Malaysia
Southeast Asia · capital Kuala Lumpur · cyber picture, physical security and relations with the EU on one page
Who targets Malaysia
All 14 actors →
China (9) · 
Russia (1) · 
France (1)| Actor | Suspected sponsor | In its news · 30d | Techniques |
|---|---|---|---|
| TraderTraitor named in the news only |  North Korea |
6 | — |
| Lazarus Group named in the news only | North Korea |
4 | 30 |
| GhostEmperor named in the news only | China |
1 | 58 |
| APT40 | China |
— | 50 |
| ToddyCat | not attributed | — | 25 |
| Inception Framework | Russia |
— | 22 |
| BRONZE HIGHLAND | China |
— | 17 |
| Naikon | China |
— | 14 |
| El Machete | not attributed | — | 11 |
| Sowbug | not attributed | — | 9 |
| APT30 | China |
— | 2 |
| BRONZE EDGEWOOD | China |
— | — |
Cyber news 30 days
Every cyber article that mentions it →- Never be afraid to ask questions
- Malaysian Student Develops AI Tool to Help Detect Online Scams
- Seven scam syndicates targeting victims overseas busted in Sarawak, 28 foreigners among 42 held
- GPS will not entertain the games of pro-BN cybertroopers, says analyst MS
- From data leaks, broken freezers to bank crashes, modern cyber threat lessons, where is the solution? TH
- Defence ministry to fast-track cyber force’s establishment, says Khaled
- EC cooperates with MCMC following cyberattack allegations MS
- EC working with MCMC after suspected cyberattack
- EC, MCMC take measures to protect website following reported cyber attack
- Cyber threats to Malaysia now extend beyond data theft to daily disruption, Nacsa says
Exploited vulnerabilities in its news 90 days
Incidents
Register →- Moderate EC, MCMC take measures to protect website following reported cyber attack Detected
- Elevated Fahmi says online banking remains safe despite cyberattacks and Bank Rakyat hack Detected
- Moderate Kluang council files report over porn on hacked LED screens Detected
- Moderate Tabung Haji services back following cyberattack Detected
- High Man loses over RM12mil in suspected crypto theft Detected
- Moderate South Korean megachurches probe suspected AI-linked cyberattacks Detected
- Elevated South Korea’s Lee says AI appears to have been used in bank hacks Detected
- Moderate Jaya Grocer warns customers after Instagram account hacked, fake ‘Anniversary Promo’ posts push Telegram links Detected
Cyber threat landscape as described in the country report of Nov 12 Machine-generated
Malaysia's cyber threat landscape during this period was characterized by a series of reported incidents and a heightened state of alert. On November 10, 2026, the Election Commission (EC) website faced a suspected cyberattack, prompting immediate security enhancement measures in collaboration with the Malaysian Communications and Multimedia Commission (MCMC). This incident, occurring during early voting for the Melaka State Election, underscored the vulnerability of critical government digital infrastructure. Earlier, on November 6, 2026, Bank Rakyat's website was defaced, an incident confirmed by Communications Minister Datuk Seri Fahmi Fadzil on November 7, 2026. While the incident was limited to web defacement on a third-party-managed site with no reported data theft or operational disruption, a hacker named MARLANWG reportedly claimed responsibility, though this attribution remains unverified.
In response to these and broader global cyber threats, the National Cyber Security Agency (NACSA) raised the National Cyber Threat Level (NCTL) from Low to Moderate on November 4, 2026. Prime Minister Datuk Seri Anwar Ibrahim subsequently ordered a comprehensive review to fortify cybersecurity across national infrastructure, including government assets, banking institutions, and government-linked companies. The MCMC also intensified its monitoring and coordination efforts, urging industry players to review preparedness and strengthen preventive measures. Experts warned that the increasing interconnectivity of Malaysia's digital infrastructure makes it susceptible to cascading disruptions across essential services like banking, telecommunications, energy, transport, and healthcare.
Background: Threat actors known to target Malaysia include APT40 (China-linked), ToddyCat, Inception Framework (Russia-linked), BRONZE HIGHLAND (China-linked), Naikon (China-linked), El Machete, Sowbug, and APT30 (China-linked).
