Password stealer attacks targeting Malaysian businesses surged by 33% in 2025, according to new findings from cybersecurity firm Kaspersky. With 244,061 attacks detected last year, Malaysia ranks as the second most affected market in Southeast Asia, trailing only Vietnam. Across the region, over 1.5 million such attacks were recorded, marking an 18% increase from 2024.
These attacks involve malware designed to extract passwords and account information, often used to infiltrate business environments without detection. Kaspersky’s Managing Director for Asia Pacific, Adrian Hia, noted, “Password stealers remain one of the most effective tools in a cybercriminal’s arsenal because they target the front door of every organisation: user credentials.”
The threat is exacerbated by the common practice of storing sensitive information digitally. A recent survey by Kaspersky revealed that 61% of Malaysian respondents store sensitive data digitally, and 44% use simple passwords. The Philippines experienced the highest surge in attacks at 41%, followed by Malaysia, Singapore, Vietnam, and Indonesia. Thailand, however, saw a decrease of 21%.
To combat these threats, Kaspersky recommends the use of password managers, multi-factor authentication, and regular credential audits. The company also advises organisations to adopt advanced security platforms and keep software updated to minimise risks. As cyber threats evolve, aligning internal processes with the latest threat intelligence is crucial for maintaining security.
