Rectifyq

Threat I̶n̶t̶e̶l̶l̶i̶g̶e̶n̶c̶e̶ ̶ Information focusing on Malaysia 🇲🇾

[Rectifyq @_rectifyq]

README
4 Categories
[Threat] [Data Breach] [Event] [Report]

Relevancy in 🇲🇾 context.
🔴- Highly relevant. e.g. APT target 🇲🇾.
🟡- Somewhat relevant. e.g. APT target Asian country.
🔵- Potentially relevant. e.g. Infostealers impact globally.
⚫ - Good to know only.

[Rectifyq @_rectifyq]

[Threat][MY]🔴InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise
Type: Broad-based
Date: 05 May 2026
Refer: https://t.co/K8uq56DNXG

#rectifyq #cti #threatintel #threatintelligence #malaysia #infosec

[Rectifyq @_rectifyq]

[Threat][MY]🔴Premium Deception: Uncovering a Global Android Carrier Billing Fraud Campaign
Type: Broad-based
Date: 20 May 2026
Refer: https://t.co/dnR5v3zzCt

#rectifyq #cti #threatintel

"premium SMS abuse across Malaysia, Thailand, Romania, and Croatia."

[Rectifyq @_rectifyq]

"..targeted intrusion campaign against multiple Malaysian organizations"

https://t.co/Fk8rBF4F4W

[Rectifyq @_rectifyq]

[Threat][MY]🔴Custom Attack Tooling Including Undisclosed C2 Infrastructure Targeting Malaysian Organizations
Type: Targeted
Date: 15 May 2026
Refer: https://t.co/DtKzIH0S86

#rectifyq #cti #threatintel #threatintelligence #malaysia #infosec

[Rectifyq @_rectifyq]

[Threat][MY]🔴Custom Attack Tooling Including Undisclosed C2 Infrastructure Targeting Malaysian Organizations
Type: Targeted
Date: 15 May 2026
Refer: https://t.co/DtKzIH0S86

#rectifyq #cti #threatintel #threatintelligence #malaysia #infosec

[Rectifyq @_rectifyq]

[Threat][MY]🔴Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia
Type: APT
Date: 30 Apr 2026
Refer: https://t.co/2FlMPpzSDm

#rectifyq #cti #threatintel #threatintelligence #malaysia #infosec

https://t.co/bZ1qgF5VqP

[Rectifyq @_rectifyq]

[Threat][MY]🔴Phoenix Rising: Exposing the PhaaS Kit Behind Global Mass Phishing Campaigns
Type: Broad-based
Date: 29 Apr 2026
Refer: https://t.co/GCzPTn6d0Q

#rectifyq #cti #threatintel #threatintelligence #malaysia #infosec

[Rectifyq @_rectifyq]

[Threat][MY]🔴GhostCargo, a 5-years campaign
Type: Targeted
Date: 21 Apr 2026
Refer: https://t.co/VM6IXndwRz

#rectifyq #cti #threatintel #threatintelligence #malaysia #infosec

"..fake Barclays Bank phishing portal used to defraud a Malaysian victim of more than RM50,000"

[Rectifyq @_rectifyq]

"One operator (111[.]90[.]145[.]139, Malaysia) focused exclusively on cloud credentials across multiple sessions."

https://t.co/s7i3xP9e5u

[Rectifyq @_rectifyq]

[Threat][MY]🟡CVE-2026-39987 update: How attackers weaponized marimo to deploy a blockchain botnet via HuggingFace
Type: Broad-based
Date: 15 Apr 2026
Refer: https://t.co/7X0kFazrDI

#rectifyq #cti #threatintel #threatintelligence #malaysia #infosec

[Rectifyq @_rectifyq]

"fetches a bash installer script from hxxp://111[.]90[.]149[.]111:8080/installer"

https://t.co/HHc0bUAia5

[Rectifyq @_rectifyq]

[Threat][MY]🟡Notorious hacker returns with a new Mac stealer targeting $10K+ crypto wallets
Type: Broad-based
Date: 08 Apr 2026
Refer: https://t.co/NT3HbueEp1

#rectifyq #cti #threatintel #threatintelligence #malaysia #infosec

[Rectifyq @_rectifyq]

6.6.26 😮😮
https://t.co/kiizJGH5mc

[kdjebat @kasturixbm5]

We're unoficially hosting the largest local CTF in Malaysia's history btw.

No celebrations, no fancy stage, no government funds, no fame, no pentas utama or majlis perasmian.

Just a bunch of talented people, genuinely giving back to the people, and helping new comers.

[Rectifyq @_rectifyq]

Using Skills and Agents for Creating and Breaking CTFs
Fees: Free
Category: Open to All (No limit)
Organizer: RE:UN10N
Link: https://t.co/G6uOsKuocw

https://t.co/qlBkruuFbR

[Rectifyq @_rectifyq]

@kasturixbm5 https://t.co/3X7i8SxSje

[Rectifyq @_rectifyq]

@sherpasecmy Added in https://t.co/kiizJGH5mc !

[Adnan (xanda) Mohd Shukor @xanda]

Ops Teguh 2.0 - Major crackdown on scams leads to RM57.68mil seized, 187 suspects nabbed
https://t.co/2L0jI7wjQG

[Cyber_OSINT @Cyber_O51NT]

Oasis Security reported a targeted intrusion against multiple Malaysian government bodies using bespoke Python tooling for internal enumeration and data exfiltration, active webshells, and undisclosed C2 infrastructure with a C# beacon and Python control… https://t.co/FDlg56Gz6a

[Rectifyq @_rectifyq]

@thisisfinx Nice one bro