Cyberespionage attacks against foreign companies operating in Vietnam have been traced to a group of hackers “aligned with Vietnamese state interests,” according to a report by cybersecurity provider FireEye.
The attacks by the group — designated by FireEye as APT32 — have been conducted since at least 2014, mainly targeting companies operating in the manufacturing, consumer products and hospitality sectors, FireEye said in the report released on Sunday.
The group has also targeted foreign governments, dissidents and journalists, it said.
“The unauthorized access could serve as a platform for law enforcement, intellectual property theft, or anti-corruption measures that could ultimately erode the competitive advantage of targeted organizations,” the report said.
APT32 conducted the attacks by leveraging files that use social-engineering methods to entice victims, FireEye said.
The file then downloads malicious payloads from remote servers, with further attacks delivered via “phishing” e-mails, it said.
The group is also targeting security, technology infrastructure and consultancy companies, FireEye said, adding that APT32 continues to threaten political activism and free speech in Southeast Asia.
“Governments, journalists and members of the Vietnam diaspora may continue to be targeted,” the report said.
According to the report, examples of the attacks by APT32 include a European corporation compromised in 2014 prior to constructing a manufacturing facility in Vietnam; Vietnamese and foreign-owned corporations targeted last year; and Vietnamese offices of a global consulting firm attacked this year.
“While actors from China, Iran, Russia and North Korea remain the most active cyberespionage threats tracked and responded to by FireEye, APT32 reflects a growing host of new countries that have adopted this dynamic capability,” it said.
The report comes as a new wave of ransom threats hit more than 200,000 computers in at least 150 countries, affecting companies and government agencies from the US to Europe to Asia.
The malware used a technique purportedly stolen from the US National Security Agency.
Tens of thousands of Filipino Catholics yesterday twirled white cloths and chanted “Viva, viva,” as a centuries-old statue of Jesus Christ was paraded through the streets of Manila in the nation’s biggest annual religious event. The day-long procession began before dawn, with barefoot volunteers pulling the heavy carriage through narrow streets where the devout waited in hopes of touching the icon, believed to hold miraculous powers. Thousands of police were deployed to manage crowds that officials believe could number in the millions by the time the statue reaches its home in central Manila’s Quiapo church around midnight. More than 800 people had sought
DENIAL: Pyongyang said a South Korean drone filmed unspecified areas in a North Korean border town, but Seoul said it did not operate drones on the dates it cited North Korea’s military accused South Korea of flying drones across the border between the nations this week, yesterday warning that the South would face consequences for its “unpardonable hysteria.” Seoul quickly denied the accusation, but the development is likely to further dim prospects for its efforts to restore ties with Pyongyang. North Korean forces used special electronic warfare assets on Sunday to bring down a South Korean drone flying over North Korea’s border town. The drone was equipped with two cameras that filmed unspecified areas, the General Staff of the North Korean People’s Army said in a statement. South Korea infiltrated another drone
COMMUNIST ALIGNMENT: To Lam wants to combine party chief and state presidency roles, with the decision resting on the election of 200 new party delegates next week Communist Party of Vietnam General Secretary To Lam is seeking to combine his party role with the state presidency, officials said, in a move that would align Vietnam’s political structure more closely to China’s, where President Xi Jinping (習近平) heads the party and state. Next week about 1,600 delegates are to gather in Hanoi to commence a week-long communist party congress, held every five years to select new leaders and set policy goals for the single-party state. Lam, 68, bade for both top positions at a party meeting last month, seeking initial party approval ahead of the congress, three people briefed by
Indonesia and Malaysia have become the first countries to block Grok, the artificial intelligence (AI) chatbot developed by Elon Musk’s xAI, after authorities said it was being misused to generate sexually explicit and nonconsensual images. The moves reflect growing global concern over generative AI tools that can produce realistic images, sound and text, while existing safeguards fail to prevent their abuse. The Grok chatbot, which is accessed through Musk’s social media platform X, has been criticized for generating manipulated images, including depictions of women in bikinis or sexually explicit poses, as well as images involving children. Regulators in the two Southeast Asian