Computer and Network Security, Mamak Style

Website: Mahkamah Tinggi, Mahkamah Sesysen & Mahkamah Majistret Kuala Lumpur
URL: http://mahkamah.gov.my/

The website belongs to the Kuala Lumpur High Court, Session Court and Magistrate Court.

If you are wondering what this is all about, it was due to the Court's decision allow The Herald to use the word "Allah" in its publication. The Herald's online site was defaced a few days ago.

The defacement was apparently carried out by cuciotak/brainwash, or probably someone or group of persons pretending to be him.

The Malaysia Insider has the scoop here.

DISCLAIMER: All the information related to computer crimes (i.e. defacements) contained in security.org.my were either collected online from public sources or directly notified to us. Security.org.my is neither responsible for the reported computer crimes nor it is directly or indirectly involved in them.

Defaced, domain hijack. Whatever. Our security sucks, or non-existent. What happened to the millions of ringgit of taxpayers money in the so-called fight against cyber-threats? Or what about the millions spent by CyberSecurity Malaysia for security awareness?

Going with the statistics by CyberSecurity, "system intrusion" has been rising, with the exception of a slight dip in July and August.

This clearly shows that the government's efforts in curbing cyber-threats is nothing but epic failure, not to mention a waste of public funds.







Website: http://menarakl.com.my/
URL: http://menarakl.com.my/

DISCLAIMER: All the information related to computer crimes (i.e. defacements) contained in security.org.my were either collected online from public sources or directly notified to us. Security.org.my is neither responsible for the reported computer crimes nor it is directly or indirectly involved in them.

Ni memang FAIL! Nak buat hacker movie, tapi website dah kena tapau... apa laaa...?



Website: Cyber X: AP 2008 (Ancaman Penggodam)
URL: http://cyberxmovie.com/

More info about the movie:

http://www.bharian.com.my/sisipan/bintangpopular/Sunday/Klik/20081109141223/Article/index_html
http://www.youtube.com/watch?v=OJukmqU7ACU

Cuciotak: "If you create a Hacker based movie, ask local hacker of what they do and what they do for living, else it will be "syok sendiri" movie".

I can't agree enough.

DISCLAIMER: All the information related to computer crimes (i.e. defacements) contained in security.org.my were either collected online from public sources or directly notified to us. Security.org.my is neither responsible for the reported computer crimes nor it is directly or indirectly involved in them.

eTiQa Takaful (previously known as Takaful Nasional or Malaysia National Insurance).

Website: eTiQa Takaful
URL: http://www.etiqa.com.my/index.php?tpt=4 and http://www.mni.com.my

Also by cuciotak:

Defaced - uitm.edu.my
Domain Hijack - www.uitm.edu.my
Breaking News! Malaysian GP Domain Hijacked

DISCLAIMER: All the information related to computer crimes (i.e. defacements) contained in security.org.my were either collected online from public sources or directly notified to us. Security.org.my is neither responsible for the reported computer crimes nor it is directly or indirectly involved in them.

Website: Universiti Teknologi Mara
URL: http://www.uitm.edu.my/
Date Reported: 13 April 2008
Screenshot: http://security.org.my/uploads/uitm-cuciotak.jpg
Hijacker: cuciotak

I am not surprised by this at all. I knew this would come - and UiTM should know better to enhance their security after the defacement to the website of the Information Technology Faculty. I've also gotten a report that the same attacks had been targeted at UNIMAS (University Malaysia Sarawak).

UITM - World class university? Two major hacks in the space of one month - you decide.

UPDATE: 19:24. The Malaysian GP website, which hosts the portal for the Formula 1 race in Sepang, Kuala Lumpur, is down. It's domain name can't be resolved. The F1 Sepang starts this weekend.

This was reported to me last night. The malaysiangp.com.my domain was supposedly hijacked by cuciotak:




Website: Malaysian GP | Sepang Circuit
DNS Hijack on: 10:24PM 19 March 2008
URL: http://malaysiangp.com.my
Hijacker: cuciotak

At around 10:30 am this morning - there was no evidence of the hijack though - visiting the Malaysian GP website, I only see it's normal state. This is probably due to old DNS cache in Streamyx because other people are seeing the hijacked domain (those subscribed to Streamyx corporate package).

A Portugal and Brazilian racing site noticed the hijack and posted some news. Here they are translated via Google:

http://autosport.clix.pt
http://ultimosegundo.ig.com.br

The original stories are at:

http://autosport.clix.pt/gen.pl?p=stories&op=view&fokey=as.stories/45481
http://ultimosegundo.ig.com.br/paginas/grandepremio/materias/481501-482000/481591/481591_1.html

Visiting the website again, I notice that it is giving out an error (as of 12:29 pm).





If you are on Streamyx, you may or may not see the hijacked website. As you may know, Sepang is hosting the F1 race this weekend.

If this problem continues - I'd say that this is really embarrassing.

This screenshot by me at 23:30




An earlier screenshot submitted by a reader.


Website: Faculty of Information Technology and Quantitative Sciences, UiTM
URL: http://www2.uitm.edu.my/ftmsk/
Defacer: cuciotak
Reported on: March 11 2008
Screenshot 1: http://www.security.org.my/uploads/uitm.edu.my.png
Screenshot 2: http://www.security.org.my/uploads/ftmsk-uitm.jpg
Current status: I am definitely going to buy that book! Looks interesting!