The information was revealed at the Vietnam Cyber ​​Security Day 2024, organized by the Vietnam Information Security Association in collaboration with the Hanoi Information Security Authority.

According to OPSWAT, as digital transformation progresses, cyber-attacks, espionage and cyber-terrorism targeting critical IT systems and operational technology (OT) are on the rise. Ensuring cyber security has become a top priority for nations. Especially for Vietnam, which is undergoing a robust digital transformation, protecting critical networks is of utmost importance.

La Manh Cuong, Vice President Research and Development and General Manager of OPSWAT Vietnam

At the plenary session, La Manh Cuong, Vice President Research and Development and Director General of OPSWAT Vietnam, discussed two prominent cyber attacks on critical OT systems around the world: Stuxnet (2010) and FrostyGoop (2024). Using these examples, OPSWAT’s cybersecurity expert proposed effective and comprehensive solutions to counter cyber attacks on critical IT and OT systems.

Stuxnet is sophisticated malware that spread via USB into the disrupted air network of Iran’s Natanz nuclear facility in June 2010. It targeted Siemens’ SCADA (Supervisory Control and Data Acquisition) systems used at the site, manipulating centrifuge speeds to dangerous levels over time what a mask abnormal activity on monitoring screens. As a result, nearly 1,000 centrifuges were damaged, disrupting uranium enrichment and delaying Iran’s nuclear program by a decade.

This critical industrial cybersecurity attack was discovered in April 2024. The malware attacked a local power company, leaving 600 residential buildings without heating for two days. Targeting industrial control systems (ICS) and OT environments, FrostyGoop used the Modbus protocol – a common ICS standard – to interact and interrupt operations. Hackers sent malicious Modbus commands to control systems, causing system malfunctions and failures. This event alarmed the cybersecurity community, highlighting vulnerabilities in poorly segmented or inadequately monitored ICS environments.

In both cases, attackers used similar methods to infiltrate and attack organizations’ OT networks. To counter these threats, Cuong recommended using OPSWAT’s MetaDefender kiosk to scan and block malware on portable storage devices, ensuring that data is sanitized before entering organizational networks.

For complete protection, he suggested organizations continuously update security patches and deploy MetaDefender Netwall for secure data transfer in OT environments. In addition, he supported the implementation of the MetaDefender Industrial Firewall as the final layer of defense to protect ICS, OT and SCADA systems.

OPSWAT presents its products at Vietnam Cyber ​​​​Security Day 2024. Photo: OPSWAT

Cuong emphasized the importance of strengthening IT-OT security and continuous monitoring to detect and mitigate similar threats. “The Stuxnet and FrostyGoop incidents serve as a wake-up call for industrial organizations to invest in cybersecurity measures, particularly for critical infrastructure such as power plants, water systems and manufacturing facilities,” he said.

He also introduced the MetaDefender platform, designed to protect critical IT-OT networks globally. This solution provides complete network security, helping organizations address the concerns of today’s dangerous cyber threats.

In addition to the workshop, OPSWAT presented a series of cyber security solutions for IT and OT, simulating cyber attacks on nuclear power plants and other critical IT and OT systems. Cyber ​​security experts have demonstrated OPSWAT solutions to successfully prevent these attacks.

OPSWAT now welcomes cybersecurity experts, engineers and students to explore its technologies at the Critical Infrastructure Protection Laboratory (CIP Lab) located at its Vietnam offices in Ho Chi Minh City and Hanoi.

Over the past 20 years, OPSWAT, a global leader in IT, OT and ICS critical infrastructure cyber security, has continuously developed an end-to-end solutions platform that provides organizations and enterprises in the public and private sectors with the critical edge needed to- and protect the compound. networks and ensure compliance.

Powered by an “Untrusted file. Trust no device.”, OPSWAT solves the challenges of customers around the world with zero-trust solutions and proprietary technologies at every level of their infrastructure, securing networks, data and devices and preventing known and unknown threats, zero-day attacks and malware.

OPSWAT signs a strategic partnership with CMC Cyber ​​Security OPSWAT, a global leader in critical infrastructure protection and cyber security solutions, on December 7 opened a new office in Hanoi and signed a strategic partnership agreement with CMC Cyber ​​​​Security Co., Ltd., making new moves to- and expand footprint in Vietnam.

OPSWAT presents advanced cyber security solutions at Vietnam Security Summit 2024 Cyber ​​security experts from OPSWAT, a pioneer in critical infrastructure protection, shared insights on deploying advanced security technologies to protect information systems and critical infrastructure at the 6th Security Summit on May 30 from Vietnam 2024.

OPSWAT acquires InQuest to strengthen cyber security capabilities Cybersecurity solutions provider OPSWAT announced on August 7 the acquisition of InQuest to enhance its capabilities.