{"id":1694,"date":"2026-06-25T07:21:56","date_gmt":"2026-06-25T00:21:56","guid":{"rendered":"https:\/\/vncybers.vn\/operation-endgame-amadey-stealc-chuoi-cung-ung-ma-doc-danh-cap-thong-tin\/"},"modified":"2026-06-25T07:21:56","modified_gmt":"2026-06-25T00:21:56","slug":"operation-endgame-amadey-stealc-chuoi-cung-ung-ma-doc-danh-cap-thong-tin","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/operation-endgame-amadey-stealc-chuoi-cung-ung-ma-doc-danh-cap-thong-tin\/","title":{"rendered":"Operation Endgame ph\u00e1 h\u1ea1 t\u1ea7ng Amadey v\u00e0 StealC: B\u00e0i h\u1ecdc v\u1ec1 chu\u1ed7i cung \u1ee9ng m\u00e3 \u0111\u1ed9c \u0111\u00e1nh c\u1eafp th\u00f4ng tin"},"content":{"rendered":"

Chi\u1ebfn d\u1ecbch Operation Endgame ti\u1ebfp t\u1ee5c cho th\u1ea5y cu\u1ed9c chi\u1ebfn ch\u1ed1ng t\u1ed9i ph\u1ea1m m\u1ea1ng kh\u00f4ng ch\u1ec9 d\u1eebng \u1edf vi\u1ec7c g\u1ee1 b\u1ecf m\u1ed9t nh\u00f3m v\u1eadn h\u00e0nh m\u00e3 \u0111\u1ed9c, m\u00e0 c\u00f2n ph\u1ea3i \u0111\u00e1nh v\u00e0o c\u00e1c m\u1eaft x\u00edch trong chu\u1ed7i cung \u1ee9ng t\u1ea5n c\u00f4ng. Theo c\u00e1c ngu\u1ed3n c\u00f4ng khai t\u1eeb Europol, Microsoft v\u00e0 c\u00e1c h\u00e3ng b\u1ea3o m\u1eadt tham gia \u0111i\u1ec1u ph\u1ed1i, \u0111\u1ee3t h\u00e0nh \u0111\u1ed9ng m\u1edbi \u0111\u00e3 nh\u1eafm v\u00e0o h\u1ea1 t\u1ea7ng c\u1ee7a Amadey v\u00e0 StealC, hai h\u1ecd m\u00e3 \u0111\u1ed9c th\u01b0\u1eddng \u0111\u01b0\u1ee3c d\u00f9ng \u0111\u1ec3 x\u00e2m nh\u1eadp ban \u0111\u1ea7u, \u0111\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp v\u00e0 m\u1edf \u0111\u01b0\u1eddng cho gian l\u1eadn ho\u1eb7c ransomware.<\/p>\n

\"Operation<\/p>\n

\u0110i\u1ec1u g\u00ec v\u1eeba x\u1ea3y ra<\/h2>\n

Trong giai \u0111o\u1ea1n h\u00e0nh \u0111\u1ed9ng \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 ng\u00e0y 24\/06\/2026, c\u00e1c c\u01a1 quan th\u1ef1c thi ph\u00e1p lu\u1eadt v\u00e0 \u0111\u1ed1i t\u00e1c t\u01b0 nh\u00e2n \u0111\u00e3 ph\u1ed1i h\u1ee3p \u0111\u1ec3 v\u00f4 hi\u1ec7u h\u00f3a m\u1ed9t ph\u1ea7n h\u1ea1 t\u1ea7ng \u0111i\u1ec1u khi\u1ec3n, ph\u00e2n ph\u1ed1i v\u00e0 ki\u1ebfm ti\u1ec1n c\u1ee7a c\u00e1c chi\u1ebfn d\u1ecbch li\u00ean quan Amadey v\u00e0 StealC. BleepingComputer ghi nh\u1eadn chi\u1ebfn d\u1ecbch c\u00f3 s\u1ef1 tham gia c\u1ee7a Microsoft, Europol v\u00e0 nhi\u1ec1u \u0111\u1ed1i t\u00e1c qu\u1ed1c t\u1ebf, v\u1edbi m\u1ee5c ti\u00eau l\u00e0m gi\u00e1n \u0111o\u1ea1n c\u00e1c d\u1ecbch v\u1ee5 t\u1ed9i ph\u1ea1m m\u1ea1ng th\u01b0\u1eddng ph\u1ee5c v\u1ee5 cho ransomware v\u00e0 c\u00e1c ho\u1ea1t \u0111\u1ed9ng l\u1eeba \u0111\u1ea3o quy m\u00f4 l\u1edbn.<\/p>\n

