Vietnamese researchers detail nine-layer malware targeting organisations
The VNPT Cyber Immunity team also developed detection rules and tools to help identify similar threats earlier.
Researchers at VNPT Cyber Immunity (VCI) presented findings on a malware implant targeting Vietnamese organisations at the Virus Bulletin Conference in Seville, Spain, held from October 14 to 16. Their work examined a framework with nine layers designed to conceal its operations.
Luong Minh Anh, who leads VCI’s malware reverse engineering team, presented the study. The researchers said the implant’s layered design allows it to keep removing evidence of its activity while avoiding conventional security defences.
By reverse engineering the implant, the team identified how it was structured, how it operated and the techniques it used to remain hidden. The researchers also built tools and technical detection rules intended to help spot comparable threats earlier.
A VCI representative said practical use of the findings remained the team’s main objective. Knowledge gained from the investigation is being incorporated into monitoring and defence systems, with the initiative aimed at improving protection for organisations and institutions across Vietnam.
