{"id":1638,"date":"2026-06-13T07:15:59","date_gmt":"2026-06-13T00:15:59","guid":{"rendered":"https:\/\/vncybers.vn\/ho-so-unc3886-nhom-apt-dung-sau-chien-dich-tan-cong-ha-tang-vien-thong-singapore\/"},"modified":"2026-06-13T07:15:59","modified_gmt":"2026-06-13T00:15:59","slug":"ho-so-unc3886-nhom-apt-dung-sau-chien-dich-tan-cong-ha-tang-vien-thong-singapore","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/ho-so-unc3886-nhom-apt-dung-sau-chien-dich-tan-cong-ha-tang-vien-thong-singapore\/","title":{"rendered":"H\u1ed3 s\u01a1 UNC3886: Nh\u00f3m APT \u0111\u1ee9ng sau chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng h\u1ea1 t\u1ea7ng vi\u1ec5n th\u00f4ng Singapore"},"content":{"rendered":"

V\u00e0o \u0111\u1ea7u th\u00e1ng 2 n\u0103m 2026, C\u01a1 quan An ninh m\u1ea1ng Singapore (CSA) \u0111\u00e3 c\u00f4ng b\u1ed1 chi ti\u1ebft v\u1ec1 m\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng tinh vi nh\u1eafm v\u00e0o to\u00e0n b\u1ed9 b\u1ed1n nh\u00e0 m\u1ea1ng vi\u1ec5n th\u00f4ng l\u1edbn nh\u1ea5t qu\u1ed1c gia n\u00e0y g\u1ed3m Singtel, StarHub, M1 v\u00e0 SIMBA Telecom. \u0110\u1ee9ng sau chi\u1ebfn d\u1ecbch k\u00e9o d\u00e0i nhi\u1ec1u th\u00e1ng n\u00e0y l\u00e0 UNC3886<\/strong>, m\u1ed9t nh\u00f3m APT (Advanced Persistent Threat) c\u00f3 m\u1ed1i li\u00ean h\u1ec7 m\u1eadt thi\u1ebft v\u1edbi c\u00e1c ho\u1ea1t \u0111\u1ed9ng t\u00ecnh b\u00e1o c\u1ee7a Trung Qu\u1ed1c.<\/p>\n

Ch\u00e2n dung nh\u00f3m APT UNC3886<\/h2>\n

UNC3886<\/strong> \u0111\u01b0\u1ee3c c\u00e1c chuy\u00ean gia b\u1ea3o m\u1eadt nh\u1eadn di\u1ec7n l\u00e0 m\u1ed9t trong nh\u1eefng nh\u00f3m tin t\u1eb7c c\u00f3 n\u0103ng l\u1ef1c k\u1ef9 thu\u1eadt cao nh\u1ea5t hi\u1ec7n nay. Kh\u00f4ng gi\u1ed1ng nh\u01b0 c\u00e1c nh\u00f3m t\u1ed9i ph\u1ea1m m\u1ea1ng th\u00f4ng th\u01b0\u1eddng t\u1eadp trung v\u00e0o m\u1ee5c ti\u00eau t\u00e0i ch\u00ednh th\u00f4ng qua m\u00e3 h\u00f3a d\u1eef li\u1ec7u (ransomware), UNC3886<\/strong> theo \u0111u\u1ed5i c\u00e1c chi\u1ebfn d\u1ecbch gi\u00e1n \u0111i\u1ec7p m\u1ea1ng d\u00e0i h\u1ea1n. Nh\u00f3m n\u00e0y n\u1ed5i ti\u1ebfng v\u1edbi kh\u1ea3 n\u0103ng khai th\u00e1c c\u00e1c thi\u1ebft b\u1ecb m\u1ea1ng \u1edf “r\u00eca” h\u1ec7 th\u1ed1ng (edge devices) nh\u01b0 t\u01b0\u1eddng l\u1eeda, b\u1ed9 \u0111\u1ecbnh tuy\u1ebfn v\u00e0 m\u00f4i tr\u01b0\u1eddng \u1ea3o h\u00f3a.<\/p>\n

