{"id":1230,"date":"2026-05-03T21:05:29","date_gmt":"2026-05-03T14:05:29","guid":{"rendered":"https:\/\/vncybers.vn\/phat-hien-chien-dich-operation-red-sail-tan-cong-vao-cac-msp-tai-viet-nam\/"},"modified":"2026-05-03T21:05:29","modified_gmt":"2026-05-03T14:05:29","slug":"phat-hien-chien-dich-operation-red-sail-tan-cong-vao-cac-msp-tai-viet-nam","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/phat-hien-chien-dich-operation-red-sail-tan-cong-vao-cac-msp-tai-viet-nam\/","title":{"rendered":"Ph\u00e1t hi\u1ec7n chi\u1ebfn d\u1ecbch Operation Red-Sail t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c MSP t\u1ea1i Vi\u1ec7t Nam"},"content":{"rendered":"<h1>Ph\u00e1t hi\u1ec7n chi\u1ebfn d\u1ecbch &#8216;Operation Red-Sail&#8217; t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c MSP t\u1ea1i Vi\u1ec7t Nam<\/h1>\n<p>M\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng c\u00f3 quy m\u00f4 l\u1edbn mang t\u00ean &#8216;Operation Red-Sail&#8217; v\u1eeba \u0111\u01b0\u1ee3c c\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt ph\u00e1t hi\u1ec7n \u0111ang nh\u1eafm m\u1ee5c ti\u00eau tr\u1ef1c ti\u1ebfp v\u00e0o c\u00e1c nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 qu\u1ea3n tr\u1ecb (Managed Service Providers &#8211; MSP) t\u1ea1i Vi\u1ec7t Nam. \u0110\u00e2y l\u00e0 h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng c\u1ef1c k\u1ef3 nguy hi\u1ec3m, n\u01a1i tin t\u1eb7c x\u00e2m nh\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng c\u1ee7a nh\u00e0 cung c\u1ea5p \u0111\u1ec3 t\u1eeb \u0111\u00f3 ti\u1ebfp c\u1eadn h\u1ea1 t\u1ea7ng c\u1ee7a h\u00e0ng tr\u0103m kh\u00e1ch h\u00e0ng doanh nghi\u1ec7p cu\u1ed1i.<\/p>\n<h2>Ph\u01b0\u01a1ng th\u1ee9c t\u1ea5n c\u00f4ng tinh vi<\/h2>\n<p>Theo ph\u00e2n t\u00edch k\u1ef9 thu\u1eadt, chi\u1ebfn d\u1ecbch &#8216;Operation Red-Sail&#8217; s\u1eed d\u1ee5ng m\u1ed9t lo\u1ea1i m\u00e3 \u0111\u1ed9c chuy\u00ean bi\u1ec7t c\u00f3 kh\u1ea3 n\u0103ng v\u01b0\u1ee3t qua c\u00e1c h\u1ec7 th\u1ed1ng EDR truy\u1ec1n th\u1ed1ng. Tin t\u1eb7c b\u1eaft \u0111\u1ea7u b\u1eb1ng c\u00e1ch g\u1eedi c\u00e1c email l\u1eeba \u0111\u1ea3o (phishing) nh\u1eafm v\u00e0o nh\u00e2n vi\u00ean k\u1ef9 thu\u1eadt c\u1ee7a c\u00e1c MSP. C\u00e1c email n\u00e0y ch\u1ee9a li\u00ean k\u1ebft t\u1ea3i xu\u1ed1ng c\u00e1c c\u00f4ng c\u1ee5 qu\u1ea3n tr\u1ecb h\u1ec7 th\u1ed1ng gi\u1ea3 m\u1ea1o nh\u01b0ng th\u1ef1c ch\u1ea5t l\u00e0 m\u00e3 \u0111\u1ed9c &#8216;Stealer&#8217; th\u1ebf h\u1ec7 m\u1edbi.