{"id":2529,"date":"2025-12-05T11:37:33","date_gmt":"2025-12-05T04:37:33","guid":{"rendered":"https:\/\/adstechnology.vn\/?p=2529"},"modified":"2025-12-05T11:37:33","modified_gmt":"2025-12-05T04:37:33","slug":"nhung-lo-hong-pho-bien-trong-cong-nghe-iot","status":"publish","type":"post","link":"https:\/\/adstechnology.vn\/en\/nhung-lo-hong-pho-bien-trong-cong-nghe-iot.html","title":{"rendered":"Nh\u1eefng l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT v\u00e0 r\u1ee7i ro b\u1ea3o m\u1eadt c\u1ea7n bi\u1ebft"},"content":{"rendered":"<p>C\u00f4ng ngh\u1ec7 IoT \u0111ang tr\u1edf th\u00e0nh n\u1ec1n t\u1ea3ng quan tr\u1ecdng trong \u0111\u1eddi s\u1ed1ng, t\u1eeb thi\u1ebft b\u1ecb gia d\u1ee5ng th\u00f4ng minh cho \u0111\u1ebfn h\u1ec7 th\u1ed1ng qu\u1ea3n l\u00fd doanh nghi\u1ec7p, gi\u00e1m s\u00e1t c\u00f4ng nghi\u1ec7p v\u00e0 t\u1ef1 \u0111\u1ed9ng h\u00f3a s\u1ea3n xu\u1ea5t. Tuy nhi\u00ean, \u0111i k\u00e8m s\u1ef1 ti\u1ec7n l\u1ee3i l\u00e0 h\u00e0ng lo\u1ea1t r\u1ee7i ro li\u00ean quan \u0111\u1ebfn b\u1ea3o m\u1eadt. Vi\u1ec7c hi\u1ec3u r\u00f5 <strong data-start=\"2048\" data-end=\"2088\">l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT<\/strong> kh\u00f4ng ch\u1ec9 gi\u00fap ng\u01b0\u1eddi d\u00f9ng gi\u1ea3m nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng m\u00e0 c\u00f2n n\u00e2ng cao kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u00e1 nh\u00e2n v\u00e0 h\u1ec7 th\u1ed1ng quan tr\u1ecdng.<\/p>\n<h2 data-start=\"2369\" data-end=\"2448\">1. C\u00f4ng ngh\u1ec7 IoT ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o v\u00e0 t\u1ea1i sao d\u1ec5 ph\u00e1t sinh l\u1ed7 h\u1ed5ng?<\/h2>\n<p data-start=\"2449\" data-end=\"2763\">\u0110\u1ec3 hi\u1ec3u v\u00ec sao t\u1ed3n t\u1ea1i nhi\u1ec1u l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT, c\u1ea7n nh\u00ecn v\u00e0o c\u1ea5u tr\u00fac v\u1eadn h\u00e0nh c\u1ee7a IoT. H\u1ec7 th\u1ed1ng IoT bao g\u1ed3m: thi\u1ebft b\u1ecb thu th\u1eadp d\u1eef li\u1ec7u, b\u1ed9 x\u1eed l\u00fd, giao th\u1ee9c truy\u1ec1n t\u1ea3i v\u00e0 n\u1ec1n t\u1ea3ng qu\u1ea3n l\u00fd. Khi nhi\u1ec1u l\u1edbp nh\u01b0 v\u1eady ph\u1ea3i t\u01b0\u01a1ng t\u00e1c li\u00ean t\u1ee5c, ch\u1ec9 c\u1ea7n m\u1ed9t \u0111i\u1ec3m y\u1ebfu nh\u1ecf c\u0169ng \u0111\u1ee7 khi\u1ebfn IoT b\u1ecb hack d\u1ec5 d\u00e0ng.<\/p>\n<p data-start=\"2765\" data-end=\"2826\">M\u1ed9t s\u1ed1 nguy\u00ean nh\u00e2n khi\u1ebfn h\u1ec7 th\u1ed1ng IoT d\u1ec5 ph\u00e1t sinh l\u1ed7 h\u1ed5ng:<\/p>\n<ul data-start=\"2827\" data-end=\"3086\">\n<li data-start=\"2827\" data-end=\"2877\">\n<p data-start=\"2829\" data-end=\"2877\">Nhi\u1ec1u thi\u1ebft b\u1ecb gi\u00e1 r\u1ebb kh\u00f4ng ch\u00fa tr\u1ecdng b\u1ea3o m\u1eadt.<\/p>\n<\/li>\n<li data-start=\"2878\" data-end=\"2922\">\n<p data-start=\"2880\" data-end=\"2922\">Ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng thay m\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh.<\/p>\n<\/li>\n<li data-start=\"2923\" data-end=\"2963\">\n<p data-start=\"2925\" data-end=\"2963\">D\u1eef li\u1ec7u truy\u1ec1n \u0111i kh\u00f4ng \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a.<\/p>\n<\/li>\n<li data-start=\"2964\" data-end=\"3019\">\n<p data-start=\"2966\" data-end=\"3019\">Firmware c\u0169 ch\u1ee9a l\u1ed7 h\u1ed5ng nh\u01b0ng kh\u00f4ng \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt.<\/p>\n<\/li>\n<li data-start=\"3020\" data-end=\"3086\">\n<p data-start=\"3022\" data-end=\"3086\">S\u1ed1 l\u01b0\u1ee3ng thi\u1ebft b\u1ecb IoT l\u1edbn khi\u1ebfn vi\u1ec7c ki\u1ec3m so\u00e1t tr\u1edf n\u00ean kh\u00f3 kh\u0103n.<\/p>\n<\/li>\n<\/ul>\n<h2 data-start=\"3093\" data-end=\"3172\">2. Nh\u1eefng l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT m\u00e0 ng\u01b0\u1eddi d\u00f9ng th\u01b0\u1eddng b\u1ecf qua<\/h2>\n<h3 data-start=\"3174\" data-end=\"3232\">2.1. M\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh d\u1ec5 \u0111o\u00e1n \u2013 L\u1ed7 h\u1ed5ng l\u1edbn nh\u1ea5t<\/h3>\n<p data-start=\"3233\" data-end=\"3497\">Ph\u1ea7n l\u1edbn thi\u1ebft b\u1ecb IoT \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t m\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh nh\u01b0 \u201cadmin\u201d, \u201c123456\u201d, \u201croot\u201d, khi\u1ebfn IoT b\u1ecb hack ch\u1ec9 trong v\u00e0i ph\u00fat. Tin t\u1eb7c s\u1eed d\u1ee5ng c\u00f4ng c\u1ee5 qu\u00e9t t\u1ef1 \u0111\u1ed9ng \u0111\u1ec3 t\u00ecm thi\u1ebft b\u1ecb c\u00f2n gi\u1eef m\u1eadt kh\u1ea9u g\u1ed1c, t\u1eeb \u0111\u00f3 chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n v\u00e0 truy c\u1eadp s\u00e2u h\u01a1n v\u00e0o h\u1ec7 th\u1ed1ng m\u1ea1ng.