Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: Infected Out of the Box: “Keenadu” Backdoor Hijacks Android at the Firmware Level
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 00:27:38 +0000
════════════════════════
⌗ Tags: #Malware #Ad Fraud #Android Malware #Cyber Security #Firmware Backdoor #kaspersky #Keenadu #libandroid_runtime #mobile security #supply chain attack #Triada #Zygote Process
Daily CyberSecurity
Infected Out of the Box: "Keenadu" Backdoor Hijacks Android at the Firmware Level
Kaspersky uncovers Keenadu, a firmware-level Android backdoor infecting the Zygote process. This pre-installed malware gives attackers full control.
13 views
Daily Writeups
⤷ Title: The Taxman’s Shadow: How a $2M Fraud Syndicate Impersonated Indonesia’s Official Coretax Service
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:21:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #accessibility services abuse #Android malware #Coretax Indonesia #DJP Online #Gigabud.RAT #GoldFactory #Group_IB #MMRat #Taotie Trojan #tax fraud 2026 #Vishing
Penetration Testing Tools
The Taxman’s Shadow: How a $2M Fraud Syndicate Impersonated Indonesia’s Official Coretax Service
In Indonesia, a sophisticated fraudulent enterprise has been unmasked, masquerading as the official Coretax fiscal service. Adversaries orchestrated
10 views
Daily Writeups
⤷ Title: The AI Evolution of Mobile Malware: SURXRAT V5 Combines Surveillance, Ransomware, and LLMs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 02:21:57 +0000
════════════════════════
⌗ Tags: #Malware #AI Malware #Android Malware #Cyble Research #Firebase C2 #infosec #MaaS #Malware_as_a_Service #mobile security #rat #Remote Access Trojan #SURXRAT V5
Daily CyberSecurity
The AI Evolution of Mobile Malware: SURXRAT V5 Combines Surveillance, Ransomware, and LLMs
Cyble Research unmasks SURXRAT V5, a professionalized Android RAT experimenting with AI-assisted modules and hybrid monetization via Firebase infrastructure.
17 views
Daily Writeups
⤷ Title: “Oblivion” Malware Hijacks Android 15 with Unprecedented Stealth
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:22:11 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service exploit #Android 15 security #Android malware #APK builder #Certo research #Cyber Security 2026 #HVNC #mobile banking trojan #Oblivion RAT #Remote Access Trojan
Penetration Testing Tools
"Oblivion" Malware Hijacks Android 15 with Unprecedented Stealth
An advertisement hawking Oblivion, a novel Remote Access Trojan (RAT) designed explicitly for Android ecosystems, has materialized on
17 views
Daily Writeups
⤷ Title: The Red Alert Trap: How Arid Viper’s New Android Spyware Masquerades as a Life-Saving App
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 03:44:14 +0000
════════════════════════
⌗ Tags: #Cyber Security #Acronis #Android malware #Arid Viper #Cyber Espionage 2026 #Hamas #Israel #mobile security #Oref Alert #phishing #Red Alert App #SMS scam #Spyware
Penetration Testing Tools
The Red Alert Trap: How Arid Viper’s New Android Spyware Masquerades as a Life-Saving App
A nascent espionage campaign has been chronicled within Israel, masterfully masquerading as a ubiquitous emergency broadcast service. Malefactors
10 views
Daily Writeups
⤷ Title: The Silent Rhythm: How BeatBanker Malware Uses a Looping Audio File to Hijack Android Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 10:23:19 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Banking Trojan #BeatBanker #BTMOB RAT #Cryptocurrency Miner #cybersecurity #infosec #Kaspersky Labs #mobile security #Remote Access Trojan
Daily CyberSecurity
The Silent Rhythm: How BeatBanker Malware Uses a Looping Audio File to Hijack Android Devices
Kaspersky uncovers BeatBanker, an Android malware in Brazil using an audio loop to evade detection while mining crypto and stealing banking credentials.
