{"id":38649,"date":"2020-12-11T16:45:15","date_gmt":"2020-12-11T16:45:15","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/31841\/Facebook-Tracks-OceanLotus-Hackers-To-IT-Firm-In-Vietnam.html"},"modified":"2020-12-11T16:45:15","modified_gmt":"2020-12-11T16:45:15","slug":"facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/","title":{"rendered":"Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/static.reuters.com\/resources\/r\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800\" class=\"ff-og-image-inserted\"><\/div>\n<div class=\"ArticleBody-byline-container-3H6dy\" readability=\"12.692307692308\">\n<p class=\"Byline-byline-1sVmo ArticleBody-byline-10B7D\">By <a class=\"TextLabel__text-label___3oCVw TextLabel__black-to-orange___23uc0 TextLabel__serif___3lOpX Byline-author-2BSir\" href=\"https:\/\/www.reuters.com\/journalists\/jack-stubbs\" target=\"_blank\" rel=\"noopener noreferrer\">Jack Stubbs<\/a>, <a class=\"TextLabel__text-label___3oCVw TextLabel__black-to-orange___23uc0 TextLabel__serif___3lOpX Byline-author-2BSir\" href=\"https:\/\/www.reuters.com\/journalists\/james-pearson\" target=\"_blank\" rel=\"noopener noreferrer\">James Pearson<\/a><\/p>\n<div class=\"ArticleBody-read-time-and-social-2VOIr\">\n<p class=\"TextLabel__text-label___3oCVw TextLabel__gray___1V4fk TextLabel__small-all-caps-spaced-out___3O9H4 ReadTime-read-time-1s3CG ArticleBody-read-time-29pGN\">4 Min Read<\/p>\n<\/div>\n<\/div>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">LONDON\/HANOI (Reuters) &#8211; Cybersecurity investigators at Facebook have traced a hacking group long suspected of spying on behalf of the Vietnamese government to an IT company in Ho Chi Minh City.<\/p>\n<figure class=\"WithCaption-container-Aau3d WithCaption-outside-2Jvzs\" readability=\"8\">\n<p><figcaption>The now-suspended Facebook page for the CyberOne Security is seen in this photo illustration taken in Washington, U.S., December 10, 2020. Picture taken December 10, 2020. REUTERS\/Raphael Satter\/Photo Illustration<\/figcaption><\/p>\n<\/figure>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">The announcement on Friday is the first time Facebook has publicly exposed an offensive hacking operation and, if confirmed, would be a rare case of suspected state-backed cyberspies being tracked to a specific organisation.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">The hackers, known as OceanLotus or APT32, have been accused for years of spying on political dissidents, businesses and foreign officials. Reuters reported this year that the group had attempted to break into China\u2019s Ministry of Emergency Management and the government of Wuhan as the COVID-19 outbreak first spread.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">Facebook said it had found links between cyberattacks previously attributed to OceanLotus and a Vietnamese company called CyberOne Group, which lists an address on a sidestreet in a commercial district of Ho Chi Minh city.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">CyberOne Group denied being connected to the hackers.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">\u201cWe are NOT Ocean Lotus,\u201d a person operating the company\u2019s now-suspended Facebook page said when contacted by Reuters. \u201cIt\u2019s a mistake.\u201d<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">Vietnam\u2019s foreign ministry, which handles enquiries from international media, did not immediately respond to a request for comment. The ministry has previously denied connections to OceanLotus attacks.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">Facebook said the hackers had used its platforms to carry out a range of cyberattacks, some of which employed fake accounts to trick targets by posing as activists, businesses and possible love interests.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">Nathaniel Gleicher, Facebook\u2019s head of cybersecurity policy, said his team had found technical evidence that linked CyberOne\u2019s Facebook page to accounts used in the hacking campaign, as well as to other OceanLotus attacks.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">He declined to detail the exact evidence, saying to do so would make the group more difficult to track in the future. But he said it included online infrastructure, malicious code, and other hacking tools and techniques.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">\u201cThe actors in this space use some very defined techniques and if we are too public about how we observe those, it really does harm our ability to catch more of this,\u201d Gleicher said.<\/p>\n<h2 class=\"Headline-headline-2FXIq Headline-black-OogpV ArticleBody-heading-3h695\">MOVIE THEATRE AND YOGA<\/h2>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">Although OceanLotus has not gained the level of notoriety in the West as some suspected Chinese and Russian state-backed hacking operations, it has been prolific in southeast Asia.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">Ben Read, a senior manager at U.S. cybersecurity firm FireEye, and Marc-\u00c9tienne L\u00e9veill\u00e9, a researcher at Slovakian software security group ESET, said the hacking activity uncovered by Facebook matched operations attributed to OceanLotus.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">Read said OceanLotus had been active since at least 2013 and had \u201call the hallmarks of a substantial state-backed organisation acting in support of Vietnamese government\u201d.