{"id":945,"date":"2026-04-22T04:02:34","date_gmt":"2026-04-21T21:02:34","guid":{"rendered":"https:\/\/vncybers.vn\/ma-doc-ngate-danh-cap-du-lieu-nfc-the-ngan-hang-qua-ung-dung-gia-mao\/"},"modified":"2026-04-23T21:26:43","modified_gmt":"2026-04-23T14:26:43","slug":"ma-doc-ngate-danh-cap-du-lieu-nfc-the-ngan-hang-qua-ung-dung-gia-mao","status":"publish","type":"post","link":"https:\/\/vncybers.vn\/en\/ma-doc-ngate-danh-cap-du-lieu-nfc-the-ngan-hang-qua-ung-dung-gia-mao\/","title":{"rendered":"Bi\u1ebfn th\u1ec3 m\u1edbi c\u1ee7a m\u00e3 \u0111\u1ed9c NGate d\u00f9ng AI t\u1ea1o code, \u0111\u00e1nh c\u1eafp NFC th\u1ebb ng\u00e2n h\u00e0ng"},"content":{"rendered":"
\"Bi\u1ebfn<\/figure>\n\n\n

C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u b\u1ea3o m\u1eadt v\u1eeba ph\u00e1t hi\u1ec7n m\u1ed9t bi\u1ebfn th\u1ec3 m\u1edbi c\u1ee7a ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i Android c\u00f3 t\u00ean NGate<\/strong> (c\u00f2n g\u1ecdi l\u00e0 NFSkate), v\u1edbi kh\u1ea3 n\u0103ng \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u NFC t\u1eeb th\u1ebb thanh to\u00e1n v\u00e0 m\u00e3 PIN c\u1ee7a n\u1ea1n nh\u00e2n th\u00f4ng qua m\u1ed9t \u1ee9ng d\u1ee5ng b\u1ecb trojan h\u00f3a. \u0110\u00e2y l\u00e0 m\u1ed1i \u0111e d\u1ecda nghi\u00eam tr\u1ecdng v\u1edbi b\u1ea5t k\u1ef3 ng\u01b0\u1eddi d\u00f9ng smartphone n\u00e0o s\u1eed d\u1ee5ng th\u1ebb thanh to\u00e1n kh\u00f4ng ti\u1ebfp x\u00fac.<\/p>\n\n\n

NGate l\u00e0 g\u00ec v\u00e0 ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/h2>\n\n\n

Theo b\u00e1o c\u00e1o m\u1edbi nh\u1ea5t t\u1eeb h\u00e3ng b\u1ea3o m\u1eadt ESET, nh\u00f3m t\u1ed9i ph\u1ea1m m\u1ea1ng \u0111\u1ee9ng sau chi\u1ebfn d\u1ecbch n\u00e0y \u0111\u00e3 ch\u00e8n m\u00e3 \u0111\u1ed9c v\u00e0o \u1ee9ng d\u1ee5ng HandyPay<\/strong>, m\u1ed9t \u1ee9ng d\u1ee5ng h\u1ee3p l\u1ec7 \u0111\u01b0\u1ee3c d\u00f9ng \u0111\u1ec3 truy\u1ec1n d\u1eef li\u1ec7u NFC. \u0110i\u1ec1u \u0111\u00e1ng ch\u00fa \u00fd l\u00e0 \u0111o\u1ea1n m\u00e3 \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n c\u00f3 d\u1ea5u hi\u1ec7u \u0111\u01b0\u1ee3c t\u1ea1o ra b\u1eb1ng tr\u00ed tu\u1ec7 nh\u00e2n t\u1ea1o (AI)<\/strong>, cho th\u1ea5y tin t\u1eb7c ng\u00e0y c\u00e0ng \u1ee9ng d\u1ee5ng c\u00f4ng ngh\u1ec7 m\u1edbi v\u00e0o c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng.<\/p>\n\n

C\u01a1 ch\u1ebf ho\u1ea1t \u0111\u1ed9ng c\u1ee7a NGate di\u1ec5n ra theo c\u00e1c b\u01b0\u1edbc sau:<\/p>\n\n

