# MA-110.102006: MyCERT Alert - Festive Season and Long Holiday Alert

**Date:** 18 Oct 2006  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-110.102006  
**Advisory ID:** MA-110.102006

---

#### With the coming festive season and long holiday break, MyCERT would like to alert all System, Network Administrators, IT Personnel and Internet users to properly secure/harden their systems and networks before they leave for their long holidays.
Based on our experience, we had security incidents with servers compromised and websites defaced during festive seasons/long holiday break. Thus, with the release of the alert, we hope such incidents could be prevented.
System Administrators, Network Administrators should take extra precautions against any possibilities of web defacements and malicious code activities during the festive and long holiday season, by implementing proper preventive measures against the above threats. However, other threats such as Denial of Service and Hack threats should not be overlooked. Data Center Administrators should also take extra precautions against any possibilities of mass defacements involving virtual hosting servers. We have been seeing the trend of mass defacements involving virtual hosting servers belonging to data centers.
Financial Institutions must also be vigilant against any possibilities of phishing activities that target the internet bankings. Customers must be advised adequately on avoiding themselves becoming victims of phishing activities by applying safe browsing and safe internet banking.
Attached below are some useful guidelines and measures that you may follow to ensure that your systems and networks are properly secured, thus preventing them from being compromised:
1. Make sure all your systems are installed with latest service packs and patches.
If you're running older versions of operating systems or softwares, make sure you have upgraded them to the latest versions as older versions may have some vulnerabilities that can be manipulated by intruders.
You may refer to your respective vendors for the latest patches, service packs and upgrades.
2. If you're running services, make sure you close unneeded services/ports and other required services should be filtered and patched accordingly.
3. Make sure anti-virus softwares that are running on your hosts and email gateways are updated with latest signature files and are enabled to scan all files.
You may refer to the AV sites at: [https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=b83f4c4d-f1e2-4a9d-ab55-6389ae1f6efc](https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=b83f4c4d-f1e2-4a9d-ab55-6389ae1f6efc
)
4. Please check that your systems and networks are configured properly in order to avoid any unnecessary incidents caused by misconfigurations.
5. Make sure loggings of your systems and servers are properly enabled.
6. Make sure you back up all your systems.
7. Organizations are recommended to install network based or host based IDS to alert scannings and other malicious attempts to their hosts.
List of several Intruder Detection Systems
http://www.mycert.org.my/resource/ids.htm
List of several types of sniffers
http://www.mycert.org.my/resource/sniffer.htm
8. Home Users who are using PCs/computers at home are advised:
1. Make sure your PCs, browsers are installed with latest service packs and patches.
2. Install an Anti-Virus software on your PCs which scans and blocks any worms /viruses to the PC. The Anti-virus should be regularly updated with latest signature files in order to detect new worms/viruses.
You may refer to the following AV sites to download anti-virus software.
[https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=b83f4c4d-f1e2-4a9d-ab55-6389ae1f6efc](https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=b83f4c4d-f1e2-4a9d-ab55-6389ae1f6efc
)
3. It is recommended for home users to install personal firewalls on their PCs. A personal firewall is capable of blocking unauthorised scannings to the PC and will alert the PC owner of any illegal scannings to their PCs.
More information on home user PC security is available at:
[https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=9c62b2d3-61e5-4600-b316-851b86e43814](https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=9c62b2d3-61e5-4600-b316-851b86e43814
)
4. Implement safe email-practices.
Safe-email practices document is available at:
[https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=96fa0022-2ca9-47cb-975f-0d1225cc278e](https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=96fa0022-2ca9-47cb-975f-0d1225cc278e
)
Please take note that MyCERT is available 24x7 during the festive season/long holiday break for incident reporting and users/organizations may contact us for assistance.
Tel: 03-89961901
Fax: 03-89960827
Email: [[email protected]](/cdn-cgi/l/email-protection)
Web: http://www.mycert.org.my/report/form\_report.html
SMS: 019-2813801 (24x7)
Mobile phone call reporting: 019-2665850 (24x7)
Do visit MyCERT's website regularly for current updates, latest alerts and advisories at:
[https://www.mycert.org.my](https://www.mycert.org.my/)