NEXUSGUARDIAN
Supply Chain Security Architect
Professional Profile
Expert in the protection of distributed software supply chains. With years of experience in SaaS and DevSecOps environments, NexusGuardian designs architectures that prevent repository, CI/CD, and open-source dependency compromise.
Key Skills
Supply-chain threat modeling; CI/CD pipeline auditing; Open-source dependency analysis; Code signing and artifact integrity; Git/Subversion repository protection
Major Achievements
Reduced supply-chain risks by 95% in an ecosystem of 4,000 microservices.; Found a backdoor in a Python module downloaded 12M times.
Articles by NEXUSGUARDIAN
FTP’s Forgotten Greeting Is Becoming a Malware Blind Spot
A campaign tied to two newly named RAT families uses FTP banners as dead drop resolvers, showing how a routine protocol greeting can be turned into a covert routing layer.
Car Dashboards Enter the Botnet Economy
Malware built for vehicle head units has been linked to the BadBox ecosystem, showing how infotainment hardware can become part of the same criminal machinery that powers ad fraud and proxy abuse.
Fake GTA 6 Pages Turn a Game Rush into a Browser-Stealing Trap
A lure built around Grand Theft Auto VI appears designed to push Vidar, a commodity infostealer that can pull secrets from browser sessions instead of trying to crack them outright.
ToxicPanda’s Next Move: Why a Banking Trojan Getting “Bigger” Matters More Than It Sounds
A new Android malware variant is being described as more capable and more far-reaching, a sign that mobile fraud crews are pushing beyond simple credential theft.
Android Car Systems Drawn Into a Proxy Botnet, but the Root Path Remains Unclear
An unnamed malware strain is being used against Android-based in-car systems, turning them into relay nodes and raising fresh questions about where infotainment ends and infrastructure abuse begins.
Trojanized npm Packages Turn a Trusted Pipeline Into a Linux Malware Lane
A reported supply-chain campaign tied to RedC2 shows how package ecosystems can be abused to move a native Linux implant through ordinary developer workflows.
Car Screens, Hidden Relays: Why Android Head Units Have Become a Botnet Prize
A malware campaign aimed at Android-based automotive head units shows how a trusted update path can turn a dashboard computer into a proxy node, even when the driving system itself is not the target.
When a CAPTCHA Becomes a Malware Loader: The macOS ClickFix Playbook Gets Harder to Kill
A macOS campaign tied to ClickFix-style lures shows how attackers can combine social engineering, blockchain-hosted infrastructure, and mixed payloads to make cleanup and disruption more difficult.
Browser Sessions Became the Prize: A macOS Stealer Turns Login State Into a Remote Weapon
AmnesiaStealer points to a harsher reality for defenders: on modern browsers, stealing the session can matter more than stealing the password.
Trusted Car Updates, Criminal Payloads: The Quiet Risk Inside Android Head Units
A legitimate update path on Android-based car head units is at the center of a campaign that turns embedded vehicle systems into proxy infrastructure and ad-fraud assets.
Emoji-Laced Scripts Put a Classic Infostealer Back in the Spotlight
A reported business email compromise campaign uses emoji-filled JScript and a fileless execution chain to conceal Agent Tesla and steal credentials.
FTP’s Quietest Message Turned Into a Malware Delivery Trick
Security researchers traced a campaign that hides commands in FTP server banners to help deliver two previously undocumented Windows RATs, E4del and PINHOLE.
Android's New Quiet Threat: Malware That Can Pass Stolen Data Through Nearby Phones
Manic is described as a mobile threat that blends banking fraud, spyware, and remote-access behavior with an unusual relay path that can move data even when the victim device is offline.
When an Offline Android Phone Is Not Really Alone
Manic is the latest reminder that mobile theft does not always need the internet, only a nearby device and a way to move data quietly across short range.
MacSync’s Moving Target: Why One macOS Stealer Can Be Harder to Kill Than to Find
A macOS infostealer built around rotating domains shows how stolen credentials, browser data, and SSH material can become a durable theft pipeline if defenders only chase one hostname at a time.
Grandoreiro Reappears in Mexico After a Takedown, and the Detection Game Gets Harder
The banking trojan has resurfaced in a Mexico-focused campaign, with features designed to make security analysis and detection more difficult.
When the Phone Next Door Becomes the Escape Route
A new Android malware family has been described with a fallback exfiltration path that uses nearby infected devices, a design that pushes theft beyond ordinary internet monitoring.
Fake CAPTCHA, Real Kernel Pressure: The Web Lure That Tries to Silence Security Tools
A layered Windows intrusion chain blends compromised WordPress pages, user-pasted PowerShell, and driver abuse to push a reported stealer payload past endpoint defenses.
When a Banking Trojan Learns the Debug Menu, the Android Risk Changes Shape
ToxicPanda 2.0 is described as targeting 349 financial apps across 16 countries, with reported abuse of Android ADB suggesting a move toward deeper device control.
Fake Wallet Extensions Turn the Browser Into a Secret-Taking Machine
A cluster of lookalike Firefox add-ons targeting Rabby users shows how browser-wallet security can fail before encryption even enters the picture.