Yup, you read it right. Another list created by yours truly.
Why?
This list started as just another addition on the OSINT list suggested by one of my uni senior. Personally, I am thinking of putting threat intel section on the list but after deliberating the section’s fit with the overall list, I decided to make different list entirely on the section plus couple of appropriate additions.
Within the process of finding the additions, I thought why ASEAN/Malaysia dosen’t have some sort of newsletter about national cyber threat ala Cyber Daily News/CyberWire or threat intel company providing IOC on local threats ala Group IB Threat Intel?
It turns out that we do have quite solid companies that provide quality writeup on local cyber threats but the volume is alarmingly low.
Hopefully, we can fill up these gap in the future.
The best we can do is to categorize the one that’s available.
That’s the intention of this list.
Enough ramblings, lets go to the sections in this list
[The Sections]
1)Threat Intel
This section focuses on companies that provided quality writeup on local cyber threat
Additions on this section:
CERT or also known as Computer Emergency Response Team is a team reacts to cyber threat in their respective nation. Naturally, Malaysia have one. This one is as official as it can get. If the threat arrives here, just to be sure that the threat is mainstream already.
This one is truly one of the most underrated sources with quite unique threat detection. The writeups also quite through in my opinion after reading them all.
2) Security Researchers
This section puts emphasis on individual whom provided quality research on local cyber threats
Additions on this section:
He is the catalyst of this list. He is the head of cyber intelligence on Velum Labs (the cyber security department of SAPURA). He consistently retweet threat writeups that are interesting to him. I won’t say that they are malaysian focused threat most of em’ but some of them are. Keep an eye on his timeline to gather some overview on the threat overview. Plus, his personal blog is quite interesting technical writeups, not gonna spoil it here.
Remember NetByteSec section that I added before? This is the main spokesperson for the company. At least the one with an active online presence. He usually the one that posted NetByteSec writeups on the twitterspehere. As per Malaysian cybersec field, he is the most famous malware analyst in the field. If you explore his personal blog, there are a lot of gems which again I’m not gonna spoil it here
3)Podcast
This section specific focus on podcast that covers Malaysian/ASEAN Cybersecurity scene giving good overview on the scene
Additions on this section:
This podcast is built by Sivanathan to interview influential figures on Malaysian Cybersecurity field on relevant topics that the figures are an expert of. Sounds kinda cliche wasn’t it? The reason why I put this specific podcast here is for locating who is the main man in your field of interest. Then just continue from there.
This one specialize in ASEAN cybersec news. Naturally, that includes Malaysia. If you just want to keep up to date with the region’s cybersec incidents, this one for you.
Thank you for reading through this starting intro to the list.
This is the starting point for us to properly find sources for Malaysian cyber threat. If y’all have any addition/comments on the list, please reach me via twitter, @thisisfinx