Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: GhostPairing: New Attack Hijacks WhatsApp via Linked Devices, Tricking Users with Fake Facebook QR Code
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 00:22:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Hijack #Gen Digital #GhostPairing #Linked Devices #phishing #QR Code Scam #User Trust #WhatsApp
Daily CyberSecurity
GhostPairing: New Attack Hijacks WhatsApp via Linked Devices, Tricking Users with Fake Facebook QR Code
Add as a preferredsource on Google A deceptive new cyberattack campaign is turning one of WhatsApp’s most convenient
19 views
Daily Writeups
⤷ Title: The Invisible Roommate: How the GhostPairing Scam Steals Your WhatsApp Without a Password
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:53:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #Cybersecurity 2025 #Device Pairing #Gen Digital #GhostPairing #phishing #privacy #QR Code Scam #Social Engineering #WhatsApp
Penetration Testing Tools
The Invisible Roommate: How the GhostPairing Scam Steals Your WhatsApp Without a Password
Researchers at Gen have reported a new WhatsApp account-takeover technique dubbed GhostPairing. The attack appears mundane and arouses
12 views
Daily Writeups
⤷ Title: North Korea’s Kimsuky Upgrades DOCSWAP Malware to Hijack Smartphones via QR Codes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:18:02 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #DocSwap #DPRK #ENKI Research #Kimsuky #mobile security #North Korea #QR Code Scam #rat #smishing
Daily CyberSecurity
North Korea’s Kimsuky Upgrades DOCSWAP Malware to Hijack Smartphones via QR Codes
Kimsuky is deploying a new DOCSWAP RAT via QR codes and smishing. The DPRK-linked malware turns phones into surveillance tools for data theft.
13 views
Daily Writeups
⤷ Title: The Payroll Trap: New Quishing Campaign Uses Fake CAPTCHAs to Hijack Employee Paychecks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:01:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CAPTCHA Bypass #Credential Theft #Cyfirma #Employee Awareness #mobile security #Payroll Fraud #phishing #QR code phishing #Quishing #social engineering
Daily CyberSecurity
The Payroll Trap: New Quishing Campaign Uses Fake CAPTCHAs to Hijack Employee Paychecks
A sophisticated new phishing campaign is targeting employees where they are most vulnerable—their paychecks—by leveraging QR codes to bypass corporate security defenses. A new analysis by CYFIRMA …
26 views
Daily Writeups
⤷ Title: The Invisible Code: How HTML QR Codes Are Slipping Past Email Filters
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 10:30:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Theft #Cybersecurity 2026 #email security #HTML Table #Infosec #phishing #QR code #Quishing #SANS #Social Engineering
Information Security News
The Invisible Code: How HTML QR Codes Are Slipping Past Email Filters
Cyber adversaries have conceived an ingenious method to circumvent the security protocols utilized by email services to intercept malicious QR codes. Rather than employing conventional image files…
11 views
Daily Writeups
⤷ Title: The Invisible Mosaic: How Tycoon’s HTML QR Codes and Teams Scams Are Blinding Modern Defenses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:53:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Barracuda research #callback phishing #email security 2026 #Facebook copyright scam #Homoglyph Attack #HTML table QR #Microsoft Teams scam #Phishing_as_a_Service #QR Code Phishing #Tycoon toolkit
Penetration Testing Tools
The Invisible Mosaic: How Tycoon’s HTML QR Codes and Teams Scams Are Blinding Modern Defenses
In the preceding month, analysts at Barracuda have identified a flurry of sophisticated email-borne incursions targeting corporations and
19 views
Daily Writeups
⤷ Title: Hackers Use Signal QR Codes to Spy on Military and Political Leaders
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 12:35:04 +0000
════════════════════════
⌗ Tags: #Security #Scams and Fraud #Cyber Crime #Cybersecurity #europe #Fake Support #Fraud #Germany #Malware #Military #Privacy #QR Code #Scam
Hackread
Hackers Use Signal QR Codes to Spy on Military and Political Leaders
Hackers are using Signal QR codes and fake support scams to spy on military and political leaders, German security agencies warn.
