<article>
<div class="each-segment">
    <a id="segment-495077" name="segment-495077" class="segment-anchor"></a></p>
<div class="banner-wrap d-lg-block d-none">
</div>
<div class="segment-head">
<h2></h2>
</div>
<div class="segment-body">
<div class="text">
<div class="">
<p>
</p>
<p><i>Follow us on <a target="_blank" rel="nofollow noopener" href="https://www.instagram.com/saysdotcom/">Instagram</a>, <a target="_blank" rel="nofollow noopener" href="https://www.tiktok.com/@saysdotcom">TikTok</a>, and <a target="_blank" rel="nofollow noopener" href="https://www.whatsapp.com/channel/0029VZzynzi6RGJG0QbRfy3O">WhatsApp</a>&nbsp;for the latest stories and breaking news.</i></p>
</p>
</p>
</p>
</div>
</div>
<div class="each-segment">
    <a id="segment-495300" name="segment-495300" class="segment-anchor"></a></p>
<div class="banner-wrap d-lg-block d-none">
</div>
<div class="segment-head">
<h2>In 2024, organisations in Malaysia will continue to face a challenging cybersecurity landscape amidst technological advancements, where enterprises rely on Artificial Intelligence (AI) or Machine Learning (ML), the cloud, and Web3 technologies for strategic advantages</h2>
</div>
<div class="segment-body">
<div class="text">
<div class="">
<p><p>As these innovations become key battlefronts, both defenders and cybercriminals will exploit their transformative potential, leading to a turbulent cyber landscape. </p>
<p>Business leaders in Malaysia must demonstrate adaptability, reassess workflows, and leverage technological investments to navigate the evolving threat landscape detailed in Trend Micro Malaysia&#8217;s cybersecurity <a target="_blank" rel="nofollow noopener" href="https://www.trendmicro.com/vinfo/us/security/research-and-analysis/predictions/critical-scalability-trend-micro-security-predictions-for-2024">report</a>.</p>
</p>
</div>
</div>
<div class="each-segment">
    <a id="segment-495301" name="segment-495301" class="segment-anchor"></a></p>
<div class="banner-wrap d-lg-block d-none">
</div>
<div class="segment-head">
<h2>Here are four pivotal changes I anticipate in the coming year:</h2>
</div>
<div class="segment-body">
<div class="each-segment">
    <a id="segment-495078" name="segment-495078" class="segment-anchor"></a></p>
<div class="banner-wrap d-lg-block d-none">
</div>
<div class="segment-head">
<h2>1. Generative AI will allow fraudsters to level up their social engineering lures in targeted attacks</h2>
</div>
<div class="segment-body">
<div class="text">
<div class="">
<p><p>Like organisations worldwide, many in Malaysia are eager to harness the advantages of this year&#8217;s most thrilling technology —&nbsp;AI. As with many emerging technologies, AI&#8217;s dual nature as both a tool and a potential threat will become more pronounced in the social dimension of cyberattacks, expected to unfold in 2024. </p>
<p>Of the many AI tools available, generative AI will likely stand out as a potent tool for attackers, enabling impersonation and identity theft tactics. For example, attackers are already cleverly combining AI tools like chatbots and voice clones to create multifaceted threats like virtual kidnapping. </p>
<p>By leveraging AI technologies, <a target="_blank" rel="nofollow noopener" href="https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/how-cybercriminals-can-perform-virtual-kidnapping-scams-using-ai-voice-cloning-tools-and-chatgpt">virtual kidnapping</a> uses misinformation to deceive victims into paying a ransom in exchange for a &#8220;kidnapped&#8221; loved one. In a disturbing trend that has trapped many Malaysians, <a target="_blank" rel="nofollow noopener" href="https://sea.mashable.com/life/28312/the-online-scam-waves-that-hit-malaysia-never-died-down-and-they-probably-will-not-anytime-soon">fraudsters are defrauding victims</a> under the guise of job offers and investment plans. </p>
<p>Similarly, AI-enabled deepfakes (a portmanteau of &#8220;deep learning&#8221; and &#8220;fake&#8221;) cannot be both cheap and convincing for attackers. Hence, it’s more likely that voice cloning will be used in near-future scams and in a targeted way, rather than in volume-based attacks. </p>
<p>In 2024, we&#8217;ll also see continued debate around AI regulations and safety. Global regulatory bodies are proactively responding to the advancements in technology, with recent legislation emerging in China and anticipated regulations from the European Union. </p>
