Tag Archives: Cyber Safety

Scam Alert : Toyota 80th Anniversary Celebration!

The viral message about the Toyota 80th Anniversary Celebration and the giveaway of a Toyota Corolla is a SCAM!

Find out why it is a SCAM, and please alert your family and friends!

Scam Alert : Toyota 80th Anniversary Celebration!

This is the link that has gone viral on WhatsApp, claiming to offer you a chance to win a Toyota Corolla during the Toyota 80th Anniversary Celebration!

It’s just a scam, so we added that overlay to prevent it from being further abused.

Please DO NOT CLICK on the link, or proceed with the “contest”.

Why Toyota 80th Anniversary Celebration Contest Is A Scam!

For those of you who are wondering – how do you know it’s a scam, here are the facts…

Fact #1 : The Link Is Highly Suspicious

If you look at the URL – the link – it goes to http://1s7wttd.nodxteh.cn.

It is obviously not a Toyota-related link, but an unrelated Chinese-registered (.cn) domain.

In addition, it is not an SSL-encrypted link, which would start with https://. While not a hallmark of a scam link, legitimate websites will use SSL-encrypted links (with https, not http)

When you see such links, DO NOT CLICK on them.

Fact #2 : Toyota’s 80th Anniversary Was In 2017

Toyota was established on 28 August 1937. They celebrated their 80th anniversary in 2017.

Here is a 28 August 2017 tweet by the Toyota Motor Corp.

Happy Birthday #Toyota! 80 years and counting. Celebrating with a big THANK YOU to everyone who helps to make it possible every day. pic.twitter.com/DjKeAOGTCX

— Toyota Motor Corp. (@ToyotaMotorCorp) August 28, 2017

Fact #3 : Toyota Is In The Business Of Selling Cars

Toyota is in the business of SELLING CARS, not giving them away.

Not surprisingly, they did not give away even a single car when they celebrated their 80th anniversary in 2017!

Fact #4 : The Page Has So Many Troubling Clues

If you click on the link, you will be led to this page, claiming you will get a free gift with Toyota… and a chance to win a Toyota Corolla.

The page is full of grammatical mistakes – something an actual Toyota website would not have.

On top of that, why would Toyota give you a Corolla for answering simple questions like “Do you know Toyota?” Seriously…

And below that is a list of comments by people who claimed to have won the Toyota Corolla. Do you really believe that Toyota is giving away so many cars?

Try clicking on their names, and nothing happens. Nothing happens either if you click to Like. So where are the likes coming from?

They are all FAKE COMMENTS. If you check the code, you can see that both the comments and pictures were manually inserted.

Fact #5 : You Will Always Win The Car

You can try the contest any number of times, and you will ALWAYS win the car.

Why? Because the next step involves you sharing this with 5 groups or 20 friends on WhatsApp!

So no matter how many times you participate, you will ALWAYS win the free Toyota Corolla. Do you think that’s the case with a real contest?

This is a SCAM. DO NOT SHARE and do NOT proceed beyond this page.

Help Support My Work!

If you would like to support my work, you can do so via bank transfer / PayPal / credit card.

Name : Adrian Wong

Credit Card / Paypal : https://paypal.me/techarp
Bank Transfer : CIMB 7064555917 (Swift Code : CIBBMYKL)

Thank you in advanced!

Go Back To > Fact Check | Tech ARP

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Is There A Communist Revolution Monument In Penang?

Leave a reply

Pictures of a Chinese Communist Revolution Monument in Penang have gone viral, with calls from netizens to TEAR IT DOWN!

Find out what’s going on, and what the facts really are!

Claim : DAP Created A Communist Monument In Penang!

Pictures of a Chinese Communist Revolution Monument in Penang are being shared on Facebook and social media, with messages like this (translated into English) :

DAP created a Communist monument in Penang after they took power.

Communist monument on Flag Hill in Penang.

What are you waiting for? When are you going to tear it down?

Do You Know?

In Penang, there is a World War II memorial called the Revolution Memorial.

But it’s full of Chinese letters and the figures are all dressed as Communists.

There is absolutely no information in English or Bahasa Melayu, much less Tamil.

When people say it’s racist, [you get] angry

This monument was built as soon as DAP took over Penang from Gerakan.

Here is a selection of comments that were posted with that misleading picture, showing how it instigates hate and racial tensions :

Roboh kan semuanya,, pulau Pinang ialah tanah Melayu,,jgn lupa tu,, DAP memang haprak

Demolish it all. Penang is Malay soil. Don’t forget that. DAP is useless.

Say no to komunis DAP

Puak2 pengkhianat DAP..musoh melayu..musoh islam..

DAP are traitors, enemies of the Malays, enemies of Islam.

Robohkan Tugu peringatan pembunuh anak anak peribumi Melayu. kenapa di iarkan sebegitu rupa di mana anguta dan bekas angguta keselamatan kita boleh biarkan sebegitu rupa…Letupkan !

Destroy the memorial of the killers of Malay natives. Why is it being left like that? How can our security forces let this be? Blow it up!

Communist Revolution Monument In Penang : The Truth

The short version is this – the monument in the pictures exists, but it is neither a Communist monument, nor was it created or built by DAP.

All of the claims about it in the incendiary posts above are FALSE.

We would like to warn everyone to be careful of political fake news being shared to incite hatred and racial tensions.

Fact #1 : That Is The Penang Overseas Chinese Anti-War Memorial

The monument in the picture is the Penang Overseas Chinese Anti-War Memorial Park, also known as the Air Itam War Memorial Park.

It is NOT a Chinese Communist Revolution Monument.

There are two key monuments at this memorial park :

a bronze-coloured army supply truck being pushed by three men – memorialising the Nanyang transport volunteers from Malaya, who helped deliver supplies to China when they were blocked by the Japanese.
a 45-foot tall white obelisk that commemorates the Marco Polo Incident, that kicked off the Second Sino-Japanese War of 1937-1945.

The ashes of some 800 incomplete skeletons of Penang Chinese residents who died under Japanese occupation, and the Nanyang transport volunteers who died, are also buried under the obelisk.

The truck also has a number plate with the date 1939 on it. Communist China didn’t exist in 1939, so claims that this is a Communist monument is… idiotic.

Fact #2 : It Was Built In 1946 And Opened In 1951

Construction on the Penang Overseas Chinese Anti-War Memorial Park started in 1946, and it was officially opened in 1951.

DAP was only formed on 11 October 1965, so the claim that it was built when DAP gained power in Penang is false.

Because the People’s Republic of China was only established in 1949, the claim that this is a communist revolution monument is idiotic.

It is also extremely stupid to claim that the figures were dressed as Chinese Communists, because Communist China didn’t exist when the monument was being built!

Fact #3 : It Was Privately Funded

The original Penang Overseas Chinese Anti-War Memorial Park was funded entirely by the Penang China Relief Fund, a Penang-based private fundraising organisation.

It was officially opened at 11 AM on 11 November 1951 by Penang Chinese tycoon and philanthropist, Lim Lean Teng, who was the supervisory chairman of the organisation.

After the Penang China Relief Fund was dissolved in 1952, the Kong Min School was entrusted to maintain the memorial with an annual budget of $5,000, and an annual memorial service.

Fact #4 : It Was Upgraded For Its 60th Anniversary

The Board of Trustees of the Kong Min School decided to repair and upgrade the memorial to coincide with its 60th anniversary.

The RM 400,000 project also added a 60 foot-long wall relief showing Malayan transport volunteers on the Burma-China road, and a peace column with flying doves.

On top of private donations by various organisations and individuals, the Penang state government also chipped in.

When it was opened at precisely 11:11 AM on 11 November 2016 by Penang Chief Minister, Lim Guan Eng, politicians from both sides of the political divide attended the launch.

Therefore, the claim that no one knew about it, or that it was only something DAP would do, is categorically FALSE.

Photo Credit : The Sun Daily

Fact #5 : There Is Information In FOUR Languages

The memorial park has information in four languages – English, Bahasa Melayu, Chinese and Japanese.

Here is the information panel in English and Bahasa Melayu, proving that the claim there is no information in both languages are FALSE.

Help Support My Work!

If you would like to support my work, you can do so via bank transfer / PayPal / credit card.

Name : Adrian Wong

Credit Card / Paypal : https://paypal.me/techarp
Bank Transfer : CIMB 7064555917 (Swift Code : CIBBMYKL)

Thank you in advanced!

Go Back To > Fact Check | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Was Pragya Mishra Killed Over COVID-19 Comments?

Leave a reply

Was Indian journalist, Pragya Mishra, murdered in broad daylight after criticising the Kumbh Mela festival for causing the catastrophic COVID-19 surge?

Find out what the viral video of her murder showed, and what the FACTS really are!

Claim : Pragya Mishra Killed In Broad Daylight Over COVID-19 Comments!

Two videos and a photo are going viral on WhatsApp, claiming that Indian journalist Pragya Mishra was killed in broad daylight after she criticised the recent Kumbh Mela festival in India for causing the catastrophic surge in COVID-19.

The first video showed the news segment in which Pragya Mishra talked about the Kumbh Mela and the COVID-19 tsunami.

The second video was CCTV footage showing a woman getting stabbed by a man in broad daylight.

The videos are accompanied by one or two pictures showing the woman lying in a pool of blood, with one of these messages :

An Indian broadcaster who spoke against unhealthy Hindu gatherings and the spread of Corona disease was assassinated publicly.

Pragya mishra murdered in broad daylight

Because she was talking in news about kumbh mela in the era of cornavirus

No! Pragya Mishra Was NOT Killed Over COVID-19 Comments!

This is yet another COVID-19 related hoax. Pragya Mishra is alive and well.

It has been suggested that the fake news was created as a kind of warning to Pragya Mishra – watch what you are saying about Hindus and the Kumbh Mela, or else…

That is something we cannot prove, but here are the facts that we can prove…

Fact #1 : Pragya Mishra Is Alive And Well

These videos and photos first circulated on or just before 18 April 2021.

At that time, Pragya Mishra was at home because of “COVID-19 protocols”. When she was informed about the videos and photos, she tweeted that she was safe.

As of 30 April 2021, she’s still active on her Twitter account, @PragyaLive.

Fact #2 : Second Video Was Of A Real Murder

Unfortunately, the second video is genuine, and shows the murder of a real woman on 10 April 2021.

It was not Pragya Mishra, but a 26 year-old lady called Neelu Mehta, who worked at the Safdarjung Hospital in Delhi.

She was stabbed and murdered in broad daylight by her husband, Harish Mehta, an employee of the Marriage Bureau.

Allegedly, he suspected his newly-wed wife of eight months of infidelity, and stabbed her to death. Even after she died, he continued stabbing her.

Sadly, no one intervened or tried to help her.

Help Support My Work!

If you would like to support my work, you can do so via bank transfer / PayPal / credit card.

Name : Adrian Wong

Credit Card / Paypal : https://paypal.me/techarp
Bank Transfer : CIMB 7064555917 (Swift Code : CIBBMYKL)

Thank you in advanced!

Go Back To > Fact Checks | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Scam Alert : CIMB Customers Hit By Fake SMS Messages!

Leave a reply

Scammers continue to target CIMB customers, using many different kinds of fake SMS messages.

Do NOT click or call if you receive any of these fake SMS messages!

And please warn your family and friends!

Scam Alert : CIMB Customers Hit By Fake SMS Messages!

Whether you are a CIMB Bank customer or not, you may receive one of these alarming SMS messages :

RM 0.00 CIMB: Confidential!

Dear CIMB users, your account will TERMINATED on 24/12/20. Verify via http://www.cimbclickikm.cc to keep on using CIMB Clicks services.

Please make verification within 24hours to avoid service interruption.

RM0 CIMB: Instant Transfer RM4998.78 to CHAY LEE FEN/HONG LEONG on 23-Dec-2020, 13:06:35. Call the no. at the back of your card for queries.

If you receive any of these SMS messages, please DO NOT click on the link, or call the number. JUST IGNORE THEM, or delete them.

RM0.00 CIMB: MYR 2968.00 was charged on your card num 4204 at Shopee.MY. If this is not your txn, call 1800-9767 now.

Cimb Your account is judged as high risk by the system, PLS re-verify your account. cimbclicksecurity.com

Note : These scams do not just affect CIMB Bank. In fact, all banks are affected :

Why These CIMB SMS Messages Are Fake

Let us show you how to identify these fake CIMB SMS messages.

If you spot any of these warning signs, BACK OFF and DO NOT PROCEED!

Warning Sign #1 : Grammatical Mistakes

If you carefully read the first SMS messages above, you can easily spot numerous grammatical mistakes. A bank will never send such poorly worded messages to their customers.

However, they may copy the real SMS message from CIMB to trick you into thinking that this is a real transaction. Such fake SMS messages will have proper grammar.

