Waspada Digital
Verified developments. Evidence. Practical next steps.
Malaysia-focused intelligence publication
Know what happened and what to do next. We verify Malaysian scam and cybersecurity developments against official sources, then explain the impact, evidence and practical steps clearly.
Public sections
Every published item answers what happened, why it matters, who is affected, what to do and what remains unknown.
Confirmed Malaysian scam developments, official warnings and what consumers should do next.
View section → Cyber AlertsActionable vulnerability and active-exploitation alerts supported by authoritative records.
View section → Breaches and IncidentsConfirmed breaches and security incidents, who is affected and what remains unknown.
View section → Regulation and EnforcementMalaysian regulatory, enforcement and public-safety developments explained clearly.
View section → Practical GuidesPractical steps drawn from authorities, affected organisations and official vendor guidance.
View section → Daily/Weekly BriefingsDaily monitoring roundups and weekly action briefings for Malaysian consumers and SMEs.
View section → Community DiscussionDiscuss published alerts, ask questions and suggest official sources without turning accusations into evidence.
Join the discussion →Latest published intelligence
National Cyber Coordination and Command Centre (NC4) is aware of active exploitation on Barracuda Email Security Gateway (ESG) vulnerabilities that could allow an attacker to gain control of an affected system, install backdoors and exfiltrate data. The impact of these vulnerabilities is critical as it was observed can be utilised as vector for espionage activities.
In light of recent developments in the Middle East, the National Cyber Coordination and Command Centre (NC4) is closely monitoring the cyber campaign centred around this conflict. Multiple hacktivists have reportedly gathered and launched cyber attacks, which, based on historical data, include web defacement, document leaks, and distributed denial of service (DDOS) attacks. NC4 would like to remind System Administrators and Network Administrators to implement adequate cyber security measures to ensure systems and networks are always secure.
On June 27 2017, multiple organisations globally had reported of disruptions attributing to ransomware. Based on initial information received, a variant of Petya ransomware may be responsible for the incidents. National Cyber Coordination and Command Centre is currently monitoring closely for any signs of infection or propagation in Malaysia.
On Oct 24, 2017, a few organisation in Ukraine, Russia, Turkey and Germany had reported of disruptions attributing to ransomware. Based on initial information received, a new variant of WannaCry and NotPetya ransomware known as Bad Rabbit are responsible for the incidents. Further analysis of the ransomware has been carried out and details of the ransomware is explained below. National Cyber Coordination and Command Centre is currently monitoring closely for any signs of infection or propagation in Malaysia.
National Cyber Coordination and Command Centre (NC4) is aware of recent revelation of security vulnerabilities in processors that can be exploited to gather sensitive data from computing devices.
National Cyber Coordination and Command Centre (NC4) and MyCERT has received numerous reports of smartphones users being infected with malware through a phishing campaign involving Bank Negara Malaysia (BNM).
National Cyber Cyber Security Agency (NACSA) has detected various attack attempts targeting numerous organisations in Malaysia recently. The type of attacks detected varies; including Intrusion, Intrusion Attempts, Distributed Denial of Service (DDoS), Web Defacement and Malware Infections.
Security researcher at CISCO's Talos Intelligence has discovered an advanced widespread use of a sophisticated modular malware system called "VPNFilter".
For consumers
Understand scam approaches, affected services, official reporting channels and the limits of what is currently known.
For SMEs
See affected software, exploitation status, patch sources and operational steps without wading through raw advisories.