{"id":2133,"date":"2026-10-20T07:18:29","date_gmt":"2026-10-20T00:18:29","guid":{"rendered":"https:\/\/vncybers.vn\/canh-bao-rank-math-pro-3-0-123-ma-doc-cua-hau-wordpress\/"},"modified":"2026-10-20T07:18:29","modified_gmt":"2026-10-20T00:18:29","slug":"rank-math-pro-3-0-123-malware-backdoor-wordpress-2","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/canh-bao-rank-math-pro-3-0-123-ma-doc-cua-hau-wordpress\/","title":{"rendered":"Rank Math PRO 3.0.123 Alert: Official Download Backdoored WordPress Sites"},"content":{"rendered":"

M\u1ed9t s\u1ed1 t\u1ec7p c\u00e0i \u0111\u1eb7t Rank Math PRO 3.0.123 t\u1ea3i t\u1eeb website ch\u00ednh th\u1ee9c \u0111\u00e3 b\u1ecb ch\u00e8n m\u00e3 \u0111\u1ed9c trong kho\u1ea3ng 11 gi\u1edd. Qu\u1ea3n tr\u1ecb vi\u00ean \u0111\u00e3 k\u00edch ho\u1ea1t b\u1ea3n b\u1ecb \u1ea3nh h\u01b0\u1edfng c\u1ea7n coi website l\u00e0 \u0111\u00e3 b\u1ecb x\u00e2m nh\u1eadp, b\u1edfi vi\u1ec7c c\u1eadp nh\u1eadt plugin kh\u00f4ng t\u1ef1 lo\u1ea1i b\u1ecf c\u1eeda h\u1eadu v\u00e0 th\u00f4ng tin x\u00e1c th\u1ef1c c\u00f3 th\u1ec3 \u0111\u00e3 l\u1ed9.<\/p>\n

\"M\u00e1y
M\u00e1y ch\u1ee7 web c\u1ea7n \u0111\u01b0\u1ee3c ki\u1ec3m tra to\u00e0n di\u1ec7n sau m\u1ed9t s\u1ef1 c\u1ed1 chu\u1ed7i cung \u1ee9ng. \u1ea2nh: Christina Morillo\/Pexels.<\/figcaption><\/figure>\n

Kho\u1ea3ng th\u1eddi gian b\u1ecb \u1ea3nh h\u01b0\u1edfng<\/h2>\n

Rank Math cho bi\u1ebft s\u1ef1 c\u1ed1 ch\u1ec9 li\u00ean quan b\u1ea3n PRO 3.0.123 \u0111\u01b0\u1ee3c t\u1ea3i t\u1eeb 20:02 UTC ng\u00e0y 15\/10 \u0111\u1ebfn 07:12 UTC ng\u00e0y 16\/10\/2026. H\u00e3ng \u0111\u00e3 g\u1ee1 t\u1ec7p b\u1ecb can thi\u1ec7p v\u00e0 ph\u00e1t h\u00e0nh b\u1ea3n s\u1ea1ch 3.0.124. B\u1ea3n mi\u1ec5n ph\u00ed tr\u00ean kho WordPress.org kh\u00f4ng b\u1ecb \u1ea3nh h\u01b0\u1edfng.<\/p>\n

M\u00e3 \u0111\u1ed9c l\u00e0m g\u00ec tr\u00ean website?<\/h2>\n

Theo c\u1ea3nh b\u00e1o c\u1ee7a nh\u00e0 cung c\u1ea5p, m\u00e3 \u0111\u1ed9c duy tr\u00ec quy\u1ec1n truy c\u1eadp, li\u00ean l\u1ea1c v\u1edbi t\u00ean mi\u1ec1n rank1cdn[.]com v\u00e0 c\u00f3 th\u1ec3 t\u00e1i t\u1ea1o c\u1eeda h\u1eadu khi c\u00f3 ng\u01b0\u1eddi truy c\u1eadp website. D\u1ea5u v\u1ebft c\u1ea7n ch\u00fa \u00fd g\u1ed3m t\u1ec7p gi\u1ea3 wp-includes\/class-wp-cache-util.php<\/code>, t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb b\u1eaft \u0111\u1ea7u b\u1eb1ng wpsupport_<\/code>, \u0111\u1ecba ch\u1ec9 email mi\u1ec1n wp-mail[.]net<\/code> v\u00e0 t\u00e1c v\u1ee5 cron mang d\u1ea5u #ms6v46<\/code>.<\/p>\n

