How to prevent ransomware attacks

On July 11, Quang Trung Software Park (QTSC) in collaboration with Ho Chi Minh City Information Technology Association (HCA), Ho Chi Minh City Digital Transformation Alliance (DTA), Ho Chi Minh City Digital Transformation Support and Consulting Center (DXCenter) organized the Workshop "Digital Government and Information Security".

Mr. Nguyen Thanh Lam, Head of Information Security Department, QTSC Telecommunications Center, said that since the beginning of 2024, there have been more than 5,000 cyber attacks on systems in Vietnam aimed at stealing important data, an increase of more than 40% over the same period in 2023.

Increasingly sophisticated forms of attack include targeted attacks (APT) on critical facilities (financial institutions, government agencies, large enterprises) increasing by about 9% compared to the same period last year; ransomware attacks (ransomware) increased by 35%.

Statistics show that about 400 websites of government agencies and educational organizations have been hacked and have had gambling and betting advertisements inserted.

Ms. Le Thi Phuong Thao, Deputy Director of VNPT Information Technology Center, Ho Chi Minh City, shares solutions

According to Mr. Lam, the main cause of information security risks in cyberspace is largely due to the low awareness of people, civil servants, and units. In addition, people use weak passwords that are not changed regularly, open attachments or links of unknown origin, and share information on websites and social networks.

"Faced with the increasing risk of cyber attacks, organizations should build or purchase anti-attack solutions from technology companies and control storage accounts.

In addition, the unit should apply the 3-2-1 strategy, including 3 copies of data, 2 copies on two different storage media and 1 copy kept outside the office. Then, if a risk arises, it will not be possible to lose all data and damage property" - Mr. Lam recommended.

Ms. Le Thi Phuong Thao, Deputy Director of VNPT Information Technology Center, Ho Chi Minh City, also suggested that units and businesses can use the 3-2-1-1-0 backup rule. Specifically, there must be 3 copies of data - on 2 different media - 1 external backup - 1 copy in offline mode - 0 errors.

This addition is extremely important in today's world, with extremely high resilience to help ensure data recovery in the event of a ransomware event.

"Enterprises and state agencies need to build a long-term information security strategy. It is necessary to establish and evaluate data, then stratify data at each level and have a backup place for data that cannot be stolen. If hackers infiltrate, the units will not suffer great damage" - Ms. Thao proposed.

Source: https://nld.com.vn/cach-chong-cac-cuoc-tan-cong-bang-ma-doc-tong-tien-196240711132511168.htm