# MA-262.122010: MyCERT Alert - Increase in Web Defacement Incidents

**Date:** 29 Dec 2010  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-262.122010  
**Advisory ID:** MA-262.122010

---

**1.0 Introduction**
MyCERT has observed dramatic increase in web defacement incidents in Malaysia in the last two days. The attacks are targeting websites with the .MY domain and 
**2.0 Impact**
Successful attack will affect the integrity information and availability of the website. This may further impact business activities of organizations.
**3.0 Targeted Websites**
Based on our observation, the attackers are targeting web applications that are vulnerable to publically known attack techniques, weak passwords and misconfigurations.
**4.0 Recommendation**
MyCERT advises all system owners to be alert and do the necessary to secure their websites. Please refer to the link in the References section for tips and best practices that can be applied to secure the websites.
If your website is defaced or you observe attack attempts, do not hesitate to contact Cyber999 via the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#cdaeb4afa8bff4f4f48daeb4afa8bfbea8aeb8bfa4b9b4e3a0b4) or [[email protected]](/cdn-cgi/l/email-protection#c3aebaa0a6b1b783aebaa0a6b1b7edacb1a4edaeba)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT <EMAIL> <COMPLAINT> to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
- What you should know about web defacement -
[https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=44279d4e-d0f7-4e49-b6c9-3e001532acc1](https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=44279d4e-d0f7-4e49-b6c9-3e001532acc1
)
- Steps for recovering from a UNIX or NT system compromise -
<http://www.auscert.org.au/render.html?it=1974&cid=1920>
- Intrusion Detection Checklist -
<http://zeltser.com/log-management/security-incident-log-review-checklist.pdf>