Hotspots from the country report of Nov 12
Machine-generated- Elevated Kuala Lumpur — Center of government and financial institutions, subject to cyberattacks and policy responses.
- Elevated Melaka — Location of the Election Commission cyberattack during early voting for state elections.
- High Strait of Melaka — Critical international shipping lane, focus of maritime security efforts and C-UAS deployment.
- High South China Sea — Disputed maritime zone, focus of increased military presence, surveillance, and C-UAS deployment.
- Elevated Cyberjaya/Shah Alam/Petaling Jaya — Identified as targets of foreign digital threat activity on FortiGuard Labs' cyber threat map.
- Elevated Sabah/Sarawak — Regions targeted for increased military troop deployment and defense asset allocation.
Threat level last reports
Machine-generatedLatest country report
Read the full report →Relations with the EU
Factsheet →Mentioned 4 times in latest briefing. Last updated: 2026-08-08
- 16 EU cooperation projects · 13 active
- 1 EU Digital & ICT project: cyber activity here touches EU digital cooperation
- 3 trade or cooperation agreements on record
EU relations and implications country report of Nov 12
Machine-generatedMalaysia's relations with the European Union during this period demonstrated continued engagement and progress, particularly in economic and security cooperation. An international workshop involving the EU, ASEAN, OSCE, and Malaysian agencies concluded in Kuala Lumpur on November 5, 2026, focusing on strengthening confidence- and security-building measures (CSBMs) for international agreements. This initiative highlights a shared interest in regional stability and effective governance. Economically, Malaysia is targeting the conclusion of negotiations on a Free Trade Agreement (FTA) with the EU by June 2027, with approximately 80% of the issues already settled. Investment, Trade and Industry Minister Datuk Seri Johari Abdul Ghani expressed confidence in resolving remaining differences, including those related to palm oil and automotive sectors. The EU remains a significant economic partner, being Malaysia's fifth-largest trading partner in 2025, with bilateral goods trade reaching €48.9 billion.
The cyber security developments in Malaysia have implications for EU interests, especially given the EU's own recent experiences with widespread cyberattacks targeting critical infrastructure in Europe. The reported cyberattacks on Malaysia's Election Commission and financial institutions underscore the global nature of these threats and the need for robust digital cooperation. Malaysia's Prime Minister Anwar Ibrahim's warning that the country's stance on issues like Palestine could make it a target for cyberattacks suggests a potential area of diplomatic sensitivity, as some EU members may hold differing views. However, the existing EU-Malaysia Partnership and Cooperation Agreement (MEUPCA), ratified by Malaysia in May 2026, establishes a comprehensive framework for cooperation across various strategic sectors, including security and science and technology, providing a platform to address shared cyber challenges and enhance digital resilience, potentially leveraging projects like SCOPE Digital – Copernicus Earth Observation Southeast Asia.
| Agreement | Type | Budget | Organisation | Period | Status | |
|---|---|---|---|---|---|---|
| ARISE Plus — ASEAN Regional Integration Support | Trade & Cooperation | EUR 94M | ASEAN | 2017–2024 | COMPLETED | Source ↗ |
| ASEAN Customs Transit System (ACTS) | Trade & Cooperation | — | ASEAN | 2020–2025 | ACTIVE | Source ↗ |
| EU-Malaysia FTA Negotiations (Relaunched) | Free Trade Agreement | — | ASEAN | 2025 | PLANNED | Source ↗ |
Previous reports
Machine-generated- Malaysia Security Report — November 11, 2026
- Malaysia Security Report — November 10, 2026
- Malaysia Security Report — November 09, 2026
- Malaysia Security Report — November 08, 2026
- Malaysia Security Report — November 07, 2026
- Malaysia Security Report — November 06, 2026
- Malaysia Security Report — November 05, 2026
- Malaysia Security Report — November 04, 2026
- Malaysia Security Report — November 03, 2026
- Malaysia Security Report — November 02, 2026