Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: Android 16 Update: AI Notification Summaries & Gemini-Powered Accessibility Suite
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 04 Dec 2025 00:10:23 +0000
════════════════════════
⌗ Tags: #Android #accessibility #AI Notifications #Android 16 #Circle to Search #dark theme #Expressive Captions #Gemini #Pixel Update #TalkBack
Daily CyberSecurity
Android 16 Update: AI Notification Summaries & Gemini-Powered Accessibility Suite
Android 16's second update brings AI notification summaries and anti-scam tools. Accessibility gains Gemini-powered TalkBack and Expressive Captions for enhanced user experience.
11 views
Daily Writeups
⤷ Title: GoldFactory Malware Injects FriHook/SkyHook into Banking Apps to Exploit 11K SE Asia Users
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 03:55:06 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Abuse #Android #FriHook #Gigabud #GoldFactory #Group_IB #Mobile Banking Malware #phishing #SkyHook #Southeast Asia
Penetration Testing Tools
GoldFactory Malware Injects FriHook/SkyHook into Banking Apps to Exploit 11K SE Asia Users
The GoldFactory group has launched a new wave of attacks targeting mobile-banking users across Southeast Asia. Disguising themselves
❤1
19 views
Daily Writeups
⤷ Title: Evolved ClayRat Spyware Gains Self-Defense, Using Accessibility Abuse to Block Uninstallation and Steal Keys
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 00:22:44 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Services #Android Spyware #ClayRat #dropbox #Keylogger #Lockscreen Bypass #MediaProjection API #Self_Defense
Daily CyberSecurity
Evolved ClayRat Spyware Gains Self-Defense, Using Accessibility Abuse to Block Uninstallation and Steal Keys
A notorious Android spyware family has resurfaced with dangerous new capabilities, evolving from a simple data thief into a sophisticated surveillance tool that can actively fight off attempts to …
22 views
Daily Writeups
⤷ Title: Total Takeover: Droidlock Android Malware Locks Phones, Records Screen, and Bypasses Security
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 07:42:21 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Services #Android malware #Device Admin #Droidlock #mobile security #phishing #ransomware #Screen Capture #Zimperium
Penetration Testing Tools
Total Takeover: Droidlock Android Malware Locks Phones, Records Screen, and Bypasses Security
A new Android malware known as Droidlock turns an infected smartphone into a device fully controlled by attackers.
20 views
Daily Writeups
⤷ Title: The KGB’s All-Seeing Eye: How ResidentBat Spyware Turns Seized Phones into Total Surveillance Tools
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:33:47 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service #Android security #Belarus #Journalists #KGB #Physical Access #Reporters Without Borders #ResidentBat #spyware #surveillance
Daily CyberSecurity
The KGB’s All-Seeing Eye: How ResidentBat Spyware Turns Seized Phones into Total Surveillance Tools
RSF uncovers ResidentBat, a Belarusian KGB spyware physically installed during interrogations to hijack encrypted messages and monitor journalists.
10 views
Daily Writeups
⤷ Title: New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:06:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #accessibility #Apple #AppleScript #CVE_2025_43530 #macOS #macOS Sequoia #macOS Sonoma #macOS Tahoe #Mickey Jin #privacy #TCC Bypass #TOCTOU #Voiceover
Daily CyberSecurity
New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
Apple’s privacy fortress, the Transparency, Consent, and Control (TCC) framework, has been breached once again. Security researcher Mickey Jin (@patch1t) has disclosed a sophisticated new vulnerab…
24 views
Daily Writeups
⤷ Title: AI Hub Hijacked: Polymorphic Android RAT Abuses Hugging Face to Steal Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:11:27 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Services Abuse #Android RAT #Banking Trojan #Bitdefender #Cybercrime #Hugging Face #mobile security #Polymorphic Malware #Premium Club #TrustBastion
Daily CyberSecurity
AI Hub Hijacked: Polymorphic Android RAT Abuses Hugging Face to Steal Data
13 views
Daily Writeups
⤷ Title: PortSwigger Labs: User ID Controlled by Request Parameter (Lab 7 & 8)
════════════════════════
𐀪 Author: Sanjivani Dobhal
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 17:29:51 GMT
════════════════════════
⌗ Tags: #hacking #portswigger #accessibility #penetration_testing #idor
Medium
PortSwigger Labs: User ID Controlled by Request Parameter (Lab 7 & 8)
In this blog, I explain Lab 7 and Lab 8 from the PortSwigger Web Security Academy, both focused on Insecure Direct Object Reference (IDOR)…
42 views
Daily Writeups
⤷ Title: The IPTV Trap: How the “Massiv” Trojan Hijacks Government IDs and Empties Bank Accounts
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:25:09 +0000
════════════════════════
⌗ Tags: #Malware #accessibility services abuse #Android banking Trojan #Chave Móvel Digital #credential exfiltration #device hijacking #FuncVNC #gov.pt #IPTV fraud #Massiv malware #Southern Europe #Tech News 2026
Penetration Testing Tools
The IPTV Trap: How the "Massiv" Trojan Hijacks Government IDs and Empties Bank Accounts
A nascent Android banking Trojan has resurfaced, meticulously engineered to execute a recurring stratagem: coercing individuals into sideloading
19 views
Daily Writeups
⤷ Title: The Taxman’s Shadow: How a $2M Fraud Syndicate Impersonated Indonesia’s Official Coretax Service
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:21:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #accessibility services abuse #Android malware #Coretax Indonesia #DJP Online #Gigabud.RAT #GoldFactory #Group_IB #MMRat #Taotie Trojan #tax fraud 2026 #Vishing
Penetration Testing Tools
The Taxman’s Shadow: How a $2M Fraud Syndicate Impersonated Indonesia’s Official Coretax Service
In Indonesia, a sophisticated fraudulent enterprise has been unmasked, masquerading as the official Coretax fiscal service. Adversaries orchestrated
10 views