Cybersecurity researchers at Kaspersky have issued a high-alert warning regarding a surge in Ramadan-themed scams designed to hijack Telegram accounts. These fraudulent schemes specifically impersonate government aid programs to exploit Malaysians during the festive season.
The Hijacking Tactic
One prominent campaign identified by researchers uses a sophisticated phishing page offering a “Bantuan Ramadan RM500”. Victims are prompted to enter personal details and phone numbers linked to their Telegram accounts under the guise of an eligibility check.
According to Kaspersky, the primary goal of these scammers is account hijacking rather than immediate financial theft. Once an account is compromised:
- Attackers gain full access to the victim’s Telegram profile.
- The hijacked account is used to spread malicious links or further scams to the victim’s contacts.
- The fraud scales rapidly by exploiting the “trust” inherent in established social circles.
A Growing Threat Landscape
Cybercriminals are increasingly adept at mimicking the visual design, language, and tone of official government announcements, making these fake “official” communications difficult to spot. The National Security Council (MKN) has also flagged several other seasonal tactics, including:
- Fake “e-Tunai” offers and financial assistance schemes.
- Phishing invitations disguised as iftar promotions.
- Fraudulent zakat and donation appeals.
- “Belanja raya” scams promising festive rewards.
In 2025 alone, Kaspersky detected over 18.8 million web-borne cyberthreats in Malaysia, highlighting the massive scale of the risks faced by local internet users.
How to Protect Yourself
“People often believe they can recognize scams instinctively, but modern schemes are designed to exploit that assumption,” says Simon Tung, General Manager for ASEAN at Kaspersky. He emphasizes that advanced technology allows criminals to mimic trusted brands and familiar narratives convincingly.
Verify Links
Avoid clicking links from unknown accounts on messengers or social media.
Check Credentials
Use the Semak Mule portal to verify if a phone number or bank account has been reported for fraud.
Emergency Response
If you fall victim, immediately call the National Scam Response Centre (NSRC) at 997.
Use Protection
Install reliable security software to block phishing attempts in real-time.
Ramadan Security Offers
To support Malaysian users, Kaspersky is offering up to 19% off its Premium plans through the Ramadan and Hari Raya period. Eligible purchases made before 31 March 2026 will also receive a free RM30 TNG Reload Pin.