<\/p>\n<h3 data-start=\"3499\" data-end=\"3571\">2.2. Kh\u00f4ng m\u00e3 h\u00f3a d\u1eef li\u1ec7u khi truy\u1ec1n \u2013 R\u1ee7i ro MitM nghi\u00eam tr\u1ecdng<\/h3>\n<p data-start=\"3572\" data-end=\"3832\">M\u1ed9t trong nh\u1eefng l\u1ed7 h\u1ed5ng IoT ph\u1ed5 bi\u1ebfn l\u00e0 d\u1eef li\u1ec7u truy\u1ec1n gi\u1eefa thi\u1ebft b\u1ecb v\u00e0 server kh\u00f4ng \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a. Tin t\u1eb7c c\u00f3 th\u1ec3 ch\u1eb7n lu\u1ed3ng d\u1eef li\u1ec7u, thay \u0111\u1ed5i ho\u1eb7c \u0111\u00e1nh c\u1eafp th\u00f4ng tin. \u0110i\u1ec1u n\u00e0y \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m v\u1edbi thi\u1ebft b\u1ecb camera, c\u1ea3m bi\u1ebfn y t\u1ebf ho\u1eb7c thi\u1ebft b\u1ecb theo d\u00f5i v\u1ecb tr\u00ed.<\/p>\n<h3 data-start=\"3834\" data-end=\"3894\">2.3. Firmware l\u1ed7i th\u1eddi \u2013 M\u1ea3nh \u0111\u1ea5t m\u00e0u m\u1ee1 c\u1ee7a hacker<\/h3>\n<p data-start=\"3895\" data-end=\"4143\">Firmware c\u0169 ch\u1ee9a nhi\u1ec1u l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT nh\u01b0ng l\u1ea1i kh\u00f4ng \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt v\u00ec ng\u01b0\u1eddi d\u00f9ng thi\u1ebfu kinh nghi\u1ec7m ho\u1eb7c nh\u00e0 s\u1ea3n xu\u1ea5t ng\u1eebng h\u1ed7 tr\u1ee3. C\u00e1c l\u1ed7 h\u1ed5ng n\u00e0y b\u1ecb khai th\u00e1c \u0111\u1ec3 c\u00e0i m\u00e3 \u0111\u1ed9c, t\u1ea1o backdoor ho\u1eb7c chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb.<\/p>\n<h3 data-start=\"4145\" data-end=\"4208\">2.4. API kh\u00f4ng an to\u00e0n \u2013 C\u1eeda ng\u00f5 d\u1eabn \u0111\u1ebfn to\u00e0n h\u1ec7 th\u1ed1ng<\/h3>\n<p data-start=\"4209\" data-end=\"4391\">API qu\u1ea3n l\u00fd IoT n\u1ebfu kh\u00f4ng \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c m\u1ea1nh ho\u1eb7c kh\u00f4ng gi\u1edbi h\u1ea1n quy\u1ec1n truy c\u1eadp s\u1ebd tr\u1edf th\u00e0nh l\u1ed7 h\u1ed5ng c\u1ef1c l\u1edbn. Tin t\u1eb7c c\u00f3 th\u1ec3 \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb t\u1eeb xa, xem d\u1eef li\u1ec7u ho\u1eb7c t\u1eaft h\u1ec7 th\u1ed1ng.<\/p>\n<h3 data-start=\"4393\" data-end=\"4460\">2.5. Giao th\u1ee9c truy\u1ec1n th\u00f4ng l\u1ed7i th\u1eddi \u2013 Kh\u00f4ng c\u00f3 l\u1edbp b\u1ea3o v\u1ec7<\/h3>\n<p data-start=\"4461\" data-end=\"4658\">M\u1ed9t s\u1ed1 thi\u1ebft b\u1ecb IoT gi\u00e1 r\u1ebb v\u1eabn d\u00f9ng giao th\u1ee9c c\u0169 nh\u01b0 HTTP, Telnet ho\u1eb7c FTP thay v\u00ec HTTPS hay TLS. \u0110\u00e2y l\u00e0 nh\u1eefng l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn khi\u1ebfn thi\u1ebft b\u1ecb IoT b\u1ecb hack \u0111\u01a1n gi\u1ea3n ch\u1ec9 b\u1eb1ng c\u00e1c g\u00f3i d\u1eef li\u1ec7u gi\u1ea3 m\u1ea1o.<\/p>\n<h3 data-start=\"4660\" data-end=\"4730\">2.6. Kh\u00f4ng t\u00e1ch m\u1ea1ng IoT \u2013 G\u00e2y l\u00e2y lan t\u1ea5n c\u00f4ng to\u00e0n h\u1ec7 th\u1ed1ng<\/h3>\n<p data-start=\"4731\" data-end=\"4894\">Khi thi\u1ebft b\u1ecb IoT c\u00f9ng n\u1eb1m trong m\u1ea1ng Wi-Fi v\u1edbi m\u00e1y t\u00ednh v\u00e0 \u0111i\u1ec7n tho\u1ea1i, hacker ch\u1ec9 c\u1ea7n x\u00e2m nh\u1eadp m\u1ed9t thi\u1ebft b\u1ecb l\u00e0 c\u00f3 th\u1ec3 ti\u1ebfn xa h\u01a1n v\u00e0o c\u00e1c thi\u1ebft b\u1ecb quan tr\u1ecdng kh\u00e1c.<\/p>\n<p data-start=\"4731\" data-end=\"4894\"><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone wp-image-2494 size-full\" src=\"https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT.jpg\" alt=\"l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT\" width=\"1200\" height=\"700\" srcset=\"https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT.jpg 1200w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-300x175.jpg 300w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1024x597.jpg 1024w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-768x448.jpg 768w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-18x12.jpg 18w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-600x350.jpg 600w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/p>\n<h2 