{"id":2195,"date":"2026-11-08T07:20:56","date_gmt":"2026-11-08T00:20:56","guid":{"rendered":"https:\/\/vncybers.vn\/ho-so-slippynunchucks-chiem-dns-darkvigil-sogou\/"},"modified":"2026-11-08T07:20:56","modified_gmt":"2026-11-08T00:20:56","slug":"slippynunchucks-dns-hijacking-darkvigil-sogou-2","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/ho-so-slippynunchucks-chiem-dns-darkvigil-sogou\/","title":{"rendered":"SlippyNunchucks Profile: DNS Hijacking Delivers DarkVigil Through Sogou Input Method"},"content":{"rendered":"

SlippyNunchucks<\/strong>, m\u1ed9t nh\u00f3m \u0111e d\u1ecda \u0111\u01b0\u1ee3c ESET \u0111\u00e1nh gi\u00e1 c\u00f3 li\u00ean h\u1ec7 v\u1edbi l\u1ee3i \u00edch c\u1ee7a Trung Qu\u1ed1c, \u0111\u00e3 khai th\u00e1c k\u1ebft n\u1ed1i HTTP kh\u00f4ng m\u00e3 h\u00f3a trong Sogou Input Method \u0111\u1ec3 ph\u00e1t t\u00e1n b\u1ed9 c\u00f4ng c\u1ee5 gi\u00e1n \u0111i\u1ec7p DarkVigil. Chi\u1ebfn d\u1ecbch \u0111\u00e1ng ch\u00fa \u00fd v\u00ec n\u1ea1n nh\u00e2n xu\u1ea5t hi\u1ec7n t\u1ea1i nhi\u1ec1u qu\u1ed1c gia, trong \u0111\u00f3 c\u00f3 Vi\u1ec7t Nam, v\u00e0 m\u00e3 \u0111\u1ed9c \u0111\u01b0\u1ee3c th\u1ef1c thi th\u00f4ng qua ch\u00ednh quy tr\u00ecnh h\u1ee3p l\u1ec7 c\u1ee7a m\u1ed9t ph\u1ea7n m\u1ec1m nh\u1eadp li\u1ec7u ph\u1ed5 bi\u1ebfn.<\/p>\n

SlippyNunchucks l\u00e0 ai?<\/h2>\n

ESET theo d\u00f5i t\u00e1c nh\u00e2n n\u00e0y d\u01b0\u1edbi t\u00ean SlippyNunchucks v\u00e0 cho bi\u1ebft nh\u00f3m ho\u1ea1t \u0111\u1ed9ng \u00edt nh\u1ea5t t\u1eeb th\u00e1ng 9\/2023. Ho\u1ea1t \u0111\u1ed9ng ch\u1ee7 \u0111\u1ea1o l\u00e0 tri\u1ec3n khai DarkVigil, c\u00f2n \u0111\u01b0\u1ee3c m\u1ed9t s\u1ed1 ngu\u1ed3n g\u1ecdi l\u00e0 FDMTP: b\u1ed9 c\u00f4ng c\u1ee5 .NET d\u1ea1ng m\u00f4-\u0111un g\u1ed3m implant ch\u00ednh c\u00f9ng h\u01a1n 20 plugin ph\u1ee5c v\u1ee5 gi\u00e1m s\u00e1t, \u0111i\u1ec1u khi\u1ec3n v\u00e0 thu th\u1eadp d\u1eef li\u1ec7u.<\/p>\n

