Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: TigerJack Hackers Use Malicious VSCode Extensions for Real-Time Code Theft and Cryptojacking on OpenVSX
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 16 Oct 2025 08:22:40 +0000
════════════════════════
⌗ Tags: #Malware #Backdoor #Code Theft #CoinIMP #Cryptojacking #Extension Supply Chain #OpenVSX #TigerJack #VSCode
Penetration Testing Tools
TigerJack Hackers Use Malicious VSCode Extensions for Real-Time Code Theft and Cryptojacking on OpenVSX
The TigerJack group is attacking developers via malicious VSCode extensions on OpenVSX. Plugins secretly steal C++ source code in real-time and deploy the CoinIMP cryptojacker.
10 views
Daily Writeups
⤷ Title: North Korea’s Famous Chollima APT Uses Trojanized Node.js App to Deploy OtterCookie RAT for Crypto Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Oct 2025 00:30:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #BeaverTail #Cryptojacking #Espionage #Famous Chollima #Node.js #North Korea APT #OtterCookie #Supply Chain
Daily CyberSecurity
North Korea’s Famous Chollima APT Uses Trojanized Node.js App to Deploy OtterCookie RAT for Crypto Theft
A new report from Cisco Talos has exposed a malware campaign linked to Famous Chollima, a North Korean threat group aligned with the Lazarus APT and known for its long-running job-themed espionage…
13 views
Daily Writeups
⤷ Title: GhostGrab Android Malware Combines Covert Monero Mining with Financial Credential Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 00:11:57 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Banking Trojan #Cryptojacking #Firebase C2 #GhostGrab #Hybrid Threat #Monero mining #OTP Interception
Daily CyberSecurity
GhostGrab Android Malware Combines Covert Monero Mining with Financial Credential Theft
GhostGrab is a hybrid Android malware that steals banking credentials and OTPs via phishing WebView overlays while secretly running a Monero miner in the background to monetize the victim's device.
18 views
Daily Writeups
⤷ Title: Understanding Cryptojacking — How Hackers Steal Your Computing Power
════════════════════════
𐀪 Author: Afnan K
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 19:11:59 GMT
════════════════════════
⌗ Tags: #cryptocurrency #cryptojacking #mining #malware #hacking
Medium
Understanding Cryptojacking — How Hackers Steal Your Computing Power
Have you ever thought about why hackers needs to infect malware to your computer even though there is nothing could be done, why would…
19 views
Daily Writeups
⤷ Title: Understanding Cryptojacking — How Hackers Steal Your Computing Power
════════════════════════
𐀪 Author: Kerala Blockchain Academy
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 04:25:25 GMT
════════════════════════
⌗ Tags: #mining #cryptocurrency #malware #hacking #cryptojacking
Medium
Understanding Cryptojacking — How Hackers Steal Your Computing Power
Afnan K, Blockchain Student, Digital University Kerala
14 views
Daily Writeups
⤷ Title: ShadowRay 2.0: AI Orchestration Framework Ray Hacked for Autonomous Cryptojacking
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 10:14:07 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #AI Cluster #Cryptojacking #CVE_2023_48022 #cybersecurity #GPU Mining #misconfiguration #Ray Framework #RCE #ShadowRay
Penetration Testing Tools
ShadowRay 2.0: AI Orchestration Framework Ray Hacked for Autonomous Cryptojacking
The ShadowRay 2.0 campaign exploits the unauthenticated Ray Jobs API (CVE-2023-48022) in over 200,000 exposed instances to deploy a self-propagating cryptomining botnet.
116 views
Daily Writeups
⤷ Title: Locked Out of the Cloud: Hackers Use AWS Termination Protection to Hijack ECS for Unstoppable Crypto Mining
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:42:31 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Amazon ECS #Amazon GuardDuty #AWS #AWS Lambda #Cloud Security #Cryptojacking #EC2 #IAM Security #persistence #Termination Protection
Daily CyberSecurity
Locked Out of the Cloud: Hackers Use AWS Termination Protection to Hijack ECS for Unstoppable Crypto Mining
Hackers are weaponizing AWS termination protection to lock defenders out while they mine crypto on hijacked ECS/EC2 resources using a malicious Docker image.
15 views
Daily Writeups
⤷ Title: New Mirai Variant and “Monaco” Miner Targeting Linux Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Mar 2026 13:00:39 +0000
════════════════════════
⌗ Tags: #Malware #botnet #CondiBot #Cryptojacking #cybersecurity #ddos #Eclypsium #infosec #IoT security #Linux Malware #Monaco Cryptominer
Daily CyberSecurity
New Mirai Variant and "Monaco" Miner Targeting Linux Devices
Eclypsium uncovers two new Linux malware strains: a CondiBot DDoS variant and the Monaco SSH cryptominer targeting servers and IoT. Secure your network.
43 views
Daily Writeups
⤷ Title: Shattering the Myth of the “Serene Harbor”: Trojans and Info-Stealers Now Dominate macOS
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 08:23:16 +0000
════════════════════════
⌗ Tags: #Malware #Apple Security #Cryptojacking #Cybersecurity 2026 #enterprise security #Information Stealer #Jamf 2026 #Mac malware #macOS Security #trojan #zero_day
Penetration Testing Tools
Shattering the Myth of the "Serene Harbor": Trojans and Info-Stealers Now Dominate macOS
Apple computers have long since ceased to be a “serene harbor,” a reality underscored by the latest findings
14 views
Daily Writeups
⤷ Title: The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 20 May 2026 07:42:37 +0000
════════════════════════
⌗ Tags: #Malware #.NET Resource Obfuscation #Chromium Identity Theft #Code Virtualization Bytecode #Cookie Protection Bypass #Cryptojacking Clipboard Hijacker #Gremlin Stealer Malware #Unit 42 Palo Alto Networks #WebSocket Session Hijacking #XOR Encoded Payload #Zero Detection C2 Infrastructure
Information Security News
The Zero-Detection Shadow: Unit 42 Exposes Advanced Gremlin Stealer Hijacking Live Browser WebSockets - Information Security News
The exfiltration of administrative credentials and volatile session tokens increasingly manifests not as a rudimentary brute-force incursion, but as a meticulously obfuscated mechanism engineered to maintain absolute silence until the definitive moment of…
11 views