rontol (@rontol) header
rontol (@rontol) profile picture

Personal acc | Interested in Security analytics and Osint | FA & TA hobbyist

KL
Joined March 2007
Photo by rontol (@rontol)Photo by rontol (@rontol)Photo by rontol (@rontol)Photo by rontol (@rontol)Photo by rontol (@rontol)Photo by rontol (@rontol)Photo by rontol (@rontol)Photo by rontol (@rontol)Photo by rontol (@rontol)Photo by rontol (@rontol)
rontol retweeted
Happy to share a technical analysis by @h0j3n on our recent CVE-2026-54121 a.k.a Certighost. glhf🔥 Technical analysis: gist.github.com/H0j3n/a5ef26… POC: github.com/aniqfakhrul/CVE-2…
11
252
10
713
101,638
Wargames.MY is finally open for registration! 🚀 For the first time, we've decided to open the CTF to the International audiences! 🌐 🇲🇾 Register Now: pro2023.wargames.my/ #WargamesMY_2023
32
3
46
6,883
We love when researchers use Censys! Check out this excellent post by @MichalKoczwara doing just that: michaelkoczwara.medium.com/t… Do you want to further your understanding of the Internet? Think you’d benefit from researcher level access? Drop us a note! support.censys.io/hc/en-us/a…
6
1
19
2,306
I spent this year talking to the 3 young hackers behind Mirai, the malware that once broke the internet. This is WIRED's resulting cover story—an epic, untold, 22,000-word tale of cybercrime, friendship, chaos, betrayal, paranoia, and redemption. Read: wired.com/story/mirai-untold…
40
383
42
1,124
430,152
#Yakuza have been partnering w/ #Taiwan drug traffickers in the #Mekong region for years. Working together on online #scams is a natural evolution, and the Mekong remains the perfect environment, connected and corrupted @jdouglasSEA @yasdre #OrganizedCrime straitstimes.com/asia/se-asi…
21
23
6,515
Here is my presentation on evasive Linux malware at the Cold Incident Response Conference in Oslo. I go over BFPDoor and the difference between professional vs. amateur malware. Many Linux forensic investigation command line techniques are provided. youtube.com/watch?v=psBNrROt…
6
39
3
148
27,046
Let’s unpack this one by one: 1️⃣ Legal Accountability: This marks a precedent-setting move that puts legal responsibility on #CISOs. This underscores the importance of aligning #cybersecurity efforts with legal compliance. Read on… 🧵 darkreading.com/attacks-brea…
1
3
4
515
rontol retweeted
Lemah betul TLP:Green report bocor kat public
4
6
14
2,286
Financial planning is a regulated activity. Sy sendiri mesej personal tak boleh guna designation Financial Planner jika jumpa ejen-ejen letak macam tu di page mereka. Ejen-ejen baik Insurans, UT tak tahu sebenarnya skop kerja seorang Licensed Financial Planner. Mcm mana sy tahu? Sebab ramai dah approach sy tanya bagaimana kita kerja sebenarnya? Dan kebanyakan mereka : oh u kerja detail nya, susahnya, semua benda kena tahu ya.
Ada satu video wealth planner yang sama bertajuk "what does a wealth planner do?" Dia list segala benda yang berkaitan dengan financial planning. Penting untuk saya bagitahu benda ni public sebab ini berkaitan dengan undang-undang negara. Wealth planner tak boleh provide financial planning. Financial assessment, investment, retirement planning, estate planning ni semua bawah financial planning. Financial planning is a regulated activity di bawah Akta Pasaran Modal dan Perkhidmatan 2007. Kalau takda lesen tapi provide service financial planning boleh kena hukuman tak lebih RM5 juta atau penjara tak lebih 5 tahun atau kedua-dua sekali. Kalau bagi investment advice tanpa lesen lagi berat dia punya hukuman. Hanya financial planner yang berlesen dengan Securities Commission saja boleh provide financial planning service. Lepas tu ada nampak juga sorang ni bagitahu diri dia penasihat kewangan dan financial advisor. Yang saya tengok dia promote ASBf. Guna title penasihat kewangan dan financial advisor tanpa approval BNM pun tak boleh. Kalau guna title ni tanpa approval BNM, ni adalah kesalahan di bawah Akta Perkhidmatan Kewangan. Boleh kena denda RM25 juta gais. Kalau anda ada kawan-kawan yang buat benda yang saya sebut ni tapi takda lesen dari SC dan approval BNM, sila bagitahu mereka sebab actually masih ramai lagi tak tahu benda ni.
1
7
17
5,928
Click the incognito icon to download a copy of the HAR file that has been stripped of tokens and other sensitive data. Note: At the time of writing, the Google HAR Analyzer does all the processing locally in the browser and does not send the file to an external server.
1
1
20
1,896
App Peti Emas yang saya bangunkan ini bertujuan untuk memudahkan kita rekod simpanan emas. Link: petiemas.com Tak terhad untuk Public Gold sahaja. Even emas brand lain pun boleh guna app Peti Emas ini. Cumanya kita kena rajin rekod berapakah harga emas yang dibel…
3
3
312
ICYMI: I was on @BFMradio to discuss mis- and disinformation being part of the fog of war in this latest conflict. This may be a useful primer to my upcoming Masterclass organised by @UoNMalaysia, and I hope to devote a bit of time for AMA then. bfm.my/podcast/bigger-pictur…
20
35
2,805
Read the last sentence. Read it again. Post your thoughts.
yeah Cisco IOS XE software (CVE-2023-20198) privesc is cool, but are you hunting the buried lede for how the implant actually got installed?
28
25
3
200
74,240
Thanks for the tag @rontol ! Incident: Trafficked Malaysians in Lima, Peru. Taiwan-based scam call operation. Location: 275 Jiron La Laguna, north east La Molina, Peru Coordinates: 12.0689S, 76.9108W Rich neighborhood. Low traffic. Perfect spot for a criminal operation.
Some visual confirmation on the quasi-Macao scam gang 'Red Dragon' being caught in Peru This wasn't linked by MY press so far @GeoInt_MY
3
20
31
8,222
To get even more of the write-up here, check out the full post by Aaron Costello (@conspiracyproof) here: enumerated.ie/index/servicen…
1
13
39
13,226