Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: The Python Predator: PXA Stealer Surges 10% as it Targets Global Finance and Crypto in 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 01:00:09 +0000
════════════════════════
⌗ Tags: #Malware #Certutil #Crypto Stealer #CyberProof #Financial Cyberattacks #infosec #Keylogging #LOLBins #Malware Analysis #phishing #PXA Stealer #Q1 2026 #Telegram C2
Daily CyberSecurity
The Python Predator: PXA Stealer Surges 10% as it Targets Global Finance and Crypto in 2026
PXA Stealer activity surges in Q1 2026, targeting global finance. Learn how this Python-based malware uses Telegram and LOLBins to hijack crypto and banking data.
22 views
Daily Writeups
⤷ Title: STX RAT: The New Financial Predator Hiding in the “Start of Text”
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Apr 2026 09:00:35 +0000
════════════════════════
⌗ Tags: #Malware #AMSI Ghosting #encryption #eSentire #Financial Cybersecurity #HVNC #infosec #malware #rat #Stealth Malware #STX RAT #threat intelligence
Daily CyberSecurity
STX RAT: The New Financial Predator Hiding in the "Start of Text"
eSentire TRU uncovers STX RAT, a modular Trojan targeting finance with HVNC, AMSI Ghosting, and advanced encryption. Secure your perimeter—learn how it works.
9 views
Daily Writeups
⤷ Title: Inside the Global “MaaS” Engine of the K99 Scam Compound
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 14 Apr 2026 08:30:24 +0000
════════════════════════
⌗ Tags: #Malware #Android Banking Trojan #APK Malware #Biometric Hijacking #financial fraud #Human Trafficking #Infoblox #K99 Triumph City #MaaS #Southeast Asia Scams #Threat Intel
Daily CyberSecurity
Inside the Global "MaaS" Engine of the K99 Scam Compound
Infoblox uncovers the K99 compound: a brutal MaaS operation using human trafficking to power biometric hijacking and global Android banking fraud.
13 views
Daily Writeups
⤷ Title: The $9.5 Million Blind Spot: How a Fake Ledger App Evaded Apple’s Vetting to Empty User Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:55:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Apple Security #Bitcoin Theft #crypto scam #cryptocurrency #cybersecurity #financial fraud #Ledger Live #Ledger Wallet #Mac App Store #ZachXBT
Daily CyberSecurity
The $9.5 Million Blind Spot: How a Fake Ledger App Evaded Apple’s Vetting to Empty User Wallets
A malicious fake Ledger Live app on the Mac App Store has stolen $9.5M from users. Learn how the scam bypassed Apple's security and why your seed phrase is at risk.
22 views
Daily Writeups
⤷ Title: The Intel “AppDomain” Hijack: Unmasking a Sophisticated Post-Exploitation Framework
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 01:26:54 +0000
════════════════════════
⌗ Tags: #Malware #AppDomain Manager Hijacking #Cobalt Strike #Cyfirma #DLL hijacking #Domain Fronting #Financial Sector Security #IAStorHelp.exe #infosec #intel #JIT Trampolining #Memory Forensics #post_exploitation framework
Daily CyberSecurity
The Intel "AppDomain" Hijack: Unmasking a Sophisticated Post-Exploitation Framework
CYFIRMA uncovers an elite stealth framework hijacking signed Intel utilities via AppDomain Manager. It targets EMEA finance with undetectable memory-only code.
14 views
Daily Writeups
⤷ Title: Why Your Backend Should Never Trust the Frontend
════════════════════════
𐀪 Author: Endurance Orisabinone
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 05:32:27 GMT
════════════════════════
⌗ Tags: #backend_engineering #financial_services #application_security #software_engineering #banking
Medium
Why Your Backend Should Never Trust the Frontend
A look at how frontend assumptions break financial systems and why backend validation is non-negotiable
14 views
Daily Writeups
⤷ Title: Under the Ransom Countdown: Everest Group Threatens to Leak Sensitive Data of Major U.S. Banks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 22 Apr 2026 10:03:19 +0000
════════════════════════
⌗ Tags: #Data Leak #Citizens Financial Group #cyber extortion #data breach #data leak #Everest Group #Financial Security #Frost Bank #identity theft #RaaS #ransomware
Penetration Testing Tools
Under the Ransom Countdown: Everest Group Threatens to Leak Sensitive Data of Major U.S. Banks
Cyber adversaries have issued a menacing ultimatum to disclose sensitive telemetry belonging to two prominent American financial institutions.
