Cyber Alerts

Fake Bank Negara Malicious APK Alert

Verified Officially confirmed

National Cyber Coordination and Command Centre (NC4) and MyCERT has received numerous reports of smartphones users being infected with malware through a phishing campaign involving Bank Negara Malaysia (BNM).

First observed
10 Jan 2018
Last checked
31 Jul 2026
Evidence records
1
Publication state
Published

What happened?

Current assessment

National Cyber Coordination and Command Centre (NC4) and MyCERT has received numerous reports of smartphones users being infected with malware through a phishing campaign involving Bank Negara Malaysia (BNM).

Why it matters

Loss of money of the affected victims, disclosure of personal information to unknown parties may escalate to further scams.

Who is affected?

Affected products and groups

No affected entity has been safely confirmed in the structured record yet.

What should you do now?

Actions from official guidance

For technical teams

  1. We advise members of the public to perform the following actions: Official source
  2. When you received a telephone call claiming from the law enforcement agency: Do not panic End any suspicious calls immediately and do not respond to any instructions given over the telephone; Call back the law enforcement agency or any institution mentioned directly using the official number published in their official websites for verification; Do not click/download any applications from links given through any messaging services; Update the operating systems and applications on your smart devices regularly with the latest security updates and patches; Verify an application's permission and author or publisher prior to installation; Verify URL on mobile sites as it appears differently from desktop browser; Install reputable antivirus on your smart devices and keep it updated; Avoid public Wi-Fi networks when performing banking transactions and switch off Bluetooth connection when not in use; Do not root or 'Jailbreak' your smartphones; Download apps which has been verified safe from Google Play or Apple App Store only. Please ensure to turn off the "Unknown Source" option in the Security Settings page. Avoid installing apps from unofficial sources whenever you can. If you suspect that you have been a victim, please contact law enforcement agency. Official source

Which sources support it?

Evidence and official sources

  1. NACSA / NC4 Alerts and AdvisoriesOfficial source
    Fake Bank Negara Malicious APK Alert

    National Cyber Coordination and Command Centre (NC4) and MyCERT has received numerous reports of smartphones users being infected with malware through a phishing campaign involving Bank Negara Malaysia (BNM).

    Published 10 Jan 2018 · Retrieved 31 Jul 2026