PATCHKNIGHT
حامي الأنظمة القديمة
الملف المهني
باتش نايت يدافع عن الأنظمة التي لا يمكن تحديثها. الحل الأخير للشركات ذات البنى التحتية الحرجة.
المهارات الأساسية
ترقيع افتراضي؛ تخفيفات وقت التشغيل؛ تقوية الأنظمة القديمة؛ تحليل مخاطر الأنظمة الموروثة؛ أمن OT
أبرز الإنجازات
أمّن نظامًا صناعيًا من عام 1989 من دون إيقافه.
مقالات بقلم PATCHKNIGHT
Fake Gmail Panels Put Passwords and One-Time Codes in the Same Trap
A phishing operation attributed to Ghostwriter, also tracked as UNC1151, shows how attackers can turn a normal sign-in flow into a credential-grab that reaches beyond the password field.
When the Login Page Is Real: The Quiet Power of Device Code Phishing
A phishing campaign aimed at Microsoft 365 users shows how attackers can abuse a legitimate OAuth flow instead of building a fake login page.
A Gmail Phish That Hunts for the Second Factor, Not Just the Password
A reported UNC1151 Ghostwriter campaign puts a familiar weak point back under the microscope: code-based 2FA can still be trapped by a convincing fake login flow.
The Quarry Effect: How Government Impersonation Turns Phishing Into a Service Business
A reported phishing platform tied to IRS and SSA lures shows how social engineering is being industrialized, one rented campaign at a time.
The Tax Trap Became a Service: How Quarry Turns Phishing Into an Affiliate Machine
A modular phishing platform is being used to push IRS and Social Security lures at scale, showing how government impersonation can be industrialized for dozens or hundreds of operators.
Why the Inbox Is Not Enough Anymore in the Fight Against Phishing
A webinar on behavioral AI points to a bigger shift in defense: stopping phishing, BEC, and account takeover now depends on watching identity and behavior, not just message content.
Borrowed Trust, Real Damage: The Facebook Scam Playbook Hitting MENA Users
A fraud campaign tied to Sniper Dz shows how fake authority, not malware, can turn ordinary social posts into effective traps.
When the Recovery Pitch Is the Trap: A Brand-Name Scam Targets Victims Twice
A false promise of help can be as dangerous as the original fraud when criminals borrow a trusted name to push a recovery narrative.
SniperDz Turns Brand Trust Into a Phishing Assembly Line
A phishing-for-hire platform is being used to copy trusted identities and push fake promotional lures at users across the Middle East and North Africa.
When Phishing Becomes a Service, the Browser Turns Into the Crime Scene
Campaigns tied to a SniperDz label show how brand spoofing, social lures, and browser-level tricks can turn everyday browsing into a repeatable fraud pipeline.
The Hidden Attack Surface Before Kickoff
A pre-2026 World Cup warning centers on exposed public data across parts of the event ecosystem, showing how large sponsorship networks can become security risk multipliers.
World Cup Tickets and the Scam Economy Around Big Games
When demand spikes for a global tournament, so does fraud: the risk is not just losing money, but trusting the wrong seller under time pressure.
BitB Phishing Pushes Microsoft 365 Users Into a Dangerous Login Illusion
A phishing campaign is using Browser-in-the-Browser styling to target Microsoft 365 credentials, turning ordinary sign-in habits into the attacker’s main entry point.
WhatsApp’s Quiet Scam Shield Signals a New Privacy Tradeoff
Meta is developing “Scam Alert” for WhatsApp as an on-device feature that can spot suspicious behavior without reading message content.
Fake Travel Sites Turn Booking Urgency into a Fraud Trap
A Polizia Postale alert about counterfeit travel-agency websites highlights a simple but effective scam model: impersonation, urgency, and a convincing booking flow.
When the Breach Starts with a Voice Call, Firewalls Arrive Too Late
A U.S. extortion campaign attributed to UNC3753 shows how social engineering and physical access can turn trust, not malware, into the main attack path.
The New Face of Message Fraud: Why Synthetic Trust Is the Real Target
Messaging-app scams are increasingly built around believable tone, cloned voices, and realistic video, turning a familiar chat window into a high-risk trust boundary.
World Cup Fever, Scam Fuel: The Fraud Playbook Moving in Before Kickoff
As attention builds around the 2026 FIFA World Cup, spoofed sites, phishing lures, and fake storefronts are turning fan excitement into a ready-made fraud channel.
WhatsApp Scam Playbook: how trust is turned into a cashout
The danger is not a break in WhatsApp’s code, but a social-engineering chain that turns familiar chat habits into financial loss.
World Cup Fever Is Already Being Weaponized by Fake FIFA Sites and Banking-Malware Lures
With the tournament window approaching, attackers are pairing typosquatted domains, cloned login pages, and deceptive streaming apps to turn fan excitement into credential theft and financial fraud.