Vietnamese government and education websites were among the nearly 750 victims of a series of Chinese cyber-attacks launched in late August.
A post that went up Friday on SecurityDaily --a forum on the Vietnam Information Security Association's security.net-- said the attacks began on August 28 when hackers took control and changed the interfaces of 289 websites.
Another 84 websites were hacked on September 2 and a further 373 on September 4, most of which belonged to businesses.
The list of victims, which included eight government and 40 school websites, was posted on the hackers’ site: 1937cn.net.
SecurityDaily described the site as “an Internet security forum designed to respond to cyber-attacks on Vietnamese websites.”
A photo posted by Vietnamese cyber security page SecurityDaily on September 5, 2014 shows a message left by Chinese hackers on a Vietnamese page.
Another major Chinese hacking group, Sky-Eye, participated in an attack on nearly 100 of the websites, the Vietnamese page said.
More than half the victim sites remained inaccessible by Friday morning.
Ngo Tuan Anh, vice chairman of Hanoi-based Internet security firm Bkav, said his firm's system had detected the recent Chinese cyber-attacks.
His center counted more than 450 websites that were defaced or totally disabled.
Anh said most of the websites were small and protected by minimal security.
The hackers brought the sites down by attacking their shared server, he said.
Nguyen Hong Son, Bkav’s research chief, said the hackers took advantage of the loopholes in HTTP PUT command on the WebDAV directory.
Website managers need to disable the command and use a different directory for protection, Son said.