Daily Writeups
@Daily_Writeups
4.06K subscribers
4 photos
137K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.06K subscribers
Daily Writeups
⤷ Title: PoisonSeed Campaign: Uncovering a Web of Cryptocurrency and Email Provider Attacks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 07 Apr 2025 00:15:07 +0000
════════════════════════
⌗ Tags: #Cyber Security #coinbase #CryptoChameleon #cryptocurrency seed phrase poisoning attack #HubSpot #Ledger #Mailchimp #Mailgun #PoisonSeed #SendGrid #The Comm #Troy Hunt #Zoho
Daily CyberSecurity
PoisonSeed Campaign: Uncovering a Web of Cryptocurrency and Email Provider Attacks
Uncover the details of the PoisonSeed campaign targeting enterprises and cryptocurrency holders with phishing and email attacks.
11 views
Daily Writeups
⤷ Title: Backdoor Found in Official XRP Ledger NPM Package
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 19:49:03 +0000
════════════════════════
⌗ Tags: #Security #Malware #backdoor #Cybersecurity #Ledger #NPM #Scam #XRP
Hackread
Backdoor Found in Official XRP Ledger NPM Package
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
45 views
Daily Writeups
⤷ Title: FreeDrain: Silent Crypto Theft on Google? Massive Phishing Network Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 12 May 2025 00:24:37 +0000
════════════════════════
⌗ Tags: #Cybercriminals #crypto phishing #cryptocurrency #Cybercrime #google #Ledger #MetaMask #SEO Poisoning #Trezor #wallet theft #web hosting abuse
Daily CyberSecurity
FreeDrain: Silent Crypto Theft on Google? Massive Phishing Network Exposed
Massive FreeDrain crypto phishing campaign uses Google SEO and free hosting to steal wallets. Trezor, Ledger users beware!
14 views
Daily Writeups
⤷ Title: New macOS Crypto Stealer Targets Ledger Live Users, Mimics AMOS with Stealthy Tactics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 03 Jul 2025 00:02:54 +0000
════════════════════════
⌗ Tags: #Malware #AMOS #Atomic macOS Stealer #crypto wallets #cryptocurrency #cybersecurity #Infostealer #K7 Labs #Ledger Live #macOS #malware
Daily CyberSecurity
New macOS Crypto Stealer Targets Ledger Live Users, Mimics AMOS with Stealthy Tactics
A new macOS information stealer, a potential AMOS variant, targets crypto users and Ledger Live accounts, stealing passwords and wallet data using stealthy daemonization and local admin prompt tactics.
26 views
Daily Writeups
⤷ Title: New macOS Infostealer Slips Past Apple’s Defenses with Code Signing and Notarization
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 18 Jul 2025 00:18:52 +0000
════════════════════════
⌗ Tags: #Malware #Apple Notarization #Code Signing #cybersecurity #Google Meet #Infostealer #Jamf Threat Labs #Ledger Live #macOS #Odyssey Stealer
Daily CyberSecurity
New macOS Infostealer Slips Past Apple’s Defenses with Code Signing and Notarization
Jamf Threat Labs has uncovered a sophisticated new macOS infostealer variant that managed to bypass Apple’s security defenses by leveraging valid code signing and notarization
6 views
Daily Writeups
⤷ Title: Advanced macOS DigitStealer Targets M2+ Macs, Hijacking Ledger Live via JXA and DNS-Based C2
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 18 Nov 2025 00:26:50 +0000
════════════════════════
⌗ Tags: #Malware #Apple Silicon #Cloudflare Pages #DigitStealer #DNS C2 #Infostealer #JXA #Ledger Live #macOS Malware
Daily CyberSecurity
Advanced macOS DigitStealer Targets M2+ Macs, Hijacking Ledger Live via JXA and DNS-Based C2
Jamf exposed DigitStealer, an advanced macOS infostealer that checks for Apple M2+ chips. It uses Cloudflare Pages for delivery, JXA for stealth, and modifies Ledger Live to steal crypto wallets via DNS TXT C2.
16 views
Daily Writeups
⤷ Title: macOS Wallet Stealer Uncovered: “Nova” Malware Replaces Ledger/Trezor Apps with Phishing Clones for Seed Theft
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 00:00:47 +0000
════════════════════════
⌗ Tags: #Malware #Cryptocurrency Theft #LaunchAgent #Ledger Live #macOS #Modular Malware #phishing #Trezor Suite #Wallet Stealer
Daily CyberSecurity
macOS Wallet Stealer Uncovered: "Nova" Malware Replaces Ledger/Trezor Apps with Phishing Clones for Seed Theft
A new macOS stealer (Nova) uses LaunchAgents to install a modular backdoor. Its main function is replacing legitimate Ledger/Trezor apps with phishing clones that exfiltrate seed phrases as users type.
