The Vietnam Cyber ​​Emergency Response Center (VNCERT/CC), under the Information Security Department ( Ministry of Information and Communications ), has just warned about a sophisticated cyberattack campaign targeting digital economy professionals, especially those in digital marketing using advertising platforms such as Meta Ads.

hacker-tan-cong-mang-1-1.jpg
According to VNCERT/CC, the Cyble Research and Intelligence Laboratory (CRIL) has warned of a sophisticated cyberattack campaign carried out by a group of hackers, primarily targeting digital marketers. (Illustrative image: Internet)

According to the analysis, the attack campaign began with the distribution of phishing emails containing fake LNK files disguised as work-related PDF documents.

When a user opens the fake file, a series of commands is triggered to download and execute malicious code files from external storage sources such as Dropbox.

Furthermore, the malware is encrypted in multiple layers and uses advanced evasion techniques to bypass security systems.

In the final stage of the attack, the Quasar RAT malware is deployed, allowing the attacker to take control of the infected system, thereby accessing and stealing critical data; monitoring the victim's activities; and installing other malware.

W-key manual lua online 1.jpg
Personnel in organizations and institutions need to receive training to raise awareness of information security so they can prevent malicious files from being spread via email. (Illustration: BN)

To ensure system security, in addition to regularly monitoring the system and checking network traffic to detect connections from unknown sources, VNCERT/CC recommends that users and administrators always update the latest patches for their systems and security software.

In particular, training and raising awareness of information security for employees remains a crucial solution. “Organizations need to ensure that employees, especially those working in digital marketing, understand phishing techniques and how to avoid malicious email attachments,” emphasized a VNCERT/CC expert.

Vietnam participates in international exercise on responding to AI-powered cyberattacks . The ACID 2024 international exercise, themed 'Proactive Response to the Rise of AI-Powered Cyberattacks', involves technical staff from 10 ASEAN countries and 5 dialogue partners.