<p>There are growing calls for an international summit focused on AI regulations as well. In the meantime, policymakers are exploring ways to leverage existing data protection laws to address AI misuse. </p>
<p>The Malaysian government is actively working towards introducing the <a target="_blank" rel="nofollow noopener" href="https://themalaysianreserve.com/2023/11/24/malaysia-launches-cybersecurity-strategy-amids-growing-threats/">Cybersecurity Bill</a> and reinforcing its defences through the Malaysian Cyber Security Strategy to combat evolving cyber threats. </p>
<p>However, as these regulations are still in the pipeline, adopting a zero-trust approach becomes crucial for defenders to safeguard against social engineering scams, particularly those exploiting convincing deepfakes.</p>
</p>
</div>
</div>
<div class="image">
<div class="">
<div class="single-image list-unstyled">
<div class="single-image-wrap">
                    <a href="https://images.says.com/uploads/story_source/source_image/1205027/9654.jpg" target="" class="imgwrap colorbox-image cboxElement" title="" rel="segment-810 noopener"><br />
                      <img decoding="async" class="source-img-1205027" alt="" src="https://images.says.com/uploads/story_source/source_image/1205027/9654.jpg"> </a>
                </div>
<p>                <small class="img-credit">Image via <a target="_blank" href="https://www.nst.com.my/news/nation/2022/09/831916/hackers-threaten-sell-civil-servants-personal-data" rel="noopener">New Straits Times</a></small>
            </div>
</p></div>
</p></div>
<div class="each-segment">
    <a id="segment-495079" name="segment-495079" class="segment-anchor"></a></p>
<div class="banner-wrap d-lg-block d-none">
</div>
<div class="segment-head">
<h2>2. Security gaps in cloud environments will see successful cloud-based worm attacks</h2>
</div>
<div class="segment-body">
<div class="text">
<div class="">
<p><p>In recent years, we&#8217;ve seen cloud adoption in Malaysia expanding rapidly, driven by government initiatives and the proactive efforts of the Malaysia Digital Economy Corporation. </p>
<p>As dependence on the cloud increases, organisations in Malaysia must remain watchful for emerging vulnerabilities and threats linked to it. In 2024, an increase in worms that will be tailored to exploit cloud-native platforms and technologies is anticipated.</p>
<p>This risk extends to all organisations, irrespective of their maturity in cloud adoption, as &#8220;living off the cloud&#8221; attacks become more prevalent. More specifically, attacks in Kubernetes environments will become more automated and specialised.</p>
<p>Why will organisations need to brace themselves for worms in 2024? </p>
<p>Firstly, worms are capable of rapid propagation in cloud environments, especially through misconfigurations in APIs. This is because <a target="_blank" rel="nofollow noopener" href="https://www.trendmicro.com/en_us/devops/22/i/cloud-configuration-errors-fixes.html">cloud misconfigurations</a> serve as easy entry points for attackers, due to their overly complicated infrastructures, configuration drift, and improperly configured development environments. </p>
<p>Secondly, attackers can use compromised environments as a stepping stone to infect others. </p>
<p>Thirdly, cybercriminals will be able to scale up and automate their attacks, which is ideal for large-scale attacks on cloud environments. </p>
<p>Thus, organisations&#8217; security posture must proactively scan their cloud environments in search of potential worm attacks and practice zero trust where possible. &nbsp;</p>
</p>
</div>
</div>
<div class="image">
<div class="">
<div class="single-image list-unstyled">
<div class="single-image-wrap">
                    <a href="https://images.says.com/uploads/story_source/source_image/1205028/8276.jpg" target="" class="imgwrap colorbox-image cboxElement" title="" rel="segment-810 noopener"><br />
                      <img decoding="async" class="source-img-1205028" alt="" src="https://images.says.com/uploads/story_source/source_image/1205028/8276.jpg"> </a>
                </div>
<p>                <small class="img-credit">Image via <a target="_blank" href="https://www.nst.com.my/opinion/letters/2022/07/817697/keeping-net-safe-hackers" rel="noopener">New Straits Times</a></small>
