Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: LockBit 5.0 Resurfaces After Takedown: New Cross-Platform Ransomware Hits Linux and ESXi
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 04:03:05 +0000
════════════════════════
⌗ Tags: #Malware #cybercrime #ESXi #Linux #LockBit 5.0 #Operation Cronos #ransomware #Threat Actor #Trend Micro #windows
Penetration Testing Tools
LockBit 5.0 Resurfaces After Takedown: New Cross-Platform Ransomware Hits Linux and ESXi
LockBit 5.0 resurfaces with advanced Windows, Linux, and ESXi variants, boasting heavy obfuscation and anti-forensic techniques, making it more dangerous than its predecessors.
15 views
Daily Writeups
⤷ Title: LockBit: from the Russian laboratory to the never-ending shadow of cybercrime
════════════════════════
𐀪 Author: Rodrigo Gutierrez
════════════════════════
ⴵ Time: Tue, 30 Sep 2025 01:09:49 GMT
════════════════════════
⌗ Tags: #lockbit #ransomware #malware #cybersecurity #cyber_defense
Medium
LockBit: from the Russian laboratory to the never-ending shadow of cybercrime
In 2019, on Russian underground forums, a piece of malware appeared without glamour, baptized simply as “ABCD” after the extension it left…
12 views
Daily Writeups
⤷ Title: Wait, What?! LockBit 5.0 is Back? (Part 1)
════════════════════════
𐀪 Author: Abdelrahmanhamdy
════════════════════════
ⴵ Time: Fri, 03 Oct 2025 21:34:05 GMT
════════════════════════
⌗ Tags: #lockbit #cybersecurity #threat_intelligence #cybercrime
Medium
🤯 Wait, What?! LockBit 5.0 is Back? (Part 1)
So, I was scrolling through Hacker News and saw a headline for LockBit 5.0. I honestly couldn’t believe my eyes. Are they really still…
12 views
Daily Writeups
⤷ Title: DFIR Tool Hijacked: Ransomware Group Storm-2603 Abuses Velociraptor for Stealthy LockBit/Babuk Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Oct 2025 01:50:50 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Babuk #cybersecurity #DFIR #LockBit #ransomware #Storm_2603 #Tool Abuse #Velociraptor
Daily CyberSecurity
DFIR Tool Hijacked: Ransomware Group Storm-2603 Abuses Velociraptor for Stealthy LockBit/Babuk Attacks
Cisco Talos confirms Storm-2603 is abusing the DFIR tool Velociraptor for persistence and arbitrary code execution, deploying LockBit and Babuk ransomware against VMware and Windows servers.
15 views
Daily Writeups
⤷ Title: Ransomware Group Storm-2603 Abuses Velociraptor for Stealthy LockBit/Babuk Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 13 Oct 2025 02:52:41 +0000
════════════════════════
⌗ Tags: #Malware #Babuk #cybersecurity #DFIR #LockBit #ransomware #Storm_2603 #Tool Abuse #Velociraptor
Penetration Testing Tools
Ransomware Group Storm-2603 Abuses Velociraptor for Stealthy LockBit/Babuk Attacks
Cisco Talos confirms Storm-2603 is abusing an outdated Velociraptor build (CVE-2025-6264) for persistence and arbitrary code execution, deploying LockBit and Babuk ransomware.
61 views
Daily Writeups
⤷ Title: LockBit Rises: New Cross-Platform 5.0 Ransomware Eclipses Former Self
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 27 Oct 2025 09:38:28 +0000
════════════════════════
⌗ Tags: #Malware #cybercrime #ESXi #Linux #LockBit #Operation Cronos #ransomware
Penetration Testing Tools
LockBit Rises: New Cross-Platform 5.0 Ransomware Eclipses Former Self
After Operation Cronos, LockBit resurfaced with the cross-platform 5.0 ("ChuongDong") ransomware, which uses advanced anti-analysis and hits Windows, Linux, and ESXi servers.
20 views
Daily Writeups
⤷ Title: LockBit 5.0 Resurfaces Amid Chaos as Ransomware Market Enters New Phase of Fragmentation
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 18 Nov 2025 03:48:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #CheckPointResearch #cybercrime #Fragmentation #LockBit #LockBit5 #OperationCronos #RansomHub #ransomware
Penetration Testing Tools
LockBit 5.0 Resurfaces Amid Chaos as Ransomware Market Enters New Phase of Fragmentation
The ransomware market fragmented into 85 active groups in Q3 2025. LockBit 5.0 resurfaced, but Check Point notes the landscape is now highly fluid and less predictable.
