MARLANWG 2026 activity
Unattributed group. 3 reports in 2 countries: 1 confirmed, 2 claimed or disputed. Latest 6 Nov 2026.
Malaysia
Indonesia🎯 What sources say
- Malaysia: Defaced Bank Rakyat's third-party-managed website in November 2026 and claims internal access and sample data, which the bank has not confirmed. Focus Malaysia The Star
🚨 Reports
| Organisation | Country | Date | Sector | Type | Actor | What happened | Sources |
|---|---|---|---|---|---|---|---|
 ✅ ConfirmedBank RakyatKuala LumpurVia a vendorFull story | Malaysia | 6 Nov 2026 | Finance | Defacement | MARLANWG | Confirmed. Websites defaced; the bank blames a third-party-managed site and says deposits, data and banking services were unaffected. On 7 November Fahmi Fadzil said the bank blocked the affected server and no data theft had been found so far. Claimed. The actor claims internal access and a data sample, and no sample has been published. Screenshots shared on the night of 6 November show the same MARLANWG message and Session contact ID on both bankrakyat.com.my and the i-Rakyat online banking site, irakyat.com.my. | Malay Mail · Lowyat · Screenshots on X (@Pelabur_Bijak) · Malay Mail✓ 8 Nov |
 ⚠️ ClaimedDirectorate General of Taxes (DJP) | Indonesia | 31 Oct 2026 | Government | Access for sale | MARLANWG | Claimed. A crime-forum seller offers a 0-day exploit and more than 10 million taxpayer records allegedly from DJP. No DJP response found. | VECERT✓ 7 Nov |
 ⚠️ ClaimedRoyal Malaysian Customs (JKDM)Putrajaya | Malaysia | 15 Oct 2026 | Government | Access for sale | MARLANWG | Claimed. Access to a webshell and production databases offered for US$1,500 on a crime forum. No statement from Customs. | VECERT✓ 7 Nov |
Leak-site listings are claims until the organisation or authorities confirm them. Methodology