Malaysia — Cyber Threat Profile
Malaysia operates an advanced cybersecurity ecosystem anchored by CyberSecurity Malaysia and national CERT structures. Strategic priorities include financial sector security, government network protection, and critical infrastructure resilience. The country maintains comprehensive cyber legislation and active participation in ASEAN cyber cooperation initiatives. Malaysia faces both cybercrime and state-sponsored espionage risks due to its economic and technological profile. Investments in cyber workforce development, digital trust frameworks, and emerging technology security governance continue to strengthen national defensive capability and regional cyber leadership positioning.- National CERT/CSIRT: MyCERT
- Data protection authority: Personal Data Protection Department (PDPD) / Ministry of Communications and Multimedia Commission (MCMC) (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.33 / 100, #26 worldwide
- Secure Internet servers per 1M people (2024): 7,475.5 (source: World Bank)
- Internet users (2024): 98.0% of population (source: World Bank)
Latest Malaysia coverage
- Fake Malaysian parking site hacks iPhones with no tap 2026-09-05 · Cyber Incidents
Threat actors targeting Malaysia
- APT40 APT
- Earth Kurma APT
- knaithe APT
- Lotus Blossom APT
- Mustang Panda APT
- ToddyCat APT
- Qilin Ransomware · 24 incident(s)
- The Gentlemen Ransomware · 8 incident(s)
- RansomHub Ransomware · 6 incident(s)
- Lamashtu Ransomware · 5 incident(s)
- Hunters International Ransomware · 4 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- Akira Ransomware · 3 incident(s)
- Payload Ransomware · 3 incident(s)
- Stormous Hacktivist · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- FunkSec Ransomware · 2 incident(s)
- Krybit Ransomware · 2 incident(s)
- LockBit Ransomware · 2 incident(s)
- Lynx Ransomware Ransomware · 2 incident(s)
- NightSpire Ransomware · 2 incident(s)
- Arcus Media Ransomware · 1 incident(s)
- Black X Ransomware · 1 incident(s)
- DragonForce Ransomware · 1 incident(s)
- Fog Ransomware Ransomware · 1 incident(s)
- Gunra Ransomware · 1 incident(s)
- KillSec Ransomware · 1 incident(s)
- Majinahanashi Ransomware · 1 incident(s)
- MedusaLocker Ransomware · 1 incident(s)
- Nova Ransomware · 1 incident(s)
- RansomHouse Ransomware · 1 incident(s)
- Rhysida Ransomware · 1 incident(s)
- SafePay Ransomware · 1 incident(s)
- Sarcoma Ransomware · 1 incident(s)
- Settra Ransomware · 1 incident(s)
- Snatch Ransomware · 1 incident(s)
- INDOHAXSEC Hacktivist
- Naikon APT
- R00tK1T Hacktivist
Most targeted sectors
- Manufacturing 14 incident(s)
- Transportation & Logistics 13 incident(s)
- Government & Public Sector 9 incident(s)
- Business & Professional Services 8 incident(s)
- Healthcare 6 incident(s)
- Financial Services 5 incident(s)
- Agriculture & Food 4 incident(s)
- Construction 4 incident(s)
- Energy & Utilities 4 incident(s)
- Hospitality & Tourism 4 incident(s)
- Retail & Consumer 4 incident(s)
- Education & Research 3 incident(s)
Recent claimed incidents
- My Global Services Sdn Bhd 2026-09-03 · Other
- EP Manufacturing Bhd 2026-08-31 · Manufacturing
- cimbsecurities.com 2026-08-31 · Financial Services
- CareClinics 2026-08-29 · Healthcare
- KenEp Resources 2026-08-26 · Energy & Utilities
- PCA Group Sdn. Bhd. 2026-08-25 · Other
- makfreight.com 2026-08-19 · Transportation
- SD Associates Sdn Bhd 2026-08-18
- Desatera Sdn Bhd 2026-08-16
- The Coffee Bean 2026-08-14 · Retail & E-Commerce
- Malaysian Nuclear Agency 2026-07-30 · Government & Defense
- Weilhotel 2026-07-29 · Hospitality
- Tong Kong E & E Sdn Bhd (95907X) 2026-07-29 · Manufacturing
- Furama Bukit Bintang 2026-07-27 · Hospitality
- Sunway Berhad 2026-07-23 · Hospitality and Tourism