Daily Writeups
@Daily_Writeups
4.08K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.08K subscribers
Daily Writeups
⤷ Title: Zimbra CVE-2024-27443 XSS Flaw Hits 129K Servers, Sednit Suspected
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 24 May 2025 14:28:08 +0000
════════════════════════
⌗ Tags: #Security #Cyber Attacks #Cyber Attack #Cybersecurity #Fancy Bear #Russia #Sednit #Vulnerability #XSS #Zimbra
Hackread
Zimbra CVE-2024-27443 XSS Flaw Hits 129K Servers, Sednit Suspected
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
71 views
Daily Writeups
⤷ Title: Russian APT28 Deploys “NotDoor” Backdoor Through Microsoft Outlook
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Thu, 04 Sep 2025 21:44:31 +0000
════════════════════════
⌗ Tags: #Security #Malware #APT28 #backdoor #Cyber Attack #Cybersecurity #Fancy Bear #Microsoft #NotDoor #Outlook
Hackread
Russian APT28 Deploys “NotDoor” Backdoor Through Microsoft Outlook
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
28 views
Daily Writeups
⤷ Title: NotDoor: A New Backdoor by Russia’s APT28 Is Hiding in Microsoft Outlook Macros
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Sep 2025 00:00:07 +0000
════════════════════════
⌗ Tags: #Malware #APT28 #cybersecurity #DLL side_loading #Fancy Bear #malware #Microsoft Outlook #NotDoor #VBA Macro
Daily CyberSecurity
NotDoor: A New Backdoor by Russia's APT28 Is Hiding in Microsoft Outlook Macros
A new report reveals NotDoor, a backdoor by Russia's APT28 that hides in Microsoft Outlook macros and uses specific email triggers to exfiltrate data and execute commands.
9 views
Daily Writeups
⤷ Title: GONEPOSTAL: New Outlook Backdoor by Russia’s APT28 Uses Email for C2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 10 Sep 2025 00:13:59 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #APT28 #cybersecurity #DLL side_loading #Fancy Bear #GONEPOSTAL #malware #Microsoft Outlook #VBA Macro
Daily CyberSecurity
GONEPOSTAL: New Outlook Backdoor by Russia's APT28 Uses Email for C2
A new report reveals GONEPOSTAL, a backdoor by Russia's APT28 that hides in Outlook macros and uses email itself as a covert command-and-control channel for espionage.
11 views
Daily Writeups
⤷ Title: The GRU’s Silent Shift: How BlueDelta Hijacks Ukrainian Webmail Using ngrok and Mocky
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:06:34 +0000
════════════════════════
⌗ Tags: #Cyber Security #2FA bypass #APT28 #BlueDelta #Credential Theft #cyber_espionage #Fancy Bear #GRU #Ngrok #phishing #UKR.NET #Ukraine
Daily CyberSecurity
The GRU’s Silent Shift: How BlueDelta Hijacks Ukrainian Webmail Using ngrok and Mocky
BlueDelta (APT28) is targeting UKR.NET users with a sophisticated phishing campaign using ngrok and Mocky to bypass security and steal 2FA codes.
33 views
Daily Writeups
⤷ Title: Russian BlueDelta (Fancy Bear) Uses PDFs to Steal Logins in Just 2 Seconds
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 12 Jan 2026 22:14:03 +0000
════════════════════════
⌗ Tags: #Security #BlueDelta #Cyber Attack #Cybersecurity #europe #Fancy Bear #Iran #Israel #Malware #Russia #Turkiye
Hackread
Russian BlueDelta (Fancy Bear) Uses PDFs to Steal Logins in Just 2 Seconds
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
21 views
Daily Writeups
⤷ Title: Fancy Bear Returns: APT28 Exploits Office Flaw in “Operation Neusploit”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 02:18:33 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT28 #CVE_2026_21509 #cyber_espionage #Fancy Bear #MiniDoor #Operation Neusploit #PixyNetLoader #RTF Exploit #russia #Zscaler ThreatLabz
Daily CyberSecurity
Fancy Bear Returns: APT28 Exploits Office Flaw in "Operation Neusploit"
APT28 launches "Operation Neusploit" targeting Europe. Hackers exploit CVE-2026-21509 to deploy MiniDoor malware via RTF files. Patch Office now.