Nguy c\u01a1 kh\u00f4ng d\u1eebng \u1edf WordPress<\/h2>\n

M\u00e1y ch\u1ee7 web th\u01b0\u1eddng gi\u1eef m\u1eadt kh\u1ea9u c\u01a1 s\u1edf d\u1eef li\u1ec7u, kh\u00f3a API, th\u00f4ng tin SMTP, kh\u00f3a d\u1ecbch v\u1ee5 \u0111\u00e1m m\u00e2y v\u00e0 \u0111\u00f4i khi c\u1ea3 kh\u00f3a SSH. V\u00ec v\u1eady, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 m\u1edf r\u1ed9ng ph\u1ea1m vi kh\u1ecfi m\u1ed9t plugin SEO. BleepingComputer c\u0169ng ph\u00e2n t\u00edch m\u1ed9t m\u1eabu PHP c\u00f3 ch\u1ec9 d\u1ea5u li\u00ean quan, nh\u01b0ng ch\u01b0a x\u00e1c nh\u1eadn m\u1eabu n\u00e0y \u0111\u01b0\u1ee3c ph\u00e2n ph\u1ed1i tr\u1ef1c ti\u1ebfp trong g\u00f3i plugin b\u1ecb can thi\u1ec7p.<\/p>\n

Ai ph\u1ea3i h\u00e0nh \u0111\u1ed9ng ngay?<\/h2>\n

Website \u0111\u00e3 c\u00e0i v\u00e0 k\u00edch ho\u1ea1t 3.0.123 trong khung th\u1eddi gian n\u00eau tr\u00ean ph\u1ea3i \u0111\u01b0\u1ee3c coi l\u00e0 \u0111\u00e3 b\u1ecb x\u00e2m nh\u1eadp. N\u1ebfu ch\u1ec9 t\u1ea3i ho\u1eb7c c\u00e0i nh\u01b0ng ch\u01b0a k\u00edch ho\u1ea1t, qu\u1ea3n tr\u1ecb vi\u00ean n\u00ean x\u00f3a g\u00f3i c\u0169, c\u00e0i 3.0.124 t\u1eeb t\u00e0i kho\u1ea3n Rank Math v\u00e0 qu\u00e9t b\u1ea3o m\u1eadt. Ng\u01b0\u1eddi d\u00f9ng b\u1ea3n mi\u1ec5n ph\u00ed kh\u00f4ng c\u1ea7n h\u00e0nh \u0111\u1ed9ng v\u00ec s\u1ef1 c\u1ed1 n\u00e0y.<\/p>\n

Kh\u00f4i ph\u1ee5c t\u1eeb b\u1ea3n sao l\u01b0u s\u1ea1ch<\/h2>\n

Ph\u01b0\u01a1ng \u00e1n \u01b0u ti\u00ean l\u00e0 kh\u00f4i ph\u1ee5c c\u1ea3 t\u1ec7p v\u00e0 c\u01a1 s\u1edf d\u1eef li\u1ec7u t\u1eeb b\u1ea3n sao tr\u01b0\u1edbc 20:02 UTC ng\u00e0y 15\/10, sau \u0111\u00f3 qu\u00e9t l\u1ea1i v\u00e0 c\u00e0i b\u1ea3n s\u1ea1ch. B\u1ea3n sao l\u01b0u ph\u1ea3i c\u00f3 tr\u01b0\u1edbc th\u1eddi \u0111i\u1ec3m x\u00e2m nh\u1eadp; n\u1ebfu c\u1eeda h\u1eadu \u0111\u00e3 n\u1eb1m trong b\u1ea3n sao, vi\u1ec7c ph\u1ee5c h\u1ed3i s\u1ebd \u0111\u01b0a m\u00e3 \u0111\u1ed9c tr\u1edf l\u1ea1i.<\/p>\n

Kh\u00f4ng th\u1ec3 ch\u1ec9 v\u00f4 hi\u1ec7u h\u00f3a plugin<\/h2>\n

Rank Math nh\u1ea5n m\u1ea1nh vi\u1ec7c v\u00f4 hi\u1ec7u h\u00f3a ho\u1eb7c c\u1eadp nh\u1eadt plugin kh\u00f4ng \u0111\u1ee7. Khi kh\u00f4ng c\u00f3 b\u1ea3n sao l\u01b0u s\u1ea1ch, c\u1ea7n x\u00f3a to\u00e0n b\u1ed9 th\u01b0 m\u1ee5c rank-math-pro<\/code>, lo\u1ea1i b\u1ecf c\u00e1c m\u1ee5c c\u01a1 s\u1edf d\u1eef li\u1ec7u \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c h\u00e3ng c\u00f4ng b\u1ed1, ch\u1eb7n k\u1ebft n\u1ed1i ra rank1cdn[.]com, r\u1ed3i r\u00e0 so\u00e1t plugin, theme, th\u01b0 m\u1ee5c uploads, t\u1ec7p .htaccess, t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb v\u00e0 l\u1ecbch t\u00e1c v\u1ee5.<\/p>\n

Xoay v\u00f2ng m\u1ecdi b\u00ed m\u1eadt c\u00f3 th\u1ec3 \u0111\u00e3 l\u1ed9<\/h2>\n