    \n
  • B\u01b0\u1edbc 1 \u2013 L\u00e2y nhi\u1ec5m:<\/strong> N\u1ea1n nh\u00e2n t\u1ea3i v\u1ec1 v\u00e0 c\u00e0i \u0111\u1eb7t \u1ee9ng d\u1ee5ng HandyPay gi\u1ea3 m\u1ea1o (th\u01b0\u1eddng qua link ph\u00e1t t\u00e1n ngo\u00e0i ch\u1ee3 \u1ee9ng d\u1ee5ng ch\u00ednh th\u1ee9c).<\/li>\n
  • B\u01b0\u1edbc 2 \u2013 Thu th\u1eadp NFC:<\/strong> Khi n\u1ea1n nh\u00e2n \u0111\u1eb7t th\u1ebb ng\u00e2n h\u00e0ng g\u1ea7n \u0111i\u1ec7n tho\u1ea1i, m\u00e3 \u0111\u1ed9c \u00e2m th\u1ea7m \u0111\u1ecdc v\u00e0 chuy\u1ec3n d\u1eef li\u1ec7u NFC v\u1ec1 m\u00e1y ch\u1ee7 \u0111i\u1ec1u khi\u1ec3n (C2) c\u1ee7a tin t\u1eb7c.<\/li>\n
  • B\u01b0\u1edbc 3 \u2013 \u0110\u00e1nh c\u1eafp PIN:<\/strong> \u1ee8ng d\u1ee5ng hi\u1ec3n th\u1ecb giao di\u1ec7n gi\u1ea3 m\u1ea1o y\u00eau c\u1ea7u n\u1ea1n nh\u00e2n nh\u1eadp m\u00e3 PIN th\u1ebb, sau \u0111\u00f3 g\u1eedi th\u00f4ng tin n\u00e0y cho k\u1ebb t\u1ea5n c\u00f4ng.<\/li>\n
  • B\u01b0\u1edbc 4 \u2013 R\u00fat ti\u1ec1n:<\/strong> Tin t\u1eb7c d\u00f9ng thi\u1ebft b\u1ecb c\u1ee7a ch\u00fang \u0111\u1ec3 gi\u1ea3 l\u1eadp th\u1ebb v\u1eadt l\u00fd, th\u1ef1c hi\u1ec7n r\u00fat ti\u1ec1n t\u1ea1i ATM kh\u00f4ng ti\u1ebfp x\u00fac ho\u1eb7c thanh to\u00e1n tr\u00e1i ph\u00e9p.<\/li>\n<\/ul>\n\n\n

    T\u1ea1i sao m\u1ed1i \u0111e d\u1ecda n\u00e0y nguy hi\u1ec3m v\u1edbi ng\u01b0\u1eddi d\u00f9ng Vi\u1ec7t Nam?<\/h2>\n\n\n

    Th\u1ecb tr\u01b0\u1eddng thanh to\u00e1n kh\u00f4ng ti\u1ebfp x\u00fac t\u1ea1i Vi\u1ec7t Nam \u0111ang ph\u00e1t tri\u1ec3n m\u1ea1nh, v\u1edbi h\u00e0ng tri\u1ec7u th\u1ebb ATM v\u00e0 th\u1ebb t\u00edn d\u1ee5ng h\u1ed7 tr\u1ee3 NFC \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh b\u1edfi Vietcombank, BIDV, Techcombank, VPBank… Ch\u00ednh s\u1ef1 ph\u1ed5 bi\u1ebfn n\u00e0y khi\u1ebfn ng\u01b0\u1eddi d\u00f9ng trong n\u01b0\u1edbc tr\u1edf th\u00e0nh m\u1ee5c ti\u00eau ti\u1ec1m n\u0103ng c\u1ee7a c\u00e1c chi\u1ebfn d\u1ecbch t\u01b0\u01a1ng t\u1ef1.<\/p>\n\n

    \u0110i\u1ec3m nguy hi\u1ec3m l\u00e0 n\u1ea1n nh\u00e2n ho\u00e0n to\u00e0n kh\u00f4ng hay bi\u1ebft<\/strong> cho \u0111\u1ebfn khi nh\u1eadn \u0111\u01b0\u1ee3c th\u00f4ng b\u00e1o giao d\u1ecbch l\u1ea1 t\u1eeb ng\u00e2n h\u00e0ng. Thi\u1ebft b\u1ecb kh\u00f4ng c\u1ea7n ph\u1ea3i b\u1ecb root hay jailbreak, ch\u1ec9 c\u1ea7n c\u00e0i \u0111\u1eb7t \u1ee9ng d\u1ee5ng gi\u1ea3 m\u1ea1o l\u00e0 \u0111\u1ee7.<\/p>\n\n\n

    D\u1ea5u hi\u1ec7u nh\u1eadn bi\u1ebft \u1ee9ng d\u1ee5ng gi\u1ea3 m\u1ea1o<\/h2>\n\n\n
      \n
    • \u1ee8ng d\u1ee5ng y\u00eau c\u1ea7u quy\u1ec1n truy c\u1eadp NFC nh\u01b0ng kh\u00f4ng li\u00ean quan \u0111\u1ebfn thanh to\u00e1n ch\u00ednh th\u1ee9c<\/li>\n
    • Link t\u1ea3i t\u1eeb tin nh\u1eafn SMS, Zalo, Facebook, kh\u00f4ng ph\u1ea3i t\u1eeb Google Play Store<\/li>\n
    • Giao di\u1ec7n \u1ee9ng d\u1ee5ng c\u00f3 l\u1ed7i font, thi\u1ebfu th\u00f4ng tin li\u00ean h\u1ec7 ch\u00ednh th\u1ee9c<\/li>\n
    • Y\u00eau c\u1ea7u nh\u1eadp m\u00e3 PIN ngay sau khi qu\u00e9t th\u1ebb, ng\u00e2n h\u00e0ng th\u1eadt kh\u00f4ng bao gi\u1edd l\u00e0m v\u1eady<\/li>\n<\/ul>\n\n\n

