A threat actor is claiming to have breached and is now selling data from the Malasian Search and Rescue Operation Coordination System (SAROCS).
SAROCS is a critical, cloud-based platform used by Malaysian Search and Rescue (SAR) agencies. The system integrates data from multiple devices and systems, allowing various agencies to access crucial data to coordinate and facilitate operations remotely.
According to the actor, they are selling the entire coordination system. Based on the system’s function, the allegedly compromised data is not public information but highly sensitive operational data. This likely includes:
-
Flight plans
-
Radar tracks
-
Last known positions of vessels or aircraft
-
Emergency beacon data
-
Sighting reports
-
Internal communications (phone, email)
-
Meteorological information
-
Rescue unit deployment plans and operational orders
-
Real-time operational status from field crews
