{"id":143391,"date":"2025-12-30T01:22:46","date_gmt":"2025-12-30T01:22:46","guid":{"rendered":"https:\/\/cryptonews.com\/vn\/?p=143391"},"modified":"2025-12-28T01:12:16","modified_gmt":"2025-12-28T01:12:16","slug":"gamers-at-risk-as-fake-roblox-mods-spread-crypto-stealing-malware","status":"publish","type":"post","link":"https:\/\/cryptonews.com\/vn\/news\/gamers-at-risk-as-fake-roblox-mods-spread-crypto-stealing-malware\/","title":{"rendered":"Game th\u1ee7 \u0111\u1ed1i m\u1eb7t r\u1ee7i ro khi c\u00e1c b\u1ea3n mod Roblox gi\u1ea3 m\u1ea1o ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c \u0111\u00e1nh c\u1eafp ti\u1ec1n \u0111i\u1ec7n t\u1eed"},"content":{"rendered":"

C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u c\u1ee7a Kaspersky v\u1eeba ph\u00e1t hi\u1ec7n Stealka \u2013 m\u1ed9t lo\u1ea1i m\u00e3 \u0111\u1ed9c \u0111\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u01b0\u1ee3c ng\u1ee5y trang tinh vi d\u01b0\u1edbi d\u1ea1ng mod game v\u00e0 ph\u1ea7n m\u1ec1m crack, nh\u1eafm th\u1eb3ng v\u00e0o v\u00ed crypto v\u00e0 d\u1eef li\u1ec7u tr\u00ecnh duy\u1ec7t th\u00f4ng qua h\u01a1n 115 ti\u1ec7n \u00edch m\u1edf r\u1ed9ng.<\/p>

\"Game<\/figure>

Lo\u1ea1i malware n\u00e0y \u0111\u01b0\u1ee3c ph\u00e1t t\u00e1n qua nh\u1eefng n\u1ec1n t\u1ea3ng v\u1ed1n \u0111\u01b0\u1ee3c ng\u01b0\u1eddi d\u00f9ng tin t\u01b0\u1edfng nh\u01b0 GitHub, SourceForge hay Softpedia, n\u01a1i k\u1ebb t\u1ea5n c\u00f4ng d\u1ef1ng l\u00ean c\u00e1c website v\u00e0 kho m\u00e3 gi\u1ea3 m\u1ea1o v\u1edbi giao di\u1ec7n r\u1ea5t \u201cchuy\u00ean nghi\u1ec7p\u201d. Ch\u00fang m\u1ea1o danh c\u00e1c b\u1ea3n hack, cheat game ph\u1ed5 bi\u1ebfn cho nh\u1eefng t\u1ef1a game nh\u01b0 Roblox hay GTA V \u0111\u1ec3 \u0111\u00e1nh l\u1eeba ng\u01b0\u1eddi d\u00f9ng t\u1ea3i v\u1ec1.<\/p>

Theo Kaspersky, \u0111\u00e2y l\u00e0 di\u1ec5n bi\u1ebfn m\u1edbi nh\u1ea5t trong l\u00e0n s\u00f3ng malware nh\u1eafm v\u00e0o c\u1ed9ng \u0111\u1ed3ng game th\u1ee7, khi tin t\u1eb7c ng\u00e0y c\u00e0ng t\u1eadn d\u1ee5ng s\u1ef1 tin t\u01b0\u1edfng v\u1ed1n c\u00f3 trong c\u00e1c nh\u00f3m mod game \u0111\u1ec3 ph\u00e1t t\u00e1n m\u00e3 \u0111\u1ed9c.<\/p>

B\u1eaby \u0111\u01b0\u1ee3c gi\u0103ng t\u1eeb nh\u1eefng th\u1ee9 quen thu\u1ed9c<\/h2><\/span>

Nh\u1eefng k\u1ebb \u0111\u1ee9ng sau Stealka khai th\u00e1c tri\u1ec7t \u0111\u1ec3 c\u00e1c t\u1eeb kh\u00f3a t\u00ecm ki\u1ebfm ph\u1ed5 bi\u1ebfn v\u00e0 t\u1ea1o ra c\u00e1c trang t\u1ea3i v\u1ec1 tr\u00f4ng ho\u00e0n to\u00e0n h\u1ee3p ph\u00e1p. Th\u1eadm ch\u00ed, m\u1ed9t s\u1ed1 website c\u00f2n tuy\u00ean b\u1ed1 r\u1eb1ng file \u0111\u00e3 \u0111\u01b0\u1ee3c qu\u00e9t virus tr\u01b0\u1edbc khi \u0111\u0103ng t\u1ea3i \u2013 d\u00f9 tr\u00ean th\u1ef1c t\u1ebf kh\u00f4ng h\u1ec1 c\u00f3 b\u1ea5t k\u1ef3 b\u01b0\u1edbc ki\u1ec3m tra n\u00e0o.<\/p>

