{"id":871,"date":"2026-04-22T00:55:43","date_gmt":"2026-04-21T17:55:43","guid":{"rendered":"https:\/\/vncybers.vn\/7-dau-hieu-nhan-biet-email-lua-dao-phishing-ma-ai-cung-nen-biet\/"},"modified":"2026-04-23T21:26:47","modified_gmt":"2026-04-23T14:26:47","slug":"7-dau-hieu-nhan-biet-email-lua-dao-phishing-ma-ai-cung-nen-biet","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/7-dau-hieu-nhan-biet-email-lua-dao-phishing-ma-ai-cung-nen-biet\/","title":{"rendered":"7 d\u1ea5u hi\u1ec7u nh\u1eadn bi\u1ebft email l\u1eeba \u0111\u1ea3o phishing \u0111\u1ec3 b\u1ea3o v\u1ec7 b\u1ea3n th\u00e2n tr\u00ean m\u1ea1ng"},"content":{"rendered":"
\"7<\/figure>\n\n\n\n

B\u1ea1n c\u00f3 bi\u1ebft r\u1eb1ng 91% c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng b\u1eaft \u0111\u1ea7u t\u1eeb m\u1ed9t email l\u1eeba \u0111\u1ea3o<\/strong>? Con s\u1ed1 n\u00e0y theo b\u00e1o c\u00e1o Verizon DBIR v\u00e0 kh\u00f4ng h\u1ec1 gi\u1ea3m trong 5 n\u0103m qua. \u0110\u00e1ng lo h\u01a1n: n\u0103m 2026, c\u00e1c c\u00f4ng c\u1ee5 AI gi\u00fap t\u1ed9i ph\u1ea1m m\u1ea1ng t\u1ea1o ra email gi\u1ea3 m\u1ea1o ho\u00e0n h\u1ea3o, kh\u00f4ng l\u1ed7i ch\u00ednh t\u1ea3, \u0111\u00fang t\u00ean ng\u01b0\u1eddi nh\u1eadn, b\u1eaft ch\u01b0\u1edbc y h\u1ec7t th\u01b0\u01a1ng hi\u1ec7u th\u1eadt. T\u1ef7 l\u1ec7 ng\u01b0\u1eddi b\u1ecb l\u1eeba nh\u1ea5p v\u00e0o link trong email AI-generated l\u00ean \u0111\u1ebfn 54%<\/strong>, so v\u1edbi ch\u1ec9 12% c\u1ee7a email th\u1ee7 c\u00f4ng tr\u01b0\u1edbc \u0111\u00e2y.<\/p>\n\n\n\n

D\u01b0\u1edbi \u0111\u00e2y l\u00e0 7 d\u1ea5u hi\u1ec7u gi\u00fap b\u1ea1n nh\u1eadn ra email l\u1eeba \u0111\u1ea3o, d\u00f9 n\u00f3 \u0111\u01b0\u1ee3c vi\u1ebft b\u1edfi ng\u01b0\u1eddi hay AI.<\/p>\n\n\n\n

1. \u0110\u1ecba ch\u1ec9 email ng\u01b0\u1eddi g\u1eedi tr\u00f4ng “g\u1ea7n gi\u1ed1ng” nh\u01b0ng kh\u00f4ng ph\u1ea3i th\u1eadt<\/h2>\n\n\n

