Following a succession of high-profile cyber attacks and financial frauds that have cost Sri Lanka millions of dollars, the Sri Lanka Computer Emergency Readiness Team (SLCERT) has unveiled a sophisticated Malware Analysis and Threat Hunting (MATH) Laboratory aimed at identifying cyber threats before they inflict damage.
The facility signals a major transformation in Sri Lanka’s cybersecurity strategy—from reacting to cyber incidents after they occur to proactively searching for malicious activity across Government networks.
The move follows growing concern over several significant cyber security breaches, most notably the reported US$ 2.5 million Treasury cyber fraud, where cybercriminals allegedly manipulated digital financial systems to divert public funds.
Security analysts describe such incidents as part of an evolving global trend in which cybercriminal groups employ increasingly sophisticated malware, credential theft, phishing campaigns and business email compromise techniques to infiltrate Government institutions.
Sri Lanka has not been immune.
During recent years, cyber-attacks have disrupted public services, compromised official websites, targeted banking systems and attempted to exploit weaknesses in Government digital infrastructure.
SLCERT has repeatedly warned that phishing emails remain one of the biggest threats facing public institutions, often providing the initial entry point for ransomware and other malicious software.
The newly established MATH Lab seeks to close these security gaps.
Using advanced malware analysis capabilities, cybersecurity specialists will dissect malicious software to understand its behaviour, origin and methods of attack.
The laboratory will also undertake continuous threat hunting, actively searching Government networks for indicators of compromise that conventional security software may fail to detect.
Another critical function will be External Attack Surface Monitoring, enabling cybersecurity teams to identify exposed Government servers, insecure websites, vulnerable applications and configuration weaknesses that hackers commonly exploit.
The intelligence gathered will be shared with more than 250 Government organisations, including ministries, hospitals, universities and energy providers, allowing authorities to respond quickly to emerging cyber threats.
The laboratory also enhances the capabilities of Sri Lanka’s National Cyber Security Operations Centre, creating a more integrated national cyber defence framework.
Cyber security specialists say the investment reflects the reality that modern cybercrime has evolved into a highly organized transnational industry worth billions of dollars annually.
As Sri Lanka expands digital public services, online financial transactions and interconnected Government platforms, cyber resilience has become central to safeguarding national economic security.
Officials believe the proactive capabilities of the MATH Lab will significantly reduce the likelihood of future cyber heists, strengthen institutional resilience and restore public confidence following a series of costly digital security failures.
With cyber-attacks becoming increasingly sophisticated, the success of Sri Lanka’s digital future may depend not only on technological innovation but also on its ability to stay one step ahead of the criminals operating in cyberspace.