Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Dutch Police Seize 250 Servers: Massive Shadow Hosting Operation Shut Down
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 10:04:05 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Anonymous Hosting #BOTNET #cybercrime #Digital Crime #Netherlands #police operation #ransomware #Shadow Hosting #Takedown
Penetration Testing Tools
Dutch Police Seize 250 Servers: Massive Shadow Hosting Operation Shut Down
A major police operation in the Netherlands seized 250 servers, successfully shutting down a massive, anonymous "shadow hosting" provider used for ransomware and botnet attacks.
29 views
Daily Writeups
⤷ Title: SHADOW-VOID-042 Impersonates Trend Micro in Phishing Campaign to Breach Critical Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 00:38:38 +0000
════════════════════════
⌗ Tags: #Cyber Security #Critical Infrastructure #Impersonation #phishing #RomCom #SHADOW_VOID_042 #spear_phishing #Trend Micro #Void Rabisu
Daily CyberSecurity
SHADOW-VOID-042 Impersonates Trend Micro in Phishing Campaign to Breach Critical Infrastructure
SHADOW-VOID-042 impersonated Trend Micro via fake security advisories to breach defense, energy, and chemical firms. Tactics align with Void Rabisu (ROMCOM), using HR lures and targeted exploits.
14 views
Daily Writeups
⤷ Title: SHADOW#REACTOR Malware Builds Remcos RAT via Text Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:27:15 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #Fileless Malware #living_off_the_land #Malware Analysis #MSBuild #powershell #Remcos RAT #Securonix #SHADOW#REACTOR #Text_Based Payload
Daily CyberSecurity
SHADOW#REACTOR Malware Builds Remcos RAT via Text Files
Securonix reveals SHADOW#REACTOR: A stealthy framework using "text-only" fragments to deploy Remcos RAT in memory via MSBuild. Avoids disk detection.
26 views
Daily Writeups
⤷ Title: Shadows in the RAM: The SHADOW#REACTOR Campaign Unleashes Remcos RAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:09:03 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reactor #Cyber Security #Fileless Attack #LOLBins #Malware 2026 #MSBuild #PowerShell #Remcos RAT #Securonix #SHADOW#REACTOR #threat intelligence
Penetration Testing Tools
Shadows in the RAM: The SHADOW#REACTOR Campaign Unleashes Remcos RAT
Adversaries have orchestrated a sophisticated campaign utilizing a multi-stage infection vector to deploy the Remcos RAT, a remote
20 views
Daily Writeups
⤷ Title: Shadow AI and API Vulnerabilities: The Invisible Wound of Modern Enterprises
════════════════════════
𐀪 Author: Emir Yusuf Nural
════════════════════════
ⴵ Time: Sun, 18 Jan 2026 15:02:30 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_development #api_security #cloud_security #shadow_ai
Medium
Shadow AI and API Vulnerabilities: The Invisible Wound of Modern Enterprises
In 2026, the greatest threat to your company’s data isn’t just a hooded hacker in a dark room; it’s often an enthusiastic employee trying…
42 views
Daily Writeups
⤷ Title: Shadow Bankers of the Blockchain: The $16B Rise of Chinese Crypto-Laundering
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 29 Jan 2026 04:09:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Black U #Blockchain Forensics #Chainalysis #cryptocurrency #cybercrime #Huione #InfoSec 2026 #Money Laundering #Shadow Banking #USDT #Xinbi
Penetration Testing Tools
Shadow Bankers of the Blockchain: The $16B Rise of Chinese Crypto-Laundering
The cryptocurrency realm has imperceptibly acquired new “shadow bankers,” with a substantial portion of illicit digital assets now
11 views
Daily Writeups
⤷ Title: Shadows Vanish: The “Global Man” Exit Scam Leaves Malware Operators in the Dark
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:34:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #code_signing certificates #cybercrime forums #digital certificates #EV Certificates #Exit Scam #Global Man #kernel_mode drivers #malware obfuscation #security breach 2026 #Shadow Economy #threat intelligence
Penetration Testing Tools
Shadows Vanish: The "Global Man" Exit Scam Leaves Malware Operators in the Dark
In the clandestine digital underworld, a prominent purveyor of code-signing certificates has executed a high-profile disappearance. The Global
18 views
Daily Writeups
⤷ Title: The Attribution Dilemma: Inside Palo Alto Networks’ “Shadow Operations” Report and the Unnamed Giant
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 16:06:26 +0000
════════════════════════
⌗ Tags: #Cyber Security #attribution #China cyber threat #Cyber Espionage #global infrastructure security #National Security #Palo Alto Networks #Shadow Operations #State_Sponsored Hacking #Tech News 2026 #TGR_STA_1030 #Unit 42
Penetration Testing Tools
The Attribution Dilemma: Inside Palo Alto Networks’ "Shadow Operations" Report and the Unnamed Giant
Palo Alto Networks has conspicuously tempered the rhetoric within its latest dossier regarding an extensive cyber-espionage campaign, eschewing
20 views
Daily Writeups
⤷ Title: Cybersecurity Awareness: The Shadow AI Crisis Bleeding Your Data Through Invisible APIs
════════════════════════
𐀪 Author: Eugenia | Cybersecurity Awareness
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 17:22:50 GMT
════════════════════════
⌗ Tags: #shadow_ai #generative_ai_risks #infosec #cyber_security_awareness #threat_intelligence
Medium
Cybersecurity Awareness: The Shadow AI Crisis Bleeding Your Data Through Invisible APIs
The cybersecurity threat you can’t see is the one destroying you from within.
