Adnan (xanda) Mohd Shukor

Pernah cuba tanam ciku, tapi tak berbuah (CC BY 4.0)

[Adnan (xanda) Mohd Shukor @xanda]

Fake Base Transceiver Station atau Fake BTS adalah sebuah peranti yang menyamar sebagai stesen pangkalan telefon bimbit sebenar. Di Malaysia, ia selalunya bertujuan untuk menyebarkan SMS phishing. Lagi best, nama penghantar SMS pun boleh di spoof!

[Adnan (xanda) Mohd Shukor @xanda]

Unpopular opinion in defense in depth: blocking newly registered domains. Not because every new domain is malicious, but because attackers often rely on disposable infrastructure

[lcamtuf @lcamtuf]

Back in 2002, I wrote a super-simple tool to dump the memory of a live process to a file. This was a cool way to grab "screenshots" of SSH sessions, editors, etc.

I recently non-vibe-coded a new version that works on modern Linux, if you want to have fun: https://t.co/To6C3Vmib6

[Adnan (xanda) Mohd Shukor @xanda]

@noturmamabutjoe Ya, cuci mata

[Adnan (xanda) Mohd Shukor @xanda]

Tak kisah Home Expo, Malaysia Bike Show atau mana-mana pameran. Nampak diskaun 50%, 80% jangan terus beli. Bandingkan harga dahulu. Sekurang-kurangnya bandingkan dengan harga di Shopee. I doubt @KPDN_HQ tak aware MO ni

[Jacob in Cambodia 🇺🇸 🇰🇭 @jacobincambodia]

Bavet Police Raid a Rental House, Find Eight Malaysians Running a Scam Op

Svay Rieng police hit a rented house in Tabeb village, Bavet, and detained nine people. Eight Malaysians, including one woman, and one Vietnamese man. The landlord is named as Pech Vuthy.

With most of the big compounds shut down, operators who got out are setting up small cells in rented houses and rooms. No income, no infrastructure - the police will be cleaning up pockets like this for a long time.

[Aisar @aisarcore]

𝗧𝗛𝗜𝗦 𝗜𝗦 𝗔𝗖𝗧𝗨𝗔𝗟𝗟𝗬 𝗜𝗡𝗦𝗔𝗡𝗘.

– Europol raided an office in Latvia few weeks ago and what they found inside is hard to believe.

– Latvia's counterterrorism unit OMEGA smashed through the doors with flashbang grenades.

– Inside were 1,200 SIM box devices stacked floor to ceiling. 40,000 active SIM cards. Connected to 80 countries simultaneously.

– They were running two websites, Gogetsms and Apisim where criminals could rent a phone number from any country on demand.

– Those numbers were used for phishing, bank fraud, investment scams, extortion, and migrant smuggling.

– 3,200 confirmed fraud cases in Austria and Latvia alone.

– $5.8 MILLION in confirmed losses.

– Police seized 4 luxury cars, $470,000 in frozen bank accounts, and $290,000 in crypto.

– 7 people were running the entire operation.

– The operation was called SIMCARTEL.

– 49 MILLION fake accounts were created using their service.

The same apps that make you jump through 6 verification steps just to log in.

49 million fake accounts got through while you were still waiting for your SMS code.

[Adnan (xanda) Mohd Shukor @xanda]

Ada lagi eh imam baca bismillaHURrahmaNURrahim

[US Dept of State INL @StateINL]

We’re taking down insidious scam centers who prey on Americans. $10 MILLION REWARD for information that disrupts the Tai Chang scam centers in Burma. Have a tip? Contact the FBI at [email protected]. https://t.co/DyMpWyR3ha

[Amanz @amanz]

PDRM Serbu Operasi Menipu Warga Sepanyol Menggunakan AI Oleh Warga China Di Johor https://t.co/PjhMRoWqXn

[Adnan (xanda) Mohd Shukor @xanda]

@RempahRz

[Adnan (xanda) Mohd Shukor @xanda]

In a Facebook post tonight, Onn Hafiz said he received a warning notification from Apple about an attempted mercenary spyware attack targeting his phone and Apple account.
https://t.co/oDuTF5nDnu

[Hackmanac @H4ckmanac]

🚨Data Breach Alert ‼️

𝗧𝗲𝗮𝗺𝗣𝗖𝗣 𝗖𝗹𝗮𝗶𝗺𝘀 𝗦𝗮𝗹𝗲 𝗼𝗳 𝗚𝗶𝘁𝗛𝘂𝗯 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝗹 𝗦𝗼𝘂𝗿𝗰𝗲 𝗖𝗼𝗱𝗲

TeamPCP hacking group claimed the compromise and sale of GitHub internal data, allegedly including around 4,000 private repositories containing source code related to GitHub’s main platform and internal organizations.

Threat actor: TeamPCP
Sector: ICT
Data exposure (claimed): Approximately 4,000 private repositories
Data type: Source code
Observed: May 19, 2026
Status: Pending verification
ESIX©: 7.96

Full details and impact assessment on https://t.co/eB7qgxKFAa

[GitHub @github]

We are investigating unauthorized access to GitHub’s internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’ enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.

[Adnan (xanda) Mohd Shukor @xanda]

MASSA app by @mycert is seeing rapid updates! It now features app recognition via certificate signatures and deep scanning for suspicious APK/XAPK/ZIP files. Detecting apps removed from the Play Store, enhanced app list sorting, and major stability fixes https://t.co/RYELzsR3cG

[Adnan (xanda) Mohd Shukor @xanda]

Update: The dev team informed me that the latest version is not open source. The source code available on GitHub is for the previous version

[Adnan (xanda) Mohd Shukor @xanda]

Go-Gov-MY is the Malaysian government’s official tool for building secure forms with https://t.co/atQJObnqEb links and QR codes. Clean, secure, and open source 🇲🇾

Government agencies, this one’s for you https://t.co/dltUzDG8Dl

[Adnan (xanda) Mohd Shukor @xanda]

@kheirulnaim Aku pun tak tahu kalau dah launch. Hahaha. Aku jumpa je pagi tadi

[Adnan (xanda) Mohd Shukor @xanda]

@_aprillicious Kalau tengok based on github repo, yes

[Adnan (xanda) Mohd Shukor @xanda]

@bytebot "you" as in, me? I'm not the author and neither working for the gov/vendor

[Adnan (xanda) Mohd Shukor @xanda]

@bytebot Not updated with the form part yet it seems
https://t.co/ul9un5szFG

[Adnan (xanda) Mohd Shukor @xanda]

After Budi95, now I’m wondering what https://t.co/zHgPoGl3Sg is all about 👀