The Hacker News d\u1eabn th\u00f4ng tin r\u1eb1ng chi\u1ebfn d\u1ecbch \u0111\u00e3 th\u00e1o g\u1ee1 326 m\u00e1y ch\u1ee7 v\u00e0 142 t\u00ean mi\u1ec1n, \u0111\u1ed3ng th\u1eddi thu h\u1ed3i kho\u1ea3ng 27 tri\u1ec7u th\u00f4ng tin \u0111\u0103ng nh\u1eadp b\u1ecb \u0111\u00e1nh c\u1eafp. Con s\u1ed1 n\u00e0y gi\u00fap h\u00ecnh dung r\u00f5 h\u01a1n v\u00ec sao infostealer kh\u00f4ng c\u00f2n l\u00e0 m\u1ed9t d\u1ea1ng m\u00e3 \u0111\u1ed9c ph\u1ee5 tr\u1ee3 \u0111\u01a1n gi\u1ea3n, m\u00e0 l\u00e0 ngu\u1ed3n nhi\u00ean li\u1ec7u quan tr\u1ecdng cho nhi\u1ec1u cu\u1ed9c x\u00e2m nh\u1eadp doanh nghi\u1ec7p.<\/p>\n

V\u00ec sao Amadey v\u00e0 StealC nguy hi\u1ec3m<\/h2>\n

Amadey th\u01b0\u1eddng \u0111\u01b0\u1ee3c m\u00f4 t\u1ea3 nh\u01b0 m\u1ed9t tr\u00ecnh t\u1ea3i m\u00e3 \u0111\u1ed9c v\u00e0 c\u00f4ng c\u1ee5 duy tr\u00ec truy c\u1eadp. Khi \u0111\u00e3 c\u00f3 m\u1eb7t tr\u00ean m\u00e1y n\u1ea1n nh\u00e2n, n\u00f3 c\u00f3 th\u1ec3 nh\u1eadn l\u1ec7nh, t\u1ea3i th\u00eam payload v\u00e0 bi\u1ebfn thi\u1ebft b\u1ecb th\u00e0nh b\u00e0n \u0111\u1ea1p cho c\u00e1c b\u01b0\u1edbc ti\u1ebfp theo. StealC l\u1ea1i t\u1eadp trung v\u00e0o \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m nh\u01b0 m\u1eadt kh\u1ea9u, cookie tr\u00ecnh duy\u1ec7t, v\u00ed ti\u1ec1n s\u1ed1 v\u00e0 th\u00f4ng tin phi\u00ean \u0111\u0103ng nh\u1eadp.<\/p>\n

