KUALA LUMPUR: More arrests may be made for involvement in an international syndicate which developed phishing templates to dupe victims across a few countries.
Bukit Aman Commercial Crime Investigation Department (CCID) director Datuk Seri Ramli Mohamed Yoosuf told the New Straits Times that his team is also investigating how the syndicate was able to operate for several years without detection.
This includes the possibility of them being protected.
"We don't rule out the possibility of making more arrests during our investigation.
"We are still looking into the matter (how they can operate without detection and the possibility of them being protected) but normally cyber offences would require more investigation on the modus operandi they use which kept on changing according to the latest technology," he said.
Meanwhile, when asked about the extent of losses incurred after the usernames and passwords of 1,038 users, including civil servants, were compromised, Ramli said they have yet to receive such information.
"But we will gain more information through our investigation," he added.
Inspector General of Police Tan Sri Razarudin Husain yesterday revealed that eight men had been apprehended for their involvement in an international syndicate that develops phishing templates and scripts to dupe victims causing over RM1.2 million in losses.
A special operation dubbed 'BulletProftLink' was launched with assistance from the Australian Federal Police (AFP) and United States Federal Bureau of Investigation (FBI) after receiving a tipoff two weeks ago regarding the syndicate's operation which was based here.
He said the syndicate developed phishing templates and scripts similar to government websites in various countries including Malaysia, Australia and the United States to obtain the credentials of the users.
The syndicate was believed to be headed by a Malaysian software developer who has no educational background related to information technology.
It is learned that the man, in his 40s, developed his skills independently.
Razarudin said the syndicate started their operation back in 2015 and then became more active in 2020.
A total of 37 reports were lodged to the police so far. Razarudin said the police have launched investigations under Section 41 of Computer Crimes Act 1997 and Section 420 of the Penal Code.