Daily Writeups
@Daily_Writeups
3.5K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.5K subscribers
Daily Writeups
⤷ Title: Silently Swapped: How ClipXDaemon Hijacks Linux Cryptowallets Without a C2 Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:02:53 +0000
════════════════════════
⌗ Tags: #Malware #Bincrypter #ClipXDaemon #Cryptocurrency Hijacker #cybersecurity #Cyble Research #infosec #Linux Malware #Process Masquerading #threat intelligence #X11 Security
Daily CyberSecurity
Silently Swapped: How ClipXDaemon Hijacks Linux Cryptowallets Without a C2 Server
Cyble Research unmasks ClipXDaemon, a C2-less Linux malware that silently hijacks cryptocurrency wallet addresses in X11 clipboard environments.
8 views
Daily Writeups
⤷ Title: The Invisible Thread: Inside the Multi-Stage Python Injection Powering VioletRAT
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 07:08:06 +0000
════════════════════════
⌗ Tags: #Malware #.NET CLR Hosting #AMSI Bypass #Cyber Security 2026 #malware analysis #Process Hollowing #Python injection #RAT #shellcode #SonicWall #VioletRAT
Information Security News
The Invisible Thread: Inside the Multi-Stage Python Injection Powering VioletRAT
Security vanguards at SonicWall have unmasked a nascent campaign disseminating the VioletRAT malware. This offensive orchestrates a multi-tiered delivery sequence and a sophisticated Python-based …
24 views
Daily Writeups
⤷ Title: The End of the Static Era: Trellix Uncovers Fully Fileless Remcos RAT Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 06:03:57 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Fileless Malware #infosec #Malware Analysis #Process Hollowing #Remcos RAT #Remote Access Trojan #threat intelligence #Trellix
Daily CyberSecurity
The End of the Static Era: Trellix Uncovers Fully Fileless Remcos RAT Campaign
Trellix uncovers a stealthy, fileless Remcos RAT campaign utilizing process hollowing to execute entirely in memory and evade traditional security.
26 views
Daily Writeups
⤷ Title: The Complete Penetration Testing Process: Step-by-Step Guide (Beginner to Pro)
════════════════════════
𐀪 Author: Tejas Kamble
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 11:18:18 GMT
════════════════════════
⌗ Tags: #penetration_testing #cybersecurity #pentesting #process #ethical_hacking
Medium
The Complete Penetration Testing Process: Step-by-Step Guide (Beginner to Pro)
Imagine a hacker trying to break into your system right now. Would they succeed? … In today’s digital world, cyberattacks are not just…
17 views
Daily Writeups
⤷ Title: The Stealthy Evolution of the DesckVB RAT Infection Chain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 01:34:25 +0000
════════════════════════
⌗ Tags: #Malware #.NET Reflection #C2 #cybersecurity #DesckVB RAT #Fileless Malware #In_Memory Attack #JavaScript Trojan #Lat61 #malware #powershell #Process Hijacking
Daily CyberSecurity
The Stealthy Evolution of the DesckVB RAT Infection Chain
Lat61 Team uncovers DesckVB RAT, a stealthy 2026 Trojan using in-memory .NET loaders & JS obfuscation to hijack systems and evade AV. Learn how it works.
8 views
Daily Writeups
⤷ Title: PureRAT Unmasked: The Stealthy, Multi-Stage “Dynamic Loader” Targeting Windows
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 02:00:16 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Fileless Malware #infosec #Malware Analysis #Process Hollowing #PureRAT #rat #Remote Access Trojan #steganography #Trellix #UAC bypass
Daily CyberSecurity
PureRAT Unmasked: The Stealthy, Multi-Stage "Dynamic Loader" Targeting Windows
Trellix uncovers PureRAT, a modular Trojan hiding malware in PNG images. Learn how it uses steganography and fileless delivery to bypass Windows security.
18 views
Daily Writeups
⤷ Title: Cisco Talos Unveils “Living-off-the-Land” Tactics Threatening macOS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 23 Apr 2026 07:03:52 +0000
════════════════════════
⌗ Tags: #Malware #Apple #Cisco Talos #cybersecurity #DevOps #Enterprise Security #infosec #LotL #macOS #Process Monitoring #Spotlight Metadata #Threat Hunting
Daily CyberSecurity
Cisco Talos Unveils "Living-off-the-Land" Tactics Threatening macOS
Cisco Talos reveals how attackers use native macOS features like Spotlight and SNMP to hijack enterprise workstations. Secure your DevOps environment today.