Theo d\u1eef li\u1ec7u c\u1ee7a ESET, nh\u00f3m t\u1eadp trung v\u00e0o t\u1ed5 ch\u1ee9c v\u00e0 ng\u01b0\u1eddi d\u00f9ng n\u00f3i ti\u1ebfng Trung t\u1ea1i Nam \u00c1, \u0110\u00f4ng \u00c1, \u0111\u1ed3ng th\u1eddi \u0111\u00f4i l\u00fac xu\u1ea5t hi\u1ec7n t\u1ea1i ch\u00e2u \u00c2u. C\u00e1c m\u1ee5c ti\u00eau \u0111\u01b0\u1ee3c ghi nh\u1eadn g\u1ed3m doanh nghi\u1ec7p v\u1eadn h\u00e0nh n\u1ec1n t\u1ea3ng c\u00e1 c\u01b0\u1ee3c b\u1eb1ng ti\u1ebfng Trung, qu\u00e1n Internet v\u00e0 c\u00e1 nh\u00e2n. ESET \u0111\u00e1nh gi\u00e1 v\u1edbi \u0111\u1ed9 tin c\u1eady cao r\u1eb1ng ho\u1ea1t \u0111\u1ed9ng n\u00e0y ph\u00f9 h\u1ee3p v\u1edbi m\u1ed9t n\u1ed7 l\u1ef1c gi\u00e1m s\u00e1t c\u1ea5p nh\u00e0 n\u01b0\u1edbc, nh\u01b0ng nh\u1ea5n m\u1ea1nh ch\u01b0a th\u1ea5y b\u1eb1ng ch\u1ee9ng k\u1ef9 thu\u1eadt \u0111\u1ec3 \u0111\u1ed3ng nh\u1ea5t SlippyNunchucks v\u1edbi Mustang Panda.<\/p>\n

T\u1eeb QuickFox \u0111\u1ebfn Sogou Input Method<\/h2>\n

T\u1eeb n\u0103m 2025, DarkVigil th\u01b0\u1eddng \u0111\u01b0\u1ee3c \u0111\u01b0a t\u1edbi n\u1ea1n nh\u00e2n th\u00f4ng qua c\u00e1c \u1ee9ng d\u1ee5ng Trung Qu\u1ed1c ph\u1ed5 bi\u1ebfn. M\u1ed9t con \u0111\u01b0\u1eddng t\u1eebng \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 l\u00e0 v\u1ee5 x\u00e2m ph\u1ea1m chu\u1ed7i cung \u1ee9ng QuickFox. Sau khi QuickFox ph\u00e1t h\u00e0nh phi\u00ean b\u1ea3n s\u1ea1ch v\u00e0o cu\u1ed1i th\u00e1ng 6\/2026, ESET v\u1eabn th\u1ea5y implant DarkVigil ti\u1ebfp t\u1ee5c \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t.<\/p>\n

Ng\u00e0y 1\/7\/2026, th\u00e0nh ph\u1ea7n h\u1ee3p l\u1ec7 SGTool.exe c\u1ee7a Sogou Input Method b\u1eaft \u0111\u1ea7u ch\u1ea1y implant tr\u00ean h\u1ec7 th\u1ed1ng n\u1ea1n nh\u00e2n. \u0110i\u1ec1u tra sau \u0111\u00f3 cho th\u1ea5y k\u1ebb t\u1ea5n c\u00f4ng kh\u00f4ng c\u1ea7n s\u1eeda b\u1ed9 c\u00e0i Sogou: ch\u00fang chi\u1ebfm h\u01b0\u1edbng ph\u00e2n gi\u1ea3i DNS c\u1ee7a m\u00e1y ch\u1ee7 c\u1ea5u h\u00ecnh, r\u1ed3i l\u1ee3i d\u1ee5ng m\u1ed9t y\u00eau c\u1ea7u HTTP trong c\u01a1 ch\u1ebf qu\u1ea3ng b\u00e1 t\u1eeb \u0111i\u1ec3n th\u01b0\u01a1ng hi\u1ec7u \u0111\u1ec3 tr\u1ea3 v\u1ec1 c\u1ea5u h\u00ecnh \u0111\u1ed9c h\u1ea1i.<\/p>\n

L\u1ed7 h\u1ed5ng CVE-2026-120422 ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/h2>\n

