Cheras MP Tan Kok Wai revealed that according to reliable sources, the Kuala Lumpur City Hall’s online system was paralyzed because it was hacked by hackers who demanded a ransom of US$550,000 (approximately RM2.36 million) !

The online system of Kuala Lumpur City Hall has been paralyzed for nearly a month. As of today, some systems are still unable to log in, including e-Rayuan, DBKL Bayar, AduKL, e-perumahan, etc.

https://metro.sinchew.com.my/news/20250518/metro/6543694

Pay peanuts. Get shit.

Lmao ini mesti firewall or antivirus outdated or cap ayam

what you expect lo, hire all those cap ayam programmers that doesn't even know the basic security rules like OWSAP.

windows xp internet explorer java script

who surf porn during working hours??

inefficient gov eunuch department

> for a month

lmao

hackers paid really well
owai

Lol bodo

At the very minimum gov should send all their officers for IBM AI Developer Professional Certificate course. This AI age we are not only dealing with human threat but also the threat of AI.

This post has been edited by jonthebaptist: May 18 2025, 03:34 PM

Lek lu sap rokok dulu.... Owai

Fire all the IT staff, all useless sleeping from the jobs.

Slam and chokehold a balloon seller is more critical than this ransomware.

why such an odd figure - USD 550K ?

Inb4 inside job

format c:

no wonder complains made to them never get a response from them

cannot say them malas

ghost of the balloon man, masjid india woman, ccp signboard etc

Da biasa, bully the weak, fear the strong!

Habis lah all the confidential tenders letters deals kena hacked liao.

You all passwords better change new one

Those hackers got permit to launch ransomware on dbkl stuff?

how can this happened... ayamz thought madanonz want us to be come a digital nation ???..

I just wanna laugh

more than a month down?

don't even have an offsite backup that they can pull from to temp use first?

no wonder the aduan page down for so long. must be all DBKL pc down, nothing better to do, just go out on the streets and robohkan illegal structures.

Staff kena phished.and terinstall backdoor ker?
Kikikiki

anybody wanna guess if this is an insider's job or not?

wanna try see if gov paid or not

if gov don't pay, i wonder if all our DBKL saman just vanished or not?

This can paralyze key infrastructure and processes man

I hope our country grows in this area la

Outsourced to where?

No wonder cannot do any transactions to dbkl aystem

PADU how?

we would never because it involves a lot of money

hackers please remove my dbkl fines

As usual salah dap

All sleeping

hello..

more serious wrong doings, just pindah department or transfer only la..
you first day ka?.. 😂..

very true…

normally they ask for bitcoin..

no wonder, when i tried bayar dbkl website, couldn’t access… to this day, still not available..

isn't it obvious? what's the best to songlap cut corner if not skimp up on backup.

i think the hacker are being considerate that ppl at DBKL duno how to get bitcoin or even transfer bitcion the hacker btc wallet address.

kek

uols laugh at dbkl incompetent IT but cyber ransom ppl are getting more effective, they have succesfully ransomed some of the largest companies in the world for millions of USD, so DBKL case is just the beginnign.

unitedhealth-ceo-says-company-paid-hackers-22-million-ransom

This post has been edited by diffyhelman2: May 18 2025, 05:01 PM

erm.. i dun think that united health a poster boy company for great IT infra and management.

heck even their business integrity is in question now.. https://www.wsj.com/us-news/unitedhealth-me...gation-df80667f

if u said AWS got cripple by ransomware until a month and have to pay the hackers.. then ok..

This post has been edited by brkli: May 18 2025, 05:14 PM

why so secretive, dont warn public immediately

No backup at all?

bro.. if they take the trouble to hsck, unless it’s an inside job, they will always ask for bitcoin.. at least 1… ( those who have been hacked will know this)..

Most likely paid in bitcoin unit not actual USD, this is just equivalent value.

dont have backup meh?

so long liao still can not solve meh?

my initial thought, the system went offline as soon ad they found out… because if you downloaded something document, the ransom ware will infect your pc too..

This is pretty funny considering it's actually called OWASP.

does that mean all our cc payment details also gone?

Data being encrypted then backup won't really help, when the system is online all the time and there are many new records being created all the time. If you restore the backup before the data being encrypted, then all those new records after the malware infection are lost. Even the audit trail or secondary realtime data trail might have been encrypted so they cannot be restored. And you cannot explain to the public that from certain date onward all your records with DBKL has been lost so if it involves money or application requests, then tough luck we don't really know what happened to them. That just won't work.

But I do think our national cyber unit is quite knowledgeable. They might be doing analysis of the compromised systems now and try to recover encryption keys if proper measure have been put in place earlier. But that could take time.

This post has been edited by vhs: May 18 2025, 05:29 PM

Ransomware 1 tink.
How much data stolen? 😁

Saman record hilang?

Thats why should sub to ....



So cannot complain services are down anymore.... 🤣🤣🤣

That's why you have an RPO that is commensurate with the criticality of the data. Restoring from immutable backups is still one of the only realistic strategy tonrecover from ransomware attacks.

Btw it has been 9 months since CSA 2024 was passed in parliament to protect our nation's CII, and yet not a single industry code of practice has been issued as of today.

IT staff or web manager should be fired

It head ask vendor, vendor ask contact worker. Semua x tau

Maybe given discount after Murica leader openly said Msia too poor to afford anything.

Most common vector for ransomware is phishing.

