Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: Fake LinkedIn Interview Used by Lazarus Hackers to Target AllSecure CEO
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 12:37:36 +0000
════════════════════════
⌗ Tags: #Security #Cyber Crime #Malware #Scams and Fraud #AllSecurity #BeaverTail #CChris Papathanasiou #Cyber Attack #Cybersecurity #Lazarus #LinkedIn #North Korea
Hackread
Fake LinkedIn Interview Used by Lazarus Hackers to Target AllSecure CEO
Follow us on all major social media platforms @Hackread
29 views
Daily Writeups
⤷ Title: North Korean Hackers Abuse GitHub to Spy on South Korean Firms
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 17:05:23 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Attack #Cybersecurity #FortiGuard #GitHub #Lazarus #North Korea #PowerShell #South Korea #Windows
Hackread
North Korean Hackers Abuse GitHub to Spy on South Korean Firms
North Korean hackers target South Korean companies using GitHub, LNK shortcuts, PowerShell, and fake PDFs in a stealth espionage campaign.
9 views
Daily Writeups
⤷ Title: Disposable Code: Inside North Korea’s “Burn-on-Detection” Malware Assembly Line
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:40:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Andariel #Cyber Espionage #Infosec #Kimsuky #Lazarus Group #malware #North Korea #State_Sponsored Hacking #Supply Chain Security #threat intelligence 2026
Penetration Testing Tools
Disposable Code: Inside North Korea’s "Burn-on-Detection" Malware Assembly Line
North Korea has long since transmuted its malicious software development into a sophisticated assembly line, where each instrument
9 views
Daily Writeups
⤷ Title: North Korea’s “Portfolio Model” Shatters Modern Attribution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 06:30:52 +0000
════════════════════════
⌗ Tags: #Cyber Security #Andariel #Attribution Resistance #DomainTools #DPRK #infosec #Kimsuky #Lazarus Group #malware #North Korea #social engineering #threat intelligence
Daily CyberSecurity
North Korea’s "Portfolio Model" Shatters Modern Attribution
DomainTools exposes North Korea’s "mature portfolio model": a compartmentalized cyber strategy designed for mission specialization and attribution resistance.
26 views
Daily Writeups
⤷ Title: The Invisible Patch: How PolinRider Rewrites Git History to Hide North Korean Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 17 Apr 2026 01:00:22 +0000
════════════════════════
⌗ Tags: #Malware #DPRK #Git History #github #infosec #Lazarus Group #malware #North Korea #PolinRider #supply chain attack #TasksJacker #VS Code Extensions
Daily CyberSecurity
The Invisible Patch: How PolinRider Rewrites Git History to Hide North Korean Malware
Security researchers from the OpenSourceMalware (OSM) team have uncovered a massive and rapidly expanding threat campaign targeting the heart of the developer ecosystem. The actor, dubbed PolinRid…
16 views
Daily Writeups
⤷ Title: North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 14:28:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlueNoroff #ClickFix #Crypto theft #cybersecurity #Deepfakes #Fake Meetings #infosec #Lazarus Group #macOS security #North Korea #social engineering #UNC1069 #Web3 #Windows Defender
Daily CyberSecurity
North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto
North Korea's UNC1069 uses fake video calls and "ClickFix" prompts to drain crypto assets and record victims for deepfakes. Audit your meetings now!
46 views
Daily Writeups
⤷ Title: How North Korea Stole $293 Million from DeFi (KelpDAO)— and Made Aave Pay for It
════════════════════════
𐀪 Author: Syed Fahad Hussain
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 11:55:16 GMT
════════════════════════
⌗ Tags: #aave #kelp_dao #hacking #lazarus_group #defi
Medium
How North Korea Stole $293 Million from DeFi (KelpDAO)— and Made Aave Pay for It
A step-by-step breakdown of the biggest crypto exploit of 2026, the Aave contagion, and what it means for the future of decentralized…
12 views
Daily Writeups
⤷ Title: Beyond Gatekeeper: How Sapphire Sleet’s AppleScript Trap Hijacks macOS and Crypto Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 07:05:22 +0000
════════════════════════
⌗ Tags: #Malware #AppleScript #crypto security #infosec #Lazarus Group #macOS #malware #Microsoft Threat Intelligence #North Korea #Sapphire Sleet #TCC Bypass #Telegram Theft
Daily CyberSecurity
Beyond Gatekeeper: How Sapphire Sleet’s AppleScript Trap Hijacks macOS and Crypto Wallets
Microsoft uncovers Sapphire Sleet's macOS campaign. Using fake recruiters and AppleScript, they bypass TCC to steal crypto wallets, Telegram, and SSH keys.
10 views
Daily Writeups
⤷ Title: Inside BlueNoroff’s “Self-Reinforcing” Deepfake Meeting Trap
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 28 Apr 2026 08:30:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Arctic Wolf #BlueNoroff #ClickFix #crypto security #Deepfakes #DPRK #infosec #Lazarus Group #powershell #social engineering #Web3 #Zoom Typo_squatting
Daily CyberSecurity
Inside BlueNoroff’s "Self-Reinforcing" Deepfake Meeting Trap
BlueNoroff uses a "self-reinforcing" deepfake pipeline to target crypto CEOs. Fake Zoom meetings and stolen footage lead to a 5-minute system compromise.
14 views
Daily Writeups
⤷ Title: The $1.5M Purrlend Heist: Cross-Chain Chaos Signals a Brutal $800M Month for DeFi Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:23:34 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Crypto Trends #Cross_Chain Bridge #Crypto Security #DeFi Hack #Drift Protocol #HyperEVM #KelpDAO #Lazarus Group #MegaETH #NTLM Coercion #Purrlend #Smart Contract Audit
Penetration Testing Tools
The $1.5M Purrlend Heist: Cross-Chain Chaos Signals a Brutal $800M Month for DeFi Security
The cryptocurrency landscape has received yet another ominous signal as adversaries successfully breached yet another DeFi platform, leaving
10 views