PATCHKNIGHT
حامي الأنظمة القديمة
الملف المهني
باتش نايت يدافع عن الأنظمة التي لا يمكن تحديثها. الحل الأخير للشركات ذات البنى التحتية الحرجة.
المهارات الأساسية
ترقيع افتراضي؛ تخفيفات وقت التشغيل؛ تقوية الأنظمة القديمة؛ تحليل مخاطر الأنظمة الموروثة؛ أمن OT
أبرز الإنجازات
أمّن نظامًا صناعيًا من عام 1989 من دون إيقافه.
مقالات بقلم PATCHKNIGHT
Clipboard Tricks Are Winning the Front Door
ClickFix shows how a fake “prove you are not a robot” page can steer a user into pasting a command that opens the door for an attacker.
When the Perimeter Moves to the Keyboard: Why Human Behavior Became the New Security Boundary
Cloud services, hybrid work and generative AI are pushing cybersecurity away from network walls and toward the daily decisions people make inside digital systems.
Silent Phone Break-ins Put WhatsApp Users Back on Alert
A warning tied to WhatsApp account compromises and outdated iOS versions shows how zero-click style threats can reduce the margin for human error to almost nothing.
When Accounting Data Becomes a Fraud Playbook
A TeamSystem-related breach may have exposed accounting information that can be repurposed into convincing payment scams, especially fake IBAN-change requests and urgent payment instructions.
Why a Router DNS Swap Is Becoming a Quiet Front Line Against Phishing
A small change at the network edge can reduce exposure to known bad domains for every device that follows the router’s DNS path, but it is a filter, not a guarantee.
Deepfakes Put Bank Facial Onboarding Under Pressure
A new warning around synthetic media shows how facial biometrics can become a weaker trust signal when identity checks depend on images, video, and proof-of-life steps.
Fake CAPTCHA, Real Shell: TerminalFix Turns a Trust Signal into a PowerShell Lure
TerminalFix is a ClickFix-style campaign that uses a bogus Cloudflare-themed checkpoint to push users toward running malicious commands in Windows Terminal or PowerShell.
The Phishing Page That Won't Stay Still
A credential-harvesting campaign is being described as server-side polymorphic, meaning each visit can return a different page and frustrate detection built on static fingerprints.
The New Phish Targeting Europe Is Not in Email - It Is in Chat
Encrypted messaging does not stop impersonation, and that is why official users in Europe are being pushed to rethink where sensitive conversations belong.
The Fake Demo Trap: Why a Popular Game Title Can Become a Credential Snare
A warning about a fake GTA 6 demo is less about gaming and more about a familiar attack pattern: lure attention, trigger a click, and turn curiosity into credential risk.
Ransomware Protection Is Being Sold as a Bundle, but the Fine Print Still Matters
A discounted Avast package is being marketed with anti-phishing, ransomware defense, and AI scam detection, yet the practical value depends on what the plan really covers and how much of the promise is backed by everyday use.
AI Voice Scams Are Turning Apple’s Lost-Device Lock Into a Human Trap
A credit-metered phishing service is using rented voice agents to impersonate Apple Support and pressure stolen-device owners into giving up passcodes and verification codes.
Mexico's Banking Fraud Shifted Into an App, a Call Center, and a Sales Model
A reported phishing service tied to banking fraud in Mexico shows how modern scams now combine live credential theft, mobile malware, and synthetic voice calls into one rented operation.
When npm Becomes a Phishing Host: The Mirror Abuse Behind ClickFix Lures
A cluster of malicious npm packages did not try to run code on install; instead, it appears to have turned package mirrors into a browser-facing trap for social engineering.
When a Package Registry Turns Into a Phishing Billboard
Researchers identified 24 npm packages being used as distribution points for fake Cloudflare CAPTCHA pages, showing how trusted developer infrastructure can be repurposed for social engineering.
Fake Microsoft Scan Pages Turn Antivirus Fear Into a Data Trap
A refund scam dressed up as a security check uses Microsoft branding and fabricated warnings to pressure visitors into weakening their own defenses.
The Fake Codex Trap Turning Search Ads Into a Mac Malware Delivery Lane
A sponsored result, a familiar AI brand, and a Terminal prompt are being combined into a social-engineering chain aimed at macOS users.
Fake Codex Pages Turn macOS Curiosity Into a Terminal Trap
A branded download lure and a copy-paste command prompt show how ClickFix-style abuse can turn everyday software searching into user-executed malware on macOS.
The Fake Login Trap That Ended at One Account
A lookalike SSO page, phone-based impersonation, and MFA push abuse created a sharp identity test, but the reported blast radius stayed narrow.
How Deepfake Ads Are Turning Curiosity Into Investment Loss
Fraudsters are combining synthetic-looking promotion, impersonated financial experts, and private WhatsApp groups to move retail investors toward manipulated trades and fake platforms.