Warning Sign #2 : Embedded Links

Banks will NEVER embed links (URLs) into the message. If you see embedded links, always think – SCAM SMS!

Unlike the Public Bank SMS scam, they used a copy of the real SMS message to trick you into clicking the URL in the first message.

Warning Sign #3 : Wrong Links

And always check the link – www.cimbclickikm.cc and cimbclicksecurity.com are not the correct addresses for the CIMB Bank websites (www.cimbclicks.com.my or www.cimb.com.my).

The best policy is to manually key in the bank website address. NEVER click on any link in an SMS, even if it looks legit.

When you see any website with .cc links, be wary because the .CC domains are registered in the Cocos (Keeling) Islands – an Australian territory of only 14 km², with only about 600 inhabitants.

Warning Sign #4 : No Personal Login Phrase / Picture

To avoid phishing attacks, banks now give you a secret response (like a picture or a phrase) to confirm that you are visiting their legitimate website.

If the website you are visiting gives you the wrong picture or secret phrase, you have been tricked into visiting a fake website designed to mimic the real bank website.

You should also remember that the bank website must show you secret picture or phrase right after you enter your login, but BEFORE you key in your password.

If you are asked to key in your password without the website displaying the secret phrase or picture, you have been tricked into visiting a fake website designed to mimic the real bank website.

CIMB Advice To Protect Against Fake SMS / Email Scams

Here is a list of DOs and DON’Ts to protect yourself against fake SMS / email scams.

Please DO follow these good practices

Pay attention to your transaction alerts and check your account activities regularly. In case of any unusual activity, please contact us immediately.
If you wish to contact us, ONLY call the number on the back of your card or refer to CIMB website “Contact Us” page.
Always check the URL of the website that you are making purchases from. Ensure the “lock” icon or “https” appears on the website’s address bar.
Always find a reputable seller on online marketplaces by searching for reviews from other customers to know their experience.
To access CIMB Clicks, type the entire URL as follows: www.cimbclicks.com.my
Always remember to log out once you have completed your banking transactions.

Please DO NOT follow these bad practices

Don’t panic and give personal information to fraudsters impersonating representatives of government agencies etc. even if they deploy fear tactics. Immediately call the number on the back of your card to verify with CIMB.
Never apply for personal financing through unverified links or individuals promising a lower rate. CIMB does not impose any application charges for personal financing applications.
Never take instructions from anyone to change the mobile number in CIMB records to any number other than your own mobile number.
When transacting online, never continue with a purchase if you have any doubts if the seller is not genuine.
Never share details such as your card number / User ID / PIN / password / TAC with anyone or key them in in any website other than CIMB Clicks.
(Note: CIMB will never ask for your ‘User ID’, ‘Password’ or ‘TAC’ under any circumstances outside of CIMB Clicks).
Do not click on links or open email attachments from unknown / unreliable senders / sources.
(Note: Emails from CIMB will always end with @cimb.com such as cimb.marketing@cimb.com)

Go Back To > Cybersecurity | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Scam Warning : Public Bank Customers Hit By Fake SMS!

Leave a reply

Scammers continue to target Public Bank customers, using many different kinds of fake SMS messages.

Do NOT click or call if you receive any of these fake SMS messages!

Public Bank : Fake SMS Scam Warning! Do NOT Click / Call!

Whether you are a Public Bank customer or not, you may receive one of these alarming SMS messages.

Please DO NOT click on the link, or call the number. JUST IGNORE THEM, or delete them.

The safest thing to do is NEVER CLICK ON A LINK in any SMS. If you need to log into your bank account, key in the website address manually.

RM0 PBB/PIBB: Your PBB account will TERMINATED on 02Dec20 01:30:00 AM. Please make verification via http://www.mypbebank.cc to avoid service interruption. Verify now keep on using PBB services.

RM0 Credit Cash out RM3,000 form card ending no 7102 successful on 01 DEC. Information system sending. Call PBB 1800-81-9566 for any query

Warning: Your account is marked as insecure, please click Return PAC immediately to confirm that it is safe to use. (https://pbevip.vip/)

PBe Your account is in a high-risk state PLS log in immediately and return the PAC to protect your account security https://www.pbebanks.top

PBe Warning: Phishing URLs are frequent recently, PLS log in immediately to strengthen account security. 2Mar21 13:14 https://se1.pbevip.top/

PB e Your account is in a high-risk by the system, PLS re-verify your account https://pbbanks.red/ <security reminder is normal>

RM0 PIBB: Thank you for using your card ending 1098@senQ MYR 2899, Pls call 03-56260232 now, if you didn’t use it

RM0 PBB/PIBB: Trx amt MYR2699.00 @LAZADA for card ending 5738. Call PB 1-800-81-2337 now if didn t perform.

PBB: Your account is judged as high risk by the system. PLS re-verify your account https://www.pbebanks.asia/ <security reminder is normal>

PB e Alarm Your banking Suit now is marked as insecure, PLS re-verify your account https://online-pbebank.com <security reminder is normal>

Public Bank Fake SMS Scam : What Happens If You Click?

Clicking on the links will often lead you to a phishing website, a fake website designed to look like a Public Bank website.

You will be asked to key in your personal information, including your Public Bank user name and password. DO NOT KEY IN YOUR INFORMATION!

But if you are free and want to help screw these scammers, key in fake information as many times as possible.

Note : These scams do not just affect Public Bank. In fact, all banks are affected :

Public Bank : How To Identify Fake SMS Messages

With a little help from Public Bank, let’s show you how to identify fake SMS messages.

If you spot any of these warning signs, BACK OFF and DO NOT PROCEED!

Warning Sign #1 : Grammatical Mistakes

Read the two SMS messages above, and you can easily spot numerous grammatical mistakes. A bank will never send such poorly worded messages to their customers.

Warning Sign #2 : Embedded Links

Banks will NEVER embed links (URLs) into the message. If you see embedded links, always think – SCAM SMS!

Warning Sign #3 : Wrong Links

And always check the link – www.mypbebank.cc is not the correct address for the Public Bank website (www.pbebank.com)

When you see any website with .cc links, be wary because the .CC domains are registered in the Cocos Islands – an Australian territory of only 14 km², with only about 600 inhabitants.

The same goes for generic, top level domains like .TOP, .VIP, .TOP, .RED, .ASIA, etc.

Warning Sign #4 : No Personal Login Phrase / Picture

To avoid phishing attacks, banks now give you a secret response (like a picture or a phrase) to confirm that you are visiting their legitimate website.

If the website you are visiting gives you the wrong picture or secret phrase, you have been tricked into visiting a fake website designed to mimic the real bank website.

You should also remember that the bank website must show you secret picture or phrase right after you enter your login, but BEFORE you key in your password.

If you are asked to key in your password without the website displaying the secret phrase or picture, you have been tricked into visiting a fake website designed to mimic the real bank website.

Go Back To > Cybersecurity | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

macOS, iOS, iPadOS, Safari CVE-2021-1844 Bug : Fix It Now!

Leave a reply

Apple just rushed out macOS Big Sur 11.2.3, iOS 14.4.1, iPadOS 14.4.1 and Safari 14.0.3 to patch a critical security bug.

Find out what they fix, and why you need to update your MacBook, iPhone and iPad right away!

Apple Rushes Out macOS, iOS, iPadOS, Safari Critical Bug Fixes!

Released on 8 March 2021, macOS Big Sur 11.2.3 patches only one bug, which may mislead users into thinking that it’s not very important.

WebKit

Available for: macOS Big Sur

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved validation.

CVE-2021-1844: Clément Lecigne of Google’s Threat Analysis Group, Alison Huffman of Microsoft Browser Vulnerability Research

On the same day, Apple also released iOS 14.4.1 and iPadOS 14.4.1 – both patching the same CVE-2021-1844 vulnerability.

WebKit

Available for: iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch (7th generation)

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved validation.

CVE-2021-1844: Clément Lecigne of Google’s Threat Analysis Group, Alison Huffman of Microsoft Browser Vulnerability Research

Apple also released Safari 14.0.3, which patches the same vulnerability for macOS Catalina and macOS Mojave :

WebKit

Available for: macOS Catalina and macOS Mojave

Impact: Processing maliciously crafted web content may lead to arbitrary code execution

Description: A memory corruption issue was addressed with improved validation.

CVE-2021-1844: Clément Lecigne of Google’s Threat Analysis Group, Alison Huffman of Microsoft Browser Vulnerability Research

Why Install These macOS, iOS, iPadOS, Safari Bug Fixes ASAP?

While they appear to only patch WebKit in macOS Big Sur, iOS, iPadOS and Safari, they are CRITICAL bug fixes that you need to install right away.

They patch the new CVE-2021-1844 vulnerability, which was discovered by Clément Lecigne of Google’s Threat Analysis Group and Alison Huffman of Microsoft Browser Vulnerability Research.

This vulnerability allows a remote attacker to trigger a buffer overflow when the victim opens a specially-crafted web page, allowing the attacker to execute arbitrary code on the target system.

It is not known if this vulnerability has been exploited yet, but it is critical to install the new updates to prevent that from happening.

Go Back To > Software | Cybersecurity | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Seafood Scams On Facebook : How To Detect Them!

Leave a reply

Seafood scams on Facebook have been proliferating recently, and Facebook just doesn’t care.

So it is up to all of us to spread the word and WARN EVERYONE about these seafood scams on Facebook.

Updated @ 2021-03-07 : Added another confirmed seafood scam page and two reported bank accounts.

Originally posted @ 2021-02-14

Seafood Scams On Facebook : What’s Going On?

We were first alerted to the world of Facebook seafood scams by people who were cheated by Ocean Sense and East Malaysia Seafood Agent.

These Facebook seafood scam pages have a simple modus operandi :

offer online seafood delivery at very attractive prices and even free delivery
advertise on Facebook to reach out to people, and avert Facebook’s ire
ghost you after you deposit money into their bank accounts
delete your negative comments on their Facebook page

Even though many people reported Ocean Sense and East Malaysia Seafood Agent as scam pages, Facebook declined to take action and they are STILL ACTIVE.

Seafood Scams On Facebook : How To Detect Them!

The problem with seafood scams on Facebook is how easily scammers create them. Even if they get banned by Facebook, they will simply create a new one.

Facebook also partly enables them to continue with their scam by ignoring reports, claiming that there is nothing on the scam pages that go against their Community Standards. Duh – as if the scammers will post on Facebook admitting that they are scammers.

So how do we detect these seafood scams on Facebook?

Step 1 : Check List Of Reported / Confirmed Seafood Scams

The first thing you should do is run a quick search online on the name of the seafood vendor. See if anyone has reported them to be a scam.

Confirmed Seafood Scams On Facebook

Multiple people have reported that these Facebook seafood vendors have cheated them :

Reported Seafood Scams On Facebook

These Facebook pages have been reported to be scam pages, but we haven’t been able to independently verify their reports :

Senson Seafood (Tommy Tan and his phone number was also used by Ocean Sense)
Senson seafood 森森海鲜 (appears to be a copy of the first Senson Seafood page)
帝王之家

Step 2 : Check With The Commercial Crimes Department

Next, use the Commercial Crimes Department’s website to check for bank accounts that have outstanding police reports.

For example, the CIMB 8604503834 has two outstanding police reports lodged against it.

DO NOT BANK ANY MONEY to any account flagged by the Commercial Crimes Department’s website.

Step 3 : Check List Of Reported Company + Bank Accounts

Just because a bank account has not been flagged by the Commercial Crimes Department’s website doesn’t mean it’s safe.

That’s because many people do not bother to lodge a police report, or it may be a recent scam.

Here is a list of reported company and bank accounts, which you should AVOID :

Name	Bank Account
Yap Kok Keong	CIMB 7635-3713-28
A&B Bintang Trading	CIMB 8604-5038-34
Car Boutique Venture	CIMB 8604-5267-74
GS 028 Seafood Trading	CIMB 8604-5270-14
Lee Pea Ching	CIMB 7075-3700-47

Step 4 : Look For An Address

Genuine seafood vendors on Facebook will share with you their address, so you can drop by and select your seafood if you wish.

But don’t just trust the address they post. Always check the address on Google Maps, and use Street View to check if the shop really exists.

Step 5 : Look For Angry Emojis

A genuine seafood vendor may have one or two angry emojis by dissatisfied customers, but scam pages will have A LOT of them.

Hover over the reaction emojis, and look at how many are positive (likes or wow), and how many are negative (angry).

Scam pages will have a lot of angry emojis because they often delete negative comments, so angry customers have only one option – show angry emojis to warn potential customers.

Step 6 : PM People With Angry Emojis

To find out for sure if this is a scam, just PM (private message) those who left an angry emoji react to the Facebook page.

That’s how we were able to confirm that Ocean Sense and East Malaysia Seafood Agent are seafood scam pages.