21 views
Daily Writeups
⤷ Title: APT-C-23 Weaponized Israel’s ‘Red Alert’ App for Mobile Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 00:33:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Acronis TRU #Android Malware #APT_C_23 #Arid Viper #cybersecurity #infosec #Mobile Espionage #Red Alert Trojan #threat intelligence #Trojanized App
Daily CyberSecurity
APT-C-23 Weaponized Israel's 'Red Alert' App for Mobile Espionage
Acronis TRU uncovers a trojanized Red Alert rocket warning app targeting Israelis. Linked to APT-C-23, this Android malware steals data while alerting users.
22 views
Daily Writeups
⤷ Title: Operation False Siren: The Weaponization of Israel’s Red Alert App for Geo-Fenced Espionage
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 00:12:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android Malware #cybersecurity #Geo_Fencing #infosec #Mobile Espionage #Operation False Siren #Red Alert Spyware #smishing #threat intelligence #Trojan
Daily CyberSecurity
Operation False Siren: The Weaponization of Israel's Red Alert App for Geo-Fenced Espionage
Discover how Operation False Siren weaponizes Israel's Red Alert app via smishing, deploying advanced Android spyware for geo-fenced mobile espionage.
22 views
Daily Writeups
⤷ Title: The Silent Miner: How “BeatBanker” Malware Spoofs Starlink to Hijack Android Smartphones
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 07:24:05 +0000
════════════════════════
⌗ Tags: #Malware #Android malware #banking trojan #BeatBanker #Brazil #BTMOB RAT #cryptocurrency mining #Google Play Phishing #Infosec #mobile security #Starlink #Tech News 2026 #XMRig
Penetration Testing Tools
The Silent Miner: How "BeatBanker" Malware Spoofs Starlink to Hijack Android Smartphones
Analysts at Kaspersky Lab have unearthed an Android application christened BeatBanker, which cunningly masquerades as the Starlink satellite
14 views
Daily Writeups
⤷ Title: The Silent Hijack: How AI-Powered Android Trojans Are Intercepting Real-Time Payments
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 07:11:28 +0000
════════════════════════
⌗ Tags: #Malware #accessibility permissions #Android malware #banking trojan #BeatBanker #BTMOB RAT #Cryptocurrency Theft #Malware_as_a_Service #mobile security 2026 #Pix payment security #PixRevolution #TaxiSpy RAT
17 views
Daily Writeups
⤷ Title: Digital Wraiths: How Android’s “God Mode” is Turning Smartphones into Banking Trojans
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:52:53 +0000
════════════════════════
⌗ Tags: #Android #Malware #Accessibility Service #Android 17 #Android malware #banking trojan #India Cybercrime #Infosec #phishing #SBI YONO Scam #Smartphone Security #WhatsApp Malware
Penetration Testing Tools
Digital Wraiths: How Android’s "God Mode" is Turning Smartphones into Banking Trojans
Digital marauders have devised methodologies to transmute mundane Android smartphones into entirely subjugated apparatuses. Indian authorities report that
20 views
Daily Writeups
⤷ Title: More Than a Miner: The Evasive MiningDropper Framework Hijacking Android Worldwide
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 01:00:34 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #BTMOB #cybersecurity #Cyble #infosec #Infostealer #Lumolight #Malware Delivery Framework #MiningDropper #mobile security #rat
Daily CyberSecurity
More Than a Miner: The Evasive MiningDropper Framework Hijacking Android Worldwide
Cyble reveals MiningDropper, a modular Android threat delivering RATs and infostealers via multi-stage payloads. Protect your mobile devices now.
26 views
Daily Writeups
⤷ Title: The PDF Trap: How the Anatsa Banking Trojan Infiltrated Google Play’s Top 200 Tools
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 07:26:56 +0000
════════════════════════
⌗ Tags: #Malware #Anatsa #Android malware #banking trojan #Cyber Espionage #Dropper App #Google Play Store #HEUR:Trojan_Downloader.AndroidOS.Anatsa.a #kaspersky #mobile security #Russian Cyber Threats
Penetration Testing Tools
The PDF Trap: How the Anatsa Banking Trojan Infiltrated Google Play’s Top 200 Tools
A clandestine Android dropper, masquerading as a mundane PDF reader, has once again infiltrated the Google Play Store.