K\u1ec3 t\u1eeb khi \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n ho\u1ea1t \u0111\u1ed9ng m\u1ea1nh m\u1ebd t\u1eeb n\u0103m 2022, nh\u00f3m n\u00e0y \u0111\u00e3 li\u00ean t\u1ee5c nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o c\u00e1c t\u1ed5 ch\u1ee9c ch\u00ednh ph\u1ee7, c\u01a1 quan qu\u1ed1c ph\u00f2ng v\u00e0 c\u00e1c t\u1eadp \u0111o\u00e0n h\u1ea1 t\u1ea7ng quan tr\u1ecdng t\u1ea1i khu v\u1ef1c \u0110\u00f4ng Nam \u00c1 v\u00e0 B\u1eafc M\u1ef9.<\/p>\n

Chi\u1ebfn thu\u1eadt tinh vi trong v\u1ee5 t\u1ea5n c\u00f4ng Singapore<\/h2>\n

\"An<\/p>\n

Theo b\u00e1o c\u00e1o t\u1eeb chi\u1ebfn d\u1ecbch ph\u00f2ng th\u1ee7 m\u1ea1ng “CYBER GUARDIAN” k\u00e9o d\u00e0i 11 th\u00e1ng c\u1ee7a Singapore, UNC3886<\/strong> \u0111\u00e3 s\u1eed d\u1ee5ng m\u1ed9t lo\u1ea1t c\u00e1c k\u1ef9 thu\u1eadt t\u1ea5n c\u00f4ng ph\u1ee9c t\u1ea1p \u0111\u1ec3 x\u00e2m nh\u1eadp v\u00e0 duy tr\u00ec s\u1ef1 hi\u1ec7n di\u1ec7n:<\/p>\n

    \n
  • Khai th\u00e1c l\u1ed7 h\u1ed5ng Zero-day:<\/strong> Tin t\u1eb7c \u0111\u00e3 s\u1eed d\u1ee5ng \u00edt nh\u1ea5t m\u1ed9t l\u1ed7 h\u1ed5ng ch\u01b0a t\u1eebng \u0111\u01b0\u1ee3c bi\u1ebft \u0111\u1ebfn (zero-day) \u0111\u1ec3 v\u01b0\u1ee3t qua c\u00e1c r\u00e0o c\u1ea3n t\u01b0\u1eddng l\u1eeda v\u00e0 x\u00e2m nh\u1eadp v\u00e0o h\u1ec7 th\u1ed1ng n\u1ed9i b\u1ed9 c\u1ee7a c\u00e1c nh\u00e0 m\u1ea1ng.<\/li>\n
  • C\u00e0i \u0111\u1eb7t Rootkit v\u00e0 Backdoor:<\/strong> Sau khi gi\u00e0nh \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp, nh\u00f3m \u0111\u00e3 tri\u1ec3n khai c\u00e1c rootkit \u1edf c\u1ea5p \u0111\u1ed9 nh\u00e2n (kernel-level) \u0111\u1ec3 \u1ea9n gi\u1ea5u quy tr\u00ecnh ho\u1ea1t \u0111\u1ed9ng, gi\u00fap ch\u00fang kh\u00f4ng b\u1ecb ph\u00e1t hi\u1ec7n b\u1edfi c\u00e1c c\u00f4ng c\u1ee5 gi\u00e1m s\u00e1t th\u00f4ng th\u01b0\u1eddng.<\/li>\n
  • Nh\u1eafm m\u1ee5c ti\u00eau v\u00e0o h\u1ea1 t\u1ea7ng \u1ea3o h\u00f3a:<\/strong> UNC3886<\/strong> cho th\u1ea5y s\u1ef1 am hi\u1ec3u s\u00e2u s\u1eafc v\u1ec1 c\u00e1c m\u00f4i tr\u01b0\u1eddng VMware ESXi v\u00e0 vCenter, s\u1eed d\u1ee5ng ch\u00fang l\u00e0m b\u00e0n \u0111\u1ea1p \u0111\u1ec3 di chuy\u1ec3n ngang trong m\u1ea1ng l\u01b0\u1edbi vi\u1ec5n th\u00f4ng.<\/li>\n<\/ul>\n

