{"id":2232,"date":"2023-09-10T22:07:20","date_gmt":"2023-09-10T15:07:20","guid":{"rendered":"https:\/\/dev.artru.io.vn\/?p=2232"},"modified":"2023-11-12T12:29:51","modified_gmt":"2023-11-12T05:29:51","slug":"hay-can-than-voi-nhung-lien-ket-gia-tren-mang","status":"publish","type":"post","link":"https:\/\/artru.net\/en\/hay-can-than-voi-nhung-lien-ket-gia-tren-mang\/","title":{"rendered":"Be careful with fake links online"},"content":{"rendered":"<h2 class=\"wp-block-heading\">Fake links<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Try clicking on Google&#039;s link: <a href=\"https:\/\/www.wikipedia.org\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">google.com<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You think this is a link to Google?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Are not! You are wrong!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is when I move the cursor onto the link. You see the browser&#039;s status bar displaying the actual link.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"509\" height=\"233\" src=\"https:\/\/cdn.artru.eu.org\/wp-content\/uploads\/2023\/09\/Lien-ket-gia-google.png\" alt=\"Fake Google link\" class=\"wp-image-2279\"\/><figcaption class=\"wp-element-caption\">Fake Google link<\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">The programmer can completely show you a fake link and tell the browser about the real link when the user clicks on it.<\/p>\n\n\n\n<pre class=\"wp-block-code\" data-no-translation=\"\" data-no-auto-translation=\"\"><code data-no-translation=\"\" data-no-auto-translation=\"\">&lt;a href=\"https:\/\/www.wikipedia.org\/\"&gt;google.com&lt;\/a&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Abusing this, many bad guys have lured people who don&#039;t have technology to click on bad links to take over accounts.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It could be a social media account or a bank account. The attack could be to create a fake website or send an email directly to the victim.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To avoid this, always be careful to check the link first in the status bar and check again in the address bar to make sure you are visiting the correct website you want.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Fake link using JavaScript code<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Let&#039;s try the second example: <a id=\"google-fake-link\" href=\"https:\/\/www.google.com\/\" rel=\"nofollow noopener\" target=\"_blank\">google.com<\/a><\/p>\n\n\n\n<script>\n    document.querySelector('a#google-fake-link').addEventListener('click', function (e) {\n        e.preventDefault();\n        window.open('https:\/\/www.wikipedia.org\/', '_blank');\n    });\n<\/script>\n\n\n\n<p class=\"wp-block-paragraph\">It&#039;s still the same link as above, but when you move the cursor onto the link, the status bar still displays the exact link.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"402\" height=\"161\" src=\"https:\/\/cdn.artru.eu.org\/wp-content\/uploads\/2023\/09\/Lien-ket-gia-google-2.png\" alt=\"Fake Google link 2\" class=\"wp-image-2290\"\/><figcaption class=\"wp-element-caption\">Fake Google link 2<\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">But this is when you click on the link. That is absolutely not the website we see on the interface or in the status bar.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"447\" src=\"https:\/\/cdn.artru.eu.org\/wp-content\/uploads\/2023\/09\/Lien-ket-gia-sau-khi-nhan-vao-link-google.gif\" alt=\"Fake link after clicking on the Google link\" class=\"wp-image-2294\"\/><figcaption class=\"wp-element-caption\">Fake link after clicking on the Google link<\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">This time, the attacker used a JavaScript code to change the address at the moment you click the mouse.<\/p>\n\n\n\n<pre class=\"wp-block-code\" data-no-translation=\"\" data-no-auto-translation=\"\"><code data-no-translation=\"\" data-no-auto-translation=\"\">&lt;a href=\"https:\/\/www.google.com\/\"&gt;google.com&lt;\/a&gt;\n&lt;script&gt;\n    document.querySelector('a').addEventListener('click', function (e) {\n        e.preventDefault();\n        window.open('https:\/\/www.wikipedia.org\/', '_blank');\n    });\n&lt;\/script&gt;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Thanks to this, the status bar still displays an address that looks safe, but the address you were actually sent to is uncertain.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Fake login popup<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The attack scenario will be based on the 3rd party login button that you often see on websites. Also known as &quot;BIBT&quot; (Browser In The Browser).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, a fake login button <a id=\"dang-nhap-gia-google\" href=\"https:\/\/www.google.com\/\" data-type=\"link\" data-id=\"https:\/\/rawcdn.githack.com\/artru-git\/fake-google-login\/4f9c492120ff3a0368ac3f72913ff00d49ba14b2\/index.html\" rel=\"nofollow noopener\" target=\"_blank\">Login with Google<\/a> designed to take over accounts.