10 views
Daily Writeups
⤷ Title: APT28 Weaponizes Office Flaw to Spy on NATO & Military
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 00:06:35 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT28 #BeardShell #CVE_2026_21509 #Fancy Bear #Filen.io #Military Espionage #NATO Targets #NotDoor #Trellix #WebDAV Exploit
Daily CyberSecurity
APT28 Weaponizes Office Flaw to Spy on NATO & Military
APT28 (Fancy Bear) weaponized CVE-2026-21509 in 24 hours to target NATO. New "BeardShell" and "NotDoor" malware steals emails. Patch Office now.
14 views
Daily Writeups
⤷ Title: Hiding in Plain Sight: APT28’s “Operation MacroMaze” Hits European Govs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:32:54 +0000
════════════════════════
⌗ Tags: #Cyber Security #APT28 #cyber_espionage #Fancy Bear #Forest Blizzard #Lab52 #living_off_the_land #Macro Malware #Operation MacroMaze #Spanish Government #Webhook.site
Daily CyberSecurity
Hiding in Plain Sight: APT28's "Operation MacroMaze" Hits European Govs
APT28's "Operation MacroMaze" targets Europe using Spanish gov decoys. The campaign uses "low-tech" macros & Webhook.site to evade detection.
20 views
Daily Writeups
⤷ Title: BadPaw and MeowMeow: Russian Cyber Offensive Targets Ukraine with Novel Malware Duo
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 00:42:07 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT28 #BadPaw #ClearSky #Fancy Bear #infosec #Malware Analysis #MeowMeow #Russian Cyber Attacks #steganography #threat intelligence #Ukraine Cyber War
Daily CyberSecurity
BadPaw and MeowMeow: Russian Cyber Offensive Targets Ukraine with Novel Malware Duo
ClearSky uncovers a Russian campaign targeting Ukraine with BadPaw and MeowMeow malware, using steganography and feline decoys for stealthy espionage.
24 views
Daily Writeups
⤷ Title: Echoes of Xagent: How the Sednit Collective is Weaponizing Legacy Code for 2026 Espionage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 07:12:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT28 #BeardShell #Covenant Framework #Cyber Espionage 2026 #ESET research #Fancy Bear #Filen Cloud #Icedrive C2 #Military Surveillance #Sednit #SlimAgent #threat intelligence #Xagent
Penetration Testing Tools
Echoes of Xagent: How the Sednit Collective is Weaponizing Legacy Code for 2026 Espionage
The Sednit collective, renowned for a series of high-profile cyber-espionage incursions in preceding years, has once again resurfaced,
18 views
Daily Writeups
⤷ Title: Inside the Arsenal: Exposed Server Reveals APT28’s ‘Roundish’ Toolkit and Advanced Cyber Espionage Tactics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 04:56:08 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT28 #CSS Side_Channel #cyber_espionage #cybersecurity #Fancy Bear #Hunt Intelligence #malware #Roundcube Vulnerability #Roundish Toolkit #threat intelligence
Daily CyberSecurity
Inside the Arsenal: Exposed Server Reveals APT28's 'Roundish' Toolkit and Advanced Cyber Espionage Tactics
Hunt Intelligence unmasks APT28's 'Roundish' toolkit from an exposed server, revealing advanced CSS side-channel attacks and stealthy Linux implants.
46 views
Daily Writeups
⤷ Title: APT28 Hijacks Home Routers to Steal Corporate Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 02:20:21 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #APT28 #CVE_2023_50224 #cybersecurity #DNS hijacking #Fancy Bear #GRU #MikroTik #NCSC #OAuth Theft #router security #TP_Link
Daily CyberSecurity
APT28 Hijacks Home Routers to Steal Corporate Credentials
NCSC unmasks APT28’s "digital funnel" using router DNS hijacking to steal OAuth tokens and passwords. Protect your remote workforce—patch your routers now.
32 views
Daily Writeups
⤷ Title: Russian Forest Blizzard Hackers Hijack Home Routers for Global Spying
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 11:33:26 +0000
════════════════════════
⌗ Tags: #Security #Hacking News #Surveillance #Cyber Attack #Cybersecurity #Fancy Bear #Forest Blizzard #Routers #Russia #SOHO #Storm_2754 #Vulnerability
Hackread
Russian Forest Blizzard Hackers Hijack Home Routers for Global Spying
Microsoft Threat Intelligence reveals how Russian hacking group Forest Blizzard uses home routers for DNS hijacking and spying.