<\/p>\n<p>Sau khi x\u00e2m nh\u1eadp th\u00e0nh c\u00f4ng, m\u00e3 \u0111\u1ed9c s\u1ebd \u00e2m th\u1ea7m thu th\u1eadp th\u00f4ng tin \u0111\u0103ng nh\u1eadp, ch\u1ee9ng ch\u1ec9 b\u1ea3o m\u1eadt v\u00e0 c\u00e1c kh\u00f3a API \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 qu\u1ea3n l\u00fd h\u1ec7 th\u1ed1ng kh\u00e1ch h\u00e0ng. \u0110i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd l\u00e0 &#8216;Operation Red-Sail&#8217; s\u1eed d\u1ee5ng h\u1ea1 t\u1ea7ng \u0111i\u1ec1u khi\u1ec3n (C&#038;C) \u0111\u1eb7t ngay t\u1ea1i c\u00e1c d\u1ea3i IP s\u1ea1ch trong n\u01b0\u1edbc nh\u1eb1m tr\u00e1nh s\u1ef1 ph\u00e1t hi\u1ec7n c\u1ee7a c\u00e1c h\u1ec7 th\u1ed1ng gi\u00e1m s\u00e1t l\u01b0u l\u01b0\u1ee3ng Internet qu\u1ed1c t\u1ebf.<\/p>\n<h2>R\u1ee7i ro nghi\u00eam tr\u1ecdng cho doanh nghi\u1ec7p<\/h2>\n<p>Vi\u1ec7c c\u00e1c MSP b\u1ecb t\u1ea5n c\u00f4ng t\u1ea1o ra m\u1ed9t hi\u1ec7u \u1ee9ng domino \u0111\u00e1ng s\u1ee3. Doanh nghi\u1ec7p khi thu\u00ea d\u1ecbch v\u1ee5 MSP th\u01b0\u1eddng c\u1ea5p quy\u1ec1n truy c\u1eadp qu\u1ea3n tr\u1ecb cao nh\u1ea5t cho nh\u00e0 cung c\u1ea5p. Khi MSP b\u1ecb chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t, to\u00e0n b\u1ed9 d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m, h\u1ec7 th\u1ed1ng t\u00e0i ch\u00ednh v\u00e0 quy tr\u00ecnh v\u1eadn h\u00e0nh c\u1ee7a doanh nghi\u1ec7p kh\u00e1ch h\u00e0ng \u0111\u1ec1u n\u1eb1m trong t\u1ea7m ng\u1eafm c\u1ee7a tin t\u1eb7c.<\/p>\n<p>C\u00e1c chuy\u00ean gia c\u1ea3nh b\u00e1o r\u1eb1ng m\u1ee5c ti\u00eau cu\u1ed1i c\u00f9ng c\u1ee7a &#8216;Operation Red-Sail&#8217; kh\u00f4ng ch\u1ec9 l\u00e0 \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u m\u00e0 c\u00f2n l\u00e0 c\u00e0i \u0111\u1eb7t ransomware \u0111\u1ec3 t\u1ed1ng ti\u1ec1n \u0111\u1ed3ng lo\u1ea1t. \u0110i\u1ec1u n\u00e0y c\u00f3 th\u1ec3 g\u00e2y ra s\u1ef1 gi\u00e1n \u0111o\u1ea1n kinh doanh tr\u00ean di\u1ec7n r\u1ed9ng, \u1ea3nh h\u01b0\u1edfng tr\u1ef1c ti\u1ebfp \u0111\u1ebfn uy t\u00edn v\u00e0 t\u00e0i ch\u00ednh c\u1ee7a nhi\u1ec1u t\u1ed5 ch\u1ee9c t\u1ea1i Vi\u1ec7t Nam.<\/p>\n<h2>Khuy\u1ebfn ngh\u1ecb ph\u00f2ng th\u1ee7 t\u1eeb VNCyberS<\/h2>\n<p>\u0110\u1ec3 gi\u1ea3m thi\u1ec3u r\u1ee7i ro t\u1eeb c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng chu\u1ed7i cung \u1ee9ng nh\u01b0 &#8216;Operation Red-Sail&#8217;, VNCyberS khuy\u1ebfn ngh\u1ecb c\u00e1c \u0111\u01a1n v\u1ecb MSP v\u00e0 doanh nghi\u1ec7p th\u1ef1c hi\u1ec7n ngay c\u00e1c bi\u1ec7n ph\u00e1p sau:<\/p>\n<ul>\n<li><strong>R\u00e0 so\u00e1t quy\u1ec1n truy c\u1eadp:<\/strong> \u00c1p d\u1ee5ng nguy\u00ean t\u1eafc \u0111\u1eb7c quy\u1ec1n t\u1ed1i thi\u1ec3u (Least Privilege). Ch\u1ec9 c\u1ea5p quy\u1ec1n truy c\u1eadp c\u1ea7n thi\u1ebft cho c\u00e1c t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb v\u00e0 th\u01b0\u1eddng xuy\u00ean ki\u1ec3m tra nh\u1eadt k\u00fd (log) truy c\u1eadp h\u1ec7 th\u1ed1ng.