Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
πŸ”–New Writeup❗️
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ—“Date: Thu, 13 Apr 2023 11:49:06 GMT
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
✏️Title: Watering Hole Attacks: When Cyber Predators Lurk by the Digital Oasis!
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
πŸ“ŽLink: https://medium.com/p/dd45a3630203
β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”β€”
Tags: #cybersecurity #information_security #cyber_awareness #cyberattack #watering_hole_attack
Medium
Watering Hole Attacks: When Cyber Predators Lurk by the Digital Oasis!
In the vast digital wilderness of cybersecurity threats, a sneaky predator has emerged, patiently waiting by the β€œwatering hole” for its…
3 views
Daily Writeups
β€· Title: North Korean Cyber Espionage Group Kimsuky Exploits University Website in Watering Hole Attack
════════════════════════
π€ͺ Author: do son
════════════════════════
β΄΅ Time: Wed, 12 Mar 2025 01:07:17 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Kimsuky #watering hole attack
Daily CyberSecurity
North Korean Cyber Espionage Group Kimsuky Exploits University Website in Watering Hole Attack
Explore the Kimsuky Watering Hole Attack targeting a South Korean university website. Learn about this new cybersecurity threat.
16 views
Daily Writeups
β€· Title: Inside a Watering Hole Attack: A Step-by-Step Social Engineering Demo
════════════════════════
π€ͺ Author: Stanley Nilam
════════════════════════
β΄΅ Time: Fri, 02 May 2025 12:06:55 GMT
════════════════════════
βŒ— Tags: #social_engineering #watering_hole_attack #ethical_hacking
Medium
Inside a Watering Hole Attack: A Step-by-Step Social Engineering Demo
Watering hole attacks are a sneaky form of cyberattack where hackers target websites their victims trust. Instead of coming to you, they…
13 views
Daily Writeups
β€· Title: New Cyber Threat: UTG-Q-015 Exploits 0-Days for Espionage in Asia
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Thu, 29 May 2025 00:33:54 +0000
════════════════════════
βŒ— Tags: #Cyber Security #0_day #AI #APT #Blockchain #china #cyber_espionage #finance #UTG_Q_015 #watering hole
Daily CyberSecurity
New Cyber Threat: UTG-Q-015 Exploits 0-Days for Espionage in Asia
Threat actor UTG-Q-015 is escalating operations, using 0-days and watering hole attacks against government, finance, and AI in Asia.
11 views
Daily Writeups
β€· Title: A Digital Watering Hole: How Russia’s APT29 Is Abusing Microsoft Auth Flow
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Sun, 31 Aug 2025 10:01:57 +0000
════════════════════════
βŒ— Tags: #Cybercriminals #Amazon #APT29 #cyber_espionage #cybersecurity #Microsoft #Midnight Blizzard #SVR #watering hole
Daily CyberSecurity
A Digital Watering Hole: How Russia's APT29 Is Abusing Microsoft Auth Flow
Amazon has disrupted a watering hole campaign by Russia's APT29. The hackers used compromised sites to trick users into authorizing attacker-controlled devices via Microsoft.
28 views
Daily Writeups
β€· Title: How Amazon Disrupted APT29’s Watering-Hole Attack
════════════════════════
π€ͺ Author: Deven Chhajed
════════════════════════
β΄΅ Time: Sun, 09 Nov 2025 03:31:59 GMT
════════════════════════
βŒ— Tags: #cybersecurity #microsoft365security #apt29 #watering_hole_attack #cloud_security
Medium
How Amazon Disrupted APT29’s Watering-Hole Attack
Cloud platforms are supposed to be safe harbors. Microsoft 365 is where businesses keep their email, files and collaboration tools. But…
16 views
Daily Writeups
β€· Title: APT24 Used β€˜BadAudio’ Malware in 3-Year Espionage Campaign Hitting 1,000+ Sites
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Sun, 23 Nov 2025 02:59:24 +0000
════════════════════════
βŒ— Tags: #Cyber Security #Malware #APT24 #BadAudio #China Hacking #Cyber Espionage #DLL hijacking #Google Threat Intelligence #supply chain attack #Watering Hole
Penetration Testing Tools
APT24 Used 'BadAudio' Malware in 3-Year Espionage Campaign Hitting 1,000+ Sites
Google uncovered a 3-year APT24 espionage campaign using BadAudio, a stealthy malware delivered via supply chain attacks and fake Windows updates to collect data.