5 views
Daily Writeups
⤷ Title: The Tadashi Files: Inside the xlabs_v1 Botnet Targeting 4 Million Android Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 03 May 2026 02:17:23 +0000
════════════════════════
⌗ Tags: #Malware #ADB Exploit #Android Malware #cybersecurity #DDoS_for_hire #Hunt Intelligence #IoT security #Mirai botnet #Port 5555 #RakNet Flood #Tadashi #xlabs_v1
Daily CyberSecurity
The Tadashi Files: Inside the xlabs_v1 Botnet Targeting 4 Million Android Devices
Hunt Intelligence dismantles xlabs_v1, a Mirai-derived botnet targeting 4M Android devices via port 5555. See how an exposed server leaked the entire toolkit.
16 views
Daily Writeups
⤷ Title: Rigged Game: How North Korea’s ScarCruft Group Infiltrated a Gaming Platform to Deploy BirdCall Spyware
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 06 May 2026 07:54:33 +0000
════════════════════════
⌗ Tags: #Malware #Android malware #APT37 #BirdCall #BirdCall Backdoor #Cybersecurity 2026 #ESET #North Korea #RoKRAT #ScarCruft #sqgame.net #supply chain attack #Windows Spyware #Yanbian
Penetration Testing Tools
Rigged Game: How North Korea’s ScarCruft Group Infiltrated a Gaming Platform to Deploy BirdCall Spyware
The seemingly innocuous download of a mobile game could culminate in a smartphone being compromised by sophisticated spyware.
13 views
Daily Writeups
⤷ Title: TrickMo’s Stealthy Upgrade: Android Banking Malware is Pivoting to The Open Network
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 12:03:25 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Banking Trojan #cybersecurity #infosec #Malware Analysis #mobile security #network_security #SOCKS5 Proxy #ThreatFabric #TON Network #TrickMo
Daily CyberSecurity
TrickMo’s Stealthy Upgrade: Android Banking Malware is Pivoting to The Open Network
ThreatFabric uncovers TrickMo Variant C, a new Android banking trojan using the decentralized TON network to evade detection and turn phones into proxies.
14 views
Daily Writeups
⤷ Title: Android Carrier Billing Fraud Campaign Exposed by zLabs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 26 May 2026 08:10:02 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android Malware #carrier billing fraud #fake apps #mobile security #premium SMS abuse #zLabs
Daily CyberSecurity
Android Carrier Billing Fraud Campaign Exposed by zLabs
A sophisticated Android carrier billing fraud campaign hit users worldwide. Learn how fake apps trigger premium SMS abuse and how to stay safe.
15 views
Daily Writeups
⤷ Title: Sophisticated Android Banking Trojan Threat Evades Detection via High-Trust Lures
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 08:17:46 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service #Android Malware #CRIL #cyber fraud #mobile banking security #OverlayPhantom
Daily CyberSecurity
Sophisticated Android Banking Trojan Threat Evades Detection via High-Trust Lures
A new Android banking trojan threat targets 180+ apps. Learn how credential harvesting overlays steal banking data.
29 views
Daily Writeups
⤷ Title: Rokarolla Android Banking Trojan Steals Financial Data
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 25 Jun 2026 06:30:56 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Banking Trojan #CVE_2023_35674 #CVE_2023_40088 #CVE_2024_0044 #Rokarolla
Daily CyberSecurity
Rokarolla Android Banking Trojan Steals Financial Data
The Rokarolla Android banking trojan executes a complete device takeover. It targets 217 apps and steals credentials through fake overlays and keyloggers.
8 views
Daily Writeups
⤷ Title: Glitch SPY Android RAT Spreads Through a Fake Polish Rental App
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 07:30:11 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service abuse #Android Malware #Android RAT #Brokewell #Crypto Clipper #Cyble #fake rental app #Glitch SPY
Daily CyberSecurity
Glitch SPY Android RAT Spreads Through a Fake Polish Rental App
At a glance Malware family Glitch SPY (Android RAT and builder platform) Threat actor Unattributed; operator unidentified Targets People seeking rental properties in Poland; Polish speakers Delive…
12 views