<\/li>\n<li><strong>X\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 (MFA):<\/strong> B\u1eaft bu\u1ed9c s\u1eed d\u1ee5ng MFA cho t\u1ea5t c\u1ea3 c\u00e1c c\u1ed5ng qu\u1ea3n tr\u1ecb h\u1ec7 th\u1ed1ng, \u0111\u1eb7c bi\u1ec7t l\u00e0 c\u00e1c k\u1ebft n\u1ed1i t\u1eeb xa qua VPN ho\u1eb7c Remote Desktop.<\/li>\n<li><strong>Gi\u00e1m s\u00e1t h\u1ea1 t\u1ea7ng MSP:<\/strong> Doanh nghi\u1ec7p c\u1ea7n y\u00eau c\u1ea7u nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 minh b\u1ea1ch v\u1ec1 c\u00e1c ti\u00eau chu\u1ea9n b\u1ea3o m\u1eadt v\u00e0 c\u00f3 h\u1ec7 th\u1ed1ng gi\u00e1m s\u00e1t ph\u00e1t hi\u1ec7n x\u00e2m nh\u1eadp \u0111\u1ed9c l\u1eadp.<\/li>\n<li><strong>\u0110\u00e0o t\u1ea1o nh\u1eadn th\u1ee9c:<\/strong> Li\u00ean t\u1ee5c c\u1eadp nh\u1eadt c\u00e1c k\u1ecbch b\u1ea3n phishing m\u1edbi nh\u1ea5t cho \u0111\u1ed9i ng\u0169 k\u1ef9 thu\u1eadt, v\u1ed1n l\u00e0 &#8220;m\u1eaft x\u00edch&#8221; th\u01b0\u1eddng b\u1ecb nh\u1eafm \u0111\u1ebfn \u0111\u1ea7u ti\u00ean tr\u00ean Internet.<\/li>\n<\/ul>\n<p>Cu\u1ed9c chi\u1ebfn ch\u1ed1ng l\u1ea1i c\u00e1c chi\u1ebfn d\u1ecbch tinh vi nh\u01b0 &#8216;Operation Red-Sail&#8217; \u0111\u00f2i h\u1ecfi s\u1ef1 ph\u1ed1i h\u1ee3p ch\u1eb7t ch\u1ebd gi\u1eefa nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 v\u00e0 kh\u00e1ch h\u00e0ng. S\u1ef1 ch\u1ee7 \u0111\u1ed9ng trong ph\u00f2ng th\u1ee7 v\u00e0 t\u00ednh minh b\u1ea1ch trong v\u1eadn h\u00e0nh l\u00e0 ch\u00eca kh\u00f3a \u0111\u1ec3 b\u1ea3o v\u1ec7 an to\u00e0n th\u00f4ng tin trong k\u1ef7 nguy\u00ean s\u1ed1.<\/p>\n<p>&nbsp;<\/p>\n<p><em>VNCyberS t\u1ed5ng h\u1ee3p t\u1eeb c\u00e1c ngu\u1ed3n tin an ninh m\u1ea1ng uy t\u00edn.<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>Ph\u00e1t hi\u1ec7n chi\u1ebfn d\u1ecbch &#8216;Operation Red-Sail&#8217; t\u1ea5n c\u00f4ng v\u00e0o c\u00e1c MSP t\u1ea1i Vi\u1ec7t Nam M\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng c\u00f3 quy m\u00f4 l\u1edbn mang t\u00ean &#8216;Operation Red-Sail&#8217; v\u1eeba \u0111\u01b0\u1ee3c c\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt ph\u00e1t hi\u1ec7n \u0111ang nh\u1eafm m\u1ee5c ti\u00eau tr\u1ef1c ti\u1ebfp v\u00e0o c\u00e1c nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 qu\u1ea3n tr\u1ecb (Managed Service Providers [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1229,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1230","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1230","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1230"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1230\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1229"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1230"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1230"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1230"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}