{"id":745,"date":"2026-04-21T23:11:06","date_gmt":"2026-04-21T16:11:06","guid":{"rendered":"https:\/\/vncybers.vn\/canh-bao-ma-doc-ngate-tren-android-danh-cap-the-ngan-hang-qua-nfc-ma-pin-bi-lo-ngay-lap-tuc\/"},"modified":"2026-04-23T21:26:49","modified_gmt":"2026-04-23T14:26:49","slug":"canh-bao-ma-doc-ngate-tren-android-danh-cap-the-ngan-hang-qua-nfc-ma-pin-bi-lo-ngay-lap-tuc","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/canh-bao-ma-doc-ngate-tren-android-danh-cap-the-ngan-hang-qua-nfc-ma-pin-bi-lo-ngay-lap-tuc\/","title":{"rendered":"C\u1ea3nh b\u00e1o: M\u00e3 \u0111\u1ed9c NGate \u0111\u00e1nh c\u1eafp th\u1ebb ng\u00e2n h\u00e0ng qua NFC v\u00e0 \u0111\u00e1nh c\u1eafp m\u00e3 PIN"},"content":{"rendered":"<figure class=\"wp-block-image aligncenter\"><img decoding=\"async\" src=\"https:\/\/vncybers.vn\/wp-content\/uploads\/2026\/04\/nfc-malware-ngate-2026.jpg\" alt=\"M\u00e3 \u0111\u1ed9c NGate \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u NFC v\u00e0 m\u00e3 PIN th\u1ebb ng\u00e2n h\u00e0ng\" style=\"max-width:800px;width:100%;height:auto\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt t\u1ea1i ESET v\u1eeba c\u00f4ng b\u1ed1 b\u00e1o c\u00e1o v\u1ec1 m\u1ed9t bi\u1ebfn th\u1ec3 m\u1edbi nguy hi\u1ec3m c\u1ee7a d\u00f2ng m\u00e3 \u0111\u1ed9c Android c\u00f3 t\u00ean <strong>NGate<\/strong> (hay c\u00f2n g\u1ecdi l\u00e0 NFSkate). Kh\u00e1c v\u1edbi c\u00e1c phi\u00ean b\u1ea3n tr\u01b0\u1edbc l\u1ee3i d\u1ee5ng c\u00f4ng c\u1ee5 NFCGate, l\u1ea7n n\u00e0y k\u1ebb t\u1ea5n c\u00f4ng \u0111\u00e3 <strong>trojan h\u00f3a<\/strong> m\u1ed9t \u1ee9ng d\u1ee5ng thanh to\u00e1n h\u1ee3p ph\u00e1p t\u00ean <strong>HandyPay<\/strong>, nh\u00fang m\u00e3 \u0111\u1ed9c c\u00f3 d\u1ea5u hi\u1ec7u \u0111\u01b0\u1ee3c t\u1ea1o ra b\u1eb1ng AI v\u00e0o trong \u1ee9ng d\u1ee5ng v\u00e0 ph\u00e1t t\u00e1n ngo\u00e0i Google Play Store.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">C\u01a1 ch\u1ebf t\u1ea5n c\u00f4ng: \u0110\u00e1nh c\u1eafp NFC v\u00e0 m\u00e3 PIN<\/h2>\n\n\n<p class=\"wp-block-paragraph\">Khi n\u1ea1n nh\u00e2n c\u00e0i \u0111\u1eb7t \u1ee9ng d\u1ee5ng HandyPay gi\u1ea3 m\u1ea1o, m\u00e3 \u0111\u1ed9c NGate th\u1ef1c hi\u1ec7n hai h\u00e0nh \u0111\u1ed9ng song song:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>Chuy\u1ec3n ti\u1ebfp d\u1eef li\u1ec7u NFC<\/strong> t\u1eeb th\u1ebb ng\u00e2n h\u00e0ng c\u1ee7a n\u1ea1n nh\u00e2n \u0111\u1ebfn thi\u1ebft b\u1ecb c\u1ee7a k\u1ebb t\u1ea5n c\u00f4ng theo th\u1eddi gian th\u1ef1c<\/li><li><strong>\u0110\u00e1nh c\u1eafp m\u00e3 PIN<\/strong> v\u00e0 g\u1eedi v\u1ec1 m\u00e1y ch\u1ee7 \u0111i\u1ec1u khi\u1ec3n (C&amp;C) qua giao th\u1ee9c HTTP<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">V\u1edbi d\u1eef li\u1ec7u NFC v\u00e0 m\u00e3 PIN trong tay, k\u1ebb t\u1ea5n c\u00f4ng c\u00f3 th\u1ec3 t\u1ea1o th\u1ebb \u1ea3o v\u00e0 r\u00fat ti\u1ec1n tr\u1ef1c ti\u1ebfp t\u1ea1i ATM ho\u1eb7c th\u1ef1c hi\u1ec7n thanh to\u00e1n kh\u00f4ng ti\u1ebfp x\u00fac, m\u00e0 kh\u00f4ng c\u1ea7n s\u1edf h\u1eefu th\u1ebb v\u1eadt l\u00fd c\u1ee7a n\u1ea1n nh\u00e2n.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">B\u1eb1ng ch\u1ee9ng t\u1eeb m\u00e1y ch\u1ee7 C&amp;C<\/h2>\n\n\n<p class=\"wp-block-paragraph\">ESET ph\u00e1t hi\u1ec7n log t\u1eeb <strong>4 thi\u1ebft b\u1ecb b\u1ecb nhi\u1ec5m<\/strong> tr\u00ean m\u00e1y ch\u1ee7 c\u1ee7a k\u1ebb t\u1ea5n c\u00f4ng, t\u1ea5t c\u1ea3 \u0111\u1ec1u \u0111\u1ecbnh v\u1ecb t\u1ea1i Brazil. D\u1eef li\u1ec7u b\u1ecb \u0111\u00e1nh c\u1eafp bao g\u1ed3m m\u00e3 PIN, \u0111\u1ecba ch\u1ec9 IP v\u00e0 timestamp, \u0111\u1ee7 \u0111\u1ec3 x\u00e1c nh\u1eadn m\u1ee9c \u0111\u1ed9 nguy hi\u1ec3m c\u1ee7a chi\u1ebfn d\u1ecbch. \u0110\u1eb7c bi\u1ec7t, \u1ee9ng d\u1ee5ng HandyPay gi\u1ea3 m\u1ea1o <strong>ch\u01b0a bao gi\u1edd xu\u1ea5t hi\u1ec7n tr\u00ean Google Play Store ch\u00ednh th\u1ee9c<\/strong>, cho th\u1ea5y n\u1ea1n nh\u00e2n b\u1ecb l\u1eeba c\u00e0i \u0111\u1eb7t qua c\u00e1c k\u00eanh kh\u00f4ng ch\u00ednh th\u1ee9c.