Information Security Technical Report February 2024

On March 8, 2024, the Department of Information Security issued Technical Report No. 5/BC-CATTT on the Information Security Situation in February 2024 and statistics on data sharing connections on malware and monitoring.

Accordingly, the report has updated:
01 information security warning issued in February 2024:
Document No. 210/CATTT-NCSC: on high-impact and serious security vulnerabilities in Microsoft products announced in February 2024, published daily on February 22, 2024.
Status of implementation of anti-malware and sharing of malicious code data according to Directive 14/CT-TTg in 2018
The Department of Information Security has assigned the National Cyber ​​Security Monitoring Center to support 15 enterprises with anti-malware solutions to connect and share malware data according to Document 2290/BTTTT-CATTT dated July 17, 2018 on instructions for connecting and sharing information about malware between technical systems.
By the end of February 2024, 88 units (63 provinces/cities, 25 ministries/branches) had deployed centralized anti-malware solutions and connected and shared information about malware with the National Cyber ​​Security Monitoring Center (NCSC).

In February 2024, through the connection to share data on malware from 88 units, the Technical System of the National Cyber ​​Security Monitoring Center (NCSC) recorded 79/88 units with regular connections, 79/80 units sharing operating systems of machines (total number of machines is 245,490).

The situation of implementing information security monitoring and connecting to share monitoring data according to Directive 14/CT-TTg in 2019
The Department of Information Security has assigned the National Cyber ​​Security Monitoring Center to support 15 enterprises with information security monitoring solutions to connect and share data according to Document 2973/BTTTT-CATTT dated September 4, 2019 on guiding the implementation of information security monitoring activities in state agencies and organizations.
By the end of February 2024, 87 units (63 Provinces/Cities, 24 Ministries/Sectors) had deployed information security monitoring work and connected to share monitoring data with the National Cyber ​​Security Monitoring Center (NCSC).

In February 2024, through the connection to share monitoring data from 87 units, the Technical System of the National Cyber ​​Security Monitoring Center recorded 70/87 units with relatively complete data sharing connections, 17/87 units lost data sharing connections.

Malware infection situation nationwide
During the month, the Technical System of the National Cyber ​​Security Monitoring Center (NCSC) recorded 364,369 Vietnamese IP addresses in the botnet (down 32.78% compared to January 2024), including 95 IP addresses of state agencies and organizations (6 IP addresses of Ministries/Industries, 89 IP addresses of Provinces/Cities).

Detailed information about IP addresses in the botnet of specialized IT/IT security units at Ministries/Industries, Provinces/Cities can be looked up and updated regularly through the account on the Remote Monitoring System provided by the National Cyber ​​Security Monitoring Center (NCSC). Information from the System can also be referenced and used to evaluate the effectiveness of the centralized malware monitoring and prevention solution being deployed.

For detailed reports, see: 20240301_BCT02_2024.PDF