9 views
Daily Writeups
⤷ Title: The Global Takedown: FBI and International Allies Dismantle Billion-Dollar Pig-Butchering Empires
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Apr 2026 17:36:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crypto Fraud #Cybercrime #Dubai Police #fbi #Financial Crime #IC3 #infosec #Ko Thet Company #money laundering #Operation Level Up #Pig Butchering #Sanduo Group
Daily CyberSecurity
The Global Takedown: FBI and International Allies Dismantle Billion-Dollar Pig-Butchering Empires
FBI, Dubai, and China dismantle 9 "pig-butchering" centers and arrest 276. Operation Level Up saves victims $562M in massive crypto fraud crackdown.
17 views
Daily Writeups
⤷ Title: Operation Road Trap: Inside the 79,000-Message Smishing Wave Hitting Drivers Worldwide
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 01 May 2026 12:01:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Bitdefender Labs #cybersecurity #Driver Safety #financial fraud #infosec #mobile security #Parking Ticket Scam #phishing #smishing #SMS Scams #Toll Scam
Daily CyberSecurity
Operation Road Trap: Inside the 79,000-Message Smishing Wave Hitting Drivers Worldwide
Bitdefender uncovers a massive smishing campaign targeting drivers with fake toll and parking fines. Over 79,000 messages sent across 12 countries.
20 views
Daily Writeups
⤷ Title: The $1.5 Million Truce: Elon Musk Settles SEC Lawsuit Over “Hidden” Twitter Stake and Acquisition Gamesmanship
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 08:27:41 +0000
════════════════════════
⌗ Tags: #Technology #Civil Penalty #Disclosure Violation #Elon Musk #Financial News #Gary Gensler #Regulatory Compliance #SEC #Securities Law #Settlement #Tesla #twitter #X
Daily CyberSecurity
The $1.5 Million Truce: Elon Musk Settles SEC Lawsuit Over "Hidden" Twitter Stake and Acquisition Gamesmanship
Elon Musk settles with the SEC for $1.5M over his delayed 2022 Twitter stake disclosure. The record-breaking fine ends years of legal "harassment" and litigation.
7 views
Daily Writeups
⤷ Title: OpenAI Debuts “Finances” Feature to Turn ChatGPT into Your Personal Wealth Manager
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 18 May 2026 04:28:22 +0000
════════════════════════
⌗ Tags: #Technology #AI Banking #ChatGPT Finances #ChatGPT Pro #Data Privacy #Financial Telemetry #fintech news 2026 #OpenAI #Personal Finance AI #Plaid Integration #Wealth Management
Daily CyberSecurity
OpenAI Debuts "Finances" Feature to Turn ChatGPT into Your Personal Wealth Manager
OpenAI launches Finances for ChatGPT Pro! Integrated with Plaid, the AI securely reads your real-time bank and investment data for custom wealth advice.
19 views
Daily Writeups
⤷ Title: HDFC AMC Just Confirmed a Cybersecurity Incident.
════════════════════════
𐀪 Author: Sai kiran
════════════════════════
ⴵ Time: Tue, 19 May 2026 09:56:17 GMT
════════════════════════
⌗ Tags: #cybersecurity #infosec #india #financial_security #data_breach
Medium
HDFC AMC Just Confirmed a Cybersecurity Incident.
