https://rectifyq.com/ Latest Malaysian threat intelligence from Rectifyq: threat entries, ransomware and data-breach claims, and the monthly Rectifyq Radar. en Wed, 07 Oct 2026 11:26:49 GMT https://rectifyq.com/my-threat-landscape/radar/2026-09 https://rectifyq.com/my-threat-landscape/radar/2026-09 Thu, 01 Oct 2026 00:00:00 GMT my-threat-landscape/radar September 2026 Malaysian Threat Landscape Recap — a cyber incident halts Port of Tanjung Pelepas with Direwolf claiming responsibility, 2 ransomware claims, and the October community calendar. https://rectifyq.com/my-threat-landscape/radar/2026-08 https://rectifyq.com/my-threat-landscape/radar/2026-08 Tue, 01 Sep 2026 00:00:00 GMT my-threat-landscape/radar August 2026 Malaysian Threat Landscape Recap — 8 ransomware claims led by Qilin, a fake Park@Perak site delivering an iOS exploit chain, AI-driven exploitation of a Malaysian government entity, and the September–October community calendar. https://rectifyq.com/my-threat-landscape/radar/2026-07 https://rectifyq.com/my-threat-landscape/radar/2026-07 Sat, 01 Aug 2026 00:00:00 GMT my-threat-landscape/radar July 2026 Malaysian Threat Landscape Recap — 9 ransomware claims, active Android banking trojans, government website compromises, and the August–September community calendar. https://rectifyq.com/tanya-rectifyq/2026-06-what-is-the-scope-of-cti https://rectifyq.com/tanya-rectifyq/2026-06-what-is-the-scope-of-cti Sun, 19 Jul 2026 00:00:00 GMT tanya-rectifyq Anonymized DM guidance on determining the scope of Cyber Threat Intelligence (CTI), evaluating In-house vs Managed TI, and local Malaysian providers for BNM RMiT compliance. https://rectifyq.com/my-threat-landscape/vulnerabilities/2026-w28 https://rectifyq.com/my-threat-landscape/vulnerabilities/2026-w28 Thu, 16 Jul 2026 00:00:00 GMT my-threat-landscape/vulnerabilities TBD https://rectifyq.com/my-threat-landscape/radar/2026-06 https://rectifyq.com/my-threat-landscape/radar/2026-06 Wed, 01 Jul 2026 00:00:00 GMT my-threat-landscape/radar June 2026 Malaysian Threat Landscape recap — 7 ransomware claims, active Android banking trojans, government website compromises, and July's community calendar. https://rectifyq.com/my-threat-landscape/threats/409f7b4d-207e-4bad-8938-248248604dd4 https://rectifyq.com/my-threat-landscape/threats/409f7b4d-207e-4bad-8938-248248604dd4 Sat, 27 Jun 2026 00:00:00 GMT my-threat-landscape/threats Nacsa says Health Ministry, other govt agency websites hacked; urges immediate patch to fix vulnerability (Jun 2026). Source: thestar.com.my. Rectifyq assessment: Highly Relevant to Malaysia. Report. Targets: Malaysia. https://rectifyq.com/my-threat-landscape/threats/c43ea1a9-5308-43d7-a187-048d2b65e20b https://rectifyq.com/my-threat-landscape/threats/c43ea1a9-5308-43d7-a187-048d2b65e20b Thu, 25 Jun 2026 00:00:00 GMT my-threat-landscape/threats SharpPanda Strike Again (Jun 2026). Source: research.pelagos-intel.com. Rectifyq assessment: Highly Relevant to Malaysia. Malware analysis. Targets: France, Malaysia. https://rectifyq.com/my-threat-landscape/threats/3c5282e4-a4e0-480a-8928-fe0c8c443494 https://rectifyq.com/my-threat-landscape/threats/3c5282e4-a4e0-480a-8928-fe0c8c443494 Mon, 22 Jun 2026 00:00:00 GMT my-threat-landscape/threats MA-1464.062026: MyCERT Alert - Malware Campaign Delivering Malicious VBScript via WhatsApp Desktop (Jun 2026). Source: MyCERT. Rectifyq assessment: Highly Relevant to Malaysia. Campaign analysis. Targets: Malaysia. https://rectifyq.com/my-threat-landscape/threats/ef37da5f-f14c-4d52-88ff-af1dfd7fccd9 https://rectifyq.com/my-threat-landscape/threats/ef37da5f-f14c-4d52-88ff-af1dfd7fccd9 Mon, 22 Jun 2026 00:00:00 GMT my-threat-landscape/threats An active malware campaign has been discovered distributing malicious VBScript files through WhatsApp direct messages since June 2026. The operation affects users across multiple countries, with Malaysia experiencing the highest concentration of victims. https://rectifyq.com/my-threat-landscape/breaches/2026-06-fortibleed https://rectifyq.com/my-threat-landscape/breaches/2026-06-fortibleed