Maldives Police issue cybersecurity alert over targeted phishing emails

The Maldives Police Service has warned government institutions and the public to remain vigilant after detecting a coordinated phishing campaign targeting state agencies through malicious emails.

Police said its Cyber Security Operations Center (CSOC) detected sophisticated emails crafted to appear as genuine correspondence from trusted government authorities.

According to police, the emails contain malicious links and files disguised as official invitations, documents and file-sharing links.

Clicking on such links or opening the attachments could allow attackers to obtain usernames, passwords and other sensitive information.

Police warned that compromised credentials could potentially be used to gain unauthorised access to government computer systems and networks.

Based on the tactics and tools identified so far, CSOC believes the incidents are part of a coordinated and targeted cyber campaign.

The Police Cyber Security Operations Center is currently monitoring the activity and working with relevant government agencies to share threat intelligence and block malicious websites and networks. Police said technical analysis and investigations into the incidents are also ongoing.

Authorities have urged users not to open links or attachments from unverified emails, even when the message appears to have been sent by a familiar person or government institution.

Police advised users to independently verify unusual or unexpected requests, including by contacting the purported sender by phone before taking any action.

Users have also been urged to enable multi-factor authentication, keep operating systems and applications updated, and report suspicious emails immediately to their organisation's IT or cybersecurity team.

Police said anyone who accidentally opens a suspicious link or file should immediately disconnect the affected device from the network and seek assistance from their IT team.

Authorities advised against attempting to resolve the issue independently, as prompt action could help prevent further compromise.

Police stressed that public awareness and vigilance remain crucial in protecting sensitive information and preventing phishing attacks.