C\u00e1c file \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf r\u1ea5t tinh vi. C\u00f3 trang c\u00f2n qu\u1ea3ng b\u00e1 Half-Life 3 \u2013 t\u1ef1a game v\u1ed1n ch\u01b0a t\u1eebng \u0111\u01b0\u1ee3c ph\u00e1t h\u00e0nh \u2013 nh\u01b0ng l\u1ea1i m\u00f4 t\u1ea3 n\u00f3 nh\u01b0 m\u1ed9t \u201cph\u1ea7n m\u1ec1m chuy\u00ean nghi\u1ec7p d\u00e0nh cho Windows\u201d. Nh\u1eefng c\u00e1i t\u00ean game \u0111\u00ecnh \u0111\u00e1m ch\u1ec9 \u0111\u00f3ng vai tr\u00f2 l\u00e0m m\u1ed3i, nh\u1eb1m t\u0103ng kh\u1ea3 n\u0103ng xu\u1ea5t hi\u1ec7n tr\u00ean c\u00f4ng c\u1ee5 t\u00ecm ki\u1ebfm.<\/p>

Kho v\u0169 kh\u00ed nh\u1eafm th\u1eb3ng v\u00e0o v\u00ed crypto<\/h2><\/span>

Theo Kaspersky, Stealka kh\u00f4ng ch\u1ec9 d\u1eebng \u1edf vi\u1ec7c \u0111\u00e1nh c\u1eafp th\u00f4ng tin \u0111\u0103ng nh\u1eadp \u0111\u01a1n gi\u1ea3n. Malware n\u00e0y c\u00f3 kh\u1ea3 n\u0103ng thu th\u1eadp d\u1eef li\u1ec7u t\u1eeb c\u00e1c tr\u00ecnh duy\u1ec7t s\u1eed d\u1ee5ng n\u1ec1n t\u1ea3ng Chromium v\u00e0 Gecko, khi\u1ebfn h\u01a1n 100 \u1ee9ng d\u1ee5ng, bao g\u1ed3m Chrome, Firefox, Opera v\u00e0 Edge, r\u01a1i v\u00e0o v\u00f9ng nguy hi\u1ec3m.<\/p>

Stealka c\u00f3 th\u1ec3 l\u1ea5y d\u1eef li\u1ec7u autofill, token phi\u00ean \u0111\u0103ng nh\u1eadp v\u00e0 cookie \u2013 \u0111\u1ee7 \u0111\u1ec3 v\u01b0\u1ee3t qua x\u00e1c th\u1ef1c hai l\u1edbp (2FA) v\u00e0 chi\u1ebfm quy\u1ec1n ki\u1ec3m so\u00e1t t\u00e0i kho\u1ea3n m\u00e0 kh\u00f4ng c\u1ea7n m\u1eadt kh\u1ea9u. Song song \u0111\u00f3, n\u00f3 c\u00f2n nh\u1eafm t\u1edbi 115 ti\u1ec7n \u00edch tr\u00ecnh duy\u1ec7t li\u00ean quan \u0111\u1ebfn v\u00ed crypto, tr\u00ecnh qu\u1ea3n l\u00fd m\u1eadt kh\u1ea9u v\u00e0 d\u1ecbch v\u1ee5 x\u00e1c th\u1ef1c.<\/p>

Danh s\u00e1ch m\u1ee5c ti\u00eau bao g\u1ed3m h\u00e0ng lo\u1ea1t v\u00ed ti\u1ec1n \u0111i\u1ec7n t\u1eed<\/a> ph\u1ed5 bi\u1ebfn nh\u01b0 Binance, Coinbase, MetaMask, Trust Wallet, Phantom, c\u00f9ng c\u00e1c tr\u00ecnh qu\u1ea3n l\u00fd m\u1eadt kh\u1ea9u nh\u01b0 1Password, Bitwarden, LastPass v\u00e0 NordPass.<\/p>

Kh\u00f4ng d\u1eebng l\u1ea1i \u1edf \u0111\u00f3, Stealka c\u00f2n t\u1ea3i v\u1ec1 c\u00e1c c\u1ea5u h\u00ecnh c\u1ee5c b\u1ed9 t\u1eeb 80 \u1ee9ng d\u1ee5ng v\u00ed kh\u00e1c nhau, li\u00ean quan \u0111\u1ebfn Bitcoin, Ethereum, Exodus, Monero v\u00e0 Dogecoin. Nh\u1eefng d\u1eef li\u1ec7u n\u00e0y c\u00f3 th\u1ec3 ch\u1ee9a private key \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a ho\u1eb7c seed phrase, \u0111\u1ee7 \u0111\u1ec3 tin t\u1eb7c chi\u1ebfm \u0111o\u1ea1t to\u00e0n b\u1ed9 t\u00e0i s\u1ea3n.<\/p>

