Choose the situation that most closely matches what happened to you. Each page lists the signs, the steps to take right away, what to avoid, and how to report it to KUTIM-CSIRT.
- I entered my password on a fake website. You clicked a link and entered a password, OTP, or card details on a fake page.
- Someone else has taken over my account. Your official email, social media, WhatsApp, or app account is being used by someone else or can no longer be opened.
- My OPD website has been defaced or injected with online gambling content. The website's appearance has been replaced by someone else, or Google shows online gambling content for your site.
- My files are locked and someone is demanding a ransom. Files cannot be opened, their extensions have changed, and a ransom note has appeared.
- My device is infected with malware. Your computer or phone is slow, full of pop-ups, flagged by antivirus, or behaving strangely.
- My data or my agency's data has been leaked. Personal or agency data is being shared, sold, or used by others without permission.
- I was scammed via WhatsApp, phone call, or SMS. The scammer claimed to be from a bank, customer service, or a courier, and you have already transferred money or installed an APK they sent.
If in doubt, report straight away through /lapor. Reports may be anonymous; keep the ticket number and token shown to you so you can follow up at /lacak-tiket. Email to csirt@kutaitimurkab.go.id is received 24 hours a day, and the phone line (0549) 2021207 is staffed Monday–Friday, 08.00–16.00 WITA. Response deadlines for each severity level are listed in our service standards.
Technical guides
- Handling defacement and online gambling injections, for website administrators and developers.
- Verifying the PGP key and sending encrypted email to KUTIM-CSIRT.