Aminia confirms breach of externally hosted services, claims no sensitive data leaked


On Jan 30, the R00tk1t hacker group claimed responsibility for a cyberattack on Aminia. — 123rf.com

PETALING JAYA: Telecommunications service provider Aminia has confirmed that its externally hosted services have been breached following claims made by notorious hacker group R00tk1t.

In a statement to LifestyleTech, an Aminia spokesperson said that despite the attack, it has had no impact on its ongoing customer operations, and no sensitive customer data was leaked.

It said that as an external service provider, it doesn’t store customers’ Personal Identification Information (PII).

The company also claimed that the Aminia-branded routers currently deployed by its telco customers are not affected, as “these are not connected to any of (the) Aminia external servers or services”.

The Aminia spokesperson further added that the company had already lodged a report with the authorities and briefed its telco customers on the incident.

The R00tk1t hacker group had originally claimed responsibility for a cyberattack on the company on Jan 30, alleging that it had successfully breached Aminia via its Telegram group.

On Monday (Feb 5), R00tk1t claimed to have breached Maxis, though the telco said it had not found any intrusions into its internal systems.

It did, however, discover a suspected incident of unauthorised access to a system belonging to a third-party vendor, which it didn’t name.

R00tk1t had warned that it would be targeting Malaysian digital infrastructure on Jan 26.

In response to the warning, the National Cyber Coordination and Command Centre (NC4) published an advisory on its website, alerting local organisations to be vigilant in regard to the threat actor targeting the country's infrastructure on Jan 28.

"Considering the potential duration of this campaign, which could span several weeks, NC4 strongly advises all Malaysian organisations to implement essential preventive measures in order to safeguard against this attack.

"Failure to do so could result in operational disruptions and compromise the security of the organisation's infrastructure, data, and systems," it wrote in the advisory.

The NC4 also states that the hacker group had previously targeted various sectors in other countries by exploiting known vulnerabilities and utilising insiders.

A similar advisory from MyCert was also published today (Feb 6) on its website.

Follow us on our official WhatsApp channel for breaking news alerts and key updates!
   

Next In Tech News

Amazon to push cashierless shopping tech into more third-party stores, while backing off itself
Banks told to anticipate risks from using AI, machine learning
Meta should give users free option without targeted ads, EU privacy watchdog says
EU privacy watchdog opposes Meta's fee model, says source
SiTime introduces chip aimed at saving power in AI data centers
Semiconductor equipment maker ASML ships second 'High NA' EUV machine
Netflix subscriber growth in focus as gains from password-sharing crackdown seen easing
TikTok asked by EU about risks of TikTok Lite to children after France, Spain launch
China’s thirsty data centres, AI industry could use more water than size of South Korea’s population by 2030, report warns
Couple duped in ‘very unusual’ gold bar scam loses over RM550,000, US cops say

Others Also Read