❤1
35 views
Daily Writeups
⤷ Title: Vacuum of Power: The Rise of AuraStealer Amidst the 2026 Infostealer Dominance Struggle
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 07:38:07 +0000
════════════════════════
⌗ Tags: #Malware #.cfd domains #AuraStealer #C2 Infrastructure #Credential Theft #Cybersecurity 2026 #Infostealer #Intrinsec #Lumma Stealer #Malware_as_a_Service #Shadow Economy #threat intelligence
Penetration Testing Tools
Vacuum of Power: The Rise of AuraStealer Amidst the 2026 Infostealer Dominance Struggle
Following the dismantling of the Lumma Stealer infrastructure in 2025, the landscape of data-stealing malicious software began to
17 views
Daily Writeups
⤷ Title: CVE-2026-0866: Malformed ZIP Headers Allow Malware to Slip Past EDR Scanners
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 02:15:34 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Antivirus Evasion #CVE_2026_0866 #cybersecurity #EDR Bypass #False Negatives #infosec #Malware Analysis #Shadow Archives #threat intelligence #ZIP Metadata
Daily CyberSecurity
CVE-2026-0866: Malformed ZIP Headers Allow Malware to Slip Past EDR Scanners
Discover how attackers use shadow archives (CVE-2026-0866) to bypass AV and EDR by malforming ZIP metadata, keeping malware hidden but executable.
15 views
Daily Writeups
⤷ Title: Beyond Stuxnet: Uncovering fast16, the Apex Saboteur That Rewrites Mathematical Reality
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 08:27:58 +0000
════════════════════════
⌗ Tags: #Malware #Advanced Persistent Threats #APT #Cyber Sabotage #fast16 #High_Precision Computing #infosec #Lua VM #Malware History #SentinelLABS #Shadow Brokers #Stuxnet
Daily CyberSecurity
Beyond Stuxnet: Uncovering fast16, the Apex Saboteur That Rewrites Mathematical Reality
SentinelLABS reveals fast16, a 2005 framework that predates Stuxnet. It sabotages high-precision calculations in nuclear research by patching math in memory.
32 views
Daily Writeups
⤷ Title: Digital Scorched Earth: The “Lotus Wiper” Attack Paralyzing Venezuela’s Energy Grid
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:56:15 +0000
════════════════════════
⌗ Tags: #Malware #2026 Security Threats #cyber warfare #Destructive Malware #Energy Sector #Infrastructure Security #Kaspersky Lab #Lotus Wiper #Master File Table #Shadow Copies #Venezuela
Penetration Testing Tools
Digital Scorched Earth: The "Lotus Wiper" Attack Paralyzing Venezuela’s Energy Grid
A sophisticated destructive malware, designated as Lotus Wiper, has been identified within Venezuela, specifically targeting the energy and
14 views
Daily Writeups
⤷ Title: The N-Day Nightmare: How SHADOW-EARTH-053 Breaches Governments Using “Old” Exploits
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:02:51 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #Asia Cybersecurity #China_Aligned APT #Cyberespionage #DLL Sideloading #Godzilla #GodZilla Web Shell #NATO Security #ProxyLogon #SHADOW_EARTH_053 #ShadowPad #TrendAI Research #Web Shell
Daily CyberSecurity
The N-Day Nightmare: How SHADOW-EARTH-053 Breaches Governments Using "Old" Exploits
SHADOW-EARTH-053 is breaching governments and NATO using old ProxyLogon flaws and ShadowPad. Learn how this China-aligned group stays hidden via registry loading.
14 views
Daily Writeups
⤷ Title: Agentic AI is Automating Live Intrusions in Latin America
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 07:02:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Agentic AI #AI Cyber Attacks #Anthropic Claude #infosec #Jailbreaking #Malware Analysis #SHADOW_AETHER_040 #SHADOW_AETHER_064 #threat intelligence #TrendAI Research #Vibe Coding
Daily CyberSecurity
Agentic AI is Automating Live Intrusions in Latin America
TrendAI exposes SHADOW-AETHER: threat groups using agentic AI to "vibe code" custom backdoors and automate intrusions across government and financial sectors.
17 views
Daily Writeups
⤷ Title: In-Memory Financial Theft: Inside Banana RAT’s Operator-Driven Attacks on Brazilian Banks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 06:47:33 +0000
════════════════════════
⌗ Tags: #Malware #Banana RAT #Banking Trojan #Cyber Security #Fileless Execution #In_Memory Exploit #infosec #Malware_as_a_Service #Pix_QR Interception #Powershell obfuscation #SHADOW_WATER_063 #TrendAI Counter Threat Unit
Daily CyberSecurity
In-Memory Financial Theft: Inside Banana RAT’s Operator-Driven Attacks on Brazilian Banks
TrendAI exposes Banana RAT, a fileless banking trojan by SHADOW-WATER-063 that uses in-memory execution and fake UI overlays to hijack Pix-QR transfers.
26 views
Daily Writeups
⤷ Title: Your Employees Are Shipping Software You Can’t See
════════════════════════
𐀪 Author: Saint Zero Day
════════════════════════
ⴵ Time: Sat, 30 May 2026 05:44:47 GMT
════════════════════════
⌗ Tags: #software_engineering #shadow_it #infosec #startup #cybersecurity
Medium
Your Employees Are Shipping Software You Can’t See
On “Shadow Builders,” the new shape of shadow IT, and what it taught me about building a security company in public.
15 views