Active defense against AI, deepfake with international standard Red Team

Currently, AI-driven cyber attacks such as automated phishing, deepfake fraud, and AI-based exploits are developing at a rapid pace.

According to CMC Telecom's Threat Intelligence system, in the first half of 2025 alone, the number of AI-generated phishing emails in Vietnam increased by 68%, polymorphic malware increased by 60%, while incidents related to deepfakes and impersonation increased by 71%. Internationally, the average time from hacker attack to successful intrusion is only 48 minutes - a speed that makes it difficult for traditional defenses to respond in time.

Proactive defense against AI, Deepfake

Cyber attackers are increasingly leveraging the power of artificial intelligence (AI) to increase the scale and speed of sophisticated phishing campaigns. Phishing emails with malicious code are being created in large numbers, while fake websites are appearing everywhere on social networks. Deepfake technology has allowed the image and voice of business leaders to be perfectly simulated, making it easy for employees to be fooled into carrying out requests from "real virtual leaders".

Faced with these increasingly complex challenges, Red Teams - security experts who simulate real-life attacks - help businesses proactively defend, detect and address security weaknesses before attackers exploit them. Red Teams simulate attack scenarios using social engineering to accurately assess employees' response capabilities and level of information security awareness.

The Red Team's core mission is to objectively and comprehensively assess the current defense system, detect blind spots in the monitoring and incident response of the enterprise. A professional Red Team always applies advanced techniques, based on international frameworks such as MITRE ATT&CK and Cyber Kill Chain, and constantly updates the latest attack trends, including AI techniques.

Red Team assessments not only focus on technical aspects but also extend to the safety of processes and human responses within the organization. Through this, Red Teams provide recommendations to optimize defense systems, enhance the capacity and coordination of Blue Teams effectively. Most importantly, Red Teams play a key role in helping businesses build proactive defense strategies, enhance early detection capabilities and respond flexibly to increasingly sophisticated threats.

Standardize processes using international frameworks

According to security experts from CMC Telecom, to ensure that the Red Team campaign is realistic and highly effective, CMC Telecom is currently applying widely recognized international frameworks such as CREST, NIST, SANS Institute, MITRE ATT&CK and TIBER-EU. MITRE ATT&CK. These frameworks provide a comprehensive knowledge base of practical attack tactics and techniques, helping experts build scenarios based on the characteristics of dangerous attack groups.

Meanwhile, TIBER-EU - a framework developed by the European Central Bank that guides the implementation of Red Team exercises based on threat intelligence, especially for the financial sector. Applying these standards helps CMC Telecom deploy transparent, systematic campaigns and easily compare results, providing accurate and practical assessments for customers.

It is known that in July 2025, CMC Telecom officially received the CREST certificate and became a member of this organization. This is an important milestone marking CMC Telecom's professional capacity and commitment to improving the quality of Red Team services. CREST is an international non-profit organization that provides professional certificates to individuals and organizations, ensuring that cybersecurity testing activities, including Red Teaming, are carried out according to the highest technical and ethical standards.

International standard Red Team - the foundation of strength of CMC Telecom

In Vietnam, CMC Telecom currently owns a professional Red Team, equipped with excellent knowledge, skills and practical experience. CMC Telecom experts are equipped with many prestigious international certificates such as CREST, CISM, CRISC, CISA, CTIA, OSCP, OSEP, OSWE and many other specialized certificates, affirming high technical level and compliance with professional ethics in the field of network security.

In particular, CMC Telecom's team of security experts has been continuously honored on Apple's "Hall of Fame" for discovering and reporting many serious vulnerabilities on global technology platforms. This achievement not only demonstrates combat capability but also affirms CMC Telecom's trust and reputation on the regional and international network security map.

The combination of a team of experienced experts, standard processes and advanced technology has helped CMC Telecom accompany customers in preventing and responding to all risks and challenges of network security.

Thuy Nga

Source: https://vietnamnet.vn/phong-thu-chu-dong-truoc-ai-deepfake-cung-red-team-chuan-quoc-te-2431357.html