Kaspersky, a global cybersecurity and digital privacy company, recently released a report on Vietnam’s cybersecurity landscape for the second quarter of 2024. The report indicates that while Vietnam’s cybersecurity situation has improved compared to the same period in 2023, vigilance is still necessary to guard against potential threats.

According to data from Kaspersky Security Network (KSN), the company successfully blocked 4.8 million web-borne threats on its Vietnamese users’ computers between April and June 2024. This figure represents a significant decrease from the 7.7 million threats blocked in the second quarter of 2023, reflecting a positive change in Vietnam’s overall cybersecurity environment.

However, the report also points out that nearly one-fifth of Vietnamese internet users remain at risk of cyber threats. This statistic highlights the persistent nature of cybersecurity issues and the need for further strengthening of protective measures.

In terms of attack methods, cybercriminals primarily employ two techniques to spread malicious programs: drive-by downloads that exploit vulnerabilities in browsers and plugins, and social engineering tactics. Drive-by downloads occur when users unknowingly visit infected websites, while social engineering involves tricking users into downloading malicious files disguised as legitimate programs.

The report notes that cyber threat actors are becoming increasingly sophisticated, often using obfuscation techniques to evade static analysis and emulation detection. This trend poses greater challenges to traditional security measures.

Although web threats have decreased, malware attacks spread through offline media such as removable USB drives, CDs, and DVDs (local threats) remain a concern. This underscores the importance of implementing comprehensive security measures, including firewalls, anti-rootkit features, and strict control of removable devices.

Kaspersky’s data also shows that the proportion of security incidents originating from servers within Vietnam slightly increased from 0.05% in Q2 2023 to 0.06% in Q2 2024. This minor increase reflects Vietnam’s slightly elevated position as a potential source of threats.

Yeo Siang Tiong, General Manager for Southeast Asia at Kaspersky, stated that the overall improvement in Vietnam’s cybersecurity situation demonstrates the successful collaboration between the Vietnamese government and Kaspersky. He specifically mentioned the “Vietnam Business Defense” campaign, an initiative organized in cooperation with authoritative information security agencies, which has helped strengthen Vietnam’s cyber defense capabilities.

Yeo Siang Tiong pointed out that Vietnam’s digital environment is experiencing significant growth, thanks to advancements in cloud computing, IoT, AI, blockchain, big data, data analytics, and the metaverse. However, he also warned that while these flourishing opportunities bring enormous potential for future production and business, they must be accompanied by a clear awareness of evolving security challenges.

To help businesses protect against cyber threats, Kaspersky provided the following recommendations:

• Regularly back up important data to external storage devices or cloud services.
• Promptly update security patches for all devices, software, and applications.
• Continuously learn and update cybersecurity knowledge to address emerging threats.

Key points:

1. In Q2 2024, Kaspersky blocked 4.8 million cyber threats in Vietnam, down from 7.7 million in the same period last year.
2. Approximately 20% of Vietnamese internet users still face cyber threat risks.
3. Main attack methods include drive-by downloads and social engineering techniques.
4. Local threats (such as malware spread via USB) remain a significant issue.
5. Vietnam’s proportion as a source of threats slightly increased from 0.05% to 0.06%.
6. Vietnam’s digital environment is rapidly developing but also faces new security challenges.
7. Kaspersky advises businesses to regularly back up data, update systems promptly, and continuously learn about cybersecurity.