2026-03-10 PhishHuntMY] Touch ‘n Go / Malaysia Madani Scam QR Phishing analysis!

📃Title: PhishHuntMY] Touch ‘n Go / Malaysia Madani Scam QR Phishing analysis!
📅Date: 2026-03-10
🔗References:

• https://171k.my/2026/03/10/tngmadaniphishing/

🔖Rectifyq Taxonomies:

• relevancy: 🔴 Highly Relevant
• category: ⚔Threat
• sub-category: campaign-analysis
• target: broad-based
• MY-relevancy: relevant

🔖MISP Galaxies:

• target-information=“Malaysia”
• country=“azerbaijan”
• country=“indonesia”
• online-service=“b0c71d51-34fd-47b5-9eb4-dd406ffc607f”
• mitre-attack-pattern=[]

MISP event uuid: 5655b3a1-9dac-4fe3-9da0-4f637ca9206d

Indicator of Compromise (IoCs)

type,value,comment
url, https://bantuan-tng-inst.aply-gov.online/ap/, ''
domain, aply-gov.online, ''
hostname, bantuan-tng-inst.aply-gov.online, ''
url, https://bantuan-tng-inst.aply-gov.online/ap/gateway.php?path=/generate-session, 'Admin Panel'
url, https://bantuan-tng-inst.aply-gov.online/ap/setting.php, 'Config File'

Full IOCs available in Rectifyq’s MISP