According to Bkav, in 2024, 155,640 computers in Vietnam were attacked by ransomware - malicious software that encrypts data to extort ransom payments.

The financial damage to organizations in Vietnam amounts to tens of trillions of VND (hundreds of millions of USD), including ransom payments, lost revenue from system downtime, customer loss, and damaged reputation.

60% of Vietnamese businesses lack adequate cybersecurity solutions

During a recent assessment of cybersecurity in Vietnamese organizations on March 25, Bkav reported that ransomware has become a nightmarish threat throughout 2024 and the early months of 2025.

According to Bkav's statistics, the damage caused by ransomware in 2024 has been immense, with several cases illustrating the severity. On the very first day of a ransomware attack, one company lost more than 100 billion VND (approximately $4.1 million), while another reported losses of up to 800 billion VND (about $32.9 million).

However, experts note that these visible losses are just the tip of the iceberg. In recent years, requests for ransomware assistance have flooded authorities and businesses, indicating the scale and severity of the problem.

Growing sophistication and risks of ransomware

Bkav's research also revealed that virus activity is becoming increasingly dangerous and sophisticated, with well-organized attack strategies. Ransomware often targets businesses with hefty ransom demands, while Advanced Persistent Threats (APTs) stealthily spread within organizations to steal sensitive intelligence.

"Every day, millions of new virus samples appear, causing devastating damage. Unfortunately, around 60% of businesses in Vietnam lack adequate cybersecurity solutions," said Nguyen Dinh Thuy, Head of Bkav’s Malware Research Department.

According to Thuy, many agencies and businesses that sought Bkav’s help during ransomware incidents either did not have antivirus software installed or relied on basic foreign antivirus solutions without close expert support.

Many companies also depend on basic built-in antivirus features from operating systems, which are insufficient against modern, sophisticated malware.

"The built-in antivirus on operating systems only provides the most basic functions and cannot fully protect users from advanced threats like APTs or ransomware, which embed deeply into systems to steal data or demand ransom," Thuy explained.

Ongoing threats: APT and ransomware attacks

Experts from Bkav warned that APT spyware and ransomware continue to lurk within many systems in Vietnam, waiting for the right moment to strike. Organizations must urgently improve their cybersecurity awareness and adopt professional measures to safeguard their networks.

Hoang Duc Hoan, a cybersecurity monitoring expert from VSEC, noted that ransomware remains one of the biggest threats in 2025, with attacks becoming more sophisticated and highly targeted.

"Attack groups will not only encrypt data and demand ransoms but also steal sensitive information and threaten to expose it if payment is not made," Hoan said.

In some cases, ransomware could be used to target critical infrastructure, such as hospitals, energy systems, and transportation networks, posing severe risks to society and the economy.

Rising number of cyberattacks

A cybersecurity survey conducted by the National Cybersecurity Association (NCA) at the end of 2024 revealed a significant increase in cyberattacks on agencies and businesses, with more than 659,000 incidents reported.

In 2024, 46.15% of survey respondents reported being attacked at least once during the year, while 6.77% faced frequent attacks. Notably, APT and ransomware remained the most common attack methods, accounting for 26.14% and 14.59% of all incidents, respectively.

Given the rising number and sophistication of cyberattacks, experts recommend that organizations regularly review and address vulnerabilities, implement 24/7 cybersecurity monitoring, and develop clear incident response plans, including regular data backups and recovery strategies to minimize damage when incidents occur.

Van Anh