Daily Writeups
@Daily_Writeups
3.48K subscribers
2 photos
127K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.48K subscribers
Daily Writeups
⤷ Title: The StreamSpy Breach: Patchwork’s Stealthy New Trojan Targets Pakistan Defense
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 03:25:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #DoNot Group #InfoSec 2026 #MSBuild #Pakistan Defense #Patchwork APT #Python RAT #QiAnXin #Spyder Malware #StreamSpy #WebSocket C2
Penetration Testing Tools
The StreamSpy Breach: Patchwork’s Stealthy New Trojan Targets Pakistan Defense
The hacking group known as Patchwork—also referred to as Dropping Elephant and Maha Grass—has once again come under
14 views
Daily Writeups
⤷ Title: The Installer Trap: New SetupHijack Tool Bypasses Windows UAC via Race Conditions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 04:16:34 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Authenticode #Cybersecurity 2026 #MSBuild #MSI Exploitation #privilege escalation #Race Condition #red teaming #SetupHijack #UAC bypass #Windows Security
Information Security News
The Installer Trap: New SetupHijack Tool Bypasses Windows UAC via Race Conditions
SetupHijack is a security research tool that exploits race conditions and insecure file handling in Windows installer and update processes. It targets scenarios where privileged installers or upda…
38 views
Daily Writeups
⤷ Title: The ClickFix Trap: PHALT#BLYX Uses Fake BSODs to Hijack Hotel Systems
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 08:44:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Booking.com #BSOD #ClickFix #DcRAT #Hospitality Security #Living_off_the_land #MSBuild #PHALT#BLYX #PowerShell #Securonix #Social Engineering
Information Security News
The ClickFix Trap: PHALT#BLYX Uses Fake BSODs to Hijack Hotel Systems
Notifications regarding Booking.com cancellations involving substantial financial transactions appear as mere routine for hospitality providers. Yet, such correspondence serves as the harbinger fo…
26 views
Daily Writeups
⤷ Title: SHADOW#REACTOR Malware Builds Remcos RAT via Text Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 00:27:15 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #Fileless Malware #living_off_the_land #Malware Analysis #MSBuild #powershell #Remcos RAT #Securonix #SHADOW#REACTOR #Text_Based Payload
Daily CyberSecurity
SHADOW#REACTOR Malware Builds Remcos RAT via Text Files
Securonix reveals SHADOW#REACTOR: A stealthy framework using "text-only" fragments to deploy Remcos RAT in memory via MSBuild. Avoids disk detection.
25 views
Daily Writeups
⤷ Title: Shadows in the RAM: The SHADOW#REACTOR Campaign Unleashes Remcos RAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 15 Jan 2026 08:09:03 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reactor #Cyber Security #Fileless Attack #LOLBins #Malware 2026 #MSBuild #PowerShell #Remcos RAT #Securonix #SHADOW#REACTOR #threat intelligence
Penetration Testing Tools
Shadows in the RAM: The SHADOW#REACTOR Campaign Unleashes Remcos RAT
Adversaries have orchestrated a sophisticated campaign utilizing a multi-stage infection vector to deploy the Remcos RAT, a remote
20 views
Daily Writeups
⤷ Title: The Serpent’s Shadow: Unmasking “AnonDoor,” the Confucius Syndicate’s New Python-Powered Spyware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 07 Mar 2026 02:18:37 +0000
════════════════════════
⌗ Tags: #Malware #Anondoor #Confucius APT #Cyberespionage #DLL Sideloading #Info_stealer #modular backdoor #MSBuild exploitation #Pakistan #Python Malware #Tech News 2026 #threat intelligence
Penetration Testing Tools
The Serpent’s Shadow: Unmasking "AnonDoor," the Confucius Syndicate’s New Python-Powered Spyware
The Confucius syndicate persists in its cyberespionage operations targeting South Asian nations. A nascent campaign is meticulously aimed
15 views
Daily Writeups
⤷ Title: From Taiwan to Tehran: How TA416 Pivots its PlugX Backdoor to Global Flashpoints
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 01:01:14 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #china #cyber_espionage #EU #infosec #Middle East #MSBuild #NATO #OAuth Abuse #PlugX #Proofpoint #Spearphishing #TA416
Daily CyberSecurity
From Taiwan to Tehran: How TA416 Pivots its PlugX Backdoor to Global Flashpoints
Proofpoint uncovers TA416's pivot to EU, NATO, and Middle East diplomacy. Learn how this state-linked actor uses updated PlugX and Cloudflare lures in 2026.
17 views
Daily Writeups
⤷ Title: RenPy Loader Spreads Amatera Stealer Through Fake Game Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 07:15:57 +0000
════════════════════════
⌗ Tags: #Malware #Amatera Stealer #EtherHiding #fake game downloads #Infostealer #Malware_as_a_Service #Malwarebytes #MSBuild abuse #RenPy Loader
Daily CyberSecurity
RenPy Loader Spreads Amatera Stealer Through Fake Game Downloads
Attackers are hiding malware inside fake game and software installers. Malwarebytes Labs calls the threat RenPy Loader. Once it runs, the loader starts a multi-stage chain that ends in Amatera Ste…
12 views