Report ID: PHISH-2026-RAMADAN-001
Report Title: Telegram ATO Campaign - Bantuan Ramadhan 2026
Prepared By: Ahmad Nazif bin Azelan
LinkedIn: LinkedIn Profile
Date: 12 March 2026
Classification: TLP:WHITE - Safe for public sharing
Version: v1.0 - Initial Release
Detailed Comprehensive Report: Security Incident Report
During Ramadhan 2026, Malaysians received WhatsApp messages claiming they were eligible for government financial aid. The message included a link to check their "aid status."
The website was fake (bantuantngmalaysia18[.]blogspot[.]com). Clicking it and filling in the form handed scammers complete control of your Telegram account without you ever realizing it.
This report explains exactly how the scam worked, step by step, so you can recognize it and protect yourself and the people around you.
A WhatsApp broadcast was sent from a Indonesian phone number (+62) to Malaysian contacts. It looked like a legitimate government notification about Ramadhan aid.
Red flags that were missed: