Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: CL-UNK-0979 Exploit Zero-Day Flaw in Ivanti Connect Secure to Gain Access to Networks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Sun, 19 Jan 2025 00:06:17 +0000
════════════════════════
⌗ Tags: #Cyber Security #Vulnerability #CL_UNK_0979 #CVE_2025_0282 #SPAWNSNAIL #SPAWNSNAIL backdoor
Daily CyberSecurity
CL-UNK-0979 Exploit Zero-Day Flaw in Ivanti Connect Secure to Gain Access to Networks
Stay informed about the latest vulnerabilities in Ivanti products. CVE-2025-0282 and CVE-2025-0283 can allow attackers to remotely execute code and escalate privileges.
17 views
Daily Writeups
⤷ Title: CL-STA-0048: Chinese-Linked APT Targets Telecoms in South Asia
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 04 Feb 2025 02:35:43 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #apache Tomcat #Chinese APT Groups #CL_STA_0048 #Cobalt Strike #Hex Staging #IIS servers #MSSQL server #SoftEther VPN #SQLcmd #Winos4.0 Downloader
Cybersecurity News
CL-STA-0048: Chinese-Linked APT Targets Telecoms in South Asia
Uncover the details of a newly identified cyberespionage campaign, CL-STA-0048, targeting high-value organizations in South Asia.
20 views
Daily Writeups
⤷ Title: North Korean Hackers Deploy RustDoor and Koi Stealer to Target Cryptocurrency Developers on macOS
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Fri, 28 Feb 2025 02:12:23 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #Alluring Pisces #BlueNoroff #CL_STA_240 #Contagious Interview #Koi Stealer #macOS #Rustdoor #Sapphire Sleet #visual studio
Cybersecurity News
North Korean Hackers Deploy RustDoor and Koi Stealer to Target Cryptocurrency Developers on macOS
Discover the Koi Stealer & RustDoor malware and how it threatens macOS users in the cryptocurrency sector with sophisticated cyberattacks.
12 views
Daily Writeups
⤷ Title: African Financial Institutions Targeted: “CL-CRI-1014” IAB Uses Open-Source Tools & Forged Signatures for Covert Access
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sun, 29 Jun 2025 07:22:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Africa #Chisel #CL_CRI_1014 #Classroom Spy #cyberattack #cybersecurity #Financial Institutions #IAB #Initial Access Broker #Palo Alto Networks #PoshC2 #Threat Actor
Penetration Testing Tools
African Financial Institutions Targeted: "CL-CRI-1014" IAB Uses Open-Source Tools & Forged Signatures for Covert Access
Palo Alto Networks exposes CL-CRI-1014, an IAB targeting African financial institutions. They use open-source tools like PoshC2 and Classroom Spy, disguised with forged signatures for covert network access.
17 views
Daily Writeups
⤷ Title: Jingle Thief Cybercrime Gang Steals Hundreds of Thousands in Gift Card Fraud via Microsoft 365 Identity Abuse
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Oct 2025 00:22:24 +0000
════════════════════════
⌗ Tags: #Vulnerability #CL_CRI_1032 #Cloud Security #gift card fraud #Identity Abuse #Jingle Thief #Microsoft 365 #Morocco #phishing
Daily CyberSecurity
Jingle Thief Cybercrime Gang Steals Hundreds of Thousands in Gift Card Fraud via Microsoft 365 Identity Abuse
Unit 42 exposed Jingle Thief, a Morocco-linked group exploiting Microsoft 365 credentials via phishing. They maintain 10-month access to issue fraudulent gift cards worth hundreds of thousands of dollars.
17 views
Daily Writeups
⤷ Title: “CL Suite” Deception: Malicious Chrome Extension Steals 2FA Secrets and Meta Business Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:07:00 +0000
════════════════════════
⌗ Tags: #Malware #2FA Theft #Account Takeover #CL Suite #Cyber Security #Facebook Business #Instagram Business #Malicious Chrome Extension #Meta Business Suite #Socket Threat Research #TOTP Seeds
Daily CyberSecurity
"CL Suite" Deception: Malicious Chrome Extension Steals 2FA Secrets and Meta Business Data
"CL Suite" Chrome extension steals Meta Business 2FA seeds & data. Attackers bypass security even after uninstall. Reset 2FA immediately.
22 views
Daily Writeups
⤷ Title: CL-UNK-1068: The Stealthy Chinese Threat Actor Haunting Asian Infrastructure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 00:08:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Chinese APT #CL_UNK_1068 #cyber_espionage #cybersecurity #data exfiltration #GodZilla Web Shell #infosec #LOLBins #threat intelligence #Unit 42
Daily CyberSecurity
CL-UNK-1068: The Stealthy Chinese Threat Actor Haunting Asian Infrastructure
Unit 42 uncovers CL-UNK-1068, a Chinese APT targeting Asian critical infrastructure using stealthy web shells, LOLBINs, and screen-printed exfiltration.
