@thisisfinx

Cybersec lifelong student | Blue Teamer | Dumbass (still am) Curator for Malaysian OSINT resource toolkit in startme and UNISHKA🇲🇾.

 Malaysia
jomqr.my/thisisfinx
Joined May 2021
  • Tweets694
  • Following1K
  • Followers215
149Media
Finally here is the second update for Malaysian OSINT resource startme page. Here is the inspiration for that: #malaysia #OSINT
finx@thisisfinx30 Jan 2023
I came across this chart and I think this can be good base to restructure the current Malaysian OSINT resource startme page🤔. Keep your eyes peeled on the startme page update somewhere on this week👍 #malaysia #OSINT
1
6
9
3,817
🇲🇾 🚨 MALAYSIA: ARMED FORCES PAYROLL SYSTEM ACCESS ALLEGEDLY OFFERED FOR SALE A threat actor on an underground forum is advertising alleged access to the payroll system of the Malaysian Armed Forces (Angkatan Tentera Malaysia). * Listing posted Oct 19, 2026, framed as an initial access sale * No record count or sample data was shown in the post * Buyers are directed to an off-forum channel for details The claim has not been independently verified. ⚠️ Analyst Note: Access to a military payroll system, if authentic, could expose personnel identities, bank details, salary data and unit structures, giving attackers material for targeted phishing, fraud and espionage against service members. Initial access listings are often exaggerated or resold. Unverified threat-actor claim, NOT confirmation of a breach of Malaysian Armed Forces systems. Source: this is for subscribers only. Subscribe: xitter.cf/DailyDarkWeb/creator-s… #DDW #DarkWeb #Malaysia #Military #InitialAccess #ThreatIntelligence
20
2
44
6,757
‼️🇲🇾 RANSOMWARE CLAIM — MALAYSIA’S LAND PUBLIC TRANSPORT AGENCY (APAD) The ransomware alliance CartelCorp × BLACKNET-00 claims to have breached and wiped digital systems and official email infrastructure belonging to Malaysia’s Land Public Transport Agency (APAD), under the Ministry of Transport. Allegedly Exposed Data: • Employee schedules and personal information, including MyKad numbers • Insurance documents and internal maintenance records • Confidential government correspondence • Administrative and competency-development records • Contracts and related documents involving major companies, including Toshiba ⚠️ Potential Impact: If verified, the incident could expose government personnel to identity theft, targeted phishing, and privacy risks, while system wiping could disrupt agency operations. Status: The alleged breach, data theft, system wiping, and claimed scope have not been independently verified. #Malaysia 🇲🇾 #CyberSecurity #Ransomware #DataBreach #APAD #CriticalInfrastructure #ThreatIntelligence #InfoSec
6
1
19
1,348
finx retweeted
theo@theopelesitOct 17
Do you know how to protect your username and real name? If not, you should take a look on this article. #Malaysia #OSINT substack.com/@rntmoc/note/p-…
1
1
26
finx retweeted
R4shSec@r4shsecOct 11
Usually when people hear of a “data breach” affecting an alleged organization — they seem to think that it only affects THAT ONE alleged organization. It’s completely wrong. There are still contracts and recruitment records that span far beyond one organization.
Mylon Intelligence@MylonIntelOct 11
🇲🇾🚨 MALAYSIA DATA BREACH ALERT On 21/8/2026, the Majin / Majinahanashi ransomware group added a Malaysian company, PCA Group Sdn. Bhd., to their ransomware blog, with 2.65 GB of alleged leaked data. Mylon Intelligence has done a full breach impact assessment.
1
1
2
102
🇲🇾🚨 MALAYSIA DATA BREACH ALERT On 21/8/2026, the Majin / Majinahanashi ransomware group added a Malaysian company, PCA Group Sdn. Bhd., to their ransomware blog, with 2.65 GB of alleged leaked data. Mylon Intelligence has done a full breach impact assessment.
1
2
1
6
822
1/5 🎣 PhishHunt Challenge is live! PhishHunt by Rectifyq is a gamified workbench for hunting phishing sites that target Malaysians. Not another URL analyzer: it tracks the hunt (find → validate → report → takedown) and scores you for it. phishhunt.rectifyq.com

PhishHunt — hunt the phishing that targets Malaysians

A gamified workbench for security practitioners: list, enrich, report and take down phishing sites. Leaderboard, stats and bounties.

phishhunt.rectifyq.com
1
21
48
1,650
Day 3 - CyberDSA. High quality convos between everyone whom come the booth and between booth committee. Worth it. Honestly🙌🏻. And yes, even buying the coin in this picture worth it😌 "You're a national asset", something to ponder for🤔
6
128
Day 2 - CyberDSA. Honestly today, it has been the most eventful day. With the amount of people and big players comes in, I am still reeeling after all that.
4
88
Day 1 - CyberDSA. This year. This year has always suprised me. And this is not exception. Tired but worth it. Let see how we fare tommorow.
5
158
- Go to old bookstores. - Feel the weight of the old book in your hands. - Preserve that book and its knowledge. - Pass that onto the next generation. - Keep the spirit of the book alive. Thank you @BSidesBelfast for giving me a keynote stage to convey this important message!
2
5
37
1,216
Outside of regular programming but PSA both for me and my followers: dontbeameatproxy.com/ (please don't paste AI reply blindly, take your time to tailor it to your stuff) #PSA #AI

don't be a meat proxy

Please don't copy-paste AI answers at people. Read it, understand it, check it, then say it in your own words.

dontbeameatproxy.com
3
97
finx retweeted
theo@theopelesitSep 14
Have you ever wondered how much information can be uncovered from just you real name? Check this real name OSINT workflow👇🏻 #malaysia #OSINT substack.com/@rntmoc/note/p-…
1
1
92
Grass touching sesh as a night shifter, ngl: I am nervous af to the point that..I didn't network much..this is not my comfort zone but hey, we move😌
4
6
317
My friend @theodorepis here wrote a very good piece on how to find username specially in MY landscape, worth a follow if you're interested in MY OSINT🇲🇾 #Malaysia #OSINT
theo@theopelesitAug 23
Your username says more about you than you think. Here is how investigators piece it together substack.com/@rntmoc/note/p-…
1
6
660
*investigate using username
53
Alhamdullilah: I have finished OSINT: Educational Series from @TraceLabs , hosted by F1NDX. It has been a while since I am in a proper OSINT course, it has been eye opening, looking foward to use that in my osint ops 😌 factory.cancred.ca/obv3/cred…

OSINT: Educational Series

Awarded for successfully completing OSINT: Educational Series, hosted by F1NDX.

factory.cancred.ca
1
11
1,460
Oops, I forgot the hashtags, #osint #learning
66
How come senarai nama and no tepon ni easily accessible to the public?
16
742
67
3,947
288,277
Uni juniors asked me about the history of the CTF we used to organize back then. Realized I didn't even know the full timeline myself haha. So I did a bit of diggin, asked AI to help spin up a dashboard, and mapped out the local scene: ctf.rectifyq.com
2
5
1
22
1,658
We've observed an increase of compromised Malaysian websites displaying fake CAPTCHA pages that instruct users to press Win + R, paste a command, and run it. ⚠️ This is NOT a CAPTCHA. It installs malware. ✅ Legitimate CAPTCHA will NEVER ask you to copy and run commands.
3
42
1
55
3,078
Load more