SGTool.exe g\u1eedi y\u00eau c\u1ea7u t\u1edbi m\u00e1y ch\u1ee7 config.pinyin.sogou[.]com<\/code> \u0111\u1ec3 l\u1ea5y c\u1ea5u h\u00ecnh bi\u1ec3u t\u01b0\u1ee3ng cho c\u00e1c t\u1eeb \u0111i\u1ec3n th\u01b0\u01a1ng hi\u1ec7u. D\u00f9 t\u00ean mi\u1ec1n ch\u00ednh th\u1ee9c h\u1ed7 tr\u1ee3 HTTPS, m\u1ed9t s\u1ed1 endpoint c\u1ee7a \u1ee9ng d\u1ee5ng l\u1ea1i \u0111\u01b0\u1ee3c g\u1ecdi b\u1eb1ng HTTP thu\u1ea7n. V\u00ec k\u1ebft n\u1ed1i kh\u00f4ng c\u00f3 TLS, b\u00ean ki\u1ec3m so\u00e1t \u0111\u01b0\u1eddng \u0111i DNS ho\u1eb7c l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng c\u00f3 th\u1ec3 chuy\u1ec3n y\u00eau c\u1ea7u sang m\u00e1y ch\u1ee7 d\u00e0n d\u1ef1ng v\u00e0 cung c\u1ea5p c\u1ea5u h\u00ecnh gi\u1ea3.<\/p>\n

Trong m\u00f4i tr\u01b0\u1eddng b\u1ecb \u1ea3nh h\u01b0\u1edfng, t\u00ean mi\u1ec1n ch\u00ednh th\u1ee9c \u0111\u01b0\u1ee3c ph\u00e2n gi\u1ea3i v\u1ec1 hai \u0111\u1ecba ch\u1ec9 do k\u1ebb t\u1ea5n c\u00f4ng ki\u1ec3m so\u00e1t. C\u1ea5u h\u00ecnh \u0111\u1ed9c h\u1ea1i y\u00eau c\u1ea7u t\u1ea3i m\u1ed9t t\u1ec7p Adobe h\u1ee3p l\u1ec7 \u0111\u00e3 \u0111\u01b0\u1ee3c \u0111\u1ed5i t\u00ean v\u00e0 th\u01b0 vi\u1ec7n libcef.dll<\/code> ch\u1ee9a implant DarkVigil. C\u00e1c tr\u01b0\u1eddng ki\u1ec3m tra to\u00e0n v\u1eb9n c\u0169ng b\u1ecb thay \u0111\u1ed5i \u0111\u1ec3 kh\u1edbp v\u1edbi payload c\u1ee7a k\u1ebb t\u1ea5n c\u00f4ng.<\/p>\n

\"S\u01a1
S\u01a1 \u0111\u1ed3 chi\u1ebfn d\u1ecbch chi\u1ebfm DNS v\u00e0 chu\u1ed7i th\u1ef1c thi DarkVigil qua Sogou Input Method. Ngu\u1ed3n: ESET Research.<\/figcaption><\/figure>\n

DLL side-loading bi\u1ebfn lu\u1ed3ng h\u1ee3p l\u1ec7 th\u00e0nh c\u01a1 ch\u1ebf b\u00e1m tr\u1ee5<\/h2>\n

Payload \u0111\u01b0\u1ee3c \u0111\u1eb7t v\u00e0o c\u00e1c th\u01b0 m\u1ee5c m\u00e0 Sogou Input Method v\u1ed1n s\u1eed d\u1ee5ng \u0111\u1ec3 qu\u1ea3n l\u00fd th\u00e0nh ph\u1ea7n. T\u1ec7p Adobe c\u00f3 ch\u1eef k\u00fd s\u1ed1 h\u1ee3p l\u1ec7 \u0111\u01b0\u1ee3c \u0111\u1ed5i t\u00ean th\u00e0nh SogouComMgr.exe<\/code> ho\u1eb7c \u0111\u1eb7t trong th\u01b0 m\u1ee5c BizCenter; khi ch\u1ea1y, n\u00f3 n\u1ea1p k\u00e8m th\u01b0 vi\u1ec7n libcef.dll<\/code> \u0111\u1ed9c h\u1ea1i b\u1eb1ng k\u1ef9 thu\u1eadt DLL side-loading.<\/p>\n