Step 7 : Pay Only By Credit Card / Cash On Delivery

If you are still enticed by the great offer and want to take a risk, insist on paying with a credit card, or cash on delivery.

NEVER PAY to a bank account directly, because there is simply NO PROTECTION, and NO WAY for you to get your money back.

Using a credit card protects you against fraud, because the payment is not instantly credited to the vendor.

If you did not receive the seafood you ordered, simply call up the bank and inform them. They will refund the money.

If the seafood vendor insists on a direct bank transfer and refuses even cash on delivery, it is highly likely that they are scammers.

Go Back To > Scam Alerts | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

CD PROJEKT RED Hack : Source Codes + Docs Stolen!

Leave a reply

CD PROJEKT RED just had their source codes and internal documents stolen in a MAJOR HACK, and they may all end up being leaked!

CD PROJEKT RED Hack : Source Codes Stolen, Servers Encrypted!

On 9 February 2021, CD PROJEKT RED announced that their data – including source codes and internal documents – were stolen in a hack, and could possibly be leaked.

Their servers were also encrypted in a secondary ransomware attack by the same hackers, but they had backups of the encrypted data.

CD PROJEKT RED publicly ruled out negotiating with the hackers, or giving in to their demands.

This would likely mean that their source codes and internal documents will eventually be released publicly by the hackers.

The only silver lining – CD PROJEKT RED noted that they do not have any evidence that the personal data of their employees were accessed or stolen.

CD PROJEKT RED Hack : The Hackers’ Threats

According to the ransom note left on their servers, the hackers stole :

FULL source codes for Cyberpunk 2077, Witcher 3, GWENT and the unreleased version of Witcher 3.
ALL of their internal documents on accounting, administration, legal, HR, investor relations and more

They also encrypted all of their CD PROJEKT RED’s servers, but acknowledged that they would most likely recover the data from their backups.

The hackers are giving the CD PROJEKT RED team 48 hours to contact them to negotiate.

If there is no agreement, they threaten to sell or leak the source codes, and release their internal documents to the media.

They claim that the internal documents will make CD PROJEKT RED look bad, causing their stock prices to fall and their investors will lose trust in them.

CD PROJEKT RED : Official Statement On Hack

This is the official statement by CD PROJEKT RED on the hack :

Yesterday we discovered that we have become a victim of a targeted cyber attack, due to which some of our internal systems have been compromised.

An unidentified actor gained unauthorized access to our internal network, collected certain data belonging to CD PROJEKT capital group, and left a ransom note the content of which we release to the public. Although some devices in our network have been encrypted, our backups remain intact. We have already secured our IT infrastructure and begun restoring the data.

We will not give in to the demands nor negotiate with the factor, being aware that this may eventually lead to the release of the compromised data. We are taking necessary steps to mitigate the consequences of such a release, in particular by approaching any parties that may be affected due to the breach.

We are still investigating the incident, however at this t time we can confirm that – to the best of our knowledge – the compromised systems did not contain any personal data of our players or users of our services.

We have already approached the relevant authorities, including law enforcement and the President of the Personal Data Protection Office, as well as IT forensic specialists, and we will closely cooperate with them in order to fully investigate the incident.

Go Back To > Cybersecurity | Games | Software | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Ministry of Education Website Uses Plain Text CAPTCHA!

Leave a reply

It is unbelievable, but the Malaysia Ministry of Education’s website uses plain text CAPTCHA that can be copied and pasted!

Take a look at this incredulous security lapse, and find out why it could put your data at risk!

Ministry of Education Website Uses Plain Text CAPTCHA!

The recent threat by Anonymous Malaysia to attack government websites over their lack of security appears to be well-justified.

Qusyaire Ezwan spotted an incredulous security lapse in the official Malaysia Ministry of Education website – plain text CAPTCHA!

On top of that, the code can actually be copied and pasted!

Ministry of Education Plain Text CAPTCHA : A Serious Cybersecurity Risk!

The CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) test is something most of us are familiar with.

It is a test that helps to identify real humans, and weed out bots, before they are allowed to access a service. This prevents bot fraud and hacking attempts.

In the Ministry of Education website, the plain text CAPTCHA was used to “secure” the retrieval of forgotten passwords for their Student Management Module.

A real CAPTCHA uses distorted images to prevent a bot from “reading” the numbers or letters, thereby ensuring that only a real human being would be able to key in the correct code.

As this screenshot shows, the CAPTCHA used in the Ministry of Education website just uses random sequences of letters and numbers in PLAIN TEXT!

This means a bot can easily copy and paste the plain text code, and bypass the CAPTCHA test.

Frankly, this doesn’t even qualify as a CAPTCHA test, because it cannot differentiate between humans and bots.

Now, the password is still sent to the registered email accounts, not to the hackers or bots. So your data is not in immediate danger.

However, this is still a SERIOUS cybersecurity risk, because a hacker can pair this design flaw with compromised email accounts.

It would allow their bots to easily and quickly make password retrieval requests for compromised email accounts, and then retrieve your Ministry of Education password.

Having access to the Student Management Module would give hackers access to a ton of information on children and their parents :

child : name, date of birth, telephone number, home address
school : location, class name, teacher’s name,
parent : name, occupation, workplace address, contact number, declared salary

On top of that, many people reuse their passwords, so hackers will use the password retrieved from the Ministry of Education website on other websites and online services you may use.

If you use the same password for your banking account, for example, that would expose your banking account to the hacker.

That is why CAPTCHA is important. It doesn’t prevent hacking attempts, but it greatly slows it down by blocking bots from making mass requests.

The use of plain text CAPTCHA in an official government website is a fiasco. A basic cybersecurity checklist would have prevented software vendors from using plain text CAPTCHA in government websites.

The Malaysian government needs to take the security of official websites seriously. This is a disgrace.

Go Back To > Cybersecurity | Software | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Beware Of AirAsia X Scam On WhatsApp!

Leave a reply

AirAsia X is warning about a scam on WhatsApp that is trying to trick people into making payments.

Please watch out for this scam, and WARN your family and friends!

Beware Of AirAsia X Scam On WhatsApp!

There is a new scam on WhatsApp involving AirAsia A.

Scammers pretending to be AirAsia X are sending messages on WhatsApp, asking people to make a payment into an account allegedly belonging to a credit management company.

AirAsia X announced that neither they nor their employees are involved with that scam.

Just like banks, AirAsia X will NOT engage with customers, or solicit payments through any instant messaging apps like WhatsApp.

All official AirAsia X announcements are made through the mass media, or these official channels on social media :

Twitter: www.twitter.com/airasia
Instagram: www.instagram.com/airasia
Facebook: www.facebook.com/airasia

Other Scams To Watch Out For

Other than this new AirAsia X scam on WhatsApp, please watch out for these scams too :

Go Back To > Cybersecurity | Travel | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Why You Should NOT Move WhatsApp Chats To Telegram!

Leave a reply

Telegram just highlighted the ability to migrate WhatsApp chats to their app, but you really should NOT do that.

Find out why this is a BIG security and privacy risk than just leaving your chats in WhatsApp!

Telegram : Moving Chat History From WhatsApp, Line + KakaoTalk

In a recent version 7.4 update for their iOS app, Telegram announced a new feature – the ability to move your chat messages from other apps like WhatsApp, Line and Kakaotalk to their app.

Curiously, that ability has actually been part of WhatsApp since 2018, when they introduced the ability to export chats to email and other apps.

And while this feature is purportedly available only with the iOS version of Telegram Messenger, you can already do that with existing versions of WhatsApp and Telegram.

Why You Should NOT Move WhatsApp Chats To Telegram!

You should note that the privacy risks with WhatsApp have been grossly exaggerated by the media and many Internet “experts”.

For one thing – WhatsApp users have been sharing metadata with Facebook since September 2016, a fact initially lost on many media outlets and “experts”.

But we understand the fear – Facebook is a real snoop. Even so, it would be a mistake to migrate from WhatsApp to Telegram.

Let us share with you why you should NOT migrate from WhatsApp to Telegram, and why it is a BIG mistake to migrate your WhatsApp data to Telegram.

Fact #1 : Telegram Is LESS Secure Than WhatsApp

WhatsApp fully implemented end-to-end encryption across all of their apps and network since 5 April 2016.

End-to-end encryption prevents WhatsApp or Facebook from reading your messages. Only the sender and receiver(s) can read them.

WhatsApp shares a considerable amount of data and metadata that Facebook can use to identify and track your movements and activities. But not the content of your messages.

Telegram, on the other hand, has STILL NOT implemented end-to-end encryption for all messages by default.

Instead, they still insist on offering end-to-end encryption only when you create a Secret Chat.

This leaves the bulk of your messages completely readable by Telegram and anyone who intercepts those messages as they travel from your device through the Internet to the recipient.

The very presence of Secret Chats between certain people is itself metadata that can help oppressive regimes identify their enemies or whistleblowers.

Fact #2 : Your Data Is Stored In Telegram Cloud Servers

All WhatsApp data is stored only in your registered device. WhatsApp also does not retain messages in their servers after they are delivered, and will only store files (like photos and videos) and undelivered messages for 30 days.

It’s the opposite with Telegram – all of your data – messages, photos, videos, documents – is stored in their cloud servers. Even though they are encrypted in storage, Telegram holds the encryption keys, NOT YOU.

This ability has its advantages like convenient access across multiple devices, but it also makes Telegram less secure.

Telegram has access to your encrypted files, including the ability to decrypt them for authorities that legally compels them to do so.

Fact #3 : Moving Your Messages + Media To Telegram Exposes Them

While your chats and media remain within your WhatsApp app, they are encrypted and not available to anyone but yourself (and the recipients).

Migrating your chat messages and media to Telegram would involve sending them unencrypted to Telegram’s servers.

This exposes your hitherto secure chats and media to a man-in-the-middle attack – allowing a third party to snoop or grab a copy of the data as it travels unencrypted to the Telegram servers.

Fact #4 : Facebook Already Has Your Metadata

As we pointed out earlier, WhatsApp has been sharing our metadata with Facebook since September 2016.

So moving your existing chats out of WhatsApp won’t limit or reduce your exposure. That horse has long bolted from the stable.

Moving your chat history and files to Telegram will just offer a new attack surface for cybercriminals and oppressive regimes.

Fact #5 : Facebook Will Still Have Your Data If You Still Use Facebook!

Here is the other thing that people don’t realise – migrating from WhatsApp to another messaging app is pointless if you do not also stop using Facebook.

As long as you still use Facebook, they will still have access to a consideration amount of metadata. Losing your WhatsApp metadata just gives them less metadata.

After all, Facebook can track your movements and activity even if you are NOT on Facebook! This is what they call Off-Facebook Activity.

Go Back To > Cybersecurity | Software | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

COVID-19 Hot Spot Areas In KL : Hoax Debunked!

Leave a reply

The map of COVID-19 hot spot areas in KL has gone viral on WhatsApp, but it’s really just a hoax.

Find out what happened, and what the facts really are!

COVID-19 Hot Spot Areas In KL : The Viral Map

This is the map that went viral on WhatsApp – showing 7233 cases in seven COVID-19 hot spot areas in KL :

Dorsett KL : 1446 cases
Pavilion : 1419 cases
Times Square : 1419 cases
Lot 10 : 1066 cases
Low Yat Plaza : 1027 cases
Wisma Genting : 701 cases
Petaling Street : 155 cases

COVID-19 Hot Spot Areas In KL : Hoax Debunked!

The map of COVID-19 hot spot areas in KL claims to be based on the MySejahtera app.

However, it is FALSE and here are the reasons why…

Reason #1 : KKM Confirms It’s False

The Malaysia Ministry of Health (KKM) confirmed that this map is false.

Reason #2 : MySejahtera Does Not Show Cases For Specific Locations

The MySejahtera app allows you to look up specific locations, but it will NOT show the case numbers for any specific location.

So it is not possible for anyone to use MySejahtera to find out that Low Yat Plaza has 1027 cases, for example.

Reason #3 : MySejahtera Shows Cases In 1 KM Radius In Past 14 Days

The MySejahtera Hot Spot tracker feature only lists the number of reported COVID-19 cases within a 1 km radius in the last 14 days.

In other words, it shows you how many COVID-19 cases were reported within a 3.14 square kilometre area over the past 14 days.

If you try it out now, you can search for Pavilion KL, and it will say,

There have been 805 reported case(s) of COVID-19 within a 1 km radius from your searched location in the last 14 days.

Go Back To > Cybersecurity | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

HUAWEI New Year Gift Scam : Don’t Click Or Share!

Leave a reply

Watch out for the HUAWEI New Year Gift scam that’s circulating on WhatsApp!

Do NOT click or share. Just delete it, and WARN YOUR FAMILY AND FRIENDS!

HUAWEI New Year Gift Scam : Do NOT Click Or Share!

