{"id":1537,"date":"2026-06-01T07:15:51","date_gmt":"2026-06-01T00:15:51","guid":{"rendered":"https:\/\/vncybers.vn\/greyvibe-nhom-hacker-nga-su-dung-ai-de-tan-cong-ukraine\/"},"modified":"2026-06-01T07:15:51","modified_gmt":"2026-06-01T00:15:51","slug":"greyvibe-nhom-hacker-nga-su-dung-ai-de-tan-cong-ukraine","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/greyvibe-nhom-hacker-nga-su-dung-ai-de-tan-cong-ukraine\/","title":{"rendered":"GREYVIBE: Nh\u00f3m hacker Nga s\u1eed d\u1ee5ng AI \u0111\u1ec3 t\u1ea5n c\u00f4ng Ukraine"},"content":{"rendered":"<h2>S\u1ef1 tr\u1ed7i d\u1eady c\u1ee7a th\u1ebf l\u1ef1c m\u1edbi trong kh\u00f4ng gian m\u1ea1ng<\/h2>\n<p><img fetchpriority=\"high\" decoding=\"async\" width=\"1518\" height=\"780\" src=\"https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/inline_image.png\" alt=\"GREYVIBE Attack Vector\" class=\"wp-image-1536\" srcset=\"https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/inline_image.png 1518w, https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/inline_image-300x154.png 300w, https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/inline_image-1024x526.png 1024w, https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/06\/inline_image-768x395.png 768w\" sizes=\"(max-width: 1518px) 100vw, 1518px\" \/><\/p>\n<p>M\u1ed9t nh\u00f3m tin t\u1eb7c m\u1edbi ch\u01b0a t\u1eebng \u0111\u01b0\u1ee3c ghi nh\u1eadn tr\u01b0\u1edbc \u0111\u00e2y v\u1edbi t\u00ean g\u1ecdi GREYVIBE v\u1eeba b\u1ecb c\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt ph\u00e1t hi\u1ec7n. Nh\u00f3m n\u00e0y \u0111\u00e3 th\u1ef1c hi\u1ec7n h\u00e0ng lo\u1ea1t cu\u1ed9c t\u1ea5n c\u00f4ng dai d\u1eb3ng nh\u1eafm v\u00e0o c\u00e1c th\u1ef1c th\u1ec3 li\u00ean quan \u0111\u1ebfn Ukraine k\u1ec3 t\u1eeb \u00edt nh\u1ea5t l\u00e0 th\u00e1ng 8 n\u0103m 2025. Theo b\u00e1o c\u00e1o t\u1eeb WithSecure, GREYVIBE \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 l\u00e0 m\u1ed9t nh\u00f3m s\u1eed d\u1ee5ng ti\u1ebfng Nga, ho\u1ea1t \u0111\u1ed9ng ch\u1ee7 y\u1ebfu trong m\u00fai gi\u1edd c\u1ee7a Nga v\u00e0 c\u00f3 c\u00e1c ho\u1ea1t \u0111\u1ed9ng ph\u00f9 h\u1ee3p v\u1edbi l\u1ee3i \u00edch chi\u1ebfn l\u01b0\u1ee3c c\u1ee7a \u0111i\u1ec7n Kremlin, \u0111\u1eb7c bi\u1ec7t l\u00e0 trong n\u1ed7 l\u1ef1c thu th\u1eadp t\u00ecnh b\u00e1o qu\u00e2n s\u1ef1.<\/p>\n<p>C\u00e1c chuy\u00ean gia cho bi\u1ebft, GREYVIBE kh\u00f4ng ch\u1ec9 l\u00e0 m\u1ed9t nh\u00f3m hacker \u0111\u01a1n thu\u1ea7n m\u00e0 c\u00f2n l\u00e0 s\u1ef1 k\u1ebft h\u1ee3p gi\u1eefa c\u00e1c t\u00e1c nh\u00e2n \u0111\u01b0\u1ee3c nh\u00e0 n\u01b0\u1edbc b\u1ea3o tr\u1ee3 v\u00e0 nh\u1eefng t\u1ed9i ph\u1ea1m m\u1ea1ng c\u00f3 kinh nghi\u1ec7m t\u1eeb h\u1ec7 sinh th\u00e1i t\u1ed9i ph\u1ea1m Nga. \u0110i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd nh\u1ea5t l\u00e0 vi\u1ec7c nh\u00f3m n\u00e0y \u0111ang t\u00edch c\u1ef1c s\u1eed d\u1ee5ng tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o t\u1ea1o sinh (GenAI) v\u00e0 c\u00e1c m\u00f4 h\u00ecnh ng\u00f4n ng\u1eef l\u1edbn (LLM) \u0111\u1ec3 t\u1ed1i \u01b0u h\u00f3a hi\u1ec7u qu\u1ea3 t\u1ea5n c\u00f4ng.