Khi hai th\u00e0nh ph\u1ea7n n\u00e0y xu\u1ea5t hi\u1ec7n trong c\u00f9ng m\u1ed9t chu\u1ed7i t\u1ea5n c\u00f4ng, r\u1ee7i ro t\u0103ng m\u1ea1nh. M\u1ed9t thi\u1ebft b\u1ecb c\u00e1 nh\u00e2n ho\u1eb7c m\u00e1y tr\u1ea1m doanh nghi\u1ec7p b\u1ecb nhi\u1ec5m m\u00e3 \u0111\u1ed9c c\u00f3 th\u1ec3 nhanh ch\u00f3ng tr\u1edf th\u00e0nh ngu\u1ed3n r\u00f2 r\u1ec9 t\u00e0i kho\u1ea3n SaaS, VPN, email doanh nghi\u1ec7p ho\u1eb7c h\u1ec7 th\u1ed1ng qu\u1ea3n tr\u1ecb n\u1ed9i b\u1ed9. T\u1eeb \u0111\u00f3, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 chuy\u1ec3n t\u1eeb l\u00e2y nhi\u1ec5m \u0111\u01a1n l\u1ebb sang chi\u1ebfm quy\u1ec1n t\u00e0i kho\u1ea3n, di chuy\u1ec3n ngang v\u00e0 tri\u1ec3n khai m\u00e3 \u0111\u1ed9c t\u1ed1ng ti\u1ec1n.<\/p>\n

Chu\u1ed7i cung \u1ee9ng t\u1ed9i ph\u1ea1m m\u1ea1ng \u0111ang chuy\u00ean nghi\u1ec7p h\u00f3a<\/h2>\n

\u0110i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd c\u1ee7a Operation Endgame l\u00e0 c\u00e1ch chi\u1ebfn d\u1ecbch nh\u1eafm v\u00e0o h\u1ea1 t\u1ea7ng chung thay v\u00ec ch\u1ec9 m\u1ed9t nh\u00f3m t\u1ea5n c\u00f4ng c\u1ee5 th\u1ec3. Trong th\u1ecb tr\u01b0\u1eddng ng\u1ea7m, nhi\u1ec1u nh\u00f3m kh\u00f4ng t\u1ef1 vi\u1ebft to\u00e0n b\u1ed9 c\u00f4ng c\u1ee5. H\u1ecd thu\u00ea quy\u1ec1n truy c\u1eadp, mua d\u1eef li\u1ec7u \u0111\u00e1nh c\u1eafp, d\u00f9ng botnet \u0111\u1ec3 ph\u00e1t t\u00e1n payload ho\u1eb7c tr\u1ea3 ti\u1ec1n cho c\u00e1c d\u1ecbch v\u1ee5 m\u00e3 \u0111\u1ed9c chuy\u00ean bi\u1ec7t.<\/p>\n

\"M\u00e3<\/p>\n

V\u00ec v\u1eady, khi h\u1ea1 t\u1ea7ng c\u1ee7a m\u1ed9t h\u1ecd m\u00e3 \u0111\u1ed9c ph\u1ed5 bi\u1ebfn b\u1ecb sinkhole, t\u1ecbch thu ho\u1eb7c ch\u1eb7n t\u00ean mi\u1ec1n, t\u00e1c \u0111\u1ed9ng kh\u00f4ng ch\u1ec9 n\u1eb1m \u1edf s\u1ed1 m\u00e1y ch\u1ee7 b\u1ecb g\u1ee1. N\u00f3 c\u00f2n l\u00e0m gi\u00e1n \u0111o\u1ea1n c\u00e1c \u0111\u01b0\u1eddng d\u00e2y ph\u00e2n ph\u1ed1i, ph\u00e1 v\u1ee1 ni\u1ec1m tin gi\u1eefa c\u00e1c b\u00ean mua b\u00e1n d\u1ecbch v\u1ee5 t\u1ed9i ph\u1ea1m v\u00e0 bu\u1ed9c nhi\u1ec1u nh\u00f3m ph\u1ea3i thay \u0111\u1ed5i c\u00f4ng c\u1ee5 trong th\u1eddi gian ng\u1eafn.<\/p>\n

