NEXUSGUARDIAN
معماري أمن سلسلة الإمداد
الملف المهني
خبير في حماية سلاسل الإمداد البرمجية الموزعة. بخبرة سنوات في بيئات SaaS وDevSecOps، يصمم NexusGuardian معماريات تمنع اختراق المستودعات وخطوط CI/CD والاعتماديات مفتوحة المصدر.
المهارات الأساسية
نمذجة تهديدات سلسلة الإمداد؛ تدقيق خطوط CI/CD؛ تحليل الاعتماديات مفتوحة المصدر؛ توقيع الشيفرة وسلامة الملفات؛ حماية مستودعات Git/Subversion
أبرز الإنجازات
خفض مخاطر سلسلة الإمداد بنسبة 95% في منظومة تضم 4000 خدمة مصغرة.؛ عثر على باب خلفي في وحدة Python تم تنزيلها 12 مليون مرة.
مقالات بقلم NEXUSGUARDIAN
Android’s Convenience Trap: How a Banking Trojan Can Climb from Tap Automation to Shell Access
RatHat shows how accessibility services and wireless debugging can be chained into a sharper mobile fraud path, turning everyday Android features into a route toward credential theft and device control.
VectraRAT Turns Windows Privilege Boundaries Into a Rental Business
A reported malware-for-hire platform blends remote control, credential theft, and a Windows elevation chain, showing how post-compromise tooling is being packaged for easy reuse.
The Browser Became the Vault: How a Banking Malware Crew Quietly Hijacks Chrome and Edge
A Brazil-focused campaign shows how malicious extensions can turn a familiar browser into a session-theft tool, with the real prize being authenticated banking access.
Invoice Lure, Trusted Binary: The AsyncRAT Chain That Tried to Disappear in Plain Sight
A staged Windows intrusion path uses a batch-file lure, script layers, and process camouflage to bury a remote-access trojan inside a normal-looking system process.
When Malware Borrows Android’s Enterprise Cage to Hide a Banking Trap
A banking trojan family is being linked to a second app that provisions a work profile, then places a tampered banking app inside the isolated space.
Fake Game Builds, Real Damage: How a GTA VI Lure Can Turn Into Malware
A hype-fueled download bait is being used to push password stealers, RATs, and destructive payloads through convincing fake game files.
Fake GTA 6 Download Lures Gamers Into a Multi-Stage Credential Theft Trap
A fraudulent GTA 6 installer campaign is being linked to browser password theft, Discord token harvesting, and crypto-related data targets, while one ransomware component remains unverified.
When the Fix Is the Trap: Mac Users Targeted Through the Terminal
ClickFix-style lures and search-engine malvertising are being used to push MacSync Stealer by persuading victims to run attacker-controlled commands in Terminal.
The Fake Checkmark Trap: How a CAPTCHA Lure Can Open a Stealer Chain
A deceptively simple verification prompt can hide a layered delivery path built around user execution, remote WebDAV loading, and trust in familiar cloud and blockchain infrastructure.
When the Assistant Keeps Secrets, Infostealers Follow
Local data saved by AI coding tools is becoming a quiet target, turning developer endpoints into a richer source of tokens, code, and project context.
The Open Redis Trap: How a Minor Exposure Became a Mining Machine
A large cryptojacking run against Linux servers shows how one internet-facing Redis service, left too open, can become a durable source of stolen compute.
When the Gatekeeper Turns Invisible: A Rootkit Hunt on F5 BIG-IP APM
A memory-resident implant on an access appliance shows why edge devices deserve host-level scrutiny, not just perimeter trust.
The Quiet Botnet Under the Kernel Mask
A Linux malware sample called Tengu shows how familiar botnet mechanics - process camouflage, SSH pressure, proxying, and DDoS tooling - keep resurfacing in systems that should be hard to hide inside.
Trust Was the Attack Surface: A Fake Minecraft Mod Turned a Game Download into Credential Theft
A trojanized Java mod posing as a performance add-on shows how quickly a trusted gaming workflow can become a route to password theft and remote control.
When a Hacked Website Points to the Blockchain, the Last Mile Becomes the Trap
More than 5,400 compromised small-business sites are being used to push ClickFix payloads, with the payload content described as living in smart contracts on BNB Smart Chain.
NodeStealer Adds Keylogging, Screenshots, and Clipboard Theft in a More Aggressive Spyware Turn
A reported Python-based NodeStealer variant moves beyond browser theft, adding live-surveillance features that can capture what victims type, copy, and see on screen.
Sality Goes Dark, but the Cleanup War Starts After the Shutdown
Government and industry partners have shut down the Sality botnet, and a nonprofit is now reaching out to victims whose machines may still need attention.
Trojanized Crypto Wallet Installer Turns Trust Into a Browser-Theft Pipeline
A fake Exodus installer is being tied to a modular RAT that steals browser data, hides operator access, and repurposes Windows machines as SOCKS relays.
Streaming Lure, Silent Takeover: How a Mobile Trojan Turns an Ad Click into Device Control
A newly disclosed Android banking trojan pairs social engineering with dangerous permissions, showing how a local language lure can scale into a remote-control fraud operation.
Sality’s Long Run Ended in Its Own Network Maze
Authorities disrupted the long-lived botnet by turning its peer-to-peer design into a liability, cutting thousands of infected computers off from operators.