The Malaysian Communications and Multimedia Commission (MCMC) and the Royal Malaysian Police are among two agencies being targeted by Hacking Team to peddle their citizen-spying software.

This is according to additional documents scrutinised by Malaysiakini from the 400GB of leaked data that were released to the public after Milan-based IT company Hacking Team was hacked on Tuesday.

Preliminary information from netizens, based on the treasure trove of data, showed the Malaysian Military Intelligence (MI), the Prime Minister's Office (PMO) and the Malaysian Anti-Corruption Commission (MACC) to be among Hacking Team's clients.

Malaysiakini , which went through part of the leaked data, located Hacking Team's latest client list, which was last updated on June 3 this year.

Hacking Team's client list lists MCMC and the police force as "opportunities" in an apparent indication that it was attempting to secure additional deals in Malaysia.

The company even forecasts that it can secure a €380,000 (RM1.6 million) deal with the MCMC by the second quarter of this year and another €550,000 (RM2.31 million) deal with the Commercial Crime Division of the Malaysian police by the third quarter of this year.

It is not clear if any of these deals has already been inked.

This is on top of €1.86 million (RM7.83 million) in deals and maintenance Hacking Team has gained as revenue from existing clients in Malaysia.

The documents showed MACC as the biggest payer to Hacking Team, followed by MI and PMO.

The MACC has paid €789,123 (RM3.32 million) to Hacking Team, including maintenance for the year 2016.

This is despite initial reports that MACC's software licence had lapsed in 2014. It is unclear if the report is based on the most up-to-date documents.

MI also paid €552,000 (RM2.32 million) while the PMO paid €520,000 (RM2.19 million) to Hacking Team.

Unconstitutional activities

The spyware sold by Hacking Team is a trojan which, once activated by opening the file, can track, eavesdrop and download information from the victim's computer.

Reporters Without Borders in its 2013 report named Hacking Team as one of the "corporate enemies of the Internet" for selling spy tools to repressive regimes.

Sinar Project, an NGO advocating for government transparency, has described Malaysia's purchase and use of the Hacking Team software as unconstitutional.

"There must be a Public Accounts Committee inquiry on this, and the findings made public on possible unconstitutional government actions,” Sinar Project co-founder Khairil Yusof was quoted as saying by Channel News Asia .

On Tuesday, unidentified hackers not only stole Hacking Team's data but also hijacked the company's Twitter account and changed its name to "Hacked Team".

They also posted up the company's 400GB of data with a message: "Since we have nothing to hide, we're publishing all our e-mails, files and source code".

Hacking Team had since regained its account and sought to dismiss the legitimacy of its stolen information that was uploaded online.

"The torrent contains a virus, it's best to let the authorities examine the evidence and stop seeding and spreading false info," Hacking Team's security engineer Christian Pozzi said in a Twitter posting.