# MA-705.082018: MyCERT Alert - Festive Season

**Date:** 29 Aug 2018  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-705.082018  
**Advisory ID:** MA-705.082018

---

**1.0    Introduction**
MyCERT has been receiving several incidents targeting Malaysian websites involving cryptojacking, and web defacement. In conjunction with that, we also received online scam incident through phone call, social network site, and email address that consist of either phishing link or malicious URL link.  As we are aware, in general these kind of incident if successful would lead to attacker to gain access to user device or machine. The most crucial part if the device was affected with malware that targeted for stealing user credential information and potential data leakage. As a preventive measure, MyCERT release this alert to advise System Administrators to take necessary steps to secure their systems against unwanted incidents as well from other security threats.
**2.0    Recommendation**
MyCERT advises all system owners to be alert and do the necessary to secure their websites. Attached below are some recommendations for System Administrators and users as preventive measures and mitigation steps against these attacks:
**1.    Use and maintain antivirus software**. Antivirus software recognizes and protects a computer against malware, allowing the owner or operator to detect and remove a potentially unwanted program before it can do any damage.
**2.    Keep software and operating systems up-to-date**. Install software updates so that attackers cannot take advantage of known problems or vulnerabilities.
**3.    Use strong passwords.** Select passwords that will be difficult for attackers to guess and use different passwords for different programs and devices. It is best to use long, strong passphrases or passwords that consist of at least 16 characters
**4.    Change default usernames and passwords**. Default usernames and passwords are readily available to malicious actors. Change default passwords, as soon as possible, to a sufficiently strong and unique password.
**5.    Check system privilege policies**. Review user accounts and verify that users with administrative rights have a need for those privileges. Restrict general user accounts from performing administrative functions.
**6.    Apply Web Application Firewall (WAF)** as additional layer of mitigation for the website protection
Please refer to the link in the references section for more details about tips and best practices that can be applied to secure the websites.
In this year, MyCERT had released several Alerts and Advisories on current threats and vulnerabilities. The Alerts and Advisories are available at:
<https://www.mycert.org.my/portal/advisories?id=431fab9c-d24c-4a27-ba93-e92edafdefa5&year=2018&ctype=&keyword=>
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#a0c3d9c2c5d2999999e0c3d9c2c5d2d3c5c3d5d2c9d4d98ecdd9) or [[email protected]](/cdn-cgi/l/email-protection#bfd2c6dcdacdcbffd2c6dcdacdcb91d0cdd891d2c6)
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: <https://www.mycert.org.my>
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**3.0    References**
<https://www.mycert.org.my/portal/advisory?id=MA-703.082018>
[https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=28ff9ede-e56b-4bfb-89cc-c3ef9744db8a](https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=28ff9ede-e56b-4bfb-89cc-c3ef9744db8a
)
[https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=44279d4e-d0f7-4e49-b6c9-3e001532acc1](https://www.mycert.org.my/portal/articles-content?menu=4b05e0fb-afa1-408f-90ca-ea0edf4aca8b&id=44279d4e-d0f7-4e49-b6c9-3e001532acc1
)