16 views
Daily Writeups
⤷ Title: Locked in eBPF: Meet Jailer, the Next-Gen Process Jailing System for Linux Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 08:06:41 +0000
════════════════════════
⌗ Tags: #Open Source Tool #BPF task_storage #Cybersecurity 2026 #eBPF #Jailer #Linux Kernel #Linux Security #mac #Mandatory Access Control #Process Isolation #System Administration
Penetration Testing Tools
Locked in eBPF: Meet Jailer, the Next-Gen Process Jailing System for Linux Security
Jailer is an eBPF-powered Mandatory Access Control (MAC) system for Linux. It enforces ultra-granular policies on files, networks, and execution via BPF maps.
21 views
Daily Writeups
⤷ Title: Deep Diagnostics: Microsoft Supercharges Sysinternals with AI-Era Process Tracking and Linux Support
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 11 May 2026 03:21:06 +0000
════════════════════════
⌗ Tags: #Microsoft #Autoruns #Debian 13 #DebugView #IT Administration #Linux Security #Powertoys #ProcDump #Process Explorer #RHEL 10 #Sysinternals #Sysmon #Windows Troubleshooting
Penetration Testing Tools
Deep Diagnostics: Microsoft Supercharges Sysinternals with AI-Era Process Tracking and Linux Support
Microsoft has modernized several quintessential utilities within the Sysinternals Suite, a collection frequently utilized by system administrators, support
11 views
Daily Writeups
⤷ Title: By Design No More: Microsoft Edge Vv148.0 to Block Plaintext Password Scrapes from Process Memory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:39:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #App_Bound Encryption #Chromium Architecture #Cleartext Credentials #Edge v148.0 Stable #Local Privilege Escalation #Memory Dump #microsoft edge #Process Memory Scraping #Threat Intelligence 2026 #Tom Jøran Sønstebyseter Rønning
Daily CyberSecurity
By Design No More: Microsoft Edge Vv148.0 to Block Plaintext Password Scrapes from Process Memory
Microsoft pivots on its "by design" stance, updating Edge to version 148.0 to stop caching your entire plaintext password vault in active volatile memory.
11 views
Daily Writeups
⤷ Title: PureLogs Info Stealer Campaign Exploits Trusted Windows Process
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 May 2026 09:02:45 +0000
════════════════════════
⌗ Tags: #Malware #Fileless Malware #FortiGuard Labs #info_stealer #Phishing Campaign #Process Hollowing #PureLogs #threat intelligence
Daily CyberSecurity
PureLogs Info Stealer Campaign Exploits Trusted Windows Process
FortiGuard Labs exposes a highly evasive PureLogs info stealer campaign utilizing process hollowing and fileless execution.
14 views
Daily Writeups
⤷ Title: Sophisticated GPU Cryptojacking Campaign Surfaced by Microsoft Experts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 07:11:24 +0000
════════════════════════
⌗ Tags: #Malware #AI Search Poisoning #GPU Cryptojacking #malware #Microsoft Defender #Process Hollowing #ScreenConnect #threat intelligence
Daily CyberSecurity
Sophisticated GPU Cryptojacking Campaign Surfaced by Microsoft Experts
A stealthy GPU cryptojacking campaign leverages AI search poisoning and process hollowing injection to hijack high-end rigs. Read the Microsoft report.
30 views
Daily Writeups
⤷ Title: Reimage Downloader PUP Analysis
════════════════════════
𐀪 Author: Justin C.