Scammers are sending out this message on WhatsApp, claiming that HUAWEI is giving away New Year gifts.

Please do NOT click on the message, or share it. Just delete it and warn your family and friends!

Why This HUAWEI New Year Gift Offer Is A Scam

Let us show you why this HUAWEI New Year Gift offer (and similar offers) is just a scam.

If you spot any of these warning signs, BACK OFF and DO NOT PROCEED!

Warning Sign #1 : Not Using The Real HUAWEI Domain

A genuine HUAWEI campaign would use the real HUAWEI domain – www.huawei.com.

The use of a different domain (2021-whatsapp3w.bar) should warn you that this is not a legitimate HUAWEI website.

Warning Sign #2 : HUAWEI Does Not Give Away Free Gifts

HUAWEI is a for-profit corporation whose goal is to make money, not give it away.

They are not a charity, and will never give free gifts to celebrate a new year, or anniversary.

They only give free gifts to promote the purchase of their latest products.

Warning Sign #3 : Ridiculous Prizes

While brands may sometimes give away branded swag like a face mask, a t-shirt, or a cap; they will NEVER give away CASH as a prize.

And there is no way they would give away US$5,000 cash prizes. That’s just nuts! It should be cheaper to just give away one of their latest Mate 40 Pro smartphones.

Go Back To > Cybersecurity | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Maybank B40 Subsidy Scam : Do NOT Click Or Call!

Leave a reply

Watch out for the new Maybank B40 subsidy scam! It is a phishing attack to gain access to your Maybank account!

Do NOT click or call. Just delete it, and WARN YOUR FAMILY AND FRIENDS!

Maybank B40 Subsidy Scam : Do NOT Click Or Call!

Scammers are sending out this SMS claiming that Maybank (MBB) will issue the B40 subsidy after you fill in some information.

Please do NOT click on the message, or call the telephone number. Just delete it and warn your family and friends!

Why This Maybank B40 Subsidy Offer Is Just A Scam

Let us show you why this Maybank B40 subsidy offer (and similar offers) is just a scam.

If you spot any of these warning signs, BACK OFF and DO NOT PROCEED!

Warning Sign #1 : No Such B40 Subsidy Program

The Malaysian government has not announced any B40 subsidy program.

Neither would Maybank offer free money for the B40. It’s a bank, not a charity.

Warning Sign #2 : Bad Grammar

The bad English grammar should be a warning sign that this is not a legitimate offer.

Warning Sign #3 : Not Using The Real Maybank Domain

A genuine Maybank campaign would use the real Maybank domain – www.maybank.com.my.

The use of a different domain should warn you that this is not a legitimate Maybank website.

In fact, Google Chrome will warn you that this website is a phishing attack – to get your personal and banking information.

Warning Sign #4 : Asking You For Your Information

The banks – whether they are Maybank, Public Bank, CIMB, etc – will NEVER ask you to fill in your personal details.

Think about it – they already have your information because you have an account with them!

Even if there is a legitimate B40 subsidy programme, they only need you to log into your Maybank account. They do NOT need you to register your details again.

These scammers ask you for these details so they can use them in phishing calls, to convince you that they are really from Maybank.

Warning Sign #5 : Asking You For Your Bank Login!!!

This is a BIG warning sign. Banks will NEVER ask you for your user name and password.

If you key in this information, you are basically giving these scammers access to your Maybank account.

They will call or message you and try to get your TAC (Transaction Authorisation Code) number that is sent to your mobile number. DO NOT GIVE THAT TO THEM!

If you sent them your user name and password, please contact the bank immediately, and change your password!

Go Back To > Cybersecurity | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Tesco New Year Scam Alert : Do NOT Click / Forward!

Leave a reply

Now that the New Year is almost here, the Tesco New Year Scam is going viral on WhatsApp!

Do NOT click on the message if you receive it. Do NOT forward it either!

Just delete it, and WARN YOUR FAMILY AND FRIENDS!

Tesco New Year Scam Alert : Do NOT Click / Forward!

People are sharing this Tesco New Year promotion that claims to offer a gift card valued up to RM1000, but it is really nothing more than a SCAM!

Please do NOT click on the message, or forward it to anyone. Just delete it and warn your family and friends!

Why This Tesco New Year Offer Is Just A Scam

Let us show you why this Tesco New Year gift card offer (and similar offers) is just a scam.

If you spot any of these warning signs, BACK OFF and DO NOT PROCEED!

Warning Sign #1 : Bad Grammar

Most of these Tesco gift card scams have bad grammar (example #1, example #2), which is a big clue that this isn’t a genuine Tesco offer.

In this example, they capitalised TESCO and use the grammatically incorrect “win up to RM1000 Tesco Gift Card!”

Warning Sign #2 : Offering You Free Money Or Gifts

Please do NOT be naive. Nothing is FREE in this world, much less a RM1000 gift card.

Tesco isn’t going to give you FREE money, just because it’s the new year, or their anniversary.

They are a corporation whose business is to make money, not a charity to give you free money.

Warning Sign #3 : Not Using The Real Tesco Domain

A genuine Tesco Malaysia campaign would use the real Tesco Malaysia domain – www.tesco.com.my.

Or they would run it off the official Tesco Malaysia page on Facebook – www.facebook.com/TescoMY.

This scam is using a BlogSpot.com domain – which is not something any genuine company would do.

Warning Sign #4 : Asking You To Forward The Offer

No brand will insist that you must share the offer with 5 groups or 20 friends on WhatsApp.

Do not click to forward their offer to your family and friends. They will not appreciate being scammed with your help!

Warning Sign #5 : Asking You To Download + Register An App

If you click through and joined the fake survey scam, you will eventually be asked to download and register for an app.

That is VERY DANGEROUS. Never agree to download and register for any unknown app from a website.

Always download your apps from an official App Store like Google Play Store (for Android smartphones) and Apple App Store (for iPhones).

Go Back To > Cybersecurity | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Antivaxxers Keep Creating Fake Tiffany Dover Death Claims!

Leave a reply

Antivaxxers are still creating and spreading fake death claims about Tiffany Dover, while hounding her family and her!

Find out what’s going on, and what YOU can do to help Tiffany Dover and her family!

Tiffany Dover : Who Is She? What’s Going On?

Here’s a quick primer for those who have not heard of Tiffany Dover, or what has energised anti-vaccination groups recently.

On 17 December 2020, Tiffany Dover fainted on live TV after getting her Pfizer-BioNTech COVID-19 vaccine, due to vasovagal syncope – a very common condition.

She recovered within minutes, and explained that it wasn’t a surprise because she often faints when she feels pain.

However, antivaxxers pounced on the incident as evidence that the Pfizer BNT162b2 vaccine is dangerous, sharing edited versions of the video to sow fear, doubt and uncertainty about the vaccine.

Antivaxxers Keep Creating Fake Tiffany Dover Death Claims!

After her fainting episode was explained and the full video was shared, antivaxxers had to switch gears.

They decided to claim that Tiffany Dover later DIED, after recovering from her fainting spell.

Here are three examples…

Joe Leonard

It looks like rumors of Tiffany Dover’s death are TRUE and it is being covered up.

No activity since her highly publicized public vaccination despite regular use of Instagram. No replies to dozens of questions. Family set their profiles to private.

RIP

Kitty Lynn

OMFG! FAINTING NURSE DIED
Tiffany Dover IS DEAD

I saw that fainting nurse died, so I checked it out!
This death record has to be her! Same town, age, and most importantly, the family listed all show up as her friends on fb!

Shannon Haas

BREAKING

There is reports Tiffany Dover is dead. She is the nurse who collapsed on live television when being interviewed about the vaccine. We can’t confirm it, we are trying to collect as much intel as possible.

INTEL WE KNOW

– She is from Tennessee

– She collapsed 15+ minutes after taking the Pfizer vaccine on live television

– Her Instagram account is tiffany_dover_ and she hasn’t posted for 5 days, she generally posts every 2-3 days

– There is social media posts about her death from people who were allegedly connected to her or her family

– There is reports of death threats against her family for sharing the info

– There is reports of censorship

– The debunkers are saying it is all false but are providing very little evidence

Someone even created a fake Tiffany Dover memorial page on Instagram (now removed), saying :

She will always be remembered for her bravery. She was a wonderful nurse. #nurse #bravery #covid_19 #tiffanydover #inmemoryof #hospital #alwaysremember

It gained 1650 followers before Instagram finally shut it down. While it was up, antivaxxers used it to promote the claim that she truly did die after being vaccinated with the Pfizer-BioNTech COVID-19 vaccine.

How To Help Tiffany Dover With These Fake Death Claims

Creating and sharing fake death claims about Tiffany Dover isn’t about “having an open mind” or “just investigating the truth” or “exploring the possibilities“.

This is literally cyberbullying!

And it doesn’t even stop with fake death claims. People are also hounding her family and friends, calling them fake or crisis actors.

Help stop this cyberbullying of Tiffany Dover, her family and her friends, by :

sharing such fact check articles, including this and this.

telling the truth to those who shared with you those fake claims

sharing the fact check links as comments on those fake social media posts

DO NOT SHARE those fake social media posts

Why Tiffany Dover Death Claims Are ALL FAKE!

Fact #1 : Tiffany Dover Is Alive And Well!

According to the NewsChannel 9 ABC crew who recorded the whole event on 17 December 2020, Tiffany Dover quickly recovered, and within minutes, was able to get up and speak with them again.

While antivaxxers are claiming that she subsequently died, those are complete lies. She did NOT die.

Her hospital – CHI Memorial – posted this tweet two days later, confirming that she is well, asking that people give her and her family privacy.

UPDATE: Nurse Tiffany Dover appreciates the concern shown for her. She is home and doing well. She asks for privacy for her and her family.

— CHI Memorial (@CHI_Memorial) December 19, 2020

Fact #2 : Tiffany Dover Alive And Well On Video, 4 Days Later!

On 21 December 2020, CHI Memorial followed up with a short video showing that she is alive and well, surrounded by her colleagues.

To prove that it was not filmed before her vaccination and alleged “death”, they held up banners that said, “Nursing Leadership Vaccinated Together, #CHIMemorialStrong” and the date “12-21-20“.

Fact #3 : People Found The Wrong Death Record

Conspiracy theorists and antivaxxers are parading online search results showing her death record.

Many searched Tiffany Dover in the wrong state, because they thought she was a nurse in Alabama. Is it any wonder she got the wrong death record?

Some even assumed that SearchQuarry lists only dead people. It’s actually a search engine for public records in the United States.

With such amazing keyboard investigators, who needs the FBI?

Fact #4 : Tiffany Dover Is Not A Unique Name

As unique as Tiffany Dover surely is as a person, her name isn’t unique.

In the entire US, there are currently 47 Tiffany Dovers, with nine of them in Tennessee. And no, they are NOT CLONES, as some people are alleging.

And they do not include Tiffany Dovers who have actually passed away years or even decades ago.

Fact #5 : People Are Not Obligated To Be Active On Social Media

Skeptics like Shannon Haas claim that she must be dead because “she hasn’t posted for 5 days” even though “she generally posts every 2-3 days“.

First of all, NO ONE is obligated to post anything on social media, much less maintain their activity level.

Secondly, a lack of updates does NOT mean she is dead. Some of us actually have lives, like a real social life outside of social media?

Let’s not forget that she’s a nurse manager in CHI Memorial, which is not only actively treating COVID-19 patients, they are also working to administer the Pfizer COVID-19 vaccine.

So is it really that surprising if she has been too busy to update your stalkers with her latest selfies?

But since you are so “concerned” about her well-being, here’s a photo of Tiffany Dover with her CHI Memorial colleagues on 21 December 2020 :

Fact #6 : Claims Of Reports Are Just Claims, Not Actual Evidence

People like Shannon Haas, Joe Leonard and Kitty Lynn are not true skeptics. They are just too damn lazy to go beyond making unverified claims on social media.

He claimed that there are “reports of death threats against her family for sharing the info” and “reports of censorship“.

But when a friend asked for links for those reports, he could only reply, “Not sure.” I kid you not.

Yet, he had no qualms claiming too that “debunkers are saying it is all false but are providing very little evidence“.

If you see claims like that, WITHOUT EVIDENCE, please treat it the same way you would if someone told you he/she can fly without wings.

With the utmost skepticism : Yeah, sure, bro… sure… preferably with a middle finger.

Recommended Reading

Can Donald Trump Really Blame Iran For Rocket Attack?

Fake CIMB SMS Scam! Do NOT Click / Call!

Public Bank : Fake SMS Scam! Do NOT Click / Call!

Did Alabama Nurse, Tiffany Dover, Die From Pfizer Vaccine?

Will COVID-19 Turn Breastmilk Yellow With Antibodies?

Is First Woman To Get COVID-19 Vaccine In Critical Condition?

