Warning of cyber attacks targeting tax authorities and educational institutions

The National Cyber ​​Security Monitoring Center has detected illegal attacks by hacker groups against a number of organizations in Vietnam.

The National Cyber ​​Security Monitoring Center (NCSC) under the Department of Information Security, Ministry of Information and Communications has just issued a warning about a group of hackers carrying out cyber attacks on agencies and organizations in Southeast Asia, using baits revolving around the education and tax sectors.

The hacker group, known as Mustang Panda, often carries out advanced persistent threat (APT) attacks. The new attack campaign of the Mustang Panda hacker group uses "lures" revolving around the education and tax sectors.

By applying multiple approaches and exploiting the "forfiles.exe" software tools to execute malicious files stored on the C&C server (Command and Control Server - the main software, responsible for controlling and monitoring the activities of malicious software). Notably, the target that the Mustang Panda group aims for is government organizations, non-profit organizations, educational organizations...

According to security experts' analysis, two attack campaigns by the Mustang Panda group recorded in April and May were aimed at organizations and businesses in Vietnam using text files with content related to tax authorities and educational organizations.

The Department of Information Security, Ministry of Information and Communications, requested that the unit in charge of information technology and information security check and review information systems under its management that may be affected by the attack campaign carried out by the Mustang Panda group.

According to VTV

Source: https://doanhnghiepvn.vn/chuyen-doi-so/canh-bao-tan-cong-mang-nham-vao-cac-co-quan-thue-va-to-chuc-giao-duc/20240625093506338