Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 25 Dec 2023 21:05:00 GMT
———————————————
✏️Title: Enhancing Web Browser Security: Implementing Script Signing and the Chain of Trust Mode
———————————————
📎Link: https://medium.com/p/7016d0ae32f2
———————————————
Tags: #chain_of_trust #cybersecurity #code_signing #browser_security

Medium

Enhancing Web Browser Security: Implementing Script Signing and the Chain of Trust Mode

A Deep Dive into Script Signing and Trust Chain Integration.

9 viewsDaily Writeups, 22:14

Daily Writeups

Medium

Enhancing Web Browser Security: Implementing Script Signing and the Chain of Trust Mode

A Deep Dive into Script Signing and Trust Chain Integration.

5 viewsDaily Writeups, 23:19

Daily Writeups

Medium

Enhancing Web Browser Security: Implementing Script Signing and the Chain of Trust Mode

A Deep Dive into Script Signing and Trust Chain Integration.

6 viewsDaily Writeups, 00:22

Daily Writeups

⤷ Title: How You Can Apply a Digital Signature to an Excel Macro Project
════════════════════════
𐀪 Author: SignMyCode
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 06:39:14 GMT
════════════════════════
⌗ Tags: #digital_signage #code_signing_certificate #cybersecurity #excel_macro #tutorial

Medium

How You Can Apply a Digital Signature to an Excel Macro Project

Meaning of Digital Signing

27 views07:05

Daily Writeups

⤷ Title: New macOS Infostealer Slips Past Apple’s Defenses with Code Signing and Notarization
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 18 Jul 2025 00:18:52 +0000
════════════════════════
⌗ Tags: #Malware #Apple Notarization #Code Signing #cybersecurity #Google Meet #Infostealer #Jamf Threat Labs #Ledger Live #macOS #Odyssey Stealer

Daily CyberSecurity

New macOS Infostealer Slips Past Apple’s Defenses with Code Signing and Notarization

Jamf Threat Labs has uncovered a sophisticated new macOS infostealer variant that managed to bypass Apple’s security defenses by leveraging valid code signing and notarization

6 views15:05

Daily Writeups

⤷ Title: Unveiling BaoLoader: How One Malware Family Abuses Trust for 7 Years
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Sep 2025 00:30:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BaoLoader #Code Signing #Cybercrime #cybersecurity #Expel #Fraud #Hacking #malware #security

Daily CyberSecurity

Unveiling BaoLoader: How One Malware Family Abuses Trust for 7 Years

Researchers expose BaoLoader, a malware operation that has systematically used at least 26 code-signing certificates over seven years to appear legitimate and bypass security.

6 views02:04

Daily Writeups

⤷ Title: Rhysida Ransomware Abuses Microsoft Trusted Signing to Deploy OysterLoader Via Teams Malvertising
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 04 Nov 2025 00:05:13 +0000
════════════════════════
⌗ Tags: #Malware #Bing Ads #Code Signing Abuse #initial access #Malvertising #OysterLoader #ransomware #Rhysida #Trusted Signing

Daily CyberSecurity

Rhysida Ransomware Abuses Microsoft Trusted Signing to Deploy OysterLoader Via Teams Malvertising

Rhysida ransomware is abusing Microsoft Trusted Signing to deploy OysterLoader (IAT) via Bing/Teams malvertising. The gang leveraged 40+ certificates to sign malware, bypassing security filters.

14 views02:04

Daily Writeups

⤷ Title: TamperedChef Malvertising Uses US Shell Companies to Sign Trojanized Apps with Valid Certificates, Deploying Stealth Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 00:42:28 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Acronis #Code_Signing Certificate #JavaScript Backdoor #Malvertising #Scheduled Task #SEO Poisoning #Signed Trojan #TamperedChef

Daily CyberSecurity

TamperedChef Malvertising Uses US Shell Companies to Sign Trojanized Apps with Valid Certificates, Deploying Stealth Backdoor

Acronis exposed TamperedChef, a global campaign using US shell companies to sign trojanized apps. The malware deploys a stealthy, obfuscated JavaScript backdoor via a scheduled task for long-term persistence.

80 views02:04

Daily Writeups

⤷ Title: The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Dec 2025 00:28:59 +0000
════════════════════════
⌗ Tags: #Malware #Apple Notarization #Code Signing #Cyber Security #Gatekeeper Bypass #Infostealer #Jamf Threat Labs #macOS Malware #MacSync Stealer #swift #ZK_Call Messenger

Daily CyberSecurity

The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices

The cat-and-mouse game between Apple’s security protocols and malware authors has taken a stealthy turn. A new report from Jamf Threat Labs reveals that the increasingly active MacSync Steal…

9 views04:04

Daily Writeups

⤷ Title: Shadows Vanish: The “Global Man” Exit Scam Leaves Malware Operators in the Dark
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 02:34:11 +0000
════════════════════════
⌗ Tags: #Cybercriminals #code_signing certificates #cybercrime forums #digital certificates #EV Certificates #Exit Scam #Global Man #kernel_mode drivers #malware obfuscation #security breach 2026 #Shadow Economy #threat intelligence

Penetration Testing Tools

Shadows Vanish: The "Global Man" Exit Scam Leaves Malware Operators in the Dark

In the clandestine digital underworld, a prominent purveyor of code-signing certificates has executed a high-profile disappearance. The Global

18 views04:04

Daily Writeups

⤷ Title: Microsoft’s Automated Suspensions Almost Silenced VeraCrypt and WireGuard
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:45:23 +0000
════════════════════════
⌗ Tags: #Technology #Code Signing #Developer Support #Driver Signing #Microsoft #open_source #Scott Hanselman #security vulnerability #VeraCrypt #Windows 11 #WireGuard

Daily CyberSecurity

Microsoft’s Automated Suspensions Almost Silenced VeraCrypt and WireGuard

Microsoft’s sudden suspension of VeraCrypt and WireGuard accounts reveals the dangers of automated bureaucracy in the critical path of security software.