21 views
Daily Writeups
⤷ Title: Telegram Phishing Campaign Hijacks Accounts by Abusing Trust
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Feb 2026 00:00:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #API Abuse #Cyber Security #Cyfirma #infosec #mobile security #phishing #QR Code Scam #social engineering #Telegram
Daily CyberSecurity
Telegram Phishing Campaign Hijacks Accounts by Abusing Trust
A new phishing campaign is targeting Telegram users by turning the platform’s own security features into a weapon. CYFIRMA has uncovered an operation that bypasses traditional credential har…
42 views
Daily Writeups
⤷ Title: Total Dominion: The CVSS 10.0 Flaw in Nanobot Allowing Hackers to Hijack Your WhatsApp
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:55:21 +0000
════════════════════════
⌗ Tags: #Vulnerability #AI Assistant #Critical Vulnerability #CVE_2026_2577 #CVSS 10.0 #Nanobot #QR code theft #session takeover #Tech News 2026 #Tenable #WebSocket hijacking #WhatsApp
Penetration Testing Tools
Total Dominion: The CVSS 10.0 Flaw in Nanobot Allowing Hackers to Hijack Your WhatsApp
Security researchers from Tenable have unearthed a critical vulnerability, designated CVE-2026-2577, within the prominent AI assistant Nanobot, a
18 views
Daily Writeups
⤷ Title: Quishing Nedir? QR Phishing saldırısı nasıl gerçekleşir? ⚠️
════════════════════════
𐀪 Author: Mustafa YILMAZ
════════════════════════
ⴵ Time: Sat, 07 Mar 2026 08:34:25 GMT
════════════════════════
⌗ Tags: #data_security #cybersecurity #qr_code #hacking #data_science
Medium
Quishing Nedir? QR Phishing saldırısı nasıl gerçekleşir? ⚠️
Quishing (QR Phishing); “QR” ve “oltalama” (phishing) kelimelerinin birleşimiyle oluşur. Siber saldırganların sahte veya değiştirilmiş QR…
25 views
Daily Writeups
⤷ Title: Missile Alert Phishing Exploits Iran-US-Israel Conflict for Microsoft Logins
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 16:42:19 +0000
════════════════════════
⌗ Tags: #Security #Scams and Fraud #Cofense #Cyber Attack #Cybersecurity #Iran #Israel #Phishing #QR Code #Scam #USA
Hackread
Missile Alert Phishing Exploits Iran-US-Israel Conflict for Microsoft Logins
New Phishing scam uses fake missile alerts and the ongoing conflict involving Iran to target users with QR codes and fake government emails to steal Microsoft passwords.
32 views
Daily Writeups
⤷ Title: One Scan to Zero: The QR Code Trap Wiping Trust Wallets via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 20 Apr 2026 06:11:26 +0000
════════════════════════
⌗ Tags: #Cybercriminals #BNB Smart Chain #crypto drainer #Cyfirma #Drainer_as_a_Service #ERC_20 Approve #infosec #QR Code Scam #Telegram Phishing #Trust Wallet #USDT #Web3 security
Daily CyberSecurity
One Scan to Zero: The QR Code Trap Wiping Trust Wallets via Telegram
A new QR code "drainer" targets Trust Wallet users on Telegram. It exploits the ERC-20 approve mechanism to wipe USDT. Learn how to protect your assets now.
17 views
Daily Writeups
⤷ Title: Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 08 May 2026 09:07:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Espionage #Device Code Flow #Graphish #M365 Hardening #Microsoft 365 #OAuth #Passwordless Security #phishing 2026 #Proofpoint #QR Code Phishing #SquarePhish2 #TA2723
Penetration Testing Tools
Hackers Hijack Microsoft 365 Accounts via Legitimate Device Code Flows
Both fraudulent actors and state-sponsored syndicates have commenced the large-scale deployment of a novel stratagem to usurp Microsoft
13 views
Daily Writeups
⤷ Title: Scammers Send Physical Phishing Letters to Steal Ledger Wallet Seed Phrases
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Sun, 17 May 2026 11:55:35 +0000
════════════════════════
⌗ Tags: #Scams and Fraud #Phishing Scam #Security #Crypto #Cyber Attack #Cybersecurity #France #Fraud #Italy #Ledger #Phishing #Privacy #QR #QR Code #Scam
Hackread
Scammers Send Physical Phishing Letters to Steal Ledger Wallet Seed Phrases
Scammers are mailing fake Ledger phishing letters to users in Italy with QR codes that trick crypto wallet users into revealing seed phrases.
29 views
Daily Writeups
⤷ Title: QR Code Phishing (Quishing): The Hidden Cyber Threat Hiding in Plain Sight
════════════════════════
𐀪 Author: Nyanga Piethras
════════════════════════
ⴵ Time: Mon, 18 May 2026 07:39:54 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #phishing #qr_code #infosec #cybersecurity
Medium
QR Code Phishing (Quishing): The Hidden Cyber Threat Hiding in Plain Sight
Cybercriminals are weaponizing something you use every day, and most people never see it coming.
12 views
Daily Writeups
⤷ Title: Vibe coding QR codes: How I stopped sending HTML files over Slack
════════════════════════
𐀪 Author: Roberto Maggio
════════════════════════
ⴵ Time: Wed, 27 May 2026 09:24:51 GMT
════════════════════════
⌗ Tags: #qr_code #hacking #claude_code #ai #vibe_coding
Medium
Vibe coding QR codes: How I stopped sending HTML files over Slack
The simplest way to share AI-generated HTML turned out to come from a tool nobody thinks of as hosting.
9 views
Daily Writeups
⤷ Title: This Boring Little Square Wants You to Scan It. If You Do, Your Passwords Are Gone.
════════════════════════
𐀪 Author: Pop123
════════════════════════
ⴵ Time: Sat, 11 Jul 2026 11:28:57 GMT
════════════════════════
⌗ Tags: #hacking #technology #cybersecurity #qr_code #passwords
Medium
This Boring Little Square Wants You to Scan It. If You Do, Your Passwords Are Gone.
This Boring Little Square Wants You to Scan It. If You Do, Your Passwords Are Gone. You scan QR codes without thinking — on menus, parking meters, and parcel slips. Attackers noticed. One scan can …
32 views