Warning about the increasing trend of data encryption attacks

In case of detecting risks, vulnerabilities, and weaknesses, it is necessary to immediately deploy remedial measures, especially for information systems that store and process personal information and personal data.

The Department of Information Security (ATTT, Ministry of Information and Communications) has just issued a document requesting specialized IT and ATTT units of ministries, branches, and localities; state-owned corporations and groups; financial and banking organizations; and enterprises operating in the postal and e-commerce sectors to review and strengthen network security solutions for information systems. In particular, prioritizing monitoring and early warning solutions.

Through monitoring and surveillance of cyberspace, the Department of Information Security has detected an increasing trend of cyber attacks, especially ransomware attacks. Recently, a number of information systems of agencies, organizations and enterprises in Vietnam have been attacked, causing disruptions in operations and material and image damage to agencies, organizations and enterprises; as well as activities to ensure national cyberspace security.

In that situation, the Department of Information Security recommends that agencies, organizations and enterprises review and deploy solutions to strengthen network information security for information systems, prioritizing monitoring and early warning solutions; conduct inspections and assessments to ensure information security for information systems under their management; in case of detecting risks, vulnerabilities and weaknesses, it is necessary to immediately deploy remedial measures, especially for information systems that store and process personal information and personal data.

These tasks must be completed before April 15. At the same time, organize the implementation of related tasks according to Directive No. 09/CT-TTg dated February 23, 2024 of the Prime Minister on compliance with legal regulations and strengthening information system security by level, especially organizing statistics and classifying information systems under management; develop a plan to complete regulations on ensuring information system security by level (according to monthly progress), ensuring that 100% of information systems in operation must be approved for information system security level by September 2024 at the latest and fully implement the information security assurance plan according to the approved level proposal by December 2024 at the latest.

The Department of Information Security also requested agencies, organizations and enterprises to effectively, substantially, regularly and continuously implement information security work according to the 4-layer model, especially improving the capacity of the professional monitoring and protection layer and maintaining continuous and stable connections and information sharing with the National Cyber Security Monitoring Center under the Department of Information Security; prioritizing the use of information security products, solutions and services produced or mastered by Vietnamese enterprises; periodically hunting for threats to promptly detect signs of system intrusion.

For systems that have detected serious security vulnerabilities, after fixing the vulnerability, it is necessary to immediately conduct threat hunting to determine the possibility of previous intrusion; check and update information security patches for important systems according to warnings from the Department of Information Security and related agencies and organizations...

The Department of Information Security requests organizations and businesses to review, assign focal points for professional exchange and report implementation results to the Department of Information Security before April 20 for synthesis and reporting to competent authorities.

TRAN BINH

Source