      C\u00e1ch b\u1ea3o v\u1ec7 b\u1ea3n th\u00e2n<\/h2>\n\n\n
        \n
      • Ch\u1ec9 t\u1ea3i \u1ee9ng d\u1ee5ng t\u1eeb Google Play Store ho\u1eb7c App Store<\/strong>, kh\u00f4ng c\u00e0i APK t\u1eeb ngu\u1ed3n l\u1ea1<\/li>\n
      • B\u1eadt th\u00f4ng b\u00e1o giao d\u1ecbch realtime<\/strong> t\u1eeb ng\u00e2n h\u00e0ng \u0111\u1ec3 ph\u00e1t hi\u1ec7n s\u1edbm<\/li>\n
      • T\u1eaft NFC khi kh\u00f4ng d\u00f9ng<\/strong>: v\u00e0o C\u00e0i \u0111\u1eb7t \u2192 K\u1ebft n\u1ed1i \u2192 NFC \u2192 T\u1eaft<\/li>\n
      • Kh\u00f4ng bao gi\u1edd nh\u1eadp PIN th\u1ebb<\/strong> v\u00e0o b\u1ea5t k\u1ef3 \u1ee9ng d\u1ee5ng n\u00e0o ngo\u00e0i m\u00e0n h\u00ecnh ATM ho\u1eb7c POS ch\u00ednh th\u1ee9c<\/li>\n
      • Ki\u1ec3m tra quy\u1ec1n truy c\u1eadp \u1ee9ng d\u1ee5ng \u0111\u1ecbnh k\u1ef3, x\u00f3a ngay app kh\u00f4ng r\u00f5 ngu\u1ed3n g\u1ed1c<\/li>\n<\/ul>\n\n

        NGate l\u1ea7n \u0111\u1ea7u \u0111\u01b0\u1ee3c ESET ghi nh\u1eadn v\u00e0o th\u00e1ng 8\/2024, v\u00e0 nay \u0111\u00e3 xu\u1ea5t hi\u1ec7n bi\u1ebfn th\u1ec3 m\u1edbi nh\u1eafm v\u00e0o Brazil. Tuy nhi\u00ean, c\u00e1c k\u1ef9 thu\u1eadt t\u1ea5n c\u00f4ng t\u01b0\u01a1ng t\u1ef1 c\u00f3 th\u1ec3 d\u1ec5 d\u00e0ng \u0111\u01b0\u1ee3c \u0111i\u1ec1u ch\u1ec9nh \u0111\u1ec3 nh\u1eafm v\u00e0o ng\u01b0\u1eddi d\u00f9ng ch\u00e2u \u00c1, bao g\u1ed3m Vi\u1ec7t Nam.<\/p>\n\n\n

        H\u00e3y c\u1ea9n tr\u1ecdng, m\u1ed9t \u1ee9ng d\u1ee5ng gi\u1ea3 m\u1ea1o c\u00f3 th\u1ec3 l\u00e0m tr\u1ed1ng t\u00e0i kho\u1ea3n ng\u00e2n h\u00e0ng c\u1ee7a b\u1ea1n m\u00e0 kh\u00f4ng c\u1ea7n b\u1ea1n m\u1ea5t th\u1ebb v\u1eadt l\u00fd.<\/h2>\n\n\n

         <\/p>\n\n

        VNCyberS<\/strong> t\u1ed5ng h\u1ee3p t\u1eeb: The Hacker News | ESET Research, th\u00e1ng 4\/2026<\/em><\/p>","protected":false},"excerpt":{"rendered":"

        Ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i NGate tr\u00ean Android c\u00f3 kh\u1ea3 n\u0103ng \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u NFC t\u1eeb th\u1ebb ng\u00e2n h\u00e0ng v\u00e0 m\u00e3 PIN th\u00f4ng qua \u1ee9ng d\u1ee5ng HandyPay gi\u1ea3 m\u1ea1o, sau \u0111\u00f3 r\u00fat ti\u1ec1n t\u1ea1i ATM kh\u00f4ng ti\u1ebfp x\u00fac.<\/p>","protected":false},"author":2,"featured_media":1016,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[16,19,15,17,18],"class_list":["post-945","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tin-tuc","tag-android","tag-bao-mat-mobile","tag-ma-doc","tag-nfc","tag-the-ngan-hang"],"_links":{"self":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/945","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/comments?post=945"}],"version-history":[{"count":9,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/945\/revisions"}],"predecessor-version":[{"id":1079,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/posts\/945\/revisions\/1079"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media\/1016"}],"wp:attachment":[{"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/media?parent=945"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/categories?post=945"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vncybers.vn\/en\/wp-json\/wp\/v2\/tags?post=945"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}