\u0110\u1eebng ch\u1ec9 nh\u00ecn t\u00ean hi\u1ec3n th\u1ecb, h\u00e3y ki\u1ec3m tra \u0111\u1ecba ch\u1ec9 email th\u1ef1c s\u1ef1 ph\u00eda sau. M\u1ed9t email hi\u1ec7n t\u00ean “VCB Internet Banking” nh\u01b0ng g\u1eedi t\u1eeb support@vcb-secure.xyz<\/code> l\u00e0 phishing r\u00f5 r\u00e0ng. K\u1ebb t\u1ea5n c\u00f4ng hay d\u00f9ng c\u00e1c bi\u1ebfn th\u1ec3 g\u1ea7n gi\u1ed1ng: thay ch\u1eef o<\/strong> th\u00e0nh s\u1ed1 0<\/strong>, th\u00eam t\u1eeb nh\u01b0 -secure<\/em>, -support<\/em>, -verify<\/em> v\u00e0o t\u00ean mi\u1ec1n. Domain h\u1ee3p l\u1ec7 lu\u00f4n tr\u00f9ng v\u1edbi website ch\u00ednh th\u1ee9c c\u1ee7a t\u1ed5 ch\u1ee9c \u0111\u00f3.<\/p>\n\n\n\n

2. T\u1ea1o c\u1ea3m gi\u00e1c kh\u1ea9n c\u1ea5p, \u0111e d\u1ecda<\/h2>\n\n\n

VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb: “T\u00e0i kho\u1ea3n c\u1ee7a b\u1ea1n s\u1ebd b\u1ecb kh\u00f3a trong 24 gi\u1edd”<\/em>, “X\u00e1c minh ngay \u0111\u1ec3 tr\u00e1nh m\u1ea5t ti\u1ec1n”<\/em>, “Thanh to\u00e1n th\u1ea5t b\u1ea1i, h\u00e0nh \u0111\u1ed9ng ngay”<\/em>. \u0110\u00e2y l\u00e0 chi\u00eau c\u0169 nh\u01b0ng v\u1eabn hi\u1ec7u qu\u1ea3 nh\u1ea5t. S\u1ef1 kh\u1ea9n c\u1ea5p gi\u1ea3 t\u1ea1o khi\u1ebfn b\u1ea1n m\u1ea5t b\u00ecnh t\u0129nh v\u00e0 nh\u1ea5p v\u00e0o link m\u00e0 kh\u00f4ng k\u1ecbp suy ngh\u0129. Nguy\u00ean t\u1eafc v\u00e0ng: c\u00f4ng ty h\u1ee3p ph\u00e1p kh\u00f4ng bao gi\u1edd \u0111e d\u1ecda \u0111\u00f3ng t\u00e0i kho\u1ea3n qua email v\u1edbi th\u1eddi h\u1ea1n v\u00e0i gi\u1edd<\/strong>.<\/p>\n \n

3. Link d\u1eabn \u0111\u1ebfn n\u01a1i kh\u00e1c v\u1edbi nh\u1eefng g\u00ec hi\u1ec3n th\u1ecb<\/h2>\n\n\n

Tr\u01b0\u1edbc khi nh\u1ea5p, h\u00e3y di chu\u1ed9t qua link<\/strong> (kh\u00f4ng nh\u1ea5p), URL th\u1ef1c s\u1ebd hi\u1ec7n \u1edf g\u00f3c d\u01b0\u1edbi tr\u00ecnh duy\u1ec7t ho\u1eb7c \u1ee9ng d\u1ee5ng email. C\u00e1c d\u1ea5u hi\u1ec7u URL \u0111\u1ed9c h\u1ea1i:<\/p>\n \n

  • Domain l\u1ea1: secure-login.xyz\/vietcombank<\/code> thay v\u00ec vietcombank.com.vn<\/code><\/li>
  • Subdomain \u0111\u00e1nh l\u1eeba: vietcombank.secure-login.xyz<\/code>, domain th\u1eadt l\u00e0 secure-login.xyz<\/code><\/li>
  • Link r\u00fat g\u1ecdn kh\u00f4ng r\u00f5 ngu\u1ed3n: bit.ly\/abc123<\/code><\/li>
  • K\u00fd t\u1ef1 gi\u1ed1ng nhau nh\u01b0ng kh\u00e1c b\u1ea3ng m\u00e3 (homoglyph): ch\u1eef \u0430<\/strong> Cyrillic tr\u00f4ng gi\u1ed1ng a<\/strong> Latin<\/li><\/ul>\n \n