Did Pfizer Use A Toxic Placebo In COVID-19 Vaccine Trial?

Did China Create This Amazing Female Dancing Robot?

Fact Check : Six People Died From Pfizer COVID-19 Vaccine?

Fact Check : Heavy Gadget Use Killing Kids With Radiation?

Does The Pfizer COVID-19 Vaccine Cause Bell’s Palsy?

Are Hackers Using Good Morning Messages To Hack You?

Pfizer + Moderna mRNA Vaccines : How Do They Work?

Why Pfizer + Moderna mRNA Vaccines Are Not Good Enough

Dr. Paul Thomas : Antivax Doctor Stripped Of Medical Licence!

Pfizer COVID-19 Vaccine : 2020 Production Cut Explained!

Watch : Arecibo Telescope Before & During The Collapse!

Nobel laureate Tasuku Honjo confident US created COVID-19?

Malaysia Government : Available COVID-19 Tests + Charges!

Is Gadget Radiation Killing Kids Forced To Study At Home?

Face Mask Guide : The RIGHT Way To Wear + Remove!

Face Mask vs COVID-19 : Should You Wear One?

Did A Ringing Phone Cause This Gas Stove Explosion?

Elbow Pit Slapping For Heart Attack : Does It Work?

Fact Check : Does The LPG Gas Tank Pressure Test Work?

Higher RON Octane Rating Myth Debunked!

Hand Sanitiser : Can It Set Your Car On Fire?

Fact Check : Are There Two Sides To A Surgical Mask?

COVID-19 : How To SAFELY Clean Your Mobile Devices!

Go Back To > Fact Checks | Science | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Did Alabama Nurse, Tiffany Dover, Die From Pfizer Vaccine?

Leave a reply

Antivaxxers are claiming that an Alabama nurse, Tiffany Dover, died on live TV after taking the Pfizer-BioNTech COVID-19 vaccine!

Find out what’s going on, and what the facts really are!

Updated @ 2020-12-25 : Added more fact checks, because antivaxxers continue to post fake claims about Tiffany. It’s Christmas, for crying out loud!

Originally posted @ 2020-12-23

Did Alabama Nurse, Tiffany Dover, Die From Pfizer Vaccine?

There are several versions of this story, but they basically boil down to two main storylines :

a) an unnamed Alabama nurse died on live TV after taking the Pfizer-BioNTech COVID-19 vaccine!

COVID 19 -TEST A nurse in Alabama dies directly on the air after taking the Pfizer vaccine for Corona This is clear evidence of the danger of the vaccine, including the toxins and animal genes .. LOOK AT VEDIO CLIP!

b) a Tennessee nurse, Tiffany Dover, died after fainting on live TV (after taking the Pfizer-BioNTech COVID-19 vaccine)

OMFG! FAINTING NURSE DIED
Tiffany Dover IS DEAD

I saw that fainting nurse died, so I checked it out!
This death record has to be her! Same town, age, and most importantly, the family listed all show up as her friends on fb!

So the nurse who took the COVID-19 vaccination on live television is now dead days after being vaccinated..

No, Tiffany Dover, Did NOT Die From Pfizer Vaccine!

The short and sweet summary is this – no nurse died after taking the Pfizer vaccine, whether on live TV or otherwise.

For the skeptics who are fond of asking, “How do you know? Were you there?”, here are the facts…

Fact #1 : No Nurse Died On Live TV In Alabama

Despite claims that an unnamed nurse died in Alabama after being injected with the Pfizer COVID-19 vaccine, that is not true.

The claim was shared with the video of Tiffany Dover, a nurse in Tennessee, fainting on live TV after receiving her Pfizer vaccination.

It is likely that antivaxxers intentionally switched the location from Tennessee to Alabama, to mislead those who already knew about Tiffany Dover.

Fact #2 : Tiffany Dover Is Alive And Well!

According to the NewsChannel 9 ABC crew who recorded the whole event on 17 December 2020, Tiffany Dover quickly recovered, and within minutes, was able to get up and speak with them again.

While antivaxxers are claiming that she subsequently died, those are complete lies. She did NOT die.

In fact, her hospital – CHI Memorial – posted this tweet, confirming that she is well, asking that people give her and her family privacy.

UPDATE: Nurse Tiffany Dover appreciates the concern shown for her. She is home and doing well. She asks for privacy for her and her family.

— CHI Memorial (@CHI_Memorial) December 19, 2020

Fact #3 : Tiffany Dover Alive And Well On Video, 4 Days Later!

On 21 December 2020, CHI Memorial followed up with a short video showing that she is alive and well, surrounded by her colleagues.

To prove that it was not filmed before her vaccination and alleged “death”, they held up banners that said, “Nursing Leadership Vaccinated Together, #CHIMemorialStrong” and the date “12-21-20“.

Fact #3 : People Found The Wrong Death Record

Conspiracy theorists and antivaxxers are parading online search results showing her death record.

In fact, Kitty Lynn in this example searched for Tiffany Dover in the wrong state – Alabama. Is it any wonder she got the wrong death record?

Note : We intentionally added the HOAX overlay, to prevent it from being misleadingly shared

And this intrepid online investigator discovered that he/she was also listed on searchquarry.com.

Funnily enough, herdsheeple thought that SearchQuarry lists only dead people. It’s actually a search engine for public records in the United States.

With fantastic investigators like herdsheeple and Kitty Lynn, who needs the FBI?

Fact #4 : Tiffany Dover Is Not A Unique Name

As unique as Tiffany Dover surely is as a person, her name isn’t unique.

In the entire US, there are currently 47 Tiffany Dovers, with nine of them in Tennessee. And no, they are NOT CLONES, as some people are alleging.

And they do not include Tiffany Dovers who have actually passed away years or even decades ago.

Fact #5 : No Animal Genes In mRNA Vaccines

Some of these messages include the claim that the Pfizer COVID-19 vaccine contains animal genes, that’s completely false.

There are no genes of any sort in mRNA vaccines, whether they are from Pfizer or Moderna.

The mRNA in these COVID-19 vaccines are merely RNA instructions – coding for the SARS-CoV-2 spike proteins. That’s it.

Go Back To > Fact Checks | Science | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Did China Create This Amazing Female Dancing Robot?

Leave a reply

Did China create this amazing female dancing robot for a dance show in Shanghai?

Watch the viral video for yourself, and find out what the FACTS really are!

Did China Create This Amazing Dancing Robot?

Here is the video that countless people have been sharing on social media and even on YouTube. It is often paired with a short explanation in (broken) English.

Can u believe that this female dancer is robot ? The dance was held in Shanghai n it lasted only 5 minutes but the queue was 4hrs n cost 499 Yuan!

It has surpassed Japan in complexity, and saw its perfect facial expressions. Send this video to everyone to watch, let us enjoy together…

Amazing Female Dancing Robot : The Truth

The agility and grace of this female dancing robot, and its facial expressions, are incredible.

The less gullible would point out that it is something you would only expect from a real human being, and they would be right.

Fact #1 : That Is A Video Of A WDSF Competition

That is actually a video clip from the 2018 World Dance Sport Federation Championship in Lithuania.

The initials WDSF (World Dance Sport Federation) can be seen, together with the recording date at the upper left corner of the video.

Fact #2 : The Dance Only Lasted A Minute

The dance in the video only lasted just over a minute, even though the accompanying fake message claimed it lasted for 5 minutes.

Fact #3 : Those Are Lithuanian Dance Champions

Both dancers are very human. In fact, they are Lithuanian dance champions Ieva Zukauskaite (female), and Evaldas Sodeika (male).

Fact #4 : 499 Yuan Was The Entry Price To Shanghai Disneyland

The fake story claimed that the ticket to watch this performance costs 499 Yuan – about US$73 / £55 / RM303. That would be ridiculously exorbitant for a short dance.

In truth, that was “copied” from the two earlier hoaxes (here and here) about robot dancers at the Shanghai Disneyland.

Even that was not accurate, because 499 Yuan was the cost of an entry ticket to the Shanghai Disneyland when it first opened in February 2016.

Since 6 June 2018, it has been priced at 399 Yuan (off-peak), 575 Yuan (peak) and 665 Yuan (peak holiday).

Why Would Someone Create This Fake Story?

With China’s aggressive foreign stance in recent years, it is not uncommon to see such fake stories being created and shared.

Some believe it’s part of a concerted attempt to burnish China’s image overseas.

Others believe the many fake stories are being created to drown out the negative coverage of China’s controversial Belt and Road Initiative, and their aggressive moves in the South China Sea.

Whatever the reasons may be, it is our duty as global citizens to stop the proliferation of such fake stories.

Please share this fact check with your friends, so they know the truth!

Go Back To > Fact Checks | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Are Hackers Using Good Morning Messages To Hack You?

Leave a reply

Are hackers using Good Morning videos, pictures and messages to hack your devices, and steal your data?

Find out what is happening, and what the FACTS really are!

Claim : Hackers Are Using Good Morning Messages To Hack You!

This post about Chinese hackers using Good Morning videos, pictures and messages to hack your devices, has gone viral on social media and WhatsApp :

Dear friends, please delete all welcome photos and videos in Good Morning format and the like. Read below the article to the end, which will be clear why I ask about it. From now on I will only send personally prepared greetings.

Read it all !!! Send this message urgently to as many friends as you can to stop the invasion.

Olga Nikolaevna Lawyer: Caution:
ATTENTION

For those who like to send Good Morning pictures! Good day! Good evening!

Do not send these “good” messages.

Today, Shanghai China International News sent SOS to all subscribers (this is the third reminder) that experts recommend: please do not send good morning, good night, pictures and videos,.
Reports show that hackers in China designed the images, the video is so beautiful to hide the phishing codes inside them, when everyone sends these messages, the hackers use your devices to steal personal information, such as bank card information and data to crack the phone.

It has been reported that more than 500,000 victims of fraud have already been deceived.

If you want to greet others, write your own message to protect yourself and your family and friends.

Important! Delete all greeting messages and pictures that you have on your phone for your own safety. If someone sent you such a picture, immediately remove it from the device. Malicious code takes time to deploy, so if you act immediately, no harm will be done.

Tell all your friends about this to prevent hacking.

Greet others by writing your own words, and send only images you create. The material you create yourself is completely safe. Please understand me correctly! All have credit cards attached to their phone. Everyone has a lot of contacts in their phones. You will create a threat not only to yourself, but to all the contacts that you have on your phones, your friends and acquaintances.
Take this very carefully! This is a harsh reality

ATTENTION !!!
Urgent information !!!

Some people have already restricted..!

Hackers Using Good Morning Messages To Hack You : Just Another Hoax!

Many of get blasted with Good Morning or Good Night messages every day from well-meaning friends and family.

While they are literally spam that clog up Facebook, Telegram and WhatsApp groups, they really do NOT allow hackers to hack your devices.

While it would be nice to see people stop this irritating practice, here are the reasons why Good Morning messages are harmless…

Fact #1 : Shanghai China International News Does Not Exist

The news organisation, Shanghai China International News, that was stated in the hoax does not exist.

Fact #2 : No Reports On Hackers Designing Good Morning Pictures + Videos

There are no reports on hackers from China or anywhere else creating these Good Morning pictures and videos.

In fact, they are mostly created by websites and Facebook pages for people to share, and hopefully attract new followers.

Fact #3 : No Fraud Involving Good Morning Messages

There has been no fraud involving Good Morning or even Good Night messages, videos or pictures.

Certainly, half a million victims of such a scam would have made front page news. Yet there is not a single report on even one case.

Fact #4 : Image-Based Malware Is Possible, But…

Digital steganography is a method by which secret messages and other data can be hidden in digital files, like a photo or a video, or even a music file.

It is also possible to embed malicious code within a Good Morning photo, but it won’t be a full-fledged malware that can execute by itself. At most, it can be used to hide the malware payload from antivirus scanners.

In January 2019, cybercriminals created an online advertisement with a script. The script itself would appear innocuous and pass any check.

However, the image itself has an “almost white” rectangle that is recognised by the script, triggering it to redirect the user to the cybercriminals’ website.

Once there, the victim is tricked into installing a Trojan disguised as an Adobe Flash Player update.

Fact #5 : Malicious Code Executes Immediately

If you accidentally download and trigger malware, it will execute immediately. It won’t wait, as the hoax message claims.

Deleting Good Morning or Good Night photos or videos will free up storage space in your phone, but it won’t prevent any malware from executing.

Also, most malware require some sort of action to trigger their execution. Generally (but not always), just downloading a malware won’t trigger it.

Go Back To > Cybersecurity | Software | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

How Honeywell Is Helping Industries Tackle COVID-19!

Leave a reply

Find out how Honeywell has pivoted to deliver new services and products that help critical industries tackle the COVID-19 pandemic!

How Honeywell Is Helping Industries Tackle COVID-19

Honeywell have long been a solution partner for critical industries, with over 100 years of global experience in various industries.