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">Facebook said it did not have sufficient evidence to attribute OceanLotus beyond CyberOne Group, which it said has also used the names CyberOne Security, CyberOne Technologies, H\u00e0nh Tinh Company Limited, Planet and Diacauso.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">CyberOne reveals little information about itself on its website, saying only that it has around 200 employees providing a range of \u201cessential security technologies\u201d.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">A careers page that was removed shortly after Reuters contacted the company advertised positions for people with hacking skills and experience in malware analysis. Recruiters boasted of a generous benefits package, including free meals, a mini movie theatre and after-work yoga.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">In Vietnam, Facebook is navigating a standoff with government officials who have threatened to ban it if it does not agree to censorship demands.<\/p>\n<p class=\"Paragraph-paragraph-2Bgue ArticleBody-para-TD_9x\">Reuters reported in April that Facebook had complied with a government request to increase its censorship of \u201canti-state\u201d posts after its servers in Vietnam were taken offline, slowing traffic there to a crawl.<\/p>\n<div readability=\"4.9765625\">\n<div class=\"Attribution-attribution-Y5JpY\" readability=\"7\">\n<p>Additional reporting by Raphael Satter in Washington; Editing by Peter Graff<\/p>\n<\/div>\n<\/div>\n<p>READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/31841\/Facebook-Tracks-OceanLotus-Hackers-To-IT-Firm-In-Vietnam.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[277],"tags":[9092],"class_list":["post-38649","post","type-post","status-publish","format-standard","hentry","category-cybersecurity-blogs","tag-headlinehackerfacebooksocialvietnam"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-12-11T16:45:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/static.reuters.com\/resources\/r\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam\",\"datePublished\":\"2020-12-11T16:45:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/\"},\"wordCount\":655,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/static.reuters.com\\\/resources\\\/r\\\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800\",\"keywords\":[\"headline,hacker,facebook,social,vietnam\"],\"articleSection\":[\"CyberSecurity Blogs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/\",\"name\":\"Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/static.reuters.com\\\/resources\\\/r\\\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800\",\"datePublished\":\"2020-12-11T16:45:15+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/#primaryimage\",\"url\":\"https:\\\/\\\/static.reuters.com\\\/resources\\\/r\\\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800\",\"contentUrl\":\"https:\\\/\\\/static.reuters.com\\\/resources\\\/r\\\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,hacker,facebook,social,vietnam\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinehackerfacebooksocialvietnam\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/","og_locale":"en_US","og_type":"article","og_title":"Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-12-11T16:45:15+00:00","og_image":[{"url":"https:\/\/static.reuters.com\/resources\/r\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam","datePublished":"2020-12-11T16:45:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/"},"wordCount":655,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/#primaryimage"},"thumbnailUrl":"https:\/\/static.reuters.com\/resources\/r\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800","keywords":["headline,hacker,facebook,social,vietnam"],"articleSection":["CyberSecurity Blogs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/","url":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/","name":"Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/#primaryimage"},"thumbnailUrl":"https:\/\/static.reuters.com\/resources\/r\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800","datePublished":"2020-12-11T16:45:15+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/#primaryimage","url":"https:\/\/static.reuters.com\/resources\/r\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800","contentUrl":"https:\/\/static.reuters.com\/resources\/r\/?m=02&amp;d=20201211&amp;t=2&amp;i=1544176561&amp;r=LYNXMPEGBA017&amp;w=800"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/facebook-tracks-oceanlotus-hackers-to-it-firm-in-vietnam\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,hacker,facebook,social,vietnam","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinehackerfacebooksocialvietnam\/"},{"@type":"ListItem","position":3,"name":"Facebook Tracks OceanLotus Hackers To IT Firm In Vietnam"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/38649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=38649"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/38649\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=38649"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=38649"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=38649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}