# MA-361.102013: MyCERT Alert - Hoax Messages in Social Media and Messaging Tool of Online Banking Attack

**Date:** 17 Oct 2013  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-361.102013  
**Advisory ID:** MA-361.102013

---

**1.0 Introduction**
Malaysia Computer Emergency Response Team (MyCERT) is aware that recently there are many circulating hoax messages among users of social media and messaging tool about online banking attack. However, to ensure the highest security standards and confidentiality of online banking practice, users are advised to perform and follow security best practices and guidelines for online banking activity or transaction.
**2.0 Analysis**
|  | --- | --- | | | --- | Salam..pastikan tiada yang buat transaction ataupun online banking sehingga isnin pagi ye…terima kasih.pastikan anda tahu baki akaun anda semua. Ada attack besar besaran mlm ni terutama maybank. Dari kawan TM Cite yg dbritakan olh kengkwan utk dkongsi Last week google kne hack oleh siapa xdktahui Jd pkhidmatan online spt traksaksi akaun o etc dnchatkan utk dkurangkan klu bly elak,elakkan dlu smentara.. Hacker dari pakistan yg hack google last week Ini maklumat yg diterima… copy paste dr whatapps IPK |
> Figure 1.0: Sample Hoax Message
>
> Referring to Figure 1.0, MyCERT had analyzed that the hoax message are:
- using short form wording
- using mix wording English and Malay
- not an official statement from TM which refer to interruption of online banking service
- false notification from Ibu Pejabat Polis Kontinjen (IPK)
**3.0 Recommendation**
Users are highly encouraged to perform and follow security Best Practices and guidelines for online banking transaction. The most important best practice features on online banking to be considered are username and password confidentiality, use of computer virus protection, browser update, and awareness of online banking security tips.
Some guidelines on online banking can be obtained as below:
- Tip and guidelines on safe online shopping:
<http://www.cybersafe.my/article-tips-and-guidelines-on-safe-online-shopping.html>
- Safer Electronic Banking for Home Users:
<http://security.intuit.com/safer-electronic-banking-for-home-users.html>
- 13 Security Tips to Safe Internet Banking:
<http://www.cybersecurity.my/data/content_files/13/83.pdf>
- How to make Online Banking Secure:
<http://www.cybersecurity.my/data/content_files/13/133.pdf>
MyCERT advises Internet users to be extra careful and to take precautionary step of fraudulent messages as well as "Hoax" messages received via social media and messaging tool such as "WhatsApp" or "FaceBook".
In conclusion, MyCERT has identified that this is a Hoax Message about online banking attack and the messages are false in nature. The online banking service is secured to be used and extensively monitored.
Please verify from trusted security parties or law enforcement agencies on any hoax information received.
MyCERT can be reached through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection) or [[email protected]](/cdn-cgi/l/email-protection)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: <https://www.mycert.org.my>
**4.0 References**
- <http://www.cybersecurity.my/data/content_files/13/83.pdf>
- <http://www.cybersafe.my/article-tips-and-guidelines-on-safe-online-shopping.html>
- <http://www.cybersecurity.my/data/content_files/13/133.pdf>
- <http://security.intuit.com/safer-electronic-banking-for-home-users.html>