Malaysia — Cyber Threat Profile
Malaysia operates an advanced cybersecurity ecosystem anchored by CyberSecurity Malaysia and national CERT structures. Strategic priorities include financial sector security, government network protection, and critical infrastructure resilience. The country maintains comprehensive cyber legislation and active participation in ASEAN cyber cooperation initiatives. Malaysia faces both cybercrime and state-sponsored espionage risks due to its economic and technological profile. Investments in cyber workforce development, digital trust frameworks, and emerging technology security governance continue to strengthen national defensive capability and regional cyber leadership positioning.- National CERT/CSIRT: MyCERT
- Data protection authority: Personal Data Protection Department (PDPD) / Ministry of Communications and Multimedia Commission (MCMC) (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.33 / 100, #26 worldwide
- Secure Internet servers per 1M people (2024): 7,475.5 (source: World Bank)
- Internet users (2024): 98.0% of population (source: World Bank)
Latest Malaysia coverage
- Malaysia's water asset firm lands on Qilin's leak site 2026-10-19 · Cyber Incidents
- Fake Malaysian parking site hacks iPhones with no tap 2026-09-05 · Cyber Incidents
Threat actors targeting Malaysia
- APT40 APT
- Earth Kurma APT
- knaithe APT
- Lotus Blossom APT
- Mustang Panda APT
- ToddyCat APT
- Qilin Ransomware · 26 incident(s)
- The Gentlemen Ransomware · 9 incident(s)
- RansomHub Ransomware · 6 incident(s)
- Lamashtu Ransomware · 5 incident(s)
- Hunters International Ransomware · 4 incident(s)
- INC Ransom Ransomware · 4 incident(s)
- Akira Ransomware · 3 incident(s)
- LockBit Ransomware · 3 incident(s)
- Payload Ransomware · 3 incident(s)
- Stormous Hacktivist · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- FunkSec Ransomware · 2 incident(s)
- Krybit Ransomware · 2 incident(s)
- Lynx Ransomware Ransomware · 2 incident(s)
- Majinahanashi Ransomware · 2 incident(s)
- NightSpire Ransomware · 2 incident(s)
- Orova Ransomware · 2 incident(s)
- Arcus Media Ransomware · 1 incident(s)
- Black X Ransomware · 1 incident(s)
- BravoX Ransomware · 1 incident(s)
- BYOD Ransomware · 1 incident(s)
- Dire Wolf Ransomware · 1 incident(s)
- DragonForce Ransomware · 1 incident(s)
- Fog Ransomware Ransomware · 1 incident(s)
- Gunra Ransomware · 1 incident(s)
- KillSec Ransomware · 1 incident(s)
- MedusaLocker Ransomware · 1 incident(s)
- NetRunner Ransomware · 1 incident(s)
- Nova Ransomware · 1 incident(s)
- RansomHouse Ransomware · 1 incident(s)
- Rhysida Ransomware · 1 incident(s)
- SafePay Ransomware · 1 incident(s)
- Sarcoma Ransomware · 1 incident(s)
- Settra Ransomware · 1 incident(s)
Most targeted sectors
- Manufacturing 15 incident(s)
- Transportation & Logistics 14 incident(s)
- Business & Professional Services 9 incident(s)
- Government & Public Sector 9 incident(s)
- Healthcare 6 incident(s)
- Energy & Utilities 5 incident(s)
- Financial Services 5 incident(s)
- Retail & Consumer 5 incident(s)
- Agriculture & Food 4 incident(s)
- Construction 4 incident(s)
- Hospitality & Tourism 4 incident(s)
- Technology 4 incident(s)
Recent claimed incidents
- Wah Chan Consolidated Sdn Bhd 2026-10-23 · Other
- GSE-M Technology Sdn. Bhd. 2026-10-21 · Technology
- Pengurusan Aset Air Berhad 2026-10-18 · Energy & Utilities
- OCK Group Berhad 2026-10-17
- Alfameli Group 2026-10-13 · Other
- PCA Group Sdn. Bhd. 2026-10-10 · Other
- Royal Selangor 2026-10-05 · Manufacturing
- Asia Era One 2026-10-05
- Main Place Mall 2026-10-02 · Retail & E-Commerce
- Port of Tanjung Pelepas 2026-09-11 · Transportation
- My Global Services Sdn Bhd 2026-09-03 · Other
- EP Manufacturing Bhd 2026-08-31 · Manufacturing
- cimbsecurities.com 2026-08-31 · Financial Services
- CareClinics 2026-08-29 · Healthcare
- KenEp Resources 2026-08-26 · Energy & Utilities