NEXUSGUARDIAN
Architecte de sécurité de la supply chain
Profil professionnel
Expert dans la protection des chaînes d’approvisionnement logicielle distribuées. Fort de nombreuses années d’expérience dans les environnements SaaS et DevSecOps, NexusGuardian conçoit des architectures qui empêchent la compromission des dépôts, de CI/CD et des dépendances open source.
Compétences clés
Modélisation des menaces de supply chain; audit des pipelines CI/CD; analyse des dépendances open source; signature de code et intégrité des artefacts; protection des dépôts Git/Subversion
Réalisations majeures
Réduction des risques de supply chain de 95 % dans un écosystème de 4 000 microservices.; découverte d’une backdoor dans un module Python téléchargé 12 M de fois.
Articles de NEXUSGUARDIAN
npm’s Quietest Payloads Are Getting Harder to Spot
A malicious package in the npm ecosystem highlights a simple but stubborn truth: blocking install scripts does not stop code that waits until normal runtime to execute.
RatHat Turns Android Trust Into a Banking Trap
The latest Android banking Trojan headline is less about novelty than about method: credential theft, MFA capture, and the growing abuse of legitimate device features.
When Search Results Become a Malware Funnel
A campaign built on SEO-boosted GitHub lookalikes is using brand trust to push Rapuncel, a newly documented infostealer, without any confirmed breach of the companies being impersonated.
When Android Debugging Becomes the Doorway: The RatHat Case
A reported Android malware strain is drawing attention not for a classic exploit, but for turning trusted device features such as ADB and accessibility into a path out of the app sandbox.
Inside the Casino Cover: How Hidden C2 Domains Slip Past Enterprise Filters
A malware-control channel tied to PeckBirdy is being concealed inside gambling- and adult-themed domains, turning routine DNS noise into a hiding place for suspicious infrastructure.
Movie Lure, Remote Hands: How a Windows Torrent Trap Turns Files into a Battlefield
A newly identified Windows malware framework is using fake movie downloads to hand operators direct control over local files, raising the stakes from simple infection to interactive file tampering.
RatHat’s Quiet Trick: Turning Android Debugging Into a Post-Uninstall Foothold
The malware’s real novelty is not just infection, but keeping a shell path alive after the visible app is gone, by abusing legitimate Android features meant for development and troubleshooting.
When Malware Starts Asking a Cloud AI to Rewrite Itself
An experimental dropper linked to Gemini API usage shows how self-modifying code can blur the line between ordinary obfuscation and cloud-assisted evasion.
When Malware Starts Rewriting Its Own Trail, Signatures Lose Their Grip
A reported wave of AI-assisted malware is forcing defenders to rethink a long-standing assumption: that malicious code stays stable long enough to be fingerprinted and blocked.
Android’s Convenience Trap: How a Banking Trojan Can Climb from Tap Automation to Shell Access
RatHat shows how accessibility services and wireless debugging can be chained into a sharper mobile fraud path, turning everyday Android features into a route toward credential theft and device control.
VectraRAT Turns Windows Privilege Boundaries Into a Rental Business
A reported malware-for-hire platform blends remote control, credential theft, and a Windows elevation chain, showing how post-compromise tooling is being packaged for easy reuse.
The Browser Became the Vault: How a Banking Malware Crew Quietly Hijacks Chrome and Edge
A Brazil-focused campaign shows how malicious extensions can turn a familiar browser into a session-theft tool, with the real prize being authenticated banking access.
Invoice Lure, Trusted Binary: The AsyncRAT Chain That Tried to Disappear in Plain Sight
A staged Windows intrusion path uses a batch-file lure, script layers, and process camouflage to bury a remote-access trojan inside a normal-looking system process.
When Malware Borrows Android’s Enterprise Cage to Hide a Banking Trap
A banking trojan family is being linked to a second app that provisions a work profile, then places a tampered banking app inside the isolated space.
Fake Game Builds, Real Damage: How a GTA VI Lure Can Turn Into Malware
A hype-fueled download bait is being used to push password stealers, RATs, and destructive payloads through convincing fake game files.
Fake GTA 6 Download Lures Gamers Into a Multi-Stage Credential Theft Trap
A fraudulent GTA 6 installer campaign is being linked to browser password theft, Discord token harvesting, and crypto-related data targets, while one ransomware component remains unverified.
When the Fix Is the Trap: Mac Users Targeted Through the Terminal
ClickFix-style lures and search-engine malvertising are being used to push MacSync Stealer by persuading victims to run attacker-controlled commands in Terminal.
The Fake Checkmark Trap: How a CAPTCHA Lure Can Open a Stealer Chain
A deceptively simple verification prompt can hide a layered delivery path built around user execution, remote WebDAV loading, and trust in familiar cloud and blockchain infrastructure.
When the Assistant Keeps Secrets, Infostealers Follow
Local data saved by AI coding tools is becoming a quiet target, turning developer endpoints into a richer source of tokens, code, and project context.
The Open Redis Trap: How a Minor Exposure Became a Mining Machine
A large cryptojacking run against Linux servers shows how one internet-facing Redis service, left too open, can become a durable source of stolen compute.