C\u00e1ch l\u00e0m n\u00e0y gi\u00fap DarkVigil \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t l\u1eb7p l\u1ea1i th\u00f4ng qua quy tr\u00ecnh c\u1eadp nh\u1eadt v\u00e0 g\u1ecdi th\u00e0nh ph\u1ea7n s\u1eb5n c\u00f3, thay v\u00ec ph\u1ea3i t\u1ea1o m\u1ed9t c\u01a1 ch\u1ebf kh\u1edfi \u0111\u1ed9ng m\u1edbi d\u1ec5 b\u1ecb ph\u00e1t hi\u1ec7n. Tuy nhi\u00ean, vi\u1ec7c thay th\u1ebf t\u1ec7p qu\u1ea3n l\u00fd th\u00e0nh ph\u1ea7n c\u0169ng c\u00f3 th\u1ec3 l\u00e0m ph\u1ea7n m\u1ec1m l\u1ed7i v\u00e0 \u0111\u1ec3 l\u1ea1i d\u1ea5u hi\u1ec7u \u0111i\u1ec1u tra. DarkVigil sau \u0111\u00f3 d\u00f9ng Duplex Message Transport Protocol, m\u1ed9t giao th\u1ee9c linh ho\u1ea1t h\u1ed7 tr\u1ee3 RPC ng\u01b0\u1ee3c v\u00e0 nhi\u1ec1u k\u00eanh truy\u1ec1n, \u0111\u1ec3 li\u00ean l\u1ea1c v\u1edbi h\u1ea1 t\u1ea7ng ch\u1ec9 huy\u2013ki\u1ec3m so\u00e1t.<\/p>\n

Ph\u1ea1m vi n\u1ea1n nh\u00e2n v\u00e0 \u0111i\u1ec1u c\u00f2n ch\u01b0a r\u00f5<\/h2>\n

ESET ghi nh\u1eadn ho\u1ea1t \u0111\u1ed9ng t\u1ea1i Hong Kong, Th\u00e1i Lan, Nh\u1eadt B\u1ea3n, Vi\u1ec7t Nam, Oman v\u00e0 Sri Lanka. Ph\u00e2n b\u1ed1 \u0111\u1ecba l\u00fd r\u1ed9ng ban \u0111\u1ea7u khi\u1ebfn chi\u1ebfn d\u1ecbch tr\u00f4ng gi\u1ed1ng m\u1ed9t v\u1ee5 khai th\u00e1c ph\u1ea7n m\u1ec1m di\u1ec7n r\u1ed9ng, nh\u01b0ng b\u1eb1ng ch\u1ee9ng cu\u1ed1i c\u00f9ng ch\u1ec9 ra vi\u1ec7c chi\u1ebfm DNS k\u1ebft h\u1ee3p v\u1edbi HTTP kh\u00f4ng m\u00e3 h\u00f3a.<\/p>\n

\u0110i\u1ec3m thao t\u00fang DNS v\u1eabn ch\u01b0a \u0111\u01b0\u1ee3c x\u00e1c \u0111\u1ecbnh. C\u00e1c kh\u1ea3 n\u0103ng g\u1ed3m router b\u1ecb \u0111\u1ed5i c\u1ea5u h\u00ecnh DNS, m\u00e3 \u0111\u1ed9c tr\u00ean thi\u1ebft b\u1ecb m\u1ea1ng can thi\u1ec7p truy v\u1ea5n, ho\u1eb7c ch\u1eb7n l\u01b0u l\u01b0\u1ee3ng \u1edf c\u1ea5p nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 Internet. V\u00ec ch\u01b0a c\u00f3 b\u1eb1ng ch\u1ee9ng k\u1ebft lu\u1eadn, t\u1ed5 ch\u1ee9c kh\u00f4ng n\u00ean quy m\u1ecdi ca nhi\u1ec5m cho ISP; c\u1ea7n ki\u1ec3m tra \u0111\u1ed3ng th\u1eddi endpoint, router, DNS resolver v\u00e0 nh\u1eadt k\u00fd m\u1ea1ng.<\/p>\n

