Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Hired to Hack: North Korean Fake IT Workers Hijack Exec Identities in ‘Contagious Interview’ Scams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 00:18:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #Cyber Security #Fake IT Workers #GitLab Threat Intelligence #identity theft #infosec #Insider Threat #North Korean IT workers #Remote Work Security #social engineering
Daily CyberSecurity
Hired to Hack: North Korean Fake IT Workers Hijack Exec Identities in 'Contagious Interview' Scams
GitLab reveals how North Korean fake IT workers use 'Contagious Interview' scams to bypass hiring, steal data, and hijack executive digital identities.
15 views
Daily Writeups
⤷ Title: North Korean “StegaBin” Campaign Targets Developers with Steganographic Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 02:53:18 +0000
════════════════════════
⌗ Tags: #Malware #Contagious Interview #Famous Chollima #infosec #Lazarus Group #npm Security #pastebin #Socket #StegaBin #steganography #supply chain attack #truffleHog
Daily CyberSecurity
North Korean "StegaBin" Campaign Targets Developers with Steganographic Malware
Socket uncovers "StegaBin," a North Korean malware campaign hiding C2 URLs in Pastebin essays to steal developer secrets via 26 typosquatted npm packages.
18 views
Daily Writeups
⤷ Title: The ‘Contagious Interview’ Trap: How a Web3 CEO Unmasked North Korean Stealth Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:07:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #cybersecurity #infosec #Kill Switch #LinkedIn Phishing #Malware Analysis #North Korean malware #social engineering #threat intelligence #Web3 security
Daily CyberSecurity
The 'Contagious Interview' Trap: How a Web3 CEO Unmasked North Korean Stealth Malware
A fake LinkedIn recruiter and a poisoned GitHub repo: See how a CEO uncovered the North Korean "Contagious Interview" malware targeting Web3 developers.
16 views
Daily Writeups
⤷ Title: The Fake Job Trap: Microsoft Exposes the ‘Contagious Interview’ Campaign Targeting Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 03:19:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #cybersecurity #developer security #DevSecOps #infosec #Invisible Ferret #Microsoft Defender Experts #OtterCookie #phishing #social engineering
Daily CyberSecurity
The Fake Job Trap: Microsoft Exposes the 'Contagious Interview' Campaign Targeting Developers
Microsoft exposes the "Contagious Interview" campaign. Fake recruiters trick developers into installing Invisible Ferret malware during coding tests.
12 views
Daily Writeups
⤷ Title: The Gemini Trap: How a Fake AI Token Checker Stealthily Hijacks Developer Workstations
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 07 Apr 2026 07:52:30 +0000
════════════════════════
⌗ Tags: #Malware #Anthropic #Contagious Interview #Cursor AI #Cybersecurity 2026 #Developer Security #gemini_ai_checker #North Korea #NPM Malware #OtterCookie #supply chain attack #Windsurf
Penetration Testing Tools
The Gemini Trap: How a Fake AI Token Checker Stealthily Hijacks Developer Workstations
An ostensibly innocuous package for validating Google Gemini tokens manifested within the npm repository, yet beneath its rudimentary
10 views
Daily Writeups
⤷ Title: The 1,700-Package Blitz: North Korea’s “Contagious Interview” Infiltrates Every Major Dev Registry
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:12:15 +0000
════════════════════════
⌗ Tags: #Malware #Contagious Interview #cybersecurity #go #infosec #Malicious packages #malware loader #North Korea #npm #php #PyPI #Rust #Socket #supply chain attack
Daily CyberSecurity
The 1,700-Package Blitz: North Korea’s "Contagious Interview" Infiltrates Every Major Dev Registry
North Korea’s "Contagious Interview" campaign expands to 1,700+ malicious packages across npm, PyPI, and more. Learn how to protect your dev environment.
16 views
Daily Writeups
⤷ Title: North Korean Hackers Pivot to AI: New npm Malware Targets Cursor, Claude, and Gemini Tokens
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 02:00:41 +0000
════════════════════════
⌗ Tags: #Malware #AI Tools #API Key Theft #Claude Code #Contagious Interview #Cursor AI #Cyberespionage #developer security #infosec #North Korea #npm malware #OtterCookie #WindSurf
Daily CyberSecurity
North Korean Hackers Pivot to AI: New npm Malware Targets Cursor, Claude, and Gemini Tokens
North Korean hackers are now targeting AI tools like Cursor and Claude. The OtterCookie malware steals API keys and conversation logs. Is your dev environment safe?
28 views
Daily Writeups
⤷ Title: PolinRider Supply Chain Attack Spans npm, Go, Chrome
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 06 Jul 2026 08:38:34 +0000
════════════════════════
⌗ Tags: #Malware #Contagious Interview #Famous Chollima #Go Modules Security #North Korea Hackers #NPM Malware #PolinRider #supply chain attack
Information Security News
PolinRider Supply Chain Attack Spans npm, Go, Chrome
PolinRider is no longer a story about a handful of malicious npm packages. Researchers at Socket uncovered 162 malicious release artifacts spread across 108 packages and browser extensions. The ca…
17 views
Daily Writeups
⤷ Title: North Korea-Linked PolinRider Supply Chain Attack Expands Across Open Source
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 09 Jul 2026 07:53:40 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #DEV#POPPER #Famous Chollima #North Korean hackers #npm #Packagist #PolinRider #Socket #supply chain attack
Daily CyberSecurity
North Korea-Linked PolinRider Supply Chain Attack Expands Across Open Source
At a Glance Actor / group Suspected North Korean actors in the Contagious Interview / Famous Chollima cluster (Socket assessment) Activity type Open-source supply chain campaign; hidden JavaScript…
14 views
Daily Writeups
⤷ Title: North Korean Contagious Interview Campaign Hides Malware in Fake Coding Tests
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 24 Jul 2026 07:15:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #developer targeting #DPRK #Elastic Security Labs #Infostealer #North Korea #OtterCookie #SVG steganography
Daily CyberSecurity
North Korean Contagious Interview Campaign Hides Malware in Fake Coding Tests
At a glance Actor / group DPRK-aligned group behind the Contagious Interview campaign (Elastic tracks it as REF9403) Activity type Social-engineering job lures delivering trojanized coding project…
12 views
Daily Writeups
⤷ Title: macOS ClickFix EtherHiding: DPRK Backdoor Hides C2 in Ethereum Smart Contracts
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Tue, 04 Aug 2026 13:11:00 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Contagious Interview #Crypto_Stealer #DPRK #EtherHiding #macOS Malware #Node.js Backdoor #UNC5342
Information Security News
macOS ClickFix EtherHiding: DPRK Backdoor Hides C2 in Ethereum Smart Contracts
A routine internet search can culminate in a full macOS compromise – one in which a counterfeit system update prompt manipulates the user into executing a malicious command themselves, and t…
7 views