Several publications have recently reported that Kaspersky Lab’s official Malaysian website, as well as its Malaysian online store, were attacked by a Turkish hacker known as "m0sted". According to the hacker’s own statement, the attack was conducted using an SQL-injection. The reports hinted at “big risks for end-users” that could be caused by the attack.

It should be stressed that both websites that were attacked are managed using third-party hosting. The sites have never been publicly accessible as they are still under construction.

Since the websites are still being developed, they haven’t yet been fully secured. Naturally appropriate security features will be implemented before the sites go live.

This situation can be compared to a thief breaking into an empty house that is still under construction and has not been yet properly secured. Breaking in is therefore an easy task, but in such cases there is nothing to steal or damage – the websites are not yet live and are not linked to other Kaspersky Lab corporate websites. It seems clear that the attacker’s only motive was to attract attention.

We therefore do not believe that this attack could harm users in any way. Additionally, it will not be possible to use this attack method once the websites have been officially launched.