Cyber Incident Victim: Malaysia Airports Holdings Berhad
Date:
Mar 2025
Location:
Malaysia
Summary
Malaysia Airports Holdings Berhad experienced a cyber attack where hackers demanded US$10 million. The government, led by Prime Minister Anwar Ibrahim, refused the ransom demand outright. Discussions occurred to address the attack and the hackers' ultimatum, though specific details about the incident's resolution were not disclosed. This event underscored cybersecurity vulnerabilities, prompting plans to allocate increased resources to entities like the police and Bank Negara to bolster defenses against such threats.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In late March 2025, Malaysia Airports Holdings Berhad (MAHB) experienced a cyber attack. Hackers targeted the airport operator and demanded a ransom payment of US$10 million. Prime Minister Datuk Seri Anwar Ibrahim publicly disclosed the incident during the 218th Police Day celebration at the Police Training Centre (Pulapol) on March 25th, 2025. He stated the attack occurred "one or two days ago," placing the event around March 23rd or 24th. Discussions were held within the government to find solutions to resolve the issue, including how to address the hackers' specific demands. The Prime Minister characterized the attack as "quite serious" against MAHB during this timeframe.
The Malaysian government, led by Prime Minister Anwar, made a swift decision not to pay the ransom demanded by the attackers. Anwar emphasized that he rejected the demand immediately, citing the principle that the country's leadership should not submit to criminals' ultimatums. He acknowledged the inherent risks associated with refusing to pay the ransom but framed the incident as proof of the urgent need to bolster Malaysia's cybersecurity defenses. Consequently, the government planned to allocate additional funds specifically to strengthen national cybersecurity systems. This increased funding was intended for key institutions, including the police force and Bank Negara, to better prepare them for future cyber threats. While the Prime Minister confirmed the attack and the government's response, he did not provide specific details about the nature of the attack itself or whether it had been fully resolved at the time of his announcement.