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 20:08:41 GMT
════════════════════════
⌗ Tags: #infosec_write_ups #process #cybersecurity #infosec #computer_science
Medium
Reimage Downloader PUP Analysis
What do an Authenticode-signed executable, browser cookie harvesting, regsvr32 abuse, and filenames like invoice.exe and 不需要.exe have in…
11 views
Daily Writeups
⤷ Title: AsyncRAT AI Lures Target Users Hunting AI Skills
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 18 Jun 2026 08:03:39 +0000
════════════════════════
⌗ Tags: #Malware #AI Threats #AsyncRAT #AutoHotkey #FortiGuard Labs #Process Hollowing #rat
Daily CyberSecurity
AsyncRAT AI Lures Target Users Hunting AI Skills
FortiGuard Labs uncovered AsyncRAT AI lures using fake AI guides and an AutoHotkey loader to inject a stealthy .NET RAT into memory.
12 views
Daily Writeups
⤷ Title: Remcos RAT Delivered by a Steganographic Loader in Phishing Emails
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 26 Jun 2026 06:12:01 +0000
════════════════════════
⌗ Tags: #Malware #Fileless Malware #India #K7 Security Labs #Loader_as_a_Service #phishing #Process Hollowing #Remcos RAT #steganographic loader
Daily CyberSecurity
Remcos RAT Delivered by a Steganographic Loader in Phishing Emails
A steganographic loader hides Remcos RAT inside a bitmap and runs it in memory. K7 ties the fileless campaign to India via fake GST lures.
12 views
Daily Writeups
⤷ Title: Penetration Testing Process
════════════════════════
𐀪 Author: Maleesha Rathnayaka
════════════════════════
ⴵ Time: Sun, 19 Jul 2026 14:37:18 GMT
════════════════════════
⌗ Tags: #cybersecurity #process #steps #penetration_testing
Medium
Penetration Testing Process
පෙන්ටෙස්ට් ක්‍රියාවලිය කියන්නේ නිකන්ම එක තැනක ඉඳන් තව තැනකට යන සරල රෙසිපියක් (recipe) නෙමෙයි. මොකද හැම කොම්පැනියකම නෙට්වර්ක් එක සහ අවශ්‍යතා…
23 views
Daily Writeups
⤷ Title: Cruciferra Crypter Service Blends Sophisticated Evasion Techniques
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Wed, 22 Jul 2026 13:00:54 +0000
════════════════════════
⌗ Tags: #Malware #BYOVD #Cruciferra #Crypter Service #Malware Evasion #Process Ghosting
Information Security News
Cruciferra Crypter Service Blends Sophisticated Evasion Techniques
Advanced Obfuscation Protocols The more arduous a malicious payload is to discern within disk boundaries and memory allocations, the longer it enjoys uninterrupted latency. The illicit Cruciferra …
6 views
Daily Writeups
⤷ Title: Unmasking Process Hollowing: A Deep-Dive into Memory Forensics & PE Injection
════════════════════════
𐀪 Author: Pop123
════════════════════════
ⴵ Time: Sun, 26 Jul 2026 07:57:02 GMT
════════════════════════
⌗ Tags: #process_hollowing #hacking #cybersecurity #digital_forensics #malware
Medium
Unmasking Process Hollowing: A Deep-Dive into Memory Forensics & PE Injection
Deconstructing how stealth malware hijacks legitimate system processes and how to detect reflective payloads in RAM.
5 views
Daily Writeups
⤷ Title: Cruciferra Crypter Service Cloaks RATs and Infostealers for Many Threat Actors
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 27 Jul 2026 01:11:31 +0000
════════════════════════
⌗ Tags: #Malware #BYOVD #Cruciferra crypter service #Crypter #Infostealer #Malware_as_a_Service #process ghosting #Proofpoint #Remote Access Trojan
Daily CyberSecurity
Cruciferra Crypter Service Cloaks RATs and Infostealers for Many Threat Actors
A single crypter is now hiding malware for many unrelated criminal crews at once. Proofpoint researchers call it Cruciferra. The Cruciferra crypter service wraps remote access trojans and infostea…
24 views
Daily Writeups
⤷ Title: Linux Process Injection via ptrace: Unmasking Memory Patching & Shared Library Hijacking
════════════════════════
𐀪 Author: Pop123
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 20:41:50 GMT
════════════════════════
⌗ Tags: #linux #hacking #technology #cybersecurity #process_injection
Medium
Linux Process Injection via ptrace: Unmasking Memory Patching & Shared Library Hijacking
How threat actors abuse process tracing to rewrite executable instructions in volatile RAM, and how modern EDRs detect memory modification…
7 views