CMC officially speaks out about the ransomware attack

Ransomware attacks are a very common form. Illustration: Created by AI.

On the morning of April 15, a representative of CMC officially spoke out about the ransomware attack. The representative of CMC said that a specialized service with a limited deployment scope, provided by a small-scale member company of CMC to a small number of customers, had recorded signs of being intentionally attacked.

“The entire system and services of the key units of CMC Group were not affected and are still operating safely and stably. As soon as the incident was detected, CMC promptly activated the cyber security response process, quickly isolated the source of the attack and took full control of the system within 24 hours. Service provision was only interrupted for a very short time and has been fully restored, without any impact on customer experience,” said a CMC representative.

Immediately after handling the incident, CMC proactively sent an email notification to affected customers and related partners, providing full information about the incident and the results of the remediation, and reaffirming its commitment to ensuring the safety of all services being deployed by CMC member companies. Currently, all technical operations are being ensured to be stable. CMC is closely coordinating with the authorities to investigate and clarify the incident.

“After the official conclusion and approval, we will provide full information to the press, customers and partners,” said a CMC representative.

CMC is a famous enterprise in the IT sector in Vietnam. Photo: CMC.

Data encryption attacks against Vietnamese businesses are becoming more complex and unpredictable. Since the end of March 2024, a series of ransomware attacks have targeted Vietnamese businesses and organizations such as Vietnam Post, VNDIRECT, PVOIL, several banks and retailers, causing great damage.

The Cyber ​​Security Association said that it cannot rule out the possibility that ransomware has been deeply embedded in the information systems of key agencies, economic, financial, and energy organizations in Vietnam.

Specifically, in recent times, ministries, sectors, localities, organizations and enterprises across the country have promoted the application of technology in management, production and business, creating great value for society and providing maximum service to people and businesses.

However, according to information from the Department of Cyber ​​Security and High-Tech Crime Prevention and Control - Ministry of Public Security, these are also the top targets of international and domestic criminal groups and hackers to carry out cyber attacks with many different purposes, of increasingly large nature and scale, targeting agencies and businesses such as: information systems of electricity, banking, securities, payment intermediaries, telecommunications, oil and gas and healthcare...

System attacks can cause complete shutdown of operations and transactions, and it can be difficult to recover sensitive data that has fallen into the hands of hackers.

In which, the data of these units plays an important and decisive role in the organization's operations; must be maintained and ensure high availability.

Currently, the US-led international anti-ransomware initiative - Counter Ransomware Initiative (CRI) has issued a joint policy statement among countries, calling on victims not to pay ransom to hackers, otherwise it will create a bad and especially dangerous precedent.

The National Cyber ​​Security Association predicts that in the coming time, hacker groups will increase cyber attacks using ransomware, targeting key agencies, economic, financial, and energy organizations, and continue to develop in a complex manner. It is not impossible that malware attacks have been deeply embedded in information systems.

Last year, CEO of Viettel Cyber ​​Security Company Nguyen Son Hai predicted that ransomware-style attacks will still be a huge problem and will have a profound impact on society and businesses in the next few years. These are almost irreversible issues if solutions are not prepared early to deal with this trend. Previously, ransomware stories were not rare, but when the motivation to make money became stronger, this old technical problem became more vivid than ever. Mr. Nguyen Son Hai analyzed that the business model has dominated everything, leading the actions of bad guys. Currently, ransomware or DDoS can be a service. There are groups that release professional tools, and groups that buy them and attack to make money. When popularized, the number of people participating in attacks and making money will increase significantly, like popularizing attacks.

Agreeing with the above comments, CEO of CyRadar Company Nguyen Minh Duc said that the prominent cyber attack trends in Vietnam in the coming time may include ransomware attacks that encrypt victims' data and demand ransom to decrypt it. Ransomware attacks can cause great damage to agencies, organizations, businesses, or individuals, especially in the context of digital transformation and increased use of cloud computing.

Source: https://znews.vn/cmc-chinh-thuc-len-tieng-ve-vu-bi-ma-doc-tong-tien-tan-cong-post1545951.html