I'd be interested to know what sort of awareness trainings are conducted in DBKL, how often refreshers are done, when was the last phishing campaign conducted, and what were the results.

using wordpress itzit

OWAI

MP raps DBKL for non-functioning complaints portal
By LEW GUAN XI
Metro News
Monday, 19 May 2025

FOR weeks, Adu@KL, Kuala Lumpur City Hall’s (DBKL) portal to manage complaints, suggestions and feedback was offline.

This was due to a disruption of its computerised system, said City Hall in a social media post.

Expressing his dissatisfaction, Kepong MP Lim Lip Eng told StarMetro that the disruption had “seriously affected” his team’s ability to help the public.

“We can’t even give complainants any answers because DBKL has completely failed to communicate or explain what is going on.

“There has been no official explanation from DBKL on the cause of this prolonged outage.

“To date, no interim measures or alternative communication channels have been announced to assist the public or reduce the inconvenience caused.

“I urge DBKL to clarify the nature of the disruption, provide a timeline for full restoration and implement temporary solutions so the public can continue to access basic services without undue delay,” he said.

Seputeh People’s Representative Council (MPPWP) Zone 6 chairman Alvin T. Ariarat­nam said the Adu@KL disruption made it harder for his team to help constituents channel their complaints.

Alvin claimed that Adu@KL was disrupted due to the “overwhelming number of complaints” from residents.

However, Taman City Timur Rukun Tetangga chairman Vincent Yap said dealing with the overwhelming number of complaints” was the very reason why Adu@KL was established.

“DBKL’s aspirations to make Kuala Lumpur a world-class city will not be achievable if it can’t even make sure its portals are functioning properly.”

In a statement, DBKL said Adu@KL was expected to be fully accessible tomorrow, along with some other systems such as e-Licensing, e-Housing, Tempah@KL and the Epayment Integrated Centre (EPIC) payment system which were also disrupted.

“Other systems will be restored in phases, with full restoration expected on May 23.

“DBKL has been collaborating closely with the Malaysian Com­mu­­­­nications and Multimedia Commission (MCMC) and National Cybersecurity Agency (Nacsa) to mitigate the issue since the disruption was detected.

“The affected systems have started to recover in phases since May 1.

“To ensure continuity of service to the public, DBKL has provided several alternative measures, including assistance through DBKL’s official social media channels, as well as regular dissemination of information.

The statement also said DBKL was carrying out a detailed investigation to determine the cause of the disruption to enable improvements and implement more effective prevention measures.

“Backup data has not been impacted and the data recovery process is being carried out carefully.”

Source: https://www.thestar.com.my/metro/metro-news...mplaints-portal

MBJB also kena hack ah, johorpay all history are gone..

maybe some idiot in DBKL click on nigeria prince wan to give USD 1miliion email

standard SOP.... they convert the bitcoin to a nominal sum and round it lor

all letter/tender/cost available to download, please wipe out all the outstanding

Asyik minum teh tarik je

mesti tekan link gadis bocah

Hahahahahaha ...

Still using W7 ka?

oh no.. it is gonna from tax payers' punya money or DBKL has income from summons?

This post has been edited by GalaxyV: May 19 2025, 10:38 AM

陈国伟今日出席隆雪陈氏书院宗亲会2025年会员大会暨会员子女奖励金颁发典礼、2025-2028董事改选大会时表示，由于消息源自可靠人士，故他有理由怀疑当中的真实性。

That's so confusing: the information came from a reliable source, so he has a reason to doubt its authenticity?

news said 5500 萬美金 = 55 million USD

True, but no one will pay a ransom of 55 million USD

If they had 55 million USD might as well start from scratch. Would be cheaper.

Malaysia government system always outsourced to shitty company not surprised lol

Might as well ask lower amount, at least still can get money. Both party win-win, scammer get money and victim go back to business

Wah so shitty.

Takkan no backup at all
IT procedure phailed

bharat

owaiii

No wonder cannot access for bayar saman

Can the hacker wipe out the saman record as well ??

ok, my bad

should not ask soalan susah.. LOL

then users would be happy as all summon records sudah hilang

Yeah mine already wiped out, so many saman no need pay already

happy for you

and still got balance for songlap..

emails kan ada

Welcome to msia...

SOP? Compliance? Backup??? APA TU??!! Sy tau goyang telor je~

https://www.tomshardware.com/tech-industry/...rnment-official

"An official from Indonesia’s cyber security agency told Reuters that 98% of the government data stored in one of the two compromised data centers had not been backed up. While the data center had the backup capacity to store the data, it wasn’t required. Many government agencies did not use the backup service because of budget constraints."

how they gonna pay? pay by bitcoin?

inb4, they also using self host mail server which also kena infected by ransomware.. owai..

No nid pay quit rent lmao

sape dl jav sana?

Ransomware doesn't enter from downloading JAV

Even if never watch JAV still can kena ransomware

pay@kl yang replace mobis pun kena ke? hm

padan muka
parking car not enough, then people had to park on the road that people never use also want to saman

or inside job, get rm500 to put in ransomware USB

gomen bodies and their crappy website. Nothing new.

Why pay RM500 for a "inside job" to unleash a ransomware in DBKL when can do it for free with poor security posture?

she said not kena ransom

https://www.sinchew.com.my/?p=6550339

Not surprise, DBKL even has balls to stop paper printing of assessment bill and ask u all to shift online.

if not kena, then the YB can be sued for fitnah?