@xanda @lilacj4de Few month ago a personal friend’s boss also got this same notification.
English
Kheirul Naim
239 posts
Kheirul Naim
@kheirulnaim
Aspiring Game Designer turned Infomation Security Practitioner || Tweet here are my personal opinion and doesnt represent my past & present Organisation stance
Malaysia Katılım Ekim 2022
79 Takip Edilen25 Takipçiler
In a Facebook post tonight, Onn Hafiz said he received a warning notification from Apple about an attempted mercenary spyware attack targeting his phone and Apple account.
freemalaysiatoday.com/category/natio…
English
@xanda Last week ke last 2 week dah launch lepas team GovTechMY ada sesi libat urus dgn KSU KD dan KP JDN. Benda ni dah lama siap tp alang2 launch dgn branding GovTechMY
Indonesia
@kheirulnaim Aku pun tak tahu kalau dah launch. Hahaha. Aku jumpa je pagi tadi
Indonesia
Kheirul Naim retweetledi
@meerkidback @xanda Penubuhan GovTech Malaysia pon mmg heavily inspired by GovTech Singapore and both team has been talking and meeting for a long time. Tak terkejut pon kalau ada similiarity
English
@xanda Sebijik go.gov.sg by GovTech Singapore punya, for.edu.sg for education. Cuma website diorang untuk shorten link purpose. Cilok sana ke apa.
Goverment Singapore pakai form.gov.sg untuk official governments form aka FormSG diorang,
Indonesia
Indonesia
English
All items listed under the "impact" section in the @mycert advisory are inaccurate for this campaign. The fraudster are only looking gift cards or Razor Gold PINs 😆
mycert.org.my/portal/advisor…
The Star@staronline
MyCert said it has been receiving reports from users who were sent suspicious emails by individuals impersonating C-level executives or senior management personnel within their organisations. thestar.com.my/tech/tech-news…
English
@RempahRz Anda bijak…perkataan tu sebenarnya dari dulu digunakan sbg cover up utk kejar kepentingan masing2. Sbb tu aku tak pernah guna 😌
Indonesia
Kheirul Naim retweetledi
Bwahahahahahahaha
malik@immalkwalahi
Guys I unlocked Lunatic difficulty and it's tougher than I thought..
Filipino
Not only you look at them playing, you attend to their wound, their tantrums, their cries.
And this kind of thing only comes once in a lifetime. I never regret it at all when she become my world
NikTek@NikTek
If Capcom's goal with Pragmata was to make everyone who plays this game want to be a parent, then they've done an amazing job. I always sit back when Diana starts playing and think to myself "so this is what is like having a daughter" She's so cute
English
@Nikfor_ WTH Cabin hahahaah. Btw im loving this game even more
English
The intro that i never skip during my teen year. Such a good memories and feeling
Autism Capital 🧩@AutismCapital
We used to be a society.
English
Such an elegant masterpiece.
Dave@GamewithDave
For anyone who used a computer between 1990 & 2005… what’s the one game you still think about?
English
📢 Big personal update!!
After almost 5 years, today was my last day at Microsoft. I had the chance to work with very talented people on complex AI and security research. It was a wild ride!
Next week I will be at Black Hat Asia. Reach out if you want to catch up and talk about the latest in AI x Threat Intelligence.
Ready for what is coming next! ✌️
English
Through my experience, i always encounter people making conclusion when it comes to stage 1 & 2.
Full context is essential for attribution and i refuse to name any unless i got a verified context.
Seongsu Park@unpacker
Bias in CTI attribution is harder to shake than you think. The DPRK/cybercrime boundary has always been blurry, but today I got a personal reminder of just how biased I still am. Here's what happened: 1⃣ First look: I encountered a compiled AppleScript malware (Zoom Audio SDK Update.scpt, MD5: 743f60f02d352201e2df36805f1ec00d). I suspected a link to `APT38` due to their known use of similar social engineering lures, including ClickFix techniques. 2⃣ Deeper dive: I checked the 2nd and 3rd stage payloads. I told myself they'd just changed their tradecraft. Still convinced it was DPRK. 3⃣ Final payload: The last-stage AppleScript was focused on stealing a wide range of sensitive data from the victim. Something felt off. I ran it through my IOC search bot. Result: `SHub Infostealer`, known crimeware, nothing to do with DPRK. DataDog published a solid write-up on it: 🔗 securitylabs.datadoghq.com/articles/tech-… If I had stopped at stage 1 or 2, I would have published a completely wrong attribution. Attribution requires full context. Our prior knowledge is a lens that helps us work faster, but it's also a blindfold. The more deeply you specialize in one actor, the more you'll see that actor everywhere. Stay humble. Follow the evidence to the end.
English