Actor claims Esyariah breach, took source code and databases
A threat actor on an underground forum claims to have compromised Esyariah, the case management system used by Malaysia's Shariah courts, taking its full source code and databases covering several states, including Selangor, Penang and Sarawak. The actor also claims access remains active and reaches other Malaysian government networks, and says no ransom was demanded. The claim, reported by DailyDarkWeb, has not been independently verified and no breach is confirmed.
What happened
A threat actor on an underground forum claims to have compromised Esyariah, the case management system used by Malaysia's Shariah courts. According to the DailyDarkWeb post, the actor says they took the system's full source code and databases covering several states, including Selangor, Penang and Sarawak. The claim has not been independently verified.
Why it matters
Courts hold sensitive personal and family case data, as the DailyDarkWeb analyst note highlights. If confirmed, a source-code leak can help attackers find new weaknesses in the system. The actor also claims active access to other Malaysian government networks, widening the potential scope of the incident.
What to do
Treat the claim of ongoing access as an investigation priority: review access, sessions and logs for Esyariah and connected government networks. Monitor leak channels for the alleged source code and data.
For the technical team
- Affected
- Esyariah (sistema de gestão de casos usado pelos tribunais da Shariah da Malásia) · Esyariah, the case management system used by Malaysia's Shariah courts. Alleged databases cover several states, including Selangor, Penang and Sarawak.
- Exploitation
- No confirmed exploitation. Claim posted by a threat actor on an underground forum and reported by DailyDarkWeb; not independently verified.
- Fix
- No patch or fixed version applies; mitigation is to investigate and contain the alleged access.
- Vector
- Method not described in the claim. The actor states that access to the environment remains active and that other Malaysian government networks are reachable from it.
- More details
- The actor claims the full source code was taken and says no ransom was demanded. DailyDarkWeb notes that court case data is sensitive, that a source-code leak can reveal new weaknesses, and that the claim of active access to government networks should be treated as an investigation priority. The source provides no dates, group names or technical details.
Timeline
Incident opened.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
