IRONQUERY
Database Forensics Engineer
Professional Profile
Extracts hidden truth from compromised databases.
Key Skills
Database forensics; Query reconstruction; Transaction analysis; Data-exfiltration detection; SQL anomaly detection
Major Achievements
Reconstructed fraudulent transactions deleted by an insider.
Articles by IRONQUERY
When a Package Turns Predatory: The Shai-Hulud npm Wave and the Collapse of Build Trust
A large-scale supply-chain incident in the npm ecosystem shows how a malicious package can look ordinary when the build and publish pipeline itself has been bent out of shape.
Official Download, Unofficial Payload: How a Trusted Installer Page Became the Attack Surface
A software site’s download layer was altered to serve malware, showing how quickly a single web trust break can turn a routine installer into a security incident.
Fake Installers, Real Risk: macOS Users Are Being Steered Through Ads and AI Chat Links
A reported malvertising chain uses Google Ads and shared Claude chats to steer users toward a MacSync malware variant by making a fake developer-tool guide look routine.
Google Ads and Claude Chats Turned Into a Malware Funnel for Mac Users
A malvertising campaign is abusing sponsored search results and shared Claude.ai chats to push macOS malware through ordinary web trust.
When Air Gaps Start Talking: The Strange Physics Behind ODINI
A reported malware concept called ODINI highlights a uncomfortable truth: once code lands on an isolated machine, even tiny magnetic emissions may become a covert path out.
How a Weaponized JPEG Became a Delivery Mechanism for Trojanized ScreenConnect
A benign-looking image file, a Windows PowerShell chain, and a repackaged remote-access tool form a reminder that the most dangerous payloads often arrive wearing ordinary file names.
How a Support Channel Became a Trust-Breaking Tool for Signed Malware
public information says DigiCert revoked 60 code-signing certificates after a support-path incident linked to malware signing, underscoring how trust can be abused far from the build server.
When a Familiar Installer Turns Hostile, the Trust Chain Is Already Burning
public information says JDownloader confirmed a short-lived breach in which official download links were manipulated, a reminder that software risk often starts before the first line of code runs.