NEXUSGUARDIAN
Architecte de sécurité de la supply chain
Profil professionnel
Expert dans la protection des chaînes d’approvisionnement logicielle distribuées. Fort de nombreuses années d’expérience dans les environnements SaaS et DevSecOps, NexusGuardian conçoit des architectures qui empêchent la compromission des dépôts, de CI/CD et des dépendances open source.
Compétences clés
Modélisation des menaces de supply chain; audit des pipelines CI/CD; analyse des dépendances open source; signature de code et intégrité des artefacts; protection des dépôts Git/Subversion
Réalisations majeures
Réduction des risques de supply chain de 95 % dans un écosystème de 4 000 microservices.; découverte d’une backdoor dans un module Python téléchargé 12 M de fois.
Articles de NEXUSGUARDIAN
Android Fraud Chain Blends Remote Control With Contactless Card Relay
A reported pairing of WindRelay and SpyNote shows how a phone compromise can move beyond spyware into real-time payment abuse, with a loan-fraud angle that remains technically unexplained.
Forty Minutes on PyPI, Years of Risk in the Pipeline
A short-lived malicious package release can still become a long-tail credential event when developers, CI jobs, and cloud tooling trust the same dependency chain.
When a Familiar Cleaner Becomes the Trapdoor
A counterfeit CCleaner installer is being tied to a browser-focused payload that researchers describe as GhostDesk, a reminder that trusted software brands can be turned into delivery systems for session theft.
When Malware Stops Renting Servers and Starts Hiding in Code on the Chain
A reported MaaS campaign ties browser lures, user-driven execution, and Polygon smart contracts into a harder-to-trace delivery path.
Paste Once, Pay Later: How Blockchain Staging Is Reviving Old Malware Tricks
A recent ACN CSIRT Italia advisory points to a campaign that mixes ClickFix-style social engineering with EtherHiding on BNB Smart Chain, turning a simple copy-paste prompt into a delivery path for malicious code.
Fake PsExec Signals How Ransomware Hides Inside Routine Windows Work
Play ransomware is linked to a custom Windows service binary named PSexesvc.exe, a disguise designed to look like familiar administrative tooling.
The Trusted Plugin Trap: How a Solidity-Branded VS Code Add-on Became a Secret-Clearing Risk
A malicious extension family tied to Solidity Pro put a familiar developer workflow under suspicion, showing how an editor plugin can become a high-value path to wallets, API keys, and credentials.
When a Conference Server Starts Handing Out Malware
A reported compromise of TrueConf infrastructure shows how a trusted download path can become the delivery point for backdoors if server-side integrity slips.
Stolen npm Credentials Turn Package Publishing Into a Propagation Machine
ChainDrop is a reminder that in open-source ecosystems, a publish token can matter more than the code it protects.
ClickFix Lures Are Feeding a macOS Credential Heist
A social-engineering chain is turning user trust into code execution, then targeting the secrets that make account takeover and crypto theft possible.
Fake Roblox Executor Turns Discord Into a Malware Supply Chain
A counterfeit gaming tool is being used as a delivery wrapper for a Java-based stealer, showing how trusted chat channels and cheat culture can become an infection path on Windows.
Vanta Stealer Turns Trust Into a Windows Trap
A Python-based infostealer linked to fake updates, cracked software, and game cheats shows how one careless launch can turn into credential theft and account takeover.
Remote Support Turned Quiet Channel: The ScreenConnect Abuse Playbook
A campaign labeled SMOKE#SCREEN highlights how a trusted remote-access agent can be repurposed for low-noise persistence on Windows and macOS.
Exposed Ransomware Toolkit Points to a Silent Access Phase
A directory left visible online appears to contain tooling for Windows access, credential theft, security evasion, lateral movement, and a blockchain-linked command channel.
QuickFox Installer Turns Into a Backdoor Delivery Route
A reported supply-chain compromise on a Windows installer shows how trusted download paths can become the first step in a malware infection.
Router Diagnostic Pages Have Become a Botnet’s Quiet Doorway
Fresh scan telemetry points to concentrated probing of router CGI diagnostics, where a single command-injection flaw can turn a management page into a remote shell path.
18 Malicious npm Packages Turn a Developer Namespace Into an Access Path
A coordinated npm supply-chain operation used multiple packages and a downloader stage to target Alibaba-related developer workflows, showing how trusted naming can become an attack surface.
Fake AI Toolkits Are Becoming Secret-Harvesting Traps for Developers
Cloned repositories, infostealers, and social-engineering lures are turning routine AI setup work into a path to cloud credential theft.
The Hidden Machinery Behind BINDCLOAK’s Quiet Intrusion Playbook
A reported multi-stage malware chain tied to OctLurk points to a familiar but effective pattern: trusted processes, host-bound payloads, and low-noise communications that make analysis harder than delivery.
When a Dependency Hides a Wallet: The Quiet Blockchain Trick Behind NullReceiver
Two trojanized npm packages reportedly used ordinary-looking Ethereum transfers to mask a reusable attacker wallet while still revealing enough data to reach a live command server.