{"id":1982,"date":"2026-08-29T07:25:38","date_gmt":"2026-08-29T00:25:38","guid":{"rendered":"https:\/\/vncybers.vn\/ho-so-shinyhunters-lua-dao-giong-noi-du-lieu-y-te\/"},"modified":"2026-08-29T07:25:38","modified_gmt":"2026-08-29T00:25:38","slug":"ho-so-shinyhunters-lua-dao-giong-noi-du-lieu-y-te","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/ho-so-shinyhunters-lua-dao-giong-noi-du-lieu-y-te\/","title":{"rendered":"ShinyHunters profile: When voice phishing becomes the gateway to medical data"},"content":{"rendered":"

V\u1ee5 vi\u1ec7c McKesson c\u00f4ng b\u1ed1 s\u1ef1 c\u1ed1 an ninh m\u1ea1ng ng\u00e0y 28\/8\/2026 \u0111ang l\u00e0m n\u1ed5i b\u1eadt m\u1ed9t v\u1ea5n \u0111\u1ec1 l\u1edbn h\u01a1n trong ng\u00e0nh y t\u1ebf: nh\u00f3m t\u1ed1ng ti\u1ec1n d\u1eef li\u1ec7u ShinyHunters kh\u00f4ng ch\u1ec9 t\u00ecm l\u1ed7 h\u1ed5ng k\u1ef9 thu\u1eadt, m\u00e0 c\u00f2n khai th\u00e1c \u0111i\u1ec3m y\u1ebfu trong quy tr\u00ecnh x\u00e1c minh danh t\u00ednh, h\u1ed7 tr\u1ee3 t\u00e0i kho\u1ea3n v\u00e0 qu\u1ea3n tr\u1ecb \u1ee9ng d\u1ee5ng \u0111\u00e1m m\u00e2y.<\/p>\n

Theo BleepingComputer, McKesson cho bi\u1ebft s\u1ef1 c\u1ed1 li\u00ean quan \u0111\u1ebfn truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng c\u1ee7a b\u00ean th\u1ee9 ba v\u00e0 h\u00e0nh vi \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u. C\u00f4ng ty ph\u00e1t hi\u1ec7n s\u1ef1 c\u1ed1 v\u00e0o ng\u00e0y 25\/8\/2026, k\u00edch ho\u1ea1t quy tr\u00ecnh \u1ee9ng ph\u00f3, thu\u00ea chuy\u00ean gia an ninh m\u1ea1ng v\u00e0 cho bi\u1ebft cu\u1ed9c \u0111i\u1ec1u tra v\u1eabn \u1edf giai \u0111o\u1ea1n \u0111\u1ea7u. Trong h\u1ed3 s\u01a1 8-K g\u1eedi \u1ee6y ban Ch\u1ee9ng kho\u00e1n v\u00e0 Giao d\u1ecbch M\u1ef9, McKesson n\u00f3i ch\u01b0a x\u00e1c \u0111\u1ecbnh s\u1ef1 c\u1ed1 c\u00f3 t\u00e1c \u0111\u1ed9ng tr\u1ecdng y\u1ebfu \u0111\u1ebfn t\u00ecnh h\u00ecnh t\u00e0i ch\u00ednh ho\u1eb7c k\u1ebft qu\u1ea3 kinh doanh.<\/p>\n

\"M\u00f4i<\/p>\n

ShinyHunters l\u00e0 ai?<\/h2>\n

ShinyHunters l\u00e0 m\u1ed9t nh\u00f3m t\u1ed9i ph\u1ea1m m\u1ea1ng n\u1ed5i l\u00ean v\u1edbi c\u00e1c chi\u1ebfn d\u1ecbch \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u v\u00e0 t\u1ed1ng ti\u1ec1n, th\u01b0\u1eddng nh\u1eafm v\u00e0o doanh nghi\u1ec7p c\u00f3 kh\u1ed1i l\u01b0\u1ee3ng d\u1eef li\u1ec7u kh\u00e1ch h\u00e0ng l\u1edbn. Trong c\u00e1c n\u0103m g\u1ea7n \u0111\u00e2y, nh\u00f3m n\u00e0y \u0111\u01b0\u1ee3c nh\u1eafc \u0111\u1ebfn nhi\u1ec1u h\u01a1n trong nh\u1eefng v\u1ee5 vi\u1ec7c li\u00ean quan n\u1ec1n t\u1ea3ng SaaS, t\u00e0i kho\u1ea3n \u0111\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n v\u00e0 d\u1eef li\u1ec7u n\u1eb1m trong c\u00e1c h\u1ec7 th\u1ed1ng kinh doanh nh\u01b0 Salesforce, Snowflake, Microsoft 365 ho\u1eb7c SharePoint.<\/p>\n

