{
  "Event": {
    "analysis": "1",
    "date": "2026-06-30",
    "extends_uuid": "",
    "info": "[Threat Intel] Cyber Attack Cripples Flexi Parking, Exposing Millions of User Records in Major Digital Outage",
    "protected": false,
    "publish_timestamp": "1785646022",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1785646013",
    "uuid": "88b25d3d-95d7-4b25-9a5d-cc14af5f114b",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:target-information=\"Malaysia\"",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"data-breach\"",
        "relationship_type": ""
      },
      {
        "colour": "#150050",
        "local": false,
        "name": "rectifyq:sub-category=\"report\"",
        "relationship_type": ""
      },
      {
        "colour": "#d92121",
        "local": false,
        "name": "rectifyq:target=\"targeted\"",
        "relationship_type": ""
      },
      {
        "colour": "#dd2e44",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#eb2300",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Defacement - T1491\"",
        "relationship_type": ""
      },
      {
        "colour": "#9feaf0",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Exploit Public-Facing Application - T1190\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:sector=\"Transport\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"Tria.ge\"",
        "relationship_type": ""
      },
      {
        "colour": "#3800d9",
        "local": false,
        "name": "rectifyq:action-taken=\"VT-comment\"",
        "relationship_type": ""
      },
      {
        "colour": "#3d00e9",
        "local": false,
        "name": "rectifyq:action-taken=\"telegram\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782856994",
        "to_ids": false,
        "type": "link",
        "uuid": "71244e28-b851-4f85-9293-47983632f73d",
        "value": "https://najoe.substack.com/p/cyber-attack-cripples-flexi-parking"
      },
      {
        "category": "Attribution",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857049",
        "to_ids": false,
        "type": "threat-actor",
        "uuid": "e0c044ea-4485-4d20-9f83-5c97514a71f3",
        "value": "MelayuSpiritual"
      },
      {
        "category": "Payload delivery",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857087",
        "to_ids": true,
        "type": "email-src",
        "uuid": "8715f28c-fe4c-4db9-9082-597f1c1d1687",
        "value": "melayuspiritual@proton.me"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857228",
        "to_ids": false,
        "type": "weakness",
        "uuid": "96832cd8-f243-40b3-8ada-9de497010a76",
        "value": "CWE-89"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857228",
        "to_ids": false,
        "type": "weakness",
        "uuid": "2ea6e7a1-7e31-4209-8f5b-60606e7b8c08",
        "value": "CWE-434"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857400",
        "to_ids": false,
        "type": "link",
        "uuid": "58ef48b3-f17c-4e63-8bee-da56a98be3a2",
        "value": "https://gotchaa-lab.com/blog/2026-06-30-flexi-parking-hack-preventable-bugs"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857400",
        "to_ids": false,
        "type": "link",
        "uuid": "b48f1947-080d-4db7-8585-5c97a63d240f",
        "value": "https://www.threads.com/@ajiemaism/post/DaJ2qeaE1T3/weh-apps-flexi-parking-kena-hacked-siapa-tu-yg-hacked-sila-lah-clearkan-saman/"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857400",
        "to_ids": false,
        "type": "link",
        "uuid": "9906f72e-259b-4bb1-99e6-550563c4fd6e",
        "value": "https://www.facebook.com/mbseremban/posts/pemaklumandimaklumman-bahawa-sistem-aplikasi-flexi-parking-sedang-mengalami-gang/1354650466762102/"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857400",
        "to_ids": false,
        "type": "link",
        "uuid": "96340fed-c8f8-4038-b9f6-c5e26843d6fa",
        "value": "https://www.therakyatpost.com/trpbm/viral/2026/06/30/aplikasi-flexi-parking-alami-gangguan-sistem-ramai-risau-jika-kena-saman"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857400",
        "to_ids": false,
        "type": "link",
        "uuid": "e73724c2-2b5b-4960-a8cb-0eceeb3eee72",
        "value": "https://www.threads.com/@zainulrusydi/post/DaMWfk_j-Td/ingatkan-aku-sorang-je-takboleh-nak-bayar-parking-dekat-tn-g-flexi-parking-jom/"
      },
      {
        "category": "Targeting data",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857406",
        "to_ids": false,
        "type": "target-org",
        "uuid": "2166fe69-edb4-463d-b47e-c24068c31154",
        "value": "LiTS Sdn Bhd."
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1782857485",
        "to_ids": false,
        "type": "link",
        "uuid": "4a06a962-718e-45d8-b822-74d1c847ecf0",
        "value": "https://x.com/FlexiParking/status/2071795007317750240?s=20"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1785645972",
        "to_ids": false,
        "type": "link",
        "uuid": "d48962cd-6f6b-4dff-a969-363acc24048c",
        "value": "https://www.malaymail.com/news/malaysia/2026/07/01/selangor-confirms-flexi-parking-cyberattack-suspends-parking-summons-during-outage/225930"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1785646013",
        "to_ids": false,
        "type": "link",
        "uuid": "79208526-1f33-4baf-9dbd-0332b27cbab2",
        "value": "https://www.thestar.com.my/metro/metro-news/2026/07/30/cyberattack-triggers-parking-platform-rebuild"
      }
    ]
  }
}