Vietnam
Southeast Asia · capital Hanoi · cyber picture, physical security and relations with the EU on one page
Who targets Vietnam
All 12 actors →
China (8) · Vietnam (1) · 
North Korea (1) · 
Russia (1)| Actor | Suspected sponsor | In its news · 30d | Techniques |
|---|---|---|---|
| APT32 | Vietnam |
— | 78 |
| Earth Lusca | China |
— | 44 |
| APT37 | North Korea |
— | 29 |
| ToddyCat | not attributed | — | 25 |
| Inception Framework | Russia |
— | 22 |
| LOTUS PANDA | China |
— | 21 |
| Naikon | China |
— | 14 |
| Aoqin Dragon | China |
— | 9 |
| APT30 | China |
— | 2 |
| BRONZE EDGEWOOD | China |
— | — |
| GOBLIN PANDA | China |
— | — |
| Grayling | China |
— | — |
Cyber news 30 days
Every cyber article that mentions it →- NCB warns of 3 tricks to steal card and account information VI
- Can malware still read Gmail after changing the password? VI
- Initiate legal proceedings against cyber gangster Binh 'troc' for usury VI
- Actors from 'Human Trafficking Camp' join police to identify cybercrime tactics VI
- Warning about scams and information theft from 'online temple visits' VI
- Reader's lens: Handle it immediately when citizens' data is leaked VI
- Gia Lai police stop online scam to 'receive foreign gifts' VI
- Da Nang City Police win first prize in national cybercrime investigation competition VI
- Warning of 5 common fraud tactics in cyberspace VI
- Citizens hope for timely handling of online fraud behaviors VI
Exploited vulnerabilities in its news 90 days
- CVE-2026-109618
- CVE-2026-109619
- CVE-2026-0257 Ransomware
- CVE-2026-63077 Ransomware
- CVE-2026-45659 Ransomware
- CVE-2026-59310 Ransomware
- CVE-2025-14733 Ransomware
- CVE-2026-15410 Ransomware
Incidents
Register →- Elevated Data leak in Vietnam exposes 9 years of Korean airline passenger records Detected
- Moderate Mảnh đất màu mỡ cho lừa đảo và lộ lọt thông tin Detected
- High North Korean cybercriminals linked to $352M heist from crypto exchange Bitget Detected
- Critical Vietnam-linked APIS database exposes 220.8 million passenger and crew records
- High SecFlow Campaign Uses Commercial AI Agents Against Taiwanese and Indonesian Government Targets
- Critical Four nation-state actors deploy shared BlueMoon Chrome and Windows zero-day exploit kit within twelve days
- High China-linked SecFlow campaign uses AI agents against Asian government and industrial targets
- High Earth Alux Espionage Campaign Targets ASEAN Defense Ministries
Cyber threat landscape as described in the country report of Nov 12 Machine-generated
During this reporting period, Vietnam's cybersecurity posture was primarily characterized by its strong diplomatic condemnation of external cyberattacks and domestic efforts to manage public perception of cyber threats. On November 5, 2026, Vietnam's Ministry of Foreign Affairs vehemently condemned cyberattacks targeting European supermarket refrigeration systems, highlighting the expanding scope of cybersecurity risks beyond data systems to critical infrastructure and supply chains. This stance aligns with Vietnam's role as the host of the UN Convention against Cybercrime (Hanoi Convention) and its commitment to international cooperation in combating cybercrime through information exchange, early-warning mechanisms, and cross-border investigations.
Domestically, the Department of Cybersecurity and High-Tech Crime Prevention and Control (A05) issued a warning on November 7, 2026, to counter misinformation regarding recommendations for emergency supplies, which had been misinterpreted as warnings of imminent conflict or disaster. This indicates a proactive government response to potential cyber-enabled information manipulation and its impact on public stability. While no new specific cyber incidents directly targeting Vietnam were reported within this week, a broader context from October 22, 2026, indicates that Vietnam faces the highest volume of cyberattacks in Southeast Asia, with its financial sector experiencing an attack every 57 seconds in 2025. This underscores the persistent and significant cyber threat environment in the country.
