Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Stealth Falcon Exploits New Zero-Day (CVE-2025-33053) in Sophisticated Cyberespionage Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 22:18:01 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability Report #Africa #APT #Check Point Research #CVE_2025_33053 #Cyberespionage #cybersecurity #Defense Industry #Horus Agent #malware #Microsoft Windows #Middle East #Mythic C2 #Stealth Falcon #WebDAV #zero_day
Daily CyberSecurity
Stealth Falcon Exploits New Zero-Day (CVE-2025-33053) in Sophisticated Cyberespionage Campaign
Stealth Falcon APT is exploiting a Windows WebDAV zero-day (CVE-2025-33053) in a sophisticated cyberespionage campaign targeting defense entities in the Middle East & Africa.
18 views
Daily Writeups
⤷ Title: Hollowise: New Windows Tool Enables Stealthy Code Execution via Process Hollowing & PPID Spoofing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 25 Jun 2025 04:20:57 +0000
════════════════════════
⌗ Tags: #Open Source Tool #code analysis #cybersecurity #Debuggers #Hollowise #Network Analysis #Offensive Security #PPID Spoofing #Process Hollowing #Stealth Execution #windows
Penetration Testing Tools
Hollowise: New Windows Tool Enables Stealthy Code Execution via Process Hollowing & PPID Spoofing
Hollowise is a Windows tool enabling stealthy execution of debuggers and code/network analyzers by process hollowing suspended processes and spoofing their parent IDs.
16 views
Daily Writeups
⤷ Title: EdskManager RAT: New Stealthy Malware Leverages HVNC for Covert Remote Access & Evasion
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 24 Jul 2025 00:26:28 +0000
════════════════════════
⌗ Tags: #Malware #C2 #Command and Control #cybersecurity #EdskManager RAT #evasion #HVNC #malware #rat #Remote Access Trojan #Stealth
Daily CyberSecurity
EdskManager RAT: New Stealthy Malware Leverages HVNC for Covert Remote Access & Evasion
CYFIRMA uncovers EdskManager RAT, a sophisticated remote access trojan using HVNC, multi-stage execution, and advanced persistence for covert, long-term system access.
11 views
Daily Writeups
⤷ Title: Greedy Sponge Targets Mexico: New AllaKore RAT & SystemBC Campaign Evades Detection
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 24 Jul 2025 23:30:30 +0000
════════════════════════
⌗ Tags: #Malware #AllaKore RAT #cybercrime #Financial Fraud #Greedy Sponge #malware #Mexico #Remote Access Trojan #Stealth #SystemBC
Penetration Testing Tools
Greedy Sponge Targets Mexico: New AllaKore RAT & SystemBC Campaign Evades Detection
The Greedy Sponge group is persistently targeting Mexican organizations with a modified AllaKore RAT and SystemBC, using advanced geofiltering and stealth tactics to commit financial fraud.
8 views
Daily Writeups
⤷ Title: Soco404: New Stealthy Cryptojacking Campaign Exploits Cloud Misconfigurations and PostgreSQL to Mine Crypto
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 25 Jul 2025 00:06:21 +0000
════════════════════════
⌗ Tags: #Malware #Cloud Security #Cryptojacking #Cybercrime #Linux #malware #PostgreSQL #Soco404 #Stealth #windows #Wiz Research
Daily CyberSecurity
Soco404: New Stealthy Cryptojacking Campaign Exploits Cloud Misconfigurations and PostgreSQL to Mine Crypto
Wiz Research uncovers Soco404, an evolving cryptojacking operation exploiting cloud misconfigurations and PostgreSQL to stealthily mine cryptocurrency across Linux and Windows.
