Brian Jeffrey
Overview of Cybersecurity Reports
Out of a total of 17,679 reports, 856 were submitted through canhbao.khonggianmang.vn and 16,823 via the hotline 156/5656.
As of late September, the National Cyber Security Centre (NCSC), part of AIS, had identified 125,338 websites that falsely claimed to be official agencies or organizations.
Impact of Fraudulent Websites
The majority of these deceptive websites targeted banks, financial institutions, online retailers, and government entities. These scams not only led to significant financial losses for individuals but also jeopardized the reputations of the involved institutions.
A cybersecurity report from Viettel Cyber Security highlighted a troubling trend: the number of fraudulent domain registrations doubled in the third quarter of 2024 compared to the previous year.
Growing Threats to Businesses
Experts warn that the surge in fake domains presents critical challenges for the branding and protection of Vietnamese businesses and organizations.
Finance and banking sectors remain the primary targets for cybercriminals, accounting for 58% of all phishing and spoofing attacks. Tactics mainly focus on credit card schemes and online lending fraud.
Retail/e-commerce and public services, which saw increases in attacks by 17% and 13% respectively, are also heavily affected.
Modus Operandi of Cyber Criminals
Fraudsters often capitalize on the names of well-known institutions, luring victims with commission-based incentives to carry out deceitful tasks.
In public service, incidents of phishing have led to substantial financial damage, with individual thefts amounting to billions of dong.
Moreover, Viettel Threat Intelligence has identified phishing threats in several key sectors, including telecommunications, securities, and energy.
Challenges in Detecting Attacks
Experts note that scams are becoming increasingly elaborate, with attackers utilizing overseas servers for their fraudulent activities, complicating detection efforts. Additionally, many scams on social networks remain anonymous, as current regulations on personal data security do not effectively address these issues.
Numerous bank accounts are linked to fabricated identities and phone numbers, assisting scammers in their operations.
A significant issue is the low level of awareness among social media users, which facilitates the theft and hijacking of accounts.
Future Directions
Experts are optimistic that Decree 147, enacted on November 9, 2024, will aid in curbing malicious activities, including those that exploit cyberspace for fraud and theft.