    4. File \u0111\u00ednh k\u00e8m kh\u00f4ng mong \u0111\u1ee3i<\/h2>\n\n\n

    B\u1ea1n kh\u00f4ng \u0111\u1eb7t h\u00e0ng g\u00ec m\u00e0 nh\u1eadn email k\u00e8m file hoa-don.zip<\/code>? Kh\u00f4ng n\u1ed9p h\u1ed3 s\u01a1 m\u00e0 nh\u1eadn ket-qua.docm<\/code>? \u0110\u00e2y l\u00e0 d\u1ea5u hi\u1ec7u nguy hi\u1ec3m. \u0110\u1eb7c bi\u1ec7t t\u1eeb n\u0103m 2025, file .svg<\/strong> (ch\u1ee9a JavaScript nh\u00fang) v\u00e0 .pdf<\/strong> (ch\u1ee9a link phishing) t\u0103ng \u0111\u1ed9t bi\u1ebfn nh\u01b0 l\u00e0 vector t\u1ea5n c\u00f4ng m\u1edbi. Kh\u00f4ng m\u1edf b\u1ea5t k\u1ef3 file \u0111\u00ednh k\u00e8m n\u00e0o t\u1eeb email kh\u00f4ng x\u00e1c \u0111\u1ecbnh.<\/p>\n \n

    5. Y\u00eau c\u1ea7u th\u00f4ng tin nh\u1ea1y c\u1ea3m<\/h2>\n\n\n

    Kh\u00f4ng c\u00f3 t\u1ed5 ch\u1ee9c h\u1ee3p ph\u00e1p n\u00e0o<\/strong>, ng\u00e2n h\u00e0ng, v\u00ed \u0111i\u1ec7n t\u1eed, m\u1ea1ng x\u00e3 h\u1ed9i, y\u00eau c\u1ea7u b\u1ea1n cung c\u1ea5p m\u1eadt kh\u1ea9u, s\u1ed1 OTP, s\u1ed1 th\u1ebb t\u00edn d\u1ee5ng ho\u1eb7c CCCD qua email. N\u1ebfu email d\u1eabn \u0111\u1ebfn form \u0111i\u1ec1n th\u00f4ng tin ki\u1ec3u n\u00e0y, 100% l\u00e0 l\u1eeba \u0111\u1ea3o.<\/p>\n \n

    6. N\u1ed9i dung chung chung, kh\u00f4ng \u0111\u00fang t\u00ean b\u1ea1n<\/h2>\n\n\n

    Email t\u1eeb ng\u00e2n h\u00e0ng hay d\u1ecbch v\u1ee5 b\u1ea1n \u0111ang d\u00f9ng th\u01b0\u1eddng g\u1ecdi \u0111\u00fang t\u00ean b\u1ea1n. N\u1ebfu email b\u1eaft \u0111\u1ea7u b\u1eb1ng “K\u00ednh g\u1eedi Qu\u00fd kh\u00e1ch”<\/em> or “Dear User”<\/em>, \u0111\u00f3 l\u00e0 d\u1ea5u hi\u1ec7u email \u0111\u01b0\u1ee3c g\u1eedi h\u00e0ng lo\u1ea1t, kh\u00f4ng bi\u1ebft b\u1ea1n l\u00e0 ai, t\u1ee9c l\u00e0 r\u1ea5t c\u00f3 th\u1ec3 l\u00e0 phishing.<\/p>\n \n

