finx

Cybersec lifelong student | Blue Teamer | Dumbass (still am)

[finx @thisisfinx]

Finally here is the second update for Malaysian OSINT resource startme page. Here is the inspiration for that:
#malaysia #OSINT

[finx @thisisfinx]

I came across this chart and I think this can be good base to restructure the current Malaysian OSINT resource startme page🤔. Keep your eyes peeled on the startme page update somewhere on this week👍

#malaysia #OSINT

[finx @thisisfinx]

I am posting out of my hiatus scrolling just to find this. Reminder to all: this list is now one of the featured list on @startme and is currently maintained by yours truly. The link in the quoted tweet. A step foward for Malaysian OSINT scene😌
#osint #malaysia

[Start.me @startme]

Researching Malaysia from open sources?
This https://t.co/4TbAJ6OmTJ page brings OSINT resources for landmarks, traffic, military vessel tracking, environment monitoring, and more into one clear dashboard.

https://t.co/inBS9sfxBb #OSINT #Malaysia

[Mylon Intelligence @MylonIntel]

‼️CYBERSECURITY INCIDENT
GitHub Pull Request (PR) #3139 was made regarding the removal of NX Console from the VS Code Marketplace on 18/5/2026.

The VS Code extension was compromised, and it contains an infostealer.

Microsoft has since removed it from the VS Code marketplace.

[Mylon Intelligence @MylonIntel]

‼️🚨 CYBERSECURITY INCIDENT — A threat actor on a hacker forum, "TeamPCP" is allegedly selling GitHub source code.

Mylon Intelligence has identified that there was no user data involved which aligns with GitHub investigative reports.

[finx @thisisfinx]

Note: it seems like people ran with the Alor Gajah Qilin thing. Nobody really seems to see this very particular verification from @r4shsec. So, boosted for visibility. This account also manages @MylonIntel so go follow that also (covers darkweb stuff).
#malaysia #threatintel

[R4shSec @r4shsec]

For anyone wondering, the threat actors behind it, “Qilin” haven’t published any samples to verify the authenticity of the breach.
There’s currently no cause for alarm.

[uk-osint.net 🇪🇺🇵🇸🇺🇦🏳️‍🌈🏳️‍⚧️ @UKOSINT]

There appears to have been some big changes on the Google Advanced Search Page, but it does seem, that for now at least, that the other search filters, such as intitle: & inurl: etc are still working #OSINT

[Adnan (xanda) Mohd Shukor @xanda]

MASSA app by @mycert is seeing rapid updates! It now features app recognition via certificate signatures and deep scanning for suspicious APK/XAPK/ZIP files. Detecting apps removed from the Play Store, enhanced app list sorting, and major stability fixes https://t.co/RYELzsR3cG

[R4shSec @r4shsec]

For anyone wondering, the threat actors behind it, “Qilin” haven’t published any samples to verify the authenticity of the breach.
There’s currently no cause for alarm.

[Mylon Intelligence @MylonIntel]

‼️🇲🇾 MALAYSIA RANSOMWARE ALERT
Ransomware group, "Qilin" has allegedly leaked data to a company in Malaysia, PNSB Insurance Brokers Sdn Bhd.

Leaked data may contain sensitive PII & confidential documents.

- ⏰Date: 17/5/2026
- 📦80GB (245,578 files)

[FalconFeeds.io @FalconFeedsio]

📢 Ransomware Alert: 🇲🇾

Malaysia Smelting Corporation Berhad (https://t.co/YtsDshn5oy), a Malaysia-based mining company, has reportedly fallen victim to LAMASHTU Ransomware.

NB: The group intends to publish the data within 7-8 days.

🔍Key Details:
🛡️Threat actor: LAMASHTU
📅 Reported on: 18/05/26
⚠️ Data Compromised: 30 GB

[K.Nazran() @khairulnazran]

“You cannot govern technology you have only been briefed of”

*Taps on the sign aggressively*

[Adnan (xanda) Mohd Shukor @xanda]

Go-Gov-MY is the Malaysian government’s official tool for building secure forms with https://t.co/atQJObnqEb links and QR codes. Clean, secure, and open source 🇲🇾

Government agencies, this one’s for you https://t.co/dltUzDG8Dl

[kdjebat @kasturixbm5]

Wake up guys, our 🇲🇾 government just got hacked by a vibe coder

[finx @thisisfinx]

Hey, just a quick question: if you're sharing your fav cafe, how would you do that? List with google map links?

What if I tell you, you can create sharable custom map?

I got tutorial on how to do so:
https://t.co/SjLZDkfDWn

No worries, lots of pictures in the guide~
#osint

[Anurag @Malwarehunterr]

Fake Malaysia LHDN (tax authority) themed site hosting a “Mandatory Tax Compliance Review” notice.

njifjuhgh[.]top

The “DOWNLOAD & SEND DOCUMENTS - LHDN SAFE PORTAL” file downloads a #Tedy trojan payload.

Interesting part, the same domain previously hosted Indian tax themed phishing/malware
https://t.co/RbmGFcSQVM

file hash: 7263622822694fc8c2720974c31b5c12b2fdc864ce496ab4f6da57e8c361b59b

#phishing #malware @malwrhunterteam @500mk500 @skocherhan

[finx @thisisfinx]

Now, you're asking, why don't you scrape it or use AI like a normal human do? To that I give you 3 issues:

1) Domain and subdomain do not match, no consistent pattern between all states

2) No internal record

3) Dead links

So, no choice gotta do manual 😵‍💫

[finx @thisisfinx]

Finally, a crash course on how MY Govt works🎉. This new OSINT in Malaysia resource startme focuses on MY Govt Structure and complete link for federal, state and PBT. Here is the link:

https://t.co/xnbvnXo9Zv

#malaysia #osint

[finx @thisisfinx]

And don't you worry, every single link is working. Why I am confident? I manually check them, my head hurts 😵‍💫

[finx @thisisfinx]

Update: CyberRaya is a team😅. My bad...here's the tag @dinobitoo for one of the member.

[finx @thisisfinx]

New updates for Malaysian OSINT resource list🎉🎉🎉

This update is all about AI and my attempt to use AI for this list:

https://t.co/vG7D7vtZ1x

Shoutout to (CyberRaya – Medium), he is the real expert here, I am just a noob trying to learn
#ai #osint

[finx @thisisfinx]

@dinobitoo Finally I found someone to tag for CyberRaya on X🤣.