Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: Kimsuky’s AppleSeed Returns: North Korea-Linked APT Targets Korean Users via Social Media
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Jun 2025 00:32:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #AppleSeed #APT #cyberattack #Cyberespionage #cybersecurity #facebook #Genians #Kimsuky #malware #North Korea #social engineering #Telegram
Daily CyberSecurity
Kimsuky's AppleSeed Returns: North Korea-Linked APT Targets Korean Users via Social Media
Kimsuky's AppleSeed campaign targets Korean Facebook, email, and Telegram users with evolved social engineering and stealthy malware.
31 views
Daily Writeups
⤷ Title: ClickFix Unmasked: How North Korea’s Kimsuky Group Turned PowerShell into a Weapon of Psychological Deception
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 01 Jul 2025 02:25:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #ClickFix #cyber_espionage #Genians Security Center #Kimsuky #malware #North Korea #phishing #powershell #social engineering #spear_phishing
Daily CyberSecurity
ClickFix Unmasked: How North Korea’s Kimsuky Group Turned PowerShell into a Weapon of Psychological Deception
North Korean APT Kimsuky is evolving its ClickFix tactics, using deceptive social engineering, fake job portals, and obfuscated PowerShell to compromise targets via spear-phishing campaigns.
18 views
Daily Writeups
⤷ Title: Kimsuky APT Is Using Social Engineering and AppleSeed Malware to Spy on South Korea
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 01:58:57 +0000
════════════════════════
⌗ Tags: #Cyber Security #AppleSeed malware #APT #cyber_espionage #Genians #Kimsuky #North Korea #social engineering #south korea
Daily CyberSecurity
Kimsuky APT Is Using Social Engineering and AppleSeed Malware to Spy on South Korea
A new report reveals that the North Korean Kimsuky APT is using social engineering on Facebook and Telegram to deliver AppleSeed malware to targets in South Korea.
16 views
Daily Writeups
⤷ Title: Kimsuky Group Weaponizes AI Deepfakes in New Spear-Phishing Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 00:10:09 +0000
════════════════════════
⌗ Tags: #Cyber Security #AI deepfake #ChatGPT #Cyber Warfare #cyber_espionage #Genians Security Center #Kimsuky #North Korean hackers #spear_phishing
Daily CyberSecurity
Kimsuky Group Weaponizes AI Deepfakes in New Spear-Phishing Campaign
North Korean threat group Kimsuky is using AI-generated deepfakes in a new spear-phishing campaign, signaling a new frontier in cyber warfare.
17 views
Daily Writeups
⤷ Title: “Casting Call” for Malware: APT37 Poses as TV Writers to Hack Targets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:35:11 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT37 #Artemis Campaign #cyber_espionage #Genians Security Center #HWP Malware #North Korea #pCloud #Reaper #Ricochet Chollima #social engineering #Yandex Cloud
Daily CyberSecurity
“Casting Call” for Malware: APT37 Poses as TV Writers to Hack Targets
A notorious threat group is auditioning victims for a new cyber-espionage campaign, masquerading as television production staff to slip malware past defenses. A new report from Genians Security Ce…
14 views
Daily Writeups
⤷ Title: Operation Artemis: North Korean ScarCruft Hijacks HWP Files to Deploy RoKRAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:00:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT37 #Cyber Espionage #DLL side_loading #Genians #HWP #Operation Artemis #phishing #RoKRAT #ScarCruft #South Korea #Steganography
Penetration Testing Tools
Operation Artemis: North Korean ScarCruft Hijacks HWP Files to Deploy RoKRAT
As part of a large-scale malware campaign dubbed Operation Artemis, the North Korean hacking group APT37—also known as
16 views
Daily Writeups
⤷ Title: Stealth & Persistence: MuddyWater’s New Rust-Based Payload Mimics Cloudflare and Reddit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 00:06:20 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Genians Report #infosec #Macro_based Attacks #MuddyWater APT #Operation Olalampo #RMM tool abuse #Rust malware #State_Sponsored Espionage #threat intelligence
Daily CyberSecurity
Stealth & Persistence: MuddyWater’s New Rust-Based Payload Mimics Cloudflare and Reddit
Genians report reveals MuddyWater APT's shift to Rust-based malware and RMM tool abuse for long-term espionage across government and critical infrastructure.
23 views
Daily Writeups
⤷ Title: The Trojan Contact: Konni APT Hijacks KakaoTalk to Turn Victims into Attackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 02:01:29 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #EndRAT #Genians Security Center #KakaoTalk #KONNI APT #RemcosRAT #Remote Access Trojan #RftRAT #spear_phishing #threat intelligence
Daily CyberSecurity
The Trojan Contact: Konni APT Hijacks KakaoTalk to Turn Victims into Attackers
Genians Security Center reveals a new Konni APT campaign hijacking KakaoTalk PC sessions to distribute EndRAT, RftRAT, and RemcosRAT to trusted contacts.
14 views
Daily Writeups
⤷ Title: The KakaoTalk Trap: How the Konni Syndicate Turns Victims Into Malicious Proxies
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 09:18:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage 2026 #EndRAT #Genians #KakaoTalk #KONNI #North Korean APT #Remcos #Remote Access Trojan #RftRAT #Social Engineering #Spear Phishing
Penetration Testing Tools
The KakaoTalk Trap: How the Konni Syndicate Turns Victims Into Malicious Proxies
The North Korean cyber espionage syndicate Konni has orchestrated a nascent, multi-stage offensive, weaponizing spear-phishing missives alongside the
17 views
Daily Writeups
⤷ Title: The Friend Request from Pyongyang: How APT37 Hijacks Facebook to Deploy RokRAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 07:40:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT37 #Code Cave Injection #Facebook Phishing #Fileless Malware #Genians Security Center #North Korean APT #PE Patching #RokRAT #social engineering #Wondershare PDFelement #Zoho WorkDrive
Daily CyberSecurity
The Friend Request from Pyongyang: How APT37 Hijacks Facebook to Deploy RokRAT
APT37 pivots to Facebook social engineering, using Wondershare PDFelement "code caves" to deploy RokRAT. Learn how they bypass EDR with memory-only payloads.
15 views
Daily Writeups
⤷ Title: APT37’s New “Python-in-a-Cat” Malware Uses Environment Variable Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 08:13:34 +0000
════════════════════════
⌗ Tags: #Malware #APT37 #Batch Script Obfuscation #Cyberespionage #Genians #infosec #LNK File #Malware Analysis #North Korea APT #phishing #Python Malware #threat intelligence
Daily CyberSecurity
APT37’s New "Python-in-a-Cat" Malware Uses Environment Variable Obfuscation
Genians unmasks an APT37 campaign using environment variable tricks and compiled Python malware to bypass EDR. Protect your network from these stealthy lures.
14 views
Daily Writeups
⤷ Title: RokRAT Malware Hides in Fake PDF Files to Spy on Academics
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 17 Jul 2026 13:24:33 +0000
════════════════════════
⌗ Tags: #Malware #APT37 #Genians #malware #North Korea #Operation Capsule Vault #RokRAT #spear_phishing
Daily CyberSecurity
RokRAT Malware Hides in Fake PDF Files to Spy on Academics
At a glance Malware family RokRAT variant (x64) Threat actor Assessed highly likely APT37 (suspected, not confirmed) Target / victims People in research, policy, and academic fields Delivery vecto…
23 views