Skip to content
Breaking
DND seeks more bases and storage facilities to support AFP modernizationGross domestic product: Detailed results on economic performance in Q2 2026Construction orders rise 6.0% in JuneNutex Health says unauthorised party stole data from serversMalaysian firms warned over rising identity fraud in account creation and recoveryWhatsApp adds multiple passkeys for phishing-resistant sign-ins on iOS and AndroidMarimo patches high-severity flaw allowing pre-cell execution of MCP commandsApple unveils new Mac mini, Mac Studio with major chip upgradesHong Kong’s big trade deficit almost disappears as exports surgeApple unveils M5 Ultra and M6 chips for new Mac Mini and Mac Studio modelsOpenAI’s Jalapeño chip is built for fast inference at scale, benchmarks showTransport Ministry urges public to use licensed, roadworthy vehiclesMalaysia logs unhealthy air quality in 30 areas as haze deepensIndonesian labour ministry and Japan’s JICA deepen safeguards for workers in JapanSellers on Shopee and TikTok call out auto-generated AI ads that mislead customersLay Hong Starts FY27 Steadily On Higher Revenue, RM10 Million ProfitAI companion robots gain ground in Malaysian homes as loneliness gap widensThe safety penalty: Reclaiming operational sovereignty in the age of AI50% tariff threat could curb Canada's access to US marketAI-enabled malware still largely a lab threat despite 405 samplesDND seeks more bases and storage facilities to support AFP modernizationGross domestic product: Detailed results on economic performance in Q2 2026Construction orders rise 6.0% in JuneNutex Health says unauthorised party stole data from serversMalaysian firms warned over rising identity fraud in account creation and recoveryWhatsApp adds multiple passkeys for phishing-resistant sign-ins on iOS and AndroidMarimo patches high-severity flaw allowing pre-cell execution of MCP commandsApple unveils new Mac mini, Mac Studio with major chip upgradesHong Kong’s big trade deficit almost disappears as exports surgeApple unveils M5 Ultra and M6 chips for new Mac Mini and Mac Studio modelsOpenAI’s Jalapeño chip is built for fast inference at scale, benchmarks showTransport Ministry urges public to use licensed, roadworthy vehiclesMalaysia logs unhealthy air quality in 30 areas as haze deepensIndonesian labour ministry and Japan’s JICA deepen safeguards for workers in JapanSellers on Shopee and TikTok call out auto-generated AI ads that mislead customersLay Hong Starts FY27 Steadily On Higher Revenue, RM10 Million ProfitAI companion robots gain ground in Malaysian homes as loneliness gap widensThe safety penalty: Reclaiming operational sovereignty in the age of AI50% tariff threat could curb Canada's access to US marketAI-enabled malware still largely a lab threat despite 405 samples
AI Edge

Malaysian firms warned over rising identity fraud in account creation and recovery

Security teams’ focus on stronger logins has left weaker onboarding and recovery processes exposed to social-engineering attacks, according to a joint alert issued in July 2026 by the US Department of State and allies including Japan, Canada and the UK.

Source: BleepingComputer · August 25, 2026 at 3:31 PM · AI-assisted report

Single-source
Malaysian firms warned over rising identity fraud in account creation and recovery
Image: bleepingcomputer.com

KUALA LUMPUR, 25 AUGUST 2026 —

Listen to this article

DomainFork Audio · read aloud

Share

Security teams’ focus on stronger logins has left weaker onboarding and recovery processes exposed to social-engineering attacks, according to a joint alert issued in July 2026 by the US Department of State and allies including Japan, Canada and the UK.

Market Impact

The warning highlighted campaigns by North Korean IT workers who impersonate foreign nationals to secure jobs, falsifying identity documents during onboarding so they can work remotely under legitimate access. Verizon’s 2026 Data Breach Investigation Report found stolen credentials still feature in 44.7% of breaches, yet many organisations rely on easily researched data such as employee IDs, phone numbers or first-pet names when validating users who call the service desk for password resets.

The same weak checks are exploited by groups like Scattered Spider, whose social-engineering calls to reset privileged accounts were linked to the 2025 Marks & Spencer ransomware breach that cost the retailer an estimated $400 million in lost sales.

AI is lowering the barrier further: synthetic profiles, manipulated images, cloned voices and deepfake video make impersonation more convincing, while fabricated government documents can slip past basic document scans.

Specops Verified ID combines government document validation with biometric liveness detection to strengthen the two high-risk touchpoints—onboarding and account recovery—where organisations must be certain the person in front of the screen is the genuine account holder.

For Malaysian businesses that outsource IT staff or rely on global hiring pipelines, the alert underscores a concrete risk: fraudulent onboarding can plant an insider who already has legitimate credentials before any login controls are tested.

Reporting based on BleepingComputer. Figures and claims are subject to revision as the story develops. DomainFork publishes editorial context, not investment advice — see our editorial standards.