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">AI \u0111\u01b0\u1ee3c v\u0169 kh\u00ed h\u00f3a \u0111\u1ec3 t\u1ea1o m\u00e3 \u0111\u1ed9c<\/h2>\n\n\n<p class=\"wp-block-paragraph\">\u0110i\u1ec3m \u0111\u00e1ng lo ng\u1ea1i nh\u1ea5t: \u0111o\u1ea1n m\u00e3 \u0111\u1ed9c \u0111\u01b0\u1ee3c nh\u00fang v\u00e0o HandyPay <strong>c\u00f3 d\u1ea5u hi\u1ec7u \u0111\u01b0\u1ee3c t\u1ea1o b\u1eb1ng AI<\/strong>, theo ph\u00e2n t\u00edch c\u1ee7a nh\u00e0 nghi\u00ean c\u1ee9u Luk\u00e1\u0161 \u0160tefanko t\u1eeb ESET. \u0110i\u1ec1u n\u00e0y ph\u00f9 h\u1ee3p v\u1edbi xu h\u01b0\u1edbng \u0111\u00e1ng b\u00e1o \u0111\u1ed9ng n\u0103m 2026, t\u1ed9i ph\u1ea1m m\u1ea1ng \u0111ang t\u1eadn d\u1ee5ng AI \u0111\u1ec3 t\u0103ng t\u1ed1c \u0111\u1ed9 t\u1ea1o ra ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i v\u1edbi chi ph\u00ed g\u1ea7n nh\u01b0 b\u1eb1ng kh\u00f4ng.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">C\u00e1ch t\u1ef1 b\u1ea3o v\u1ec7<\/h2>\n\n\n<ol class=\"wp-block-list\"><li><strong>Ch\u1ec9 c\u00e0i \u1ee9ng d\u1ee5ng t\u1eeb Google Play Store ch\u00ednh th\u1ee9c<\/strong>, kh\u00f4ng c\u00e0i APK t\u1eeb ngu\u1ed3n l\u1ea1<\/li><li><strong>Ki\u1ec3m tra quy\u1ec1n \u1ee9ng d\u1ee5ng<\/strong>, \u1ee9ng d\u1ee5ng thanh to\u00e1n kh\u00f4ng c\u1ea7n quy\u1ec1n truy c\u1eadp NFC b\u1ea5t th\u01b0\u1eddng<\/li><li><strong>B\u1eadt th\u00f4ng b\u00e1o giao d\u1ecbch<\/strong> t\u1eeb ng\u00e2n h\u00e0ng \u0111\u1ec3 ph\u00e1t hi\u1ec7n ngay khi c\u00f3 giao d\u1ecbch b\u1ea5t th\u01b0\u1eddng<\/li><li><strong>D\u00f9ng th\u1ebb \u1ea3o<\/strong> (virtual card) cho giao d\u1ecbch NFC thay v\u00ec th\u1ebb ch\u00ednh<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<\/p>\n\n\n<p class=\"wp-block-paragraph\"><em><strong>VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb: The Hacker News, BleepingComputer, ESET Research, C\u1eadp nh\u1eadt ng\u00e0y 21\/4\/2026<\/em><\/p>","protected":false},"excerpt":{"rendered":"<p>C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u ESET ph\u00e1t hi\u1ec7n bi\u1ebfn th\u1ec3 m\u1edbi c\u1ee7a m\u00e3 \u0111\u1ed9c NGate nh\u1eafm v\u00e0o ng\u01b0\u1eddi d\u00f9ng Android t\u1ea1i Brazil , \u1ee9ng d\u1ee5ng thanh to\u00e1n HandyPay b\u1ecb trojan h\u00f3a \u0111\u1ec3 \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u NFC v\u00e0 m\u00e3 PIN th\u1ebb ng\u00e2n h\u00e0ng, v\u1edbi m\u00e3 \u0111\u1ed9c c\u00f3 d\u1ea5u hi\u1ec7u \u0111\u01b0\u1ee3c t\u1ea1o b\u1eb1ng AI.<\/p>","protected":false},"author":2,"featured_media":742,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[16,19,15,17,18],"class_list":["post-745","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-android","tag-bao-mat-mobile","tag-ma-doc","tag-nfc","tag-the-ngan-hang"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/745","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=745"}],"version-history":[{"count":10,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/745\/revisions"}],"predecessor-version":[{"id":1088,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/745\/revisions\/1088"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/742"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=745"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=745"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=745"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}