Background: Threat actors known to target Vietnam include APT32 (Vietnam-linked), Earth Lusca (China-linked), APT37 (North Korea-linked), ToddyCat, Inception Framework (Russia-linked), LOTUS PANDA (China-linked), Naikon (China-linked), and Aoqin Dragon (China-linked). No exploited vulnerabilities named in the reference data (CVE-2026-109618, CVE-2026-109619, CVE-2026-0257, CVE-2026-63077, CVE-2026-45659, CVE-2026-59310) were reported as exploited in Vietnam during this specific period.
Hotspots from the country report of Nov 12
Machine-generated- Elevated Hanoi — Site of joint counter-terrorism exercise with China, upcoming Russian parliamentary visit, and Vietnam International Defense Expo rehearsals.
- High East Sea (South China Sea) — Ongoing maritime security concerns, U.S. assistance to Vietnam's maritime capabilities, and potential for gray-zone activities.
- Moderate Bien Hoa Air Base Area — Site of ongoing dioxin remediation efforts, a key area of U.S.-Vietnam war legacy cooperation.
- Moderate Washington D.C., USA — Location of the 14th Vietnam-U.S. Defense Policy Dialogue, discussing defense cooperation and war legacy.
- Elevated Europe (Supermarket Cyberattacks) — Region targeted by cyberattacks condemned by Vietnam, highlighting global cybersecurity threats.
Threat level last reports
Machine-generatedLatest country report
Read the full report →Relations with the EU
Factsheet →Mentioned 3 times in latest briefing. Last updated: 2026-08-22
- 20 EU cooperation projects · 18 active
- 1 EU Digital & ICT project: cyber activity here touches EU digital cooperation
- 3 trade or cooperation agreements on record
EU relations and implications country report of Nov 12
Machine-generatedVietnam's relations with the European Union during this period were primarily highlighted by its strong condemnation of cyberattacks targeting European infrastructure. On November 5, 2026, Foreign Ministry Spokesperson Pham Thu Hang explicitly denounced cyberattacks on supermarket refrigeration systems across Europe, emphasizing Vietnam's commitment to combating cybercrime and protecting critical infrastructure. This statement reinforces Vietnam's role as the host of the UN Convention against Cybercrime (Hanoi Convention) and aligns with the EU's interest in global cybersecurity cooperation. The EU's relationship outlook with Vietnam was assessed as "Stable" in August 2026, and Vietnam's proactive stance on cybersecurity contributes positively to this stability, particularly given the EU's cooperation projects in Development Cooperation, Energy & Green Transition, and digital projects like SCOPE Digital — Copernicus Earth Observation Southeast Asia.
The cybersecurity developments, particularly Vietnam's emphasis on proactive prevention and international information sharing, are directly beneficial for EU interests and cooperation. Enhanced cybersecurity in Vietnam, especially in critical sectors, helps safeguard EU investments and trade in the country, as well as the integrity of shared digital infrastructure. While no specific trade or digital cooperation dialogues with the EU were reported in this exact week, Vietnam's consistent messaging on cybersecurity and its role in international frameworks like the Hanoi Convention demonstrate a shared agenda with the EU on digital security, which is crucial for the success of initiatives like SCOPE Digital.
| Agreement | Type | Budget | Organisation | Period | Status | |
|---|---|---|---|---|---|---|
| ARISE Plus — ASEAN Regional Integration Support | Trade & Cooperation | EUR 94M | ASEAN | 2017–2024 | COMPLETED | Source ↗ |
| ASEAN Customs Transit System (ACTS) | Trade & Cooperation | — | ASEAN | 2020–2025 | ACTIVE | Source ↗ |
| EU-Vietnam Free Trade Agreement (EVFTA) | Free Trade Agreement | — | ASEAN | 2020 | ACTIVE | Source ↗ |
Previous reports
Machine-generated- Vietnam Security Report — November 10, 2026
- Vietnam Security Report — November 09, 2026
- Vietnam Security Report — November 08, 2026
- Vietnam Security Report — November 07, 2026
- Vietnam Security Report — November 06, 2026
- Vietnam Security Report — November 05, 2026
- Vietnam Security Report — November 04, 2026
- Vietnam Security Report — November 03, 2026
- Vietnam Security Report — November 01, 2026
- Vietnam Security Report — October 31, 2026