Critical-risk tools in Abs Zalo Bot
5 of the 43 tools in Abs Zalo Bot are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
abs_zalo_block_group_memberDestructiveBlock a member permanently from joining or chatting in the group. Note: Destructive action requires 2-step confirmation.
-
abs_zalo_kick_memberDestructiveRemove a user/member from a group (Requires Group Admin or Owner rights). Note: Destructive action requires 2-step confirmation.
-
abs_zalo_remove_deputyDestructiveDemote a Group Deputy / Admin back to regular member (Requires Group Owner rights).
-
abs_zalo_undo_messageDestructiveUndo / recall a sent message on Zalo. Note: Irreversible action requires 2-step confirmation.
-
abs_zalo_transfer_ownerFinancialTransfer group ownership to another member (Requires Group Owner rights). Note: Destructive action requires 2-step confirmation.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.