M\u1ed9t m\u1ed1i \u0111e d\u1ecda m\u1edbi d\u00e0nh cho iPhone c\u00f3 t\u00ean Coruna \u0111ang bi\u1ebfn c\u00e2u chuy\u1ec7n b\u1ea3o m\u1eadt \u0111i\u1ec7n tho\u1ea1i th\u00e0nh c\u01a1n \u00e1c m\u1ed9ng ti\u1ec1n m\u00e3 h\u00f3a, v\u00e0 v\u1edbi nhi\u1ec1u ng\u01b0\u1eddi d\u00f9ng, \u0111\u00f3 m\u1edbi l\u00e0 hi\u1ec3m h\u1ecda th\u1ef1c s\u1ef1. Google cho bi\u1ebft Coruna l\u00e0 b\u1ed9 c\u00f4ng c\u1ee5 khai th\u00e1c iOS m\u1ea1nh m\u1ebd v\u1edbi 23 l\u1ed7 h\u1ed5ng v\u00e0 n\u0103m chu\u1ed7i t\u1ea5n c\u00f4ng \u0111\u1ea7y \u0111\u1ee7, c\u00f3 th\u1ec3 nh\u1eafm v\u00e0o c\u00e1c iPhone ch\u1ea1y iOS 13 \u0111\u1ebfn iOS 17.2.1. \u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a m\u1ed9t lo\u1ea1t iPhone \u0111\u1eddi c\u0169 c\u00f3 th\u1ec3 b\u1ecb ph\u01a1i b\u00e0y n\u1ebfu ch\u01b0a \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt. \u0110i\u1ec1u t\u1ed3i t\u1ec7 nh\u1ea5t l\u00e0 c\u00e1ch b\u1ed9 toolkit n\u00e0y lan r\u1ed9ng. Ban \u0111\u1ea7u Google ph\u00e1t hi\u1ec7n th\u1ea5y n\u00f3 trong m\u1ed9t v\u1ee5 theo d\u00f5i c\u00f3 ch\u1ee7 \u0111\u00edch, sau \u0111\u00f3 l\u00e0 c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng nh\u1eafm v\u00e0o ng\u01b0\u1eddi d\u00f9ng Ukraine, v\u00e0 g\u1ea7n \u0111\u00e2y nh\u1ea5t tr\u00ean c\u00e1c trang web t\u00e0i ch\u00ednh v\u00e0 ti\u1ec1n m\u00e3 h\u00f3a gi\u1ea3 m\u1ea1o c\u1ee7a Trung Qu\u1ed1c \u0111\u01b0\u1ee3c d\u1ef1ng l\u00ean \u0111\u1ec3 d\u1ee5 d\u1ed7 ng\u01b0\u1eddi d\u00f9ng iPhone.<\/p>\n\n
S\u1ef1 d\u1ecbch chuy\u1ec3n n\u00e0y r\u1ea5t quan tr\u1ecdng. M\u1ed9t c\u00f4ng c\u1ee5 t\u1eebng ch\u1ec9 d\u00f9ng trong ho\u1ea1t \u0111\u1ed9ng gi\u00e1n \u0111i\u1ec7p h\u1eb9p nay l\u1ea1i xu\u1ea5t hi\u1ec7n trong c\u00e1c chi\u1ebfn d\u1ecbch t\u1ed9i ph\u1ea1m quy m\u00f4 l\u1edbn. N\u00f3i c\u00e1ch kh\u00e1c, b\u1ed9 kit x\u00e2m nh\u1eadp iPhone cao c\u1ea5p d\u01b0\u1eddng nh\u01b0 \u0111\u00e3 b\u01b0\u1edbc ra kh\u1ecfi b\u00f3ng t\u1ed1i \u0111\u1ec3 xu\u1ea5t hi\u1ec7n tr\u00ean c\u00e1c trang l\u1eeba \u0111\u1ea3o c\u00f3 th\u1ec3 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn ng\u01b0\u1eddi d\u00f9ng b\u00ecnh th\u01b0\u1eddng. \u0110\u00e2y ch\u00ednh l\u00e0 l\u00fac nh\u1eefng ng\u01b0\u1eddi n\u1eafm gi\u1eef ti\u1ec1n m\u00e3 h\u00f3a c\u1ea7n \u0111\u1eb7c bi\u1ec7t ch\u00fa \u00fd.<\/p>\n\n