data-start=\"338\" data-end=\"405\">3. IoT b\u1ecb hack nh\u01b0 th\u1ebf n\u00e0o? C\u00e1c ph\u01b0\u01a1ng th\u1ee9c t\u1ea5n c\u00f4ng ph\u1ed5 bi\u1ebfn<\/h2>\n<h3 data-start=\"407\" data-end=\"462\">3.1. T\u1ea5n c\u00f4ng brute-force v\u00e0o t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb<\/h3>\n<p data-start=\"464\" data-end=\"964\">M\u1ed9t trong nh\u1eefng <strong data-start=\"480\" data-end=\"520\">l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT<\/strong> xu\u1ea5t ph\u00e1t t\u1eeb m\u1eadt kh\u1ea9u y\u1ebfu ho\u1eb7c m\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh do nh\u00e0 s\u1ea3n xu\u1ea5t c\u00e0i \u0111\u1eb7t s\u1eb5n. Tin t\u1eb7c th\u01b0\u1eddng s\u1eed d\u1ee5ng t\u1ea5n c\u00f4ng brute-force \u0111\u1ec3 th\u1eed h\u00e0ng tr\u0103m ngh\u00ecn m\u1eadt kh\u1ea9u trong th\u1eddi gian ng\u1eafn v\u00e0 chi\u1ebfm quy\u1ec1n truy c\u1eadp thi\u1ebft b\u1ecb. Khi hacker ki\u1ec3m so\u00e1t \u0111\u01b0\u1ee3c t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb, h\u1ecd c\u00f3 th\u1ec3 ch\u1ec9nh s\u1eeda c\u1ea5u h\u00ecnh, ch\u00e8n m\u00e3 \u0111\u1ed9c ho\u1eb7c theo d\u00f5i to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng. \u0110\u00e2y l\u00e0 l\u00fd do m\u1eadt kh\u1ea9u y\u1ebfu tr\u1edf th\u00e0nh <strong data-start=\"886\" data-end=\"910\">l\u1ed7 h\u1ed5ng IoT ph\u1ed5 bi\u1ebfn<\/strong> nh\u1ea5t trong nhi\u1ec1u m\u00f4i tr\u01b0\u1eddng gia \u0111\u00ecnh v\u00e0 doanh nghi\u1ec7p.<\/p>\n<h3 data-start=\"966\" data-end=\"1024\">3.2. T\u1ea5n c\u00f4ng DDoS \u2013 Bi\u1ebfn thi\u1ebft b\u1ecb IoT th\u00e0nh botnet<\/h3>\n<p data-start=\"1026\" data-end=\"1568\">Nhi\u1ec1u thi\u1ebft b\u1ecb IoT c\u00f3 b\u1ea3o m\u1eadt th\u1ea5p d\u1ec5 b\u1ecb chi\u1ebfm quy\u1ec1n v\u00e0 th\u00eam v\u00e0o m\u1ed9t m\u1ea1ng botnet. \u0110\u00e2y l\u00e0 ph\u01b0\u01a1ng th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a m\u00e3 \u0111\u1ed9c Mirai, v\u1ed1n l\u00e0m l\u1ed9 r\u00f5 m\u1ee9c \u0111\u1ed9 nghi\u00eam tr\u1ecdng c\u1ee7a c\u00e1c <strong data-start=\"1197\" data-end=\"1237\">l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT<\/strong> khi h\u00e0ng tr\u0103m ngh\u00ecn camera IP v\u00e0 router b\u1ecb bi\u1ebfn th\u00e0nh c\u00f4ng c\u1ee5 t\u1ea5n c\u00f4ng. V\u00ec v\u1eady, c\u00e2u h\u1ecfi <strong data-start=\"1475\" data-end=\"1502\">IoT b\u1ecb hack nh\u01b0 th\u1ebf n\u00e0o<\/strong> lu\u00f4n g\u1eafn li\u1ec1n v\u1edbi vi\u1ec7c thi\u1ebfu c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c v\u00e0 c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt.<\/p>\n<h3 data-start=\"1570\" data-end=\"1627\">3.3. C\u00e0i \u0111\u1eb7t m\u00e3 \u0111\u1ed9c th\u00f4ng qua firmware k\u00e9m an to\u00e0n<\/h3>\n<p data-start=\"1629\" data-end=\"2137\">Firmware kh\u00f4ng \u0111\u01b0\u1ee3c k\u00fd s\u1ed1 ho\u1eb7c kh\u00f4ng c\u00f3 quy tr\u00ecnh ki\u1ec3m tra t\u00ednh to\u00e0n v\u1eb9n r\u1ea5t d\u1ec5 b\u1ecb thay th\u1ebf b\u1eb1ng phi\u00ean b\u1ea3n ch\u1ee9a m\u00e3 \u0111\u1ed9c. Tin t\u1eb7c ch\u1ec9 c\u1ea7n khai th\u00e1c m\u1ed9t <strong data-start=\"1779\" data-end=\"1803\">l\u1ed7 h\u1ed5ng IoT ph\u1ed5 bi\u1ebfn<\/strong> trong c\u01a1 ch\u1ebf c\u1eadp nh\u1eadt firmware \u0111\u1ec3 ch\u00e8n backdoor v\u00e0o thi\u1ebft b\u1ecb. Khi firmware b\u1ecb c\u00e0i m\u00e3 \u0111\u1ed9c, hacker c\u00f3 th\u1ec3 \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb t\u1eeb xa ho\u1eb7c thu th\u1eadp d\u1eef li\u1ec7u m\u00e0 ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng hay bi\u1ebft. \u0110\u00e2y l\u00e0 m\u1ed1i nguy l\u1edbn \u0111\u1ed1i v\u1edbi <strong data-start=\"2014\" data-end=\"2047\">an ninh m\u1ea1ng cho h\u1ec7 th\u1ed1ng IoT<\/strong>, \u0111\u1eb7c bi\u1ec7t trong m\u00f4i tr\u01b0\u1eddng c\u00f4ng nghi\u1ec7p, n\u01a1i m\u1ed7i thi\u1ebft b\u1ecb l\u00e0 m\u1ed9t \u0111i\u1ec3m truy c\u1eadp quan tr\u1ecdng.