \u0111ang ho\u1ea1t \u0111\u1ed9ng t\u1ea1i khu v\u1ef1c Ch\u00e2u \u00c1. V\u1edbi l\u1ecbch s\u1eed ho\u1ea1t \u0111\u1ed9ng k\u00e9o d\u00e0i h\u01a1n m\u1ed9t th\u1eadp k\u1ef7, nh\u00f3m n\u00e0y \u0111\u00e3 li\u00ean t\u1ee5c ti\u1ebfn h\u00f3a c\u00e1c ph\u01b0\u01a1ng th\u1ee9c t\u1ea5n c\u00f4ng \u0111\u1ec3 v\u01b0\u1ee3t qua c\u00e1c r\u00e0o c\u1ea3n an ninh hi\u1ec7n \u0111\u1ea1i nh\u1ea5t tr\u00ean Internet.<\/p>\n<p><strong>Ngu\u1ed3n g\u1ed1c v\u00e0 l\u1ecbch s\u1eed ho\u1ea1t \u0111\u1ed9ng<\/strong><\/p>\n<p>Xu\u1ea5t hi\u1ec7n t\u1eeb kho\u1ea3ng n\u0103m 2012, APT37 ban \u0111\u1ea7u t\u1eadp trung v\u00e0o c\u00e1c m\u1ee5c ti\u00eau ch\u00ednh tr\u1ecb v\u00e0 qu\u00e2n s\u1ef1. Tuy nhi\u00ean, trong nh\u1eefng n\u0103m g\u1ea7n \u0111\u00e2y, ph\u1ea1m vi t\u1ea5n c\u00f4ng c\u1ee7a nh\u00f3m \u0111\u00e3 m\u1edf r\u1ed9ng \u0111\u00e1ng k\u1ec3 sang c\u00e1c l\u0129nh v\u1ef1c kinh t\u1ebf, h\u1ea1 t\u1ea7ng tr\u1ecdng y\u1ebfu v\u00e0 c\u1ea3 c\u00e1c t\u1ed5 ch\u1ee9c truy\u1ec1n th\u00f4ng. \u0110\u1eb7c \u0111i\u1ec3m nh\u1eadn d\u1ea1ng ch\u00ednh c\u1ee7a nh\u00f3m l\u00e0 kh\u1ea3 n\u0103ng t\u1ef1 ph\u00e1t tri\u1ec3n c\u00e1c c\u00f4ng c\u1ee5 \u0111\u1ed9c m\u00e3 (malware) t\u00f9y bi\u1ebfn thay v\u00ec ch\u1ec9 s\u1eed d\u1ee5ng c\u00e1c c\u00f4ng c\u1ee5 c\u00f3 s\u1eb5n.<\/p>\n<p><strong>C\u00e1c k\u1ef9 thu\u1eadt t\u1ea5n c\u00f4ng \u0111i\u1ec3n h\u00ecnh (TTPs)<\/strong><\/p>\n<p>APT37 n\u1ed5i ti\u1ebfng v\u1edbi vi\u1ec7c s\u1eed d\u1ee5ng c\u00e1c chi\u1ebfn d\u1ecbch email l\u1eeba \u0111\u1ea3o (spear-phishing) c\u1ef1c k\u1ef3 tinh vi. C\u00e1c email n\u00e0y th\u01b0\u1eddng gi\u1ea3 m\u1ea1o c\u00e1c th\u00f4ng b\u00e1o ch\u00ednh th\u1ed1ng ho\u1eb7c t\u00e0i li\u1ec7u nghi\u00ean c\u1ee9u \u0111\u1ec3 l\u1eeba m\u1ee5c ti\u00eau t\u1ea3i v\u1ec1 c\u00e1c t\u1ec7p tin ch\u1ee9a m\u00e3 \u0111\u1ed9c.<\/p>\n<p>M\u1ed9t s\u1ed1 v\u0169 kh\u00ed k\u1ef9 thu\u1eadt \u0111\u00e1ng ch\u00fa \u00fd c\u1ee7a nh\u00f3m bao g\u1ed3m:<\/p>\n<ul>\n<li>RokRAT: M\u1ed9t lo\u1ea1i Trojan truy c\u1eadp t\u1eeb xa (RAT) tinh vi, c\u00f3 kh\u1ea3 n\u0103ng \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u, ch\u1ee5p m\u00e0n h\u00ecnh v\u00e0 ghi \u00e2m cu\u1ed9c g\u1ecdi.