John W.

Security Researcher @Infoblox // former @UNODC Official // Interests in all things #DNS #threatintel, #privacytech & the @Arsenal 🏆 // @UCDCCI

[John W. @johnwSEAP]

Latest @Infoblox research w @HHieupc traces an aggressive mobile banking trojan & large-scale government impersonation back to #Cambodia's K99 #scam compound. Read more about the #malware & the high-ranking elites behind it below:
https://t.co/AumwOtJYwK

#Cybercrime #ASEAN

[FBI Denver @FBIDenver]

The FBI is warning Microsoft users about a device-code phishing scam, called Kali365, in which cybercriminals use legitimate Microsoft login pages to trick victims into granting access to Outlook, Teams, OneDrive & Microsoft 365 accounts. IC3 PSA here: https://t.co/BD8aLciar0

[Mandiant (part of Google Cloud) @Mandiant]

🚨 UNC3753 is targeting US law firms using vishing and RMM tools for data extortion.

In instances linked to UNC3753, individuals posing as IT technicians attempted direct data theft using physical, in-person access.

Read more & get IOCs ➔ https://t.co/0SDAcovfSY

[jacky @jjacky]

if you still have the facebook app

please check if you have this setting turned on

absolutely crazy

[John W. @johnwSEAP]

@alexanderrX_ How is this exercise on your disc?

[Centre for Information Resilience @Cen4infoRes]

Passports confiscated on arrival. Fraud quotas assigned. Workers sold between compounds when they underperform. Electric shocks and food deprivation used as punishment.

These are the conditions inside Myanmar’s scam compounds: facilities where people are held against their will and forced to conduct online fraud targeting victims around the world. Myanmar Witness has been monitoring them since the 2021 military coup.

Today we publish an explainer drawing on that research, documenting what these sites are, where they are, how people are trafficked into them, and what the evidence shows about conditions inside. 1/4

[Infoblox @Infoblox]

Boss too tough? Salary too low? If you're after a new gig, look no further 💼
We’re tracking a recruitment‑themed phishing campaign that opens with hope of a career upgrade and ends in stolen credentials. 🧵

[Infoblox @Infoblox]

⚽️ Looking for FIFA World Cup tickets without the queue? We're tracking a surge in convincing FIFA lookalike sites. This isn't your typical phishing game — it's full‑blown counterfeit ticketing, run like a high‑volume e‑commerce operation. 🧵👇

[Laura Harth @LauraHarth]

Spreading beyond @ICIJorg - over the past weeks I’ve been receiving emails with most similar content, impersonating respectively ICIJ, @NEDemocracy [specifically asking about @FBIDallas transnational repression initiative launched 1 day prior], and - just now - @HudsonInstitute…

[🚨The Celebration Police🚨 @PLCPolice]

Arsenal celebrating like they’ve won the league

[Luis Garicano 🇪🇺🇺🇦 @lugaricano]

Countries get the cabinets they pay for. Singapore pays its Foreign Minister about S$1.1m, around US$800,000. The salary is benchmarked to 60% of the median income of the top 1,000 Singaporean earners. That is why you can get Vivian Balakrishnan, former eye surgeon and hospital chief executive, implementing @karpathy's external brain idea (link below). The speech shows deep understanding of AI and fills one with confidence about Singapore's future.

The UK Foreign Secretary earns roughly £165,000: the MP salary plus a ministerial salary of about £67,000. The ministerial part is frozen since the crisis and is down by roughly a third in real terms since 2010. This is what a junior Magic Circle lawyer earns.

Spain pays its ministers around €85,000. So you do not get a surgeon who has run hospitals. You get a party loyalist who has never run anything.

[Infoblox @Infoblox]

Recovery Scam Season: Second Time’s the Charm? 🎣
Fallen victim to online fraud and now seeing ads promising to get your money back—fast, guaranteed, no upfront fees?
⚠️ 📵 Yeah… about that. 🧵

[John Hultquist @JohnHultquist]

Google Threat Intelligence Group is dropping our latest AI Threat Tracker report today, which covers several threats we are watching through a variety of means. The report includes some details of the first 0day exploit we've found developed with AI. 1/x https://t.co/klvOrX31xv

[John W. @johnwSEAP]

@Haso10Y Available? Dm me

[Jacob in Cambodia 🇺🇸 🇰🇭 @jacobincambodia]

Indonesia Arrests 321 in Jakarta Office Tower, Police Say Operations Came From Cambodia and Myanmar

Indonesian police raided Hayam Wuruk Plaza Tower in West Jakarta over the weekend and arrested 321 foreigners running 75 online gambling sites targeting players outside Indonesia. The breakdown from the National Police: 228 Vietnamese, 57 Chinese, plus 13 Burmese, 11 Lao, five Thai, and three each from Malaysia and Cambodia. Most entered on short-term visitor visas and overstayed. 275 have been formally named as suspects. Charges carry up to nine years in prison and a 2 billion rupiah fine, around $116,000.

Immigration spokesperson Widyatmoko told reporters afterward: "After enforcement measures in Cambodia, we started to see a shift toward Indonesia, and that was something we anticipated." Police said operators previously based in Myanmar and Cambodia are relocating to Indonesia.

No casino, no compound. A commercial tower near Jakarta's Chinatown, hundreds of people on tourist visas, 75 platforms run out of rented office space. The same week, Indonesian authorities arrested 210 foreigners on Batam island for online investment fraud and 44 in Surabaya for impersonating police in a phone scam ring. The Surabaya bust followed the arrest of 13 Japanese men in Bogor on the same case in March.

[Jacob in Cambodia 🇺🇸 🇰🇭 @jacobincambodia]

Chaos in Sihanoukville, Shots Fired in Fourth Raid on Jin Yu Men Tang Casino

Authorities raided Jin Yu Men Tang Casino in Sihanoukville this evening, the fourth time officers have hit the location. Khmer reporting describes shots fired during the operation. Officers detained many foreigners; others broke out.

Footage shows police trying to round up the escapees.

[CyberScamMonitor @CyberScamWatch]

CAMBODIA: Gambling commission suspends casino licence of Eagle King Casino for hosting online scam operations. The licence is held by TS Chamnong Investment Co., Ltd. The company is chaired by the sister-in-law of the former defence minister, his niece is a director. 1/2

[Oladipo @DipoAW]

Cooked. AI accelerated exploits. People can chain attacks pretty quickly with these tools. Doesn't take 2 years anymore

[Phil Robertson @Reaproy]

Shocking news from #Laos about the totally out of control wildlife trafficking of #pangolins & other species, & the serious likelihood about animal to human transmission of virus. Of course, the totally clueless & corrupt #LaoPDR gov't has no comment. Great reporting by @sneweyy for the Telegraph. Watch this space for notification about possible upcoming @FCCThai program on all of this. https://t.co/pL5D7Shioy

[CyberScamMonitor @CyberScamWatch]

UGANDA: Raid on suspected online scam operation detains 169 people, including nationals of Pakistan, India, Bangladesh, Ghana, Myanmar, Ethiopia, Sri Lanka, Cambodia, Thailand, Nepal, Indonesia & Malaysia. 1/2 https://t.co/CawefyNkfy

[Jacob in Cambodia 🇺🇸 🇰🇭 @jacobincambodia]

Police still trying to contain the situation at Baolong 3 in Poipet. A number of Chinese nationals managed to break out during this afternoon’s raid. Over 1,000 more have been detained on site and are now being processed

The earlier videos are chaos. People running every direction, police shouting in Khmer at workers who don’t understand, firing weapons into the air to control the crowd. Fresh footage this evening shows large groups still bursting out of the compound. What a mess.