<\/p>\n\n\n\n<script>\n    document.querySelector('a#dang-nhap-gia-google').addEventListener('click', function (e) {\n        e.preventDefault();\n        window.open('https:\/\/rawcdn.githack.com\/artru-git\/fake-google-login\/v1\/index.html', '_blank');\n    });\n<\/script>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"813\" src=\"https:\/\/cdn.artru.eu.org\/wp-content\/uploads\/2023\/09\/Popup-dang-nhap-Google-gia-mao.png\" alt=\"Fake Google login popup\" class=\"wp-image-2315\"\/><figcaption class=\"wp-element-caption\">Fake Google login popup<\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Have you noticed anything suspicious? Look at the link in the address bar, it looks completely real, not suspicious at all.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To test, let&#039;s try dragging it out to the browser.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"500\" height=\"492\" src=\"https:\/\/cdn.artru.eu.org\/wp-content\/uploads\/2023\/09\/Popup-dang-nhap-Google-gia-mao-khong-the-keo-ra-ngoai-trinh-duyet.gif\" alt=\"Fake Google login popups cannot be dragged out of the browser\" class=\"wp-image-2322\"\/><figcaption class=\"wp-element-caption\">Fake Google login popups cannot be dragged out of the browser<\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">You see, it is completely inside the website, it cannot be pulled out. It is designed so realistically that the buttons on the window work, you can even turn off this fake popup.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is designed exactly like a Windows window. An attacker can even change its interface according to the victim&#039;s operating system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, this is a fake popup with the MacOS interface.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"700\" height=\"599\" src=\"https:\/\/cdn.artru.eu.org\/wp-content\/uploads\/2023\/09\/Giao-dien-popup-dang-nhap-gia-mao-tren-MacOS.png\" alt=\"Fake login popup interface on MacOS\" class=\"wp-image-2325\"\/><figcaption class=\"wp-element-caption\">Fake login popup interface on MacOS<\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">To prevent this type of attack, try dragging the popup outside the website before you enter your account information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Google login popup is just an example. In fact, an attacker can design it to target anything like Facebook accounts or bank accounts.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Stealing information through Registration Form<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">With how to create a new account. You almost won&#039;t see anything unusual here. I guess there are quite a few people using the same &quot;<strong>1 password<\/strong>&quot; for many different accounts. Hackers take advantage of this to collect information such as your email, phone number, and password to log in to other services. If you use the same password, you already know the result.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To help make your accounts more secure, you need to install 2-layer security (2FA). Speaking of 2-layer security, you also have to be very careful when registering an account somewhere that requires phone number authentication in the first step.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"350\" height=\"325\" src=\"https:\/\/cdn.artru.eu.org\/wp-content\/uploads\/2023\/09\/Fake-code-sms.png\" alt=\"Fake sms code\" class=\"wp-image-2358\"\/><figcaption class=\"wp-element-caption\">Fake sms code<\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Hackers will create a very basic registration form that, at first glance, is not dangerous. Until the step of entering the phone number to receive the authentication SMS code. Instead of system authentication code, they use phone numbers to get sms codes from other services such as (social network accounts, bank accounts, coin wallets,...). Therefore, you need to pay attention to the name and address the message is sent to before entering that authentication code into the form on the website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Please share with relatives and friends so they can know and be alert!<\/p>","protected":false},"excerpt":{"rendered":"<p>Li\u00ean k\u1ebft gi\u1ea3 Th\u1eed b\u1ea5m v\u00e0o li\u00ean k\u1ebft c\u1ee7a Google n\u00e0o: google.com B\u1ea1n ngh\u0129 \u0111\u00e2y l\u00e0 li\u00ean k\u1ebft d\u1eabn \u0111\u1ebfn Google? Kh\u00f4ng! B\u1ea1n sai r\u1ed3i! \u0110\u00e2y l\u00e0 khi t\u00f4i di [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":2330,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9],"tags":[],"class_list":["post-2232","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-website"],"_links":{"self":[{"href":"https:\/\/artru.net\/en\/wp-json\/wp\/v2\/posts\/2232","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/artru.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/artru.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/artru.net\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/artru.net\/en\/wp-json\/wp\/v2\/comments?post=2232"}],"version-history":[{"count":0,"href":"https:\/\/artru.net\/en\/wp-json\/wp\/v2\/posts\/2232\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/artru.net\/en\/wp-json\/wp\/v2\/media\/2330"}],"wp:attachment":[{"href":"https:\/\/artru.net\/en\/wp-json\/wp\/v2\/media?parent=2232"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/artru.net\/en\/wp-json\/wp\/v2\/categories?post=2232"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/artru.net\/en\/wp-json\/wp\/v2\/tags?post=2232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}