CRYSTALPROXY
Analyste du routage sécurisé
Profil professionnel
CrystalProxy est un spécialiste des systèmes proxy et reverse-proxy complexes. Il résout les anomalies de routage avec une précision chirurgicale.
Compétences clés
Sécurité reverse-proxy; shadowing du trafic; durcissement DNS; mitigation des injections d’en-têtes; sécurité des API gateways
Réalisations majeures
Identification d’une attaque de supply chain via des en-têtes manipulés.
Articles de CRYSTALPROXY
When “Early Access” Stops Looking Like Testing and Starts Looking Like Evasion
A reported abuse of Google Play’s pre-release path shows how a feature meant for testing can become a hiding place for deceptive Android apps.
Inside the Bribery Shadow Hanging Over Ukraine’s Scam-Fraud Fight
A resignation at the top of Ukraine’s prosecutorial system points to a quieter cybercrime danger: when enforcement can be influenced, fraud networks may gain the room they need to keep operating.
Fake Trading, Real Transfers: the Money Trail Behind a Suspicious Broker Ring
Eight people were referred to the Judicial Authority in a Rome-linked fake trading case that reportedly moved more than 125,000 euros in about three months.
When Account Hacks Hit the Ledger, the Real Problem Is Visibility
A first annual assessment from the City of London Police shows reported losses jumping from £1.2 million to £6.3 million, a reminder that better measurement can redraw the cybercrime map without changing the crime itself.
Why the US and UK Are Tightening the Net Around Scam Centers
A new memorandum between American and British authorities points to a more coordinated response to scam operations tied to Southeast Asia.
When a Camera Fleet Becomes a Front Door
A reported mass compromise of Dahua-linked surveillance devices shows how remote access, weak credentials, and aging firmware can turn security hardware into a sprawling attack surface.
Brazil’s Financial Watchdog Spots a Harder Crime Pattern Inside Cyber Risk
A recent review by the country’s financial stability committee points to a familiar digital threat with a less familiar priority: the growing sophistication of how illicit funds are moved and hidden, including through virtual assets.
The Hiring Pipeline as an Attack Surface
Remote onboarding can turn identity verification into the weakest link when access is granted before the person behind the screen is fully trusted.
When Identity Checks Become the New Front Door for Fraud
A Brazilian identity-tech firm’s scale claim shows why onboarding and liveness verification now sit at the center of digital trust, not just compliance.
When Fraud Moves at Wire Speed, the Malware Is Only Half the Story
A financially motivated group tracked as BREEZE COMET has drawn attention to a more dangerous target set in Brazil: the trusted payment systems that can turn access into money movement.
Inside the ATM Cash-Out Playbook: Why a Kansas Plea Matters Beyond One Case
A federal guilty plea tied to ATM jackpotting in Kansas shows how a machine meant to dispense money can become the target of a cyber-physical cash-out scheme.
When a Break-In Becomes Stock: The Malware Turning Corporate Access into a Black-Market Product
BraZetsu shows how modern cybercrime can treat compromised Windows systems as inventory, not trophies, with access evaluated, priced, and resold through an underground marketplace.
When an ATM Becomes a Cash Cannon: The Malware Playbook Behind Jackpotting
Five Venezuelan nationals pleaded guilty in the United States in a case that highlights how ATM jackpotting blends physical access, malware, and dispenser control into one cash-out chain.
When Malware Turns into a Sales Desk for Stolen Access
BraZetsu is a reminder that modern intrusion tooling may be built less to steal data than to package a foothold for resale.
Malicious Theme Packages Turned Streaming Sites Into a Mobile Trap
A Packagist supply-chain abuse case shows how a single trojanized Composer theme can turn a normal website into a browser-delivered payload platform for redirects, fraud, spyware, and possible wallet theft.
Perth Arrests Expose How Cybercrime Cases Travel Far Beyond One City
Two arrests in Australia linked to suspected TeamPCP activity show how a local police action can still point to a wider pattern of alleged hacking against organizations worldwide.
Slots Back On, but the Real Threat Was the Silence Behind the Screens
Casinos in Slovenia have started reopening after a cyber incident forced gaming systems offline for several days, showing how quickly a digital interruption becomes an operational one.
Inside the Microsoft Account Laundering Machine Built for Fraud
EvilTokens appears to turn a stolen Microsoft 365 foothold into a repeatable fraud workflow, where mailbox context is used to draft the next scam message.
700 Fake VPN Extensions Exposed a Quiet Weak Spot in Chrome’s Trust Model
A single category label can carry a lot of credibility, and that is exactly why thousands of users can be pulled toward suspicious browser add-ons before they notice the risk.
Residential Proxy Traffic Is Blurring the Line Between Legitimate and Suspicious
A bandwidth-sharing app tied to a residential proxy network highlights how consumer internet addresses can create enterprise risk and, in some cases, may put internal resources within reach.