In an exclusive roundtable session, Norm L. Gilsdorf, President of Honeywell ASEAN, detailed how the COVID-19 pandemic has created a crisis for critical industries.

On the other hand, it offered Honeywell the opportunity to showcase their expertise in creating new solutions and products to meet the new challenges.

Honeywell Products + Services That Help Industries Tackle COVID-19

Honeywell have quickly pivoted to develop these new solutions and products to help critical industries In ASEAN countries and around the world better handle the challenges of the COVID-19 pandemic.

Honeywell UV Treatment System

The Honeywell UV Treatment System is a deep ultraviolet (UVC) sanitising system for airlines that significant reduces certain viruses and bacteria on airplane cabin surfaces.

It is roughly the size of the typical airline beverage cart, with arms that extend over the top of seats, to sweep the cabin with UVC light.

The Honeywell UV Treatment System can service an aircraft cabin in less than 10 minutes for just a few dollars per flight for midsize to large airline fleets.

Currently, several major airlines in the ASEAN region are testing this system on their aircraft.

Honeywell Healthy Building Solutions

The Honeywell Healthy Building Solutions are not new, but they go a long way to help companies protect their workforce from COVID-19.

By integrated air quality, safety and security technologies, they help to improve the health of building environments, operate more cleanly and safely, and help enforce social distancing policies.

The same technologies can also be employed in other public and commercial facilities like hospitals, airports, factories, educational institutions, etc. to enhance safety and compliance.

Honeywell Remote Industrial Solutions

The Honeywell Remote Industrial Solutions are being used by customers to handle COVID-19 related constraints and maintain business continuity, while protecting employees.

This software suite, which includes Experion Remote Operations, allow for remote management as well as work-from-home abilities for employees.

Honeywell Forge Cybersecurity Suite helps customers ensure business continuity in the face of mounting cyber threats, uncertain business conditions and supply chain disruptions.

Warehouse and logistics solutions help drive the exceptional growth of e-commerce in the ASEAN region and beyond, during the pandemic. They also support cold chain services for delivering medical products, including vaccines.

Other Honeywell Solutions That Help Against COVID-19

Other Honeywell solutions that help people and industries handle COVID-19 include :

Gas and flow sensors for ventilators, oxygen concentrators and respiratory machines;
Thermorebellion, a new temperature monitoring solution that incorporates advanced, infrared imaging technology and artificial intelligence algorithms to conduct non-invasive, preliminary screening of personnel entering facilities such as airports, hospitals and plants;
Dual layer face masks, personal safety packs and N95 masks.

COVID-19 : How To Keep Safe!

Here are a few simple steps to stay safe :

Avoid suspected cases or disease hotpots, like hospitals, if possible!
Avoid public events and crowds
Keep our hands clean with soap or hand sanitiser
If you need to wear a surgical mask, make sure you put it on and remove it properly!

Go Back To > Business | Cybersecurity | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Kaspersky on APAC Digital Reputation Threats!

Leave a reply

Vitaly Kamluk, Kaspersky Director of Global Research and Analysis for APAC, explores the impact of social media activities on our digital reputation, as well as those of brands and companies!

Digital Reputation : What Is It?

Digital reputation is the online version of good old fashion reputation. The only difference is that it is defined by our online behaviour and what people are saying about us, or the brand.

In short, our digital reputation is a combination of our digital footprint, and the impact it has on how other people perceive us, or the brand.

As the world becomes more connected, digital reputation is becoming more than just important – it is now critical to the future and success of any individual or corporation.

This has led to a shift in how people and brands behave online these days…

As Jesmond Chang, Head of Corporate Communications for Kaspersky APAC, shared above :

32% of social media users in APAC use anonymous accounts
50% of social media users in APAC avoid companies that are involved in a scandal, or had received negative news coverage online
40% also stopped using a company’s or brand’s products once they are embroiled in some kind of online crisis.

Kaspersky on APAC Digital Reputation Threats!

At the 6th Vitaly Kamluk, Kaspersky Director of Global Research and Analysis for APAC, shared the latest threats to digital reputation in the APAC region, which is precipitated by the COVID-19 pandemic.

“One of the most visible effect of this pandemic is how it forced everyone, from individuals to the biggest companies, to shift a lot of their activities online.

This dependence, triggered by our need to secure our physical health, also pushed us to increase our social media use, either to connect with our distant loved ones, to give support to our community, to entertain ourselves, or to get hold of products and services that we need.

Parallel to this trend is the opening of wider doors for cybercriminals to exploit”

With many employees working from home, cybercriminals have found new ways to exploit this situation :

brute force attacks on database servers increased 23% in April 2020
Malicious files planted on websites increase 8% in April 2020
Network attacks and phishing emails also rose

Kaspersky themselves reported an increase of unique malware samples from 350,000 per day pre-COVID, to 428,000 per day!

With the increased reliance on online services, including remote work and learning, e-commerce purchases and a greater adoption of e-wallets, the 2020 threat landscape appears to favour cybercriminals.

Go Back To > Cybersecurity | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Fact Check : CMCO / PKPB Extended To 31 December 2020?

Leave a reply

Was the CMCO / PKPB lockdown extended until 31 December 2020 by Malaysian Prime Minister Muhyiddin Yassin?

Find out what’s going on, and what the FACTS really are!

Claim : CMCO / PKPB Extended To 31 December 2020!

The viral claim consisted of a video of Malaysian Prime Minister Muhyiddin Yassin, with the message:

CMCO extended until 31/12

In the video, the Prime Minister appeared to announce that the CMCO / PKPB lockdown would be extended until 31 December 2020.

However, he was not talking about the CMCO / PKPB lockdown… so we placed the FALSE overlay to prevent further abuse.

No, CMCO / PKPB Was Not Extended To 31 December 2020

The video does indeed show Malaysian Prime Minister Muhyiddin Yassin announcing the extension of the lockdown to 31 December 2020.

However, this video was recorded much earlier, on 28 August 2020, when he announced the extension of the PKPP / RCMO to 31 December 2020, not PKPB / CMCO.

You can see RMCO (Recovery Movement Control Order) or PKPP (Perintah Kawalan Pergerakan Pemulihan) mentioned in the screenshot below.

The Malaysian Prime Minister is expected to announce an extension of the CMCO / PKPB lockdown later this week.

But the extension is expected to be for an additional 2 weeks – from 7 December until 20 December, not until 31 December 2020.

However, nothing is certain until the official announcement is made.

This is the second fake news about a lockdown extension today, after the PKPD / EMCO extension hoax.

RMCO / PKPP vs CMCO / PKPB : What’s The Difference?

Recovery MCO (RMCO or PKPP) is the most lenient form of lockdown during the COVID-19 pandemic, with greater liberalisation of the economy :

Interstate travel is permitted, except to areas under Enhanced MCO (EMCO) or administrative restrictions.
Barbers and hair salons are allowed to reopen, subject to SOP.
Beauty parlours and nail salons are allowed to reopen, subject to SOP.
Museums are allowed to reopen.
Busking (indoor) and filming activities will be allowed.
Meetings and workshops will be allowed.
Morning / evening / night markets are allowed.
Hawker stalls are allowed.
Recreational fishing and commercial fisheries will be allowed.
Gyms and snooker halls will be allowed.
Non-contact sports like bowling, badminton, archery and shooting will be allowed.
Outdoor group sports like kayaking and cycling will be allowed.
Indoor sports like snooker, yoga, aerobics will be allowed.
Malaysia’s borders remain closed, but local tourism will be allowed.
Religious activities, like Hari Raya Aidiladha celebrations, will be allowed, subject to JAKIM’s SOP
Schools will be reopened in stages throughout the RMCO, based on advice from the Ministry of Education.
Places of worship will be allowed to reopen, subject to SOP
Normal business operating hours to resume, with social distancing, hand washing, face masks.

The current Conditional MCO (CMCO or PKPB) is less lenient, limiting interstate travel only for work and business purposes only, among other limitations :

Only two persons from each household are allowed to go out to purchase food supplies or daily necessities.
Only two persons from each household are allowed to dine-in at any restaurant / cafe.
No one is allowed to enter or leave the areas under CMCO lockdown.
Interstate travel is forbidden, except for work, economic or industrial purposes.
Supermarkets, shopping malls and retail stores are allowed, between 6 AM and 12 AM.
Restaurants, food stores, food trucks, hawkers, food courts, food stalls, food kiosks, groceries and convenience stores are allowed to open from 6 AM until 12 AM.
All public and private schools, institutions of higher learning, vocational training institutes, kindergartens, day care centres, tahfiz centres, public parks and recreation centres must close.
All seminars, workshops, courses, training, conferences, lectures and MICE (Meeting, Incentives, Conventions and Exhibitions) are forbidden.
All domestic tourism activities that cross into or out of the CMCO areas are forbidden.

For more details, please see Peninsular Malaysia : Official CMCO / PKPB SOP!

Go Back To > Fact Checks | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Fact Check : PKPD In Malaysia Extended To 3 January 2021?

Leave a reply

The viral infographic claiming that the PKPD for eight states and federal territories in Malaysia was just extended to 3 January 2021 is FALSE.

Take a look at what just went viral on social media, and why it is just fake news!

Claim : PKPD in Malaysia Extended To 3 January 2021?

This was the infographic that went viral on social media today, 3 December 2020. We added the FALSE overlay to prevent further abuse.

It claimed that the PKPD (Perintah Kawalan Pergerakan Diperketatkan) or EMCO (Enhanced Movement Control Order) for these eight states and federal territories in Malaysia was just extended to 3 January 2021.

Selangor
Sabah
Labuan
Kuala Lumpur
Putrajaya
Perak
Terengganu
Pulau Pinang

PKPD In Malaysia Extended To 3 January 2021 : FAKE NEWS!

That infographic is fake and was edited from previous infographics released by the Malaysia National Security Council (MKN).

For the Doubting Thomases of the world who always ask, “How you know?”, here are the facts why…

Fact #1 : There Is No PKPD / EMCO Of Any State In Malaysia

There is no PKPD or EMCO covering an entire state or federal territory in Malaysia.

Only PKPB (Perintah Kawalan Pergerakan Bersyarat) or CMCO (Conditional Movement Control Order) exists for these seven states or federal territories :

North : Penang, Perak
East : Terengganu, Kelantan
Central : Selangor, Kuala Lumpur
South : Negeri Sembilan

Fact #2 : Labuan Is A Federal Territory

Labuan is always listed as WP Labuan in government infographics, because it is a federal territory, like Kuala Lumpur and Putrajaya.

Fact #3 : The Government Has Debunked It As Fake

The Malaysia National Security Council (MKN) has just publicly debunked the infographic as fake (with our English translation).

INI ADALAH PALSU!! Tak pasti jangan kongsi.

THIS IS FALSE!! Don’t share if not sure.

Go Back To > Fact Checks | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Fact Check : Fat Bidin Claims On MySejahtera Snooping!

Leave a reply

Wan Azlee, who goes by Fat Bidin, claims that MySejahtera is mining private information from our phones.

Find out what he discovered, and what the FACTS really are!

Updated @ 2020-12-03 : Added MySejahtera version history for more context.

Updated @ 2020-12-01 : Added more information, including how to disable permissions in Android and iOS for the paranoid.

Originally posted @ 2020-11-30

Fat Bidin : MySejahtera Is Mining Information From Our Phones!

In Episode 41 of Fat Bidin Knows Everything, Wan Azlee claimed (between mouthfuls of oats) that MySejahtera is mining a wealth of private information from our phones.

His evidence? A report by the Exodus Privacy website, stating that MySejahtera has 6 trackers and 24 permissions.

He went through the 24 permissions and made these concerning observations about MySejahtera :

it can take control of your phone and pair it with your Bluetooth devices
directly call phone numbers
find accounts on your phone
read your contacts in your phone
read the contents of your SD card
modify or delete the contents of your SD card
prevent your phone from sleeping
modify your contacts

Phwoarrrr…. shocking, isn’t it? Wan Azlee / Fat Bidin then asks the Malaysia Ministry of Health to be transparent and tell us what’s going on.

Well, let’s take a closer look at his claims…

Fat Bidin On MySejahtera Is Mining Our Information : A Fact Check

Wan Azlee is very articulate, but Fat Bidin honestly doesn’t quite know everything… and here’s why.

Fact #1 : That MySejahtera Version Was From April 2020

Fat Bidin posted his video on 24 November 2020, and we noticed that he was checking an old version of MySejahtera – version 1.0.10, that was posted way back in April 2020.

