Rectifyq (@rectifyqx) header
Rectifyq (@rectifyqx) profile picture

Rectifyq

@rectifyqx

Threat I̶n̶t̶e̶l̶l̶i̶g̶e̶n̶c̶e̶ ̶ Information focusing on Malaysia 🇲🇾

rectifyq.com
Joined May 2024
  • Tweets1.2K
  • Following689
  • Followers863
254Media
Photo by Rectifyq (@rectifyqx)Photo by Rectifyq (@rectifyqx)Photo by Rectifyq (@rectifyqx)Photo by Rectifyq (@rectifyqx)Photo by Rectifyq (@rectifyqx)Photo by Rectifyq (@rectifyqx)Photo by Rectifyq (@rectifyqx)Photo by Rectifyq (@rectifyqx)Photo by Rectifyq (@rectifyqx)Photo by Rectifyq (@rectifyqx)
Rectifyq retweeted
yed (@frdfzi) profile picture
yed@frdfziNov 6
haha mulut nan masin
Adnan (xanda) Mohd Shukor (@xanda) profile pictureAdnan (xanda) Mohd Shukor@xanda8 Dec 2023
It's December, the month of the Malaysia data breach
2
7
37
1,568
You know things are getting serious when MyCERT rises from the dead to start issuing updates again. Their last post was in 2019. Let that sink in.
Image from kzn.eth - (@overflow_kaizen)
41
1
114
3,638
Rectifyq retweeted
senn (@sennnator) profile picture
senn@sennnatorNov 7
Hello Malaysians, live cyber threat maps are not accurate representations of global cyber warfare instead, they are high-level visualizations designed more for marketing, public awareness, and general trends than forensic analysis.
24
3
105
2,257
Rectifyq retweeted
MyCERT (@mycert) profile picture
MyCERT@mycertNov 5
MyCERT Advisory - Fake "BNM Mobile Security" Android App Relays Bank Cards via NFC in a Banking Trojan mycert.org.my/portal/advisor…
1
59
1
99
4,714
Rectifyq retweeted
yed (@frdfzi) profile picture
yed@frdfziNov 2
Ref: amirulcyber.com/2026/11/02/m… notes.netbytesec.com/2026/10…
Malaysia LHDN Tax Audit Phishing Campaign – Silver Fox (Oct 2026)

Malaysia LHDN Tax Audit Phishing Campaign – Silver Fox (Oct 2026)

Fake LHDN tax-audit wave, 26 October 2026. No credential form, one download button, ZIPs sideloading signed Windows binaries. 29 of 32 indicators unpublished; probable Silver Fox. IOCs and screensh...

amirulcyber.com
1
10
19
1,179
Malaysia Airlines confirms customer data may be affected in the Amadeus breach. malaysiaairlines.com/hq/en/m… Window : customer info processed through Amadeus between Aug 2023 and Sep 2026. MAS says its own systems weren't compromised and no evidence financial data was accessed. No numbers given yet. Other airlines hit : JAL (~92k), ANA (~37.8k), Cathay (~53k bookings), Jin Air, Korean Air, Asiana, Star Flyer, Condor. Kalau you fly MH, watch out for "booking issue" emails and calls. Scammers love real PNRs. #InfoSec #CyberSecurity #Malaysia
Cybersecurity Incident Update | Malaysia Airlines

Cybersecurity Incident Update | Malaysia Airlines

malaysiaairlines.com
40
5
90
7,223
❗️ Pakistan raided a suspected scam call centre in Rawalpindi and detained 130 Malaysians. Callers allegedly posed as bank staff, then as uniformed Malaysian police on video calls, to scare victims into paying via Touch 'n Go eWallet. The alleged boss ran it from Cambodia.
Image from International Cyber Digest (@IntCyberDigest)
Image from International Cyber Digest (@IntCyberDigest)
15
153
8
838
42,942
Image from ܛܔܔܔܛܔܛܔܛ (@skocherhan)
Szabolcs Schmidt (@smica83) profile pictureSzabolcs Schmidt
@smica83Oct 29
'Corporate Tax_1255.rar' seen from Malaysia @abuse_ch c22c8103fc6faa15ac19c329ea67afed993b7cdb6772332328f410d05b72398a bazaar.abuse.ch/sample/c22c8… FUD C2: 186.241.116(.) 38
MalwareBazaar - Corporate Tax_1255.rar

MalwareBazaar - Corporate Tax_1255.rar

Threat intel on Corporate Tax_1255.rar (MD5 9466e1aacaf206fbde25537e6a450c00)

bazaar.abuse.ch
4
9
321
Rectifyq retweeted
MyCERT (@mycert) profile picture
MyCERT@mycertOct 29
MyCERT Advisory - Fake Financial Documents Distributed via WhatsApp Deliver a Windows Trojan. mycert.org.my/portal/advisor…
36
2
39
1,943
Rectifyq retweeted
ΔValk (@retrieveNothing) profile picture
ΔValk@retrieveNothingOct 29
Replying to @Heiy0AstraeaX @dedsecx01
Spreading like wildfire. A file that executes but require some degree of phising. Technical explanation: research.pelagos-intel.com/s…

