$10M Hack Thwarted: Malaysian Airport Uses Marker

Computer failures at the Malaysian Kuala Lumpur Airport last weekend turned out to be the result of cyber attacks, as reported by the National Cybersecurity Agency of Malaysia and the leadership of the country’s airports. The attack, which began on March 23, caused significant disruptions in the operation of systems.

The National Cybersecurity Agency (NACSA) and Malaysia Airports Holdings Berhad (MAHB) have launched a comprehensive investigation to determine the nature and extent of the incident since its detection. NACSA was notified of the attack on the day it started and has been in constant communication with all parties involved.

Prime Minister of Malaysia Anwar Ibrahim confirmed the cyber attack during a public speech on March 26, stating that hackers targeted MAHB and demanded a $10 million ransom. Ibrahim made it clear that he refused to negotiate with the hackers, describing such actions as a betrayal and a threat to national security. He emphasized that the state will not make any concessions to external or internal threats.

While the specific type of malware used has not been officially disclosed, and no known group has claimed responsibility for the attack, the ransom demand suggests the possible involvement of encryption software. Authorities have not released further technical details at this time.

Despite the attack, Malaysia Airports representatives have stated that key operations at Kuala Lumpur Airport are running normally. However, there have been reports and images circulating online showing that certain terminals experienced disruptions in the information display system, registration, and baggage handling for over 10 hours. As a result, staff had to resort to manual methods, using whiteboards to note departure times.

Former deputy of the Malaysian Parliament criticized the government for lack of transparency regarding the cyber attack. The politician raised doubts about the official explanation of the network equipment failure, pointing to the extended period of system downtime and the inadequate emergency preparedness at the international airport.

/Reports, release notes, official announcements.