appConfigEntityId

bodyType

customContents

entityId

entityUuid

isVideo

articlePageQuery

article

articleSchemaContent

content

hooksArticlePageAdvertisementConfigArticle

hooksArticlePageFloatingButtonConfigArticle

appConfig

filter

json

liveArticle

Hadi Azmi

Hackers are increasingly targeting Malaysia’s growing automotive sector, cybersecurity experts have warned in a new report that raises alarm over gaps in threat detection, including potential data theft via phones hooked to digital dashboards on vehicles.
A key automotive manufacturing hub in Southeast Asia, Malaysia has attracted around 26 billion ringgit (US$6.15 billion) in electric vehicle investments since 2018 from global marquee names including Tesla, Mercedes-Benz, Volvo, BMW, Porsche, Audi, Stellantis and Dongfeng.
But the industry’s rapid shift towards software-dependent vehicles is creating new vulnerabilities ripe for exploitation by malicious actors, according to Singapore-based Ensign Infosecurity’s 2025 report on the cyber threat landscape in Asia-Pacific.
“Malaysia’s extensive network of automotive suppliers, manufacturers and service providers further exposes organisations to vulnerabilities in the cyber supply chain,” Jeremy Moke, senior director of Ensign Infosecurity Malaysia, told This Week in Asia.
One vulnerability involves attackers intercepting sensitive data from mobile devices connected to a compromised vehicle’s infotainment systems through widely used platforms such as Apple CarPlay and Android Auto, according to Moke.
“The automotive and mobility sector is an emerging target sector in Malaysia,” Moke said. “The proliferation of modern vehicles integrating complex computing, software, and the supporting infrastructure creates new points of vulnerability.”
Ensign’s report puts the automotive sector behind the public sector, telcos, hospitality and banks in the ranking of industries most vulnerable to cyberattacks.
It also points to emerging threats targeting Malaysia’s wider infrastructure, such as energy and utilities, as well as the nation’s defence and law enforcement sectors.

These vulnerabilities are compounded by an evolving threat landscape across the Asia-Pacific, where hackers are not only growing in number and technical skill but also increasingly collaborating with organised crime syndicates and state-linked actors.
Those alliances have blurred traditional lines between ideologically driven cyberattacks and those motivated by commercial gains or espionage, according to the study.
“The cyber underground today fosters both competition and collaboration, significantly boosting the effectiveness and success rates of cyberattacks,” Moke said.
“These alliances, combined with widening supply-chain vulnerabilities, have made threat groups like hacktivists more capable, persistent, and difficult to dislodge.”
It is also taking longer for cyberattacks to be detected, from an average of 49 days in 2023 to 201 days last year.
Even in highly regulated sectors such as banking, Ensign said attackers had enjoyed prolonged windows of opportunity, with breaches typically taking around 21 days on average to detect and rarely identified in less than 10 days.
Such a substantial lag gives attackers ample time to access and steal critical data long before security teams can respond.
Data breaches have dominated cybersecurity conversations in Malaysia in recent years, contributing to the slow adoption of the government’s new digital identification initiative.
The MyDigital ID, billed as a single login for all government systems to consolidate data for citizens aged 18 and over, has seen lacklustre uptake. Despite a high-profile launch by Prime Minister Anwar Ibrahim in December 2023, only 2.8 million Malaysians have registered so far – showing the public’s scepticism about the safety of their personal data.
In 2022, the personal information of 22.5 million Malaysians allegedly stolen from the National Registration Department was sold on the dark web for a reported US$10,000. Later that year, a separate breach exposed the personal details of 13 million voters, including their national ID numbers, addresses and phone numbers.


Pending US$12.3 million house arrest fine keeps Malaysia’s Najib in prison

Anwar was on song in India. Will Malaysia reap the rewards?

Malaysia’s Loke resigns as transport minister following Najib’s house arrest approval

Malaysia deploys air force aircraft for cloud seeding to combat worsening haze

Malaysia

Hackers target Malaysia’s EV boom, cybersecurity flaws revealed

The MAS 7, Malaysian automotive firm Proton’s first electric vehicle, on display in Kuala Lumpur last year. Photo: Reuters

Cars on a highway in Kuala Lumpur. Hackers can intercept data from mobile devices connected to a compromised vehicle’s infotainment systems, according to a data security report. Photo: Shutterstock

Malaysia mulls making digital ID mandatory as security fears hinder adoption

Prime Minister Anwar Ibrahim registers for the MyDigital ID in December 2023. Photo: Malaysian Ministry of Science, Technology and Innovation

Commuters on Malaysia’s Rapid KL rail. Malaysians are wary of downloading MyDigital ID because of recent security breaches. Photo: Shutterstock 

Malaysia, Indonesia unite to protect palm oil industry, migrant workers

Workers transfer harvested palm fruits to a transport truck for processing into crude palm oil at a palm plantation in Pekanbaru. Palm oil is a major revenue contributor in both Indonesia and Malaysia. Photo: AFP

Malaysia’s Prime Minister Anwar Ibrahim (right) with Indonesian President Prabowo Subianto at the Presidential Palace in Jakarta on Monday. Photo: EPA

An Indonesian migrant worker harvests palm oil fruits at a plantation in Banting, Selangor. Malaysia and Indonesia have pledged to improve the protection of Indonesian migrant workers in Malaysia. Photo: Reuters

Malaysia a target for Israeli spies over Gaza stance, Anwar warns

Malaysian Prime Minister Anwar Ibrahim warns “sophisticated and quick” Mossad agents are allegedly operating in the country. Photo: Reuters

Israeli Shalom Avitan (centre) being escorted by Royal Malaysia Police officers to Kuala Lumpur Sessions Court on April 12, 2024. Avitan was sentenced to seven years’ jail in February. Photo: EPA-EFE

Malaysia’s Prime Minister Anwar Ibrahim and Hamas leader Ismail Haniyeh in Qatar in May last year. Anwar has maintained close ties with leaders of Hamas’ political wing. Photo: Facebook/Anwar Ibrahim

How China’s ‘big winner’ BYD conquered Sri Lanka’s high-tariff car market

A BYD Atto 3 compact SUV. The Chinese carmaker accounted for roughly 90 per cent of Sri Lanka’s EV sales in May. Photo: BYD

A BYD Seal electric vehicle on display in a showroom in Pakistan. BYD accounted for roughly 90 per cent of fellow South Asian nation Sri Lanka’s EV sales in May. Photo: Reuters

Visitors examine a BYD Atto 3 EV at an auto expo in Bangkok in 2023. Photo: EPA-EFE

A mechanic works on a car at a garage in Colombo. Sri Lanka’s car market largely caters to the wealthiest 5 per cent of households. Photo: AFP

BYD Dolphin Surf EVs are seen parked at a presentation event in Berlin, Germany, in May. Photo: Reuters

This Week in Asia

Economics

News

Asia

Southeast Asia

A new report says the industry’s shift towards software-dependent vehicles is creating new vulnerabilities for hackers to exploit


A new report says the industry’s shift towards software-dependent vehicles is creating new vulnerabilities for hackers to exploit.


Hackers target Malaysia’s EV boom, cybersecurity flaws revealed

.css-1c6uqr6{color:inherit;font-weight:inherit;font-size:inherit;font-family:inherit;line-height:inherit;overflow-wrap:break-word;}A new report says the industry’s shift towards software-dependent vehicles is creating new vulnerabilities for hackers to exploit

A new report says the industry’s shift towards software-dependent vehicles is creating new vulnerabilities for hackers to exploit