26 views05:03

Daily Writeups

⤷ Title: Microsoft Ban Leaves VeraCrypt Unable to Sign Critical Windows Drivers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 03:00:45 +0000
════════════════════════
⌗ Tags: #Technology #Bootloader #Code Signing #Driver Signature Enforcement #encryption #Microsoft #Mounir Idrassi #open_source #Tech News 2026 #UEFI #VeraCrypt #Windows 11

Daily CyberSecurity

Microsoft Ban Leaves VeraCrypt Unable to Sign Critical Windows Drivers

Microsoft has suspended VeraCrypt’s developer account, blocking critical driver signatures. Without a fix, future Windows updates and system boots are at risk.

23 views05:04

Daily Writeups

⤷ Title: The Support Chat Trap: How a “Customer Screenshot” Led to a Critical Code-Signing Breach at DigiCert
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 07:36:49 +0000
════════════════════════
⌗ Tags: #Malware #Certificate Revocation #Code Signing #Cyber Security 2026 #DigiCert #endpoint security #malware #security breach #Social Engineering #Support Portal Exploit #Zhong Stealer

Penetration Testing Tools

The Support Chat Trap: How a "Customer Screenshot" Led to a Critical Code-Signing Breach at DigiCert

A seemingly innocuous file transmitted via a support chat escalated into a significant crisis for DigiCert. An adversary

11 views09:04

Daily Writeups

⤷ Title: “Lorem Ipsum” Loader Weaponizing Microsoft Teams via SEO Poisoning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:12:47 +0000
════════════════════════
⌗ Tags: #Malware #BlueVoyant #Code Signing #Cyber Security #DLL Sideloading #infosec #initial access broker #JFIF C2 #Lorem Ipsum Malware #Microsoft Teams #SEO Poisoning #Threat Intel

Daily CyberSecurity

"Lorem Ipsum" Loader Weaponizing Microsoft Teams via SEO Poisoning

BlueVoyant unmasks "Lorem Ipsum": a well-funded campaign using SEO poisoning and signed MS Teams installers to deploy stealthy backdoors via image files.

13 views09:04

Daily Writeups

⤷ Title: OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 15 May 2026 04:00:50 +0000
════════════════════════
⌗ Tags: #Data Leak #Atlas Browser #ChatGPT #Code_Signing Certificate #Codex #Cybersecurity 2026 #InfoSec News #macOS security #npm Supply Chain Attack #OpenAI #software update #TanStack

Daily CyberSecurity

OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach

OpenAI rotates code signing certificates following the TanStack npm breach. macOS users must update ChatGPT and Codex manually before June 12, 2026.

17 views05:04

Daily Writeups

⤷ Title: Microsoft Dismantles “Fox Tempest” Code-Signing Network Fueling Global Ransomware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 25 May 2026 07:11:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Code_Signing Certificate #Cyber Security #Fox Tempest #infosec #Malware_Signing_as_a_Service #Microsoft DCU #MSaaS #Resecurity #Rhysida ransomware #Vanilla Tempest

Daily CyberSecurity

Microsoft Dismantles "Fox Tempest" Code-Signing Network Fueling Global Ransomware

Microsoft's DCU and Resecurity have disrupted Fox Tempest, a major MSaaS ring that forged code-signing certificates for ransomware delivery.

25 views09:04

Daily Writeups

⤷ Title: New Tampered Chef Malware Campaigns Discovered in Productivity Software
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 07:15:17 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing #EvilAI #Info_Stealers #Malvertising #Productivity Software #Tampered Chef #threat intelligence

Daily CyberSecurity

New Tampered Chef Malware Campaigns Discovered in Productivity Software

Researchers uncover the Tampered Chef malware cluster disguised as PDF editors and tools. Learn how these stealthy threats bypass corporate defenses.

15 views09:04

Daily Writeups

⤷ Title: Fake RVTools Installer Deploys Modular Python RAT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 07:01:03 +0000
════════════════════════
⌗ Tags: #Malware #Code Signing Abuse #Modular Python RAT #RVTools Scam #Sectigo Certificate #VBScript Obfuscation

Daily CyberSecurity

Fake RVTools Installer Deploys Modular Python RAT

A fake RVTools installer campaign distributes a modular Python RAT. Learn how this malware uses signed certificates to evade security controls.

19 views09:04

Daily Writeups

⤷ Title: [DEEP RESEARCH] When Software Trust Becomes a Rented Service
════════════════════════
𐀪 Author: Wes Young
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 14:46:00 GMT
════════════════════════
⌗ Tags: #infosec #malware #microsoft #code_signing #threat_intelligence

Medium

[DEEP RESEARCH] When Software Trust Becomes a Rented Service

The certificate looked legitimate because that was the product.

8 views16:04

Daily Writeups

⤷ Title: Golden Gh0st RAT: Inside the DigiCert Certificate Theft
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 07:33:56 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Code Signing #CylindricalCanine #DigiCert #Golden Gh0st RAT #GoldenEyeDog #SmartScreen

Information Security News

Golden Gh0st RAT: Inside the DigiCert Certificate Theft

Cybercriminals have found a way to weaponise Windows’ faith in digital signatures. They compromised the workstation of a DigiCert employee and intercepted certificates bound for the company&…

10 views08:04

About

Blog

Apps

Platform