Ngo\u00e0i crypto, malware n\u00e0y c\u00f2n x\u00e2m nh\u1eadp Discord, Telegram, c\u00e1c \u1ee9ng d\u1ee5ng email nh\u01b0 Outlook, Thunderbird, n\u1ec1n t\u1ea3ng game nh\u01b0 Steam, launcher Roblox, c\u00e1c d\u1ecbch v\u1ee5 VPN nh\u01b0 ProtonVPN, Surfshark, c\u0169ng nh\u01b0 c\u00e1c \u1ee9ng d\u1ee5ng ghi ch\u00fa \u2013 n\u01a1i ng\u01b0\u1eddi d\u00f9ng th\u01b0\u1eddng v\u00f4 t\u00ecnh l\u01b0u th\u00f4ng tin nh\u1ea1y c\u1ea3m.<\/p>

Stealka c\u00f2n thu th\u1eadp d\u1eef li\u1ec7u h\u1ec7 th\u1ed1ng, danh s\u00e1ch ph\u1ea7n m\u1ec1m \u0111\u00e3 c\u00e0i, c\u1ea5u h\u00ecnh ph\u1ea7n c\u1ee9ng v\u00e0 ch\u1ee5p \u1ea3nh m\u00e0n h\u00ecnh nh\u1eb1m t\u1ed1i \u0111a h\u00f3a l\u01b0\u1ee3ng th\u00f4ng tin thu \u0111\u01b0\u1ee3c.<\/p>

\u0110\u00e1ng ch\u00fa \u00fd, Kaspersky ph\u00e1t hi\u1ec7n tin t\u1eb7c \u0111\u00e3 s\u1eed d\u1ee5ng c\u00e1c t\u00e0i kho\u1ea3n b\u1ecb chi\u1ebfm quy\u1ec1n \u0111\u1ec3 ti\u1ebfp t\u1ee5c ph\u00e1t t\u00e1n malware. M\u1ed9t b\u1ea3n mod GTA V ch\u1ee9a Stealka \u0111\u01b0\u1ee3c \u0111\u0103ng t\u1ea3i t\u1eeb ch\u00ednh m\u1ed9t t\u00e0i kho\u1ea3n \u0111\u00e3 b\u1ecb hack tr\u00ean m\u1ed9t website chuy\u00ean v\u1ec1 mod game.<\/p>

Ng\u00e0nh crypto \u0111\u1ed1i m\u1eb7t kh\u1ee7ng ho\u1ea3ng an ninh ng\u00e0y c\u00e0ng nghi\u00eam tr\u1ecdng<\/h2><\/span>

Chi\u1ebfn d\u1ecbch Stealka xu\u1ea5t hi\u1ec7n trong b\u1ed1i c\u1ea3nh ng\u00e0nh crypto \u0111ang ch\u1ee9ng ki\u1ebfn nh\u1eefng th\u1ea5t b\u1ea1i nghi\u00eam tr\u1ecdng v\u1ec1 b\u1ea3o m\u1eadt. Ch\u1ec9 ri\u00eang n\u0103m 2025, c\u00e1c n\u1ec1n t\u1ea3ng crypto<\/a> \u0111\u00e3 m\u1ea5t 9,1 t\u1ef7 USD, chi\u1ebfm kho\u1ea3ng 10% trong t\u1ed5ng s\u1ed1 90 t\u1ef7 USD b\u1ecb \u0111\u00e1nh c\u1eafp su\u1ed1t 15 n\u0103m qua.<\/p>

Ri\u00eang th\u00e1ng 11, thi\u1ec7t h\u1ea1i \u0111\u00e3 v\u01b0\u1ee3t 276 tri\u1ec7u USD, \u0111\u1ea9y t\u1ed5ng t\u1ed5n th\u1ea5t c\u1ea3 n\u0103m l\u00ean m\u1ee9c k\u1ef7 l\u1ee5c.<\/p>

\u201cCrypto \u0111ang \u0111\u1ed1i m\u1eb7t v\u1edbi m\u1ed9t cu\u1ed9c kh\u1ee7ng ho\u1ea3ng an ninh th\u1ef1c s\u1ef1,\u201d \u00f4ng Mitchell Amador, CEO c\u1ee7a Immunefi \u2013 n\u1ec1n t\u1ea3ng b\u1ea3o m\u1eadt crowdsourcing b\u1ea3o v\u1ec7 h\u01a1n 180 t\u1ef7 USD t\u00e0i s\u1ea3n \u2013 nh\u1eadn \u0111\u1ecbnh.<\/p>

\n

\ud83c\uddf0\ud83c\uddf5 North Korea's Famous Chollima hides malware in smart contracts via EtherHiding, posing as job recruiters after stealing $1.3B in 2024 and $2.2B in H1 2025.#NorthKorea<\/a> #Blockchain<\/a>https:\/\/t.co\/8W6Pfj41u8<\/a><\/p>— Cryptonews.com (@cryptonews) October 17, 2025<\/a><\/blockquote>