Late on the night of March 27.3, VNDirect officially issued a statement, continuing information about troubleshooting VNDirect's online transaction system.
Accordingly, it is expected that on March 28.3, the company will conduct a test of transaction flow with stock exchanges. This is an important step in restoring the trading system.
Latest announcement on VNDirect's website about the troubleshooting situation
“Even though the identification and recovery phase has been completed, we still have to continue to spend time with a lot of work such as data control, ensuring the integrity and accuracy of our asset information. client.
Today, we have completely restored the large data flow, and feel secure that customer information has been guaranteed," VNDirect's announcement stated.
Previously, a problem with VNDirect's online trading system occurred at 10:24.3 a.m. on March XNUMX at DC Fornix Duy Tan. The system was attacked by an international hacker organization. The system was attacked by virtual infrastructure, resulting in the company's entire trading platform being temporarily unable to log in.
According to VNDirect, on March 25.3, the business began the work of restoring the system and upgrading system security solutions.
Late on the morning of March 25.3, the Hanoi Stock Exchange (HNX) announced the temporary disconnection of VNDirect's trading connection to the HNX from March 25.3 until VNDirect completely fixes the problem.
On the afternoon of March 25.3, the Ho Chi Minh City Stock Exchange (HOSE) also said that it has temporarily disconnected VNDirect's trading connection with HOSE since March 25.3 until this company completely fixes the problem.
On March 26.3, VNDirect switched to the process of reviewing and evaluating the system before gradually resuming transactions.
On March 27.3, VNDirect restored the system and is reviewing and evaluating the system to absolutely ensure safety and security for customers transacting at the company.
Accordingly, the company has and continues to make efforts to implement the roadmap to reopen the system in stages.
Specifically, phase 1: the system looks up the customer's account status and information on My Account. Phase 2: reopening the money trading system, basic securities trading and derivatives on the basis of connecting with the exchange. Phase 3: other financial products come back into operation. Stage 4: all other features.
VNDirect is drafting a compensation policy for customers
Up to now, VNDirect has completed phase 1. "We affirm that all customer information is guaranteed to be safe and secure, completely unaffected, because hackers cannot penetrate it." The data system and all of the system's customer data have been stored on the cloud.
In parallel with overcoming technology problems, we are drafting new policies to share and compensate for the inconveniences that customers encounter during days when they cannot trade," said a VNDirect representative.
Exchange with Youth On the afternoon of March 27.3, a cybersecurity expert said that up to now, VNDirect's ability to open the system for customers to look up balances and change passwords is a remarkable effort. For customers, the most important thing is to quickly change their password.
VNDirect's incident was identified as a software-related vulnerability, meaning a "zero day" vulnerability. This is an unknown manufacturer vulnerability. Hackers somehow found it and exploited it.
“Rebuilding the system is not difficult for the operations team. The important thing is that after rebuilding, we must find the hacker's entrance to block. With the "zero day" vulnerability, they essentially won't be able to patch it themselves but will have to wait for the manufacturer to update it. In this situation, I think VNDirect will choose to isolate partitions that they already know have "zero day".
In phase 4, VNDirect announced that they will open all features, so up to now they may have been able to zone in," the expert commented.
However, according to this person, we should not be subjective. Correcting the problem will even require replacing the system's architecture, especially the backup system, which will still take a lot of time, possibly up to months.
The expert noted: "Customers need to be patient and cooperate so that VNDirect can focus on processing."
