# MA-281.062011: MyCERT Alert - Increase in Cyber Security Incidents

**Date:** 15 Jun 2011  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-281.062011  
**Advisory ID:** MA-281.062011

---

**1.0 Introduction**
MyCERT has observed significant increase in cyber security 
**2.0 Impact**
Successful attack will affect the confidentiality, integrity of information and availability of the websites. This may further impact business activities of organizations.
**3.0 Targeted Websites**
Based on our observation, the attackers are targeting web applications that are vulnerable to publically known attack techniques, weak passwords and misconfiguration.
**4.0 Recommendation**
MyCERT advises all system owners to be alert and do the necessary to secure their websites. Please refer to the link in the references section for tips and best practices that can be applied to secure the websites.
If your website is defaced or you observe attack attempts, do not hesitate to contact Cyber999 via the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#03607a6166713a3a3a43607a61667170666076716a777a2d6e7a) or [[email protected]](/cdn-cgi/l/email-protection#f39e8a90968187b39e8a90968187dd9c8194dd9e8a)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT <EMAIL> <COMPLAINT> to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
- What you should know about web defacement - [https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=44279d4e-d0f7-4e49-b6c9-3e001532acc1](https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=44279d4e-d0f7-4e49-b6c9-3e001532acc1
)
- Steps for recovering from a UNIX or NT system compromise
<http://www.auscert.org.au/render.html?it=1974&cid=1920>
- Intrusion Detection Checklist
<http://zeltser.com/log-management/security-incident-log-review-checklist.pdf>
- Guides On Fixing Sql Injections Vulnerabilities
[https://www.mycert.org.my/portal/articles-content?menu=b9f3fdda-c343-4cb4-99a7-a7506cfb13ba&id=57c6ecda-55d1-4839-847d-9e441d1fc6d8](https://www.mycert.org.my/portal/articles-content?menu=b9f3fdda-c343-4cb4-99a7-a7506cfb13ba&id=57c6ecda-55d1-4839-847d-9e441d1fc6d8
)
- How To: Protect From SQL Injection in ASP.NET
<http://msdn.microsoft.com/en-us/library/ms998271.aspx>
- ModSecurity
<http://www.modsecurity.org/>