<\/p>\n<h2>Chi\u1ebfn thu\u1eadt t\u1ea5n c\u00f4ng \u0111a d\u1ea1ng v\u00e0 s\u1ef1 h\u1ed7 tr\u1ee3 t\u1eeb AI<\/h2>\n<p>GREYVIBE s\u1eed d\u1ee5ng nhi\u1ec1u chu\u1ed7i t\u1ea5n c\u00f4ng kh\u00e1c nhau \u0111\u1ec3 x\u00e2m nh\u1eadp v\u00e0o m\u1ee5c ti\u00eau, bao g\u1ed3m:<\/p>\n<ul>\n<li><strong>PhantomMail:<\/strong> S\u1eed d\u1ee5ng email l\u1eeba \u0111\u1ea3o (spear-phishing) ch\u1ee9a li\u00ean k\u1ebft \u0111\u1ebfn c\u00e1c t\u1ec7p l\u01b0u tr\u1eef \u0111\u1ed9c h\u1ea1i (ZIP ho\u1eb7c RAR) tr\u00ean Google Drive \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c PhantomRelay.<\/li>\n<li><strong>PhantomClick:<\/strong> S\u1eed d\u1ee5ng c\u00e1c trang CAPTCHA gi\u1ea3 m\u1ea1o (phong c\u00e1ch ClickFix) tr\u00ean c\u00e1c t\u00ean mi\u1ec1n m\u1ea1o danh Zoom ho\u1eb7c LAPAS \u0111\u1ec3 l\u1eeba ng\u01b0\u1eddi d\u00f9ng ch\u1ea1y c\u00e1c l\u1ec7nh kh\u1edfi \u0111\u1ed9ng nhi\u1ec5m m\u00e3 \u0111\u1ed9c.<\/li>\n<li><strong>PrincessClub:<\/strong> S\u1eed d\u1ee5ng c\u00e1c trang web c\u00e2u l\u1ea1c b\u1ed9 ng\u01b0\u1eddi l\u1edbn gi\u1ea3 m\u1ea1o t\u1ea1i Ukraine \u0111\u1ec3 ph\u00e2n ph\u1ed1i m\u00e3 \u0111\u1ed9c FallSpy tr\u00ean Android v\u00e0 LegionRelay tr\u00ean Windows. Th\u1eadm ch\u00ed, c\u00e1c trang web n\u00e0y c\u00f2n c\u00f3 t\u00ednh n\u0103ng g\u1ecdi \u0111i\u1ec7n tr\u1ef1c ti\u1ebfp \u0111\u1ec3 thu \u00e2m thanh v\u00e0 h\u00ecnh \u1ea3nh c\u1ee7a n\u1ea1n nh\u00e2n.<\/li>\n<li><strong>DroneLink:<\/strong> M\u1ea1o danh c\u00e1c qu\u1ef9 t\u1eeb thi\u1ec7n h\u1ed7 tr\u1ee3 qu\u00e2n \u0111\u1ed9i Ukraine \u0111\u1ec3 ph\u00e2n ph\u1ed1i c\u00e1c c\u00f4ng c\u1ee5 \u0111i\u1ec1u khi\u1ec3n t\u1eeb xa.<\/li>\n<\/ul>\n<p>Vi\u1ec7c s\u1eed d\u1ee5ng c\u00e1c n\u1ec1n t\u1ea3ng AI nh\u01b0 Ideogram AI, OpenAI ChatGPT v\u00e0 Google Gemini \u0111\u00e3 gi\u00fap GREYVIBE r\u00fat ng\u1eafn \u0111\u00e1ng k\u1ec3 chu k\u1ef3 ph\u00e1t tri\u1ec3n m\u00e3 \u0111\u1ed9c. AI h\u1ed7 tr\u1ee3 nh\u00f3m n\u00e0y trong vi\u1ec7c t\u1ea1o h\u00ecnh \u1ea3nh minh h\u1ecda cho c\u00e1c trang web l\u1eeba \u0111\u1ea3o, vi\u1ebft c\u00e1c t\u1eadp l\u1ec7nh obfuscation (l\u00e0m x\u00e1o tr\u1ed9n m\u00e3 ngu\u1ed3n) v\u00e0 ph\u00e1t tri\u1ec3n m\u00e3 \u0111\u1ed9c LegionRelay.<\/p>\n<h2>Ranh gi\u1edbi m\u1edd nh\u1ea1t gi\u1eefa t\u1ed9i ph\u1ea1m m\u1ea1ng v\u00e0 t\u00ecnh b\u00e1o qu\u1ed1c gia<\/h2>\n<p>M\u1eb7c d\u00f9 c\u00f3 kh\u1ea3 n\u0103ng s\u1eed d\u1ee5ng AI, GREYVIBE v\u1eabn b\u1ecb \u0111\u00e1nh gi\u00e1 l\u00e0 m\u1ed9t nh\u00f3m c\u00f3 \u0111\u1ed9 tinh vi \u1edf m\u1ee9c th\u1ea5p \u0111\u1ebfn trung b\u00ecnh do v\u1eabn m\u1eafc ph\u1ea3i nhi\u1ec1u l\u1ed7i b\u1ea3o m\u1eadt v\u1eadn h\u00e0nh (OPSEC). Nh\u1eefng sai s\u00f3t trong thi\u1ebft k\u1ebf c\u1ee7a LegionRelay \u0111\u00e3 v\u00f4 t\u00ecnh \u0111\u1ec3 l\u1ed9 c\u00e1c ch\u1ee9c n\u0103ng m\u00e1y ch\u1ee7 \u0111i\u1ec1u khi\u1ec3n (backend) c\u1ee7a ch\u00fang.