23 views
Daily Writeups
⤷ Title: Operation Masquerade: FBI Disrupts Russian Router Hacking Campaign
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 16:18:48 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Security #APT28 #Cybersecurity #Fancy Bear #FBI #Forest Blizzard #hacking #Operation Masquerade #Router #Russia #Spying
Hackread
Operation Masquerade: FBI Disrupts Russian Router Hacking Campaign
Operation Masquerade: The FBI and DoJ disrupted a Russian GRU campaign that hijacked routers via DNS attacks to spy on users and steal credentials.
40 views
Daily Writeups
⤷ Title: The Zero-Click Vulnerability: Akamai Uncovers Incomplete Patch for APT28 Exploit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 14:54:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Akamai #APT28 #CVE_2026_32202 #Fancy Bear #infosec #LNK File #NTLM hash theft #NTLM Relay #smb #Windows Security #Zero_Click
Daily CyberSecurity
The Zero-Click Vulnerability: Akamai Uncovers Incomplete Patch for APT28 Exploit
Akamai uncovers CVE-2026-32202: A zero-click LNK flaw used by APT28 to steal Windows NTLM hashes silently. No user interaction required. Patch alert!
31 views
Daily Writeups
⤷ Title: The Zero-Click Ghost: How an Incomplete Patch Left Windows Open to Fancy Bear’s Credential Theft
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 15:15:59 +0000
════════════════════════
⌗ Tags: #Vulnerability #Akamai #APT28 #Credential Theft #CVE_2026_21510 #CVE_2026_32202 #Fancy Bear #InfoSec 2026 #NTLM Coercion #Windows Shell #Zero_Click Vulnerability
Penetration Testing Tools
The Zero-Click Ghost: How an Incomplete Patch Left Windows Open to Fancy Bear’s Credential Theft
An oversight within a security remediation has inadvertently carved a novel path for exploitation. While the developers successfully
15 views
Daily Writeups
⤷ Title: CISA Sounds the Alarm: State-Sponsored Hackers Weaponize New Windows and ScreenConnect Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 01:45:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #APT28 #CISA #ConnectWise #CVE_2024_1708 #CVE_2026_32202 #cyber_espionage #Fancy Bear #infosec #KEV Catalog #Kimsuky #Patch Alert #ToddlerShark #Windows Shell
Daily CyberSecurity
CISA Sounds the Alarm: State-Sponsored Hackers Weaponize New Windows and ScreenConnect Flaws
CISA warns as North Korean and Russian hackers weaponize ConnectWise and Windows Shell flaws. Patch by May 12, 2026, to prevent state-sponsored espionage.
17 views
Daily Writeups
⤷ Title: Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 14:43:57 +0000
════════════════════════
⌗ Tags: #Security #Phishing Scam #APT28 #Cyber Attack #Cybersecurity #Fancy Bear #Forest Blizzard #Hotels #Microsoft #Microsoft 365 #Phishing #ReliaQuest #Scam #WIFI
Hackread
Hackers Compromise Hotel Wi-Fi Gateways to Hijack Microsoft 365 Accounts
Compromised hotel Wi-Fi gateways redirect business travelers to fake Microsoft 365 login pages allowing attackers to steal credentials and authorization tokens.
16 views
Daily Writeups
⤷ Title: APT28 Uses Hookedge Backdoor to Spy on Naval Shipbuilder and Defense Firms in Two NATO Countries
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 22 Oct 2026 08:14:14 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT28 #cyber_espionage #Defense Industry #Fancy Bear #GRU #Hookedge backdoor #NATO #Swallowtail #Symantec
Daily CyberSecurity
APT28 Uses Hookedge Backdoor to Spy on Naval Shipbuilder and Defense Firms in Two NATO Countries
At a glance Actor Swallowtail (APT28, Fancy Bear, Forest Blizzard), linked by the US government to Russia’s GRU Activity Cyber espionage using the Hookedge backdoor, credential theft, and SS…
8 views