12 views
Daily Writeups
⤷ Title: Ledger data breach / hack Saturday 27th December 2025
════════════════════════
𐀪 Author: Ledger
════════════════════════
ⴵ Time: Sat, 27 Dec 2025 13:15:51 GMT
════════════════════════
⌗ Tags: #hacking #ledgerwallet #ledger
Medium
Ledger data breach / hack Saturday 27th December 2025
It appears that Ledger is at it again! 
On Saturday 27th December, at around 2am PST, some users reportedly started noticing their…
41 views
Daily Writeups
⤷ Title: Beyond the Balance Sheet: The Tragic Rise of Cyber-Physical Violence in 2025
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 30 Dec 2025 03:12:04 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Crisis24 #cybercrime #deepfakes #Digital Extortion #Infosec 2025 #Ledger #NHS #Physical Security #ransomware #Virtual Kidnapping
Penetration Testing Tools
Beyond the Balance Sheet: The Tragic Rise of Cyber-Physical Violence in 2025
In 2025, cybercrime has increasingly moved beyond the realm of “just money.” Behind today’s attacks lie not only
19 views
Daily Writeups
⤷ Title: macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:17:01 +0000
════════════════════════
⌗ Tags: #Malware #AES_256_CBC #AppleScript #Developer Tools #GlassWorm #Hardware Wallets #KOI Security #Ledger #macOS security #malware #supply chain attack #Trezor #VS Code Extensions
Daily CyberSecurity
macOS Developers in the Crosshairs: GlassWorm’s Wave 4 Exploits VS Code to Trojanize Hardware Wallets
The resilient “GlassWorm” threat actor, known for embedding malicious code into Visual Studio Code extensions, has returned with a sophisticated fourth wave of attacks. A new report fr…
13 views
Daily Writeups
⤷ Title: Ledger Confirms Global-e Breach, Warns Users of Phishing Attempts
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 16:56:23 +0000
════════════════════════
⌗ Tags: #Cyber Attacks #Phishing Scam #Security #Crypto #Cyber Attack #Cybersecurity #data breach #Fraud #Global_e #Ledger #Privacy #Scam #Wallet
Hackread
Ledger Confirms Global-e Breach, Warns Users of Phishing Attempts
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
34 views
Daily Writeups
⤷ Title: “Matryoshka” Malware: New macOS Attack Hides Inside “Russian Dolls” of Obfuscation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:33:11 +0000
════════════════════════
⌗ Tags: #Malware #ClickFix #Cryptocurrency Scam #Intego #Ledger Live #Mac Security #macOS Threat #Matryoshka Malware #social engineering #Trezor Suite #Typo_squatting
Daily CyberSecurity
“Matryoshka” Malware: New macOS Attack Hides Inside “Russian Dolls” of Obfuscation
Mac users are being targeted by a sophisticated new social engineering campaign that wraps malicious code in layers of deceit, much like the famous Russian nesting dolls it’s named after. In…
24 views
Daily Writeups
⤷ Title: 45 Seconds to Empty: Ledger Unmasks Critical MediaTek Flaw That Turns Phones Into Glass Vaults
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Mar 2026 03:47:43 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Android security #Crypto Wallet Hack #Ledger Donjon #March 2026 Security Patch #MediaTek #Mobile Hardware Security #Nothing CMF Phone 1 #Seed Phrase Theft #TEE #Trusted Execution Environment
Daily CyberSecurity
45 Seconds to Empty: Ledger Unmasks Critical MediaTek Flaw That Turns Phones Into Glass Vaults
Ledger Donjon uncovers a critical MediaTek TEE flaw allowing attackers to extract PINs and crypto seed phrases in 45 seconds. Patch now.
30 views
Daily Writeups
⤷ Title: Fake Ledger Live App on Apple Store Linked to $9.5M Crypto Theft
════════════════════════
𐀪 Author: Waqas
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 16:47:20 +0000
════════════════════════
⌗ Tags: #Security #Crypto #Cyber Crime #Scams and Fraud #App Store #Apple #Bitcoin #Blockchain #Cybersecurity #Ledger #Ledger Live #Scam #ZachXBT
Hackread
Fake Ledger Live App on Apple Store Linked to $9.5M Crypto Theft
Apple approved a fake Ledger Live app on its App Store, allowing scammers to steal $9.5 million from more than 50 users. Did you install this app?
36 views
Daily Writeups
⤷ Title: The $9.5 Million Blind Spot: How a Fake Ledger App Evaded Apple’s Vetting to Empty User Wallets
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 06:55:17 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Apple Security #Bitcoin Theft #crypto scam #cryptocurrency #cybersecurity #financial fraud #Ledger Live #Ledger Wallet #Mac App Store #ZachXBT
Daily CyberSecurity
The $9.5 Million Blind Spot: How a Fake Ledger App Evaded Apple’s Vetting to Empty User Wallets
A malicious fake Ledger Live app on the Mac App Store has stolen $9.5M from users. Learn how the scam bypassed Apple's security and why your seed phrase is at risk.
23 views