11 views
Daily Writeups
⤷ Title: Silent Siege: The Stealth War Inside Taiwan’s Servers
════════════════════════
𐀪 Author: Aj
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 13:49:14 GMT
════════════════════════
⌗ Tags: #stealth_hack #cyberattack #china #cybersecurity #china_vs_taiwan
Medium
Silent Siege: The Stealth War Inside Taiwan’s Servers
How Chinese Hackers Weaponize Open-Source Tools to Burrow Deep and Disappear
14 views
Daily Writeups
⤷ Title: Patchwork APT Resurfaces: Stealthy Espionage Campaign Exploits DLL Sideloading and Layered Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 01 Oct 2025 02:17:48 +0000
════════════════════════
⌗ Tags: #Cyber Security #cyber_espionage #DLL Sideloading #K7 Security Labs #malware #Patchwork APT #South Asia #Stealth #VLC
Daily CyberSecurity
Patchwork APT Resurfaces: Stealthy Espionage Campaign Exploits DLL Sideloading and Layered Obfuscation
Patchwork APT has launched a new campaign in South Asia, exploiting DLL sideloading and obfuscation to deliver malware that masquerades as VLC media player for deep espionage.
16 views
Daily Writeups
⤷ Title: Stealth C2: Hackers Abuse Discord Webhooks for Covert Data Exfiltration in npm, PyPI, and RubyGems Supply Chain Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Oct 2025 00:14:16 +0000
════════════════════════
⌗ Tags: #Malware #data exfiltration #Discord #npm #PyPI #RubyGems #Stealth #supply chain attack #Webhook C2
Daily CyberSecurity
Stealth C2: Hackers Abuse Discord Webhooks for Covert Data Exfiltration in npm, PyPI, and RubyGems Supply Chain Attacks
Malicious packages across npm, PyPI, and RubyGems are exploiting Discord webhooks as stealthy, resilient C2 endpoints to exfiltrate developer config files and sensitive host data.
10 views
Daily Writeups
⤷ Title: Stealth Innovation: LinkPro Linux Rootkit Hides via eBPF and Activates with Magic TCP Packet on Kubernetes Nodes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Oct 2025 02:28:28 +0000
════════════════════════
⌗ Tags: #Malware #eBPF #Kubernetes #LinkPro #Linux Rootkit #Magic Packet #Stealth C2 #TCP #VShell #XDP
Penetration Testing Tools
Stealth Innovation: LinkPro Linux Rootkit Hides via eBPF and Activates with Magic TCP Packet on Kubernetes Nodes
Synacktiv exposed LinkPro, an advanced Linux rootkit using eBPF to cloak activity on Kubernetes nodes. It is activated by a "magic" TCP packet (window size 54321) to establish covert remote control.
17 views
Daily Writeups
⤷ Title: North Korean APTs Upgrade Arsenal: Kimsuky Uses Stealthy HttpTroy, Lazarus Deploys New BLINDINGCAN RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 03 Nov 2025 00:22:58 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #BLINDINGCAN #Cyberespionage #DLL Sideloading #HttpTroy #Kimsuky #Lazarus Group #North Korea APT #Stealth Malware
Daily CyberSecurity
North Korean APTs Upgrade Arsenal: Kimsuky Uses Stealthy HttpTroy, Lazarus Deploys New BLINDINGCAN RAT
Researchers at Gen Threat Labs have identified two new toolsets in active use by North Korean state-sponsored groups, underscoring the regime’s continued investment in advanced cyber-espionage and…
9 views
Daily Writeups
⤷ Title: The Stealth Intrusion: Hackers Bypass Detection by Logging In with Stolen Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 05 Nov 2025 03:49:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyberattack #FortiGuard #Legitimate Tools #MFA #Remote Access #Stealth #Stolen Credentials #VPN
Penetration Testing Tools
The Stealth Intrusion: Hackers Bypass Detection by Logging In with Stolen Credentials
FortiGuard warns financially motivated hackers now use legitimate accounts (AnyDesk, VPN) to bypass detection. Stolen credentials are cheap and offer unparalleled stealth.
11 views
Daily Writeups
⤷ Title: RingReaper: Stealthy Linux Agent Abuses io_uring to Bypass EDR System Call Monitoring
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 27 Nov 2025 11:28:39 +0000
════════════════════════
⌗ Tags: #Open Source Tool #EDR Bypass #io_uring #Linux Security #post_exploitation #Red Team #RingReaper #Stealth #System Calls
48 views