2026-05-04 Fake PAIP Berhad Site Stealing Pahang Customers' Data and Water Bill Payments

📃Title: Fake PAIP Berhad Site Stealing Pahang Customers’ Data and Water Bill Payments
📅Date: 2026-05-04
🔗References:

• https://penipu.my/blog/fake-paip-berhad-site-stealing-pahang-customers-data-and-water-bill-payments
• https://www.facebook.com/PAIPBerhad/posts/awas-portal-bayaran-palsupaip-mengambil-maklum-berkenaan-kewujudan-portal-bayara/1497313678848328/
• https://urlscan.io/result/019e8bdc-6540-70aa-9cd9-1a43b7c7af7d/

🔖Rectifyq Taxonomies:

• relevancy: 🔴 Highly Relevant
• category: ⚔Threat
• sub-category: campaign-analysis
• target: broad-based
• MY-relevancy: relevant

🔖MISP Galaxies:

• financial-fraud=“Fake Website”
• financial-fraud=“Fund Transfer”
• target-information=“Malaysia”
• mitre-attack-pattern=[‘T1660’]

MISP event uuid: 0a0479bf-0a6f-4a68-a7c4-4f464b202596

Indicator of Compromise (IoCs)

type,value,comment
domain, onlinepaip.com, 'Impersontate PAIP, when customer paying bills, the acc details is personal acc.'
ip-dst, 162.0.239.2, ''

Full IOCs available in Rectifyq’s MISP