8 digital OOH displays hacked in Malaysia with obscene content

The hacking of eight public LED screens in Kluang, Johor, has brought the security of connected digital displays in the spotlight. Obscene content was broadcast across several locations in the town during the hack.

According to The Star, Kluang district police chief assistant commissioner Bahrin Mohd Noh said police received a report on 30 October after a local man was alerted to the incident by his staff. The screens were reportedly compromised on 29 October, with the complainant contacting the supplier before cutting their power supply to stop the content from being displayed.

Police are investigating the case under Section 4(1) of the Computer Crimes Act 1997 and Section 292 of the Penal Code, which concerns obscene materials, The Star reported. 

Don’t miss: Waze reportedly rejects Malaysia governments data security allegations

The breach subsequently drew attention to the vulnerabilities of digital displays, which rely on connected systems to deliver content remotely.

According to reports by the New Straits Times, the hacking group Leakers claimed responsibility for the incident and said its activities were intended to expose security weaknesses rather than seek ransom payments.

The group reportedly claimed that vulnerabilities in software used to transmit content to LED displays had allowed it to gain access to affected systems. It also said its operations had reached several countries, including Egypt, Iraq, Brazil and China.

The claims have not independently established the precise method used to compromise MPK's screens. Investigations into the Kluang incident are ongoing.

Police have also urged the public not to speculate or circulate unverified information that could interfere with investigations.

While the incident involved public information displays rather than a confirmed commercial advertising campaign, it highlights a potential risk for brands and media owners operating digital out-of-home (DOOH) networks.

Unlike static billboards, digital screens allow operators to update creative assets remotely and display multiple advertisements or messages on a single piece of infrastructure. However, this flexibility also means that the systems controlling the displays need to be secured against unauthorised access.

The Malaysian Communications and Multimedia Commission (MCMC) introduced its Information and Network Security Guidelines for the communications and multimedia industry in December 2024. The framework aims to strengthen information and network security, improve resilience and help service providers manage cyber risks. MCMC said the guidelines were not mandatory at the time of their introduction.

As digital media networks become more integrated into public spaces, the Kluang incident serves as a reminder that content delivery and cybersecurity need to be considered together.

Related articles: 
OOH revenue climbs 6.5% as digital takes bigger share
Who’s behind these massive unbranded DOOH displays across KL?
Nike investigates alleged data breach following leak claims