Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 01 May 2025 00:30:20 +0000
════════════════════════
⌗ Tags: #Malware #fake CAPTCHA #JavaScript malware #KongTuke #NodeJS Backdoor #RAT Malware #Remote Access Trojan #Trustwave SpiderLabs #TryCloudflare Abuse
Daily CyberSecurity
CAPTCHA to Command: Trustwave Uncovers Stealthy NodeJS Backdoor Campaign
Trustwave uncovers a fake CAPTCHA campaign delivering NodeJS backdoors via PowerShell and TryCloudflare, with SOCKS5 tunneling and RAT capabilities.
16 views
Daily Writeups
⤷ Title: Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 30 Jun 2025 23:44:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #APT #APT_C_36 #AsyncRAT #Blind Eagle #Colombia #Cybercrime #Exposed C2 #Latin America #phishing #rat #Remcos #Remote Access Trojan #Trustwave #VBS Malware
Daily CyberSecurity
Blind Eagle (APT-C-36): Financially Motivated Cybercrime Meets Open-Access Infrastructure in LATAM
Trustwave exposes Blind Eagle (APT-C-36) leveraging exposed infrastructure and VBS malware in phishing campaigns, targeting Colombian banks with blatant disregard for concealment.
17 views
Daily Writeups
⤷ Title: KAWA4096: New Ransomware Blends Qilin & Akira Tactics, Hits US and Japan
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 19 Jul 2025 00:06:57 +0000
════════════════════════
⌗ Tags: #Malware #Akira #Cybercrime #cybersecurity #encryption #Japan #KAWA4096 #Qilin #ransomware #Trustwave #united states
Daily CyberSecurity
KAWA4096: New Ransomware Blends Qilin & Akira Tactics, Hits US and Japan
A new ransomware, KAWA4096, combines features from Qilin and Akira, targeting organizations in the US and Japan with multi-threaded encryption and anti-recovery measures.
13 views
Daily Writeups
⤷ Title: Android Malware Strikes: Fake Facebook & TikTok Apps Impersonate Brands for Traffic Monetization
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 22 Jul 2025 00:40:17 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #apk #brand impersonation #cybersecurity #facebook #phishing #TikTok #Traffic Monetization #Trustwave
Daily CyberSecurity
Android Malware Strikes: Fake Facebook & TikTok Apps Impersonate Brands for Traffic Monetization
Trustwave uncovers an Android malware cluster using fake Facebook & TikTok apps to lure victims via brand impersonation, abusing permissions for data collection and traffic monetization.
6 views
Daily Writeups
⤷ Title: Android Malware: New Campaign Blends Click Fraud & Credential Theft via Fake Apps
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 00:15:52 +0000
════════════════════════
⌗ Tags: #Malware #Android malware #apk #Brand Impersonation #Click Fraud #Credential Theft #cybercrime #mobile security #phishing #Trustwave
Penetration Testing Tools
Android Malware: New Campaign Blends Click Fraud & Credential Theft via Fake Apps
A large-scale Android malware campaign is using fake apps to steal credentials and commit click fraud, bypassing security channels and targeting users in developing regions.
18 views
Daily Writeups
⤷ Title: A Deceptive AI Lure Is Hiding ScreenConnect & XWorm RAT to Hijack Your PC
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 29 Aug 2025 00:20:42 +0000
════════════════════════
⌗ Tags: #Malware #AI #cybersecurity #Hacking #malware #ScreenConnect #social engineering #Trustwave #XWorm RAT
Daily CyberSecurity
A Deceptive AI Lure Is Hiding ScreenConnect & XWorm RAT to Hijack Your PC
A new campaign is using fake AI-themed content to trick users into downloading a malicious ScreenConnect installer that secretly delivers the XWorm Remote Access Trojan.
8 views
Daily Writeups
⤷ Title: Unraveling a Phishing Spree That Abuses Email Marketing and Cloud Services
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Sep 2025 00:28:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cloud services #Credential Theft #cybersecurity #Malvertising #phishing #social engineering #Trustwave #URL redirectors
Daily CyberSecurity
Unraveling a Phishing Spree That Abuses Email Marketing and Cloud Services
A new report reveals a rise in phishing campaigns that abuse email marketing platforms and cloud services to evade detection and steal credentials from victims.
8 views
Daily Writeups
⤷ Title: New Eternidade Stealer Uses WhatsApp to Steal Banking Data
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 20 Nov 2025 13:40:30 +0000
════════════════════════
⌗ Tags: #Malware #Security #Banking #Brazil #Eternidade Stealer #Fraud #Scam #SMSishing #SpiderLabs #TROJAN #Trustwave #WhatsApp
Hackread
New Eternidade Stealer Uses WhatsApp to Steal Banking Data
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
56 views
Daily Writeups
⤷ Title: Eternidade Stealer: New Python WhatsApp Worm Uses IMAP Email for Covert C2 and Brazilian Bank Overlays
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 00:05:47 +0000
════════════════════════
⌗ Tags: #Malware #Banking Trojan #Brazil #Eternidade Stealer #IMAP C2 #Python #Trustwave #WhatsApp Worm
Daily CyberSecurity
Eternidade Stealer: New Python WhatsApp Worm Uses IMAP Email for Covert C2 and Brazilian Bank Overlays
Trustwave exposed Eternidade Stealer, a sophisticated Brazilian Trojan. The Python WhatsApp worm steals contact lists and uses IMAP email for covert C2 retrieval to launch banking overlays.
51 views