\u0110i\u1ec3m \u0111\u00e1ng ch\u00fa \u00fd l\u00e0 ShinyHunters kh\u00f4ng lu\u00f4n c\u1ea7n m\u1ed9t l\u1ed7 h\u1ed5ng ph\u1ea7n m\u1ec1m m\u1edbi \u0111\u1ec3 t\u1ea1o ra thi\u1ec7t h\u1ea1i l\u1edbn. M\u1eabu t\u1ea5n c\u00f4ng \u0111\u01b0\u1ee3c Health-ISAC c\u1ea3nh b\u00e1o trong th\u00e1ng 7\/2026 cho th\u1ea5y nh\u00f3m c\u00f3 xu h\u01b0\u1edbng d\u00f9ng vishing, t\u1ee9c l\u1eeba \u0111\u1ea3o qua cu\u1ed9c g\u1ecdi tho\u1ea1i, \u0111\u1ec3 thuy\u1ebft ph\u1ee5c nh\u00e2n vi\u00ean ho\u1eb7c b\u1ed9 ph\u1eadn h\u1ed7 tr\u1ee3 thay \u0111\u1ed5i m\u1eadt kh\u1ea9u, \u0111\u1eb7t l\u1ea1i MFA ho\u1eb7c \u0111\u0103ng k\u00fd thi\u1ebft b\u1ecb x\u00e1c th\u1ef1c m\u1edbi. Khi chi\u1ebfm \u0111\u01b0\u1ee3c t\u00e0i kho\u1ea3n SSO, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 d\u00f9ng ch\u00ednh quy\u1ec1n truy c\u1eadp h\u1ee3p l\u1ec7 c\u1ee7a n\u1ea1n nh\u00e2n \u0111\u1ec3 \u0111i v\u00e0o nhi\u1ec1u \u1ee9ng d\u1ee5ng \u0111\u00e1m m\u00e2y.<\/p>\n

Di\u1ec5n bi\u1ebfn v\u1ee5 McKesson<\/h2>\n

McKesson l\u00e0 m\u1ed9t trong nh\u1eefng doanh nghi\u1ec7p ph\u00e2n ph\u1ed1i d\u01b0\u1ee3c ph\u1ea9m v\u00e0 d\u1ecbch v\u1ee5 y t\u1ebf l\u1edbn t\u1ea1i M\u1ef9, ph\u1ee5c v\u1ee5 nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 ch\u0103m s\u00f3c s\u1ee9c kh\u1ecfe, nh\u00e0 thu\u1ed1c v\u00e0 c\u00e1c \u0111\u1ed1i t\u00e1c trong chu\u1ed7i cung \u1ee9ng. V\u00ec v\u1eady, m\u1ecdi s\u1ef1 c\u1ed1 li\u00ean quan d\u1eef li\u1ec7u c\u1ee7a c\u00f4ng ty \u0111\u1ec1u c\u00f3 kh\u1ea3 n\u0103ng t\u1ea1o t\u00e1c \u0111\u1ed9ng v\u01b0\u1ee3t ra ngo\u00e0i ph\u1ea1m vi m\u1ed9t h\u1ec7 th\u1ed1ng CNTT \u0111\u01a1n l\u1ebb.<\/p>\n