Sau khi c\u00f4 l\u1eadp v\u00e0 l\u00e0m s\u1ea1ch, qu\u1ea3n tr\u1ecb vi\u00ean c\u1ea7n thay m\u1eadt kh\u1ea9u WordPress, hosting, FTP\/SFTP v\u00e0 SSH; \u0111\u1ed5i th\u00f4ng tin c\u01a1 s\u1edf d\u1eef li\u1ec7u; t\u1ea1o l\u1ea1i security keys v\u00e0 salts; thu h\u1ed3i r\u1ed3i c\u1ea5p l\u1ea1i kh\u00f3a API, SMTP, thanh to\u00e1n v\u00e0 d\u1ecbch v\u1ee5 \u0111\u00e1m m\u00e2y. Nh\u1eadt k\u00fd \u0111\u0103ng nh\u1eadp, ti\u1ebfn tr\u00ecnh v\u00e0 k\u1ebft n\u1ed1i ra ngo\u00e0i c\u0169ng c\u1ea7n \u0111\u01b0\u1ee3c b\u1ea3o to\u00e0n \u0111\u1ec3 \u0111i\u1ec1u tra.<\/p>\n

B\u00e0i h\u1ecdc t\u1eeb s\u1ef1 c\u1ed1 chu\u1ed7i cung \u1ee9ng<\/h2>\n

G\u00f3i t\u1ea3i t\u1eeb website ch\u00ednh th\u1ee9c v\u1eabn c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh k\u00eanh ph\u00e1t t\u00e1n n\u1ebfu h\u1ea1 t\u1ea7ng ph\u00e1t h\u00e0nh b\u1ecb x\u00e2m nh\u1eadp. T\u1ed5 ch\u1ee9c n\u00ean l\u01b0u d\u1ea5u ki\u1ec3m t\u1ec7p, gi\u1edbi h\u1ea1n quy\u1ec1n c\u1ee7a ti\u1ebfn tr\u00ecnh web, t\u00e1ch b\u00ed m\u1eadt kh\u1ecfi m\u00e3 ngu\u1ed3n, gi\u00e1m s\u00e1t thay \u0111\u1ed5i v\u00e0 th\u1eed \u0111\u1ecbnh k\u1ef3 kh\u1ea3 n\u0103ng ph\u1ee5c h\u1ed3i. Nh\u1eefng bi\u1ec7n ph\u00e1p n\u00e0y gi\u1ea3m thi\u1ec7t h\u1ea1i ngay c\u1ea3 khi m\u1ed9t nh\u00e0 cung c\u1ea5p \u0111\u00e1ng tin c\u1eady g\u1eb7p s\u1ef1 c\u1ed1.<\/p>\n

K\u1ebft lu\u1eadn<\/h2>\n

S\u1ef1 c\u1ed1 Rank Math PRO l\u00e0 l\u1eddi nh\u1eafc r\u1eb1ng c\u1eadp nh\u1eadt l\u00ean phi\u00ean b\u1ea3n m\u1edbi ch\u1ec9 x\u1eed l\u00fd ngu\u1ed3n ph\u00e1t t\u00e1n, kh\u00f4ng x\u00f3a \u0111\u01b0\u1ee3c quy\u1ec1n truy c\u1eadp \u0111\u00e3 \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp. Website t\u1eebng k\u00edch ho\u1ea1t 3.0.123 trong c\u1eeda s\u1ed5 \u1ea3nh h\u01b0\u1edfng c\u1ea7n ph\u1ee5c h\u1ed3i ho\u1eb7c l\u00e0m s\u1ea1ch to\u00e0n di\u1ec7n, xoay v\u00f2ng b\u00ed m\u1eadt v\u00e0 ti\u1ebfp t\u1ee5c gi\u00e1m s\u00e1t sau x\u1eed l\u00fd.<\/p>\n

VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb Rank Math v\u00e0 BleepingComputer<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

M\u1ed9t s\u1ed1 t\u1ec7p c\u00e0i \u0111\u1eb7t Rank Math PRO 3.0.123 t\u1ea3i t\u1eeb website ch\u00ednh th\u1ee9c \u0111\u00e3 b\u1ecb ch\u00e8n m\u00e3 \u0111\u1ed9c trong kho\u1ea3ng 11 gi\u1edd. Qu\u1ea3n tr\u1ecb vi\u00ean \u0111\u00e3 k\u00edch ho\u1ea1t b\u1ea3n b\u1ecb \u1ea3nh h\u01b0\u1edfng c\u1ea7n coi website l\u00e0 \u0111\u00e3 b\u1ecb x\u00e2m nh\u1eadp, b\u1edfi vi\u1ec7c c\u1eadp nh\u1eadt plugin kh\u00f4ng t\u1ef1 lo\u1ea1i b\u1ecf c\u1eeda h\u1eadu v\u00e0 th\u00f4ng tin […]<\/p>\n","protected":false},"author":2,"featured_media":2132,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[737,982,898,983,981,87,725],"class_list":["post-2133","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-bao-mat-website","tag-cua-hau","tag-ma-doc-wordpress","tag-rank-math-3-0-123","tag-rank-math-pro","tag-tan-cong-chuoi-cung-ung","tag-wordpress"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/2133","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=2133"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/2133\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/2132"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=2133"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=2133"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=2133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}