{"id":1129,"date":"2026-08-10T10:45:00","date_gmt":"2026-08-10T01:45:00","guid":{"rendered":"https:\/\/onepress.co.kr\/index.php\/briefing\/2026-08-10-zbtlink-endlessdoors-vi\/"},"modified":"2026-08-10T10:45:00","modified_gmt":"2026-08-10T01:45:00","slug":"2026-08-10-zbtlink-endlessdoors-vi","status":"publish","type":"briefing","link":"https:\/\/onepress.co.kr\/index.php\/briefing\/2026-08-10-zbtlink-endlessdoors-vi\/","title":{"rendered":"Router xu\u1ea5t x\u01b0\u1edfng \u0111\u00e3 ch\u1edd l\u1ec7nh t\u1eeb xa: Zbtlink d\u1eebng b\u00e1n 20 m\u1eabu"},"content":{"rendered":"<p><strong>2026-08-10 10:45 KST<\/strong><\/p>\n<p>Hai m\u01b0\u01a1i m\u1eabu router Zbtlink \u0111\u01b0\u1ee3c xu\u1ea5t x\u01b0\u1edfng v\u1edbi th\u00e0nh ph\u1ea7n b\u1eadt s\u1eb5n c\u00f3 th\u1ec3 nh\u1eadn l\u1ec7nh qu\u1ea3n tr\u1ecb t\u1eeb b\u00ean ngo\u00e0i m\u1ea1ng.<\/p>\n<p>Zbtlink g\u1ecdi \u0111\u00e2y l\u00e0 ch\u1ee9c n\u0103ng b\u1ea3o tr\u00ec nh\u01b0ng \u0111\u00e3 d\u1eebng b\u00e1n v\u00e0 g\u1ee1 firmware li\u00ean quan; \u0111i\u1ec1u n\u00e0y kh\u00f4ng c\u00f3 ngh\u0129a m\u1ecdi router c\u1ee7a h\u00e3ng \u0111\u1ec1u b\u1ecb \u1ea3nh h\u01b0\u1edfng.<\/p>\n<h2>Nh\u00f3m nghi\u00ean c\u1ee9u ph\u00e1t hi\u1ec7n g\u00ec?<\/h2>\n<p>VulnCheck cho bi\u1ebft `rctl` li\u00ean t\u1ee5c li\u00ean h\u1ec7 m\u00e1y ch\u1ee7 b\u00ean ngo\u00e0i v\u00e0 ch\u1edd l\u1ec7nh m\u00e0 kh\u00f4ng m\u00e3 h\u00f3a hay x\u00e1c th\u1ef1c.<\/p>\n<p>Th\u1eed nghi\u1ec7m cho th\u1ea5y n\u00f3 c\u00f3 th\u1ec3 ch\u1ea1y l\u1ec7nh root v\u00e0 m\u1edf reverse shell v\u00e0o b\u00ean trong router.<\/p>\n<h2>Thi\u1ebft b\u1ecb n\u00e0o li\u00ean quan?<\/h2>\n<p>B\u00e1o c\u00e1o li\u1ec7t k\u00ea 20 m\u1eabu \u0111\u01b0\u1ee3c b\u00e1n tr\u00ean Amazon, AliExpress v\u00e0 Alibaba. Ch\u01b0a r\u00f5 t\u1ed5ng s\u1ed1 thi\u1ebft b\u1ecb \u0111\u00e3 l\u1eafp \u0111\u1eb7t v\u00e0 s\u1ed1 v\u1ee5 b\u1ecb khai th\u00e1c th\u1ef1c t\u1ebf.<\/p>\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/onepress.co.kr\/wp-content\/uploads\/2026\/08\/zbtlink-endlessdoors-vi.png\" alt=\"\u1ea2nh minh h\u1ecda router li\u00ean l\u1ea1c v\u1edbi m\u00e1y ch\u1ee7 t\u1eeb xa qua t\u01b0\u1eddng l\u1eeda\" loading=\"lazy\" \/><figcaption class=\"op-briefing-image-caption\">\u1ea2nh minh h\u1ecda do ONEPRESS t\u1ea1o, kh\u00f4ng ph\u1ea3i \u1ea3nh m\u1ed9t v\u1ee5 x\u00e2m nh\u1eadp th\u1eadt.<\/figcaption><\/figure>\n<h2>Nh\u00e0 s\u1ea3n xu\u1ea5t ph\u1ea3n h\u1ed3i ra sao?<\/h2>\n<p>Zbtlink n\u00f3i m\u00e3 n\u00e0y ph\u1ee5c v\u1ee5 h\u1eadu m\u00e3i, kh\u00f4ng ph\u1ea3i truy c\u1eadp \u0111\u1ed9c h\u1ea1i. Tuy v\u1eady h\u00e3ng \u0111\u00e3 d\u1eebng b\u00e1n m\u1eabu li\u00ean quan, g\u1ee1 b\u1ea3n t\u1ea3i xu\u1ed1ng v\u00e0 \u0111ang l\u00e0m firmware s\u1eeda l\u1ed7i.<\/p>\n<h2>Ng\u01b0\u1eddi d\u00f9ng c\u1ea7n ki\u1ec3m tra g\u00ec?<\/h2>\n<p>Ki\u1ec3m tra h\u00e3ng, m\u1eabu v\u00e0 phi\u00ean b\u1ea3n firmware tr\u00ean nh\u00e3n v\u00e0 trang qu\u1ea3n tr\u1ecb. N\u1ebfu n\u1eb1m trong danh s\u00e1ch, h\u00e3y theo d\u00f5i b\u1ea3n v\u00e1 v\u00e0 c\u00e2n nh\u1eafc thay thi\u1ebft b\u1ecb ho\u1eb7c ch\u1eb7n nghi\u00eam ng\u1eb7t k\u1ebft n\u1ed1i \u0111i ra.<\/p>\n<p>Ch\u1ec9 \u0111\u1ed5i m\u1eadt kh\u1ea9u qu\u1ea3n tr\u1ecb kh\u00f4ng x\u00f3a th\u00e0nh ph\u1ea7n \u0111\u00e3 nh\u00fang trong firmware.<\/p>\n<h2>Ngu\u1ed3n s\u01a1 c\u1ea5p ch\u00ednh th\u1ee9c<\/h2>\n<p><a href=\"https:\/\/www.vulncheck.com\/blog\/zbt-endlessdoors\" target=\"_blank\" rel=\"noopener noreferrer\">Ngu\u1ed3n s\u01a1 c\u1ea5p: VulnCheck ENDLESSDOORS research<\/a><\/p>\n<p><a href=\"https:\/\/www.zbtlink.com\/pages\/zbt-router-firmware-download-announcement\" target=\"_blank\" rel=\"noopener noreferrer\">Ngu\u1ed3n s\u01a1 c\u1ea5p: Zbtlink official statement<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hai m\u01b0\u01a1i m\u1eabu router Zbtlink c\u00f3 th\u00e0nh ph\u1ea7n m\u1eb7c \u0111\u1ecbnh cho ph\u00e9p ch\u1ea1y l\u1ec7nh root kh\u00f4ng c\u1ea7n x\u00e1c th\u1ef1c.<\/p>\n","protected":false},"featured_media":0,"template":"","meta":[],"class_list":["post-1129","briefing","type-briefing","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/briefing\/1129","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/briefing"}],"about":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/types\/briefing"}],"wp:attachment":[{"href":"https:\/\/onepress.co.kr\/index.php\/wp-json\/wp\/v2\/media?parent=1129"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}