Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: ClickFix Attacks Skyrocket 517%: New “FileFix” Tactic Emerges to Deploy Stealthy Malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 02:40:48 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ClickFix #cybersecurity #ESET #File Explorer #FileFix #malware #phishing #PowerShell #Social Engineering #Windows Run
Penetration Testing Tools
ClickFix Attacks Skyrocket 517%: New "FileFix" Tactic Emerges to Deploy Stealthy Malware
ClickFix attacks surged 517% in a year, tricking users into executing malicious code. A new "FileFix" tactic exploits Windows File Explorer for stealthy malware delivery.
18 views
Daily Writeups
⤷ Title: NFC Fraud Explodes 35x: New Attacks Hijack Contactless Payments via NFCGate Malware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 07:00:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android #Contactless Payment #cyberattack #cybersecurity #ESET #Fraud #Ghost Tap #malware #NFC #NFCGate #NGate #phishing #Social Engineering
Penetration Testing Tools
NFC Fraud Explodes 35x: New Attacks Hijack Contactless Payments via NFCGate Malware
NFC fraud surged 35-fold in H1 2025. ESET reports new attacks exploiting NFCGate malware, using phishing and PWAs to steal card data and conduct unauthorized contactless payments.
50 views
Daily Writeups
⤷ Title: AsyncRAT’s Dark Evolution: How Open-Source Code Fuels a Growing Malware Empire
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 17 Jul 2025 02:53:36 +0000
════════════════════════
⌗ Tags: #Malware #AsyncRAT #C++ #cybercrime #cybersecurity #ESET #malware #open source #RAT #Remote Access Trojan #threat analysis
Penetration Testing Tools
AsyncRAT's Dark Evolution: How Open-Source Code Fuels a Growing Malware Empire
ESET reveals how AsyncRAT, an open-source C# RAT, has spawned dozens of sophisticated malware forks like DCRat and Venom RAT, fueling a dangerous cybercrime ecosystem.
21 views
Daily Writeups
⤷ Title: Análisis del ESET Security Report 2025 | ¿Cuál es el estado actual de la ciberseguridad en…
════════════════════════
𐀪 Author: Tiziano Mass
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 19:20:51 GMT
════════════════════════
⌗ Tags: #information_security #security_report #eset #cybersecurity #ciberseguridad
Medium
Análisis del ESET Security Report 2025 | ¿Cuál es el estado actual de la ciberseguridad en Latinoamérica?
La reconocida empresa de seguridad ESET divulgó su reporte anual sobre el panorama del estado actual de la ciberseguridad corporativa en…
8 views
Daily Writeups
⤷ Title: WinRAR Zero-Day CVE-2025-8088 Exploited to Spread RomCom Malware
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 09 Aug 2025 14:46:10 +0000
════════════════════════
⌗ Tags: #Security #0day #Cyber Attack #Cybersecurity #eset #Malware #RomCom #Russia #Vulnerability #WinRAR
Hackread
WinRAR Zero-Day CVE-2025-8088 Exploited to Spread RomCom Malware
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
45 views
Daily Writeups
⤷ Title: Hackers Exploited a New WinRAR Flaw Before It Was Patched
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 11 Aug 2025 08:31:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #ESET #malware #phishing #RomCom #vulnerability #Winrar
Penetration Testing Tools
Hackers Exploited a New WinRAR Flaw Before It Was Patched
A new WinRAR vulnerability (CVE-2025-8088) was exploited in the wild by the RomCom group before a patch was available. Users are urged to update to v7.13.
14 views
Daily Writeups
⤷ Title: WinRAR Zero-Day (CVE-2025-8088) Exploited by RomCom Hackers, ESET Warns
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 13 Aug 2025 07:47:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_8088 #Cyber Espionage #cybersecurity #ESET #malware #path traversal #RomCom #Winrar #zero_day
Penetration Testing Tools
WinRAR Zero-Day (CVE-2025-8088) Exploited by RomCom Hackers, ESET Warns
A new WinRAR zero-day vulnerability (CVE-2025-8088) is being exploited by the RomCom cyber-espionage group to deploy malware via malicious archives. Update to v7.13 now.
