Why were VNDirect and several other companies attacked by hackers?

According to the Hanoi City Police, the trend of cyberattacks, especially ransomware attacks, in Vietnam has increased and become more complex recently. Many agencies, organizations, and businesses have been targeted by cyberattacks, causing system disruptions and significant material losses.

Typically, many large businesses such as VNDirect, Vietnam Oil Corporation – JSC (PVOIL)… are victims of ransomware attacks with similar methods and tactics: encrypting data to demand ransom.

The attackers target businesses, financial institutions, agencies, and organizations with critical information systems that have security vulnerabilities, lack data backup plans, or have centralized data backups on the same system. As a result, when ransomware attacks occur, they are forced to pay a ransom to recover their data because there are no backups left.

In late March, VNDIRECT's system was attacked, and the perpetrators encrypted all of the company's data.

For financial institutions like banks, while intruders can directly steal money once they gain access to the system, they face difficulties in withdrawing funds and concealing information. Therefore, ransomware attacks will be a trend that hackers will focus on exploiting in the future.

If businesses do not regularly review and update security patches and malware prevention measures, hackers can encrypt data at any time to steal data and demand ransom.

Based on the above situation, the Cyber ​​Security and High-Tech Crime Prevention Department of the Ho Chi Minh City Police recommends that agencies, organizations, and businesses regularly monitor their cybersecurity, promptly detect and update security vulnerabilities, remove malware, and quickly handle any signs of attack.

Strengthen system security, ensuring only authorized users have access to the system; review administration of critical systems and servers; implement two-factor authentication.

In addition, implement a regular data backup plan; the backup data should be stored separately, not on the same system currently in use.

At the same time, businesses should proactively coordinate with cybersecurity authorities when detecting cyberattack incidents to promptly address and minimize the risk of cybersecurity breaches.

Source: https://www.baogiaothong.vn/vi-sao-vndirect-va-mot-so-cong-ty-bi-tin-tac-tan-cong-192240422215549225.htm