KUALA LUMPUR, September 1 – As Malaysia gears up for the upcoming state election, the need for robust cybersecurity measures has become more urgent than ever. The past year has seen numerous cyberattacks, including data breaches and thefts, highlighting the importance of protecting individual data and election integrity. Last year’s incidents saw personal data theft from a national registry and payment gateway data breach, as well as a significant attack on a payslip system resulting in the theft of millions of payslips and tax forms.

Recently, an insurance group confirmed that two of its local subsidiaries have been impacted by a MOVEit zero-day vulnerability exploit. With the state election on the horizon, cybercriminals may tailor their attacks based on political campaigns, platforms, and even voters’ behaviors. Three main types of attacks are likely to occur during this period: cyber hacktivism, traditional cyberattacks for financial gain, and identity theft through misuse of leaked national identity data. To ensure a cyber-safe election period, the government and individuals can take several measures:

Government Solutions and Recommendations:

  1. Improve Response Times with Analytics and Automation: The system needs to be agile in detecting and preventing the latest malware and exploits across networks, clouds, and endpoints within minutes.
  2. Enforce Zero Trust Network Access (ZTNA) 2.0: Implementing ZTNA 2.0 will help limit the attack surface by isolating internal network segments housing election data and ensuring continuous trust verification and security inspection.
  3. Protect Critical Endpoints: Devices and tools storing voters’ data should receive extra protection with a multi-method approach to block various types of attacks.

Individual Cybersecurity Measures:

  1. Think before Clicking: Be cautious of clicking embedded links in questionable emails.
  2. Watch out for Scare Tactics: Be wary of emails threatening account disablement or service delays until providing personal information.
  3. Ignore Unprofessional Emails: Be cautious of personalized emails requesting confidential information.
  4. Go Directly to the Source: Verify requests for confidential information from known and trusted sources.
  5. Beef up Security: Employ automated, prevention-first cybersecurity approaches to block malicious attempts from entering the network.

With the state election on the horizon, both political entities and voters must recognize the vulnerability to cyberattacks. By adopting robust cybersecurity practices and implementing preventive measures, we can safeguard individual data and maintain election integrity during this crucial period in the country’s history.