2023 is considered an explosive year for phishing attacks worldwide in general and in Vietnam in particular. According to data from the Ministry of Public Security, in 2023, 1,500 cases were prosecuted for cyber fraud, with the total amount of money defrauded by people being VND 8,000 - 10,000 billion. The year 2024 continues to be the rise of many new scams. Let's Anti-Phishing (CLD) looks back at an overview of the fraud situation in Vietnam in the first 6 months of 2024.
First quarter of 2024
In the first quarter of 2024 alone, there were 29,251 reports related to online fraud recorded by the nonprofit Anti-Fraud Project. The number of reported cases increases month by month: there was one in January 8.667 report; February increased 9.132 report. Especially in March, it increased dramatically 11.452 report, reflecting a clear escalation in the cybersecurity situation. This can be explained by users' lack of vigilance after the long Tet holiday, when people are often busy returning to work and daily activities, leading to a decrease in concentration and caution in working. protect personal information.
The increase rate in March was 25,41%, nearly 5 times higher than the increase rate of scams in February (5,37%). Among the types of online fraud taking place on social networks, there are up to 24 common types, divided into 3 main groups including: brand counterfeiting, account hijacking and finally other forms of fraud. combine. The target audience of these types are the elderly, children, students/youth, workers/laborers and office staff.
Second quarter of 2024
In the second quarter, the number of reports related to network security and fraud continued to escalate at an alarming rate. In April, Anti-Fraud recorded a total 10.235 report, opening Q2 with a large number of scams and cyberattacks. This shows a significant increase compared to Q1, possibly due to scammers taking advantage of festive events and major holidays to attack users. One of the factors that greatly affects cyber insecurity in Vietnam in Q2 is the series of holidays celebrating April 30 and May 1 every year.
May again saw a slight decrease in total numbers 9.523 report. Although the number of reports decreased compared to the previous month, this still does not indicate a significant deterioration in the security situation in cyberspace. It also shows that scammers and hackers are very sensitive to psychology because after the long holidays in late April and early May, people's economic and financial conditions will also decrease, so the amount of tons of money will decrease. Labor also decreased slightly compared to April.
June was the month with the highest number of reports in the quarter 11.452 report, reflecting a sharp escalation in cyber security and scams. In particular, this increase may be related to Decision No. 2345/QD-NHNN of the State Bank that will take effect on July 1, 2024 on security solutions such as biometrics for payments. Online payments and bank cards. This decision has motivated fraudsters to increase attacks to exploit weaknesses before new security measures are implemented.
Impact of Decision 2345/QD-NHNN
Decision 2345/QD-NHNN of the State Bank issued in 2023 to deploy security solutions such as biometrics for online payments and bank cards has been creating strong impacts. These measures are expected to enhance security and reduce risks for users and the banking system.
However, before these measures are deployed synchronously and effectively, fraudsters can take advantage of this transition period to attack, exploit existing weaknesses, and manipulate psychology. of the user. In which, crooks use malicious code to take control of the victim's device. Once in control, they collect sensitive data, including images, videos, and eKYC information of victims.
With this information, fraudsters can access the victim's bank account or e-wallet and appropriate money by impersonating public service apps, VNEID, VSSID or pretending to be a bank employee to Seduce and manipulate the victim's psychology. And the fact that users are lured into installing malicious code through fake links or applications is one of the popular methods in the past year, especially targeting users using information phones (smartphones), including smartphones. Android or iOS devices. Fraudsters can remotely control the device and perform illegal online money transfers using the victim's biometrics without even knowing.
English 
Vietnamese