            </div>
</p></div>
</p></div>
<div class="each-segment">
    <a id="segment-495080" name="segment-495080" class="segment-anchor"></a></p>
<div class="banner-wrap d-lg-block d-none">
</div>
<div class="segment-head">
<h2>3. Data will be weaponised against fledgling cloud-based ML models</h2>
</div>
<div class="segment-body">
<div class="text">
<div class="">
<p><p>Whereas security concerns about the broader cloud environment stem from threats like misconfigurations and cloud-native attacks designed to provide attackers access to stored data, defending ML models will introduce security teams to a distinct set of challenges that threaten the integrity of the data itself.</p>
<p>In 2024, cloud-based ML faces a growing threat known as data poisoning, where attackers manipulate the data used to train models. </p>
<p>Defenders face challenges as these models draw data from diverse sources like third-party data lakes and federated learning systems. Threat actors can orchestrate attacks during data collection or compromise a model&#8217;s storage and pipeline infrastructure. </p>
<p>Specialised models with focused data are particularly vulnerable compared to larger language models and generative AI models with extensive data. </p>
<p>To guard against this, organisations must validate all training data, secure cloud-stored data with encryption, employ secure transfer methods, implement role-based access control, utilise Cloud Security Posture Management tools, and regularly audit cloud infrastructure for anomalies. This will help to detect and thwart data tampering, misconfigurations, and suspicious activity.﻿</p>
</p>
</div>
</div>
<div class="image">
<div class="">
<div class="single-image list-unstyled">
<div class="single-image-wrap">
                    <a href="https://images.says.com/uploads/story_source/source_image/1205029/c092.jpg" target="" class="imgwrap colorbox-image cboxElement" title="" rel="segment-810 noopener"><br />
                      <img decoding="async" class="source-img-1205029" alt="" src="https://images.says.com/uploads/story_source/source_image/1205029/c092.jpg"> </a>
                </div>
<p>                <small class="img-credit">Image via <a target="_blank" href="https://www.nst.com.my/world/world/2023/05/913528/what-volt-typhoon-alleged-china-backed-hacking-group" rel="noopener">New Straits Times</a></small>
            </div>
</p></div>
</p></div>
<div class="each-segment">
    <a id="segment-495081" name="segment-495081" class="segment-anchor"></a></p>
<div class="banner-wrap d-lg-block d-none">
</div>
<div class="segment-head">
<h2>4. Attacks will become more sophisticated as ransomware groups forge alliances</h2>
</div>
<div class="segment-body">
<div class="text">
<div class="">
<p><p>Over the past few years, ransomware groups have adapted by changing their targets, upgrading tools and techniques, and devising innovative methods to enhance profits and efficiency. Recent observations, with a forecast into the next year, indicate a significant shift in the cybercriminals landscape, as groups increasingly collaborate and form alliances.</p>
<p>Notably, connections between entities like Royal and the emerging player Mimic with the larger Conti ransomware group have emerged. Such collaborations are becoming increasingly popular as they lead to lower costs and expanded market presence while maintaining criminal effectiveness. </p>
<p>Another noteworthy trend involves the strategic targeting of vulnerabilities in Internet-facing servers or those hosting critical business information.</p>
<p>An illustrative example is the Clop ransomware group&#8217;s exploitation of the MOVEit data transfer service, particularly against government agencies, indicating an advanced understanding of software running on services and a preference for targeting vulnerabilities with less lateral movement.</p>
<p>To stay ahead of these evolving threats, organisations must adopt proactive strategies, including a risk-based approach, to identify and disrupt potential intrusions upstream in the kill chain. </p>
<p>This proactive stance not only enhances threat visibility but also empowers organisations to detect malicious behaviour before encryption, improving the likelihood of successful prevention.</p>
