Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: BadIIS Malware Hijacks Asian Websites for SEO Fraud
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 11 Feb 2025 02:14:01 +0000
════════════════════════
⌗ Tags: #Malware #BadIIS malware
Cybersecurity News
BadIIS Malware Hijacks Asian Websites for SEO Fraud
Discover the malicious BadIIS malware campaign targeting organizations in Asia. Find out how vulnerabilities in IIS are exploited for SEO manipulation.
18 views
Daily Writeups
⤷ Title: Operation Rewrite: How a Malicious IIS Module Is Hijacking Websites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Sep 2025 03:42:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BadIIS #Cybercrime #cybersecurity #malware #Operation Rewrite #SEO Poisoning #web server
Daily CyberSecurity
Operation Rewrite: How a Malicious IIS Module Is Hijacking Websites
A new large-scale SEO poisoning campaign, "Operation Rewrite," uses the BadIIS module to hijack web servers, manipulate search results, and redirect users to scams.
12 views
Daily Writeups
⤷ Title: Operation Rewrite: Chinese Threat Actors Hijack Websites in Massive Search Poisoning Campaign
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 25 Sep 2025 07:46:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BadIIS #cybersecurity #Operation Rewrite #Palo Alto Networks #reverse proxy #Search Poisoning #SEO Poisoning #Threat Actors
Penetration Testing Tools
Operation Rewrite: Chinese Threat Actors Hijack Websites in Massive Search Poisoning Campaign
Unit 42 reveals "Operation Rewrite," a large-scale search poisoning scheme using BadIIS to hijack servers, manipulate SEO, and redirect traffic for fraud.
14 views
Daily Writeups
⤷ Title: UAT-8099: Chinese Group Uses BadIIS Malware on Compromised Servers for SEO Fraud and Credential Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Oct 2025 01:42:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BadIIS #Cisco Talos #Cobalt Strike #Credential Theft #Cybercrime #IIS #SEO Fraud #UAT_8099
Daily CyberSecurity
UAT-8099: Chinese Group Uses BadIIS Malware on Compromised Servers for SEO Fraud and Credential Theft
Cisco Talos exposed UAT-8099, a Chinese group compromising IIS servers for SEO fraud, using BadIIS malware and Cobalt Strike to steal credentials and manipulate search rankings.
20 views
Daily Writeups
⤷ Title: Cisco Talos Exposes UAT-8099: Chinese Group Uses BadIIS Malware on Compromised Servers for SEO Fraud and Credential Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Oct 2025 02:02:52 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BadIIS #Cisco Talos #Cobalt Strike #Credential Theft #cybercrime #IIS #SEO Fraud #UAT_8099
Penetration Testing Tools
Cisco Talos Exposes UAT-8099: Chinese Group Uses BadIIS Malware on Compromised Servers for SEO Fraud and Credential Theft
Cisco Talos exposed UAT-8099, a Chinese group compromising IIS servers for SEO fraud, using BadIIS malware and Cobalt Strike to steal credentials and manipulate search rankings.
11 views
Daily Writeups
⤷ Title: IIS Under Siege: UAT-8099 Deploys Region-Locked “BadIIS” & Linux Variants
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:46:23 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Asian Cyber Threat #BadIIS #Cisco Talos #cyber_espionage #GotoHTTP #IIS Security #Linux Malware #SEO Fraud #UAT_8099 #WEBJACK
Daily CyberSecurity
IIS Under Siege: UAT-8099 Deploys Region-Locked "BadIIS" & Linux Variants
Cisco Talos warns of UAT-8099 targeting Asian IIS servers with region-locked BadIIS malware. New variants now attack Linux systems.
45 views
Daily Writeups
⤷ Title: The Silent Hijack: BADIIS Malware Turns 1,800+ Servers into Illicit Websites
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:46:39 +0000
════════════════════════
⌗ Tags: #Malware #BadIIS #Cybercrime #Elastic Security Labs #Gambling Scam #IIS Server #malware #SEO Poisoning #Traffic Redirection #UAT_8099 #Windows Security
Daily CyberSecurity
The Silent Hijack: BADIIS Malware Turns 1,800+ Servers into Illicit Websites
Elastic Security Labs uncovers BADIIS malware compromising 1,800+ IIS servers. Attackers use SEO poisoning to redirect users to illicit gambling sites.
16 views
Daily Writeups
⤷ Title: Malware-as-a-Service Exposed: Cisco Talos Unmasks Developer Behind Prolific “BadIIS” Web Server Toolkit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 22 May 2026 09:01:55 +0000
════════════════════════
⌗ Tags: #Malware #BadIIS Variant #Black_Hat SEO Proxy #Cisco Talos #Content Hijacking #Cyber Security #IIS Extension #infosec #lwxat Developer #Malware_as_a_Service #PDB Metadata Leak #Traffic Redirection
Daily CyberSecurity
Malware-as-a-Service Exposed: Cisco Talos Unmasks Developer Behind Prolific "BadIIS" Web Server Toolkit
Cisco Talos exposes a commodity BadIIS variant sold as a service by dev "lwxat," featuring automated builders for traffic hijacking and reverse proxying.
28 views