Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: Is Linux immune to computer viruses ?
════════════════════════
𐀪 Author: Daouda Diallo
════════════════════════
ⴵ Time: Thu, 30 Jan 2025 01:10:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #operating_systems #malware #linux #linux_malware
Medium
Is Linux immune to computer viruses ?
For years, Linux users have viewed their systems as bastions of security, often believing they were less vulnerable to malwares compared…
13 views
Daily Writeups
⤷ Title: ELFEN: Automated Linux Malware Analysis Sandbox
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 02 Apr 2025 00:15:56 +0000
════════════════════════
⌗ Tags: #Malware Defense #Linux malware analysis
Penetration Testing Tools
ELFEN: Automated Linux Malware Analysis Sandbox
ELFEN is a dockerized sandbox for analyzing Linux (file type: ELF) malware. It leverages an array of open-source technologie
25 views
Daily Writeups
⤷ Title: Outlaw Linux Malware: Persistent Threat Leveraging Simplicity
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Thu, 03 Apr 2025 00:50:31 +0000
════════════════════════
⌗ Tags: #Malware #Linux Malware #outlaw #Outlaw Linux malware #SSH Brute_Force
Daily CyberSecurity
Outlaw Linux Malware: Persistent Threat Leveraging Simplicity
Explore the dangers of Outlaw Linux malware, a persistent coinminer that combines automated execution with manual oversight.
17 views
Daily Writeups
⤷ Title: XorDDoS Evolves: Cisco Talos Uncovers “VIP” Controller Fueling Global DDoS Campaigns
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 19 Apr 2025 00:05:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #botnet #central controller #Cisco Talos #Cybercrime #DDoS malware #Linux Malware #threat intelligence #VIP version #XorDDoS
Daily CyberSecurity
XorDDoS Evolves: Cisco Talos Uncovers “VIP” Controller Fueling Global DDoS Campaigns
Cisco Talos reveals a new VIP version of XorDDoS with centralized control, enabling global DDoS attacks. U.S. targeted in over 70% of observed campaigns.
18 views
Daily Writeups
⤷ Title: Outlaw Botnet Exploits Weak SSH to Hijack Linux Systems for Crypto Mining
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:15:17 +0000
════════════════════════
⌗ Tags: #Malware #crypto mining #Cybersecurity Threats #IRC botnet #kaspersky #Linux Malware #Outlaw botnet #Perl malware #SSH vulnerability #ssh_hardening #XMRig
Daily CyberSecurity
Outlaw Botnet Exploits Weak SSH to Hijack Linux Systems for Crypto Mining
Outlaw botnet targets Linux servers via weak SSH, using Perl scripts and XMRig miners for crypto mining and backdoor access, Kaspersky warns.
19 views
Daily Writeups
⤷ Title: Supply Chain Attack Alert: Malicious Go Modules and npm/PyPI Packages Deliver Devastating Linux…
════════════════════════
𐀪 Author: CyDhaal
════════════════════════
ⴵ Time: Sun, 04 May 2025 06:19:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #linux_malware #supply_chain_attack #cryptocurrency_security #open_source_security
Medium
Supply Chain Attack Alert: Malicious Go Modules and npm/PyPI Packages Deliver Devastating Linux…
In a shocking revelation, cybersecurity researchers have uncovered multiple malicious packages in Go, npm, and PyPI repositories, capable…
25 views
Daily Writeups
⤷ Title: APT36 Suspected in India Gov Spoofing Phishing with ClickFix Tactics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 08 May 2025 00:26:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #APT36 #ClickFix #cyberattack #Government #Hunt.io #India #Indian Ministry #Linux #Linux Malware #malware #phishing #social engineering #Threat Hunting #threat intelligence #Transparent Tribe #windows #Windows malware
Daily CyberSecurity
APT36 Suspected in India Gov Spoofing Phishing with ClickFix Tactics
A sophisticated phishing campaign, possibly by APT36, spoofs Indian government sites and uses ClickFix tactics to target Windows and Linux users.
9 views
Daily Writeups
⤷ Title: Plague Backdoor: New Linux Malware Infiltrates Authentication Stack, Evading Detection for a Year
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 Aug 2025 03:23:20 +0000
════════════════════════
⌗ Tags: #Linux #Malware #Authentication #Backdoor #cybersecurity #Evasion #Linux malware #PAM #Plague #ssh #threat intelligence
Penetration Testing Tools
Plague Backdoor: New Linux Malware Infiltrates Authentication Stack, Evading Detection for a Year
A new backdoor, Plague, disguised as a Linux PAM component, evaded detection for over a year. It grants attackers persistent SSH access and leaves no forensic trail.
11 views
Daily Writeups
⤷ Title: The BOSS Breach: APT36 Pivots to Linux Espionage with “Silent” Shortcuts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Dec 2025 00:15:45 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT36 #BOSS OS #cyber_espionage #cybersecurity #Linux Malware #threat intelligence #Transparent Tribe
Daily CyberSecurity
The BOSS Breach: APT36 Pivots to Linux Espionage with "Silent" Shortcuts
Transparent Tribe (APT36) evolves with new Linux malware targeting Indian government BOSS systems via weaponized shortcut files.