    7. B\u1ed1 c\u1ee5c, logo ho\u1eb7c gi\u1ecdng v\u0103n b\u1ea5t th\u01b0\u1eddng<\/h2>\n\n\n

    So s\u00e1nh v\u1edbi email th\u1eadt b\u1ea1n t\u1eebng nh\u1eadn t\u1eeb t\u1ed5 ch\u1ee9c \u0111\u00f3. K\u1ebb t\u1ea5n c\u00f4ng b\u1eaft ch\u01b0\u1edbc nh\u01b0ng kh\u00f4ng ho\u00e0n h\u1ea3o: logo b\u1ecb m\u1edd, m\u00e0u s\u1eafc l\u1ec7ch, font ch\u1eef kh\u00e1c, gi\u1ecdng v\u0103n \u0111\u1ed9t nhi\u00ean qu\u00e1 trang tr\u1ecdng ho\u1eb7c qu\u00e1 th\u00e2n m\u1eadt. N\u1ebfu email “tr\u00f4ng kh\u00f4ng quen”, h\u00e3y c\u1ea9n th\u1eadn.<\/p>\n \n

    B\u1ecb nghi ng\u1edd th\u00ec l\u00e0m g\u00ec?<\/h2>\n\n\n
    1. Kh\u00f4ng nh\u1ea5p v\u00e0o link<\/strong> trong email, v\u00e0o th\u1eb3ng website b\u1eb1ng c\u00e1ch g\u00f5 URL tay ho\u1eb7c d\u00f9ng bookmark<\/li>
    2. Kh\u00f4ng m\u1edf file \u0111\u00ednh k\u00e8m<\/strong> n\u1ebfu kh\u00f4ng ch\u1eafc ch\u1eafn v\u1ec1 ng\u01b0\u1eddi g\u1eedi<\/li>
    3. G\u1ecdi \u0111i\u1ec7n x\u00e1c nh\u1eadn<\/strong> v\u1edbi t\u1ed5 ch\u1ee9c li\u00ean quan qua s\u1ed1 hotline ch\u00ednh th\u1ee9c (kh\u00f4ng d\u00f9ng s\u1ed1 trong email)<\/li>
    4. B\u00e1o c\u00e1o<\/strong> email \u0111\u00e1ng ng\u1edd cho b\u1ed9 ph\u1eadn IT (n\u1ebfu l\u00e0 email c\u00f4ng ty) ho\u1eb7c mark as spam<\/li>
    5. B\u1eadt x\u00e1c th\u1ef1c 2 b\u01b0\u1edbc (2FA)<\/strong>, ngay c\u1ea3 khi b\u1ecb l\u1eeba m\u1ea5t m\u1eadt kh\u1ea9u, t\u00e0i kho\u1ea3n v\u1eabn \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7<\/li><\/ol>\n \n

       <\/p>\n \n

      CaptainDNS, PCWorld, Microsoft Security, Verizon DBIR 2024, C\u1eadp nh\u1eadt th\u00e1ng 4\/2026<\/em><\/p>","protected":false},"excerpt":{"rendered":"

      91% c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng b\u1eaft \u0111\u1ea7u t\u1eeb m\u1ed9t email l\u1eeba \u0111\u1ea3o. N\u0103m 2026, AI gi\u00fap k\u1ebb x\u1ea5u vi\u1ebft email gi\u1ea3 m\u1ea1o ho\u00e0n h\u1ea3o , kh\u00f4ng c\u00f2n l\u1ed7i ch\u00ednh t\u1ea3, kh\u00f4ng c\u00f2n b\u1ed1 c\u1ee5c x\u1ea5u. \u0110\u00e2y l\u00e0 7 d\u1ea5u hi\u1ec7u gi\u00fap b\u1ea1n nh\u1eadn ra v\u00e0 tr\u00e1nh b\u1eaby.<\/p>","protected":false},"author":2,"featured_media":870,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[27,39,31,38],"class_list":["post-871","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kien-thuc","tag-bao-mat-ca-nhan","tag-email","tag-lua-dao","tag-phishing"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/871","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=871"}],"version-history":[{"count":10,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/871\/revisions"}],"predecessor-version":[{"id":1084,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/871\/revisions\/1084"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/870"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=871"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=871"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=871"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}