23/03/2026

LYFE MONDAY | MAR 23, 2026

23 ‘Bantuan Ramadan’ scams aim at hijacking Telegram accounts

C YBERSECURITY researchers have identified Ramadan-themed scams circulating online that impersonate government aid programmes and attempt to steal users’ credentials from Telegram accounts. In one campaign observed by Kaspersky, scammers use a page posing as a “Bantuan Ramadan RM500” aid offer, prompting victims to submit their personal details and phone numbers linked to their Telegram accounts under the pretext of checking eligibility for festive financial assistance. The primary objective of such a scheme is often account hijacking instead of committing financial theft at the first stage. Once attackers gain access to a victim’s Telegram account, they may use it to spread scam messages or malicious links to contacts, allowing the fraud to scale through trusted social circles. Festive and financial aid disbursement periods are frequently exploited by cybercriminals, who mimic the language, visual design and tone of official announcements to make scams harder for users to distinguish from official communications. Festive-themed scams are part of a wider cyber threat landscape affecting internet users in Malaysia. According to Kaspersky telemetry, a total of 18.88 million different web-borne cyberthreats were detected locally throughout 2025, highlighting the scale of persistent risks Malaysians face online. Malaysian authorities have also warned the public about a range of Ramadan-related scams circulating online. In a recent advisory, the National Security Council highlighted several tactics used by scammers during the fasting month, including fake financial assistance schemes such as “e-Tunai” offers, phishing messages disguised as iftar invitations or promotions, fraudulent zakat and donation appeals, as well as “belanja raya” scams that promise festive rewards and financial support. “People often believe they can recognise scams instinctively, but modern scams and phishing In a recent statement, MCMC said Apple had released an important security update addressing vulnerabilities, including an exploit chain known as “DarkSword” affecting iOS devices, particularly Apple iPhones. It said the vulnerabilities could be exploited together to compromise affected devices, potentially allowing unauthorised access and other malicious activities. “Users are therefore advised to update their devices to the latest iOS version to ensure they remain protected,” it said. MCMC said devices that were not updated could be exposed to security risks, including unauthorised access to device data and personal information, installation of spyware or malicious software, theft of messages, files or other sensitive data, as well as possible monitoring or surveillance of the device. The commission strongly advised

o Cybercriminals exploit festive period by mimicking govt aid programmes schemes are designed to exploit that assumption. With advances in technology, cybercriminals can mimic websites of trusted brands, organisations and familiar narratives, making fraudulent messages appear convincing at first glance. This is why having a dedicated cybersecurity protection on smartphones and computers is increasingly important, as security solutions can help detect malicious links, phishing attempts and suspicious apps before they cause harm,” said Kaspersky general manager for Asean and Asia Emerging Countries Simon Tung. To stay safe from online scams: 0 Verify before clicking: Avoid clicking on links sent by unknown accounts on messengers, social media accounts or suspicious emails, especially those offering financial assistance or festive rewards. 0 Check suspicious numbers or accounts: Use trusted anti-scam resources such as the Semak Mule portal to verify whether a bank account or phone number has been reported for fraudulent activities. 0 Call 997: If you fall victim to scams, immediately contact the National Scam Response Centre by calling 997, which operates 24 hours a day to help victims respond quickly. 0 Install trusted security software: A reliable cybersecurity solution can help detect and block phishing attempts and malicious links in real time.

An example of a ‘Bantuan Ramadan’ scam that is designed to hijack Telegram accounts.

MCMC urges immediate iOS update to patch critical security flaws THE Malaysian Communications and Multimedia Commission (MCMC) has urged Apple users to immediately update their iOS devices following the discovery of multiple security vulnerabilities.

as his hard-earned savings vanish in an instant. Pak Jabit is later supported by his family and the villagers, who come together to help him recover and rebuild his business. The narrative highlights the strength of community bonds while warning of the growing dangers of cybercrime. The special video serves as a reminder from MCMC for the public to remain wary of unknown messages or links, especially during the festive season when online activity spikes. People are also advised not to share personal or financial information and to always verify the authenticity of any information before taking action. This initiative is part of MCMC’s ongoing efforts to strengthen digital safety awareness, highlighting that even a single careless click can result in significant losses. In addition to Aziz, the video features well-known actors such as Bell Ngasri, Kazar Saisi, Joey Daud and several others. The music video is available on YouTube. – Bernama

Aziz as Pak Jabit, who falls victim to a scam in the music video. – PIC FROM YOUTUBE @MCMCTV users to enable automatic updates, avoid visiting suspicious websites, only install applications from the official Apple App Store, restart their devices after updating and remain alert to any unusual behaviour. Aidilfitri music video to raise awareness of online scams Meanwhile, MCMC has released a special music video for Aidilfitri titled 19.5 Puasa di Kampom Pisam – Selamat Tenet Raya to raise public awareness about online scams.

who is busy preparing for Hari Raya Aidilfitri at his stall while eagerly awaiting his children’s return home. However, his joy turns to sorrow when he falls victim to a scam after receiving a suspicious message, resulting in the loss of his entire savings. The incident not only derails his festive preparations but also delivers a heavy emotional toll,

MCMC added that the public should practise safe digital habits and rely only on information from official sources.

Directed by Amen Khalid, the video tells the story of a small trader Pak Jabit, played by Aziz M Osman,