BleepingComputer d\u1eabn th\u00f4ng tin t\u1eeb ShinyHunters cho bi\u1ebft nh\u00f3m n\u00e0y nh\u1eadn tr\u00e1ch nhi\u1ec7m v\u1ee5 t\u1ea5n c\u00f4ng v\u00e0 tuy\u00ean b\u1ed1 \u0111\u00e3 th\u1ef1c hi\u1ec7n c\u00e1c cu\u1ed9c g\u1ecdi vishing nh\u1eafm v\u00e0o nhi\u1ec1u nh\u00e2n vi\u00ean McKesson. Nh\u00f3m n\u00f3i c\u00e1c t\u00e0i kho\u1ea3n Okta SSO b\u1ecb chi\u1ebfm quy\u1ec1n sau \u0111\u00f3 \u0111\u01b0\u1ee3c d\u00f9ng \u0111\u1ec3 truy c\u1eadp m\u00f4i tr\u01b0\u1eddng Salesforce v\u00e0 Snowflake. BleepingComputer c\u0169ng cho bi\u1ebft m\u1ed9t ngu\u1ed3n kh\u00e1c li\u00ean h\u1ec7 t\u00ean mi\u1ec1n mckesson[.]claims v\u1edbi chi\u1ebfn d\u1ecbch n\u00e0y, ph\u00f9 h\u1ee3p v\u1edbi m\u1eabu t\u00ean mi\u1ec1n company[.]claims m\u00e0 ReliaQuest t\u1eebng theo d\u00f5i trong c\u00e1c chi\u1ebfn d\u1ecbch gi\u1ea3 m\u1ea1o b\u1ed9 ph\u1eadn h\u1ed7 tr\u1ee3 CNTT.<\/p>\n

Theo tuy\u00ean b\u1ed1 c\u1ee7a ShinyHunters v\u1edbi BleepingComputer, nh\u00f3m \u0111\u00e3 l\u1ea5y kho\u1ea3ng 1 TB d\u1eef li\u1ec7u trong b\u1ed1n ng\u00e0y, t\u1eeb 21\/8 \u0111\u1ebfn 25\/8, v\u00e0 \u0111\u01b0a ra y\u00eau c\u1ea7u ti\u1ec1n chu\u1ed9c h\u01a1n 55 tri\u1ec7u USD. Nh\u00f3m c\u0169ng tuy\u00ean b\u1ed1 d\u1eef li\u1ec7u Snowflake ch\u1ee9a kho\u1ea3ng 284 tri\u1ec7u d\u00f2ng b\u1ea3n ghi li\u00ean quan b\u1ec7nh nh\u00e2n. Chi ti\u1ebft n\u00e0y c\u1ea7n \u0111\u01b0\u1ee3c hi\u1ec3u th\u1eadn tr\u1ecdng: \u0111\u00e2y l\u00e0 s\u1ed1 d\u00f2ng d\u1eef li\u1ec7u m\u00e0 nh\u00f3m t\u1ef1 c\u00f4ng b\u1ed1, kh\u00f4ng ph\u1ea3i s\u1ed1 b\u1ec7nh nh\u00e2n duy nh\u1ea5t, v\u00e0 McKesson ch\u01b0a x\u00e1c nh\u1eadn c\u00f4ng khai lo\u1ea1i d\u1eef li\u1ec7u b\u1ecb l\u1ea5y.<\/p>\n

V\u00ec sao y t\u1ebf tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau h\u1ea5p d\u1eabn?<\/h2>\n

D\u1eef li\u1ec7u y t\u1ebf c\u00f3 gi\u00e1 tr\u1ecb cao v\u00ec th\u01b0\u1eddng k\u1ebft h\u1ee3p nhi\u1ec1u lo\u1ea1i th\u00f4ng tin nh\u1ea1y c\u1ea3m: danh t\u00ednh, b\u1ea3o hi\u1ec3m, l\u1ecbch s\u1eed kh\u00e1m ch\u1eefa b\u1ec7nh, \u0111\u01a1n thu\u1ed1c, th\u00f4ng tin thanh to\u00e1n v\u00e0 quan h\u1ec7 gi\u1eefa b\u1ec7nh nh\u00e2n v\u1edbi nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5. Khi r\u01a1i v\u00e0o tay t\u1ed9i ph\u1ea1m, d\u1eef li\u1ec7u n\u00e0y c\u00f3 th\u1ec3 ph\u1ee5c v\u1ee5 t\u1ed1ng ti\u1ec1n, gian l\u1eadn b\u1ea3o hi\u1ec3m, l\u1eeba \u0111\u1ea3o c\u00e1 nh\u00e2n h\u00f3a ho\u1eb7c g\u00e2y \u00e1p l\u1ef1c l\u00ean t\u1ed5 ch\u1ee9c n\u1ea1n nh\u00e2n b\u1eb1ng r\u1ee7i ro ph\u00e1p l\u00fd v\u00e0 uy t\u00edn.<\/p>\n

