Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Google Play Store Alert: New Phishing Apps Bypass Security, Stealing Crypto Wallet Seeds
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Jun 2025 07:01:38 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Android apps #crypto phishing #cryptocurrency #cybersecurity #Cyble #Google Play Store #malware #Median Framework #phishing #Seed Phrase #Wallet Security
Daily CyberSecurity
Google Play Store Alert: New Phishing Apps Bypass Security, Stealing Crypto Wallet Seeds
Malicious phishing apps are bypassing Google Play Store security, tricking users into revealing crypto wallet seed phrases and draining funds. Beware and never share your seed
21 views
Daily Writeups
⤷ Title: Phishing Alert: Fake WeTransfer & HunCERT Pages Hosted on AWS S3 & Cloudflare Turnstile Stealing Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 08 Jul 2025 00:22:42 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AWS S3 #Cloudflare Turnstile #Credential Theft #cybersecurity #Cyble #File Sharing Scam #HunCERT #Hungary #LogoKit #phishing #WeTransfer
Daily CyberSecurity
hishing Alert: Fake WeTransfer & HunCERT Pages Hosted on AWS S3 & Cloudflare Turnstile Stealing Credentials
A phishing campaign impersonates HunCERT & WeTransfer, using LogoKit on AWS S3 with Cloudflare Turnstile to steal credentials. The active domain has zero VirusTotal detections.
16 views
Daily Writeups
⤷ Title: Scanception: Global QR Code Phishing Campaign Bypasses Enterprise Security, Steals Credentials at Scale
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 00:40:41 +0000
════════════════════════
⌗ Tags: #Cybercriminals #AiTM #Credential Harvesting #cybersecurity #Cyble #mobile security #phishing #QR code phishing #Quishing #Scanception
Daily CyberSecurity
Scanception: Global QR Code Phishing Campaign Bypasses Enterprise Security, Steals Credentials at Scale
Scanception campaign uses QR code-based phishing in PDFs to bypass traditional security, targeting high-value industries globally for credential and 2FA theft.
13 views
Daily Writeups
⤷ Title: Fraudulent Scholarship Apps: A New Malware Campaign Targets Students in Bangladesh
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Sep 2025 00:15:38 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Bangladesh #Cyble #financial fraud #mobile security #phishing #SikkahBot #smishing
Daily CyberSecurity
Fraudulent Scholarship Apps: A New Malware Campaign Targets Students in Bangladesh
SikkahBot, a new Android malware, is impersonating scholarship apps to steal financial data and automate transactions from students in Bangladesh.
6 views
Daily Writeups
⤷ Title: Maranhão Stealer: A New Malware Hijacks Gamers’ PCs Through Pirated Games
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 16 Sep 2025 01:53:31 +0000
════════════════════════
⌗ Tags: #Malware #Cybercrime #Cyble #gaming community #Infostealer #malware #Maranhão Stealer #pirated software #Reflective DLL Injection
Daily CyberSecurity
Maranhão Stealer: A New Malware Hijacks Gamers' PCs Through Pirated Games
A new report reveals Maranhão Stealer, a new malware targeting the gaming community through pirated software and cheats. It steals crypto, credentials, and data.
21 views
Daily Writeups
⤷ Title: Telegram-Powered Phishing Campaign Targets European Businesses Using HTML Attachments to Steal Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 11 Nov 2025 00:33:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #anti_forensics #Credential Theft #Cyble #HTML Attachment #Obfuscation #phishing #Telegram C2
Daily CyberSecurity
Telegram-Powered Phishing Campaign Targets European Businesses Using HTML Attachments to Steal Credentials
CRIL exposed fileless phishing using malicious HTML attachments. Credentials are stolen via a fake Adobe login and instantly exfiltrated to Telegram bots, bypassing traditional domain filters.