<\/li>\n<li>Khai th\u00e1c l\u1ed7 h\u1ed5ng Zero-day: Nh\u00f3m \u0111\u00e3 t\u1eebng b\u1ecb ph\u00e1t hi\u1ec7n s\u1eed d\u1ee5ng c\u00e1c l\u1ed7 h\u1ed5ng ch\u01b0a \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 trong c\u00e1c ph\u1ea7n m\u1ec1m ph\u1ed5 bi\u1ebfn nh\u01b0 Adobe Flash ho\u1eb7c Microsoft Office \u0111\u1ec3 x\u00e2m nh\u1eadp h\u1ec7 th\u1ed1ng.<\/li>\n<li>S\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 \u0111\u00e1m m\u00e2y: Nh\u00f3m th\u01b0\u1eddng l\u1ee3i d\u1ee5ng c\u00e1c d\u1ecbch v\u1ee5 nh\u01b0 Google Drive ho\u1eb7c Dropbox \u0111\u1ec3 l\u01b0u tr\u1eef m\u00e3 \u0111\u1ed9c v\u00e0 nh\u1eadn d\u1eef li\u1ec7u b\u1ecb \u0111\u00e1nh c\u1eafp nh\u1eb1m tr\u00e1nh b\u1ecb c\u00e1c h\u1ec7 th\u1ed1ng gi\u00e1m s\u00e1t ph\u00e1t hi\u1ec7n.<\/li>\n<\/ul>\n<p><strong>M\u1ee5c ti\u00eau nh\u1eafm t\u1edbi t\u1ea1i Vi\u1ec7t Nam v\u00e0 khu v\u1ef1c<\/strong><\/p>\n<p>Trong c\u00e1c b\u00e1o c\u00e1o an ninh m\u1edbi nh\u1ea5t \u0111\u1ea7u n\u0103m 2026, APT37 \u0111\u00e3 th\u1ec3 hi\u1ec7n s\u1ef1 quan t\u00e2m \u0111\u1eb7c bi\u1ec7t \u0111\u1ebfn c\u00e1c l\u0129nh v\u1ef1c h\u1ea1 t\u1ea7ng n\u0103ng l\u01b0\u1ee3ng v\u00e0 s\u1ea3n xu\u1ea5t t\u1ea1i khu v\u1ef1c \u0110\u00f4ng Nam \u00c1, bao g\u1ed3m c\u1ea3 Vi\u1ec7t Nam. Vi\u1ec7c thu th\u1eadp th\u00f4ng tin t\u00ecnh b\u00e1o v\u00e0 g\u00e2y r\u1ed1i lo\u1ea1n ho\u1ea1t \u0111\u1ed9ng kinh t\u1ebf d\u01b0\u1eddng nh\u01b0 l\u00e0 m\u1ee5c ti\u00eau ch\u00ednh c\u1ee7a c\u00e1c chi\u1ebfn d\u1ecbch n\u00e0y.<\/p>\n<p><strong>Khuy\u1ebfn ngh\u1ecb ph\u00f2ng th\u1ee7 cho doanh nghi\u1ec7p<\/strong><\/p>\n<p>\u0110\u1ec3 b\u1ea3o v\u1ec7 h\u1ec7 th\u1ed1ng tr\u01b0\u1edbc s\u1ef1 \u0111e d\u1ecda t\u1eeb c\u00e1c nh\u00f3m APT nh\u01b0 Reaper, c\u00e1c doanh nghi\u1ec7p c\u1ea7n th\u1ef1c hi\u1ec7n c\u00e1c bi\u1ec7n ph\u00e1p sau:<\/p>\n<ol>\n<li>\u0110\u00e0o t\u1ea1o nh\u00e2n vi\u00ean: N\u00e2ng cao nh\u1eadn th\u1ee9c v\u1ec1 c\u00e1c h\u00ecnh th\u1ee9c l\u1eeba \u0111\u1ea3o qua email v\u00e0 kh\u00f4ng m\u1edf c\u00e1c t\u1ec7p \u0111\u00ednh k\u00e8m t\u1eeb ngu\u1ed3n l\u1ea1.<\/li>\n<li>C\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng: \u0110\u1ea3m b\u1ea3o t\u1ea5t c\u1ea3 ph\u1ea7n m\u1ec1m v\u00e0 h\u1ec7 \u0111i\u1ec1u h\u00e0nh lu\u00f4n \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt b\u1ea3n v\u00e1 m\u1edbi nh\u1ea5t.