<\/p>\n<h3 data-start=\"2139\" data-end=\"2192\">3.4. T\u1ea5n c\u00f4ng th\u00f4ng qua m\u1ea1ng Wi-Fi y\u1ebfu b\u1ea3o m\u1eadt<\/h3>\n<p data-start=\"2194\" data-end=\"2683\">Wi-Fi s\u1eed d\u1ee5ng chu\u1ea9n b\u1ea3o m\u1eadt c\u0169 nh\u01b0 WEP ho\u1eb7c WPA2 r\u1ea5t d\u1ec5 b\u1ecb b\u1ebb kh\u00f3a, m\u1edf \u0111\u01b0\u1eddng cho tin t\u1eb7c x\u00e2m nh\u1eadp. Khi Wi-Fi b\u1ecb t\u1ea5n c\u00f4ng, to\u00e0n b\u1ed9 thi\u1ebft b\u1ecb IoT trong nh\u00e0 ho\u1eb7c doanh nghi\u1ec7p \u0111\u1ec1u n\u1eb1m trong t\u1ea7m ki\u1ec3m so\u00e1t c\u1ee7a hacker. \u0110\u00e2y l\u00e0 m\u1ed9t trong nh\u1eefng <strong data-start=\"2428\" data-end=\"2468\">l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT<\/strong> v\u00ec ph\u1ea7n l\u1edbn thi\u1ebft b\u1ecb kh\u00f4ng c\u00f3 l\u1edbp b\u1ea3o m\u1eadt \u0111\u1ed9c l\u1eadp, ph\u1ee5 thu\u1ed9c ho\u00e0n to\u00e0n v\u00e0o m\u1ea1ng Wi-Fi \u0111\u1ec3 b\u1ea3o v\u1ec7. Khi \u0111\u00e3 truy c\u1eadp \u0111\u01b0\u1ee3c m\u1ea1ng, tin t\u1eb7c c\u00f3 th\u1ec3 nghe l\u00e9n d\u1eef li\u1ec7u, \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb ho\u1eb7c t\u1ea5n c\u00f4ng sang c\u00e1c h\u1ec7 th\u1ed1ng kh\u00e1c.<\/p>\n<h2 data-start=\"2690\" data-end=\"2751\">4. R\u1ee7i ro khi c\u00e1c l\u1ed7 h\u1ed5ng IoT ph\u1ed5 bi\u1ebfn kh\u00f4ng \u0111\u01b0\u1ee3c x\u1eed l\u00fd<\/h2>\n<p data-start=\"2753\" data-end=\"3350\">C\u00e1c <strong data-start=\"2757\" data-end=\"2797\">l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT<\/strong> n\u1ebfu kh\u00f4ng \u0111\u01b0\u1ee3c kh\u1eafc ph\u1ee5c k\u1ecbp th\u1eddi c\u00f3 th\u1ec3 m\u1edf ra nhi\u1ec1u nguy c\u01a1 nghi\u00eam tr\u1ecdng. Tr\u01b0\u1edbc h\u1ebft, d\u1eef li\u1ec7u c\u00e1 nh\u00e2n v\u00e0 th\u00f4ng tin nh\u1ea1y c\u1ea3m c\u00f3 th\u1ec3 b\u1ecb r\u00f2 r\u1ec9, bao g\u1ed3m h\u00ecnh \u1ea3nh camera, l\u1ecbch tr\u00ecnh sinh ho\u1ea1t, d\u1eef li\u1ec7u s\u1ee9c kh\u1ecfe ho\u1eb7c th\u00f4ng tin kinh doanh. \u0110\u1ed3ng th\u1eddi, hacker c\u00f3 th\u1ec3 chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb quan tr\u1ecdng nh\u01b0 kh\u00f3a c\u1eeda th\u00f4ng minh, c\u1ea3m bi\u1ebfn, m\u00e1y m\u00f3c c\u00f4ng nghi\u1ec7p, g\u00e2y gi\u00e1n \u0111o\u1ea1n qu\u00e1 tr\u00ecnh v\u1eadn h\u00e0nh.<\/p>\n<p data-start=\"2753\" data-end=\"3350\"><img decoding=\"async\" class=\"alignnone wp-image-2482 size-full\" src=\"https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/web-15.png\" alt=\"internet of things (iot)\" width=\"2049\" height=\"1152\" srcset=\"https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/web-15.png 2049w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/web-15-300x169.png 300w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/web-15-1024x576.png 1024w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/web-15-768x432.png 768w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/web-15-1536x864.png 1536w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/web-15-18x10.png 18w, https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/web-15-600x337.png 600w\" sizes=\"(max-width: 2049px) 100vw, 2049px\" \/><\/p>\n<h2 data-start=\"3357\" data-end=\"3411\">5. C\u00e1ch t\u0103ng c\u01b0\u1eddng an ninh m\u1ea1ng cho h\u1ec7 th\u1ed1ng IoT<\/h2>\n<h3 data-start=\"3413\" data-end=\"3471\">5.1. Thay \u0111\u1ed5i m\u1eadt kh\u1ea9u m\u1ea1nh v\u00e0 b\u1eadt x\u00e1c th\u1ef1c hai l\u1edbp<\/h3>\n<p data-start=\"3473\" data-end=\"3751\">M\u1ed9t trong nh\u1eefng gi\u1ea3i ph\u00e1p nhanh v\u00e0 hi\u1ec7u qu\u1ea3 nh\u1ea5t \u0111\u1ec3 gi\u1ea3m thi\u1ec3u c\u00e1c <strong data-start=\"3540\" data-end=\"3564\">l\u1ed7 h\u1ed5ng IoT ph\u1ed5 bi\u1ebfn<\/strong> l\u00e0 \u0111\u1ed5i m\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh ngay khi l\u1eafp \u0111\u1eb7t thi\u1ebft b\u1ecb. M\u1eadt kh\u1ea9u m\u1ea1nh k\u1ebft h\u1ee3p v\u1edbi x\u00e1c th\u1ef1c hai l\u1edbp gi\u00fap gi\u1ea3m \u0111\u00e1ng k\u1ec3 kh\u1ea3 n\u0103ng b\u1ecb brute-force v\u00e0 b\u1ea3o v\u1ec7 thi\u1ebft b\u1ecb tr\u01b0\u1edbc nguy c\u01a1 <strong data-start=\"3735\" data-end=\"3750\">IoT b\u1ecb hack<\/strong>.<\/p>\n<h3 data-start=\"3753\" data-end=\"3808\">5.2. C\u1eadp nh\u1eadt firmware \u0111\u1ecbnh k\u1ef3 v\u00e0 v\u00e1 l\u1ed7i b\u1ea3o m\u1eadt<\/h3>\n<p data-start=\"3810\" data-end=\"4078\">Firmware m\u1edbi th\u01b0\u1eddng ch\u1ee9a b\u1ea3n v\u00e1 cho c\u00e1c <strong data-start=\"3850\" data-end=\"3890\">l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT<\/strong>, n\u00ean c\u1eadp nh\u1eadt thi\u1ebft b\u1ecb th\u01b0\u1eddng xuy\u00ean l\u00e0 c\u00e1ch quan tr\u1ecdng \u0111\u1ec3 t\u0103ng c\u01b0\u1eddng an ninh. Nhi\u1ec1u cu\u1ed9c t\u1ea5n c\u00f4ng x\u1ea3y ra v\u00ec ng\u01b0\u1eddi d\u00f9ng b\u1ecf qua c\u1eadp nh\u1eadt, khi\u1ebfn thi\u1ebft b\u1ecb t\u1ed3n t\u1ea1i l\u1ed7 h\u1ed5ng trong th\u1eddi gian d\u00e0i.