Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Agenda Ransomware Evolves with NETXLOADER and SmokeLoader in Global Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:30:44 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reactor #Agenda #cyberattack #Data Theft #Loader Malware #malware #NETXLOADER #Qilin #ransomware #SmokeLoader #threat actor #threat intelligence #Trend Micro
Daily CyberSecurity
Agenda Ransomware Evolves with NETXLOADER and SmokeLoader in Global Campaigns
Agenda ransomware (Qilin) is back, now using the advanced NETXLOADER and SmokeLoader to enhance infiltration and evade detection. Targets global sectors.
9 views
Daily Writeups
⤷ Title: Matanbuchus 3.0: The Evolved Malware-as-a-Service Evading Detection & Exploiting Microsoft Teams
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 19 Jul 2025 02:03:22 +0000
════════════════════════
⌗ Tags: #Malware #Cobalt Strike #cybersecurity #Evasion #Loader #MaaS #Malware_as_a_Service #Matanbuchus #Microsoft Teams #ransomware
Penetration Testing Tools
Matanbuchus 3.0: The Evolved Malware-as-a-Service Evading Detection & Exploiting Microsoft Teams
Matanbuchus 3.0, an enhanced MaaS loader, is bypassing defenses with new C2 protocols, obfuscation, and leveraging Microsoft Teams to deploy ransomware and Cobalt Strike.
18 views
Daily Writeups
⤷ Title: Matanbuchus 3.0 Levels Up: New Stealthy Malware Loader Exploits Microsoft Teams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:31:13 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #EDR evasion #loader #MaaS #malware #Matanbuchus #Microsoft Teams #social engineering #Threat Actors
Daily CyberSecurity
Matanbuchus 3.0 Levels Up: New Stealthy Malware Loader Exploits Microsoft Teams
Matanbuchus 3.0, a new sophisticated malware loader, is using social engineering via Microsoft Teams to infiltrate enterprise systems with advanced evasion tactics.
13 views
Daily Writeups
⤷ Title: CastleLoader Unleashed: New Stealthy Malware Loader Leverages ClickFix & Fake GitHub for Widespread Infections
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 27 Jul 2025 23:28:17 +0000
════════════════════════
⌗ Tags: #Malware #CastleLoader #ClickFix #cybersecurity #Github #Infostealer #Loader #malware #phishing #RAT #threat intelligence
Penetration Testing Tools
CastleLoader Unleashed: New Stealthy Malware Loader Leverages ClickFix & Fake GitHub for Widespread Infections
CastleLoader, a sophisticated malware loader, is actively exploiting ClickFix phishing and fake GitHub repos to distribute infostealers and RATs, with a 29% infection rate.
5 views
Daily Writeups
⤷ Title: ¿Cuál me gusta más? CGOblin o gomulti_loader
════════════════════════
𐀪 Author: Lazyown Redteam
════════════════════════
ⴵ Time: Sat, 02 Aug 2025 07:54:31 GMT
════════════════════════
⌗ Tags: #loader #hacking #micro_c2 #shellcode #multiplatform
Medium
¿Cuál me gusta más? CGOblin o gomulti_loader
Elegir entre gomulti_loader y CGOblin depende del caso de uso, ya que ambos son shellcode loaders desarrollados por LazyOwn RedTeam con…
11 views
Daily Writeups
⤷ Title: IBM X-Force Exposes the Stealthy QuirkyLoader Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 21 Aug 2025 00:29:19 +0000
════════════════════════
⌗ Tags: #Malware #AOT #cybersecurity #DLL side_loading #IBM X_Force #loader #malware #phishing #QuirkyLoader
Daily CyberSecurity
IBM X-Force Exposes the Stealthy QuirkyLoader Malware
IBM X-Force has exposed QuirkyLoader, a new malware loader that uses DLL side-loading and .NET AOT compilation to deliver Agent Tesla and other threats.
14 views
Daily Writeups
⤷ Title: YiBackdoor: New Stealthy Malware Emerges as Potential Successor to IcedID and Latrodectus
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 04:08:42 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor #cybercrime #IcedID #Latrodectus #Loader #malware #Remote Access #YiBackdoor #Zscaler
Penetration Testing Tools
YiBackdoor: New Stealthy Malware Emerges as Potential Successor to IcedID and Latrodectus
Zscaler spotted YiBackdoor, a new modular malware with code overlaps with IcedID and Latrodectus. It uses a stealthy DLL injection to run commands remotely.
21 views
Daily Writeups
⤷ Title: RondoDox Botnet Unleashed: New Malware Uses ‘Exploit Shotgun’ to Target 50+ Router and IoT Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 01:59:52 +0000
════════════════════════
⌗ Tags: #Malware #botnet #Exploit Shotgun #IoT security #Loader_as_a_Service #Mirai #RondoDox #Router Vulnerability #Trend Micro
Daily CyberSecurity
RondoDox Botnet Unleashed: New Malware Uses 'Exploit Shotgun' to Target 50+ Router and IoT Flaws
Trend Micro discovered RondoDox, a new botnet leveraging 50+ exploits (including the Pwn2Own TP-Link flaw) in an "exploit shotgun" approach to compromise routers, DVRs, and IoT globally.
9 views
Daily Writeups
⤷ Title: The Invisible Threat: Caminho Loader Hides Malware in Image Pixels
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 09:06:01 +0000
════════════════════════
⌗ Tags: #Malware #Brazil #Caminho #Fileless #Loader_as_a_Service #malware #Steganography
Penetration Testing Tools
The Invisible Threat: Caminho Loader Hides Malware in Image Pixels
The Brazilian Caminho malware uses LSB steganography to hide its .NET payload inside image files, running fully in memory to evade antivirus detection.
26 views
Daily Writeups
⤷ Title: The Infinite Variant: How “Promptmorphism” Uses AI to Shatter Traditional Malware Detection
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 09:39:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Malware #Cyber Security 2026 #Gen Digital #large language models #LLM #Loader_as_a_Service #Polymorphism #Promptmorphism #Signature_Based Detection #StealC #threat intelligence #Wincir
Penetration Testing Tools
The Infinite Variant: How "Promptmorphism" Uses AI to Shatter Traditional Malware Detection
Malefactors are increasingly harnessing large language models to rapidly rewrite malicious code. This stratagem, christened “promptmorphism,” facilitates the
19 views
Daily Writeups
⤷ Title: Remcos RAT Delivered by a Steganographic Loader in Phishing Emails
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:12:01 +0000
════════════════════════
⌗ Tags: #Malware #Fileless Malware #India #K7 Security Labs #Loader_as_a_Service #phishing #Process Hollowing #Remcos RAT #steganographic loader
Daily CyberSecurity
Remcos RAT Delivered by a Steganographic Loader in Phishing Emails
A steganographic loader hides Remcos RAT inside a bitmap and runs it in memory. K7 ties the fileless campaign to India via fake GST lures.
13 views
Daily Writeups
⤷ Title: DOUBLECUP: New ClickFix Loader Drops CountLoader and DeviceManager RAT
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 11 Aug 2026 06:42:07 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #CountLoader #DeviceManager RAT #DOUBLECUP #EtherHiding #Loader_as_a_Service
Daily CyberSecurity
DOUBLECUP: New ClickFix Loader Drops CountLoader and DeviceManager RAT
At a Glance Attribute Detail Malware family DOUBLECUP (Loader-as-a-Service); payloads CountLoader 4.5p and DeviceManager RAT Threat actor Rognar, a Russian operator (confirmed by SOCRadar) Target …
14 views