Vietnam — Cyber Threat Profile
Vietnam faces sustained and sophisticated cyber threats, primarily from Chinese state-sponsored actors linked to South China Sea territorial disputes. Confirmed active threat groups include Mustang Panda, APT31, APT41, Grayling, and SharpPanda. Vietnam ranked among the top 10 globally for cyberattack volume in 2024. The Ministry of Information and Communications oversees national cyber strategy, and Vietnam is expanding its internet infrastructure aggressively, partnering with SpaceX for Starlink satellite services and targeting universal 5G coverage by 2030. Vietnam hosted the signing ceremony for the UN Convention on Cybercrime in Hanoi in 2025. The country's extensive and rapidly growing internet infrastructure, covering 95.- National CERT/CSIRT: VNCERT/CC (Vietnam Cybersecurity Emergency Response Teams / Coordination Center)
- World Cybercrime Index 2024 (origin significance): 1.59 / 100, #22 worldwide
- Secure Internet servers per 1M people (2024): 5,733.7 (source: World Bank)
- Internet users (2024): 84.2% of population (source: World Bank)
Latest Vietnam coverage
- Vietnam's Mat Bao and Thai Lion Air land on leak sites 2026-10-04 · Cyber Incidents
- RedHook Android trojan turns debugging tools into a takeover path 2026-07-10 · Cyber Incidents
- APT32's Multi-Stage macOS Trojan Innovates on Crimeware Scripting Techniques 2026-02-16 · Nation-State
Threat actors targeting Vietnam
- 1937CN APT
- Cycldek APT
- Mustang Panda APT
- Naikon APT
- SharpPanda APT
- The Gentlemen Ransomware · 5 incident(s)
- Nova Ransomware · 4 incident(s)
- Krybit Ransomware · 3 incident(s)
- N0n Ransomware · 3 incident(s)
- Qilin Ransomware · 3 incident(s)
- Stormous Hacktivist · 3 incident(s)
- DragonForce Ransomware · 2 incident(s)
- FunkSec Ransomware · 2 incident(s)
- Hunters International Ransomware · 2 incident(s)
- INC Ransom Ransomware · 2 incident(s)
- KillSec Ransomware · 2 incident(s)
- LockBit Ransomware · 2 incident(s)
- NightSpire Ransomware · 2 incident(s)
- RansomHub Ransomware · 2 incident(s)
- ShinyHunters Ransomware · 2 incident(s)
- 3AM Ransomware · 1 incident(s)
- BianLian Ransomware · 1 incident(s)
- Black Basta Ransomware · 1 incident(s)
- Black X Ransomware · 1 incident(s)
- Emperador Ransomware · 1 incident(s)
- Gunra Ransomware · 1 incident(s)
- HYFLOCK Ransomware · 1 incident(s)
- L Group Ransomware · 1 incident(s)
- Payload Ransomware · 1 incident(s)
- RansomExx Ransomware · 1 incident(s)
- Rhysida Ransomware · 1 incident(s)
- Vexy Ransomware Ransomware · 1 incident(s)
- ToddyCat APT
Most targeted sectors
- Manufacturing 9 incident(s)
- Technology 6 incident(s)
- Financial Services 5 incident(s)
- Business & Professional Services 4 incident(s)
- Education & Research 4 incident(s)
- Transportation & Logistics 4 incident(s)
- Agriculture & Food 3 incident(s)
- Construction 3 incident(s)
- Energy & Utilities 2 incident(s)
- Healthcare 2 incident(s)
- Hospitality & Tourism 2 incident(s)
- Real Estate 2 incident(s)
Recent claimed incidents
- dangvuongcac 2026-10-21
- Nam Dinh Vu Port (container terminal operations) 2026-10-12 · Transportation
- Vietnam SuperPort 2026-10-09 · Transportation
- Mat Bao Corporation 2026-10-02 · Technology
- VUS - The English Center 2026-09-30 · Education
- Quy Nhon University 2026-09-19 · Education
- Vietnamese betting operator (GC789 network / Boundless TE) 2026-09-18 · Other
- BeLi Teacher / FSC education centers (AWS) 2026-09-18 · Education
- Dang Invest Group 2026-09-15 · Financial Services
- FE CREDIT 2026-08-30 · Financial Services
- Vascara (Global Fashion One Member Company Limited) 2026-08-26 · Retail & E-Commerce
- Sanko Fastem (Vietnam) Co., Ltd. 2026-08-26
- Vietnam Electricity(EVNHANOI) 2026-08-22 · Energy & Utilities
- Groupe BPCE 2026-08-07 · Financial Services
- l-a.com.vn 2026-08-07