# MA-741.082019: MyCERT Alert - Alert on Scam Website Impersonating as HRDF

**Date:** 22 Aug 2019  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-741.082019  
**Advisory ID:** MA-741.082019

---

**1.0 Introduction**
MyCERT is aware about the viral fake messages on social media regarding the “RM8500 fund” offered by Jabatan Tenaga Kerja Semenanjung Malaysia (JTKSM), as shown in Figure 1 below. The text within the fake message contains luring information with the intention to direct the victim into clicking and visiting the provided phishing URL. MCMC and HRDF had posted a statement regarding this incident in the following URL:
- MCMC: <https://sebenarnya.my/jtksm-menawarkan-dana-rm8500/>
- HRDF Facebook: <https://m.facebook.com/notes/my-hrdf/kenyataan-media-mesej-tular-penipuan-tuntutan-rm-8500-menggunakan-logo-kwpsm/10157668437983130?sfns=mo>
**Figure 1:** Fake message on JTKSM
**Figure 2:** Screenshot of the fake Whatsapp message.
**2.0 Impact**
- Victims are lured into clicking the provided phishing URL in the fake message.
- Victims are being directed to phishing website.
- When user click on the URL, they will be redirected to a fraud website impersonating Department of Labour Peninsular Malaysia and asked to answer a survey (screenshots as per below).
After answered all the questions, it will ask user to share it via WhatsApp in order to proceed:
**3.0 Recommendations**
If you received such fake messages, which impersonate HRDF or any other agencies, you can immediately:
- Contact the respected agency for clarification. Such as, in this case, the HRDF.
- Report to [[email protected]](/cdn-cgi/l/email-protection#65061c0700175c5c5c25061c07001716000610170c111c4b081c) for MyCERT incident response action.
- Ignore and delete the messages. Do not forward it.
- Do not click provided URL.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 - 8008 7000 (Office Hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 -18:00 MYT
Web: <https://www.mycert.org.my>
Twitter: <https://twitter.com/mycert>
Facebook: <https://www.facebook.com/mycert.org.my>
**4.0    References**
- <https://sebenarnya.my/jtksm-menawarkan-dana-rm8500/>
- <https://m.facebook.com/notes/my-hrdf/kenyataan-media-mesej-tular-penipuan-tuntutan-rm-8500-menggunakan-logo-kwpsm/10157668437983130?sfns=mo>