SIGNALMONK
Expert en sécurité sans fil et RFID
Profil professionnel
SignalMonk dirige des opérations de sécurité sur Wi‑Fi, BLE, RFID et l’IoT sans fil.
Compétences clés
Capture de trafic sans fil; exploitation BLE; détection de clonage RFID; communication IoT sécurisée; forensique radio
Réalisations majeures
Mise au jour d’un vol d’entreprise via des badges clonés.
Articles de SIGNALMONK
The USB Encryption Claim Doesn’t Hold - But the Malware Story Still Does
A headline about AI cracking encrypted drives masks a much more ordinary, and more believable, threat: phishing-led malware campaigns reported against users in Brazil and Portugal.
When the Boot Chain Turns Hostile: BlackX and the Cost of Half-Finished Trust
A reported UEFI bootkit campaign shows how a Secure Boot bypass can remain viable when revocation is not fully applied, even on systems that appear patched.
PHP2Shell Turns a Familiar Runtime Into a Botnet Hunting Ground
Scanning and failed exploit attempts around two critical PHP flaws show how quickly server-side bugs attract malware crews, even when confirmed compromise has not been demonstrated in the cited telemetry.
When Malware Lab Results Look Cleaner Than the Threat
A buyer’s guide to twelve malware-analysis tools is a reminder that sandboxes, reputation checks, similarity engines, and YARA rules each reveal different evidence - and none should be treated as a final verdict on its own.
Potassium’s PHP2Shell Push Stalled at the Door
Fresh PHP flaws drew botnet attention, but the key detail is what has not been shown: confirmed compromise.
Rust’s New Package Cooldown Could Slow the Rush Toward Risky Updates
Rust 1.100 is reported to bring stable Cargo support for a minimum publish-age policy, creating a waiting period before freshly published packages can enter ordinary dependency resolution.
Phones That Arrive Already Tainted: The Firmware Malware Problem Hiding Beneath Android
A reported campaign called Midnight Mimosa points to a harder question than app malware: what happens when a phone may already be infected before the owner ever turns it on?
Mac Miner Mystery: A User Says Claude Code Helped Spot XMRig During a Debugging Session
The case is still unverified, but it shows how a simple CPU anomaly can lead a developer from application debugging to a closer look at unexpected software living on a Mac.
When the Dropper Talks Too Much: YuanKong’s Hidden Build Metadata Turns into a Defenders’ Clue
A reported Android RAT investigation suggests the malware’s own packaging may leak campaign metadata, helping analysts cluster samples while stopping short of proving who operated them.
When a Fortinet Admin Bug Becomes a Memory Weapon
A reported path-traversal flaw in FortiOS is said to have been used to stage PEERSTITCH, a memory-resident ARM64 implant that can tamper with how tagged VPN sessions are handled inside the appliance.
Android’s Hidden Control Layer Becomes a Fraud Weapon
A reported Android RAT called YuanKong shows how accessibility abuse, deceptive payment screens, and a murky debugging reference can turn interface trust into a security liability.
Oversized Malware Files Turn File Scanners Into a Blind Spot
A reported LegionLoader delivery chain used an executable measuring 882,716,672 bytes - about 842 MiB - raising a practical question for defenders: what happens when malicious code is packaged larger than the tools meant to inspect it?
Discord Messages, Hidden Commands: The CikaBika RAT Case Raises the Cost of Looking Normal
The malware is reportedly delivered through phishing and uses Discord for command-and-control, a combination that can blur malicious traffic into everyday online activity.
Hirudo Turns Banking App Trust Into the Weak Link
A new Android trojan reportedly works by tampering with legitimate banking apps themselves, a reminder that client-side security can collapse once the binary is no longer trustworthy.
Fake PuTTY Downloads Turn a Routine Search Into a Malware Trap
A search for a common admin tool was reportedly steered toward a counterfeit download page, with a trojanized Windows installer and an unexplained “Ethereum-powered” label raising fresh questions about delivery and persistence.
Citrix Edge Boxes, Modified Backdoors, and the Quiet Risk of Cross-Platform Control
A NetScaler intrusion story shows how a perimeter appliance can become more than a gateway when attackers pair pre-auth flaws with a repurposed remote-management toolkit.
Mac Stealer, Now a Hand-On Intruder: ICMacOS Pushes Into RAT Territory
The malware family linked to ICMacOS is being described as moving beyond credential theft into interactive access, a shift that raises the stakes for macOS defenders.
Blinder Tunnel and the Quiet Theft of Trust Inside Windows Developer Workflows
A targeted intrusion chain mixed a fake recruitment lure, .NET runtime tampering, and DLL sideloading to turn ordinary software behavior into an execution path.
GhostProfile and the Quiet Theft of Browser Trust on macOS
A reported macOS implant may be abusing browser profiles and live sessions to let an operator work inside a hidden browser window, turning ordinary login state into stealth access.
Android Phones That Arrive Already Tainted: The Firmware Trap Behind a New Malware Campaign
A reported firmware-resident threat on low-cost Android devices shows why the most dangerous malware may never pass through the app store at all.