Since the beginning of 2023, there have been more than 13,750 cyber attacks on information systems in Vietnam causing incidents. In the first 3 months of this year alone, the number of cyber attacks on information systems in Vietnam was 2,323.
In particular, recently, many Vietnamese enterprises such as VNDIRECT, VPOIL... have been attacked with data encryption.
According to the National Cyber Security Association, in response to this issue, the Department of Cyber Security and High-Tech Crime Prevention and Control, Ministry of Public Security has proactively presided over and coordinated with the Department of Information Security, Ministry of Information and Communications (MIC) and relevant agencies to coordinate investigations and guide agencies and enterprises to promptly fix the problem, soon bring information systems back to normal operation, and limit the consequences of damage to agencies and enterprises.
The National Cyber Security Association predicts that in the coming time, hacker groups will increase cyber attacks using ransomware, targeting key agencies, economic, financial, and energy organizations, and continue to develop in a complex manner. It is not impossible that malware attacks have been deeply embedded in information systems.
According to Lieutenant Colonel Le Xuan Thuy - Director of the National Cyber Security Center, Department of Cyber Security and High-Tech Crime Prevention, Ministry of Public Security: The fact that Vietnamese organizations and enterprises have had to continuously face ransomware attacks recently shows that 24/7 information security monitoring is generally not regularly implemented by organizations and enterprises. Even large organizations and enterprises are still negligent, large IT assets are also neglected, important information technology systems are not invested in synchronously, there are technical weaknesses, security holes, and patches are not updated in time... suddenly becoming a "springboard" for hackers to attack.
Regarding the issue of whether organizations and units that are attacked should pay the hacker groups when they encrypt data and demand ransom to provide the data unlock code, Lieutenant Colonel Le Xuan Thuy said that the National Cyber Security Center has participated in the initiative program to combat ransomware attacks with more than 50 participating countries, most of which emphasized not transferring ransom to the hacker groups. According to Mr. Thuy, transferring ransom to hackers will create a bad precedent, stimulating other cyber attacks against us. "If we firmly fight against the attacks, it will reduce the motivation of hacker groups," Lieutenant Colonel Le Xuan Thuy stated his opinion.
Mr. Vu Ngoc Son - Technical Director of National Cyber Security Technology Joint Stock Company (NCS), Head of Technology Research Department of National Cyber Security Association, said: The form of hacker attacks in recent incidents are similar, all are local attacks for a period of time and then encrypt data for ransom. However, the attack techniques of the cases are not the same, so it is possible that these are attacks by different cyber crime groups. Although there is no evidence that this is an organized campaign, however, this possibility cannot be ruled out because the incidents occurred consecutively in a relatively short period of time.
Mr. Pham Thai Son - Deputy Director of the National Cyber Security Monitoring Center, Department of Information Security, Ministry of Information and Communications predicted: Data encryption attacks will still be a popular attack trend in the coming time. In response to this issue, the Department of Information Security has requested agencies, organizations and enterprises to focus on implementing a number of other tasks such as: Reviewing and organizing the implementation of information security assurance at each level; organizing effective, practical, regular and continuous implementation of information security assurance work according to the 4-layer model; developing incident response plans for information systems under management; implementing periodic backup plans for systems and important data to promptly restore when data encryption attacks occur...
According to statistics from the Department of Information Security, Vietnam currently meets over 90% of the solutions to ensure domestic network security. Vietnam is also one of the few countries that can be self-sufficient in network security solutions... However, Vietnam's network security solutions still face many difficulties in competing with foreign solutions such as lack of human resources, lack of investment capital... Therefore, there needs to be synchronization and coordination between domestic and international agencies, organizations, and enterprises to improve the quality and effectiveness of Vietnam's network security solutions.
Source
Comment (0)