Why were VNDirect and some companies attacked by hackers?

Hanoi City Police said that recently, the trend of cyber attacks, especially ransomware in Vietnam, has increased and become more complicated. Many agencies, organizations and businesses have been attacked, causing system disruption and heavy material damage.

Typically, many large enterprises such as VNDirect, Vietnam Oil Corporation - JSC (PVOIL)... are victims of ransomware attacks with the same form and method of encrypting data to demand ransom.

The subjects target businesses, financial institutions, agencies, and units with critical information systems that still have security vulnerabilities, no data backup plan, or centralized data backup on the same system. The consequence is that when attacked by encryption, they are forced to pay ransom to retrieve data because there is no backup.

At the end of March, VNDIRECT's system was attacked and the subjects encrypted all company data.

For financial institutions such as banks, when infiltrating the system, criminals can directly steal money but have difficulty withdrawing money or hiding information. Therefore, data encryption attacks demanding ransom will be a trend that hackers will focus on exploiting in the near future.

If businesses do not regularly review, update security patches and prevent malware, hackers will encrypt data at any time to steal data and encrypt for ransom.

From the above situation, the Department of Cyber Security and High-Tech Crime Prevention of the City Police recommends that agencies, organizations and businesses need to regularly monitor network security, promptly detect and update security patches, remove malware, and quickly handle any signs of attack.

Tighten system security walls, ensure only authorized users access the system; review administration of critical systems and servers; install 2-factor authentication.

In addition, implement a plan to back up data regularly; backup data needs to be stored separately, not on the same system in use.

At the same time, businesses proactively coordinate with cybersecurity authorities when detecting cyber attacks to promptly resolve and minimize the risk of network insecurity and safety.

Source: https://www.baogiaothong.vn/vi-sao-vndirect-va-mot-so-cong-ty-bi-tin-tac-tan-cong-192240422215549225.htm