Scammers forge logos, seals, and leaders' signatures of the Ho Chi Minh City Stock Exchange (HoSE) and the State Securities Commission (SSC) to entice investors into transferring money. Bkav recommends that citizens absolutely do not trust "investment packages" allegedly licensed by HoSE.

Scammers fabricate sets of documents including: "Capital Guarantee Confirmation Document", "Investment Trust License" with promises of abnormal profits (18–20 times the invested amount)... and then lure users into accessing links or downloading application files (.APK/.EXE extensions) of unknown origin via Zalo and Telegram. These files and links contain malware capable of automatically stealing victims' login credentials, OTP codes, and control of their bank accounts.

In a recent alert, HoSE affirmed that it does not release direct individual trading apps, does not accept investment trusts, and does not issue profit guarantee commitments.

Bkav Cybersecurity experts advise citizens:

• Absolutely do not access links inviting investments, and do not download financial apps outside the App Store and Google Play systems.

• Enable the Real-time Protection feature on antivirus software so that the system can automatically identify, block malware variants, and promptly warn against malicious links.

• Install antivirus software and comprehensive anti-malware solutions, as the built-in software bundled with operating systems is only designed to meet basic protection needs and is not capable of countering modern ransomware and viruses designed for long-term persistence and deep system infiltration.

Bkav