SIGNALMONK
Expert en sécurité sans fil et RFID
Profil professionnel
SignalMonk dirige des opérations de sécurité sur Wi‑Fi, BLE, RFID et l’IoT sans fil.
Compétences clés
Capture de trafic sans fil; exploitation BLE; détection de clonage RFID; communication IoT sécurisée; forensique radio
Réalisations majeures
Mise au jour d’un vol d’entreprise via des badges clonés.
Articles de SIGNALMONK
When a Fortinet Admin Bug Becomes a Memory Weapon
A reported path-traversal flaw in FortiOS is said to have been used to stage PEERSTITCH, a memory-resident ARM64 implant that can tamper with how tagged VPN sessions are handled inside the appliance.
Android’s Hidden Control Layer Becomes a Fraud Weapon
A reported Android RAT called YuanKong shows how accessibility abuse, deceptive payment screens, and a murky debugging reference can turn interface trust into a security liability.
Oversized Malware Files Turn File Scanners Into a Blind Spot
A reported LegionLoader delivery chain used an executable measuring 882,716,672 bytes - about 842 MiB - raising a practical question for defenders: what happens when malicious code is packaged larger than the tools meant to inspect it?
Discord Messages, Hidden Commands: The CikaBika RAT Case Raises the Cost of Looking Normal
The malware is reportedly delivered through phishing and uses Discord for command-and-control, a combination that can blur malicious traffic into everyday online activity.
Hirudo Turns Banking App Trust Into the Weak Link
A new Android trojan reportedly works by tampering with legitimate banking apps themselves, a reminder that client-side security can collapse once the binary is no longer trustworthy.
Fake PuTTY Downloads Turn a Routine Search Into a Malware Trap
A search for a common admin tool was reportedly steered toward a counterfeit download page, with a trojanized Windows installer and an unexplained “Ethereum-powered” label raising fresh questions about delivery and persistence.
Citrix Edge Boxes, Modified Backdoors, and the Quiet Risk of Cross-Platform Control
A NetScaler intrusion story shows how a perimeter appliance can become more than a gateway when attackers pair pre-auth flaws with a repurposed remote-management toolkit.
Mac Stealer, Now a Hand-On Intruder: ICMacOS Pushes Into RAT Territory
The malware family linked to ICMacOS is being described as moving beyond credential theft into interactive access, a shift that raises the stakes for macOS defenders.
Blinder Tunnel and the Quiet Theft of Trust Inside Windows Developer Workflows
A targeted intrusion chain mixed a fake recruitment lure, .NET runtime tampering, and DLL sideloading to turn ordinary software behavior into an execution path.
GhostProfile and the Quiet Theft of Browser Trust on macOS
A reported macOS implant may be abusing browser profiles and live sessions to let an operator work inside a hidden browser window, turning ordinary login state into stealth access.
Android Phones That Arrive Already Tainted: The Firmware Trap Behind a New Malware Campaign
A reported firmware-resident threat on low-cost Android devices shows why the most dangerous malware may never pass through the app store at all.
Casbaneiro’s False Silence: Banking Malware Hides Behind a Clean-Looking 403
A Latin American banking Trojan campaign pairs phishing, geofenced delivery, and staged infrastructure deception to make active command channels look empty.
Casbaneiro’s Quiet Trap: Banking Malware That Wakes Up Only for the Right Website
A Latin American banking trojan campaign reportedly used a simple but effective trick: stay quiet until the victim visits a targeted financial site, then begin its banking-related command-and-control activity.
When the Stealer Leaves the Browser: AI Workspaces Become the New Prize
A Rust-based infostealer campaign is shifting the theft playbook from passwords to the local files, tokens, and connector settings that make AI assistants and coding agents useful.
When the Phone Arrives Dirty: The Firmware Risk Behind Midnight Mimosa
Some Android phones are said to carry malware before the first app is ever installed, turning the trusted firmware layer into the real attack surface.
When a Poem Becomes a Botnet Map
A mining campaign tied to exposed AI and developer services shows how ordinary web-facing tools can be folded into a resilient criminal infrastructure.
npm’s Trust Chain Turns Toxic in the MALFEX Package Cluster
A Windows-focused npm supply-chain campaign shows how a routine dependency install can become a delivery path for remote access malware and credential-stealing code.
Poem-Driven C2: The Hidden Trick Behind a New Wave of AI-Service Malware
A malware campaign called PoeLLM is using a GitHub-hosted poem to help infected servers find command-and-control infrastructure, showing how exposed AI and developer tools can be turned into a control plane.
When Malware Reads the Ledger: The New Problem of Blockchain-Powered C2
Security research points to a supply-chain tactic in which public blockchains help malware refresh its command infrastructure after it is already on a compromised system.
A Poisoned npm Release Turned a Trusted Name into a Supply-Chain Trap
A single malicious package version can become a delivery system for secret theft, credential abuse, and wider propagation risk across developer workflows.