<p>Advanced unified cybersecurity platforms equipped with sophisticated Extended Detection and Response (XDR) capabilities play a crucial role, providing businesses with comprehensive visibility to understand, communicate, and mitigate risks across the entire attack surface.</p>
</p>
</div>
</div>
<div class="each-segment">
    <a id="segment-495082" name="segment-495082" class="segment-anchor"></a></p>
<div class="banner-wrap d-lg-block d-none">
</div>
<div class="segment-head">
<h2><em>This story is a personal opinion of the writer and does not necessarily reflect the position of SAYS.</em></p>
<p><em>You too can submit a story as a SAYS reader by emailing us at stories@says.com.</em></h2>
</div>
<div class="segment-body">
<div class="text">
<div class="">
<p>Goh Chee Hoh is the Managing Director of Trend Micro Malaysia.﻿</p>
</div>
</div>
<div class="each-segment">
    <a id="segment-495083" name="segment-495083" class="segment-anchor"></a></p>
<div class="banner-wrap d-lg-block d-none">
</div>
<div class="segment-head">
<h2>For more <a href="https://says.com/my/tech" target="_blank" rel="noopener">#tech</a> news:</h2>
</div>
<div class="segment-body">
<div class="related-source source-related">
<div>
<div class="related-thumb" style="padding-bottom: 10px">
<div class="aspect-ratio-says" style="background-image: url(&quot;https://images.says.com/uploads/story/cover_image/66652/3a98.png&quot;);"><a href="https://says.com/my/tech/tech-trends-2024" class="ga-curator-related">&nbsp;</a></div>
</div>
<div class="related-content">
<h6><a href="https://says.com/my/tech/tech-trends-2024" class="ga-curator-related">8 Key Tech Trends You Need To Watch Out For In 2024</a></h6>
<p>2024 will bring you exciting innovations from the fields of AI, biotech, and more.</p>
</div>
<div class="related-content"><span class="meta-domain pull-left"><img decoding="async" src="https://says.com/favicon-16x16.png"></span><span class="meta-domain pull-right">Read the full story<i class="icon-angle-right"></i></span></div>
</div>
</div>
<div class="related-source source-related">
<div>
<div class="related-thumb" style="padding-bottom: 10px">
<div class="aspect-ratio-says" style="background-image: url(&quot;https://images.says.com/uploads/story/cover_image/65469/170b.png&quot;);"><a href="https://says.com/my/tech/luno-appeal-court-order-700k-lawsuit" class="ga-curator-related">&nbsp;</a></div>
</div>
<div class="related-content">
<h6><a href="https://says.com/my/tech/luno-appeal-court-order-700k-lawsuit" class="ga-curator-related">Luno Considering Appealing Court Order After Hacked Crypto Investor Wins RM700K Lawsuit</a></h6>
<p>The man filed the lawsuit after discovering alleged unauthorised transactions amounting to RM600,000 in cryptocurrencies.</p>
</div>
<div class="related-content"><span class="meta-domain pull-left"><img decoding="async" src="https://says.com/favicon-16x16.png"></span><span class="meta-domain pull-right">Read the full story<i class="icon-angle-right"></i></span></div>
</div>
</div>
<div class="related-source source-related">
<div>
<div class="related-thumb" style="padding-bottom: 10px">
<div class="aspect-ratio-says" style="background-image: url(&quot;https://images.says.com/uploads/story/cover_image/61817/95c8.png&quot;);"><a href="https://says.com/my/news/batu-pahat-rm19m-losses-money-transfer-hackers" class="ga-curator-related">&nbsp;</a></div>
</div>
<div class="related-content">
<h6><a href="https://says.com/my/news/batu-pahat-rm19m-losses-money-transfer-hackers" class="ga-curator-related">Batu Pahat Company Reports RM1.9 Million In Losses Via Money Transfers To Hackers</a></h6>
<p>Investigations are currently underway, and police are looking into all possibilities, including whether it was an &#8220;inside job&#8221;.</p>
</div>
<div class="related-content"><span class="meta-domain pull-left"><img decoding="async" src="https://says.com/favicon-16x16.png"></span><span class="meta-domain pull-right">Read the full story<i class="icon-angle-right"></i></span></div>
</div>
</div>
</div>
</div>
</article>


4 Ways Generative AI May Lead To More Cyber Frauds in Malaysia

Mr D, Specialises In Cutting Hair For Autistic Children

Retired Malaysian Couple Cycles & Collects Trash Every Week

Advice To My Younger Self

TAKNAK MAK MASAK?