Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Phantom Goblin Malware: Stealthy Attacks via VSCode Tunnels
════════════════════════
𐀪 Author: do son
════════════════════════
ⴵ Time: Tue, 11 Mar 2025 00:10:31 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #chrome #Goblin #Phantom #Phantom Goblin #powershell #Telegram
Cybersecurity News
Phantom Goblin Malware: Stealthy Attacks via VSCode Tunnels
Uncover the details of the Phantom Goblin malware campaign that uses social engineering to steal browser credentials.
26 views
Daily Writeups
⤷ Title: Next-Gen Stealer Arkanix Bypasses Chrome App-Bound Encryption Using C++ Process Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 02 Dec 2025 02:02:06 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #Arkanix Stealer #C# malware #Chrome Elevator #G DATA #Infostealer #Process injection
Daily CyberSecurity
Next-Gen Stealer Arkanix Bypasses Chrome App-Bound Encryption Using C++ Process Injection
G DATA exposed Arkanix, a fast-evolving C++ stealer. Its premium version uses process injection and Chrome Elevator to bypass Chrome App-Bound Encryption (ABE) and steal crypto wallets and Wi-Fi passwords.
12 views
Daily Writeups
⤷ Title: Naughty List: SantaStealer Malware Unwrapped—The “New” Holiday Threat is Just Rebranded Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:29:11 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #BluelineStealer #Chrome Security #Cybersecurity 2025 #Data Theft #Infostealer #Malware_as_a_Service #phishing #Rapid7 #SantaStealer
Penetration Testing Tools
Naughty List: SantaStealer Malware Unwrapped—The "New" Holiday Threat is Just Rebranded Code
In the run-up to the New Year holidays, underground marketplaces often see a surge of freshly minted data-stealing
14 views
Daily Writeups
⤷ Title: Beyond the Vault: How DumpBrowserSecrets Bypasses Modern Browser Encryption
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 08 Jan 2026 08:27:46 +0000
════════════════════════
⌗ Tags: #Open Source Tool #APC Injection #App_Bound Encryption #Chrome Security #Chromium #Cyber Security #DumpBrowserSecrets #Firefox #InfoSec 2026 #malware analysis #microsoft edge
Information Security News
Beyond the Vault: How DumpBrowserSecrets Bypasses Modern Browser Encryption
DumpBrowserSecrets Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bookmarks from modern Chromium-based and G…
22 views
Daily Writeups
⤷ Title: Storm: 2026’s Newest Infostealer Bypasses Chrome to Hijack Your MFA Sessions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 01:01:38 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #browser security #Chrome 127 #Credential Theft #cybersecurity #infosec #Infostealer #MaaS #MFA Bypass #Session Cookie Theft #Storm Malware #Varonis
Daily CyberSecurity
Storm: 2026’s Newest Infostealer Bypasses Chrome to Hijack Your MFA Sessions
Storm malware bypasses Chrome security by shipping encrypted files for server-side decryption. Learn how it steals session cookies to defeat MFA in 2026.
17 views
Daily Writeups
⤷ Title: By Design No More: Microsoft Edge Vv148.0 to Block Plaintext Password Scrapes from Process Memory
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 04:39:39 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #App_Bound Encryption #Chromium Architecture #Cleartext Credentials #Edge v148.0 Stable #Local Privilege Escalation #Memory Dump #microsoft edge #Process Memory Scraping #Threat Intelligence 2026 #Tom Jøran Sønstebyseter Rønning
Daily CyberSecurity
By Design No More: Microsoft Edge Vv148.0 to Block Plaintext Password Scrapes from Process Memory
Microsoft pivots on its "by design" stance, updating Edge to version 148.0 to stop caching your entire plaintext password vault in active volatile memory.
11 views
Daily Writeups
⤷ Title: Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:24:14 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #Composer Backdoor #Credential Harvesting #Cyber Security #DevOps Security #flipboxstudio #info_stealer #Laravel Lang #PHP RCE #supply chain attack
Daily CyberSecurity
Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor
DevOps Alert: Over 700 laravel-lang localization package versions have been backdoored with a cross-platform 17-collector info-stealer. Audit your logs.
19 views