Phishing & Cybersecurity Advisory
Cybersecurity is a shared responsibility.
Cardas Research & Consulting Sdn Bhd (“CRCG”) is committed to protecting the security of our employees, clients, mystery shoppers, suppliers, business partners and members of the public. Cybercriminals continue to exploit trusted organizations through phishing emails, fake websites, social engineering, impersonation scams and fraudulent payment requests. This advisory provides practical guidance on recognizing and avoiding these threats.
What is Phishing?
Phishing is a cyberattack in which criminals impersonate a legitimate organisation or individual to obtain confidential information, passwords, banking details or money.
Phishing may occur through:
- SMS
- Telegram
- Phone calls
- Social media
- Fake websites
Payment Scams
Fraudsters frequently impersonate company executives or colleagues to request:
- Urgent fund transfers
- Cryptocurrency purchases
- Gift cards
- Vouchers
- Prepaid cards
- Gaming cards
Always verify financial requests independently before taking action.
Common Warning Signs
Be cautious if a communication:
- Creates unnecessary urgency
- Asks you to keep the matter confidential
- Requests passwords or OTPs
- Requests banking information
- Contains suspicious links or attachments
- Comes from an unfamiliar email address
- Asks you to ignore normal company procedures.
Protect Yourself
Always:
- Verify email addresses carefully
- Use strong unique passwords
- Enable Multi-Factor Authentication (MFA) whenever available
- Update your devices regularly
- Avoid clicking unknown links
- Verify website addresses before logging in
- Report suspicious communications immediately
Protecting Personal Information
Never disclose:
- Passwords
- OTPs
- Banking credentials
- NRIC or passport details
- Confidential company information
- Customer information
Unless you have verified the request through official channels.
If You Suspect a Scam
- Stop communicating immediately.
- Do not click links.
- Do not make payments.
- Save the evidence.
- Contact Cardas Research & Consulting Sdn Bhd using our published contact details.
Report the incident to your bank and the relevant authorities if financial information has been disclosed.
Our Commitment
Cardas Research & Consulting Sdn Bhd continually promotes cybersecurity awareness and encourages all stakeholders to remain vigilant against evolving cyber threats.
Together we can reduce the risk of phishing, fraud and cybercrime.