12 views
Daily Writeups
⤷ Title: UK Exposes Bulletproof Hosting Operator Linked to LockBit and Evil Corp
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 19:02:47 +0000
════════════════════════
⌗ Tags: #Cyber Crime #Bulletproof #Cybersecurity #Evil Corp #Five Eyes #Hosting #LockBit #NCA #Ransomware #Russia
Hackread
UK Exposes Bulletproof Hosting Operator Linked to LockBit and Evil Corp
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
43 views
Daily Writeups
⤷ Title: LockBit 5.0 Resurfaces Stronger: New Variant Blinds Defenders by Disabling Windows ETW for Stealth Encryption
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 00:06:57 +0000
════════════════════════
⌗ Tags: #Malware #anti_forensics #Cross_Platform #Cybercrime #ESXi #ETW Blinding #LockBit 5.0 #Operation Cronos #ransomware
Daily CyberSecurity
LockBit 5.0 Resurfaces Stronger: New Variant Blinds Defenders by Disabling Windows ETW for Stealth Encryption
Despite takedown, LockBit 5.0 resurges as a cross-platform threat. The new variant blinds Windows Event Tracing (ETW), uses Invisible Mode for stealth encryption, and overwrites free disk space.
26 views
Daily Writeups
⤷ Title: New 01flip Ransomware Hits APAC Critical Infra: Cross-Platform Rust Weapon Uses Sliver C2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 03:10:55 +0000
════════════════════════
⌗ Tags: #Malware #01flip #APAC #Cross_Platform #CVE_2019_11580 #LockBit #ransomware #Rust #Sliver
Daily CyberSecurity
New 01flip Ransomware Hits APAC Critical Infra: Cross-Platform Rust Weapon Uses Sliver C2
New 01flip ransomware (written in Rust) targets APAC critical infra across Windows/Linux. The attackers use Sliver for C2 and older exploits for access. A curious "lockbit" ignore list was found in the code.
19 views
Daily Writeups
⤷ Title: GOLD SALEM Abuses Velociraptor DFIR Tool as Ransomware Precursor Following SharePoint ToolShell Exploitation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 00:20:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #China_nexus #DFIR Abuse #GOLD SALEM #LockBit #ransomware #Sharepoint #ToolShell #Velociraptor #Warlock
Daily CyberSecurity
GOLD SALEM Abuses Velociraptor DFIR Tool as Ransomware Precursor Following SharePoint ToolShell Exploitation
GOLD SALEM (Storm-2603) is exploiting SharePoint via ToolShell then abusing the Velociraptor DFIR tool as a ransomware precursor. The group deploys Warlock and LockBit 3.0 variants, often targeting critical infra.
14 views
Daily Writeups
⤷ Title: The Extortion Deficit: Ransomware Payments Plunge by 33% as Victims Refuse to Pay
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 02:06:41 +0000
════════════════════════
⌗ Tags: #Malware #AML Act 2020 #BlackCat #Cybersecurity 2024 #Financial Crime #FinCEN #Healthcare Data #LockBit #Manufacturing Security #ransomware #U.S. Treasury
Penetration Testing Tools
The Extortion Deficit: Ransomware Payments Plunge by 33% as Victims Refuse to Pay
The U.S. Treasury is cautiously suggesting that the ransomware market may be beginning to cool. In a new
12 views
Daily Writeups
⤷ Title: A Desperate Cartel: Inside the Unlikely Alliance of Qilin, DragonForce, and a Fading LockBit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:43:35 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cyber_espionage #Cybercrime Cartel #data extortion #DragonForce #LockBit #Operation Cronos #Qilin #RaaS #ransomware #Yarix Intelligence
Daily CyberSecurity
A Desperate Cartel: Inside the Unlikely Alliance of Qilin, DragonForce, and a Fading LockBit
In a digital underworld increasingly fractured by law enforcement takedowns and eroding trust, three of the most notorious ransomware groups have allegedly joined forces. A new report by the Yarix…
19 views
Daily Writeups
⤷ Title: LockBit 5.0 Sustains Global Ransomware Dominance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 09 Jan 2026 00:01:30 +0000
════════════════════════
⌗ Tags: #Malware #AhnLab #Cybercrime #Data Leak Site #information_security #LockBit #Malware Analysis #RaaS #ransomware
Daily CyberSecurity
LockBit 5.0 Sustains Global Ransomware Dominance
The hydra of the cybercrime world has grown another head. Since its emergence in late 2019, the LockBit gang has arguably become the most prolific ransomware operator in history. Now, a new analys…
19 views
Daily Writeups
⤷ Title: DragonForce: The Rise of a New “Ransomware Cartel” Built on LockBit and Conti DNA
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:42:44 +0000
════════════════════════
⌗ Tags: #Malware #BlackLock #Conti #Cyber Cartel #decryptor #DragonForce #infosec #LockBit 3.0 #Malware Analysis #RansomBay #ransomware #S2W
Daily CyberSecurity
DragonForce: The Rise of a New "Ransomware Cartel" Built on LockBit and Conti DNA
S2W reveals DragonForce is a "cartel" hacking rivals like BlackLock. Built on LockBit 3.0 code, they offer "Ransombay" services. A decryptor was found.