    M\u1eb7c d\u00f9 nh\u00f3m \u0111\u00e3 ti\u1ebfp c\u1eadn \u0111\u01b0\u1ee3c “m\u1ed9t s\u1ed1 ph\u1ea7n” c\u1ee7a m\u1ea1ng l\u01b0\u1edbi c\u1ed1t l\u00f5i, bao g\u1ed3m c\u1ea3 c\u00e1c h\u1ec7 th\u1ed1ng quan tr\u1ecdng, nh\u01b0ng CSA kh\u1eb3ng \u0111\u1ecbnh chi\u1ebfn d\u1ecbch n\u00e0y \u0111\u00e3 b\u1ecb ng\u0103n ch\u1eb7n tr\u01b0\u1edbc khi c\u00f3 th\u1ec3 g\u00e2y ra b\u1ea5t k\u1ef3 s\u1ef1 gi\u00e1n \u0111o\u1ea1n d\u1ecbch v\u1ee5 n\u00e0o ho\u1eb7c \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u c\u00e1 nh\u00e2n c\u1ee7a kh\u00e1ch h\u00e0ng.<\/p>\n

    B\u00e0i h\u1ecdc cho h\u1ea1 t\u1ea7ng tr\u1ecdng y\u1ebfu<\/h2>\n

    V\u1ee5 vi\u1ec7c t\u1ea1i Singapore l\u00e0 m\u1ed9t l\u1eddi c\u1ea3nh b\u00e1o s\u1eafc l\u1ea1nh v\u1ec1 s\u1ef1 an to\u00e0n c\u1ee7a h\u1ea1 t\u1ea7ng vi\u1ec5n th\u00f4ng qu\u1ed1c gia tr\u01b0\u1edbc c\u00e1c nh\u00f3m APT c\u00f3 s\u1ef1 h\u1eadu thu\u1eabn l\u1edbn. Vi\u1ec7c UNC3886<\/strong> c\u00f3 th\u1ec3 \u00e2m th\u1ea7m t\u1ed3n t\u1ea1i trong m\u1ea1ng l\u01b0\u1edbi c\u1ee7a b\u1ed1n nh\u00e0 m\u1ea1ng l\u1edbn trong th\u1eddi gian d\u00e0i cho th\u1ea5y c\u00e1c ph\u01b0\u01a1ng th\u1ee9c ph\u00f2ng th\u1ee7 truy\u1ec1n th\u1ed1ng d\u1ef1a tr\u00ean d\u1ea5u hi\u1ec7u (signature-based) \u0111\u00e3 kh\u00f4ng c\u00f2n \u0111\u1ee7 hi\u1ec7u qu\u1ea3.<\/p>\n

    C\u00e1c t\u1ed5 ch\u1ee9c v\u1eadn h\u00e0nh h\u1ea1 t\u1ea7ng tr\u1ecdng y\u1ebfu c\u1ea7n chuy\u1ec3n d\u1ecbch sang m\u00f4 h\u00ecnh gi\u00e1m s\u00e1t ch\u1ee7 \u0111\u1ed9ng, t\u1eadp trung v\u00e0o vi\u1ec7c ph\u00e1t hi\u1ec7n c\u00e1c h\u00e0nh vi b\u1ea5t th\u01b0\u1eddng tr\u00ean thi\u1ebft b\u1ecb m\u1ea1ng v\u00e0 m\u00f4i tr\u01b0\u1eddng \u1ea3o h\u00f3a, thay v\u00ec ch\u1ec9 b\u1ea3o v\u1ec7 l\u1edbp v\u1ecf b\u00ean ngo\u00e0i.<\/p>\n

    VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb The Hacker News v\u00e0 CSA Singapore<\/em><\/p>","protected":false},"excerpt":{"rendered":"

    V\u00e0o \u0111\u1ea7u th\u00e1ng 2 n\u0103m 2026, C\u01a1 quan An ninh m\u1ea1ng Singapore (CSA) \u0111\u00e3 c\u00f4ng b\u1ed1 chi ti\u1ebft v\u1ec1 m\u1ed9t chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng m\u1ea1ng tinh vi nh\u1eafm v\u00e0o to\u00e0n b\u1ed9 b\u1ed1n nh\u00e0 m\u1ea1ng vi\u1ec5n th\u00f4ng l\u1edbn nh\u1ea5t qu\u1ed1c gia n\u00e0y g\u1ed3m Singtel, StarHub, M1 v\u00e0 SIMBA Telecom. \u0110\u1ee9ng sau chi\u1ebfn d\u1ecbch k\u00e9o d\u00e0i nhi\u1ec1u […]<\/p>\n","protected":false},"author":2,"featured_media":1637,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[70],"tags":[],"class_list":["post-1638","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ho-so"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1638"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1638\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1637"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}