Threat I̶n̶t̶e̶l̶l̶i̶g̶e̶n̶c̶e̶ ̶ Information focusing on Malaysia 🇲🇾
Joined May 2024
- Tweets1.2K
- Following688
- Followers860
- Likes4.2K
Rectifyq retweeted
Malaysia Airlines confirms customer data may be affected in the Amadeus breach.
malaysiaairlines.com/hq/en/m…
Window : customer info processed through Amadeus between Aug 2023 and Sep 2026. MAS says its own systems weren't compromised and no evidence financial data was accessed. No numbers given yet.
Other airlines hit : JAL (~92k), ANA (~37.8k), Cathay (~53k bookings), Jin Air, Korean Air, Asiana, Star Flyer, Condor.
Kalau you fly MH, watch out for "booking issue" emails and calls. Scammers love real PNRs.
#InfoSec #CyberSecurity #Malaysia
Rectifyq retweeted
❗️ Pakistan raided a suspected scam call centre in Rawalpindi and detained 130 Malaysians.
Callers allegedly posed as bank staff, then as uniformed Malaysian police on video calls, to scare victims into paying via Touch 'n Go eWallet.
The alleged boss ran it from Cambodia.
Rectifyq retweeted
'Corporate Tax_1255.rar' seen from Malaysia @abuse_ch
c22c8103fc6faa15ac19c329ea67afed993b7cdb6772332328f410d05b72398a
bazaar.abuse.ch/sample/c22c8…
FUD C2: 186.241.116(.) 38
Rectifyq retweeted
MyCERT Advisory - Fake Financial Documents Distributed via WhatsApp Deliver a Windows Trojan.
mycert.org.my/portal/advisor…
Rectifyq retweeted
Spreading like wildfire. A file that executes but require some degree of phising. Technical explanation: research.pelagos-intel.com/s…
Rectifyq retweeted
> be Malaysian company
> get invoice
> invoice_name.iso
> 3 files
> "open.exe", libcef.dll, wuaueng_ui.ime.png
> open.exe uses libcef.dll
> Chromium Embedded Framework
> hmmmm
> open.exe just does libcef.dll!cef_execute_process
> isnt even called correctly
> hmmmm
> look inside libcef.dll
> not the same libcef.dll
> libdef.dll!cef_execute_process reads png file
> extracts shellcode out of it
> low detection on VirusTotal
> no notes
> first seen yesterday
i guess we bonking this now
Rectifyq retweeted
I think Malaysian energy industry and water supply sector need to have strong cybersec specialist now.
Immediately.
This is not 2010 where we patch post-event era.
Rectifyq retweeted
'Cukai Syarikat Rsit-003.iso' seen from Malaysia @abuse_ch
c3424b5b968d07d979e9b3cb46cc7c42718bd4e96fbc8e77e051264d67faf625
bazaar.abuse.ch/sample/c3424…
FUD IP: 81.2.24(.)0
Rectifyq retweeted
Silver Fox phishing email targeted Malaysia.
Domain IOCs
homescapestaging[.]com
segertribute[.]com
musicmaxentertain[.]com
celialinde[.]com
samoliveira[.]com
thinnected[.]com
brendaeverson[.]com
ccaselma[.]com
ecomteck[.]com
shengshunxin[.]com
mohammadinuts[.]com
cc @salmanvsf
Rectifyq retweeted
MA-1484.102026: MyCERT Advisory - Critical PHP2Shell Vulnerabilities in PHP Allowing Unauthenticated Remote Code Execution
#php2shell
mycert.org.my/portal/details…
Rectifyq retweeted
1st blog post since my unemployment arc started. I have a chance to test BoxCompute by @farhanhelmycode and found a cross-tenant security vulnerability issue on it. Reported and fixed swiftly by the developer.
I'm currently open for any freelance job.
rz.my/2026/10/cross-tenant-s…
Btw, 2 features bit hidden but may be useful.
Hunting grounds provide quick links to search recent phish across src like threads, x ,fb, google search, urlscan or any site. U can have a custom for urself in "mine" tab.
Prjk Heimdall will be prsented at Minicon by 1 of the speaker