<\/p>\n<h3>5.3. M\u00e3 h\u00f3a d\u1eef li\u1ec7u khi truy\u1ec1n v\u00e0 khi l\u01b0u tr\u1eef<\/h3>\n<p data-start=\"4134\" data-end=\"4386\">S\u1eed d\u1ee5ng giao th\u1ee9c b\u1ea3o m\u1eadt nh\u01b0 TLS, HTTPS ho\u1eb7c c\u00e1c ti\u00eau chu\u1ea9n m\u00e3 h\u00f3a m\u1edbi gi\u00fap b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u IoT kh\u1ecfi nghe l\u00e9n v\u00e0 \u0111\u00e1nh c\u1eafp. M\u00e3 h\u00f3a k\u00e9p c\u0169ng l\u00e0 m\u1ed9t ph\u1ea7n c\u1ee7a chi\u1ebfn l\u01b0\u1ee3c n\u00e2ng cao <strong data-start=\"4309\" data-end=\"4342\">an ninh m\u1ea1ng cho h\u1ec7 th\u1ed1ng IoT<\/strong> trong doanh nghi\u1ec7p v\u00e0 \u1ee9ng d\u1ee5ng c\u00f4ng nghi\u1ec7p.<\/p>\n<h3 data-start=\"4388\" data-end=\"4429\">5.4. T\u00e1ch m\u1ea1ng IoT kh\u1ecfi m\u1ea1ng ch\u00ednh<\/h3>\n<p data-start=\"4431\" data-end=\"4636\">T\u1ea1o m\u1ed9t m\u1ea1ng Wi-Fi ri\u00eang cho IoT gi\u00fap gi\u1ea3m m\u1ee9c \u0111\u1ed9 \u1ea3nh h\u01b0\u1edfng n\u1ebfu thi\u1ebft b\u1ecb b\u1ecb x\u00e2m nh\u1eadp. \u0110\u00e2y l\u00e0 b\u01b0\u1edbc \u0111\u01a1n gi\u1ea3n nh\u01b0ng hi\u1ec7u qu\u1ea3, gi\u1ea3m \u0111\u00e1ng k\u1ec3 kh\u1ea3 n\u0103ng hacker ti\u1ebfp c\u1eadn c\u00e1c thi\u1ebft b\u1ecb quan tr\u1ecdng kh\u00e1c trong h\u1ec7 th\u1ed1ng.<\/p>\n<h3 data-start=\"4638\" data-end=\"4690\">5.5. Ki\u1ec3m so\u00e1t API v\u00e0 gi\u1edbi h\u1ea1n quy\u1ec1n truy c\u1eadp<\/h3>\n<p data-start=\"4692\" data-end=\"4888\">API m\u1edf ho\u1eb7c quy\u1ec1n truy c\u1eadp r\u1ed9ng r\u00e3i l\u00e0 <strong data-start=\"4731\" data-end=\"4755\">l\u1ed7 h\u1ed5ng IoT ph\u1ed5 bi\u1ebfn<\/strong> trong nhi\u1ec1u h\u1ec7 th\u1ed1ng. Ch\u1ec9 c\u1ea5p quy\u1ec1n cho \u1ee9ng d\u1ee5ng ho\u1eb7c ng\u01b0\u1eddi d\u00f9ng th\u1eadt s\u1ef1 c\u1ea7n thi\u1ebft l\u00e0 c\u00e1ch hi\u1ec7u qu\u1ea3 \u0111\u1ec3 h\u1ea1n ch\u1ebf nguy c\u01a1 b\u1ecb khai th\u00e1c.<\/p>\n<h3 data-start=\"4890\" data-end=\"4961\">5.6. S\u1eed d\u1ee5ng t\u01b0\u1eddng l\u1eeda v\u00e0 h\u1ec7 th\u1ed1ng gi\u00e1m s\u00e1t b\u1ea5t th\u01b0\u1eddng (IDS\/IPS)<\/h3>\n<p data-start=\"4963\" data-end=\"5248\">T\u01b0\u1eddng l\u1eeda gi\u00fap ng\u0103n truy c\u1eadp tr\u00e1i ph\u00e9p, trong khi IDS\/IPS ph\u00e1t hi\u1ec7n h\u00e0nh vi b\u1ea5t th\u01b0\u1eddng nh\u01b0 l\u01b0\u1ee3ng truy c\u1eadp t\u0103ng \u0111\u1ed9t ng\u1ed9t ho\u1eb7c thao t\u00e1c b\u01b0\u1eddng t\u1eeb thi\u1ebft b\u1ecb IoT. \u0110\u00e2y l\u00e0 l\u1edbp b\u1ea3o v\u1ec7 quan tr\u1ecdng trong t\u1ed5ng th\u1ec3 <strong data-start=\"5169\" data-end=\"5202\">an ninh m\u1ea1ng cho h\u1ec7 th\u1ed1ng IoT<\/strong>, \u0111\u1eb7c bi\u1ec7t trong c\u00e1c m\u00f4 h\u00ecnh doanh nghi\u1ec7p l\u1edbn.<\/p>\n<h2 data-start=\"6807\" data-end=\"7175\">T\u1ed5ng k\u1ebft<\/h2>\n<p data-start=\"6807\" data-end=\"7175\">Vi\u1ec7c hi\u1ec3u v\u00e0 nh\u1eadn di\u1ec7n <strong data-start=\"6830\" data-end=\"6870\">l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT<\/strong> l\u00e0 n\u1ec1n t\u1ea3ng \u0111\u1ec3 x\u00e2y d\u1ef1ng m\u1ed9t h\u1ec7 th\u1ed1ng an to\u00e0n. Khi thi\u1ebft b\u1ecb IoT ng\u00e0y c\u00e0ng ph\u1ed5 bi\u1ebfn, r\u1ee7i ro t\u1ea5n c\u00f4ng c\u0169ng t\u0103ng l\u00ean t\u01b0\u01a1ng \u1ee9ng. B\u1eb1ng c\u00e1ch \u00e1p d\u1ee5ng c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt \u0111\u01a1n gi\u1ea3n nh\u01b0ng hi\u1ec7u qu\u1ea3, ng\u01b0\u1eddi d\u00f9ng v\u00e0 doanh nghi\u1ec7p c\u00f3 th\u1ec3 gi\u1ea3m thi\u1ec3u t\u1ed1i \u0111a nguy c\u01a1 IoT b\u1ecb hack v\u00e0 n\u00e2ng cao an to\u00e0n h\u1ec7 th\u1ed1ng trong d\u00e0i h\u1ea1n.<\/p>\n<p data-start=\"6807\" data-end=\"7175\"><strong>C\u00f4ng Ty CP ADS JSC<\/strong><br \/>\n<strong data-start=\"8288\" data-end=\"8352\">\u0110\u1ecba ch\u1ec9: T\u1ea7ng 4, T\u00f2a nh\u00e0 IOS, S\u1ed1 29 \u0110\u01b0\u1eddng 18, ph\u01b0\u1eddng Hi\u1ec7p B\u00ecnh, Th\u00e0nh Ph\u1ed1 H\u1ed3 Ch\u00ed Minh.<br \/>\nFanpage:\u00a0<a href=\"https:\/\/www.facebook.com\/adsvietnamofficical\/\" target=\"_blank\" rel=\"noopener\">ADS AJC<\/a><br \/>\nWebsite:\u00a0<a href=\"https:\/\/adstechnology.vn\/\">https:\/\/adstechnology.vn\/\u00a0\u00a0<\/a><\/strong><\/p>","protected":false},"excerpt":{"rendered":"<p>C\u00f4ng ngh\u1ec7 IoT \u0111ang tr\u1edf th\u00e0nh n\u1ec1n t\u1ea3ng quan tr\u1ecdng trong \u0111\u1eddi s\u1ed1ng, t\u1eeb thi\u1ebft b\u1ecb gia d\u1ee5ng th\u00f4ng minh cho \u0111\u1ebfn h\u1ec7 th\u1ed1ng qu\u1ea3n l\u00fd doanh nghi\u1ec7p, gi\u00e1m s\u00e1t c\u00f4ng nghi\u1ec7p v\u00e0 t\u1ef1 \u0111\u1ed9ng h\u00f3a s\u1ea3n xu\u1ea5t. Tuy nhi\u00ean, \u0111i k\u00e8m s\u1ef1 ti\u1ec7n l\u1ee3i l\u00e0 h\u00e0ng lo\u1ea1t r\u1ee7i ro li\u00ean quan \u0111\u1ebfn b\u1ea3o m\u1eadt. Vi\u1ec7c hi\u1ec3u r\u00f5 l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT kh\u00f4ng ch\u1ec9 gi\u00fap ng\u01b0\u1eddi d\u00f9ng gi\u1ea3m nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng m\u00e0 c\u00f2n n\u00e2ng cao kh\u1ea3 n\u0103ng b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u00e1 nh\u00e2n v\u00e0 h\u1ec7 th\u1ed1ng quan tr\u1ecdng. 1. C\u00f4ng ngh\u1ec7 IoT ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o v\u00e0 t\u1ea1i sao d\u1ec5 ph\u00e1t sinh l\u1ed7 h\u1ed5ng? \u0110\u1ec3 hi\u1ec3u v\u00ec sao t\u1ed3n t\u1ea1i nhi\u1ec1u l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT, c\u1ea7n nh\u00ecn v\u00e0o c\u1ea5u tr\u00fac v\u1eadn h\u00e0nh c\u1ee7a IoT. H\u1ec7 th\u1ed1ng IoT bao g\u1ed3m: thi\u1ebft b\u1ecb thu th\u1eadp d\u1eef li\u1ec7u, b\u1ed9 x\u1eed l\u00fd, giao th\u1ee9c truy\u1ec1n t\u1ea3i v\u00e0 n\u1ec1n t\u1ea3ng qu\u1ea3n l\u00fd. Khi nhi\u1ec1u l\u1edbp nh\u01b0 v\u1eady ph\u1ea3i t\u01b0\u01a1ng t\u00e1c li\u00ean t\u1ee5c, ch\u1ec9 c\u1ea7n m\u1ed9t \u0111i\u1ec3m y\u1ebfu nh\u1ecf c\u0169ng \u0111\u1ee7 khi\u1ebfn IoT b\u1ecb hack d\u1ec5 d\u00e0ng. M\u1ed9t s\u1ed1 nguy\u00ean nh\u00e2n khi\u1ebfn h\u1ec7 th\u1ed1ng IoT d\u1ec5 ph\u00e1t sinh l\u1ed7 h\u1ed5ng: Nhi\u1ec1u thi\u1ebft b\u1ecb gi\u00e1 r\u1ebb kh\u00f4ng ch\u00fa tr\u1ecdng b\u1ea3o m\u1eadt. Ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng thay m\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh. D\u1eef li\u1ec7u truy\u1ec1n \u0111i kh\u00f4ng \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a. Firmware c\u0169 ch\u1ee9a l\u1ed7 h\u1ed5ng nh\u01b0ng kh\u00f4ng \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt. S\u1ed1 l\u01b0\u1ee3ng thi\u1ebft b\u1ecb IoT l\u1edbn khi\u1ebfn vi\u1ec7c ki\u1ec3m so\u00e1t tr\u1edf n\u00ean kh\u00f3 kh\u0103n. 2. Nh\u1eefng l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT m\u00e0 ng\u01b0\u1eddi d\u00f9ng th\u01b0\u1eddng b\u1ecf qua 2.1. M\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh d\u1ec5 \u0111o\u00e1n \u2013 L\u1ed7 h\u1ed5ng l\u1edbn nh\u1ea5t Ph\u1ea7n l\u1edbn thi\u1ebft b\u1ecb IoT \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t m\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh nh\u01b0 \u201cadmin\u201d, \u201c123456\u201d, \u201croot\u201d, khi\u1ebfn IoT b\u1ecb hack ch\u1ec9 trong v\u00e0i ph\u00fat. Tin t\u1eb7c s\u1eed d\u1ee5ng c\u00f4ng c\u1ee5 qu\u00e9t t\u1ef1 \u0111\u1ed9ng \u0111\u1ec3 t\u00ecm thi\u1ebft b\u1ecb c\u00f2n gi\u1eef m\u1eadt kh\u1ea9u g\u1ed1c, t\u1eeb \u0111\u00f3 chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n v\u00e0 truy c\u1eadp s\u00e2u h\u01a1n v\u00e0o h\u1ec7 th\u1ed1ng m\u1ea1ng. 2.2. Kh\u00f4ng m\u00e3 h\u00f3a d\u1eef li\u1ec7u khi truy\u1ec1n \u2013 R\u1ee7i ro MitM nghi\u00eam tr\u1ecdng M\u1ed9t trong nh\u1eefng l\u1ed7 h\u1ed5ng IoT ph\u1ed5 bi\u1ebfn l\u00e0 d\u1eef li\u1ec7u truy\u1ec1n gi\u1eefa thi\u1ebft b\u1ecb v\u00e0 server kh\u00f4ng \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a. Tin t\u1eb7c c\u00f3 th\u1ec3 ch\u1eb7n lu\u1ed3ng d\u1eef li\u1ec7u, thay \u0111\u1ed5i ho\u1eb7c \u0111\u00e1nh c\u1eafp th\u00f4ng tin. \u0110i\u1ec1u n\u00e0y \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m v\u1edbi thi\u1ebft b\u1ecb camera, c\u1ea3m bi\u1ebfn y t\u1ebf ho\u1eb7c thi\u1ebft b\u1ecb theo d\u00f5i v\u1ecb tr\u00ed. 2.3. Firmware l\u1ed7i th\u1eddi \u2013 M\u1ea3nh \u0111\u1ea5t m\u00e0u m\u1ee1 c\u1ee7a hacker Firmware c\u0169 ch\u1ee9a nhi\u1ec1u l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT nh\u01b0ng l\u1ea1i kh\u00f4ng \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt v\u00ec ng\u01b0\u1eddi d\u00f9ng thi\u1ebfu kinh nghi\u1ec7m ho\u1eb7c nh\u00e0 