Lessons for organizations and users<\/h2>\n

V\u1edbi doanh nghi\u1ec7p, b\u00e0i h\u1ecdc quan tr\u1ecdng nh\u1ea5t l\u00e0 kh\u00f4ng xem infostealer nh\u01b0 s\u1ef1 c\u1ed1 c\u00e1 nh\u00e2n c\u1ee7a ng\u01b0\u1eddi d\u00f9ng cu\u1ed1i. M\u1ed9t t\u00e0i kho\u1ea3n b\u1ecb \u0111\u00e1nh c\u1eafp t\u1eeb tr\u00ecnh duy\u1ec7t c\u00f3 th\u1ec3 \u0111\u1ee7 \u0111\u1ec3 v\u01b0\u1ee3t qua nhi\u1ec1u l\u1edbp ki\u1ec3m so\u00e1t n\u1ebfu t\u1ed5 ch\u1ee9c ph\u1ee5 thu\u1ed9c qu\u00e1 nhi\u1ec1u v\u00e0o m\u1eadt kh\u1ea9u v\u00e0 phi\u00ean \u0111\u0103ng nh\u1eadp k\u00e9o d\u00e0i. C\u00e1c \u0111\u1ed9i b\u1ea3o m\u1eadt c\u1ea7n theo d\u00f5i th\u00f4ng tin \u0111\u0103ng nh\u1eadp r\u00f2 r\u1ec9, bu\u1ed9c xoay v\u00f2ng m\u1eadt kh\u1ea9u khi c\u00f3 d\u1ea5u hi\u1ec7u l\u00e2y nhi\u1ec5m, r\u00fat ng\u1eafn v\u00f2ng \u0111\u1eddi phi\u00ean \u0111\u0103ng nh\u1eadp v\u00e0 tri\u1ec3n khai x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 ch\u1ed1ng phishing cho c\u00e1c h\u1ec7 th\u1ed1ng quan tr\u1ecdng.<\/p>\n

V\u1edbi ng\u01b0\u1eddi d\u00f9ng ph\u1ed5 th\u00f4ng, r\u1ee7i ro th\u01b0\u1eddng b\u1eaft \u0111\u1ea7u t\u1eeb t\u1ec7p \u0111\u00ednh k\u00e8m, ph\u1ea7n m\u1ec1m crack, ti\u1ec7n \u00edch gi\u1ea3 m\u1ea1o ho\u1eb7c li\u00ean k\u1ebft t\u1ea3i xu\u1ed1ng ngo\u00e0i ngu\u1ed3n ch\u00ednh th\u1ee9c. C\u00e0i \u0111\u1eb7t ph\u1ea7n m\u1ec1m t\u1eeb ngu\u1ed3n tin c\u1eady, c\u1eadp nh\u1eadt h\u1ec7 \u0111i\u1ec1u h\u00e0nh, d\u00f9ng tr\u00ecnh qu\u1ea3n l\u00fd m\u1eadt kh\u1ea9u v\u00e0 tr\u00e1nh l\u01b0u th\u00f4ng tin nh\u1ea1y c\u1ea3m trong tr\u00ecnh duy\u1ec7t l\u00e0 c\u00e1c bi\u1ec7n ph\u00e1p \u0111\u01a1n gi\u1ea3n nh\u01b0ng c\u00f3 t\u00e1c d\u1ee5ng gi\u1ea3m thi\u1ec3u \u0111\u00e1ng k\u1ec3 thi\u1ec7t h\u1ea1i.<\/p>\n

