Vietnamese banks issue security warnings over malware and password practices

Several Vietnamese banks, including ABBank, VietinBank, Vietcombank, BIDV, Agribank, and ACB, have issued warnings to customers regarding cybersecurity threats. ABBank specifically alerted users to DarkSword, a new iOS malware variant discovered by security firm iVerify. The malware targets vulnerabilities in iOS versions 18.4 through 18.7, allowing attackers to access passwords, keychain data, notes, photos, crypto wallets, and contact information via infected websites in Safari.

In response to security requirements from the State Bank of Vietnam, CAKE by VPBank is also implementing enhanced security for its Smart OTP transaction authentication. Starting October 30, 2026, CAKE customers will be required to reset their Smart OTP settings within the official application to comply with new safety standards.

Banks are advising customers to avoid using predictable passwords such as birthdays, phone numbers, or repetitive sequences like 123456. Users are urged to update their operating systems immediately, avoid clicking suspicious links, and refrain from saving sensitive information like passwords or recovery phrases in notes or as screenshots.