Security experts two days ago discovered an intentional cyber attack against MONRE, warning that top confidential documents may have been stolen by the attackers.
Nguyen Huu Chinh, director of the Information Technology Agency, has confirmed that the ministry’s information system suffered a cyber attack, but denied that confidential documents were taken.
Chinh insisted that the hackers could not have stolen information from the latest attack, because the infected personal computers were only used for exchanging daily information. Important and confidential data are stored on other systems, which the infected computers were not authorized to connect to.
As soon as MONRE was informed of the attack, its workers immediately scanned theservers that store important data and were relieved to find that there were no major problems. Only one server was found to be infected with spyware, and the problem was fixed.
After analyzing the tracks of the spyware, the agency’s experts found that the server from which it originated is located in the US, not in China as initially thought. However, Chinh admitted that this does not mean that the hackers were from the US. It is possible that the hackers, who could be anywhere in the world, leased a domain name and server in the US to conduct the attack and steal information.
The attack against MONRE’s information systems has once again given security experts more reason to criticize state management agencies for their lax attention to security measures. In the MONRE case, hackers used a familiar method of attack which could have easily been prevented.
Chinh declined to respond directly to the criticism, but said that MONRE always requires its officers to follow strict security procedures set by the experts.