C\u00e1c trang gi\u1ea3 m\u1ea1o \u0111\u1ea9y ng\u01b0\u1eddi d\u00f9ng iPhone \u0111\u1ebfn c\u00e1c trang khai th\u00e1c \u1ea9n. Khi n\u1ea1n nh\u00e2n truy c\u1eadp, Coruna c\u00f3 th\u1ec3 thu th\u1eadp d\u1ea5u v\u00e2n tay thi\u1ebft b\u1ecb, ch\u1ecdn \u0111\u00fang l\u1ed7 h\u1ed5ng v\u00e0 t\u00ecm c\u00e1ch v\u01b0\u1ee3t qua l\u1edbp b\u1ea3o v\u1ec7 tr\u00ecnh duy\u1ec7t v\u00e0 h\u1ec7 th\u1ed1ng. Google n\u00f3i b\u1ed9 kit th\u1eadm ch\u00ed ki\u1ec3m tra xem \u0111i\u1ec7n tho\u1ea1i c\u00f3 \u0111ang \u1edf ch\u1ebf \u0111\u1ed9 Lockdown hay duy\u1ec7t web ri\u00eang t\u01b0 v\u00e0 s\u1ebd r\u00fat lui trong m\u1ed9t s\u1ed1 tr\u01b0\u1eddng h\u1ee3p. \u0110i\u1ec1u n\u00e0y cho th\u1ea5y k\u1ebb t\u1ea5n c\u00f4ng kh\u00f4ng h\u1ec1 c\u1ea9u th\u1ea3. H\u1ecd c\u1ea9n tr\u1ecdng, ki\u00ean nh\u1eabn v\u00e0 x\u00e2y d\u1ef1ng \u0111\u1ec3 d\u00f9ng trong th\u1ef1c t\u1ebf.<\/p>\n\n
Payload cu\u1ed1i c\u00f9ng l\u00e0 n\u01a1i c\u00e2u chuy\u1ec7n tr\u1edf n\u00ean \u0111en t\u1ed1i h\u01a1n v\u1edbi ng\u01b0\u1eddi d\u00f9ng ti\u1ec1n m\u00e3 h\u00f3a. Google ph\u00e1t hi\u1ec7n c\u00e1c m\u00f4-\u0111un malware nh\u1eafm v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng v\u00ed ph\u1ed5 bi\u1ebfn g\u1ed3m MetaMask, Phantom, Trust Wallet, Exodus, Uniswap Wallet, TronLink, BitKeep, ki\u1ec3u TokenPocket v\u00e0 v\u00ed TON. Malware c\u00f3 th\u1ec3 qu\u00e9t h\u00ecnh \u1ea3nh t\u00ecm m\u00e3 QR, t\u00ecm ki\u1ebfm v\u0103n b\u1ea3n ch\u1ee9a c\u1ee5m t\u1eeb seed BIP39 v\u00e0 t\u00ecm c\u00e1c thu\u1eadt ng\u1eef nh\u01b0 \u201cbackup phrase\u201d v\u00e0 \u201cbank account\u201d. N\u00f3i c\u00e1ch kh\u00e1c, ch\u00fang kh\u00f4ng ch\u1ec9 \u0111\u00e1nh c\u1eafp d\u1eef li\u1ec7u ng\u1eabu nhi\u00ean m\u00e0 \u0111ang s\u0103n l\u00f9ng ch\u00eca kh\u00f3a ti\u1ec1n c\u1ee7a b\u1ea1n.<\/p>\n\n
M\u1ed9t s\u1ed1 th\u00f4ng \u0111i\u1ec7p log b\u1eb1ng ti\u1ebfng Trung thu h\u1ed3i cho th\u1ea5y \u0111i\u1ec1u \u0111\u00f3 r\u00f5 r\u00e0ng. M\u1ed9t d\u00f2ng d\u1ecbch ra l\u00e0 \u201cCorePayload manager initialized successfully, trying to start.\u201d D\u00f2ng kh\u00e1c: \u201cHeartbeat monitor started, waiting for CorePayload to send the first heartbeat.\u201d \u0110\u00e2y kh\u00f4ng ph\u1ea3i l\u1eddi c\u1ee7a trang l\u1eeba \u0111\u1ea3o th\u00f4 s\u01a1. Ch\u00fang ch\u1ec9 ra m\u1ed9t n\u1ec1n t\u1ea3ng tr\u1ed9m c\u1eafp \u0111ang ho\u1ea1t \u0111\u1ed9ng, \u0111\u01b0\u1ee3c x\u00e2y \u0111\u1ec3 li\u00ean t\u1ee5c thu th\u1eadp d\u1eef li\u1ec7u v\u00e0 t\u1ea3i th\u00eam m\u00f4-\u0111un sau n\u00e0y.<\/p>\n\n
