MyCERT 3rd Quarter 2011 Summary Report - CyberSAFE Malaysia

4compared to the previous quarter. Some ofthe malicious code incidents we handledare active botnet controller, hosting ofmalware or malware configuration fileson compromised machines and malwareinfections on computers.Advisories and AlertsIn Q3 2011, MyCERT had issued a total ofsix advisories and alerts for its constituency.Most of the advisories in Q3 involvedpopular end-user applications such asAdobe PDF Reader, Safari web browser andMultiple Microsoft Vulnerabilities. Attackersoften compromise computers of endusersby exploiting vulnerabilities in theirapplications. Generally, these attackers tricka user in opening a specially crafted file (i.e.a PDF document) or web page. Readers canvisit the following URL below on advisoriesand alerts released by MyCERT.http://www.mycert.org.my/en/services/advisories/mycert/2011/main/index.htmlOther ActivitiesIn this quarter, MyCERT had conductedseveral trainings and presentations relatedto incident handling, malware analysis andInternet security awareness. Several of thetrainings that we conducted recently wereIncident Handling for Critical NationalInfrastructure and also for participants ofMalaysian Cyber Drill. We also conductedpresentations at the Hack in TaiwanConference, the DEFCON Conference inthe USA and at OWASP Day. DEFCON isthe world’s longest running and largestunderground hacking conference. OWASPstands for Open Web Application SecurityProject, a non-profit worldwide charitableorganisation focused on improving thesecurity of software applications.ConclusionBasically, in Q3 2011, the number ofcomputer security incidents reported to ushad increased compared to the previousquarter. In addition, most categories ofincidents reported to us had also increased.The increase is also a reflection that moreInternet users are aware of the importance ofreporting security incidents to the relevantparties. In addition, it must be noted thatthere are other factors contributing to theincrease in security incidents, not onlyin Malaysia but worldwide. However, nosevere incidents were reported to us thisquarter and we did not observe any seriouscrisis or outbreak in our constituencies.Nevertheless, users and organisations mustbe constantly vigilant of the latest computersecurity threats and are advised to alwaystake measures to protect their systems andnetworks from these threats.Internet users and organisations may contactMyCERT for assistance at the below contact:E-mail: mycert@mycert.org.myCyber999 Hotline: 1 300 88 2999Phone: (603) 8992 6969Fax: (603) 8945 3442Phone: 019-266 5850SMS: Type CYBER999 report & SMS to 15888http://www.mycert.org.my/Please refer to MyCERT’s website for latestupdates of this Quarterly Summary. ■e-Security | Cyber Security Malaysia | Vol: 28-(Q3/2011)© CyberSecurity Malaysia 2011 - All Rights Reserved