V\u1edbi c\u00e1c doanh nghi\u1ec7p y t\u1ebf l\u1edbn, b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng c\u00f2n m\u1edf r\u1ed9ng qua nhi\u1ec1u \u1ee9ng d\u1ee5ng b\u00ean th\u1ee9 ba, h\u1ec7 th\u1ed1ng h\u1ed7 tr\u1ee3 kh\u00e1ch h\u00e0ng, t\u00edch h\u1ee3p API v\u00e0 n\u1ec1n t\u1ea3ng ph\u00e2n t\u00edch d\u1eef li\u1ec7u. N\u1ebfu quy tr\u00ecnh reset t\u00e0i kho\u1ea3n ho\u1eb7c th\u00eam y\u1ebfu t\u1ed1 MFA m\u1edbi ph\u1ee5 thu\u1ed9c qu\u00e1 nhi\u1ec1u v\u00e0o cu\u1ed9c g\u1ecdi tho\u1ea1i, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 bi\u1ebfn b\u1ed9 ph\u1eadn h\u1ed7 tr\u1ee3 th\u00e0nh \u0111i\u1ec3m kh\u1edfi \u0111\u1ea7u cho m\u1ed9t v\u1ee5 x\u00e2m nh\u1eadp quy m\u00f4 l\u1edbn.<\/p>\n

B\u00e0i h\u1ecdc k\u1ef9 thu\u1eadt v\u00e0 qu\u1ea3n tr\u1ecb<\/h2>\n

Health-ISAC khuy\u1ebfn ngh\u1ecb c\u00e1c t\u1ed5 ch\u1ee9c y t\u1ebf coi SSO nh\u01b0 t\u00e0i s\u1ea3n tr\u1ecdng y\u1ebfu c\u1ea5p cao, y\u00eau c\u1ea7u x\u00e1c minh ngo\u00e0i k\u00eanh \u0111\u1ed1i v\u1edbi m\u1ecdi y\u00eau c\u1ea7u reset m\u1eadt kh\u1ea9u, reset MFA ho\u1eb7c \u0111\u0103ng k\u00fd thi\u1ebft b\u1ecb m\u1edbi. Quy t\u1eafc \u201ckh\u00f4ng x\u1eed l\u00fd ngay trong c\u00f9ng cu\u1ed9c g\u1ecdi\u201d l\u00e0 m\u1ed9t bi\u1ec7n ph\u00e1p \u0111\u01a1n gi\u1ea3n nh\u01b0ng quan tr\u1ecdng: y\u00eau c\u1ea7u ph\u1ea3i \u0111i qua ticket, callback t\u1edbi s\u1ed1 \u0111\u00e3 x\u00e1c minh tr\u01b0\u1edbc v\u00e0 ph\u00ea duy\u1ec7t b\u1ed5 sung v\u1edbi t\u00e0i kho\u1ea3n \u0111\u1eb7c quy\u1ec1n.<\/p>\n

C\u00e1c t\u1ed5 ch\u1ee9c c\u0169ng c\u1ea7n tri\u1ec3n khai MFA ch\u1ed1ng phishing nh\u01b0 FIDO2 ho\u1eb7c WebAuthn cho qu\u1ea3n tr\u1ecb vi\u00ean, nh\u00e2n s\u1ef1 h\u1ed7 tr\u1ee3, l\u00e3nh \u0111\u1ea1o v\u00e0 nh\u00f3m c\u00f3 quy\u1ec1n truy c\u1eadp d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m. Song song \u0111\u00f3, c\u1ea7n gi\u00e1m s\u00e1t \u0111\u0103ng k\u00fd MFA m\u1edbi, thi\u1ebft b\u1ecb m\u1edbi, c\u1ea5p quy\u1ec1n OAuth b\u1ea5t th\u01b0\u1eddng, t\u1ea3i d\u1eef li\u1ec7u h\u00e0ng lo\u1ea1t, truy c\u1eadp t\u1eeb v\u1ecb tr\u00ed \u0111\u1ecba l\u00fd b\u1ea5t h\u1ee3p l\u00fd v\u00e0 ho\u1ea1t \u0111\u1ed9ng API ngo\u00e0i m\u1eabu b\u00ecnh th\u01b0\u1eddng.<\/p>\n