13 views
Daily Writeups
⤷ Title: The European Pivot: China-Linked UAT-7290 Targets Telecoms with SilentRaid
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 04:12:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #China_Nexus #Cisco Talos #Cyber Espionage #Linux malware #ORB #RushDrop #SilentRaid #South Asia #Southeastern Europe #Telecommunications #UAT_7290
Information Security News
The European Pivot: China-Linked UAT-7290 Targets Telecoms with SilentRaid
The Cisco Talos intelligence unit has reported a significant geographical expansion in the activities of a threat actor utilizing sophisticated Linux malware to target telecommunication entities. …
13 views
Daily Writeups
⤷ Title: VoidLink: The “Cloud-First” Malware Hunting Your Linux Servers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:21:17 +0000
════════════════════════
⌗ Tags: #Malware #Check Point Research #Chinese Threat Actor #Cloud Security #Cobalt Strike #container security #DevOps Security #eBPF #Kubernetes Security #Linux Malware #supply chain attack #VoidLink #Zig Programming Language
Daily CyberSecurity
VoidLink: The "Cloud-First" Malware Hunting Your Linux Servers
New "cloud-first" malware VoidLink targets Linux & containers with advanced stealth. Written in Zig, it mimics Cobalt Strike to evade EDR. Check your cloud.
24 views
Daily Writeups
⤷ Title: IIS Under Siege: UAT-8099 Deploys Region-Locked “BadIIS” & Linux Variants
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 02 Feb 2026 00:46:23 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Asian Cyber Threat #BadIIS #Cisco Talos #cyber_espionage #GotoHTTP #IIS Security #Linux Malware #SEO Fraud #UAT_8099 #WEBJACK
Daily CyberSecurity
IIS Under Siege: UAT-8099 Deploys Region-Locked "BadIIS" & Linux Variants
Cisco Talos warns of UAT-8099 targeting Asian IIS servers with region-locked BadIIS malware. New variants now attack Linux systems.
45 views
Daily Writeups
⤷ Title: Invisible Intruder: “ShadowHS” Malware Weaponizes Hackshell on Linux
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:22:02 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #Cyble Research #Fileless attack #GSocket #Hackshell #Linux Malware #Memory injection #post_exploitation #ShadowHS #threat intelligence
Daily CyberSecurity
Invisible Intruder: "ShadowHS" Malware Weaponizes Hackshell on Linux
Cyble uncovers "ShadowHS," a fileless Linux malware weaponizing hackshell. It uses GSocket tunneling to evade firewalls and kill rival bots.
19 views
Daily Writeups
⤷ Title: Shattering the Edge: Cisco Talos Unmasks “DKnife,” the 7-Module Framework Hijacking Your Router
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 04:19:48 +0000
════════════════════════
⌗ Tags: #Malware #AitM attack #China_nexus APT #Cisco Talos #DarkNimbus #DKnife #edge device security #Linux malware #network infrastructure #router malware #ShadowPad #Tech News 2026 #WizardNet
Penetration Testing Tools
Shattering the Edge: Cisco Talos Unmasks "DKnife," the 7-Module Framework Hijacking Your Router
Security analysts at Cisco Talos have unmasked a clandestine offensive platform that has operated surreptitiously within network infrastructure
23 views
Daily Writeups
⤷ Title: VoidLink Rising: New “AI-Ready” Malware Framework Targets Linux & IoT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Feb 2026 00:19:11 +0000
════════════════════════
⌗ Tags: #Malware #Cisco Talos #Cloud Security #Cyber Warfare #IoT security #Kubernetes Security #Linux Malware #Malware Analysis #Modular Framework #UAT_9921 #VoidLink
Daily CyberSecurity
VoidLink Rising: New "AI-Ready" Malware Framework Targets Linux & IoT
Cisco Talos reveals VoidLink, a modular Linux malware framework by UAT-9921. Features "compile-on-demand" tools to target IoT & cloud infrastructure.
13 views
Daily Writeups
⤷ Title: Silently Swapped: How ClipXDaemon Hijacks Linux Cryptowallets Without a C2 Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:02:53 +0000
════════════════════════
⌗ Tags: #Malware #Bincrypter #ClipXDaemon #Cryptocurrency Hijacker #cybersecurity #Cyble Research #infosec #Linux Malware #Process Masquerading #threat intelligence #X11 Security
Daily CyberSecurity
Silently Swapped: How ClipXDaemon Hijacks Linux Cryptowallets Without a C2 Server
Cyble Research unmasks ClipXDaemon, a C2-less Linux malware that silently hijacks cryptocurrency wallet addresses in X11 clipboard environments.
8 views
Daily Writeups
⤷ Title: The Invisible Switch: How “ClipXDaemon” Hijacks Linux Clipboards to Steal Crypto
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:35:12 +0000
════════════════════════
⌗ Tags: #Malware #Bitcoin #Clipboard hijacker #ClipXDaemon #Cryptocurrency Theft #Cyber Security 2026 #Ethereum #Fileless Malware #Linux Desktop security #Linux malware #Monero #X11 security
Penetration Testing Tools
The Invisible Switch: How "ClipXDaemon" Hijacks Linux Clipboards to Steal Crypto
Cybersecurity researchers have unearthed a nascent Linux malware strain christened ClipXDaemon. This insidious program clandestinely intercepts the contents
13 views