Cyber Threat Actor: Vietnamese Hackers

The threatactor known by the alias Vietnamese Hackers is based in Viet Nam. In September 2020 the actor was linked to a large‑scale distributed‑denial‑of‑service (DDoS) attack that targeted Hungarian banking and telecommunications services. The attack traffic originated from servers located in Russia, China and Viet Nam. According to reports, the DDoS volume reached roughly ten times the level typical for such incidents. The assault disrupted operations at OTP Bank and caused network interruptions in parts of Budapest. Magyar Telekom characterized the event as one of Hungary’s largest and most complex cyberattacks. The telecommunications provider worked with the affected banks to repel the multi‑wave assault. Normal service was restored by the same afternoon the attack began. The incident highlighted the actor’s ability to generate high‑volume traffic from a geographically distributed botnet. No further details about the actor’s internal structure or motivation were disclosed in the public reporting.

Public sources do not establish a clear state sponsorship or criminal‑consortium affiliation for Vietnamese Hackers. Attribution is limited to the observed use of infrastructure in three countries, without evidence linking the actor to a specific government or organized crime group. The only tactic, technique and procedure (TTP) explicitly referenced in the reporting is the execution of a large‑scale DDoS campaign. No malware families, phishing vectors, or tool‑specific details are mentioned in the available information. Consequently, the actor’s tooling style remains unspecified beyond the reliance on volumetric traffic generation. The September 2020 Hungarian attack serves as the primary publicly reported operation associated with the group. It represents a representative example of the actor’s capacity to disrupt financial and telecom services across borders. No additional campaigns or operations are cited in the provided material. Therefore, the profile is confined to the confirmed facts surrounding this single incident. Any further conclusions about the actor’s broader activities would require additional verified information.