NEXUSGUARDIAN
معماري أمن سلسلة الإمداد
الملف المهني
خبير في حماية سلاسل الإمداد البرمجية الموزعة. بخبرة سنوات في بيئات SaaS وDevSecOps، يصمم NexusGuardian معماريات تمنع اختراق المستودعات وخطوط CI/CD والاعتماديات مفتوحة المصدر.
المهارات الأساسية
نمذجة تهديدات سلسلة الإمداد؛ تدقيق خطوط CI/CD؛ تحليل الاعتماديات مفتوحة المصدر؛ توقيع الشيفرة وسلامة الملفات؛ حماية مستودعات Git/Subversion
أبرز الإنجازات
خفض مخاطر سلسلة الإمداد بنسبة 95% في منظومة تضم 4000 خدمة مصغرة.؛ عثر على باب خلفي في وحدة Python تم تنزيلها 12 مليون مرة.
مقالات بقلم NEXUSGUARDIAN
ChatGPT Share Link Turned Lure: The ClickFix Path to NetSupport RAT
A legitimate-looking shared page on ChatGPT was reportedly used as a trust anchor for a social-engineering chain that ended in remote-access malware.
How Infostealers Can Turn a Claude Login Into an Unauthorized Access Risk
Anthropic’s account reset and payment-data cleanup point to a familiar SaaS danger: if malware steals browser sessions on a user device, cloud access can become the weak link.
Browser Add-ons Turned into Wallet Hunters in a Quiet Supply-Chain Twist
A cluster of Chrome and Edge extensions reportedly stripped browser protections and injected code into live pages, showing how a trusted add-on can become the most dangerous layer in the session.
Inside the Browser: When Extensions Turn Into a Theft and Lure Layer
Multiple Chrome and Edge extensions were linked to a malware framework that targeted crypto, browser data, and history, showing how trusted add-ons can become stealthy in-session threats.
The Resume That Wasn’t: A Go Loader, a Fake Word File, and Malware That Stayed in Memory
A Windows intrusion chain disguised as an academic job lure shows how anti-sandbox checks and fileless execution can shrink the defender’s window of visibility.
AI Brand, Real Malware: How a Fake Claude Desktop Install Turned Search Traffic into a RAT Chain
A lure built around a trusted AI desktop app shows how search ads, DLL sideloading, and unusual command-and-control can still carry a modern intrusion.
Core Werewolf’s Quiet Upgrade: Why a Custom RAT Matters More Than a New Malware Name
A Russia-focused espionage cluster is now being linked to CoreRAT, a homegrown implant that marks a shift away from borrowed remote-control tools and toward tighter operator control.
CoreRAT Turns a Windows Breach Into a Quiet Operator Console
A custom remote access trojan linked to Core Werewolf shows how espionage crews can turn infected Windows systems into interactive workspaces for command execution, information gathering, payload downloads, and cleanup.
FTP’s Forgotten Greeting Is Becoming a Malware Blind Spot
A campaign tied to two newly named RAT families uses FTP banners as dead drop resolvers, showing how a routine protocol greeting can be turned into a covert routing layer.
Car Dashboards Enter the Botnet Economy
Malware built for vehicle head units has been linked to the BadBox ecosystem, showing how infotainment hardware can become part of the same criminal machinery that powers ad fraud and proxy abuse.
Fake GTA 6 Pages Turn a Game Rush into a Browser-Stealing Trap
A lure built around Grand Theft Auto VI appears designed to push Vidar, a commodity infostealer that can pull secrets from browser sessions instead of trying to crack them outright.
ToxicPanda’s Next Move: Why a Banking Trojan Getting “Bigger” Matters More Than It Sounds
A new Android malware variant is being described as more capable and more far-reaching, a sign that mobile fraud crews are pushing beyond simple credential theft.
Android Car Systems Drawn Into a Proxy Botnet, but the Root Path Remains Unclear
An unnamed malware strain is being used against Android-based in-car systems, turning them into relay nodes and raising fresh questions about where infotainment ends and infrastructure abuse begins.
Trojanized npm Packages Turn a Trusted Pipeline Into a Linux Malware Lane
A reported supply-chain campaign tied to RedC2 shows how package ecosystems can be abused to move a native Linux implant through ordinary developer workflows.
Car Screens, Hidden Relays: Why Android Head Units Have Become a Botnet Prize
A malware campaign aimed at Android-based automotive head units shows how a trusted update path can turn a dashboard computer into a proxy node, even when the driving system itself is not the target.
When a CAPTCHA Becomes a Malware Loader: The macOS ClickFix Playbook Gets Harder to Kill
A macOS campaign tied to ClickFix-style lures shows how attackers can combine social engineering, blockchain-hosted infrastructure, and mixed payloads to make cleanup and disruption more difficult.
Browser Sessions Became the Prize: A macOS Stealer Turns Login State Into a Remote Weapon
AmnesiaStealer points to a harsher reality for defenders: on modern browsers, stealing the session can matter more than stealing the password.
Trusted Car Updates, Criminal Payloads: The Quiet Risk Inside Android Head Units
A legitimate update path on Android-based car head units is at the center of a campaign that turns embedded vehicle systems into proxy infrastructure and ad-fraud assets.
Emoji-Laced Scripts Put a Classic Infostealer Back in the Spotlight
A reported business email compromise campaign uses emoji-filled JScript and a fileless execution chain to conceal Agent Tesla and steal credentials.
FTP’s Quietest Message Turned Into a Malware Delivery Trick
Security researchers traced a campaign that hides commands in FTP server banners to help deliver two previously undocumented Windows RATs, E4del and PINHOLE.