KUALA LUMPUR: A phishing site imitating the MyKasih Sumbangan Asas Rahmah (Sara) website is being spread on Telegram, says CyberSecurity Malaysia.
In a statement on Saturday (Oct 21), CyberSecurity’s Malaysia Computer Emergency Response Team (MyCert) said that cyber criminals had been found using false website links via Telegram to phish for personal information.
"The user will receive a message along with a fake website link on their Telegram (application). When the user clicks on the link, it would forward them to a fake website that would steal their data after prompting for their phone number," it said.
The website tricks users into putting their information in by masquerading as a Sara status check website.
Upon inputting the phone number, a one-time passcode would be sent to the user, while the website would prompt for the code.
"The information will then be used by 'threat actors' to log into the victim’s Telegram account and attempt to take it over,” the agency said, adding that the website link has been shared across various Telegram groups.
