Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Sun, 05 Mar 2023 19:09:11 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Sandworm Book Summary
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/2b3adf31b719
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #cybersecurity #cybercrime #notpetya #sandworm
Medium
Sandworm Book Summary
Sandworm is a book by Andy Greenberg that explores the history and impact of a group of Russian state-sponsored hackers known as Sandworm…
10 views
Daily Writeups
β€· Title: Cyber Espionage and Influence: Unmasking APT28’s Tactics Sources and related content
════════════════════════
π€ͺ Author: do son
════════════════════════
β΄΅ Time: Sat, 01 Feb 2025 01:46:01 +0000
════════════════════════
βŒ— Tags: #Cyber Security #APT28 #CredoMap #CVE_2022_30190 #CVE_2023_23397 #CVE_2023_38831 #google chrome #MASEPIE #microsoft edge #Mozilla Firefox #OCEANMAP #SANDWORM #STEELHOOK
Daily CyberSecurity
Cyber Espionage and Influence: Unmasking APT28's Tactics Sources and related content
Explore the Maverits Special Report on APT28, a notorious Russian cyber espionage group. Learn about their tactics, targets, and impact on government institutions.
19 views
Daily Writeups
β€· Title: Sandworm APT Exploits Trojanized KMS Tools to Target Ukrainian Users in Cyber Espionage Campaign
════════════════════════
π€ͺ Author: do son
════════════════════════
β΄΅ Time: Wed, 12 Feb 2025 02:09:30 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Malware #APT44 #BACKORDER #BACKORDER loader #DcRAT malware #Sandworm APT
Cybersecurity News
Sandworm APT Exploits Trojanized KMS Tools to Target Ukrainian Users in Cyber Espionage Campaign
Learn about the notorious Sandworm APT44 and their state-sponsored cyber espionage targeting Ukrainian Windows users with trojanized KMS activators.
18 views
Daily Writeups
β€· Title: CVE-2024-1709 and CVE-2023-48788: Exploits Fueling Russia’s BadPilot Campaign
════════════════════════
π€ͺ Author: do son
════════════════════════
β΄΅ Time: Mon, 17 Feb 2025 01:31:25 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Vulnerability #APT44 #BadPilot #BadPilot campaign #BlackEnergy Lite #CVE_2021_34473 #CVE_2022_41352 #CVE_2023_48788 #CVE_2024_1709 #SANDWORM #Seashell Blizzard #ShadowLink
Daily CyberSecurity
CVE-2024-1709 and CVE-2023-48788: Exploits Fueling Russia's BadPilot Campaign
Uncover the threats posed by Seashell Blizzard, a cyber espionage group behind the BadPilot campaign targeting critical sectors.
22 views
Daily Writeups
β€· Title: Threat Intel Diaries #2β€Šβ€”β€ŠProfiling Sandworm Team (APT44)
════════════════════════
π€ͺ Author: Karim Walid
════════════════════════
β΄΅ Time: Sat, 17 May 2025 07:47:51 GMT
════════════════════════
βŒ— Tags: #threat_intelligence #apt #sandworm #hacking #threat_hunting
Medium
Threat Intel Diaries #2β€Šβ€”β€ŠProfiling Sandworm Team (APT44)
Threat Actor Overview
22 views
Daily Writeups
β€· Title: Russian APTs Exploit LotL Techniques in Ukraine Cyber Attacks, Deploying Sandworm-Linked Webshell and Credential Dumping
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Fri, 31 Oct 2025 00:07:31 +0000
════════════════════════
βŒ— Tags: #Cyber Security #credential dumping #Espionage #living_off_the_land #LotL #Russia APT #SANDWORM #Ukraine #webshell
Daily CyberSecurity
Russian APTs Exploit LotL Techniques in Ukraine Cyber Attacks, Deploying Sandworm-Linked Webshell and Credential Dumping
Symantec exposed a Russian-aligned espionage campaign in Ukraine using LotL tactics. Attackers used a Sandworm-linked webshell (Localolive) and abused scheduled tasks to dump credentials and bypass Windows Defender.
18 views
Daily Writeups
β€· Title: Sandworm APT Attacks Belarus Military With LNK Exploit and OpenSSH Over Tor obfs4 Backdoor
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Sat, 01 Nov 2025 11:35:46 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Belarus Military #DLL Sideloading #LNK Exploit #obfs4 #OpenSSH #Russia APT #SANDWORM #Tor network
Daily CyberSecurity
Sandworm APT Attacks Belarus Military With LNK Exploit and OpenSSH Over Tor obfs4 Backdoor
Cyble exposed a Sandworm-linked espionage campaign targeting Belarusian military UAV personnel. It uses a malicious LNK file to deploy OpenSSH over Tor obfs4 for stealthy, persistent remote access.