Wed, 17 Jun 2026 00:00:00 GMT my-threat-landscape/breaches Massive credential leak and brute-force campaign targeting internet-facing FortiGate firewalls globally, prompting a High-Severity advisory from NC4. https://rectifyq.com/my-threat-landscape/threats/65db42c9-e25b-479e-95cf-d21fd34c73ae https://rectifyq.com/my-threat-landscape/threats/65db42c9-e25b-479e-95cf-d21fd34c73ae Wed, 17 Jun 2026 00:00:00 GMT my-threat-landscape/threats Security researchers discovered AryStinger, a botnet targeting legacy routers and NAS devices to build reconnaissance and attack infrastructure. https://rectifyq.com/my-threat-landscape/threats/f66d7792-44c8-4b5a-8f0e-7357bd8352cb https://rectifyq.com/my-threat-landscape/threats/f66d7792-44c8-4b5a-8f0e-7357bd8352cb Wed, 17 Jun 2026 00:00:00 GMT my-threat-landscape/threats Cybercriminals orchestrated a sophisticated malvertising operation leveraging Google Ads to impersonate popular AI developer tools including Claude AI, ChatGPT Codex, Perplexity, Cursor IDE, and JetBrains. https://rectifyq.com/my-threat-landscape/threats/be7ce1a3-06b7-40b8-baae-d4fa3adfba87 https://rectifyq.com/my-threat-landscape/threats/be7ce1a3-06b7-40b8-baae-d4fa3adfba87 Mon, 15 Jun 2026 00:00:00 GMT my-threat-landscape/threats The hospitality and travel sector experienced a dramatic surge in cyberattacks, with organizations facing an average of 2,291 weekly attacks in May 2026, representing a 24% year-over-year increase and a cumulative 122% rise since 2023. https://rectifyq.com/my-threat-landscape/threats/64d4b916-e459-44a4-80d0-636de8f9c850 https://rectifyq.com/my-threat-landscape/threats/64d4b916-e459-44a4-80d0-636de8f9c850 Thu, 11 Jun 2026 00:00:00 GMT my-threat-landscape/threats Iranian and Russian shadow fleet vessels are utilizing sophisticated online infrastructure consisting of over 36 inauthentic websites to facilitate sanctions evasion. https://rectifyq.com/my-threat-landscape/threats/2603f2d2-024d-4874-a26c-074a965ff561 https://rectifyq.com/my-threat-landscape/threats/2603f2d2-024d-4874-a26c-074a965ff561 Wed, 10 Jun 2026 00:00:00 GMT my-threat-landscape/threats Phantom Casino (Jun 2026). Source: syntx.com.my. Rectifyq assessment: Highly Relevant to Malaysia. Infra profile. Targets: Malaysia. https://rectifyq.com/tanya-rectifyq/2026-06-what-is-tlp https://rectifyq.com/tanya-rectifyq/2026-06-what-is-tlp Wed, 10 Jun 2026 00:00:00 GMT tanya-rectifyq Tanya Rectifyq — Traffic Light Protocol explained for the Malaysian community: what each TLP level allows and why practitioners should care. https://rectifyq.com/my-threat-landscape/threats/19d42e7a-969a-4f87-8931-af8fecb5aa8b https://rectifyq.com/my-threat-landscape/threats/19d42e7a-969a-4f87-8931-af8fecb5aa8b Mon, 08 Jun 2026 00:00:00 GMT my-threat-landscape/threats Two Russia-aligned campaigns continue exploiting CVE-2025-8088, a WinRAR path traversal vulnerability patched in July 2025, against Ukrainian organizations through April 2026. https://rectifyq.com/my-threat-landscape/threats/c0fb7f53-b749-40f8-99b8-b7339530bb6f https://rectifyq.com/my-threat-landscape/threats/c0fb7f53-b749-40f8-99b8-b7339530bb6f Sat, 06 Jun 2026 00:00:00 GMT my-threat-landscape/threats MA-1451.062026: MyCERT Advisory - Multi-Variant Android Banking Trojan Campaign Targeting Malaysian Banking Users (Delivery4U / KerjaExpress / MaxTag) (Jun 2026). Source: MyCERT. Rectifyq assessment: Highly Relevant to Malaysia. Campaign analysis. Targets: Malaysia. https://rectifyq.com/my-threat-landscape/threats/636a805b-58f3-442e-9a0a-72b9d7e7f244 https://rectifyq.com/my-threat-landscape/threats/636a805b-58f3-442e-9a0a-72b9d7e7f244 Wed, 03 Jun 2026 00:00:00 GMT my-threat-landscape/threats Cybercriminals in Brazil are exploiting the country's electronic invoice system (Nota Fiscal eletrônica) to deliver Havoc framework implants. https://rectifyq.com/my-threat-landscape/threats/6a7790d3-55d8-46c0-9903-9a5dc28211d9 https://rectifyq.com/my-threat-landscape/threats/6a7790d3-55d8-46c0-9903-9a5dc28211d9 Wed, 03 Jun 2026 00:00:00 GMT my-threat-landscape/threats