SilverFox in the Desktop — Pelagos Intel

SilverFox in the Desktop

research.pelagos-intel.com
2
19
1
69
7,234
Rectifyq retweeted
invalid (@dedsecx01) profile picture
invalid@dedsecx01Oct 29
They are very active in Malaysia right now. Take note everyone
Image from invalid (@dedsecx01)
11
398
26
986
80,079
> be Malaysian company > get invoice > invoice_name.iso > 3 files > "open.exe", libcef.dll, wuaueng_ui.ime.png > open.exe uses libcef.dll > Chromium Embedded Framework > hmmmm > open.exe just does libcef.dll!cef_execute_process > isnt even called correctly > hmmmm > look inside libcef.dll > not the same libcef.dll > libdef.dll!cef_execute_process reads png file > extracts shellcode out of it > low detection on VirusTotal > no notes > first seen yesterday i guess we bonking this now
Image from vx-underground (@vxunderground)
41
145
13
1,817
49,530
I think Malaysian energy industry and water supply sector need to have strong cybersec specialist now. Immediately. This is not 2010 where we patch post-event era.
8
52
1
217
7,150
Image from ܛܔܔܔܛܔܛܔܛ (@skocherhan)
Szabolcs Schmidt (@smica83) profile pictureSzabolcs Schmidt
@smica83Oct 28
'Cukai Syarikat Rsit-003.iso' seen from Malaysia @abuse_ch c3424b5b968d07d979e9b3cb46cc7c42718bd4e96fbc8e77e051264d67faf625 bazaar.abuse.ch/sample/c3424… FUD IP: 81.2.24(.)0
MalwareBazaar - Cukai Syarikat Rsit-003.iso (ValleyRAT)

MalwareBazaar - Cukai Syarikat Rsit-003.iso (ValleyRAT)

Cukai Syarikat Rsit-003.iso has been detected as ValleyRAT by MalwareBazaar

bazaar.abuse.ch
3
10
458
Rectifyq retweeted
FatzQatz (@FatzQatz) profile picture
FatzQatz@FatzQatzOct 26
Silver Fox phishing email targeted Malaysia. Domain IOCs homescapestaging[.]com segertribute[.]com musicmaxentertain[.]com celialinde[.]com samoliveira[.]com thinnected[.]com brendaeverson[.]com ccaselma[.]com ecomteck[.]com shengshunxin[.]com mohammadinuts[.]com cc @salmanvsf
Image from FatzQatz (@FatzQatz)
4
64
2
139
7,700
Rectifyq retweeted
yed (@frdfzi) profile picture
yed@frdfziOct 22
Replying to @RempahRz
NC4: nc4.gov.my/alertAdvisory-det…
6
11
532
Rectifyq retweeted
MyCERT (@mycert) profile picture
MyCERT@mycertOct 22
MA-1484.102026: MyCERT Advisory - Critical PHP2Shell Vulnerabilities in PHP Allowing Unauthenticated Remote Code Execution #php2shell mycert.org.my/portal/details…
23
7
42
5,681
Rectifyq retweeted
Rempah (@RempahRz) profile picture
Rempah@RempahRzOct 15
1st blog post since my unemployment arc started. I have a chance to test BoxCompute by @farhanhelmycode and found a cross-tenant security vulnerability issue on it. Reported and fixed swiftly by the developer. I'm currently open for any freelance job. rz.my/2026/10/cross-tenant-s…

Cross-Tenant Session Kill in BoxCompute Sandboxes

BoxCompute runs tenant sandboxes that talk to the host over virtio sockets. A guest that shares the virtualization host with a victim can forge vsock packets that get delivered into the victim’s live...

rz.my
10
40
3
114
5,741
Rectifyq retweeted
Foxy (@3ch0W15p) profile picture
Foxy@3ch0W15pOct 13
beginner-friendly, hands-on session. 📅 Wednesday, 14 October 2026 ⏰ 6:00 PM – 9:00 PM 📍 MSU, M0201 💻 Bring your laptop and your curiosity! 🔗 Join them here: krackeddevs.com/guilds/msu-z…
Image from Foxy (@3ch0W15p)
2
1
15
564
Rectifyq retweeted
rehackxyz (@rehackxyz) profile picture
rehackxyz@rehackxyzOct 6
RE:BOOT Community Partners announcement linkedin.com/posts/rehack-xy… @_rectifyq
Image from rehackxyz (@rehackxyz)
4
4
249
Load more