Tencent \u0111\u00e3 v\u00e1 v\u00e0 ng\u01b0\u1eddi d\u00f9ng c\u1ea7n l\u00e0m g\u00ec?<\/h2>\n

ESET b\u00e1o c\u00e1o v\u1ea5n \u0111\u1ec1 cho Tencent ng\u00e0y 11\/9\/2026; Tencent x\u00e1c nh\u1eadn ng\u00e0y 21\/9 v\u00e0 kh\u1eafc ph\u1ee5c trong Sogou Input Method 16.10 v\u00e0o cu\u1ed1i th\u00e1ng 10. B\u1ea3n c\u1eadp nh\u1eadt chuy\u1ec3n c\u00e1c y\u00eau c\u1ea7u li\u00ean quan sang HTTPS v\u00e0 b\u1eadt certificate pinning. Ng\u00e0y 2\/11, \u0111i\u1ec3m y\u1ebfu \u0111\u01b0\u1ee3c g\u00e1n m\u00e3 CVE-2026-120422<\/strong>; b\u00e1o c\u00e1o k\u1ef9 thu\u1eadt \u0111\u1ea7y \u0111\u1ee7 \u0111\u01b0\u1ee3c c\u00f4ng b\u1ed1 ng\u00e0y 4\/11.<\/p>\n

    \n
  • C\u1eadp nh\u1eadt Sogou Input Method tr\u00ean Windows l\u00ean phi\u00ean b\u1ea3n 16.10 ho\u1eb7c m\u1edbi h\u01a1n; g\u1ee1 b\u1ea3n c\u0169 kh\u1ecfi c\u00e1c m\u00e1y kh\u00f4ng c\u00f2n nhu c\u1ea7u s\u1eed d\u1ee5ng.<\/li>\n
  • Ki\u1ec3m tra s\u1ef1 thay \u0111\u1ed5i b\u1ea5t th\u01b0\u1eddng c\u1ee7a SogouComMgr.exe<\/code>, th\u01b0 vi\u1ec7n libcef.dll<\/code> v\u00e0 c\u00e1c th\u01b0 m\u1ee5c th\u00e0nh ph\u1ea7n BizCenter.<\/li>\n
  • R\u00e0 so\u00e1t truy v\u1ea5n DNS v\u00e0 k\u1ebft n\u1ed1i t\u1edbi h\u1ea1 t\u1ea7ng \u0111\u00e1ng ng\u1edd; \u01b0u ti\u00ean DNS c\u00f3 x\u00e1c th\u1ef1c v\u00e0 gi\u00e1m s\u00e1t vi\u1ec7c thay \u0111\u1ed5i c\u1ea5u h\u00ecnh router.<\/li>\n
  • S\u1eed d\u1ee5ng ki\u1ec3m so\u00e1t \u1ee9ng d\u1ee5ng, EDR v\u00e0 gi\u00e1m s\u00e1t h\u00e0nh vi DLL side-loading thay v\u00ec ch\u1ec9 d\u1ef1a v\u00e0o ch\u1eef k\u00fd s\u1ed1 c\u1ee7a t\u1ec7p th\u1ef1c thi.<\/li>\n<\/ul>\n

