SIGNALMONK
Esperto di sicurezza wireless e RFID
Profilo professionale
SignalMonk guida le operazioni di sicurezza su Wi-Fi, BLE, RFID e IoT wireless.
Competenze chiave
Sniffing wireless; Exploitation BLE; Rilevamento del cloning RFID; Comunicazioni IoT sicure; Radio forensics
Risultati principali
Scoperto un furto aziendale tramite badge clonati.
Articoli di SIGNALMONK
NFCShare Turns Banking Logos Into a Mobile Fraud Machine
A retooled Android trojan is using fake banking apps and brand mimicry to push payment-card theft deeper into the mobile layer.
Fake Banking Updates Turn GitHub Into a Trojan Delivery Shelf
A new Android malware wave uses update-themed lures and public code hosting to disguise an unwanted app to look like routine maintenance.
Edge of the Network, Edge of Trust: BRICKSTORM Turns a Firewall Into a Foothold
A reported pfSense compromise shows how a perimeter device can become a quiet persistence point when attackers aim for infrastructure that security teams do not watch like a workstation.
Apple’s Own Automation Layer Becomes a Stealer’s Shortcut
A macOS infostealer called Reaper appears to lean on trusted scripting tools, turning a familiar utility into a path toward password and crypto theft.
Hidden Cryptominer Turns a Trusted Windows Installer Into a Risk Signal
A version-specific app test uncovered an unexpected mining payload inside a Hola Browser installer, showing how package integrity can matter as much as the code users can see.
Mac’s Trusted Tools Become the Trap in a New SHub Stealer Push
A reported macOS stealer called Reaper pairs fake app download pages with a ClickFix-style script launch, putting browser data and crypto wallets in the crosshairs.
Fake Security Tool Sites Turn Search Habits Into Malware Bait
A reported impersonation campaign is abusing the trust technical users place in familiar open-source tools, showing that the download page itself can be the attack surface.
Tax Season as a Trapdoor: TA4922’s Loader Campaign Pushes into UK and European Workflows
A suspected China-aligned cluster is using tax-, payroll-, and benefits-themed lures to deliver SilentRunLoader, a reminder that routine business emails can be weaponized before any visible breach begins.
Steam Community Comments Turned into a Hidden Command Line for WordPress Malware
A campaign first detected in July 2025 used comments on Steam Community profiles as a command-and-control channel, with researchers identifying infections across approximately 1,980 WordPress sites.
When Search and Video Became the Delivery Route for a Minecraft Malware Lure
WeedHack is being circulated through YouTube and SEO poisoning, a reminder that attackers increasingly target the way users discover downloads, not just the files themselves.
Browser Secrets in the Crosshairs: What SolyxImmortal Reveals About Modern Infostealers
A reported Python-based Windows infostealer combines browser credential theft, cookie harvesting, and Discord webhook exfiltration, showing how ordinary user data can become the fastest path to account takeover.
The Shortcut That Opens the Door: How a Fake Update Can Lead to PlugX
A Windows shortcut, a scripting shell, and a trusted binary can be chained into a stealthy route for remote access malware.
Python Stealer Pushes Browser Loot Through Discord Webhooks
SolyxImmortal shows how a Windows infostealer can turn saved browser data, live keystrokes, and a commodity webhook into a compact theft pipeline.
Scoped, Not Safe: How a Trusted npm Namespace Turned Into a Secret-Theft Risk
A package event tied to the @redhat-cloud-services namespace shows why a familiar registry name can be a delivery channel for malicious code, not a guarantee of integrity.
When a Note App Turns Into a Windows Backdoor
PHANTOMPULSE shows how a trusted plugin ecosystem, a UAC bypass, and blockchain-based tasking can combine into a stealthy Windows intrusion path.
ZIP Attachments, Silent Agents, and the New Face of Spearphishing
A targeted email lure can still open the door to a modern C2 framework, and the AZUREVEIL case shows why attachment hygiene and cloud-aware detection now matter together.
Fake Update Traps Turn Streaming Clicks Into Malware Deliveries
A deceptive player-update prompt on illicit or compromised streaming pages can turn a routine video click into a launchpad for miners, RATs, and other unwanted payloads.
Two Malwares, One Playbook: How Windows and Android Are Being Tricked Into Trusting the Wrong Traffic
Grandoreiro and BTMOB show how phishing, DLL side-loading, and abused mobile permissions are turning ordinary software behavior into a hiding place for bank theft and device takeover.
Inside the Dutch Botnet Bust: 200 Servers Gone, a Hidden Machine Exposed
A large infrastructure seizure has disrupted a malware botnet reported to span 17 million infected devices, showing why taking down the control layer matters as much as cleaning endpoints.
BTMOB Turns Android Trust Into a Remote-Control Problem
A phishing-delivered Android threat is being described as capable of stealing money, pulling data off the device, and handing an operator remote access - a reminder that one bad install can become a full mobile compromise.