SIGNALMONK
Experto en seguridad inalámbrica y RFID
Perfil profesional
SignalMonk lidera operaciones de seguridad en Wi-Fi, BLE, RFID e IoT inalámbrico.
Competencias clave
Sniffing inalámbrico; explotación BLE; detección de clonación RFID; comunicación segura en IoT; forense de radio
Logros principales
Descubrió un robo corporativo mediante credenciales clonadas.
Artículos de SIGNALMONK
The Windows File Trick That Can Make a Scanner Chase Its Own Tail
A recursive junction pattern known as GhostTree shows how filesystem metadata can create path-explosion risk for security tools, especially when reparse points are not handled with care.
When a Trusted Relay Becomes a Cloak: What DragonForce Allegedly Hid Inside Microsoft Teams Traffic
A reported abuse of Microsoft Teams relay infrastructure shows how ransomware crews may try to blend command-and-control into ordinary cloud traffic instead of relying on obvious malicious hosts.
Arch’s AUR Incident Exposes the Quiet Power of Package Trust
A wave of malicious uploads pushed Arch Linux to suspend new account registrations, turning a community repository into a live lesson in supply-chain risk.
From Hidden WordPress Code to a Blocked Windows Loader: How a Web Compromise Tried to Cross the Line
A chain linking compromised WordPress sites, blockchain-hosted payload delivery, and a user-driven Windows execution attempt ended with rundll32.exe being stopped before GULoader could initialize.
A WordPress Twist on Malware Delivery Turns the Visitor Into the Target
A compromised site, selective traffic filtering, and a ClickFix lure point to a staged attack chain built to push Windows users toward a GULoader infection.
When Official Android Stores Start Acting Like Malware Delivery Channels
More than 50 apps were linked to MagicAd, a trojan that kept serving ads after closure and exposed how persistence can hide inside normal Android behavior.
Fake Premium Tutorials Turn a Familiar Brand Into a Windows Command Trap
Short-form videos promising free Spotify Premium have been used as a lure, with Windows users directed toward PowerShell commands that can deliver malware.
Overlay Tricks, In-Memory Execution, and the Loader Behind Multiple Stealers
GoFlateLoader stands out not for flashy evasion, but for a simple packaging pattern that helps multiple infostealers reach the execution stage.
BLUERABBIT Blends Theft, Encryption, and Wiping in One Windows Intrusion Tool
The Golang-based backdoor is reported to combine remote access, reconnaissance, cloud-assisted exfiltration, file encryption, and destructive disk wiping on Windows hosts.
Hijacked Edge Devices Are Turning into the Internet’s Quiet Scouting Grid
JDY has reappeared as a centrally controlled scanner across more than 1,500 SOHO and IoT devices, showing how compromised edge hardware can be repurposed for fast reconnaissance.
When a Package Install Becomes the Breach: dbmux and the New Trust Problem
A malicious npm package found inside developer tooling shows how supply-chain abuse can begin before an app even launches, turning routine installs into high-risk execution events.
Fake Utility Downloads Turn Search and Chatbots Into Malware Delivery Channels
A reported cryptojacking campaign uses spoofed system utilities, manipulated search results, and AI chatbot interactions to push ScreenConnect and mining malware.
MagicAd’s Android Playbook Shows How Adware Can Sneak In Through Trusted Doors
A reported Android Trojan used background ad flooding and platform-abuse tricks to blur the line between legitimate app behavior and hidden monetization.
Background Ads, Front-Loaded Risk: The Android Trojan That Survives Store Cleanup
MagicAd shows how a short-lived app listing can still leave behind a persistent monetization engine on the device, even after the catalog entry disappears.
Shai-Hulud Returns With a Bigger Blast Radius Across npm and PyPI
More than 100 packages were hit in a new supply-chain wave, with Miasma and Hades emerging as the latest names in a self-propagating campaign.
Fake Banking Apps, Real NFC Risk: Android’s Old Trust Model Gets Abused Again
A phishing-led Android trojan is using lookalike banking apps and user-approved sideloading to push NFC card-data theft into ordinary mobile workflows.
NFCShare Turns Banking Logos Into a Mobile Fraud Machine
A retooled Android trojan is using fake banking apps and brand mimicry to push payment-card theft deeper into the mobile layer.
Fake Banking Updates Turn GitHub Into a Trojan Delivery Shelf
A new Android malware wave uses update-themed lures and public code hosting to disguise an unwanted app to look like routine maintenance.
Edge of the Network, Edge of Trust: BRICKSTORM Turns a Firewall Into a Foothold
A reported pfSense compromise shows how a perimeter device can become a quiet persistence point when attackers aim for infrastructure that security teams do not watch like a workstation.
Apple’s Own Automation Layer Becomes a Stealer’s Shortcut
A macOS infostealer called Reaper appears to lean on trusted scripting tools, turning a familiar utility into a path toward password and crypto theft.