New website comes up, SiapaKenaHack, but it's fake

PETALING JAYA: The viral website siapakenahack.com is fake.

This was confirmed by C.F Fong, the creator of the website. Fong is also the founder of security services company LGMS.

Fong said he created the site to educate Malaysians to be vigilant of fake websites.

"The whole idea is to educate people because recently people were keying in their identification card (IC) numbers into the sayakenahack.com website,” said Fong.

He said that the best way to check whether an IC number has been registered with different phone companies is to check with the telecommunication companies directly and not a website.

"You shouldn't depend on any broker or third party to find out," he said on Sunday (Nov 19).

A check of the now-viral siapakenahack.com website shows that it claims to have been developed by the Ministry of Malaysia National Cyber Communication Council (MNCCC).

However, a page opens up after a visitor submits their phone number claiming that it is “a fake website to teach you about phishing schemes”.

The page also revealed that the MNCCC Ministry did not exist.

"Someone can create a similar website like this but with sinister motives. The moment you key in your phone number, a prompt may ask you to install a plug-in or simple software for verification," he said, adding that people were usually less defensive when asked to key-in their phone numbers.

Fong said this was the time when the website could send malware or ransomware for hackers to hack into the account.

"The correct procedure is not to key in anything on any website that you are unsure of," he said.

Fong added that, about 500 people have input their phone numbers into the website since Sunday morning.

Fong also said there were telltale signs on the website that should have revealed that the website was not real.

"The Malaysian coat of arms is not real. The tigers had no tails and there were only three instead of five keris," he said.

Fong said people naturally let their guard down when they see something familiar, hence, Malaysians should always double check to ensure that it was a legitimate site.

He also advised Malaysians to be extra careful of sites that asked for personal information, especially websites they were not familiar with.

"If you are more technical and IT savvy, you could actually check the origin of the website, the owner, the place the website is hosted and also by Google-searching the website,”  said Fong.

The Star recently ran a series of articles on a data breach that happened in 2014 and involved the personal details of 46.2 million mobile subscribers in Malaysia.

Note: The siapakenahack.com website is a different website to SayaKenaHack.com which has been blocked by the authorities.