Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: SharePoint Shadow: Havoc’s FUD Malware Conceals Cyber Attacks
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Wed, 05 Mar 2025 00:25:32 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Campaign #FUD Malware #Havoc C2 #Microsoft Graph API #Sharepoint #SharePointC2Init #Undetectable
Daily CyberSecurity
SharePoint Shadow: Havoc's FUD Malware Conceals Cyber Attacks
Explore the latest insights on FUD Malware and how the Havoc framework enables undetectable cyber operations.
23 views
Daily Writeups
⤷ Title: China’s Jewelbug APT Breaches Russian IT Provider for 5 Months, Using Yandex Cloud and Graph API C2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Oct 2025 02:12:02 +0000
════════════════════════
⌗ Tags: #Cyber Security #China APT #cyber_espionage #Jewelbug #Microsoft Graph API #russia #Supply Chain #Yandex Cloud
Daily CyberSecurity
China's Jewelbug APT Breaches Russian IT Provider for 5 Months, Using Yandex Cloud and Graph API C2
Symantec exposed China's Jewelbug APT in an unprecedented 5-month intrusion on a Russian IT provider. The group used Yandex Cloud for data exfiltration and Graph API for stealthy C2 via custom malware.
22 views
Daily Writeups
⤷ Title: OAuthSeeker: Red Team Tool for OAuth Phishing Attacks Against Azure and Office365
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 08:30:35 +0000
════════════════════════
⌗ Tags: #Open Source Tool #Credential Theft #cybersecurity #Go Binary #Microsoft Azure #Microsoft Graph API #OAuth Phishing #OAuthSeeker #Office365 #Red Team Tool
Penetration Testing Tools
OAuthSeeker: Red Team Tool for OAuth Phishing Attacks Against Azure and Office365
OAuthSeeker is a red team tool for launching OAuth phishing attacks against Azure/Office365, featuring automated token refresh and a customizable frontend.
35 views
Daily Writeups
⤷ Title: Ink Dragon’s Global Mesh: How Chinese Spies Turn Compromised Government Servers into C2 Relay Nodes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 00:27:49 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT41 #ASP.NET #Check Point Research #cyber_espionage #Earth Alux #IIS Listener #Ink Dragon #Microsoft Graph API #Relay Network #ShadowPad
Daily CyberSecurity
Ink Dragon’s Global Mesh: How Chinese Spies Turn Compromised Government Servers into C2 Relay Nodes
Ink Dragon is weaponizing government servers in Europe using a relay-centric mesh. By hijacking IIS servers, they mask C2 traffic across global networks.
21 views
Daily Writeups
⤷ Title: The Trojan in the Sidebar: How an Abandoned App Turned the Official Microsoft Store into a Phishing Engine
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 15:58:47 +0000
════════════════════════
⌗ Tags: #Malware #AgreeTo #Credential Harvesting #Cyber Security #malware #Microsoft Graph API #Microsoft Office Add_in #Outlook security #phishing #Tech News 2026 #Vercel #WA200004949
Penetration Testing Tools
The Trojan in the Sidebar: How an Abandoned App Turned the Official Microsoft Store into a Phishing Engine
Researchers have documented the inaugural instance of a deleterious Microsoft Outlook extension proliferating through the official Office Add-in
23 views
Daily Writeups
⤷ Title: M365Pwned: Red Team tooling for Microsoft 365 exploitation via Microsoft Graph API
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 07:50:08 +0000
════════════════════════
⌗ Tags: #Open Source Tool #M365Pwned #Microsoft Graph API #Red Team
Penetration Testing Tools
M365Pwned: Red Team tooling for Microsoft 365 exploitation via Microsoft Graph API
Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens — no user interaction required.
