The Maldives Police Service has warned government institutions and the public to remain on high alert after detecting what authorities describe as a coordinated phishing campaign targeting state agencies through malicious emails.
Police said its Cyber Security Operations Center (CSOC) identified sophisticated emails designed to appear as legitimate messages from trusted government authorities or known contacts.
The emails reportedly contain malicious links or files disguised as official invitations, documents and file-sharing links. Opening them could allow attackers to steal usernames, passwords and other sensitive information, potentially giving them unauthorized access to government computer systems and networks.
Based on the tactics and tools identified so far, CSOC believes the incidents are part of a coordinated and targeted cyber campaign.
Police said CSOC is monitoring the activity and working with relevant government agencies to exchange threat intelligence and block malicious websites and networks. Technical analysis and investigations are also underway.
Authorities have urged users not to open unverified links or attachments, even when an email appears to come from a familiar person or institution. Unusual requests should be independently verified, including through a phone call.
Police also advised users to enable multi-factor authentication, keep operating systems and applications updated, and immediately report suspicious emails to their IT or security teams.
Anyone who accidentally opens a suspicious link or file should disconnect the affected computer from the network and immediately seek assistance from their IT team rather than attempting to resolve the issue independently.
Police said public awareness and vigilance remain critical to preventing phishing attacks and protecting sensitive information.