s\u1ea3n xu\u1ea5t ng\u1eebng h\u1ed7 tr\u1ee3. C\u00e1c l\u1ed7 h\u1ed5ng n\u00e0y b\u1ecb khai th\u00e1c \u0111\u1ec3 c\u00e0i m\u00e3 \u0111\u1ed9c, t\u1ea1o backdoor ho\u1eb7c chi\u1ebfm quy\u1ec1n \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb. 2.4. API kh\u00f4ng an to\u00e0n \u2013 C\u1eeda ng\u00f5 d\u1eabn \u0111\u1ebfn to\u00e0n h\u1ec7 th\u1ed1ng API qu\u1ea3n l\u00fd IoT n\u1ebfu kh\u00f4ng \u0111\u01b0\u1ee3c x\u00e1c th\u1ef1c m\u1ea1nh ho\u1eb7c kh\u00f4ng gi\u1edbi h\u1ea1n quy\u1ec1n truy c\u1eadp s\u1ebd tr\u1edf th\u00e0nh l\u1ed7 h\u1ed5ng c\u1ef1c l\u1edbn. Tin t\u1eb7c c\u00f3 th\u1ec3 \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb t\u1eeb xa, xem d\u1eef li\u1ec7u ho\u1eb7c t\u1eaft h\u1ec7 th\u1ed1ng. 2.5. Giao th\u1ee9c truy\u1ec1n th\u00f4ng l\u1ed7i th\u1eddi \u2013 Kh\u00f4ng c\u00f3 l\u1edbp b\u1ea3o v\u1ec7 M\u1ed9t s\u1ed1 thi\u1ebft b\u1ecb IoT gi\u00e1 r\u1ebb v\u1eabn d\u00f9ng giao th\u1ee9c c\u0169 nh\u01b0 HTTP, Telnet ho\u1eb7c FTP thay v\u00ec HTTPS hay TLS. \u0110\u00e2y l\u00e0 nh\u1eefng l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn khi\u1ebfn thi\u1ebft b\u1ecb IoT b\u1ecb hack \u0111\u01a1n gi\u1ea3n ch\u1ec9 b\u1eb1ng c\u00e1c g\u00f3i d\u1eef li\u1ec7u gi\u1ea3 m\u1ea1o. 2.6. Kh\u00f4ng t\u00e1ch m\u1ea1ng IoT \u2013 G\u00e2y l\u00e2y lan t\u1ea5n c\u00f4ng to\u00e0n h\u1ec7 th\u1ed1ng Khi thi\u1ebft b\u1ecb IoT c\u00f9ng n\u1eb1m trong m\u1ea1ng Wi-Fi v\u1edbi m\u00e1y t\u00ednh v\u00e0 \u0111i\u1ec7n tho\u1ea1i, hacker ch\u1ec9 c\u1ea7n x\u00e2m nh\u1eadp m\u1ed9t thi\u1ebft b\u1ecb l\u00e0 c\u00f3 th\u1ec3 ti\u1ebfn xa h\u01a1n v\u00e0o c\u00e1c thi\u1ebft b\u1ecb quan tr\u1ecdng kh\u00e1c. 3. IoT b\u1ecb hack nh\u01b0 th\u1ebf n\u00e0o? C\u00e1c ph\u01b0\u01a1ng th\u1ee9c t\u1ea5n c\u00f4ng ph\u1ed5 bi\u1ebfn 3.1. T\u1ea5n c\u00f4ng brute-force v\u00e0o t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb M\u1ed9t trong nh\u1eefng l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT xu\u1ea5t ph\u00e1t t\u1eeb m\u1eadt kh\u1ea9u y\u1ebfu ho\u1eb7c m\u1eadt kh\u1ea9u m\u1eb7c \u0111\u1ecbnh do nh\u00e0 s\u1ea3n xu\u1ea5t c\u00e0i \u0111\u1eb7t s\u1eb5n. Tin t\u1eb7c th\u01b0\u1eddng s\u1eed d\u1ee5ng t\u1ea5n c\u00f4ng brute-force \u0111\u1ec3 th\u1eed h\u00e0ng tr\u0103m ngh\u00ecn m\u1eadt kh\u1ea9u trong th\u1eddi gian ng\u1eafn v\u00e0 chi\u1ebfm quy\u1ec1n truy c\u1eadp thi\u1ebft b\u1ecb. Khi hacker ki\u1ec3m so\u00e1t \u0111\u01b0\u1ee3c t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb, h\u1ecd c\u00f3 th\u1ec3 ch\u1ec9nh s\u1eeda c\u1ea5u h\u00ecnh, ch\u00e8n m\u00e3 \u0111\u1ed9c ho\u1eb7c theo d\u00f5i to\u00e0n b\u1ed9 h\u1ec7 th\u1ed1ng. \u0110\u00e2y l\u00e0 l\u00fd do m\u1eadt kh\u1ea9u y\u1ebfu tr\u1edf th\u00e0nh l\u1ed7 h\u1ed5ng IoT ph\u1ed5 bi\u1ebfn nh\u1ea5t trong nhi\u1ec1u m\u00f4i tr\u01b0\u1eddng gia \u0111\u00ecnh v\u00e0 doanh nghi\u1ec7p. 3.2. T\u1ea5n c\u00f4ng DDoS \u2013 Bi\u1ebfn thi\u1ebft b\u1ecb IoT th\u00e0nh botnet Nhi\u1ec1u thi\u1ebft b\u1ecb IoT c\u00f3 b\u1ea3o m\u1eadt th\u1ea5p d\u1ec5 b\u1ecb chi\u1ebfm quy\u1ec1n v\u00e0 th\u00eam v\u00e0o m\u1ed9t m\u1ea1ng botnet. \u0110\u00e2y l\u00e0 ph\u01b0\u01a1ng th\u1ee9c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a m\u00e3 \u0111\u1ed9c Mirai, v\u1ed1n l\u00e0m l\u1ed9 r\u00f5 m\u1ee9c \u0111\u1ed9 nghi\u00eam tr\u1ecdng c\u1ee7a c\u00e1c l\u1ed7 h\u1ed5ng ph\u1ed5 bi\u1ebfn trong c\u00f4ng ngh\u1ec7 IoT khi h\u00e0ng tr\u0103m ngh\u00ecn camera IP v\u00e0 router b\u1ecb bi\u1ebfn th\u00e0nh c\u00f4ng c\u1ee5 t\u1ea5n c\u00f4ng. V\u00ec v\u1eady, c\u00e2u h\u1ecfi IoT b\u1ecb hack nh\u01b0 th\u1ebf n\u00e0o lu\u00f4n g\u1eafn li\u1ec1n v\u1edbi vi\u1ec7c thi\u1ebfu c\u01a1 ch\u1ebf x\u00e1c th\u1ef1c v\u00e0 c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt. 3.3. C\u00e0i \u0111\u1eb7t m\u00e3 \u0111\u1ed9c th\u00f4ng qua firmware k\u00e9m an to\u00e0n Firmware kh\u00f4ng \u0111\u01b0\u1ee3c k\u00fd s\u1ed1 ho\u1eb7c kh\u00f4ng c\u00f3 quy tr\u00ecnh ki\u1ec3m tra t\u00ednh to\u00e0n v\u1eb9n r\u1ea5t d\u1ec5 b\u1ecb thay th\u1ebf b\u1eb1ng phi\u00ean b\u1ea3n ch\u1ee9a m\u00e3 \u0111\u1ed9c. Tin t\u1eb7c ch\u1ec9 c\u1ea7n khai th\u00e1c m\u1ed9t l\u1ed7 h\u1ed5ng IoT ph\u1ed5 bi\u1ebfn trong c\u01a1 ch\u1ebf c\u1eadp nh\u1eadt firmware \u0111\u1ec3 ch\u00e8n backdoor v\u00e0o thi\u1ebft b\u1ecb. Khi firmware b\u1ecb c\u00e0i m\u00e3 \u0111\u1ed9c, hacker c\u00f3 th\u1ec3 \u0111i\u1ec1u khi\u1ec3n thi\u1ebft b\u1ecb t\u1eeb xa ho\u1eb7c thu th\u1eadp d\u1eef li\u1ec7u m\u00e0 ng\u01b0\u1eddi d\u00f9ng kh\u00f4ng hay bi\u1ebft. \u0110\u00e2y l\u00e0 m\u1ed1i nguy l\u1edbn \u0111\u1ed1i v\u1edbi an ninh m\u1ea1ng cho h\u1ec7 th\u1ed1ng IoT, \u0111\u1eb7c bi\u1ec7t trong m\u00f4i tr\u01b0\u1eddng c\u00f4ng nghi\u1ec7p, n\u01a1i m\u1ed7i thi\u1ebft b\u1ecb l\u00e0 m\u1ed9t \u0111i\u1ec3m truy c\u1eadp quan tr\u1ecdng. 