50 views
Daily Writeups
β€· Title: Amazon: Russian GRU hackers favor misconfigured devices over vulnerabilities
════════════════════════
π€ͺ Author: Waqas
════════════════════════
β΄΅ Time: Tue, 16 Dec 2025 17:55:38 +0000
════════════════════════
βŒ— Tags: #Security #0day #Amazon #APT44 #AWS #Curly COMrades #Cyber Attack #Cyber Crime #Cybersecurity #GRU #Malware #Russia #Sandworm #Seashell Blizzard #Vulnerability
Hackread
Amazon: Russian GRU hackers favor misconfigured devices over vulnerabilities
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
33 views
Daily Writeups
β€· Title: Sandworm’s Tactical Pivot: Russian GRU Abandons Zero-Days to Weaponize Misconfigured Edge Devices
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 17 Dec 2025 01:57:59 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Amazon Threat Intelligence #APT44 #Credential Replay #Critical Infrastructure #Curly COMrades #Edge Device #GRU #misconfiguration #SANDWORM
Daily CyberSecurity
Sandworm’s Tactical Pivot: Russian GRU Abandons Zero-Days to Weaponize Misconfigured Edge Devices
Sandworm (APT44) has shifted tactics, favoring misconfigured edge devices over complex exploits to breach energy and telecom sectors via credential replay.
20 views
Daily Writeups
β€· Title: The Persistence of WinRAR: Google Warns of Widespread CVE-2025-8088 Attacks
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 29 Jan 2026 04:15:22 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #Vulnerability #Ads #CVE_2025_8088 #Google Threat Intelligence #InfoSec 2026 #path traversal #phishing #RomCom #Sandworm #Startup Persistence #Winrar
Penetration Testing Tools
The Persistence of WinRAR: Google Warns of Widespread CVE-2025-8088 Attacks
The Google Threat Intelligence Group (GTIG) has disclosed the extensive exploitation of a critical vulnerability, designated CVE-2025-8088, residing
11 views
Daily Writeups
β€· Title: Beyond Blackouts: The ELECTRUM Strike on Poland and the New Era of β€œDigital Arson”
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Tue, 03 Feb 2026 04:55:47 +0000
════════════════════════
βŒ— Tags: #Cyber Security #CERT Polska #Distributed Energy Resources (DER) #Dragos #DynoWiper #ELECTRUM #grid stability #Industrial Control Systems #Operational Technology (OT) #Polish power grid #Sandworm #Tech News
Penetration Testing Tools
Beyond Blackouts: The ELECTRUM Strike on Poland and the New Era of "Digital Arson"
A cyberattack that initially garnered scant attention in Poland has since emerged as a pivotal signal for the
14 views
Daily Writeups
β€· Title: Targeting the Grid: ESET Unmasks β€œDynoWiper” After Destructive Strike on Polish Energy Sector
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 05 Feb 2026 03:50:20 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Active Directory GPO #Critical Infrastructure #cyber sabotage #data wiper #DynoWiper #ESET research #LSASS memory dump #Poland energy sector #rsocx #Rubeus #Sandworm #Tech News 2026 #ZOV wiper
Penetration Testing Tools
Targeting the Grid: ESET Unmasks "DynoWiper" After Destructive Strike on Polish Energy Sector
ESET has disclosed the intricate technical specifications of an incursion involving a nascent data-obliteration utility designated as DynoWiper.
26 views
Daily Writeups
β€· Title: Under Siege: GTIG Report Exposes North Korean Spies & Russian Drone Hacks in Defense Sector
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Wed, 11 Feb 2026 00:50:32 +0000
════════════════════════
βŒ— Tags: #Cyber Security #APT44 #cyber_espionage #Defense Industrial Base #Drone Security #Edge Device Security #Google Threat Intelligence #GTIG #Insider Threat #North Korean IT workers #SANDWORM
Daily CyberSecurity
Under Siege: GTIG Report Exposes North Korean Spies & Russian Drone Hacks in Defense Sector
GTIG report: Defense Industrial Base faces "constant siege" from Russian drone hackers & North Korean IT insiders. Learn the new threats.
16 views
Daily Writeups
β€· Title: SANDWORM_MODE Worm Exploits AI Toolchains and Supply Chains
════════════════════════
π€ͺ Author: Nam Phong
════════════════════════
β΄΅ Time: Sun, 26 Jul 2026 10:47:32 +0000
════════════════════════
βŒ— Tags: #Malware #AI Toolchain #CrowdStrike #NPM Malware #SANDWORM_MODE #supply chain attack
Information Security News
SANDWORM_MODE Worm Exploits AI Toolchains and Supply Chains
The Emergence of AI Infrastructure Worms Malicious packages have evolved to inconspicuously masquerade as routine operations executed by artificial intelligence assistants and automated build syst…
34 views