TA4922 is a highly sophisticated Chinese-speaking threat actor demonstrating rapid operational tempo and continually evolving malware capabilities. https://rectifyq.com/my-threat-landscape/threats/441a0a60-4abf-4afc-8318-eee24dbf5b68 https://rectifyq.com/my-threat-landscape/threats/441a0a60-4abf-4afc-8318-eee24dbf5b68 Wed, 20 May 2026 00:00:00 GMT my-threat-landscape/threats Premium Deception: Uncovering a Global Android Carrier Billing Fraud Campaign (May 2026). Source: zimperium.com. Rectifyq assessment: Highly Relevant to Malaysia. Campaign analysis. Targets: Croatia, Malaysia, Romania, Thailand. https://rectifyq.com/my-threat-landscape/threats/a30d2c51-b056-4b55-ad4d-971722af82d8 https://rectifyq.com/my-threat-landscape/threats/a30d2c51-b056-4b55-ad4d-971722af82d8 Fri, 15 May 2026 00:00:00 GMT my-threat-landscape/threats Custom Attack Tooling Including Undisclosed C2 Infrastructure Targeting Malaysian Organizations (May 2026). Source: oasis-security.io. Rectifyq assessment: Highly Relevant to Malaysia. Infra profile. Targets: Malaysia. https://rectifyq.com/my-threat-landscape/threats/322e6c2d-3cb5-48ba-a8fa-1f01eb2c380f https://rectifyq.com/my-threat-landscape/threats/322e6c2d-3cb5-48ba-a8fa-1f01eb2c380f Tue, 12 May 2026 00:00:00 GMT my-threat-landscape/threats MA-1439.052026: MyCERT Alert - "Boss Impersonation" Scam Email (May 2026). Source: MyCERT. Rectifyq assessment: Highly Relevant to Malaysia. Campaign analysis. Targets: Malaysia. https://rectifyq.com/my-threat-landscape/threats/e30b1a07-b830-46e2-bf69-e67eee29d4af https://rectifyq.com/my-threat-landscape/threats/e30b1a07-b830-46e2-bf69-e67eee29d4af Tue, 05 May 2026 00:00:00 GMT my-threat-landscape/threats InstallFix and Claude Code: How Fake Install Pages Lead to Real Compromise (May 2026). Source: trendmicro.com. Rectifyq assessment: Highly Relevant to Malaysia. Malware analysis. Targets: Malaysia, Netherlands, Thailand, United States. https://rectifyq.com/my-threat-landscape/threats/0a0479bf-0a6f-4a68-a7c4-4f464b202596 https://rectifyq.com/my-threat-landscape/threats/0a0479bf-0a6f-4a68-a7c4-4f464b202596 Mon, 04 May 2026 00:00:00 GMT my-threat-landscape/threats Fake PAIP Berhad Site Stealing Pahang Customers' Data and Water Bill Payments (May 2026). Source: penipu.my. Rectifyq assessment: Highly Relevant to Malaysia. Campaign analysis. Targets: Malaysia. https://rectifyq.com/my-threat-landscape/threats/327326e7-354a-45ba-b25e-363984f01010 https://rectifyq.com/my-threat-landscape/threats/327326e7-354a-45ba-b25e-363984f01010 Thu, 30 Apr 2026 00:00:00 GMT my-threat-landscape/threats Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia (Apr 2026). Source: trendmicro.com. Rectifyq assessment: Highly Relevant to Malaysia. Campaign analysis. Targets: India, Malaysia, Myanmar, Pakistan and others. https://rectifyq.com/my-threat-landscape/threats/5109a940-ef8e-4cf9-a5c8-fdfc684aa6ae https://rectifyq.com/my-threat-landscape/threats/5109a940-ef8e-4cf9-a5c8-fdfc684aa6ae Wed, 29 Apr 2026 00:00:00 GMT my-threat-landscape/threats Phoenix Rising: Exposing the PhaaS Kit Behind Global Mass Phishing Campaigns (Apr 2026). Source: group-ib.com. Rectifyq assessment: Highly Relevant to Malaysia. Campaign analysis. Targets: Argentina, Australia, Belgium, Chile and others. https://rectifyq.com/my-threat-landscape/threats/9c16b2b8-dd25-4533-958e-97d8d1c92cca https://rectifyq.com/my-threat-landscape/threats/9c16b2b8-dd25-4533-958e-97d8d1c92cca Tue, 21 Apr 2026 00:00:00 GMT my-threat-landscape/threats GhostCargo, a 5-years campaign (Apr 2026). Source: syntx.com.my. Rectifyq assessment: Highly Relevant to Malaysia. Intrusion analysis. Targets: Malaysia. https://rectifyq.com/my-threat-landscape/threats/c4af9327-6041-4a3b-99f2-33c7af75c9ad https://rectifyq.com/my-threat-landscape/threats/c4af9327-6041-4a3b-99f2-33c7af75c9ad Wed, 08 Apr 2026 00:00:00 GMT my-threat-landscape/threats A sophisticated macOS stealer called notnullOSX emerged in March 2026, developed by threat actor alh1mik (formerly 0xFFF) who returned after a 2023 exit from underground forums.