Singaporean firm spots phishing campaign targeting Vietnamese victims

The Singapore-based cybersecurity firm Group-IB has spotted a mass-scale phishing campaign targetting their clients by impersonating 27 Vietnamese financial institutions.

The campaign was launched back in 2019 with its first domain registered in May 2019. Since the onset, Group-IB has detected and taken down 240 interconnected domains, but new domains regularly emerge.

The latest, which is part of the cybercriminals’ infrastructure, was activated on June 1, 2022. Group-IB is continuing to cooperate with local authorities to block new domains, further containing the fraudulent operation.

While the number of victims remains unknown, Group-IB believes that at least 7,800 users, including 5,500 from Vietnam, have visited the domains since early 2021 and could fall prey to phishing.

Singaporean firm spots phishing campaign targeting Vietnamese victims -0
This duplicitous tactic allows phishers to steal money from victims' accounts and harvest their personal data, including name, address, identity number, phone number and occupation. (Photo: cafef.vn)

Experts revealed that cybercriminals behind the campaign leveraged SMS, Telegram and What’s App messages, and even comments on Facebook pages of legitimate financial firms to redirect victims to their phishing websites.

One of the scammers’ SMS informs victims that they have won a gift and need to login to their bank portal to claim it. The scammers then provide shortened URLs to the victims for login.

Upon clicking on the URLs, the victims will be linked to a fake webpage featuring the logos of 27 highly-reputed banks. Once they pick their banks from the list, they are forwarded to another phishing page that disguises as a legitimate bank portal.

Should the victims input their credentials into the portal, they will be taken to the next where a One Time Password (OTP) is requested. After they submit their OTP via the fake authentication page, the cybercriminals instantly get full access to their bank accounts.

This duplicitous tactic allows phishers to steal money from victims' accounts and harvest their personal data, which will be traded in the underground cyber-community and purchased by criminal actors for follow-up attack on the victims.

Group-IB recommends users stay vigilant to any suspicious URLs on the browser and be wary of webpages that appear to malfunction or create long chains of redirection. 

They should also avoid purchasing from unauthorised sellers and clicking on links that offer large discounts. These links are likely fraudulent. It is critically important to confirm the credibility of the source in the first place.

Addtionally, users should enable two-factor authentication wherever possible and change passwords from time to time to keep data thefts at bay.

Banks impersonated by scammers should implement regular monitoring to detect fake sites that misuse their legitimate brand names and swiftly inform cybersecurity authorities to neutralise these malicious sites.

They should also utilise the automated machine-learning based Digital Risk Protection System to improve their knowledge about cyber risks and criminal tactics, thereby averting future attacks.

VNA

Other News

Hanoi approves controlled pilot of two technology projects

Hanoi approves controlled pilot of two technology projects

The two projects involve an intelligent autonomous transportation system developed by Phenikaa-X JSC and a technology for producing mixed rare-earth oxides with a purity of over 95% on a semi-industrial scale developed by the Mining Technology and Construction Consultancy JSC.

Banking industry in AI era: When data becomes competitive advantage

Banking industry in AI era: When data becomes competitive advantage

In just a few years, AI has evolved from an experimental technology into an “assistant” for many banks, supporting everything from customer service, credit approval, and fraud detection to risk management. However, as the technological gap between institutions narrows, a new question is emerging: What will determine banks' competitive advantage in the AI era?

Bac Ninh considers establishing AI centre of excellence

Bac Ninh considers establishing AI centre of excellence

A meeting has been held in Bac Ninh to discuss potential cooperation with Plug and Play in developing the northern province’s innovation ecosystem and establishing an artificial intelligence (AI) centre of excellence, with Standing Vice Chairman of the provincial People’s Committee Mai Son receiving a delegation from the global innovation platform.

Hanoi allows 24-month trial of autonomous vehicles at Hoa Lac

Hanoi allows 24-month trial of autonomous vehicles at Hoa Lac

The project aims to assess the safety, reliability and readiness of autonomous vehicles under real traffic conditions, as well as the effectiveness of autonomous public transport and compatibility with existing systems. Its results will contribute to developing technical standards, operating procedures and management models suited to Hanoi’s traffic conditions.

Singapore's experience suggests solutions to Vietnam's human resources challenge in AI era

Singapore's experience suggests solutions to Vietnam's human resources challenge in AI era

As Vietnam accelerates digital transformation and high-tech development, Singapore’s experience and the engagement of global technology companies demonstrate that human resources preparation must stay ahead of the curve. The ability to filter knowledge, collaborate, innovate and effectively use AI will increasingly become essential to helping workers adapt to a changing labour market and strengthening the competitiveness of Vietnam’s economy in the new era.

Protecting national security amid digital transformation, cyberspace

Protecting national security amid digital transformation, cyberspace

Cybersecurity, information security and data security risks must be identified and addressed early and from afar, with appropriate defensive measures ready to neutralise threats and protect national interests in cyberspace, said Lieutenant General Le Xuan Minh, Director of the Ministry of Public Security’s Department of Cybersecurity and Hi-tech Crime Prevention (A05).

Mekong Delta launches first robotics, AI research institute

Mekong Delta launches first robotics, AI research institute

Dr. Nguyen Van Quang, Rector of Nam Can Tho University, said the university is developing a value chain covering training, research, technology development, testing, technology transfer and commercialisation. The model is designed to link research more closely with practical needs, ensuring that technologies generate products and products create value for society.

Vietnam positioned to harness AI wave, World Bank report says

Vietnam positioned to harness AI wave, World Bank report says

The WB report identifies Vietnam as one of the few economies outside the European Union (EU) to have adopted a comprehensive AI regulatory framework as early as 2025. Vietnam applies a risk-tiered approach similar to that of the EU AI Act, imposing different obligations depending on whether an AI system poses “unacceptable,” “high,” “low” or “minimal” risks. The approach is viewed as a strategic step towards ensuring safe and transparent AI governance.

AI offers both opportunities, challenges for Vietnam's growth

AI offers both opportunities, challenges for Vietnam's growth

Dr. Ho Duc Thang, a full-time member of the National Assembly’s Committee for Cultural and Educational, said productivity is the key to sustaining double-digit economic growth, and AI has greater potential to improve productivity than any previous technology.

Top leader unveils people-centred vision for new development model

Top leader unveils people-centred vision for new development model

Vietnam's growth model, long fueled by low-cost labour, resource extraction, contract manufacturing, expanded investment, and capital accumulation, has run out of road. The country now needs a sweeping reform agenda to shift from extensive growth to a model driven by productivity, knowledge, science and technology, innovation, and digital transformation.