Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The ToolShell Threat Escalates: New 4L4MD4R Ransomware Joins China-Linked APTs in SharePoint Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 Aug 2025 02:30:19 +0000
════════════════════════
⌗ Tags: #Malware #Vulnerability #4L4MD4R #China_Linked APTs #CVE_2025_49704 #CVE_2025_49706 #cybersecurity #exploitation #Microsoft #ransomware #SharePoint #ToolShell
Penetration Testing Tools
The ToolShell Threat Escalates: New 4L4MD4R Ransomware Joins China-Linked APTs in SharePoint Attacks
A new ransomware strain, 4L4MD4R, is now exploiting the ToolShell SharePoint vulnerability chain, which is already being used by China-linked APTs to compromise hundreds of organizations globally.
23 views
Daily Writeups
⤷ Title: PassiveNeuron APT: New Espionage Campaign Targets Global Windows Servers
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 25 Oct 2025 06:46:49 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT #China_linked #Cyberespionage #malware #PassiveNeuron #Windows Server
Penetration Testing Tools
PassiveNeuron APT: New Espionage Campaign Targets Global Windows Servers
Kaspersky details PassiveNeuron, a sophisticated espionage campaign targeting government and financial servers across Asia, Africa, and Latin America.
9 views
Daily Writeups
⤷ Title: ToolShell Exploit: China-Linked Hackers Target Global Critical Infrastructure
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 27 Oct 2025 09:36:34 +0000
════════════════════════
⌗ Tags: #Vulnerability #APT #China_linked #Critical Infrastructure #RCE #SharePoint #ToolShell
Penetration Testing Tools
ToolShell Exploit: China-Linked Hackers Target Global Critical Infrastructure
Hackers exploited the ToolShell SharePoint RCE flaw (CVE-2025-53770) to deploy Zingdoor and ShadowPad in attacks on global telecom and government targets.
13 views
Daily Writeups
⤷ Title: Nuclear Threat: Hackers Breach US Weapons Component Maker via SharePoint Zero-Days
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 28 Oct 2025 08:30:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Vulnerability #APT #China_linked #KCNSC #Nuclear Security #SharePoint RCE #zero_day
Penetration Testing Tools
Nuclear Threat: Hackers Breach US Weapons Component Maker via SharePoint Zero-Days
Government-backed hackers breached a US nuclear component manufacturer (KCNSC) using unpatched SharePoint RCE flaws, accessing sensitive IT and financial data.
15 views
Daily Writeups
⤷ Title: “Tax Compliance” Trap: Hackers Mimic Indian Income Tax Department to Deploy China-Linked Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 02:31:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #China_linked #cyber_espionage #financial fraud #Income Tax Department #India #malware #phishing #rat #Seqrite Labs #social engineering
Daily CyberSecurity
“Tax Compliance” Trap: Hackers Mimic Indian Income Tax Department to Deploy China-Linked Malware
As tax filing season discussions linger, a new and sophisticated phishing campaign is targeting Indian businesses by weaponizing the fear of non-compliance. A new analysis by SEQRITE Labs’ APT Tea…
21 views
Daily Writeups
⤷ Title: “Silver Fox” Unmasked: Chinese APT Group Impersonates Indian Tax Officials in Targeted Cyber Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Dec 2025 00:12:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Attribution Accuracy #China_linked #CloudSEK #cyber_espionage #DLL hijacking #Income Tax Phishing #India #Process Hollowing #Silver Fox APT #threat intelligence #Valley RAT
Daily CyberSecurity
“Silver Fox” Unmasked: Chinese APT Group Impersonates Indian Tax Officials in Targeted Cyber Campaign
As tax season approaches, a sophisticated cyber-espionage campaign is targeting Indian organizations with highly convincing phishing lures. While initially mistaken for a familiar adversary, a new…
21 views
Daily Writeups
⤷ Title: The Spreadsheet Spy: How a Decadelong Chinese Espionage Campaign Hijacked Google Sheets to Bypass Global Defenses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 26 Feb 2026 09:15:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #China_linked APT #Cyber Espionage 2026 #Google Sheets C2 #Google Threat Intelligence #GRIDTIDE #Mandiant #Salt Typhoon #SoftEther VPN #telecommunications espionage #UNC2814 #xapt malware
Penetration Testing Tools
The Spreadsheet Spy: How a Decadelong Chinese Espionage Campaign Hijacked Google Sheets to Bypass Global Defenses
An international cyber-espionage campaign that languished in the shadows for a decade has abruptly surfaced across dozens of
21 views