41 views
Daily Writeups
β€· Title: The Developer’s Trap: EmEditor Supply Chain Attack Drains Credentials
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Wed, 28 Jan 2026 07:57:05 +0000
════════════════════════
βŒ— Tags: #Malware #Developer Security #EmEditor #Emurasoft #Google Drive Caching #InfoSec 2026 #Infostealer #PowerShell #supply chain attack #Trend Micro #Watering Hole
Penetration Testing Tools
The Developer’s Trap: EmEditor Supply Chain Attack Drains Credentials
In late December 2025, the architects of the renowned text editor EmEditor issued a formal advisory regarding the
10 views
Daily Writeups
β€· Title: The β€œIClickFix” Trap: 3,800+ WordPress Sites Poisoned by Fake CAPTCHAs
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Tue, 03 Feb 2026 01:49:29 +0000
════════════════════════
βŒ— Tags: #Malware #ClickFix #fake CAPTCHA #IClickFix #malware #NetSupport RAT #powershell #Sekoia TDR #social engineering #watering hole attack #wordpress security
Daily CyberSecurity
The "IClickFix" Trap: 3,800+ WordPress Sites Poisoned by Fake CAPTCHAs
IClickFix malware hijacks 3,800+ WordPress sites with fake Cloudflare CAPTCHAs. This watering hole attack tricks users into running malicious PowerShell.
14 views
Daily Writeups
β€· Title: The CPUID Watering Hole Attack Turning CPU-Z into a Trojan
════════════════════════
π€ͺ Author: Ddos
════════════════════════
β΄΅ Time: Mon, 13 Apr 2026 09:15:24 +0000
════════════════════════
βŒ— Tags: #Malware #CPU_Z #CPUID #DLL Sideloading #HWMonitor #infosec #kaspersky #malware #STX RAT #Supply Chain Security #watering hole attack
Daily CyberSecurity
The CPUID Watering Hole Attack Turning CPU-Z into a Trojan
In the world of system administration, few tools are as ubiquitous as CPU-Z and HWMonitor. These utilities are the β€œold reliables” for monitoring hardware health. However, on April 9, …
18 views
Daily Writeups
β€· Title: Cryptographic Homogeneity and Supply-Chain Contamination: Deconstructing the CVE-2026-5426 Incursion
════════════════════════
π€ͺ Author: ddos
════════════════════════
β΄΅ Time: Thu, 28 May 2026 02:06:13 +0000
════════════════════════
βŒ— Tags: #Vulnerability #ASP.NET hardcoded machineKey exploit #BLUEBEAM Godzilla web shell #Cobalt Strike BEACON dropper #Digital Knowledge LMS breach #IIS w3wp.exe memory forensics #KnowledgeDeliver CVE_2026_5426 patch #Mandiant threat intelligence telemetry #ViewState deserialization vulnerability #watering hole cyber attack #Windows Event ID 1316 anomaly
Information Security News
KnowledgeDeliver CVE-2026-5426 Patch Fixes Critical RCE
Mandiant warns of CVE-2026-5426: a critical KnowledgeDeliver patch fixing hardcoded ASP.NET machine keys exploited to deploy BLUEBEAM web shells.
15 views
Daily Writeups
β€· Title: Operation Double Barrel: Unveiling North Korean Cyber Espionage
════════════════════════
π€ͺ Author: Nam Phong
════════════════════════
β΄΅ Time: Mon, 03 Aug 2026 13:11:53 +0000
════════════════════════
βŒ— Tags: #Malware #cybersecurity #Gunra Ransomware #North Korean Hackers #Operation Double Barrel #Watering Hole
Information Security News
Operation Double Barrel: Unveiling North Korean Cyber Espionage
Occasionally, two ostensibly disparate cyber threats are inextricably linked by a shared arsenal of tools; South Korean cybersecurity experts have recently discovered that overlapping infrastructu…
9 views