Ch\u00ednh v\u00ec v\u1eady c\u00e2u chuy\u1ec7n Coruna d\u1ec5 d\u00e0ng g\u1eafn v\u1edbi th\u1ecb tr\u01b0\u1eddng ti\u1ec1n m\u00e3 h\u00f3a. T\u1ef1 l\u01b0u tr\u1eef cho ng\u01b0\u1eddi d\u00f9ng quy\u1ec1n ki\u1ec3m so\u00e1t nh\u01b0ng c\u0169ng \u0111\u1eb7t r\u1ee7i ro l\u00ean ch\u00ednh thi\u1ebft b\u1ecb trong tay h\u1ecd. N\u1ebfu c\u1ee5m t\u1eeb seed c\u1ee7a b\u1ea1n n\u1eb1m trong Ghi ch\u00fa, \u1ea3nh ch\u1ee5p m\u00e0n h\u00ecnh, h\u00ecnh \u1ea3nh hay b\u1ea3n sao l\u01b0u chat tr\u00ean iPhone \u0111\u1eddi c\u0169, m\u1ed9t l\u1ed7 h\u1ed5ng \u0111i\u1ec7n tho\u1ea1i c\u00f3 th\u1ec3 bi\u1ebfn th\u00e0nh v\u00ed tr\u1ed1ng r\u1ed7ng. Gi\u00e1 th\u1ecb tr\u01b0\u1eddng th\u00eam m\u1ed9t l\u1edbp \u0111au \u0111\u1edbn kh\u00e1c. Ng\u00e0y 6 th\u00e1ng 3 n\u0103m 2026, Bitcoin giao d\u1ecbch kho\u1ea3ng 68.230 \u0111\u1ebfn 69.880 USD, gi\u1ea3m kho\u1ea3ng 3,9% trong ng\u00e0y, v\u1edbi kh\u1ed1i l\u01b0\u1ee3ng g\u1ea7n 44,7 t\u1ef7 USD. Ethereum giao d\u1ecbch kho\u1ea3ng 1.979 \u0111\u1ebfn 2.081 USD, c\u0169ng gi\u1ea3m trong ng\u00e0y, v\u1edbi kh\u1ed1i l\u01b0\u1ee3ng kho\u1ea3ng 20,0 t\u1ef7 USD. B\u1ee9c tranh gi\u00e1 v\u00e0 kh\u1ed1i l\u01b0\u1ee3ng cho th\u1ea5y m\u1ed9t th\u1ecb tr\u01b0\u1eddng y\u1ebfu: ng\u01b0\u1eddi b\u00e1n v\u1eabn ki\u1ec3m so\u00e1t, kh\u1ed1i l\u01b0\u1ee3ng l\u1edbn v\u00e0 c\u00e1c \u0111\u1ee3t gi\u1ea3m nhanh c\u00f3 th\u1ec3 bi\u1ebfn m\u1ed9t sai l\u1ea7m b\u1ea3o m\u1eadt th\u00e0nh m\u1ea5t m\u00e1t danh m\u1ee5c l\u1edbn h\u01a1n nhi\u1ec1u.<\/p>\n\n
H\u00e3y ngh\u0129 \u0111i\u1ec1u \u0111\u00f3 c\u00f3 ngh\u0129a g\u00ec v\u1edbi ng\u01b0\u1eddi n\u1eafm gi\u1eef th\u1ef1c th\u1ee5. N\u1ebfu m\u1ed9t c\u1ee5m seed b\u1ecb \u0111\u00e1nh c\u1eafp d\u1eabn \u0111\u1ebfn m\u1ea5t 1 BTC, thi\u1ec7t h\u1ea1i v\u00e0o kho\u1ea3ng 68.000 \u0111\u1ebfn 70.000 USD theo gi\u00e1 hi\u1ec7n t\u1ea1i. M\u1ea5t 10 ETH th\u00ec m\u1ea5t g\u1ea7n 20.000 USD. N\u1ebfu k\u1ebb t\u1ea5n c\u00f4ng x\u00e2m nh\u1eadp nhi\u1ec1u \u1ee9ng d\u1ee5ng v\u00ed, m\u1ea5t m\u00e1t c\u00f3 th\u1ec3 ch\u1ed3ng ch\u1ea5t nhanh ch\u00f3ng tr\u00ean c\u00e1c chu\u1ed7i, token v\u00e0 stablecoin. Trong th\u1ecb tr\u01b0\u1eddng run r\u1ea9y, ti\u1ec1n b\u1ecb \u0111\u00e1nh c\u1eafp c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c b\u00e1n th\u00e1o ngay, t\u1ea1o th\u00eam \u00e1p l\u1ef1c b\u00e1n trong khi n\u1ea1n nh\u00e2n ch\u1ee9ng ki\u1ebfn c\u1ea3 quy\u1ec1n truy c\u1eadp l\u1eabn gi\u00e1 tr\u1ecb bi\u1ebfn m\u1ea5t.<\/p>\n\n