19 views
Daily Writeups
⤷ Title: One Code to Lock Them All: LockBit 5.0 Unifies Attacks on Windows, Linux, and ESXi
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:30:29 +0000
════════════════════════
⌗ Tags: #Malware #Acronis TRU #Cybercrime #ESXi Ransomware #Linux Ransomware #LockBit 5.0 #Lockbit ransomware #Malware Analysis #SmokeLoader #Unified Codebase #Windows Security
Daily CyberSecurity
One Code to Lock Them All: LockBit 5.0 Unifies Attacks on Windows, Linux, and ESXi
LockBit 5.0 launches with a unified codebase targeting Windows, Linux, and ESXi. Acronis reveals identical encryption and ties to SmokeLoader.
20 views
Daily Writeups
⤷ Title: Unpatched ActiveMQ Flaw Leads to Repeat Breach and LockBit Ransomware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 01:57:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Apache ActiveMQ #CVE_2023_46604 #infosec #Java Spring #LOCKBIT Black #network_security #ransomware #rce #Remote Code Execution #The DFIR Report
Daily CyberSecurity
Unpatched ActiveMQ Flaw Leads to Repeat Breach and LockBit Ransomware
The DFIR Report reveals how a persistent attacker exploited CVE-2023-46604 twice in 18 days to deploy LockBit ransomware. Patch your ActiveMQ servers now!
19 views
Daily Writeups
⤷ Title: The Unstoppable Phoenix: How the Phorpiex Botnet Reborn as a P2P Crypto-Thief
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 09:36:54 +0000
════════════════════════
⌗ Tags: #Malware #Bitsight Research #Crypto Clipper #Cybersecurity 2026 #Information Stealer #LockBit Black #P2P Malware #Phorpiex #ransomware #Sextortion #Twizt Botnet
Penetration Testing Tools
The Unstoppable Phoenix: How the Phorpiex Botnet Reborn as a P2P Crypto-Thief
An ancient botnet, long relegated to the periphery of collective memory, has re-emerged with a lethality far exceeding
9 views
Daily Writeups
⤷ Title: The Rise of the Oligopoly: How Qilin, LockBit, and The Gentlemen Dominate the 2026 Ransomware Landscape
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 02:15:59 +0000
════════════════════════
⌗ Tags: #Malware #Akira #Check Point Research #cybercrime trends #FortiGate CVE_2024_55591 #Industrial Manufacturing Security #LockBit 5.0 #Qilin #Ransomware 2026 #The Gentlemen #threat intelligence
Penetration Testing Tools
The Rise of the Oligopoly: How Qilin, LockBit, and The Gentlemen Dominate the 2026 Ransomware Landscape
The ransomware landscape is undergoing a period of significant consolidation as major syndicates reassert their dominance. After two
17 views
Daily Writeups
⤷ Title: LockBit 5.0: La pesadilla que no murió con la Operación Cronos
════════════════════════
𐀪 Author: Juan Ricardo Palacio | Ransomware Help
════════════════════════
ⴵ Time: Thu, 04 Jun 2026 18:20:33 GMT
════════════════════════
⌗ Tags: #cibersecurity #ransomware #data_recovery #lockbit #infosec
Medium
LockBit 5.0: La pesadilla que no murió con la Operación Cronos
Eran las 2:47 AM cuando el sistema de monitoreo dejó de enviar alertas, no porque no hubiera actividad, sino porque ya no había sistema.
29 views