16 views
Daily Writeups
⤷ Title: HybridPetya: The New Ransomware Bypassing Secure Boot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Sep 2025 03:19:02 +0000
════════════════════════
⌗ Tags: #Malware #bootkit #cybersecurity #ESET #HybridPetya #malware #ransomware #Secure Boot
Penetration Testing Tools
HybridPetya: The New Ransomware Bypassing Secure Boot
Researchers at ESET have reported the emergence of a new ransomware strain dubbed HybridPetya, which blends techniques from
9 views
Daily Writeups
⤷ Title: Scammers Abuse WhatsApp Screen Sharing to Steal OTPs and Funds
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 13 Nov 2025 17:15:15 +0000
════════════════════════
⌗ Tags: #Scams and Fraud #Security #AnyDesk #Cybersecurity #eset #Facebook #Fraud #OTP #Privacy #Scam #TeamViewer #Vulnerability #WhatsApp
Hackread
Scammers Abuse WhatsApp Screen Sharing to Steal OTPs and Funds
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
36 views
Daily Writeups
⤷ Title: Targeting the Grid: ESET Unmasks “DynoWiper” After Destructive Strike on Polish Energy Sector
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:50:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Active Directory GPO #Critical Infrastructure #cyber sabotage #data wiper #DynoWiper #ESET research #LSASS memory dump #Poland energy sector #rsocx #Rubeus #Sandworm #Tech News 2026 #ZOV wiper
Penetration Testing Tools
Targeting the Grid: ESET Unmasks "DynoWiper" After Destructive Strike on Polish Energy Sector
ESET has disclosed the intricate technical specifications of an incursion involving a nascent data-obliteration utility designated as DynoWiper.
27 views
Daily Writeups
⤷ Title: The FakeGit Plague: How 600 Malicious GitHub Archives are Weaponizing Smart Contracts to Steal Your Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 07:02:57 +0000
════════════════════════
⌗ Tags: #Malware #Bitdefender #browser extension malware #Cyber Espionage #ESET #FakeGit #Github #LuaJIT #malware campaign 2026 #Polygon network #smart contract malware #Stealc infostealer #Tech News 2026
Penetration Testing Tools
The FakeGit Plague: How 600 Malicious GitHub Archives are Weaponizing Smart Contracts to Steal Your Data
For over a year, the sprawling, malignant campaign christened “FakeGit” has ruthlessly weaponized GitHub, utilizing it as a
18 views
Daily Writeups
⤷ Title: Echoes of Xagent: How the Sednit Collective is Weaponizing Legacy Code for 2026 Espionage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 07:12:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT28 #BeardShell #Covenant Framework #Cyber Espionage 2026 #ESET research #Fancy Bear #Filen Cloud #Icedrive C2 #Military Surveillance #Sednit #SlimAgent #threat intelligence #Xagent
Penetration Testing Tools
Echoes of Xagent: How the Sednit Collective is Weaponizing Legacy Code for 2026 Espionage
The Sednit collective, renowned for a series of high-profile cyber-espionage incursions in preceding years, has once again resurfaced,
18 views
Daily Writeups
⤷ Title: Rigged Game: How North Korea’s ScarCruft Group Infiltrated a Gaming Platform to Deploy BirdCall Spyware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:54:33 +0000
════════════════════════
⌗ Tags: #Malware #Android malware #APT37 #BirdCall #BirdCall Backdoor #Cybersecurity 2026 #ESET #North Korea #RoKRAT #ScarCruft #sqgame.net #supply chain attack #Windows Spyware #Yanbian
Penetration Testing Tools
Rigged Game: How North Korea’s ScarCruft Group Infiltrated a Gaming Platform to Deploy BirdCall Spyware
The seemingly innocuous download of a mobile game could culminate in a smartphone being compromised by sophisticated spyware.
13 views
Daily Writeups
⤷ Title: ESET MDR vs Sophos MDR: Compared Time to discover and respond to a threat
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 10:52:33 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #eset #MDR #Sophos #Threat Detec #Threat Intelligence
Hackread
ESET MDR vs Sophos MDR: Compared Time to discover and respond to a threat
A detailed ESET MDR vs Sophos MDR comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach warranties to help you choose.
28 views
Daily Writeups
⤷ Title: MDR Provider Comparison: Time to Discover and Respond to Threats
════════════════════════
𐀪 Author: Owais Sultan
════════════════════════
ⴵ Time: Sat, 20 Jun 2026 12:31:16 +0000
════════════════════════
⌗ Tags: #Security #Cybersecurity #eset #MDR #Sophos #Threat Detec #Threat Intelligence
Hackread
MDR Provider Comparison: Time to Discover and Respond to Threats
A detailed MDR provider comparison covering tiers, response speed, coverage, threat intelligence, pricing, and breach warranties to help you choose.
39 views
Daily Writeups
⤷ Title: Vendor-Signed UEFI Applications Allow Secure Boot Bypass
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 00:22:24 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #BYOVD #DBX #ESET #Firmware Security #Secure Boot #UEFI
Daily CyberSecurity
Vendor-Signed UEFI Applications Allow Secure Boot Bypass
ESET found vendor-signed UEFI applications vulnerable to a Secure Boot bypass. Attackers can run pre-boot code. Update firmware and the UEFI DBX now.
20 views