Conclusion<\/h2>\n

Operation Endgame kh\u00f4ng \u0111\u1ed3ng ngh\u0129a v\u1edbi vi\u1ec7c Amadey, StealC ho\u1eb7c c\u00e1c bi\u1ebfn th\u1ec3 t\u01b0\u01a1ng t\u1ef1 s\u1ebd bi\u1ebfn m\u1ea5t ho\u00e0n to\u00e0n. Tuy nhi\u00ean, chi\u1ebfn d\u1ecbch cho th\u1ea5y m\u1ed9t xu h\u01b0\u1edbng ph\u00f2ng th\u1ee7 ng\u00e0y c\u00e0ng r\u00f5: thay v\u00ec ch\u1ec9 ph\u1ea3n \u1ee9ng sau t\u1eebng v\u1ee5 ransomware, c\u00e1c c\u01a1 quan th\u1ef1c thi ph\u00e1p lu\u1eadt v\u00e0 doanh nghi\u1ec7p b\u1ea3o m\u1eadt \u0111ang c\u1ed1 g\u1eafng ph\u00e1 v\u1ee1 h\u1ea1 t\u1ea7ng trung gian nu\u00f4i d\u01b0\u1ee1ng to\u00e0n b\u1ed9 h\u1ec7 sinh th\u00e1i t\u1ed9i ph\u1ea1m m\u1ea1ng.<\/p>\n

\u0110\u1ed1i v\u1edbi c\u1ed9ng \u0111\u1ed3ng an ninh m\u1ea1ng, \u0111\u00e2y l\u00e0 l\u1eddi nh\u1eafc r\u1eb1ng qu\u1ea3n tr\u1ecb danh t\u00ednh, gi\u00e1m s\u00e1t th\u00f4ng tin \u0111\u0103ng nh\u1eadp r\u00f2 r\u1ec9 v\u00e0 ki\u1ec3m so\u00e1t thi\u1ebft b\u1ecb \u0111\u1ea7u cu\u1ed1i ph\u1ea3i \u0111\u01b0\u1ee3c nh\u00ecn nh\u01b0 m\u1ed9t chu\u1ed7i li\u00ean k\u1ebft th\u1ed1ng nh\u1ea5t. Khi m\u1ed9t m\u1eaft x\u00edch y\u1ebfu b\u1ecb khai th\u00e1c, ph\u1ea7n c\u00f2n l\u1ea1i c\u1ee7a h\u1ec7 th\u1ed1ng c\u00f3 th\u1ec3 b\u1ecb k\u00e9o v\u00e0o cu\u1ed9c t\u1ea5n c\u00f4ng nhanh h\u01a1n nhi\u1ec1u so v\u1edbi k\u1ef3 v\u1ecdng.<\/p>\n

VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb BleepingComputer, The Hacker News, Europol v\u00e0 Operation Endgame<\/em><\/p>","protected":false},"excerpt":{"rendered":"

Chi\u1ebfn d\u1ecbch Operation Endgame ti\u1ebfp t\u1ee5c cho th\u1ea5y cu\u1ed9c chi\u1ebfn ch\u1ed1ng t\u1ed9i ph\u1ea1m m\u1ea1ng kh\u00f4ng ch\u1ec9 d\u1eebng \u1edf vi\u1ec7c g\u1ee1 b\u1ecf m\u1ed9t nh\u00f3m v\u1eadn h\u00e0nh m\u00e3 \u0111\u1ed9c, m\u00e0 c\u00f2n ph\u1ea3i \u0111\u00e1nh v\u00e0o c\u00e1c m\u1eaft x\u00edch trong chu\u1ed7i cung \u1ee9ng t\u1ea5n c\u00f4ng. Theo c\u00e1c ngu\u1ed3n c\u00f4ng khai t\u1eeb Europol, Microsoft v\u00e0 c\u00e1c h\u00e3ng b\u1ea3o m\u1eadt tham […]<\/p>\n","protected":false},"author":2,"featured_media":1692,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[259,265,264,142,261,262,263,258,43,260],"class_list":["post-1694","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kien-thuc","tag-amadey","tag-bao-mat-danh-tinh","tag-chuoi-cung-ung-toi-pham-mang","tag-europol","tag-infostealer","tag-ma-doc-danh-cap-thong-tin","tag-microsoft","tag-operation-endgame","tag-ransomware","tag-stealc"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1694","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1694"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1694\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1692"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1694"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1694"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1694"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}