Act of malicious intent not ruled out in KLIA disruption