3.4. T\u1ea5n c\u00f4ng th\u00f4ng qua m\u1ea1ng Wi-Fi y\u1ebfu b\u1ea3o m\u1eadt Wi-Fi s\u1eed d\u1ee5ng chu\u1ea9n b\u1ea3o m\u1eadt c\u0169 nh\u01b0 WEP ho\u1eb7c WPA2 r\u1ea5t d\u1ec5 b\u1ecb b\u1ebb kh\u00f3a, m\u1edf \u0111\u01b0\u1eddng cho tin<\/p>","protected":false},"author":9,"featured_media":2530,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"two_page_speed":[],"footnotes":""},"categories":[12,1],"tags":[40,41],"class_list":["post-2529","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-giai-phap","category-tin-tuc","tag-cong-nghe-iot-hoat-dong-nhu-the-nao","tag-nhung-lo-hong-pho-bien-trong-cong-nghe-iot"],"rttpg_featured_image_url":{"full":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1.png",2049,1152,false],"landscape":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1.png",2049,1152,false],"portraits":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1.png",2049,1152,false],"thumbnail":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1-150x150.png",150,150,true],"medium":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1-300x169.png",300,169,true],"large":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1-1024x576.png",1024,576,true],"1536x1536":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1-1536x864.png",1536,864,true],"2048x2048":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1.png",2048,1151,false],"trp-custom-language-flag":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1-18x10.png",18,10,true],"tenweb_optimizer_mobile":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1-600x337.png",600,337,true],"tenweb_optimizer_tablet":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1-768x432.png",768,432,true],"woocommerce_thumbnail":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1-300x300.png",300,300,true],"woocommerce_single":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1-600x337.png",600,337,true],"woocommerce_gallery_thumbnail":["https:\/\/adstechnology.vn\/wp-content\/uploads\/2025\/11\/cong-nghe-IoT-1-100x100.png",100,100,true]},"rttpg_author":{"display_name":"D\u0168NG PH\u1ea0M","author_link":"https:\/\/adstechnology.vn\/en\/author\/mynhens"},"rttpg_comment":1,"rttpg_category":"<a href=\"https:\/\/adstechnology.vn\/en\/category\/giai-phap\" rel=\"category tag\">Gi\u1ea3i Ph\u00e1p<\/a> <a href=\"https:\/\/adstechnology.vn\/en\/category\/tin-tuc\" rel=\"category tag\">Tin T\u1ee9c<\/a>","rttpg_excerpt":"C\u00f4ng ngh\u1ec7 IoT \u0111ang tr\u1edf th\u00e0nh n\u1ec1n t\u1ea3ng quan tr\u1ecdng trong \u0111\u1eddi s\u1ed1ng, t\u1eeb thi\u1ebft b\u1ecb gia d\u1ee5ng th\u00f4ng minh cho \u0111\u1ebfn h\u1ec7 th\u1ed1ng qu\u1ea3n l\u00fd doanh nghi\u1ec7p, gi\u00e1m s\u00e1t c\u00f4ng nghi\u1ec7p v\u00e0 t\u1ef1 \u0111\u1ed9ng h\u00f3a s\u1ea3n xu\u1ea5t. Tuy nhi\u00ean, \u0111i k\u00e8m s\u1ef1 ti\u1ec7n l\u1ee3i l\u00e0 h\u00e0ng lo\u1ea1t r\u1ee7i ro li\u00ean quan \u0111\u1ebfn b\u1ea3o m\u1eadt.&hellip;","_links":{"self":[{"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/posts\/2529","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/comments?post=2529"}],"version-history":[{"count":1,"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/posts\/2529\/revisions"}],"predecessor-version":[{"id":2531,"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/posts\/2529\/revisions\/2531"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/media\/2530"}],"wp:attachment":[{"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/media?parent=2529"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/categories?post=2529"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/adstechnology.vn\/en\/wp-json\/wp\/v2\/tags?post=2529"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}