<\/p>\n<p>C\u00e1c m\u1ed1i li\u00ean h\u1ec7 v\u1edbi h\u1ec7 sinh th\u00e1i t\u1ed9i ph\u1ea1m m\u1ea1ng c\u1ee7a Nga \u0111\u01b0\u1ee3c th\u1ec3 hi\u1ec7n qua vi\u1ec7c s\u1eed d\u1ee5ng c\u00e1c c\u00f4ng c\u1ee5 c\u00f3 li\u00ean quan \u0111\u1ebfn b\u0103ng \u0111\u1ea3ng TrickBot v\u00e0 nh\u00f3m UAC-0098. Ngo\u00e0i ra, vi\u1ec7c s\u1eed d\u1ee5ng c\u00e1c thu\u1eadt ng\u1eef l\u00f3ng trong internet nh\u01b0 &#8220;letsrollboyos&#8221; hay &#8220;cuteuwu&#8221; trong qu\u00e1 tr\u00ecnh ph\u00e1t tri\u1ec3n m\u00e3 ngu\u1ed3n c\u0169ng cho th\u1ea5y ngu\u1ed3n g\u1ed1c c\u1ee7a c\u00e1c th\u00e0nh vi\u00ean trong nh\u00f3m.<\/p>\n<p>S\u1ef1 xu\u1ea5t hi\u1ec7n c\u1ee7a GREYVIBE l\u00e0 m\u1ed9t minh ch\u1ee9ng cho th\u1ea5y s\u1ef1 m\u1edd nh\u1ea1t d\u1ea7n gi\u1eefa t\u1ed9i ph\u1ea1m m\u1ea1ng truy\u1ec1n th\u1ed1ng v\u00e0 c\u00e1c ho\u1ea1t \u0111\u1ed9ng t\u00ecnh b\u00e1o do nh\u00e0 n\u01b0\u1edbc ch\u1ec9 \u0111\u1ea1o. Vi\u1ec7c s\u1eed d\u1ee5ng AI \u0111\u1ec3 t\u1ef1 \u0111\u1ed9ng h\u00f3a v\u00e0 thay \u0111\u1ed5i c\u00e1c th\u00e0nh ph\u1ea7n k\u1ef9 thu\u1eadt li\u00ean t\u1ee5c c\u0169ng khi\u1ebfn cho vi\u1ec7c truy v\u1ebft v\u00e0 ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng tr\u1edf n\u00ean kh\u00f3 kh\u0103n h\u01a1n \u0111\u1ed1i v\u1edbi c\u00e1c ph\u01b0\u01a1ng ph\u00e1p ph\u00e2n t\u00edch truy\u1ec1n th\u1ed1ng.<\/p>\n<p style=\"text-align: right; margin-top: 40px;\">\n<ul>\n<li><em><strong>VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb The Hacker News v\u00e0 WithSecure<\/em><\/li>\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>S\u1ef1 tr\u1ed7i d\u1eady c\u1ee7a th\u1ebf l\u1ef1c m\u1edbi trong kh\u00f4ng gian m\u1ea1ng M\u1ed9t nh\u00f3m tin t\u1eb7c m\u1edbi ch\u01b0a t\u1eebng \u0111\u01b0\u1ee3c ghi nh\u1eadn tr\u01b0\u1edbc \u0111\u00e2y v\u1edbi t\u00ean g\u1ecdi GREYVIBE v\u1eeba b\u1ecb c\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt ph\u00e1t hi\u1ec7n. Nh\u00f3m n\u00e0y \u0111\u00e3 th\u1ef1c hi\u1ec7n h\u00e0ng lo\u1ea1t cu\u1ed9c t\u1ea5n c\u00f4ng dai d\u1eb3ng nh\u1eafm v\u00e0o c\u00e1c th\u1ef1c th\u1ec3 li\u00ean quan [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1535,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[30,15,20],"class_list":["post-1537","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-deepfake","tag-ma-doc","tag-vercel"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1537","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1537"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1537\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1535"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1537"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1537"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1537"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}