Update 1 (19 February, 8:30PM):The PADU database that R00TK1T hacked into isn’t the Central Database that we are familiar with. According to SoyaCincau, the folders with the PADU name on them are in reference to LPPKN’s Management and Service Delivery Unit, also known as the Unit Pengurusan dan Penyampaian Perkhidmatan in Malay that also utilizes the “PADU” acronym. The title of this article has been updated to reflect the correct “PADU” reference.
Original Article below:
The hacker collective, R00TK1T, has laid claim to not one but two victims in its ongoing digital conquest in Malaysia. According to a recent post via Telegram, the groups says that it has breached the security infrastructure of the LPPKN, or the Ministry for Women, Families, And Communities, and stolen more than 27TB worth of data from its servers.
“Brace yourselves for the earth-shattering revelation brought to you! We Are R00TK1T have infiltrated the impenetrable defenses of the National Council for Population and Family Development (LPPKN) cloud servers.”
Additionally, the group also claims to have stolen data from PADU, which could refer to the country’s Central Database System. “Behind the facade of impenetrability, Malaysia’s PADU organization harbours vulnerabilities that could bring their supposed security to its knees. With our malicious prowess, we R00TK1T discovered critical loopholes and weaknesses within PADU’s infrastructure, exposing the illusion of their invincibility.Brace yourselves as the truth unfolds, revealing that even the most secure institutions are not immune to our prying eyes.”
R00TK1T’s demand still seem to remain the same as before: it wants the government to acknowledge its actions by releasing a public statement. Instead of shutting down infrastructure as it did when it held Maxis hostage, the collective says that the government now has 12 hours to meet its demands, failing which, it seems evident that it will release said data to the public.
