Bon lua dao truc tuyen ngay cang thong minh hon

Tuan qua, cac chuyen gia bao mat da canh bao ve viec bon lua dao truc tuyen hien da ap dung mot ki thuat moi nham duy tri su hoat dong cua cac trang web doc hai cua chung cho du cac co quan chuc nang da quyet dinh dong cua.

Naftali Bennett - Pho phong chong lua dao truc tuyen Cyota cua hang bao mat RSA Security - cho biet mot so ke lua dao da bat dau su dung mot ki thuat co ten la "smart site redirection" (chuyen huong trang web thong minh) de qua mat luat phap.

"Muc tieu cua bon lua dao truc tuyen la nham duy tri hoat dong cac trang web doc hai cua chung," Bennett noi. "Neu nhu trang web cua chung cang song lau thi cang co nhieu nan nhan bi chung lua hon, chung se thu thap duoc nhieu thong tin bi mat cua nan nhan nhu thong tin tai khoan ngan hang, ma PIN ...

Bang ki thuat chuyen huong trang web thong minh, ke tan cong lua dao truc tuyen co the tao ra nhieu ban sao giong het nhau cua cung mot trang web voi nhieu dia chi URL khac nhau tren nhieu ISP khac nhau. Khi cac email phishing duoc gui di chung se chua duong lien ket den mot trang web khac - goi la "central redirector" (Bo chuyen huong trung tam). Khi nan nhan nhap chuot len duong lien ket trong email do thi "central redirector" se kiem tra moi trang web phishing xem trang nao con "song" thi se chuyen nan nhan ve trang web do.

Bennett goi day la "cuoc chien cua cac bo nao" - cuoc chien giua bon lua dao truc tuyen va cac hang bao mat. "Day thuuc su la mot cuoc cach mang moi trong phuong thuc duy tri su song cua cac cuoc tan cong lua dao truc tuyen."

Truoc tien ke tan cong lua dao se tien hanh hosting trang web cua chung tai mot dia diem. Tuy nhien, cac hang bao mat chong lua dao truc tuyen se nhanh chong phat hien ra va thuyet phuc cac ISP dong cua trang web nay. "Thoi gian song trung binh cua mot trang web phishing la tu 5 den 6 ngay," Bennett cho biet. Mac du cac hang bao mat co giam sat cac vu tan cong phishing chat che va canh bao khach hang can than cung chi lam giam thoi gian song cua cac trang web nay di them 4 gio dong ho.

Tiep thueo, bon lua dao truc tuyen se tien hanh viec gui hang loat cac email khac nhau, moi dot gui email nhu vay chung se dua vao mot dia chi khac nhau. Mot lan nua, Bennett noi, muc dich cua chung la mo rong cuoc tan cong nham dat duoc ket qua toi da. "Chung gui di khoang 20 trieu thu dien tu khac nhau theo 5 goi khac nhau vao cac ngay khac nhau. Moi goi do chua duong lien ket den mot trang web khac nhau, trong do chac chan van con trang web nao do con song va chung se thu duoc ket qua."

Nhung giuo day chung da chuyen sang dung ki thuat "central redirector". "Chung van gui di toi 20 trieu thu dien tu nhung tat ca cac thong diep nay deu chua mot duong lien ket duy nhat den mot trang web trung tam. Nhu vay tam bao phu cua chung da tro nen lon hon gap 4 lan so voi ki thuat cu. Dieu nay dong nghia voi viec cac hang bao mat va khach hang khong the duoc canh bao ngay tu khi nhung goi email dau tien duoc gui di va thiet hai se lon hon.

Cyota da phat hien hai vu tan cong bang ki thuat moi nay - mot vu dien ra o Canada va mot vu o Anh.

"Khi ma cac hang bao mat dang tim cach dong cua cac trang web phishing thi bon lua dao truc tuyen cung tim cach giam thieu toi da anh huong cua dieu nay doi voi kha nang thanh cong cua chung."

De chong lai ki nang moi nay, Cyota da dua tren mot so quy trinh quet cac cuoc tan cong lua dao ngay tu khi chung moi bat dau. Cyota da xu li hang trieu email moi ngay nham tim kiem cac dau hieu cua phishing. Khi phat hien ra mot vu tan cong thi hang se thong bao trang web muc tieu cho cac doi tac ISP de khoa va ngan chan su truy cap den cac trang web nay.

Buoc tiep theo la hang yeu cau nha cung cap dich vu hosting cho trang web do ngung su hoat dong cua trang web.

Buoc thuc ba la Cyota lien tuc gui thong tin den trang web phishing. "Day khong phai la mot kieu tan cong tu choi dich vu. Chung toi khong bao gio lam nhu the. Chung thoi "bo bom" nhung trang web do bang thong tin gia nham lam giam chat luong thong tin thu thap duoc cua vu tan cong."

Cuoi cung, Cyota se thu thap cac thong tin ve trang web do va chien dich gui email cua chung va gui cho cac co quan bao ve luat phap.

HVD - (Techweb)