Police have urged government institutions to be vigilant as cyber attacks are increasingly being carried out against government offices by sending malicious emails.

Police stated today that the service's Cyber Security Operations Center (CSOC) has observed fraudulent and dangerous emails being sent targeting government offices and institutions. Therefore, government institutions and the general public have been urged to pay special attention to this matter.

Police explained that these emails are designed to look like legitimate emails sent from trusted official institutions or familiar contacts. Attackers include malicious links and files disguised as official invitations, documents, or file-sharing links, police added.

Accessing such malicious links or opening files creates a high likelihood of hackers obtaining critical information such as usernames and passwords, police said. This paves the way for unauthorized access to institutional computer systems and networks, potentially compromising the systems, they added.

"Based on the tactics and tools used in these incidents, CSOC assesses that this is likely part of a targeted and orchestrated campaign. In response, the Cyber Security Operations Center of the Maldives Police Service is closely monitoring these activities. Working alongside relevant government authorities, steps are being taken to share protective guidance and block malicious websites and networks. Furthermore, investigation and technical analysis of this issue are currently underway," police stated.

Precautions to stay safe from cyber attacks:

  • Do not open unexpected links and attachments arriving via email unless verified as safe.
  • Even if an email appears to come from a known person or trusted institution, if it requests unusual actions, verify its authenticity via another channel (e.g., telephone).
  • Do not enter information such as usernames and passwords on pages opened by clicking links in emails.
  • Use Multi-Factor Authentication (MFA) for email and official accounts.
  • Always keep computer operating systems and applications updated.
  • If a suspicious email is received, promptly report it to the office's IT or security team.
  • If a suspicious file or link is opened, instead of attempting to resolve it independently, immediately disconnect the computer from the network and seek IT team assistance.

Police stated that public vigilance and awareness are the first lines of defense against such attacks. Paying attention to these safety measures is the most crucial step in defending against cyber attacks, they added.