C\u00f3 m\u1ed9t tin t\u1ed1t. Google n\u00f3i Coruna kh\u00f4ng ho\u1ea1t \u0111\u1ed9ng tr\u00ean phi\u00ean b\u1ea3n iOS m\u1edbi nh\u1ea5t. Apple \u0111\u00e3 v\u00e1 m\u1ed9t s\u1ed1 l\u1ed7i li\u00ean quan trong c\u00e1c b\u1ea3n c\u1eadp nh\u1eadt tr\u01b0\u1edbc v\u00e0 Google khuy\u00ean ng\u01b0\u1eddi d\u00f9ng c\u1eadp nh\u1eadt iOS ngay l\u1eadp t\u1ee9c. N\u1ebfu kh\u00f4ng th\u1ec3 c\u1eadp nh\u1eadt, ch\u1ebf \u0111\u1ed9 Lockdown Mode th\u00eam m\u1ed9t l\u1edbp ph\u00f2ng th\u1ee7 kh\u00e1c. Nghe c\u00f3 v\u1ebb c\u01a1 b\u1ea3n nh\u01b0ng c\u00e2u chuy\u1ec7n n\u00e0y cho th\u1ea5y t\u1ea1i sao c\u00e1c b\u01b0\u1edbc c\u01a1 b\u1ea3n l\u1ea1i quan tr\u1ecdng. M\u1ed9t chi\u1ebfc \u0111i\u1ec7n tho\u1ea1i c\u1ea3m th\u1ea5y an to\u00e0n ch\u1ec9 v\u00ec l\u00e0 iPhone v\u1eabn c\u00f3 th\u1ec3 l\u00e0 m\u1eaft x\u00edch y\u1ebfu nh\u1ea5t trong thi\u1ebft l\u1eadp ti\u1ec1n m\u00e3 h\u00f3a.<\/p>\n\n
V\u1edbi ng\u01b0\u1eddi d\u00f9ng ti\u1ec1n m\u00e3 h\u00f3a, c\u1ea3nh b\u00e1o th\u1eadt \u0111\u01a1n gi\u1ea3n v\u00e0 x\u1ea5u x\u00ed: l\u1ea7n x\u00f3a v\u00ed ti\u1ebfp theo c\u00f3 th\u1ec3 kh\u00f4ng b\u1eaft \u0111\u1ea7u b\u1eb1ng token x\u1ea5u hay airdrop gi\u1ea3. N\u00f3 c\u00f3 th\u1ec3 b\u1eaft \u0111\u1ea7u b\u1eb1ng m\u1ed9t l\u1ea7n gh\u00e9 th\u0103m trang web \u0111\u1ed9c tr\u00ean iPhone c\u0169. Trong th\u1ecb tr\u01b0\u1eddng \u0111\u00e3 ch\u1ecbu \u00e1p l\u1ef1c, Coruna ch\u00ednh l\u00e0 d\u1ea1ng m\u1ed1i \u0111e d\u1ecda c\u00f3 th\u1ec3 bi\u1ebfn l\u1ed7 gi\u1ea5y th\u00e0nh m\u1ea5t m\u00e1t v\u0129nh vi\u1ec5n.<\/p>","protected":false},"excerpt":{"rendered":"
M\u1ed9t m\u1ed1i \u0111e d\u1ecda m\u1edbi d\u00e0nh cho iPhone c\u00f3 t\u00ean Coruna \u0111ang bi\u1ebfn c\u00e2u chuy\u1ec7n b\u1ea3o m\u1eadt \u0111i\u1ec7n tho\u1ea1i th\u00e0nh c\u01a1n \u00e1c m\u1ed9ng ti\u1ec1n m\u00e3 h\u00f3a, v\u00e0 v\u1edbi nhi\u1ec1u ng\u01b0\u1eddi…<\/p>\n","protected":false},"author":4,"featured_media":2475,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-2474","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-bitcoin"],"_links":{"self":[{"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/posts\/2474","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/comments?post=2474"}],"version-history":[{"count":1,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/posts\/2474\/revisions"}],"predecessor-version":[{"id":2476,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/posts\/2474\/revisions\/2476"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/media\/2475"}],"wp:attachment":[{"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/media?parent=2474"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/categories?post=2474"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitcoinnewscrypto.com\/vi\/wp-json\/wp\/v2\/tags?post=2474"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}