Malware and deepfake attack digital banks: How can users protect their accounts?

With more than 40 banks operating in Hai Phong, the development of digital banking is becoming the target of high-tech criminals with increasingly sophisticated tricks, causing billions of dong in damage each year.

Image depicting high-tech fraud

As a major economic center in the North with the third largest economy in the country, Hai Phong attracts many banks to set up branches. However, this growth also poses a high risk of high-tech crime, especially targeting commercial banks - accounting for over 80% of the total of about 40 banks operating locally, the rest are state banks and 100% foreign-invested banks.

increasingly sophisticated tricks

According to Lieutenant Colonel Nguyen Van Hai, Deputy Head of the Department of Cyber ​​Security and High-Tech Crime Prevention in Hai Phong , high-tech crimes in the banking sector have many methods of fraud and property appropriation.

The subjects often attack with ransomware to encrypt all data, then demand ransom. They also use spyware via emails containing PDF attachments. When opened, the malware allows the subject to remotely control, eavesdrop or attack other computers. Typically, in September 2025, the Vietnam National Credit Information Center (CIC) under the State Bank of Vietnam was attacked by the international hacker group ShinyHunters to steal and sell data.

Other common tricks include impersonating bank brand names and sending messages containing fake links to steal account information. Many criminals also create fake pages of famous TV shows to steal social media information, then scam the victims' friends.

Notably, from July 1, 2024, the State Bank of Vietnam has stipulated that transactions of VND10 million or more must be biometrically authenticated. However, the subjects have used deepfake technology to create facial copies from photos and videos leaked online to fool the authentication system.

Other tricks include impersonating bank, tax, and insurance employees to trick victims into authenticating transactions themselves; setting up fake BTS stations to spread branded messages; making fake payments via POS; and taking advantage of the Swift payment system through digital banks with lax security.

To prevent high-tech crimes, customers need to be more vigilant and comply with basic security principles when using digital banking services. In the illustration are Agribank bank cards.

Strengthen prevention and response

According to Lieutenant Colonel Nguyen Van Hai, the main reason is that online services are convenient, attracting many users but are easily compromised by new attack techniques. The subjects are constantly taking advantage of advanced technologies such as blockchain and data encryption.

Notably, organized crime groups are complex with expertise in technology, finance, and law, and are often concentrated in overseas locations. Some banks have not paid enough attention to raising awareness of cybersecurity among employees and customers.

The Hai Phong Department of Cyber ​​Security and High-Tech Crime Prevention recommends that banks coordinate to disseminate legal knowledge, ensure network information security; improve system protection capacity; and identify criminal methods of operation for employees and customers.

Banks need to apply technology such as open application program (OPEN API), e-ID/e-KYC technology; tighten management of electronic payment services, credit cards; proactively provide information to authorities about frauds, suspicious transactions related to money laundering, online gambling. At the same time, it is necessary to upgrade security solutions such as firewalls, intrusion detection systems (IPS/IDS), multi-factor authentication and data encryption.

Many banks have applied security technology. Vietnam Joint Stock Commercial Bank for Industry and Trade (VietinBank) applies multi-factor authentication, data encryption, 24/7 monitoring; applies eKYC, biometric authentication; applies AI, Machine Learning to detect unusual transactions.

Military Commercial Joint Stock Bank (MB Bank) uses risk detection tools from user devices; technology to detect suspicious images when authenticating eKYC; applying AI models combining machine learning and deep learning to analyze transaction behavior, make decisions in a super short time and reject risky transactions.

In the first 9 months of 2025, the Hai Phong Department of Cyber ​​Security and High-Tech Crime Prevention received 48 crime reports and denunciations, prosecuted and transferred 17 cases to the police for investigation.

What should customers do to protect their accounts?

To prevent high-tech crimes, customers need to be vigilant and adhere to basic security principles:

Never access strange links via text messages, emails, Zalo, Messenger even if they seem to be from the bank. Never provide personal information, account numbers, passwords, or OTP codes to anyone over the phone.

Regularly update security and anti-virus software. Only download banking apps from the App Store, Google Play, or official websites. Enable multi-factor authentication and biometric authentication for important transactions.

Limit sharing personal images and sensitive information on social networks to avoid being exploited by deepfake technology. When receiving a call asking to update information or upgrade your account, contact the bank directly via the official hotline for verification.

If you detect unusual transactions or suspect fraud, immediately contact the bank to lock your account and report to the police.

VNA

Source: https://tuoitre.vn/ma-doc-va-deepfake-tan-cong-ngan-hang-so-nguoi-dung-tu-bao-ve-tai-khoan-nhu-the-nao-20251120104548197.htm