r BO THONG TIN vA TRUYEN THONGTRUNG TAMUNG cUuKHAN:cAP

MA.VTiNHVIETNAMse.383/VNCERT -DPUC

VIv phat hien, ngan chan rna dQc"dao" ti~n ao b~t hop phap

CONG HOA xAHOI CHiT NGHiA VIET NAM. . .DQcl~p - Tv do - Hanh phuc

Hit N9i, ngity~'5thang11 ndm 2017

Kinh giri:- Cac dan vi chuyen trach v~ CNTT, ATTT cua Van phong Trunguong Dang, cac Ban cua Dang, Van phong Chu tich mroc, Van

[KH AN , phong Quoc hQi, Van phong Chinh phu;- Cac dan vi chuyen trach v~ CNTT, ATTT cac BQ, nganh;- Cac dan vi thuoc BQThong tin va Truyen thong;- Cac Sa thong tin va Truyen thong;- Thanh vien mang hroi ling ciru sir c6;

') '" ~- Cac Tong cong ty.Tap doan Kinh te, cac To chirc Tai chinh '\\~Ngan hang; 0 ' TR~NGT~I

C ' D nh hie h .:.. I V'~ h" D'" 1 H <= lfNGClJUKHAN- ac oa ng l~p a tang ntemet, len t ong, rnen ire, I~ MAY TiNI

khong, Giao thong V~ tai. \..- VI~T NAI

Thirc hien cong tac thea doi sir c6 tren khong gian mang Viet Narn, Tru~g~~tam VNCERT da ghi nhan dugc rftt nhi~u S\f c6 ATTT v~ rna dQc khai thac ti~nao Coinhive ~n rninh tren cac website. Khi nguai dung truy c~p vao trang web,

thu vi~n rna Coinhive dugc t\f dQng ch~y tren may tinh nguai dung du6i d~ng ti~nich rna rQng ho~c tf\l'CtiSp trong trinh duy~t nh~rn m\lc dich "dao" ti~n ao Bitcoin,Monero ... b~g cach su d\lng trai phep tai nguyen nguai dung (CPU, 6 cling, bQnh6 ... ) va gui v~ vi di~n til cila tin t~c.

Can cu QuySt dinh s6 05/2017 IQD-TTg ngay 16103/2017 cua Thil tu6ngChinh phil va th\fC hi~n Thong tu s6 20/2011/TT-BTTTT ban hanh ngay12/9/2017 cua BQ Thong tin va Truy~n thong quy dinh v~ di~u ph6i, ling Clm S\fc6 an toan thong tin rn~ng toan qu6c, Trung tam VNCERT yeu cAuLanh d~o dan

vi chi d~o cac dan vi thuQc ph~rn vi quan ly th\fChi~n kh~ cftp cac cong vi~c sau:

1. D6i v6i quan tri website:

- KiSrn tra, ra soat rna ngu6n dS phat hi~n cac rna dugc chen vao. Dftu hi~unh~n biSt g6rn cac tu kh6a trong rna ngu6n website "coinhive.com", "coinhive","coin-hive", "coinhive.rnin.js", "authedrnine.com", authedrnine.rnin.j s.

"coinhive" , "coin-hive" , "coinhive.min.j s", "authedmine.com" ,authedmine.min.j s.

- N@uphat hien website bi chen cac rna khai thac nhir da neu tren, cfin rasoat va kiem tra lai 16hong tren may chu, 16h6ng tren website, kiem tra cac taikhoan bi lQ 19t co quyen thay d6i rna nguon, nh~m kh~c phuc 16 hong bi 19idung.

2. D6i voi quan tri mang: TriSn khai cac bien phap nham ngan chan viecchay cac doan rna trai phep "Coinhive" tren may tinh nhu sau:

- Thirc hien giam sat va boc go xu ly tren cac may tinh trong mang coxuat hien cac k@tn6i dSn cac dia chi ten mien sau: afminer.com, coin-have. com,

coinerra.com, coinhive.com, coinnebula.com, crypto-loot.com, hashforcash.us,jescoin.com, ppoi.org, authedmine.com;

- Sir dung nrong hra dS chan cac k@tn6i ra cac dia chi sau:afminer.com,coin-have. com, coinerra.com, coinhive.com, coinnebula.com, crypto-loot.com,hashforcash. us, j escoin.com, ppoi.org, authedmine.com;

- Ra quet, kiSm tra h~ thong dS tim ra va loai bo cac doan rna co trong cacphan m~m rna rQng "Add-on" cua trinh duy~t web;

- Khuy@n nghi nguai dung cai d~t cac ti~n ich rna rQng: "No CoinChrome" hay "minerBlock" d6i vai Chrome; cai d~t "NoScripts" cho Firefox.

3. Huang dan nguai dUng kiSm tra hi~u su§.t su d\lng CPU cua may tinhb~ng cac ilng d\lng nhu Windows Task Manager va Resource Monitor. NSu maytinh co d§.u hi~u ch~m ch~p va kiSm tra th§.y hi~u su§.t su d\lng CPU cua cactrinh duy~t ho~c ti~n ich rna rQng cao thi co thS may tinh do da bi nhiSmCoinhive. Cfin thong bao gap cho quin tri l1l~ngdS xu lY.

4. Thuang xuyen kiSm tra va quet cac 16 h6ng t6n t~i tren h~ th6ng dSphat hi~n kip thai s\!'xu§.t hi~n cua cac do~n rna dQc h~i. Trong truang hgp phathi~n ra cac 16h6ng, l~p tuc triSn khai bi~n phap kh~c ph\lc, c~p nh~t cac ban vab6 sung va lo~i b6 cac chuong trinh dQch~i da bi tin t~c chen vao.

5. Sau khi th\!'c hi~n, d~ nghi cac don vi bao cao tinh hinh lay nhiSm vakSt qua xu ly (n@uco) v~ Co quan Di~u ph6i Qu6c gia (Trung tam VNCERT)truac ngay 30 thang 11 nam 2017.

Tren day la lo~i rna dQc nguy hiSm. Trung tam VNCER T yeu cfiu Lanhd~o cac don vi nghiem tilc th\l'c hi~n l~nh di~u ph6i.

,~• CO'quan Di~u phai Quae gia:

Trung tam U'ng ciru khAn c§.pmay tinh Vi~t NamDia chi: T§.ng5 - Toa nha 115 Tr§.nDuy Hung - C§.uGi§.y- Ha N9i;Di~n thoai: 0436404423 s6 may Ie 112;Duong day nong: 0869 100 319/0934 424 009;

Hom thtr di~n nr tiSp nh~n bao cao su c6: ir@vncert.gov.vn.

Tran trong.z,

Noi nhl)n:- Nhu tren;- BQ tnrong (dS b/e);- Thir tnrong Nguyen Thanh Hung (dS b/e);- Giam d6e (dS b/e);- PGD Nguy~n Kh~e Lich;- Cac phong, ehi nhanh: KTHT, NCPT, TVDT,CNHCM, CNDN;- LUll VT, DPVC.

KT.GIAMDOC

o-.....;;;;;;=~uy~n Kh~e Ljch