For the record, there has been FOURTEEN UPDATES since that version :

1.0.11 : 23 April 2020
1.0.12 : 28 April 2020
1.0.13 : 3 May 2020
1.0.15 : 4 May 2020
1.0.16 : 13 May 2020
1.0.17 : 23 May 2020
1.0.18 : 30 May 2020
1.0.19 : 3 June 2020
1.0.20 : 28 June 2020
1.0.21 : 30 June 2020
1.0.22 : 21 July 2020
1.0.23 : 29 July 2020
1.0.24 : 11 August 2020
1.0.25 : 5 November 2020

The latest version of MySejahtera – version 1.0.25 – was released on 5 November 2020 – 19 days before Wan Azlee posted his video.

Why on Earth would he focus on a 6 month-old version of the app, when there is a much newer version?

Fact #2 : Exodus Posted Their Latest MySejahtera Report On 20 November 2020

Exodus posted their latest report on the latest version of MySejahtera (version 1.0.25) on 20 November 2020 at 10:47 am (as you can see in this screenshot).

That was 4 days before Wan Azlee posted his video, so why didn’t he use this new report instead?

Fact #3 : MySejahtera Has 1 Tracker + 14 Permissions According To Exodus

According to the November 20 Exodus report, MySejahtera has 1 tracker – Google Firebase Analytics, and 14 permissions, of which the highlighted ones were :

ACCESS_COARSE_LOCATION : access approximate location (network-based)
ACCESS_FINE_LOCATION : access precise location (GPS and network-based)
CALL_PHONE : directly call phone numbers
CAMERA : take pictures and videos
READ_EXTERNAL_STORAGE : read the contents of your SD card
WRITE_EXTERNAL_STORAGE : modify or delete the contents of your SD card

We immediately noticed that several controversial permissions are no longer in it :

GET_ACCOUNTS : find accounts on the device
READ_CONTACTS : read your contacts
WRITE_CONTACTS : modify your contacts

So if you are worried that MySejahtera is reading your contacts or modifying them, just UPDATE it to the latest version 1.0.25!

Fact #4 : Actual Permissions Are Fewer

When we checked MySejahtera 1.0.25 as installed in our phone, we found that it actually asked for and used only 11 permissions, instead of 14 as reported by Exodus.

The report also offered a bit more context about those permissions. For instance, location data is only made available when you are actively using the app.

That’s because the location data is used by MySejahtera for its Hotspot Tracker and Locate Health Screening Facility features.

In your phone, you can tap on them for more information on what they allow the app to do.

Fact #5 : Apps Need To Read, Modify + Delete Their Own Data

The permission to read, modify and delete content on our phone may seem ridiculous, but it is a necessity for most apps.

Unless the apps is merely a container for a website or web service, it needs to store data, and modify or delete it when necessary.

Fact #6 : Access To External / SD Card Is Necessary

Most developers will also ask for the permission to read, modify and delete content to the (micro) SD card, because of Adoptable Storage.

Adoptable Storage is a feature that lets smartphones use external storage (like a microSD card) as if it is part of their internal storage.

When a microSD card is used this way, apps like MySejahtera can be installed on it. Therefore, it would require permission to read, modify and delete its own data on the external storage card.

Fact #7 : Android Restricts Data Snooping

Apps that have access to read / modify / write external storage are allowed to access files from other apps. However, this is limited to only these three media collections :

MediaStore.Images
MediaStore.Video
MediaStore.Audio

MySejahtera, or any other app with similar permissions, cannot read / modify / delete data outside of those three media storage locations.

Fact #8 : MySejahtera Has A Privacy Policy

Like all other Android and iOS apps, MySejahtera has a privacy policy, where it is stated clearly that

MySejahtera is owned and operated by the Government of Malaysia. It is administrated by the Ministry of Health (MOH) and assisted by the National Security Council (NSC) and the Malaysian Administrative Modernisation and Management Planning Unit (MAMPU). The Government assures that the collection of your personal information is align with Personal Data Protection Act 2010 (Act 709).

The app will not record user’s Personal Data except with the permission and voluntarily provided by the user. Information collected are used for monitoring and enforcement purposes by Government authorities in dealing with the COVID-19 pandemic. This information is not shared with other organizations for other purposes unless specifically stated.

Fact #9 : You Are Protected By PDPA 2010 (Act 709)

We are all protected by the Personal Data Protection Act 2010 (Act 709).

Anyone who is caught sharing our personal data without permission is be liable to a fine not exceeding three hundred thousand ringgit or to imprisonment for a term not exceeding two years or to both.

Fact #10 : You Can Disable Permissions

You can view and disable any permission that worries you :

Android

Go to Settings > Apps > MySejahtera > Permissions.
Tap on the permission you don’t want, and select Deny.

Apple iOS

Go to Settings > MySejahtera.
Disable the permissions you don’t want.

But note that doing this will likely break some features in MySejahtera.

Fact #11 : Many Other Apps Are Worse For Your Privacy

When it comes to privacy, we have bigger fishes to fry. Take a look at how many trackers and permissions these four popular apps require.

They make MySejahtera look absolutely privacy-conscious!

Go Back To > Cybersecurity | Software | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Fact Check : Tsunami Waves Hit Second Penang Bridge?

Leave a reply

Did giant tsunami waves hit the second Penang bridge – the Sultan Abdul Muadzam Shah Bridge? Find out what the facts really are!

Claim : Tsunami Waves Hit Second Penang Bridge At 6PM Yesterday!

A video claiming to show the Second Penang Bridge getting hit by giant tsunami waves, is going viral on social media.

Dramatically, a person appeared to be swept away by a giant wave, and a motorcyclist quickly fled another giant wave! Here is a video mash-up of two examples we found so far…

Did Tsunami Waves Hit Second Penang Bridge? Nope!

This is yet another example of fake news spreading like COVID-19 on social media.

The video is genuine, but it does NOT show giant tsunami waves hitting the Second Penang Bridge.

Fact #1 : This Bridge Is Too Small To Be Second Penang Bridge

In the main span, the Second Penang Bridge has a height clearance of 30 metres for ships to pass under. The bulk of the bridge has a much lower 6 metre clearance.

The Second Penang Bridge is also very wide – between 150 and 250 metres, with 4 car lanes and 2 motorcycle lanes.

The bridge in the video appears to be much shorter, with a 4 metre clearance; and much narrower with just 2 lanes.

Fact #2 : No Report Of Any Tsunami Affecting Penang

There has been no earthquakes nearby, or reports of any tsunami affecting Penang.

The waves appear to be approximately 12-15 metres high, and would have been big news. Yet there is no mention of it in the mainstream media? Very sus, no?

Fact #3 : This Is An Old Video

This video went viral earlier in July 2020, when it was posted as evidence of a tsunami hitting a bridge in Alaska after an earthquake there. However, that was false as well.

The earliest we could find was a December 2017 tweet by a CNBC-AWAAZ anchor, Deepali Rana, who claimed that it was a video of the Bandra-Worli Sea Link. That is also false!

Fact #4 : The Video Was Recorded On Minicoy Island

The video was recorded on 23 August 2017, showing giant waves hitting the Eastern Jetty at Minicoy Island (Maliku), in Lakshadweep, India.

Here is a picture of the Eastern Embarkation Jetty, with a surfer for size comparison.

Go Back To > Fact Checks | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Dell EMC PowerProtect Cyber Recovery for Sheltered Harbor!

Leave a reply

Dell EMC PowerProtect Cyber Recovery just received a Sheltered Harbor endorsement!

Find out what this means for financial services organisations looking for a Sheltered Harbor-certified turnkey data vault!

Dell EMC PowerProtect Cyber Recovery : Endorsed by Sheltered Harbor!

On 10 November 2020, Dell EMC PowerProtect Cyber Recovery was officially endorsed by Sheltered Harbor – the non-profit initiative to improve the stability and resiliency of the financial sector.

This is the culmination of two years of work between Dell and Sheltered Harbor teams, to develop a solution designed for financial services organisations.

If your organisation is a Sheltered Harbor participant, or eligible to be one, you can now purchase and quickly deploy the Dell EMC PowerProtect Cyber Recovery – a turnkey data vault that meets all of the stringent Sheltered Harbor criteria.

The Dell EMC PowerProtect Cyber Recovery Solution for Sheltered Harbour helps participants achieve compliance with data vaulting standards and certification, and plan for operational resilience and recovery against any cyber attack.

If your organisation is not part of the Sheltered Harbor community, you can still deploy PowerProtect Cyber Recovery to protect your data with the same stringent Sheltered Harbor standards.

Dell EMC PowerProtect Cyber Recovery : What Is It?

Dell EMC PowerProtect Cyber Recovery is an on-premise turnkey data vaulting solution that protects customers from all kinds of cyber threats.

Its CyberSense analytics and machine learning capabilities allow customers to monitor data integrity, ensuring the continued quality of their data.

It also comes with forensic tools to let customers discover, diagnose and remediate ongoing attacks.

Go Back To > Enterprise IT | Cybersecurity | Home

Support Tech ARP!

If you like this review, please support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Fact Check : HKL Preparing For 3K COVID-19 Cases A Day?

Leave a reply

A video of HKL (Hospital Kuala Lumpur) preparing for 3,000 COVID-19 cases a day has gone viral!

Find out what happened, and what the facts really are!

Claim : HKL Preparing For 3K COVID-19 Cases A Day

A video showing beds and mattresses being unloaded at HKL (Hospital Kuala Lumpur / Kuala Lumpur General Hospital) has gone viral, because it’s accompanied by this message :

KL GH getting ready for massive spike of Covid infection cases, expecting around 3000 patients per day in the Klang Valley and KL..

HKL Preparing For 3K COVID-19 Cases A Day? Not Quite!

The video appears to be genuine and shows the unloading of beds and mattresses at HKL (also known as KL GH).

However, HKL is NOT preparing to take in 3,000 COVID-19 patients per day. Here are the facts…

Fact #1 : HKL COVID-19 Capacity Only Expanded By 151 Beds

On 14 November 2020, DG Health Dr. Noor Hisham Abdullah announced that COVID-19 patient capacity at HKL had just expanded by 151 beds.

Thanks to the contribution from NADMA (National Disaster Management Agency), the maternity block at HKL now has 358 beds for COVID-19 patients.

Fact #2 : HKL Only Has 831 Beds For COVID-19 Patients

As of 18 November 2020, HKL only has 831 beds for COVID-19 patients, after the recent expansion.

COVID-19 patients are quarantined at the hospital for 14 days. Therefore, HKL only has enough beds to accept an average of 59 new cases a day.

There is simply no way for HKL to accept 3,000 new COVID-19 patients a day, or even a month!

Fact #3 : Klang Valley Now Has 4,739 COVID-19 Beds

Due to the rapid increase in COVID-19 patients in the Klang Valley, KKM quickly ramped up the number of beds.

Sungai Buloh Hospital – increased to 630 beds
Kuala Lumpur Hospital – increased to 831 beds

Cheras Rehabilitation Hospital – converted into COVID-19 hybrid hospital with 230 beds

KKM Training Institute – 8 blocks reopened as Quarantine Centre with 2,400 beds

National Leprosy Control Centre – continues as Quarantine Centre with 648 beds

As of 18 November 2020, there are 4,739 COVID-19 beds in the Klang Valley, up from just 345 beds on 1 October 2020.

Fact #4 : KKM Not Preparing To Handle 3,000 Cases A Day In Klang Valley

The massive 14X increase in COVID-19 beds still does NOT allow KKM to handle 3,000 new COVID-19 patients a day for the whole Klang Valley.

There are only enough beds to handle an average of 338 new COVID-19 patients a day, on a continuous basis.

If KKM was really expecting to handle 3,000 new COVID-19 patients a day, they would have prepared some 42,000 beds.

It appears that they currently do not believe that the Klang Valley will exceed 4,700 active cases at any point in time.

COVID-19 : How To Keep Safe!

Here are a few simple steps to stay safe from COVID-19 :

Stay at home or shelter in place
Keep your hands clean with soap or hand sanitiser
Keep your home, office, vehicle, etc. clean
If you must go out, maintain a social distance of 6 feet (2 metres)
Wear a surgical mask and make sure you put it on and remove it properly!
Wash your food with water (and soap) after purchase and before preparation

Go Back To > Fact Checks | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Fact Check : Is There Pork In OLDTOWN Curry Mee?

Leave a reply

A video claiming that OLDTOWN White Coffee used pork in their curry mee has gone viral, leading to an official investigation by the authorities!

Find out what happened, and what the FACTS really are!

Viral Video : Pork In OLDTOWN Curry Mee?

In the video that went viral on Facebook and WhatsApp, a man accused OLDTOWN White Coffee of using pork in their curry mee.

He pokes at the red-coloured meat, and insists that they put in 5-6 slices of pork.

For our foreign readers who may not understand, pork is haram (forbidden) for Muslims.

KPDNHEP Investigates Claims Of Pork In OLDTOWN Curry Mee

The accusation is so serious in Malaysia, that the Ministry of Domestic Trade and Consumer Affairs (KPDNHEP) launched an investigation.