26 views
Daily Writeups
⤷ Title: The End of the Restart: How Windows “Hotpatching” Will Seal Zero-Days Without a Single Reboot
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:38:23 +0000
════════════════════════
⌗ Tags: #Windows #Cyber Security 2026 #Hotpatching #IT Administration #Microsoft Graph API #Microsoft Intune #Patch Tuesday #Windows 11 #Windows 11 Enterprise #Windows Autopatch #zero_day
Penetration Testing Tools
The End of the Restart: How Windows "Hotpatching" Will Seal Zero-Days Without a Single Reboot
The necessity of rebooting following the installation of security updates has long been a source of profound exasperation
❤1
15 views
Daily Writeups
⤷ Title: Harvester APT Goes Cross-Platform: New Linux Backdoor Abuses Microsoft Graph API
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 01:08:40 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #Carbon Black #cyber_espionage #GoGra #Harvester #infosec #Linux Backdoor #Malware Analysis #Microsoft Graph API #South Asia Security #Symantec
Daily CyberSecurity
Harvester APT Goes Cross-Platform: New Linux Backdoor Abuses Microsoft Graph API
Harvester APT expands to Linux using Microsoft Graph API for C2. Learn how the "GoGra" variant uses Outlook and "Zomato Pizza" lures to evade detection.
16 views
Daily Writeups
⤷ Title: Hidden in the Cloud: Harvester’s New Linux Malware Abuses Microsoft Graph API for Invisible Espionage
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 27 Apr 2026 15:11:12 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2026 Cyber Threats #APT group #Cyber Espionage #GoGra #Harvester #Linux Backdoor #malware analysis #Microsoft Graph API #Microsoft Outlook C2 #Social Engineering #South Asia Security
Penetration Testing Tools
Hidden in the Cloud: Harvester’s New Linux Malware Abuses Microsoft Graph API for Invisible Espionage
The Harvester threat collective has re-emerged, wielding a sophisticated instrument designed to elude conventional defensive parameters. Security researchers
17 views
Daily Writeups
⤷ Title: Cisco Talos Unmasks UAT-8302’s Global Government Espionage Network
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:01:36 +0000
════════════════════════
⌗ Tags: #Cyber Security #Malware #APT #China_nexus #Cisco Talos #CloudSorcerer #Cyberespionage #Earth Estries #Microsoft Graph API #NetDraft #Nosy Door #Threat Intel #UAT_8302 #VShell
Daily CyberSecurity
Cisco Talos Unmasks UAT-8302’s Global Government Espionage Network
Cisco Talos exposes UAT-8302, a China-linked APT group infiltrating governments via NetDraft and CloudSorcerer. Learn how they share tools with notorious APTs.
8 views
Daily Writeups
⤷ Title: UAT-8302’s Global Espionage Machine Is Hijacking Governments via the Cloud
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 07 May 2026 08:58:26 +0000
════════════════════════
⌗ Tags: #Malware #Chinese Espionage #Cisco Talos #CloudSorcerer v3 #Cyber Security 2026 #FINALDRAFT #Government Cyber Attacks #Microsoft Graph API #NetDraft #NetDraft Backdoor #Rust Malware #SNOWRUST #UAT_8302
Penetration Testing Tools
UAT-8302’s Global Espionage Machine Is Hijacking Governments via the Cloud
The Chinese cyber-espionage collective UAT-8302 has, for nearly a annum, conducted surreptitious incursions against governmental entities across South
39 views
Daily Writeups
⤷ Title: Bypassing Edge for Business DLP via Graph API
════════════════════════
𐀪 Author: Dhimitri
════════════════════════
ⴵ Time: Fri, 12 Jun 2026 21:57:29 GMT
════════════════════════
⌗ Tags: #cybersecurity #microsoft_edge #hacking #bypass #microsoft_graph_api
Medium
Bypassing Edge for Business DLP via Graph API
PT-BR
26 views
Daily Writeups
⤷ Title: HOLLOWGRAPH Malware Hides Command-and-Control in Microsoft 365 Calendars
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 08:08:43 +0000
════════════════════════
⌗ Tags: #Malware #calendar C2 #Cavern framework #cyber_espionage #DNS tunneling #HOLLOWGRAPH malware #Lyceum #Microsoft 365 Security #Microsoft Graph API abuse
Daily CyberSecurity
HOLLOWGRAPH Malware Hides Command-and-Control in Microsoft 365 Calendars
At a glance Malware family HOLLOWGRAPH, linked with high confidence to the Cavern backdoor framework Threat actor Unattributed. Low-confidence possible link to Lyceum, an Iranian-nexus group and O…
31 views