Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Dream Job or Nightmare? Lazarus Group Hunts Crypto Devs with “Graphalgo” Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Feb 2026 00:22:31 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Crypto Malware #Fake Recruiter #Graphalgo #javascript #Lazarus Group #North Korea #npm Security #Python #ReversingLabs #supply chain attack
Daily CyberSecurity
Dream Job or Nightmare? Lazarus Group Hunts Crypto Devs with "Graphalgo" Malware
Lazarus Group targets crypto developers with fake job offers in new "Graphalgo" campaign. Malicious npm packages deliver multi-stage malware. Stay alert.
19 views
Daily Writeups
⤷ Title: The “Windows + R” Trap: ClickFix Scam Tricks Users into Installing StealC Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:50:53 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Cyber Security #fake CAPTCHA #Fileless Malware #Infostealer #LevelBlue #Malware_as_a_Service #powershell #social engineering #StealC
Daily CyberSecurity
The "Windows + R" Trap: ClickFix Scam Tricks Users into Installing StealC Malware
LevelBlue warns of StealC malware using "ClickFix" fake CAPTCHAs. Users are tricked into running fileless malware via PowerShell. Stay alert.
15 views
Daily Writeups
⤷ Title: The CAPTCHA Trap: How a Fake “ClickFix” Prompt Unleashed Latrodectus & Supper Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:43:04 +0000
════════════════════════
⌗ Tags: #Malware #CERT Polska #ClickFix #Cyber Security #DLL side_loading #fake CAPTCHA #infosec #Latrodectus #Malware Analysis #phishing #Supper Malware
Daily CyberSecurity
The CAPTCHA Trap: How a Fake "ClickFix" Prompt Unleashed Latrodectus & Supper Malware
CERT Polska reveals how a fake "ClickFix" CAPTCHA campaign tricked users into deploying evasive Latrodectus and Supper malware. Protect your network now.
16 views
Daily Writeups
⤷ Title: The ‘ClickFix’ Trap: GrayCharlie Hijacks US Law Firms to Deploy NetSupport RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 00:22:38 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Cyber Security #Fake Browser Update #GrayCharlie #infosec #Insikt Group #NetSupport RAT #StealC #supply chain attack #wordpress security
Daily CyberSecurity
The 'ClickFix' Trap: GrayCharlie Hijacks US Law Firms to Deploy NetSupport RAT
Insikt Group exposes GrayCharlie compromising WordPress sites & US law firms. Attackers use "ClickFix" fake CAPTCHAs to deploy the NetSupport RAT.
16 views
Daily Writeups
⤷ Title: The “ClickFix” Trap: GrayCharlie Syndicate Hijacks U.S. Law Firm Sites in Sophisticated Supply-Chain Strike
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:24:25 +0000
════════════════════════
⌗ Tags: #Cybercriminals #ClickFix #fake browser updates #GrayCharlie #Insikt Group #legal sector cyberattack #NetSupport RAT #SMB Team #Stealc infostealer #supply chain attack #Tech News 2026 #WordPress Security
Penetration Testing Tools
The "ClickFix" Trap: GrayCharlie Syndicate Hijacks U.S. Law Firm Sites in Sophisticated Supply-Chain Strike
Experts from the Insikt Group division have promulgated the inaugural comprehensive dossier regarding GrayCharlie, a threat syndicate that,
13 views
Daily Writeups
⤷ Title: Hired to Hack: North Korean Fake IT Workers Hijack Exec Identities in ‘Contagious Interview’ Scams
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 24 Feb 2026 00:18:13 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Contagious Interview #Cyber Security #Fake IT Workers #GitLab Threat Intelligence #identity theft #infosec #Insider Threat #North Korean IT workers #Remote Work Security #social engineering
Daily CyberSecurity
Hired to Hack: North Korean Fake IT Workers Hijack Exec Identities in 'Contagious Interview' Scams
GitLab reveals how North Korean fake IT workers use 'Contagious Interview' scams to bypass hiring, steal data, and hijack executive digital identities.
15 views
Daily Writeups
⤷ Title: Digital Phantoms for Sale: The Rise and Fall of OnlyFake’s $1.2M Counterfeit Empire
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:36:36 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI deepfake documents #cryptocurrency scams #Cybercrime 2026 #fake passports #FBI #identity fraud #KYC bypass #Money Laundering #OnlyFake #Yurii Nazarenko
Penetration Testing Tools
Digital Phantoms for Sale: The Rise and Fall of OnlyFake’s $1.2M Counterfeit Empire
A clandestine digital service capable of fabricating a passport from virtually any nation in mere minutes has ultimately
11 views
Daily Writeups
⤷ Title: The Fake VPN Trap: Microsoft Warns of Storm-2561 SEO Poisoning Campaigns Stealing Corporate Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Mar 2026 02:00:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Theft #cybersecurity #Fake VPN #Hyrax Infostealer #infosec #Microsoft Defender Experts #Pulse Secure #SEO Poisoning #Storm_2561 #threat intelligence
Daily CyberSecurity
The Fake VPN Trap: Microsoft Warns of Storm-2561 SEO Poisoning Campaigns Stealing Corporate Credentials
Microsoft Defender Experts warn of Storm-2561 using SEO poisoning to distribute fake enterprise VPN clients like Pulse Secure, stealing user credentials.
25 views
Daily Writeups
⤷ Title: North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 19 Apr 2026 14:28:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BlueNoroff #ClickFix #Crypto theft #cybersecurity #Deepfakes #Fake Meetings #infosec #Lazarus Group #macOS security #North Korea #social engineering #UNC1069 #Web3 #Windows Defender
Daily CyberSecurity
North Korea’s UNC1069 Uses Fake Video Calls to Hijack Crypto
North Korea's UNC1069 uses fake video calls and "ClickFix" prompts to drain crypto assets and record victims for deepfakes. Audit your meetings now!
44 views
Daily Writeups
⤷ Title: Inside “HexagonalRodent”: The AI-Powered DPRK Syndicate Hauling Millions in Crypto
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 01:00:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AI Cybercrime #BeaverTail #Crypto Malware #DPRK #Expel Research #Fake Job Scam #HexagonalRodent #InvisibleFerret #OtterCookie #VS Code Vulnerability #Web3 security
Daily CyberSecurity
Inside "HexagonalRodent": The AI-Powered DPRK Syndicate Hauling Millions in Crypto
North Korean group HexagonalRodent stole millions in Q1 2026 using AI-generated lures and backdoored VS Code tasks. Protect your Web3 wallet now.
31 views