Hanoi (VNA) ♉- This year is likely to bring an increase in targeted APT attacks, especially those aimed at stealing data from databases developed during the vulnerable period as the country undertakes its digital transformation process.

Vu Ngoc Son, technical director of the Vietnam National Cyber Security Technology Corporation (NCS), made the assessments regarding the cybersecurity situation in Vietnam in 2023.

Increasing large-scale targeted APT attacks

Digital transformation is a powerful and all-encompassing renovation that is taking place currently across the nation. This year promises an explosion of investment in the process from agencies and businesses, as digital transformation platforms have been gradually form, improved, and became more effective. The outcomes of digital transformation will boost productivity and efficiency across society, with all activities being digitised and data converged to form large databases. According to Son, hackers will target these large databases instead of attacking smaller systems, leading to an increase in large-scale targeted APT attacks. "In terms of technology, APT attacks in 2023 will not have many new forms, but preventing them requires greater efforts from system administrators," Son commented. According to him, the administrators need to change their mindset in ensuring cybersecurity to align with the nature of digital transformation. In addition to making use of technological solutions for protection, it is necessary to allocate resources and budgets for monitoring, supervision, and incident response processes.

Industrial OT systems becoming new targets

If an OT system is attacked or breached, the data involved in the production process can be stolen. Even more seriously, hackers can modify and interfere with the production process, causing disruptions and delays, or even altering algorithms to compromise the quality of the output, posing risks to users and significantly impacting social security. According to Son, the possibility exists for attacks on Vietnam’s OT systems. Initially, hackers will target information technology systems of factories, employing similar methods as with APT attacks. Once they gain control over the machines in the systems, they will progressively infiltrate and attack OT networks. To prevent such attacks, factories and enterprises, as suggested by this cybersecurity expert, should invest in cybersecurity, conduct regular checks, and update software and operating systems of control devices within their systems to address vulnerabilities.

Encryption-based data ransomware attacks targeting data server systems

Such attacks targeting data server systems, particularly accounting servers of agencies and businesses, are expected to continue in 2023, according to the NCS expert. The motivation behind these attacks is the higher ransom amount that hackers can demand from organisations, whose data is encrypted, compared those from individual users. To prevent such attacks, administrators are advised to set strong passwords for remote administration accounts, close unnecessary service ports, and routinely change default passwords for database administration accounts. Additionally, businesses should establish regular data backup systems and equip themselves with antivirus software for constant protection.

New variations in internet and telecommunications fraud

The NCS advises users to remain vigilant and apply the principle of "Don't trust, always verify" to avoid falling into fraud. When receiving messages or calls, users should not immediately trust them but instead verify the information directly with publicly available contact details of relevant organisations.

Cryptocurrency mining malware targeting users

Taking advantage of operating systems, hackers will distribute malware to gain control over users' computers, turning them into cryptocurrency mining machines. Users unwittingly end up paying for the electricity used by the hackers. To combat this, the expert advises users not to access websites with uncertain origins, as well as to refrain from installing software from unreliable sources, regularly update their operating systems, and use reliable antivirus software./.