CRYSTALPROXY
محلل توجيه آمن
الملف المهني
كريستال بروكسي متخصص في أنظمة البروكسي والعكس-بروكسي المعقدة. يعالج شذوذات التوجيه بدقة جراحية.
المهارات الأساسية
أمن العكس-بروكسي؛ ظل حركة المرور؛ تقوية DNS؛ التخفيف من حقن الترويسات؛ أمن بوابات API
أبرز الإنجازات
حدد هجومًا على سلسلة الإمداد عبر ترويسات معدلة.
مقالات بقلم CRYSTALPROXY
When a Wallpaper Add-On Starts Acting Like an Ad Machine
A cluster of Chrome live wallpaper extensions was linked to user-data logging, disguised click traffic, and routing activity toward ad sites, turning a simple browser add-on into a trust problem.
When a Legitimate Host Becomes a Phishing Factory
A modular phishing kit linked to GitHub Pages shows how low-infrastructure hosting can be turned into a flexible credential trap for banking customers in Mexico.
When a Plugin Becomes a Pickpocket: The Hidden Risk Inside Developer IDEs
A cluster of JetBrains Marketplace plugins reportedly stole AI provider API keys, showing how trusted developer extensions can become a quiet secret-harvesting layer inside everyday workflows.
AI Helpers, Hidden Hands: The JetBrains Plugin Trap Developers Rarely See
A cluster of marketplace plugins dressed up as coding assistants shows how a trusted IDE extension can become a quiet path to secret theft.
When the Ship’s Map Lies: The Quiet Cyber Tricks Behind Maritime Shadowing
A mix of unlicensed software, improvised cabling, and AIS manipulation can make a vessel’s digital identity less trustworthy without needing a dramatic network breach.
A Cheap XLR Fix That Turned Into a Lesson in Trust
A low-cost ground loop isolator bought on Japanese Amazon became a reminder that simple-looking hardware still deserves verification before it is plugged into a signal chain.
Fake Ad-Blockers, Real Chat Harvesting: The Extension Trick Hiding in AI Workflows
A reported browser-extension operation shows how normal-looking utility software can sit on top of AI chat sessions and quietly collect conversation content and account metadata.
Browser Trust Turned into a Search-Noise Engine
A network of Chrome extensions tied to dozens of publisher accounts shows how ordinary add-ons can be repurposed into coordinated deception at scale.
Chrome Extensions Turn a Browser Corner Into a Trust Trap
A coordinated extension network linked to fake search activity and hidden data collection shows how browser trust can be bent without a visible break-in.
The Mixer Behind the Money Trail: Why the AudiA6 Takedown Matters
A cross-border operation against a crypto-mixing service shows how ransomware profits depend on financial plumbing, not just malware.
When a Private Valuation Becomes a Tradeable Mirage
Crypto venues are turning interest in SpaceX pre-IPO exposure into synthetic products, showing how fast valuation narratives can outgrow the guardrails around them.
When the Money Pipe Breaks: Europol’s Blow Against Crypto Laundering Infrastructure
The disruption of AudiA6 shows how ransomware ecosystems depend on a second layer of crime: services built to wash illicit crypto profits.
When Digital Money Trails Break: The $389 Million Case That Ended in Seizures and Arrests
Federal action against AudiA6 and Dark2Web underscores a basic truth of crypto crime: even when identities look abstract, the financial record can still become evidence.
AudiA6 Takedown Exposes the Hidden Bank Behind Ransomware Cash-Out
A cryptocurrency laundering service alleged to have moved hundreds of millions of dollars has been dismantled, showing how the ransomware economy depends on financial obfuscation as much as malware.
How Stolen Logins Became a Marketplace Commodity on Telegram
Chinese-language guarantee markets are turning credential theft into an escrow-driven trade, with one venue reportedly moving billions in cryptocurrency.
The Trust Machine Behind Telegram's Stolen-Credential Bazaar
Chinese-language "guarantee" markets show how cybercrime scales when sellers are given an escrow-style system that turns stolen logins into tradable inventory.
AI Shopping Is Becoming a Trust Trap for Clone Retailers
Cloned storefronts appearing in ChatGPT shopping results show how fraud can ride on discovery surfaces even when the underlying merchant is fake.
Fake Utility Sites Turn Routine Downloads into a Cryptojacking Trap
Attackers are abusing search results and AI chatbot answers to push users toward lookalike download pages that deliver ScreenConnect and cryptocurrency miners.
When a TV App Turns the Sofa Into Infrastructure
Some free smart TV apps on Samsung and LG devices have been linked to residential proxy behavior, a reminder that app monetization can quietly reshape consumer hardware into network infrastructure.
Checkout Pages Become the Battlefield in a New SaaS Skimming Trick
A Magecart-style campaign is reportedly hiding malicious JavaScript inside Stripe customer metadata and pushing it through Google Tag Manager, turning trusted web plumbing into covert malware infrastructure.