# MA-351.072013: MyCERT Alert - Redirection of Several .COM.MY and .MY Domains to Defacement Page

**Date:** 01 Jul 2013  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-351.072013  
**Advisory ID:** MA-351.072013

---

**1.0 Introduction**
It has been reported to MyCERT that several .COM.MY and .MY domains has been redirected to a landing page that contains defacement contents, instead of going to the actual valid page. The defacement page is believed to have been created by perpetrators.
According to MyNIC's Announcement, the affected domain names have been restored to their correct information at 4.38 pm on Monday 01/07/2013. Several other downstream nameserver such as TMnet, Jaring and Google DNS have also reflect the latest changes.
**2.0 Impact**
The impact has caused several .COM.MY and .MY domains belong to foreign-brand products in Malaysia to be redirected to defacement page when actually no web defacement has occurred on the particular .COM.MY and .MY domain.
**3.0 Recommendation**
Below are some recommendations that Internet users can take action as mitigations.
- End users who would like to do transactions on a particular website need to make sure the website has authorised certificates for secure transaction.
- End users can flush their DNS cache to receive the latest changes. Below is steps end users may take to flush DNS cache for their respective operating system.
> Microsoft Windows:
> <http://technet.microsoft.com/en-us/library/cc781949%28v=ws.10%29.aspx>
>
> Mac OS X:
> <http://support.apple.com/kb/ht5343>
If you need any assistance, do not hesitate to contact Cyber999 via the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection) or [[email protected]](/cdn-cgi/l/email-protection)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: <https://www.mycert.org.my>
**4.0 Reference**
- <http://mynic.my/en/news.php?id=155>