Translate
17 October 2019
(KPDNHEP) has suspended the newly-launched Petrol Subsidy Programme microsite after a tech portal reported that it exposed users’ bank account details.
KPDNHEP suspends Petrol Subsidy Programme microsite which exposed users’ bank account details
TECH NEWS
Thursday, 17 Oct 20191:15 PM MYT
By Angelin Yeoh
image: https://apicms.thestar.com.my/uploads/images/2019/10/17/333461.jpg
The Petrol Subsidy Programme microsite, which went live on Oct 15, is for users to find out if they are eligible for petrol subsidy, as announced in Budget 2020.
The Domestic Trade and Consumer Affairs Ministry (KPDNHEP) has suspended the newly-launched Petrol Subsidy Programme microsite after a tech portal reported that it exposed users’ bank account details.
KPDNHEP head of corporate communication, Yunus Tasim, said the ministry is aware and investigating the issue.
"Once we got the news, we decided to put the website on hold because we don't want to risk anything. We don't want users to be sceptical about our system,” he said.
He added that once the issue is rectified, the ministry will restore the system.
Lowyat had reported that once a person’s MyKad number is entered in the portal, it will reveal the last four digits of the user’s bank account number.
However, when it looked into the source code, the full account number was visible.
Yunus said the ministry will be in touch with Lowyat for more information.
“We would like to thank all the users for their patience and feedback given to us," he said.
Cybersecurity company LGMS director Fong Choong Fook said the security flaw is mostly likely due to the ministry rushing to launch the microsite.
The Petrol Subsidy Programme microsite, which went live on Oct 15, is for users to find out if they are eligible for petrol subsidy, as announced in Budget 2020.
“The bigger concern now is if someone can use the website as a tool to phish out information, just imagine what that person can do with the details,” Fong said.
“They could impersonate a bank officer and call a victim for extortion. A lot of exploitation can be done here."
Dr Aswami Fadillah Mohd Ariffin, president of Protem Digital Forensics Research Society (DFRS), said web-based development should go through security auditing at the staging level before production to avoid any security issues when the site goes online.
He said that the website developer must ensure secure coding and infrastructure design are followed before giving the go ahead for the launch.
Once the ministry rectifies the issue and rechecks again, it can give users access to the website, he added.
Fong said the issue can be rectified with a "quick fix on the coding side".
Read more at https://www.thestar.com.my/tech/tech-news/2019/10/17/kpdnhep-suspends-petrol-subsidy-programme-microsite-which-exposed-users-bank-account-details#0IqusZlsukWHmKY4.99
Popular Posts - Last 7 days
-
Dua buah helikopter milik Angkatan Tentera Malaysia (ATM) dilaporkan terhempas ketika menjalani raptai di Kem Tentera Laut Diraja Malaysi...
-
TLDM tragedy: Nation mourns worst helicopter crash Bernama 24/04/2024 TLDM tragedy: Nation mourns worst helicopter crash Two helicopters c...
-
PM nafi kerajaan beri lesen kasino di Forest City Bernama 25/04/2024 PM nafi kerajaan beri lesen kasino di Forest City Perdana Menteri ...
-
Dua helikopter TLDM bertembung semasa Latihan Lintas Hormat Sambutan Hari Ulang Tahun TLDM Ke-90. Pesawat HOM (M503-3) yang membawa tujuh or...
-
KL20 Summit 2024 to attract high-quality investments - PM Bernama 22/04/2024 PM Datuk Seri Anwar Ibrahim said the summit marks a comprehens...
-
Police arrested two individuals from a welfare home after a complaint of an elderly man being beatenThe police arrested two individuals including the owner of an elderly welfare home here following a complaint of an elderly man being beaten...
-
Former Prime Minister, Tun Abdullah Ahmad Badawi, was admitted to the National Heart Institute (IJN) last night, after reportedly experienci...
-
TOP 100 AIRPORTS https://www.worldairportawards.com/worlds-top-100-airports-2024/
-
PM Anwar tubuh Jawatankuasa Penasihat Dasar Kepada Perdana Menteri - PMO Bernama 22/04/2024 PM Anwar tubuh Jawatankuasa Penasihat Dasar Ke...
Popular Posts - Last 30 days
-
Saudi says application for 1444 H umrah visa opens from today Bernama Julai 14, 2022 The Ministry of Haj and Umrah of Saudi Arabia has ann...
-
King presents appointment letters to four new envoys Bernama Julai 12, 2022 His Majesty presenting the letter of appointment to M'sian...
-
Following is BEST FBKL's selection of The Top Ramadan 2024 Buka Puasa Buffet's in Kuala Lumpur and the Klang Valley. We hope that y...
-
Wan Saiful confirms he is no longer PTPTN chairman Bernama Julai 12, 2022 Bersatu Information chief Datuk Wan Saiful Wan Jan today confirm...
-
Naz Empire's defamation lawsuit against Awal Ashaari to go to trial as mediation fails Bernama Julai 12, 2022 The defamation lawsuit f...
-
Kedah MB: ECK no longer part of Kulim airport project Bernama Julai 13, 2022 Muhammad Sanusi announced that the ECK Group of Companies (EC...
-
‘Alas pintu’ dengan gambar Kaabah sebenarnya sejadah mini - AEON BiG April 13, 2024 Susulan penularan gambar yang mendakwa penjualan ‘alas ...
-
Screenshot of a video shared by the public of the incident at the Kuala Lumpur International Airport (KLIA) Arrival Hall 1 on Sunday. SEPANG...
-
Paris court grants Malaysia's application to suspend claims by purported heirs of Sultan Jamalul Kiram II Bernama Julai 13, 2022 Dr Wa...
Blog Archive
-
►
2023
(3771)
- December (311)
- November (322)
- October (286)
- September (288)
- August (365)
- July (349)
- June (372)
- May (316)
- April (279)
- March (301)
- February (245)
- January (337)
-
►
2022
(4309)
- December (352)
- November (422)
- October (288)
- September (281)
- August (347)
- July (303)
- June (335)
- May (406)
- April (341)
- March (371)
- February (390)
- January (473)
-
►
2021
(9030)
- December (636)
- November (647)
- October (809)
- September (797)
- August (880)
- July (894)
- June (747)
- May (780)
- April (580)
- March (629)
- February (643)
- January (988)
-
►
2020
(6800)
- December (819)
- November (698)
- October (832)
- September (729)
- August (548)
- July (558)
- June (615)
- May (394)
- April (368)
- March (453)
- February (439)
- January (347)
-
▼
2019
(4089)
- December (411)
- November (425)
- October (375)
- September (279)
- August (397)
- July (353)
- June (326)
- May (315)
- April (266)
- March (318)
- February (293)
- January (331)
-
►
2018
(4100)
- December (305)
- November (304)
- October (357)
- September (352)
- August (420)
- July (442)
- June (366)
- May (412)
- April (343)
- March (275)
- February (233)
- January (291)
-
►
2017
(3888)
- December (268)
- November (293)
- October (352)
- September (309)
- August (356)
- July (300)
- June (319)
- May (354)
- April (316)
- March (335)
- February (306)
- January (380)
-
►
2016
(4563)
- December (331)
- November (328)
- October (378)
- September (415)
- August (404)
- July (380)
- June (310)
- May (370)
- April (430)
- March (484)
- February (355)
- January (378)
-
►
2015
(4588)
- December (402)
- November (392)
- October (393)
- September (375)
- August (450)
- July (392)
- June (456)
- May (407)
- April (408)
- March (374)
- February (262)
- January (277)