Vietnam case studies
Ticket #1355: what is known and unknown about a NAS case
Read TUNGTEK's public NAS record through its evidence: received devices, attribution limits and missing data.
Tùng TEKNot independently verifiedAuthors
Author information and relationship with the initiative's founder.
Technical analysis
Do not identify a ransomware family from a file extension alone
Extensions and ransom notes are leads. Attribution requires comparable samples, behavior and timelines, with an explained confidence level.
Tùng TEKVerified
Prevention
Backup 3-2-1-1-0: backups must be paired with restore tests
Understand each part of 3-2-1-1-0 and test whether backups are usable when the primary system fails.
Tùng TEKVerified
Forensic
Forensic timelines: reconstruct incidents from verifiable timestamps
Combine logs, metadata and storage artifacts into a sourced timeline while retaining gaps and clock discrepancies.
Tùng TEKVerified
International
Akira: read the advisory before labeling an incident
AA24-109A is a starting point for technical comparison, not evidence that an individual system is infected with Akira.
Tùng TEKVerified
International
CVE-2024-37085: lessons in ESXi and Active Directory administrator permissions
Reference analysis of Microsoft's 2024 research, with questions for reviewing access and protecting virtualization infrastructure.
Tùng TEKVerifiedRansomware.VN editorial publication
AI-assisted editorial news with checked sources and verification limits; this does not imply personal review.
Publication profile and articlesContent from No.Ransomware.VN
Where a source credits only the initiative, the organizational author No.Ransomware.VN is retained. Articles are not reassigned to an individual without a source byline.
Initiative and content library