Malaysia — Cyber Threat Profile
Malaysia operates an advanced cybersecurity ecosystem anchored by CyberSecurity Malaysia and national CERT structures. Strategic priorities include financial sector security, government network protection, and critical infrastructure resilience. The country maintains comprehensive cyber legislation and active participation in ASEAN cyber cooperation initiatives. Malaysia faces both cybercrime and state-sponsored espionage risks due to its economic and technological profile. Investments in cyber workforce development, digital trust frameworks, and emerging technology security governance continue to strengthen national defensive capability and regional cyber leadership positioning.- National CERT/CSIRT: MyCERT
- Data protection authority: Personal Data Protection Department (PDPD) / Ministry of Communications and Multimedia Commission (MCMC) (source: CNIL)
- World Cybercrime Index 2024 (origin significance): 1.33 / 100, #26 worldwide
- Secure Internet servers per 1M people (2024): 7,475.5 (source: World Bank)
- Internet users (2024): 98.0% of population (source: World Bank)
Threat actors targeting Malaysia
- APT40 APT
- Earth Kurma APT
- knaithe APT
- Lotus Blossom APT
- Mustang Panda APT
- ToddyCat APT
- Qilin Ransomware · 22 incident(s)
- The Gentlemen Ransomware · 7 incident(s)
- RansomHub Ransomware · 6 incident(s)
- Lamashtu Ransomware · 5 incident(s)
- Hunters International Ransomware · 4 incident(s)
- Akira Ransomware · 3 incident(s)
- LockBit Ransomware · 3 incident(s)
- Stormous Hacktivist · 3 incident(s)
- APT73 Ransomware · 2 incident(s)
- FunkSec Ransomware · 2 incident(s)
- Krybit Ransomware · 2 incident(s)
- NightSpire Ransomware · 2 incident(s)
- Payload Ransomware · 2 incident(s)
- Arcus Media Ransomware · 1 incident(s)
- Black X Ransomware · 1 incident(s)
- DragonForce Ransomware · 1 incident(s)
- Fog Ransomware Ransomware · 1 incident(s)
- Gunra Ransomware · 1 incident(s)
- INC Ransom Ransomware · 1 incident(s)
- KillSec Ransomware · 1 incident(s)
- Lynx Ransomware Ransomware · 1 incident(s)
- MedusaLocker Ransomware · 1 incident(s)
- Nova Ransomware · 1 incident(s)
- RansomHouse Ransomware · 1 incident(s)
- Rhysida Ransomware · 1 incident(s)
- SafePay Ransomware · 1 incident(s)
- Sarcoma Ransomware · 1 incident(s)
- Snatch Ransomware · 1 incident(s)
- INDOHAXSEC Hacktivist
- Naikon APT
- R00tK1T Hacktivist
Most targeted sectors
- Transportation & Logistics 12 incident(s)
- Manufacturing 11 incident(s)
- Business & Professional Services 7 incident(s)
- Government & Public Sector 7 incident(s)
- Agriculture & Food 4 incident(s)
- Construction 4 incident(s)
- Financial Services 4 incident(s)
- Healthcare 4 incident(s)
- Retail & Consumer 4 incident(s)
- Education & Research 3 incident(s)
- Hospitality & Tourism 3 incident(s)
- Energy & Utilities 2 incident(s)
Recent claimed incidents
- Desatera Sdn Bhd 2026-08-16
- The Coffee Bean 2026-08-14 · Retail & E-Commerce
- Malaysian Nuclear Agency 2026-07-30 · Government & Defense
- Weilhotel 2026-07-29 · Hospitality
- Tong Kong E & E Sdn Bhd (95907X) 2026-07-29 · Manufacturing
- Furama Bukit Bintang 2026-07-27 · Hospitality
- Sunway Berhad 2026-07-23 · Hospitality and Tourism
- rehabmalaysia.com 2026-07-17 · Healthcare
- Perpustam 2026-07-14
- Quanterm Logistics Sdn Bhd 2026-07-07 · Transportation/Logistics
- MAJUHOME Concept (Maju Home Furnishing Sdn. Bhd.) 2026-07-03 · Consumer Services
- mlit.com.my 2026-06-24 · Public Sector
- SGS Malaysia 2026-06-20 · Business Services
- mlit.com.my 2026-06-19 · Public Sector
- THL PROJECT MANAGEMENT SDN. BHD. 2026-06-18 · Business Services