SIGNALMONK
خبير أمن اللاسلكي وRFID
الملف المهني
يقود SignalMonk العمليات الأمنية على Wi‑Fi وBLE وRFID وإنترنت الأشياء اللاسلكي.
المهارات الأساسية
التنصت على اللاسلكي؛ استغلال BLE؛ كشف استنساخ RFID؛ اتصالات IoT آمنة؛ التحليل الجنائي اللاسلكي
أبرز الإنجازات
كشف سرقة مؤسسية عبر بطاقات دخول مستنسخة.
مقالات بقلم SIGNALMONK
Prinz Eugen Bets on Speed: The New Ransomware Trick That Hides in Plain Sight
A fresh ransomware operation is focusing on the files people touched most recently while skipping the usual on-screen ransom note, a combination that complicates fast detection.
When Browser Locks Meet Malware Tricks: Vidar and the Chrome Secret Hunt
A reported Vidar technique shows how browser hardening can push infostealers toward live Windows process abuse instead of simple file theft.
SocGholish Under Pressure as Police Target Its Malware Network
An international operation targeted SocGholish infrastructure, a reminder that disrupting a loader can matter as much as stopping the final payload.
When a Clipper Hides Behind Tor, the Hunt Moves Off the Network Map
A Windows crypto-clipper campaign is notable less for the theft itself than for the way it routes control through a local SOCKS5 proxy and Tor, reducing the value of simple IP-based hunting.
Rokarolla Shows How Android Phones Become Banking Tools for Crime
The Android trojan is described as targeting 200 applications and taking control of infected devices, a reminder that mobile fraud often begins with trust abuse, not brute force.
When Fake Popularity Becomes the Delivery System for Crypto Malware
A lure built on manipulated reputation signals is turning trusted software hubs into a launchpad for clipboard hijackers aimed at crypto users.
Fake Update Files, Real Power: How macOS Scripts Became a Delivery Tunnel
A malicious macOS campaign is abusing AppleScript lures and a curl-to-osascript chain to stage payloads through trusted system tools rather than noisy executables.
One Paste, Three Implants: The ClickFix Chain That Turned Windows Run into a Launchpad
A user-execution lure, a signed Windows utility, and a multi-stage payload stack show how social engineering can pivot from a browser visit to an 11-host intrusion.
When a Dismissed Bug Report Meets a Self-Spreading Package Worm
GitHub’s handling of two vulnerability reports now sits at the center of a broader warning about how package trust, maintainer credentials, and install-time automation can collide in open-source ecosystems.
Compromised WordPress Pages Are Being Used as Traps for the Curious Click
ErrTraffic turns ordinary site visits into a social-engineering path to infostealers, relying on fake errors, malicious JavaScript, and user action rather than a classic exploit chain.
Windows Gains a New Silent Passenger: SprySOCKS Steps Into the Kernel
A backdoor long tied to Linux now has Windows builds, and one of them reportedly uses a kernel driver to hide itself from ordinary visibility tools.
Fake AI Helpers Turn Developer Trust Into a Credential Trap
Malicious JetBrains plugins and suspicious browser add-ons are putting AI keys and chatbot conversations in the crosshairs, showing how software supply chains can become data-collection pipelines.
Cloud-Fronted Control: Why a Deno Malware Case Matters Beyond One Intrusion
A reported Deno-based RAT using WebSocket command-and-control highlights how legitimate runtimes and edge infrastructure can be repurposed into a quieter operator channel.
Fake Android Screens, Real Money: The Overlay Trick Behind a New Banking Trojan Wave
A mobile banker labeled Rokarolla shows how phishing pages, look-alike prompts, and overlay-style credential theft can turn a single tap into a financial compromise.
Deno Turns into a Trojan Horse as Phishing Pressure Pushes the First Click
A modular JavaScript implant reportedly uses Deno permission flags, while inbox flooding and Teams impersonation help force the execution decision.
The Android Permission Trap Behind a New Banking Trojan
Rokarolla shows how a legitimate accessibility feature can be turned into a fraud engine when deception, sideloading, and weak permission hygiene meet.
Fileless Phantom Stealer and the New War Over Browser Credentials
A malware campaign identified as Fileless Phantom Stealer combines memory-only execution with anti-analysis behavior while focusing on browser credentials, a pattern that complicates file-based detection.
OnionDrop and the Windows Trust Trick That Keeps Paying Off
A loader built around DLL sideloading is being used to deliver multiple infostealers, and historical YARA hunting suggests the campaign has left a wider trail than a single sample would show.
Rokarolla Turns Android Convenience Into a Fraud Pipeline
A newly described Android Trojan is tied to crypto and banking targets, showing how clipboard access, call handling, and accessibility abuse can become a practical fraud toolkit.
Rokarolla Turns an Android Phone into a Payment-Tampering Tool
Security researchers say the new banking trojan blends PIN capture, SMS interception, clipboard rewriting, and security-control suppression into one mobile fraud stack.