Cyber Report Vietnam

Cyber Report Vietnam

In early 2025, Vietnam’s cybersecurity landscape reached a tipping point. As the country advanced its digital economy and expanded its footprint in AI, telecom, and cloud infrastructure, it simultaneously became one of the most targeted nations in the Asia-Pacific region.

This report uncovers how a combination of state-sponsored espionage, ransomware-as-a-service, and AI-powered phishing disrupted sectors central to Vietnam’s digital transformation—including government platforms, ICT firms, educational portals, and state-linked media outlets.

From deepfake-driven disinformation campaigns to custom malware disguised as AI productivity tools, threat actors exploited gaps in outdated CMS platforms, unsecured IoT devices, and social engineering defenses. Nation-state groups like APT41 and Earth Estries shifted their focus to Vietnam’s telecom backbone and cloud infrastructure, signaling an alarming trend in geopolitical cyber operations.

What emerges is a threat landscape that is no longer just about disruption—but about control, surveillance, and influence. As underground markets rapidly regionalize, Vietnam’s data, digital identity, and public trust have become prime commodities.