A series of serious cyber attacks
At the workshop, Captain Nguyen Trong Anh - officer of Department 7, Department of Cyber Security and High-Tech Crime Prevention (A05), Ministry of Public Security - informed that in the first 6 months of 2024, A05 detected and handled 211,000 cyber attack warnings and 20 particularly serious cyber attack incidents.
Emerging are data encryption attacks and ransom demands targeting corporations, financial, energy, and telecommunications businesses, causing great economic and reputational damage.
Information systems of ministries, branches and localities were attacked by hacker groups, taking over administration rights, and infecting them with spyware, such as: Ministry of Transport, Ministry of Industry and Trade, Electricity Group, Hanoi Ethnic Committee, Da Nang City, Kien Giang, Tay Ninh, Long An...
According to Viettel IDC statistics, in the first 6 months of 2024, the amount of data encrypted by attack reached 3 Terabytes with a total estimated loss of 10 million USD.
Captain Nguyen Trong Anh said that the situation of illegal trading of information and data of citizens and internet users is becoming more and more complicated in terms of the number of cases and the amount of leaked information.
Notable figures for selling data include: 8 million Vietnamese citizens' information; 6.2 million VietjetAir booking information; 24 million Shopee ordering information; more than 1 million Viettel mobile subscriber information; 30 million Vietnamese students' and teachers' information...
In addition, there are recent prominent data sales for An Giang General Hospital, VNDirect Securities Company, Vietnam Oil Corporation (PVOIL), Southern Power Corporation, and Post and Telecommunication Joint Stock Insurance Corporation (PTI).
Notably, in the first 6 months of 2024, 201,903 data packets were discovered to be leaked and leaked onto the network due to malware attacks, with about 12.3 million lines of information and data stolen.
Solutions for secure network systems
Captain Nguyen Trong Anh has provided solutions for computer network systems and peripheral storage devices. First of all, it is the application of technology and technology platforms for network infrastructure devices, server systems, station systems, data, and internet access activities.
Data is the most important. Regular data backups should be applied, and the computer or backup device should not be connected to the computer storing data; backup data should be encrypted and stored in a safe place; the computer containing the data should create encrypted partitions.
Next is the solution for managing, operating, and using people and equipment. Develop and implement regulations and rules; Regularly inspect, monitor, and have sanctions for violations; Organize training programs, coaching, etc.
According to Captain Nguyen Trong Anh, to have a secure network system that meets the requirements of network security, information security... units need to research and implement the processes of managing their information systems and network systems according to the contents of the process of evaluating equipment and upgrading the system; user management; checking for security vulnerabilities; monitoring and controlling access; incident response and handling processes; building and training professional skills.