Cybersecurity landscape in Vietnam: Progress and ongoing vulnerabilities in 2024

In the second quarter of 2024, the state of cybersecurity in Vietnam has shown improvement compared to the previous year; nonetheless, a significant portion of the population remains vulnerable to internet-based threats, as indicated by Kaspersky, a global leader in cybersecurity and digital privacy.

According to Kaspersky’s report, the company successfully blocked 4.8 million web-based threats from participants in its Kaspersky Security Network (KSN) in Vietnam during the months of April to June 2024, reflecting a reduction from 7.7 million threats recorded in the same period in 2023. However, it is alarming to note that nearly one in five users in the country remains susceptible to these web-borne threats.

Cybercriminals have continued to employ various tactics to disseminate malicious programmes, notably via browser vulnerabilities and through social engineering techniques. Drive-by download attacks take place when unsuspecting users visit compromised websites, while social engineering manipulates individuals into downloading harmful files masquerading as legitimate applications. Additionally, threat actors are enhancing their methods, often obscuring malicious code to outwit static analysis and emulation detection systems.

Despite the reported decline in web threats, incidents of malware transmitted through removable USB devices, CDs, and DVDs persist as a significant concern, underscoring the necessity for robust security measures to counteract these local threats. Comprehensive defence strategies, including the employment of firewalls, anti-rootkit tools, and strict control over removable media, are crucial for safeguarding against offline infection pathways.

Kaspersky’s analysis has further revealed a minor increase in incidents linked to servers hosted within Vietnam, rising from 0.05 per cent in Q2 2023 to 0.06 per cent in Q2 2024, illuminating the evolving landscape of threat sources. Yeo Siang Tiong, the General Manager for Southeast Asia at Kaspersky, remarked, “The positive improvement in Vietnam’s overall cybersecurity landscape is a testament to the successful collaboration between the Vietnamese Government and Kaspersky.” He noted that joint efforts, such as the “Vietnam Business Defense” initiative developed in partnership with the Authoritative Information Security, have played a critical role in enhancing the country’s cyberdefensive capabilities.

As Vietnam’s digital ecosystem experiences significant growth propelled by innovations in cloud computing, the Internet of Things (IoT), artificial intelligence (AI), blockchain, big data, and data analytics, Mr. Yeo cautioned that such developments necessitate a meticulous awareness of evolving security threats. He stated, “Implementing comprehensive security solutions will be vital to ensuring the safe and sustainable growth of Vietnam’s digital future.”

Kaspersky has advised businesses seeking to fortify their cybersecurity strategies to implement regular data backups to external sources or the cloud, ensure that all devices, software, and applications are updated with the latest security patches, and stay informed about emerging threats to maintain an adaptive defence posture.

Although there have been notable advancements in Vietnam’s cybersecurity landscape, it is crucial to maintain diligence in order to safeguard against a wide range of cyber attacks. The nation will be able to protect its expanding digital infrastructure and increase its cyber resilience only with persistent work and calculated partnerships.