From what i realized, first it was paypal. Then there is a TAC spam and some unknown stranger hackers act pity ask help to give him tac. Then poof~ money gone. Better transfer away all the money. Though is good to be kind, its not suitable in this society.

The current updated FAQ from CIMB suggests that special characters were allowed in the past, just not mandatory.
The JS implementation also allows for special characters to be submitted if it was less than 8 characters.

The first article was taking the assumptions of how the old system used to work.
The second article reflects a more accurate situation due to the currently given evidence.

So far we cannot find good evidence that special characters were not allowed during the 8 character era. Everything else points to it being allowed back then.
Regarding the 8 characters thing you mentioned earlier, in the past, the characters were fixed to 8 characters maximum and minimum.
There was never > 8 characters in the past because it does not exist due to the old password policy being fixed at 8 characters.
The JS logic representing the old policy is the one that is saying "less than 8" as a criterion.



All that said, the conclusion is that security was never compromised or hacked due to the new mechanisms for CIMB Clicks as some articles are suggesting in their clickbait headlines

Who give tac to other people?

Cimb fb pages > user post got many stories. A Malay guy kena. The one Chinese guy i post earlier almost kena. Later i find update here

i suggest u open a new thread and start it. you are the victim with a whole load of information. and u will maintain that thread well.

we just keep contributing to it.

Cimb fb pages > user post got many stories. A Malay guy kena. The one Chinese guy i post earlier almost kena. Later i find update here

Customer service mentioned the charges was for parking..... In USD , really,?....

Happen to me too. I found it weird, and suddenly (on the same day) my card cannot use to do payment while buying blackpink concert tickets. But no weird transfer so far. Maybe i will withdraw all money tomorrow if no update from cimb by tomorrow morning.
Go kedutaan to seek help? Can ah?

The workflow is customer's debit card compromise. Idiot, i mean the guy in the video.

iirc, most of those that kena the debit card fraud say they don't have paypal oso

What has compromised debit cards have to do with changing Cimb clicks password?