20 views
Daily Writeups
⤷ Title: “Purchase Order” Deception: Sophisticated Loader Targets Manufacturing Giants in Italy, Finland, and Saudi Arabia
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:32:10 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyble #Government Cyberattacks #Malware_as_a_Service #Manufacturing Security #PureLog Stealer #Remcos RAT #steganography #TaskScheduler #UAC bypass #Unified Commodity Loader
Daily CyberSecurity
“Purchase Order” Deception: Sophisticated Loader Targets Manufacturing Giants in Italy, Finland, and Saudi Arabia
A highly sophisticated cyber-espionage campaign is indiscriminately targeting the manufacturing and government sectors across Europe and the Middle East, using a “Swiss Army Knife” sty…
25 views
Daily Writeups
⤷ Title: Spy, Steal, Lock: deVixor Android Trojan Hits Banking & Crypto Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:11:08 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Banking Trojan #Cyble Research #deVixor #Iran Cyber Threat #mobile security #phishing #ransomware #Remote Access Trojan (RAT) #SMS Stealer
Daily CyberSecurity
Spy, Steal, Lock: deVixor Android Trojan Hits Banking & Crypto Users
New deVixor Android malware combines banking fraud with ransomware. Targeting Iranian users, it steals credentials and locks devices. Avoid APKs.
20 views
Daily Writeups
⤷ Title: Invisible Intruder: “ShadowHS” Malware Weaponizes Hackshell on Linux
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:22:02 +0000
════════════════════════
⌗ Tags: #Malware #Cyber Security #Cyble Research #Fileless attack #GSocket #Hackshell #Linux Malware #Memory injection #post_exploitation #ShadowHS #threat intelligence
Daily CyberSecurity
Invisible Intruder: "ShadowHS" Malware Weaponizes Hackshell on Linux
Cyble uncovers "ShadowHS," a fileless Linux malware weaponizing hackshell. It uses GSocket tunneling to evade firewalls and kill rival bots.
19 views
Daily Writeups
⤷ Title: The AI Evolution of Mobile Malware: SURXRAT V5 Combines Surveillance, Ransomware, and LLMs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 25 Feb 2026 02:21:57 +0000
════════════════════════
⌗ Tags: #Malware #AI Malware #Android Malware #Cyble Research #Firebase C2 #infosec #MaaS #Malware_as_a_Service #mobile security #rat #Remote Access Trojan #SURXRAT V5
Daily CyberSecurity
The AI Evolution of Mobile Malware: SURXRAT V5 Combines Surveillance, Ransomware, and LLMs
Cyble Research unmasks SURXRAT V5, a professionalized Android RAT experimenting with AI-assisted modules and hybrid monetization via Firebase infrastructure.
17 views
Daily Writeups
⤷ Title: Silently Swapped: How ClipXDaemon Hijacks Linux Cryptowallets Without a C2 Server
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 00:02:53 +0000
════════════════════════
⌗ Tags: #Malware #Bincrypter #ClipXDaemon #Cryptocurrency Hijacker #cybersecurity #Cyble Research #infosec #Linux Malware #Process Masquerading #threat intelligence #X11 Security
Daily CyberSecurity
Silently Swapped: How ClipXDaemon Hijacks Linux Cryptowallets Without a C2 Server
Cyble Research unmasks ClipXDaemon, a C2-less Linux malware that silently hijacks cryptocurrency wallet addresses in X11 clipboard environments.
8 views
Daily Writeups
⤷ Title: The New Face of Phishing: Hackers Weaponize Browser Prompts to Steal Biometric Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Mar 2026 07:05:22 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Biometric Phishing #Browser Permission Hijacking #cybersecurity #Cyble Research #Deepfake Threat #EdgeOne #identity theft #infosec #social engineering #Telegram C2
Daily CyberSecurity
The New Face of Phishing: Hackers Weaponize Browser Prompts to Steal Biometric Data
Cyble exposes a phishing campaign abusing browser permissions to silently steal biometric data, audio, and locations for deepfakes and identity fraud.
10 views