<\/li>\n<li>Gi\u00e1m s\u00e1t li\u00ean t\u1ee5c: S\u1eed d\u1ee5ng c\u00e1c gi\u1ea3i ph\u00e1p gi\u00e1m s\u00e1t an ninh m\u1ea1ng \u0111\u1ec3 ph\u00e1t hi\u1ec7n s\u1edbm c\u00e1c d\u1ea5u hi\u1ec7u b\u1ea5t th\u01b0\u1eddng trong l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng.<\/li>\n<li>X\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 (MFA): Tri\u1ec3n khai MFA tr\u00ean to\u00e0n b\u1ed9 c\u00e1c t\u00e0i kho\u1ea3n quan tr\u1ecdng \u0111\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro t\u1eeb vi\u1ec7c l\u1ed9 th\u00f4ng tin \u0111\u0103ng nh\u1eadp.<\/li>\n<\/ol>\n<p>Vi\u1ec7c n\u1eafm v\u1eefng h\u1ed3 s\u01a1 c\u1ee7a c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng gi\u00fap doanh nghi\u1ec7p c\u00f3 c\u00e1i nh\u00ecn ch\u1ee7 \u0111\u1ed9ng h\u01a1n trong vi\u1ec7c x\u00e2y d\u1ef1ng chi\u1ebfn l\u01b0\u1ee3c ph\u00f2ng th\u1ee7 an ninh m\u1ea1ng b\u1ec1n v\u1eefng.<\/p>\n<p>&nbsp;<\/p>\n<p><em>VNCyberS t\u1ed5ng h\u1ee3p t\u1eeb: CYFIRMA, Google Threat Intelligence Group v\u00e0 c\u00e1c ngu\u1ed3n tin qu\u1ed1c t\u1ebf.<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>Nh\u00f3m APT37, c\u00f2n \u0111\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn v\u1edbi t\u00ean g\u1ecdi Reaper ho\u1eb7c Ricochet Chollima, l\u00e0 m\u1ed9t trong nh\u1eefng nh\u00f3m t\u1ea5n c\u00f4ng c\u00f3 t\u1ed5 ch\u1ee9c v\u00e0 tinh vi nh\u1ea5t \u0111ang ho\u1ea1t \u0111\u1ed9ng t\u1ea1i khu v\u1ef1c Ch\u00e2u \u00c1. V\u1edbi l\u1ecbch s\u1eed ho\u1ea1t \u0111\u1ed9ng k\u00e9o d\u00e0i h\u01a1n m\u1ed9t th\u1eadp k\u1ef7, nh\u00f3m n\u00e0y \u0111\u00e3 li\u00ean t\u1ee5c ti\u1ebfn h\u00f3a c\u00e1c ph\u01b0\u01a1ng [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1130,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[70],"tags":[46,115,116,86],"class_list":["post-1131","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ho-so","tag-an-ninh-mang","tag-apt37","tag-ho-so-toi-pham","tag-malware"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1131"}],"version-history":[{"count":5,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1131\/revisions"}],"predecessor-version":[{"id":1142,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1131\/revisions\/1142"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1130"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}