    B\u00e0i h\u1ecdc t\u1eeb m\u1ed9t y\u00eau c\u1ea7u HTTP nh\u1ecf<\/h2>\n

    Chi\u1ebfn d\u1ecbch cho th\u1ea5y m\u1ed9t ch\u1ee9c n\u0103ng ph\u1ee5 t\u01b0\u1edfng nh\u01b0 v\u00f4 h\u1ea1i c\u00f3 th\u1ec3 tr\u1edf th\u00e0nh m\u1eaft x\u00edch ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c khi thi\u1ebfu b\u1ea3o v\u1ec7 \u0111\u01b0\u1eddng truy\u1ec1n. HTTPS v\u00e0 x\u00e1c th\u1ef1c ch\u1ee9ng th\u01b0 kh\u00f4ng ch\u1ec9 d\u00e0nh cho \u0111\u0103ng nh\u1eadp hay d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m: m\u1ecdi c\u1ea5u h\u00ecnh c\u00f3 th\u1ec3 \u0111i\u1ec1u khi\u1ec3n v\u1ecb tr\u00ed t\u1ea3i v\u00e0 th\u1ef1c thi t\u1ec7p \u0111\u1ec1u ph\u1ea3i \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 nh\u01b0 m\u1ed9t k\u00eanh c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m.<\/p>\n

    V\u1edbi doanh nghi\u1ec7p c\u00f3 ng\u01b0\u1eddi d\u00f9ng \u0111a ng\u00f4n ng\u1eef, c\u00e1c b\u1ed9 g\u00f5 v\u00e0 ti\u1ec7n \u00edch \u0111\u1ecba ph\u01b0\u01a1ng c\u1ea7n \u0111\u01b0\u1ee3c \u0111\u01b0a v\u00e0o danh m\u1ee5c t\u00e0i s\u1ea3n, qu\u1ea3n l\u00fd phi\u00ean b\u1ea3n v\u00e0 gi\u00e1m s\u00e1t nh\u01b0 m\u1ecdi ph\u1ea7n m\u1ec1m c\u00f3 quy\u1ec1n th\u1ef1c thi kh\u00e1c. Ph\u00f2ng th\u1ee7 hi\u1ec7u qu\u1ea3 ph\u1ea3i k\u1ebft h\u1ee3p v\u00e1 l\u1ed7i endpoint v\u1edbi b\u1ea3o v\u1ec7 DNS v\u00e0 thi\u1ebft b\u1ecb m\u1ea1ng, b\u1edfi ch\u1ec9 c\u1eadp nh\u1eadt \u1ee9ng d\u1ee5ng s\u1ebd kh\u00f4ng tr\u1ea3 l\u1eddi \u0111\u01b0\u1ee3c c\u00e2u h\u1ecfi h\u1ea1 t\u1ea7ng n\u00e0o \u0111\u00e3 b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 chuy\u1ec3n h\u01b0\u1edbng n\u1ea1n nh\u00e2n.<\/p>\n

    VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb ESET Research<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

    SlippyNunchucks, m\u1ed9t nh\u00f3m \u0111e d\u1ecda \u0111\u01b0\u1ee3c ESET \u0111\u00e1nh gi\u00e1 c\u00f3 li\u00ean h\u1ec7 v\u1edbi l\u1ee3i \u00edch c\u1ee7a Trung Qu\u1ed1c, \u0111\u00e3 khai th\u00e1c k\u1ebft n\u1ed1i HTTP kh\u00f4ng m\u00e3 h\u00f3a trong Sogou Input Method \u0111\u1ec3 ph\u00e1t t\u00e1n b\u1ed9 c\u00f4ng c\u1ee5 gi\u00e1n \u0111i\u1ec7p DarkVigil. Chi\u1ebfn d\u1ecbch \u0111\u00e1ng ch\u00fa \u00fd v\u00ec n\u1ea1n nh\u00e2n xu\u1ea5t hi\u1ec7n t\u1ea1i nhi\u1ec1u qu\u1ed1c gia, trong […]<\/p>\n","protected":false},"author":2,"featured_media":2194,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[70],"tags":[1095,1093,1091,530,239,1094,201,1090,1092],"class_list":["post-2195","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ho-so","tag-bao-mat-dns","tag-cve-2026-120422","tag-darkvigil","tag-dll-side-loading","tag-dns-hijacking","tag-eset-research","tag-gian-diep-mang","tag-slippynunchucks","tag-sogou-input-method"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/2195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=2195"}],"version-history":[{"count":0,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/2195\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/2194"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=2195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=2195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=2195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}