Malaysia could be vulnerable to hybrid cyberattacks, say experts [WATCH]

KUALA LUMPUR: Malaysia may be able to withstand individual cyberattacks, but its ability to cope with a sustained, multi-sector assault remains uncertain, warned security experts.

They said weaknesses in coordination, preparedness and recovery could expose critical national infrastructure.

The country's growing digital economy, expanding data-centre industry and geopolitical position has also increased its attractiveness as a target, they said.

Cybersecurity practitioner and adjunct professor Murugason R. Thangaratnam said cyberattacks could involve ransomware, data theft, espionage and supply-chain compromises by state actors and hacktivists.

While the Cyber Security Act 2024 had established a framework for protecting National Critical Information Infrastructure (NCII), he said preparedness remained uneven.

"My assessment is that Malaysia can probably withstand most single incidents.

"A sustained, multi-sector attack, which is what 'hybrid' implies, would test our coordination, talent and recovery capacity in ways we have not rehearsed," he said.

Former CyberSecurity Malaysia chief executive officer Datuk Dr Amirudin Abdul Wahab said Malaysia had established an important foundation through the National Cyber Security Agency, the NCII framework and the National Cyber Crisis Management Plan.

However, he said having legislation, institutions and security technologies did not automatically translate into operational readiness.

He warned that disruption in one sector could cascade into others, as banking depended on telecommunications, telecommunications relied on energy, while government services depended on cloud and network infrastructure.

He proposed an urgent 90-day cyber resilience audit of critical national systems, focusing on whether attackers could move between networks, disrupt operations and compromise recovery systems.

"Don't wait for an attack to test your cybersecurity.

"Assume that our perimeter will eventually be breached and prepare for what happens next," he said.

Cybersecurity professional Dr Mohamed Anwer Yusoff said recent incidents highlighted vulnerabilities involving connected infrastructure, technology vendors and supply chains.

These include the cyberattack at the Tanjung Pelepas Port in September, which temporarily disrupted terminal operations, the cyberattack on Tabung Haji last month that led to the temporary suspension of services and the reported compromise of public LED display screens in Kluang, Johor, last week.

Anwer said national preparedness should be measured by the ability to detect intrusions early, contain damage, maintain essential services and restore operations within acceptable timeframes.