20 views
Daily Writeups
⤷ Title: Unit 42 Unmasks CL-STA-1087’s Years-Long Cyber Espionage Against Asian Militaries
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 01:54:05 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #AppleChris Backdoor #APT #CL_STA_1087 #cyber_espionage #cybersecurity #infosec #MemFun Backdoor #State_Sponsored Threat #threat intelligence #Unit 42
Daily CyberSecurity
Unit 42 Unmasks CL-STA-1087's Years-Long Cyber Espionage Against Asian Militaries
Unit 42 exposes CL-STA-1087, a suspected Chinese state-sponsored cyber espionage group using custom backdoors to infiltrate Asian military networks.
22 views
Daily Writeups
⤷ Title: State-Sponsored Actors Weaponize Critical PAN-OS Zero-Day for Root
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 01:55:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #captive portal #CL_STA_1132 #CVE_2026_0300 #cyber_espionage #Edge Security #infosec #Palo Alto Networks #PAN_OS #Root RCE #Unit 42 #zero_day
Daily CyberSecurity
State-Sponsored Actors Weaponize Critical PAN-OS Zero-Day for Root
Palo Alto Networks warns of active root RCE (CVE-2026-0300) in PAN-OS. State-sponsored cluster CL-STA-1132 is targeting edge assets. Patch and restrict now!
11 views
Daily Writeups
⤷ Title: TinyRCT Backdoor Attacks Target Asian Critical Infrastructure
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 30 Jun 2026 06:29:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CL_STA_1062 #cyber_espionage #malware #Southeast Asia #TinyRCT
Daily CyberSecurity
TinyRCT Backdoor Attacks Target Asian Critical Infrastructure
At a glance Actor or Group: CL-STA-1062 (suspected Chinese-speaking actors) Activity Type: Cyber espionage and network infiltration Targets or Victims: Southeast Asian critical energy infrastructu…
20 views
Daily Writeups
⤷ Title: CL-STA-1062 Cyber Espionage Targets Southeast Asia
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 01 Jul 2026 06:53:56 +0000
════════════════════════
⌗ Tags: #Malware #CL_STA_1062 #Cyber Espionage #Infosec #TinyRCT
Information Security News
CL-STA-1062 Cyber Espionage Targets Southeast Asia
The Silent Infiltration Strategy A multi-year intelligence operation rarely reveals itself through a single catastrophic breach. Instead, it emerges through a clandestine sequence of quiet infiltr…
21 views
Daily Writeups
⤷ Title: Iran-Linked Hackers Pose as Dubai Airports Recruiters in Blinder Tunnel Campaign Against Iraq
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 08 Oct 2026 07:11:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AppDomainManager hijacking #Blinder Tunnel #CL_STA_1178 #fake job lure #Github C2 #Iran #ShelbyLoader #Unit 42
Daily CyberSecurity
Iran-Linked Hackers Pose as Dubai Airports Recruiters in Blinder Tunnel Campaign Against Iraq
At a Glance Actor CL-STA-1178, assessed as Iranian state-aligned (high confidence, per Unit 42) Activity Fake job lures, trojanized coding tests, GitHub-based espionage malware, credential phishin…
❤1
22 views
Daily Writeups
⤷ Title: Defeating the Mirage: A Hands-On Guide to HTTP/2 Request Smuggling (H2.CL)
════════════════════════
𐀪 Author: Huzaifah Tahir
════════════════════════
ⴵ Time: Sun, 11 Oct 2026 00:00:54 GMT
════════════════════════
⌗ Tags: #cl_and_te_issues #hacking #cybersecurity #h2cl_request_smuggling #web_exploitation
Medium
Defeating the Mirage: A Hands-On Guide to HTTP/2 Request Smuggling (H2.CL)
For years, the cybersecurity community treated HTTP/2 as the ultimate silver lining for transport-layer security. By replacing the archaic…
26 views
Daily Writeups
⤷ Title: CL-STA-0954 Deploys PEERSTITCH Malware on FortiGate Firewalls After FortiManager Breach
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 15 Oct 2026 02:11:28 +0000
════════════════════════
⌗ Tags: #Malware #CL_STA_0954 #CVE_2024_47575 #CVE_2025_61624 #FortiOS PEERSTITCH malware #PEERSTITCH malware #Unit 42
Daily CyberSecurity
CL-STA-0954 Deploys PEERSTITCH Malware on FortiGate Firewalls After FortiManager Breach
At a Glance Malware Family PEERSTITCH malware (64-bit Linux ARM64 in-memory process injector) Threat Actor Confirmed as cluster CL-STA-0954 (tracked by Mandiant as UNC5820); suspected nation-state…
17 views
Daily Writeups
⤷ Title: CL-UNK-1211 Deploys SysGoRAT Malware and AI Scripts Against Government Linux Servers
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 21 Oct 2026 07:15:08 +0000
════════════════════════
⌗ Tags: #Malware #AI security #CL_UNK_1211 #CL_UNK_1211 SysGoRAT malware #Linux Malware #SysGoRAT malware #Unit 42
Daily CyberSecurity
CL-UNK-1211 Deploys SysGoRAT Malware and AI Scripts Against Government Linux Servers
At a Glance Malware Family SysGoRAT malware (cross-platform Go remote access trojan), PHP web shells, and AI-generated bash and PHP scripts Threat Actor Confirmed as cluster CL-UNK-1211; nation-st…
20 views