# MA-1002.122023: MyCERT Alert - Impersonation of Axiata Digital Labs(ADL) in public for Job Scam

**Date:** 18 Dec 2023  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1002.122023  
**Advisory ID:** MA-1002.122023

---

**1.0 Introduction**
Recently, MyCERT received a report regarding a fraudulent entity that is impersonating as "Axiata Digital Labs International". This party is disseminating messages, primarily through WhatsApp and aims to convince recipients to participate in a promotional project purportedly under Axiata Digital Labs(ADL), promising a specified payment upon joining.
Axiata Group has confirmed that no such project is being offered to the public.
It's important to note that Axiata Digital Labs is one of the operating companies within the Axiata Group, and additional information about the company can be found at <https://www.axiatadigitallabs.com/>.
The concerned phishing instant messages sent via WhatsApp and other messaging platforms 
Figure 1 – Message by fraudulent Threat Actor (TA) impersonating “Assistant HR staff” from Axiata Digital Labs International.
Figure 2 – Other examples of messages by fraudulent Threat Actor (TA) impersonating as staffs of Axiata Digital Labs International.
Figure 3 – Phone number and profile pictures used by the Threat Actor.
The modus operandi used by the Threat Actor (TA) is by sending targeted messages to victims, primarily through WhatsApp and aims to convince recipients to participate in a promotional project purportedly under Axiata Digital Labs, promising a specified payment upon joining.
**2.0 Impact**
Disclosure of banking information, name, address, and phone number to third parties or attackers and potential financial loss to victims.
**3.0
Below are references to alerts/advisories of similar fraud or scam incidents:
- [MA-976.102023: MyCERT Alert - Telegram Phishing Impersonate MyKasih Sumbangan Asas Rahmah (SARA)](https://www.mycert.org.my/portal/advisory?id=MA-976.102023)
- [MA-975.102023: MyCERT Alert - MyBayar PDRM Phishing Website](https://www.mycert.org.my/portal/advisory?id=MA-975.102023)
- [MA-790.072020: MyCERT Alert - SMSSpy using Malaysian Law Enforcement as theme](https://www.mycert.org.my/portal/advisory?id=MA-790.072020)
- [MA-843.072022: MyCERT Alert - Security Best Practices on Safe Online Transaction and Safeguarding Banking Information](https://www.mycert.org.my/portal/details?menu=431fab9c-d24c-4a27-ba93-e92edafdefa5&id=e68d78b0-c2fd-475c-bcd9-7c82cad079ca)
**4.0 Recommendations**
The phishing attack is meant to retrieve personal sensitive and confidential credentials from victims, which could be used for other malicious purposes.  MyCERT highly recommends the following:
- Maintain a watchful eye: When an online deal seems too good to be true, exercise caution to shield yourself from potential online scams.
- Do not click any suspicious URLs sent through social media posts or ads, SMS, email, or any messaging services.
- Use different password variations for each online account and adhere to the best password management practices. This step should protect you in the future because no other account should be affected if one account is breached.
- Quickly file a police report if they encounter or fall victim to such scams.
- If you suspect unauthorised bank transactions in your account, immediately report to your bank by calling the bank's hotline, which normally operates 24x7.
- You can also call the Malaysian National Scam Response Centre (NSRC) hotline at 997 within 24 hours or as soon as possible. The hotline number operates daily including on public holidays (8am - 8pm daily).
- The public can also contact the Royal Malaysia Police (PDRM) via the CCID Infoline at 013-211 1222 or the CCID Bilik Gerakan at 03-26101599.
- Contact relevant authorities such as Cyber999 for any inquiries and assistance 
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours)  
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- [MA-976.102023: MyCERT Alert - Telegram Phishing Impersonate MyKasih Sumbangan Asas Rahmah (SARA)](https://www.mycert.org.my/portal/advisory?id=MA-976.102023)
- [MA-975.102023: MyCERT Alert - MyBayar PDRM Phishing Website](https://www.mycert.org.my/portal/advisory?id=MA-975.102023)
- [MA-790.072020: MyCERT Alert - SMSSpy using Malaysian Law Enforcement as theme](https://www.mycert.org.my/portal/advisory?id=MA-790.072020)
- [MA-843.072022: MyCERT Alert - Security Best Practices on Safe Online Transaction and Safeguarding Banking Information](https://www.mycert.org.my/portal/details?menu=431fab9c-d24c-4a27-ba93-e92edafdefa5&id=e68d78b0-c2fd-475c-bcd9-7c82cad079ca)