In 2022, PetroVietnam Technical Services Corporation (PTSC), a critical entity in Vietnam’s oil and gas sector, fell victim to a ransomware attack orchestrated by the Karakurt group, a cybercriminal syndicate linked to Russian actors. The attack exploited vulnerabilities in PTSC’s network infrastructure, severely disrupting its oilfield services and offshore engineering operations. As a key service provider in Vietnam’s energy industry, PTSC’s compromise posed risks to the nation’s oil and gas production, supply chain integrity, and economic stability. The incident highlighted the vulnerability of vital industrial systems to cyber threats, with potential cascading effects on energy security. While the exact scale of data exfiltration or operational downtime was not fully disclosed, the attack’s targeting of a strategic national asset underscored its high-stakes nature, aligning with broader trends of cybercriminals leveraging ransomware to cripple critical infrastructure for financial and geopolitical gain.