POS Malaysia site is down, possibly a ransomware attack

[zanderthunder]

POS Malaysia services are down at this point of time and according to an anonymous reliable source, there is a possibility that the IT infrastructure has been hit with ransomware. At the time of writing this article, we can confirm that the main page is under maintenance.

 

A little further digging and we discovered some parts are throwing Microsoft .NET error 40, which tells that the site is having problems establishing connection with the database.

 

 

It is further identified that the damage has spread into quite a number of modules considering the fact that Pos Malaysia has a rather integrated architecture.

At this point of time, Pos Laju counterpart is working totally fine though. Only the main domain, pos.com.my is affected at the time of writing.

 

Please take the necessary precautions and check your private credentials where necessary especially if you have shared them with Pos Malaysia in the past as these details may have been compromised. Should we have more details, we will keep you posted here.

 

Source: POS Malaysia site is down, possibly a ransomware attack (via POKDE.NET)

 

p/s: While this article is written yesterday (22 October), the domain pos.com.my appears to be working again at the time of writing of this topic, redirected to home.pos.com.my.

 

p/s 2: There are some discussion about the news on these threads as well:

https://forum.lowyat.net/topic/4854215 - Contains a mix of English and Malay language used in the forum, viewer discretion is advised.

https://www.reddit.com/r/malaysia/comments/dlu5db/pos_malaysia_outage_possible_ransomware_attack/  - Disscussion on Reddit thread

 

 

p/s 3: The POS Malaysia has taken proactive measures to ensure system and online services are protected, according to their statement on their official Facebook Page.

Source: [ANNOUNCEMENT] POS MALAYSIA BERHAD HAS TAKEN PROACTIVE MEASURES TO ENSURE SYSTEM AND ONLINE SERVICES ARE PROTECTED. (via Facebook)