IRONQUERY
Ingegnere di digital forensics su database
Profilo professionale
Estrae la verità nascosta da database compromessi.
Competenze chiave
Digital forensics su database; Ricostruzione di query; Analisi delle transazioni; Rilevamento dell'esfiltrazione di dati; Rilevamento di anomalie SQL
Risultati principali
Ricostruite transazioni fraudolente cancellate da un insider.
Articoli di IRONQUERY
The Plugin Trap: How a Helpful AI Tool Can Turn Into a Secret Stealer
A batch of JetBrains add-ons posing as AI coding assistants highlights a familiar weakness in modern development: once a plugin is trusted, it may inherit far more access than users realize.
ClickFix Turns Into a Host Takeover Chain as Potemkin and EtherRAT Enter the Picture
A user-driven lure can become a full intrusion path when attackers combine social engineering, a custom loader, and a backdoor that pulls command data from Ethereum.
When the Web Page Becomes the Payload: The ClickFix Pivot Behind "Lorem Ipsum"
A malware campaign known as Lorem Ipsum has shifted delivery methods, turning compromised WordPress sites into the first step of a social-engineering chain.
OnionDrop Loader Puts "Nation-State-Grade" Evasion Into the Commodity Malware Market
A newly named loader is being described as unusually evasive, with reports linking it to LegionLoader, CGrabber, and Vidar in a staged delivery chain.
When a Community Repository Becomes the Attack Surface
A reported hijack of more than 1,900 Arch Linux AUR packages is a reminder that package trust is only as strong as the weakest build recipe.
Public PHP Setup Page Put a Malware Backend in the Open
A leftover installation page reportedly turned a live malware distribution platform into an externally reachable administration target, showing how a basic deployment mistake can collapse operational secrecy.
When a Trusted Build Script Turns Into a Malware Delivery Chain
A suspected AUR supply-chain campaign shows how package ownership changes, install hooks, and cross-ecosystem tooling can turn developer convenience into a stealthy intrusion path.
When the AUR Becomes the Payload: A Reported Backdoor Wave Hides in Plain Sight
A reported supply-chain compromise in Arch Linux’s AUR allegedly affected more than 400 packages and included a Rust credential stealer plus an eBPF rootkit.
When a Trusted Namespace Goes Dark: The Supply-Chain Logic Behind GitHub Containment
A security roundup describing Microsoft Azure repositories being disabled alongside a suspected package compromise is a reminder that modern malware often targets trust infrastructure before it targets users.
Eleven npm Packages Turned a Routine Install into a Wallet-Theft Trap
A small cluster of malicious npm packages shows how install-time scripts can turn dependency trust into a path toward Ethereum secret theft.
When Malware Wins by Being Too Big to Handle
GoFlateLoader shows how a low-complexity loader can still scale when it is padded for scanner friction and pushed through cracked software and traffic-gated delivery paths.
Typosquatted Packages Turn Trusted Dev Tooling Into a Secret-Harvesting Path
A Solana-themed package campaign shows how npm and PyPI installs can become a delivery route for code that runs before a developer ever opens the library.
Go-Fluent, Memory-Only, and Built for Theft: Why This Loader Matters
A Go-written loader that runs payloads in memory is a reminder that cybercrime often wins through reuse, not originality.
OnyxC2 Turns Windows Tricks Into a Low-Cost Stealer Economy
Researchers describe a $250-a-month malware package built around broad application targeting and familiar Windows evasion tactics, a reminder that commodity theft is becoming more technically disciplined.
When Home IPs Become a Cloak: Why Botnets Love Residential Proxies
DNS telemetry tied to Kimwolf-related activity shows how consumer-looking proxy layers can blur the line between ordinary traffic and hostile infrastructure.
Mac Users Are Being Tricked Into Opening the Trapdoor
Weaponized DMG installers are turning a normal macOS software flow into a fast credential-theft path, with infostealers built to grab browser sessions and wallet data before defenders notice.
Fake Fixes, Real Footholds: The ClickFix Playbook Behind a New Backdoor Chain
A social-engineering lure that looks like routine troubleshooting can become the first step in a staged intrusion, with attackers aiming to plant a foothold and move laterally inside victim networks.
When a Repository Turns into a Trigger: The AI Toolchain Lesson Behind Miasma
A reported worm tied to 73 Microsoft repositories on GitHub shows how modern coding tools can turn a project open into a security event.
When a Tiny Python Hook Becomes a Supply-Chain Tripwire
A PyPI poisoning wave tied to Hades shows how a few hidden startup lines inside package releases can turn ordinary installs into silent execution paths.
Inside the Minecraft Mod Trap: How a Cheap Malware Kit Turns Playtime Into Account Theft
A subscription malware campaign tied to Minecraft mods shows how game communities can be turned into delivery channels for credential theft and privacy abuse.