Five KPDNHEP Selangor officers inspected the OLDTOWN White Coffee restaurant in Subang Jaya on 13 November 2020, and took samples of the alleged pork used in their curry mee.

Note that this officer is holding a packet of BBQ Chicken, and pointing at its halal stamp.

The Truth : There Is NO Pork In OLDTOWN Curry Mee!

Here is the short verdict on the viral video. It’s a FALSE ACCUSATION, and there is NO PORK in OLDTOWN White Coffee’s curry mee.

This is yet another viral video that has been proven to be FALSE, and here are the reasons why…

Reason #1 : JAKIM + KPDNHEP Confirmed The Claim As FALSE

After investigating the claim, both JAKIM and KPDNHEP confirmed that the claim in the video is false.

The meat used was chicken, not pork, as alleged by the man in the video.

JAKIM also warned the public not to make baseless accusations, while OLDTOWN is consulting their lawyers to determine if they should take action against those who made the false accusation.

Reason #2 : Char Siu Is Not Always Pork

It is likely that the man in the video mistook the red-coloured meat as char siu – barbecued pork.

However, char siu versions of other meats like chicken, beef and venison are available for Muslims, and those who prefer not to eat pork.

After all, the char siu seasoning is made from honey, five-spice powder, red fermented bean curd, dark soy sauce, hoisin sauce and red food colouring, and can be applied to most meats.

In fact, OLDTOWN White Coffee uses chicken char siu in their curry mee, which is clearly visible in their product shot :

Reason #3 : OLDTOWN White Coffee Is Halal-Certified

OLDTOWN White Coffee is a chain of halal-certified restaurants. That means they have to abide by these rules :

Equipment used shall be free from najs, does not contain any hazardous materials and results in side effects to the products produced;
Appliances / brushes from animal hair are not allowed;
The arrangement of equipments and goods in the factory shall be neat, tidy and safe;
Workers are not allowed to live in the premise compound. If it is necessary, living quarters for the workers shall be:
a. having separate entrance to the premise compound;
b. no direct passage way from the worker’s living quarters to the premise compound; and
c. there is a control mechanism on the movement in and out of workers.
Non-halal food/ beverages are not allowed to be brought into the premise compound;
The premise shall have an effective control system from premises that process/ prepare non-halal materials;
All central kitchens and outlets for chain restaurants/ franchise/ food court shall apply for halal certification; and
Liquor and materials sourced from liquor is strictly prohibited to be in the halal kitchen and hotel including the storage area.

While it is not necessary for Muslims to eat only from halal-certified restaurants, a valid Halal certificate means they undergo periodic inspections to ensure they follow the rules.

Reason #4 : Chicken Is Much CHEAPER Than Pork

One of our reader, Johari Jeffrey, points out that chicken is much cheaper than pork.

So it wouldn’t make sense for any business to substitute chicken for a more expensive meat like pork.

Go Back To > Fact Check | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

RM399 Laguna Redang 3D2N Holiday : Bait & Switch Scam?

Leave a reply

The Laguna Redang Island Resort is claiming that the recent RM399 offer for a 3D2N holiday at their resort is a scam!

Umance, who sold it to over 9000 people, insists it is not a scam, and is now offering a replacement deal instead.

Find out what is going on with this dispute about the RM399 holiday package between Laguna Redang Island Resort and Umance!

RM399 Laguna Redang 3D2N Holiday : A Umance Offer

Umance is an entrepreneur who made his name selling seafood online, but appears to be branching out into the hospitality business.

For Singles Day on 11/11, he offered a 3D2N holiday at the Laguna Redang Island Resort for only RM399 (~US$99), with 7 meals included!

Laguna Redang Island Resort : Umance Offer Is A Scam!

After Umance sold his RM399 holiday package to over 9000 customers, Laguna Redang Island Resort denounced him as a fraudster.

Umance has disputed this. Here is a rough timeline of what happened.

11 November @ 1:57 PM

Laguna Redang Island Resort issued a terse announcement that they do not endorse, and neither are they participating, in any third-party 11/11 event or Facebook live event.

It has come to our attention that there are companies falsely advertising for our package, we wish to clarify that Laguna Redang Island Resort do not endorse nor participate in any third party 11.11 event or Facebook live event.

11 November @ 6:31 PM

In a second announcement, Laguna Redang Island Resort did not authorise the deal, or consented to it.

Dear Valued Guest(s),

It has recently come to our attention and knowledge that there has been a deal circulating in Facebook in relation to the stays package(s) by promoting and/or selling with conditions of non-expiry permanent tickets, waiver of surcharges, under name of Laguna Redang Island Resort.

Kindly be informed that Laguna Redang Island Resort has never come to consensus in approval, authorized and/or consented to such deal or transaction.

We reserve all our rights. Any inconvenience caused is utterly regretted.

Best Regards,

Laguna Redang Island Resort

11 November

This screenshot of a bank transfer of RM 100,000 from Ricksman MS Sdn Bhd (Umance’s company) to Laguna Redang Travel was shared online, as evidence that Umance had indeed booked those rooms.

12 November @ 11:10 PM

Laguna Redang Island Resort confirmed that they received RM 100,000 on 11 November 2020.

However, they insisted that they never agreed to the deal, and asked the bank to reject and return the sum.

They also insisted that Umance was a fraudster impersonating as an agent of Laguna Redang Island Resort, and asked those who purchased it to lodge a police report.

LAGUNA REDANG ISLAND RESORT (“LAGUNA”) would like to alert the public of fraudsters pretending to be agents of LAGUNA in order to defraud the holiday makers of their money. These fraudsters will defraud the public online or through social media and impersonate as agent of LAGUNA with “attractive packages” which are obviously NOT offered by LAGUNA.

Please note that LAGUNA has no connection with such deceptive practices, and does not, under any circumstances, offered such “attractive packages” nor request anyone to transfer funds to bank accounts that are not under LAGUNA’s name.

On the recent incident circulating in Facebook in relation to an “attractive packages” offered, LAGUNA would like to alert the public that LAGUNA has no connection with such “attractive packages” nor has offered and/or authorized and/or consented to such “attractive packages”. An unauthorized sum of RM100,000.00 was banked into

LAGUNA’s bank account on 11 November 2020 without LAGUNA’s knowledge and authorization and LAGUNA had on 12 November 2020 instructed the bank to reject the receipt of the said sum of RM100,000.00 and requested the bank to remit the said sum of RM100,000.00 into the sender’s account.

For those who have conducted transaction with the suspected fraudsters, please report the matter to the police immediately as LAGUNA has lodged a police report on 11 November 2020 to protect our interest and to prevent further fraud.

Umance Replaces Laguna Redang with Tanjung Rhu Langkawi!

At around 5:30 PM on 14 November 2020, Umance posted a video, in which he reiterated that it was not a scam.

However, due to technical issues (likely Laguna Redang refusing his booking), he will fully refund all purchases, or replace it with a 3D2N holiday in the Tanjung Rhu Resort in Langkawi.

In a second video, he shared that the Tanjung Rhu 3D2N holiday package will be managed by Fantastic Tour Services Shd. Bhd. with these features :

Tanjung Rhu Resort room on a twin-sharing basis
includes 1 day Langkawi road tour
includes 3 meals x 2 days
no expiry date + ability to change name or date
free luggage bag with every 2 tickets

He also offered this Tanjung Rhu 3D2N holiday package to those who missed the earlier offer, at RM399 per person or RM798 per room.

Laguna Redang To Tanjung Rhu : Bait & Switch Scam?

While the Tanjung Rhu Resort offer seems like a great deal, sharp-eyed netizens pointed out that Fantastic Tour itself is offering a much better deal at only RM244 per person!

You would actually save RM355 (39%) per room if you purchase the Tanjung Rhu deal directly from Fantastic Tour Langkawi themselves, albeit without free meals and different freebies.

This makes the whole RM399 Laguna Redang holiday package look suspiciously like a bait-and-switch scam.

In such scams, customers are “baited” with an incredibly good offer, but later they will discover that what they purchased was no longer available.

That’s when the “switch” happens – you are persuaded to accept a cheaper replacement instead of a refund, or upgrade to a more expensive alternative.

While we cannot be 100% sure it is a bait-and-switch, it is interesting how fast Umance came up with the Tanjung Rhu replacement package.

Heck, he was actually in Langkawi today to record his Facebook Live video with his team, and both reps from Tanjung Rhu Resort and Fantastic Tour!

One thing’s for sure – Umance is a businessman, and businessmen don’t go into the business to lose money… Caveat emptor! Buyers beware!

Go Back To > Travel | Business | Fact Check | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!

Lazada RedMart Data Breach : What You Need To Know!

Leave a reply

Lazada just admitted that a data breach involving their RedMart customer database that could affect some 1.1 million customers!

Find out what happened, and what it could mean for Lazada and RedMart customers!

Lazada RedMart : What Is It?

RedMart is an online grocery platform in Singapore that was founded in August 2011.

Lazada acquired RedMart in November 2016, and started to integrate it into their platform in March 2019.

This March 2019 date is important, because that was when the RedMart database was last updated.

Lazada RedMart Data Breach : What Happened?

The Lazada RedMart database was spotted for same in an online forum, amongst many other databases stolen from other e-commerce websites.

In this screenshot, you can see that it claims to have details on 1.1 million Lazada RedMart customers :

Email address
Password
Mailing address
Name
Phone number
Partial credit card information

Picture Credit : CNA

In a statement posted on 30 October 2020, Lazada confirmed the data breach involving their RedMart database.

They assert that only the old RedMart database that was “18 months out of date” when it was last updated in March 2019.

Singapore, 30 October 2020 – Lazada places great importance on protecting your personal information, and we value the trust you have placed with us. On 29 October 2020, as part of our proactive monitoring, our cybersecurity team discovered a data security incident in Singapore, involving a RedMart-only database hosted on a third-party service provider. The customer data hosted on this database is more than 18 months out of date as it was last updated in March 2019.

The customer information that was illegally accessed include the names, phone numbers, emails, addresses, encrypted passwords and partial credit card numbers of RedMart customers. We have taken immediate action to block unauthorised access to the database. This data was used on the previous RedMart app and website, which are no longer in use. Lazada customer data in Southeast Asia is not affected by this incident.

Protecting the data and privacy of our users is of utmost importance to us. Apart from reviewing and fortifying our security infrastructure, we are working very closely with the relevant authorities on this incident and remain committed to providing all necessary support to our users.

We want to be transparent about this incident with all of our customers and reassure you that we are taking it seriously.

They also set their platform to log out all Lazada users, and require them to register a new password.

They are also warning their users to be on the alert for spam mails requesting personal information.

Lazada RedMart Data Breach : What’s The Implication?

A Data Breach Is A Data Breach Is A Data Breach

Lazada may claim that the data and privacy of their users are of the utmost importance, but the data breach says otherwise.

They left a database they no longer used since March 2019 on a third-party service provider, and accessible online all this time.

Any half-decent cybersecurity specialist would have told them to take the database offline, unless it was essential to the operation of the website.

Closing The Barn Door After The Horses Have Bolted

Lazada immediately blocked unauthorised access to their RedMart database, but that’s like closing the barn door after the horses have bolted.

Once the data was stolen, all it does is prevent other attackers from stealing the data for themselves.

Lazada Migrated RedMart Users In March 2016

It seems a little disingenuous for Lazada to announce that the data was used in “the previous RedMart app and website, which are no longer in use“.

They appear to have migrated RedMart users to Lazada on 15 March 2016 using the same data that was just stolen.

Unless RedMart users changed their passwords, addresses, phone numbers, email addresses or credit card details AFTER they were migrated to the Lazada platform, they remain exposed by the data breach.

The Data Isn’t Necessarily Outdated

Most of us don’t change our logins and passwords that often. And we often reuse the same login and password combination for different websites.

So it is scant assurance that their RedMart database was last updated in March 2019, even if we take their word that it was more than 18 months out of date.

This data breach exposes all affected RedMart users to the possibility of their other accounts being breached as well.

Only Ex-RedMart Users Affected

The only saving grace we can see here is that it looks like only former RedMart users are affected by this data breach.

That means Lazada users who never registered or used the RedMart app or website are not affected.

Lazada RedMart Data Breach : What Can You Do?

If you ever registered for, or used, RedMart before their migration to the Lazada platform in March 2016, we highly recommend that you :

change your Lazada password
change the password of accounts that use the same password as your Lazada / RedMart account
do NOT click on links in emails warning you about this data breach and asking you to change your password
do NOT respond to calls or messages warning you about this data breach
do NOT respond to requests for personal information

Go Back To > Cybersecurity | Business | Home

Support Tech ARP!

If you like our work, you can help support us by visiting our sponsors, participating in the Tech ARP Forums, or even donating to our fund. Any help you can render is greatly appreciated!