K\u1ebft lu\u1eadn<\/h2>\n

H\u1ed3 s\u01a1 ShinyHunters cho th\u1ea5y ranh gi\u1edbi gi\u1eefa \u201cl\u1eeba \u0111\u1ea3o x\u00e3 h\u1ed9i\u201d v\u00e0 \u201cx\u00e2m nh\u1eadp k\u1ef9 thu\u1eadt\u201d ng\u00e0y c\u00e0ng m\u1edd. Khi t\u00e0i kho\u1ea3n h\u1ee3p l\u1ec7 tr\u1edf th\u00e0nh ch\u00eca kh\u00f3a \u0111i v\u00e0o SaaS, h\u1ec7 th\u1ed1ng ph\u00f2ng th\u1ee7 kh\u00f4ng th\u1ec3 ch\u1ec9 d\u1ef1a v\u00e0o m\u1eadt kh\u1ea9u m\u1ea1nh ho\u1eb7c c\u1ea3nh b\u00e1o sau khi d\u1eef li\u1ec7u \u0111\u00e3 b\u1ecb t\u1ea3i xu\u1ed1ng. V\u1ee5 McKesson, d\u00f9 c\u00f2n \u0111ang \u0111i\u1ec1u tra, l\u00e0 l\u1eddi nh\u1eafc r\u1eb1ng quy tr\u00ecnh h\u1ed7 tr\u1ee3 danh t\u00ednh, ki\u1ec3m so\u00e1t SSO v\u00e0 gi\u00e1m s\u00e1t d\u1eef li\u1ec7u \u0111\u00e1m m\u00e2y ph\u1ea3i \u0111\u01b0\u1ee3c xem l\u00e0 m\u1ed9t ph\u1ea7n c\u1ed1t l\u00f5i c\u1ee7a an ninh y t\u1ebf hi\u1ec7n \u0111\u1ea1i.<\/p>\n

VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb BleepingComputer, McKesson, SEC v\u00e0 Health-ISAC<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

V\u1ee5 vi\u1ec7c McKesson c\u00f4ng b\u1ed1 s\u1ef1 c\u1ed1 an ninh m\u1ea1ng ng\u00e0y 28\/8\/2026 \u0111ang l\u00e0m n\u1ed5i b\u1eadt m\u1ed9t v\u1ea5n \u0111\u1ec1 l\u1edbn h\u01a1n trong ng\u00e0nh y t\u1ebf: nh\u00f3m t\u1ed1ng ti\u1ec1n d\u1eef li\u1ec7u ShinyHunters kh\u00f4ng ch\u1ec9 t\u00ecm l\u1ed7 h\u1ed5ng k\u1ef9 thu\u1eadt, m\u00e0 c\u00f2n khai th\u00e1c \u0111i\u1ec3m y\u1ebfu trong quy tr\u00ecnh x\u00e1c minh danh t\u00ednh, h\u1ed7 tr\u1ee3 t\u00e0i kho\u1ea3n […]<\/p>\n","protected":false},"author":2,"featured_media":1980,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[70],"tags":[721,723,718,719,724,215,717,720,722,172],"class_list":["post-1982","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ho-so","tag-du-lieu-y-te","tag-health-isac","tag-mckesson","tag-okta-sso","tag-phishing-resistant-mfa","tag-salesforce","tag-shinyhunters","tag-snowflake","tag-tong-tien-du-lieu","tag-vishing"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1982","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=1982"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/1982\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1980"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=1982"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=1982"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=1982"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}