An anonymous source claimed access to IT systems. Shares fell 2.3%. The Finance Minister warned SEBI about this exact scenario weeks ago…
15 views
Daily Writeups
⤷ Title: Anthropic Approaches IPO: The Leap to Public Capital
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 02:29:45 +0000
════════════════════════
⌗ Tags: #Technology #AI valuation trajectory #Anthropic confidential IPO filing #Claude creator S_1 form #financial revenue milestones #tech initial public offering #Wall Street startup listings
Daily CyberSecurity
Anthropic Approaches IPO: The Leap to Public Capital
Anthropic has advanced significantly toward its public market debut. Recently, the artificial intelligence enterprise confirmed its confidential S-1 filing with the SEC. Therefore, the creator of …
14 views
Daily Writeups
⤷ Title: Grandoreiro Banking Trojan Evades Defense via Lookalike Software
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Jun 2026 06:00:35 +0000
════════════════════════
⌗ Tags: #Malware #Banking Trojan #DLL side_loading #Financial Cybercrime #Grandoreiro #WatchGuard
Daily CyberSecurity
Grandoreiro Banking Trojan Evades Defense via Lookalike Software
A highly dangerous threat vector is actively menacing global financial networks. Specifically, the notorious Grandoreiro banking trojan has resurfaced with a stealthy distribution mechanism. Cyber…
29 views
Daily Writeups
⤷ Title: Sicoob SDK Banking Malware Exploits NuGet Developer Channels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 03 Jun 2026 08:12:31 +0000
════════════════════════
⌗ Tags: #Malware #Financial Cybercrime #NuGet Malware #Sicoob.Sdk #Socket Security #supply chain attack
Daily CyberSecurity
Sicoob SDK Banking Malware Exploits NuGet Developer Channels
A dangerous Sicoob SDK banking malware campaign triggers a major NuGet supply chain attack. Learn how it exfiltrates private financial certificates.
30 views
Daily Writeups
⤷ Title: Vulnerabilities on Unlimited Money Creation via Currency Conversion
════════════════════════
𐀪 Author: James Wizz
════════════════════════
ⴵ Time: Mon, 15 Jun 2026 05:22:31 GMT
════════════════════════
⌗ Tags: #business_logic #financial_exploitation #hacking
Medium
Vulnerabilities on Unlimited Money Creation via Currency Conversion
Unlimited Money Creation via Currency Conversion
13 views
Daily Writeups
⤷ Title: Financial API JavaScript: Fetch Fundamentals
════════════════════════
𐀪 Author: Dobromir Dikov, FCCA, FMVA
════════════════════════
ⴵ Time: Mon, 22 Jun 2026 04:16:00 GMT
════════════════════════
⌗ Tags: #financial_apis #javascript #api_security #financial_data
Medium
Financial API JavaScript: Fetch Fundamentals
Use a financial API JavaScript pattern without exposing your API key. Build a server route, fetch fundamentals, and render clean data.
34 views
Daily Writeups
⤷ Title: GitBait Phishing Campaign Targets 12 Mexican Banks via GitHub Pages
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 09:22:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Harvesting #Financial Sector #GitBait #GitHub Pages #Mexican banks #phishing #SheetBest #Telegram bot
Daily CyberSecurity
GitBait Phishing Campaign Targets 12 Mexican Banks via GitHub Pages
The GitBait phishing campaign abuses GitHub Pages and the SheetBest API to steal banking credentials from at least 12 Mexican financial institutions.
24 views
Daily Writeups
⤷ Title: Lazarus Memory-Only Malware: Advanced Financial Sabotage
════════════════════════
𐀪 Author: Nam Phong
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 06:28:12 +0000
════════════════════════
⌗ Tags: #Malware #Cognyte #cybersecurity #Financial Sector #Lazarus #Memory_Only Malware
Information Security News
Lazarus Memory-Only Malware: Advanced Financial Sabotage
The more stealthy a malicious software remains, the longer its capacity to endure within a compromised system. This guiding philosophy drives the North Korean-linked Lazarus group in its latest of…
18 views
Daily Writeups
⤷ Title: Google Wallet Introduces Digital Allowance for Minors
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Sat, 08 Aug 2026 10:19:50 +0000
════════════════════════
⌗ Tags: #Technology #Digital Allowance #Family Link #financial education #Google Wallet #Mobile Payments
Daily CyberSecurity
Google Wallet Introduces Digital Allowance for Minors
Google recently announced a groundbreaking new feature for the United States market. This innovative capability allows parents to safely distribute digital allowances to teenagers and children und…
5 views