A threat actor published a database on a dark web forum claiming that it belongs to Maybank2u. Maybank is Malaysia’s largest bank by market capitalisation and total assets and one of the largest banks in Southeast Asia.
According to the forum post the alleged leak contains databases including user personal data as well as login information. The leaked information includes the following:
- Name
- Password
- Address
- Gender
- DoB
- City
- IC_number
- Contact_number
- State
- Postcode
The threat actor provided samples from the alleged leak and left a Telegram handle in the message as a contact information. For the alleged leak, the threat actor is requesting $18K and accepting USDT/BTC for the payment. It is also included in the message that the threat actor prefers Chinese customers.
