Daily Writeups
@Daily_Writeups
3.55K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.55K subscribers
Daily Writeups
⤷ Title: The QR Code Conundrum: To Trust or Not to Trust?
════════════════════════
𐀪 Author: Marko
════════════════════════
ⴵ Time: Thu, 18 Sep 2025 04:48:02 GMT
════════════════════════
⌗ Tags: #cyber_security_awareness #qr_code #cybersecurity #dynamic_qr_code
Medium
The QR Code Conundrum: To Trust or Not to Trust?
You see a QR code. A simple, pixelated square promising a gateway to more information, a special offer, or a convenient menu. You point…
26 views
Daily Writeups
⤷ Title: New Malware Found in npm Package “fezbox” Uses QR Codes to Steal Credentials
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Sep 2025 02:17:33 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #fezbox #Infostealer #javascript #malware #npm #QR code #supply chain attack
Daily CyberSecurity
New Malware Found in npm Package "fezbox" Uses QR Codes to Steal Credentials
A new malicious npm package, "fezbox," hides a credential-stealing payload within a QR code, which it uses to exfiltrate web cookies and credentials.
10 views
Daily Writeups
⤷ Title: Black Mirror: Plaything — Could a QR Code Really Hack the World?
════════════════════════
𐀪 Author: Flamehaven Initiative
════════════════════════
ⴵ Time: Wed, 24 Sep 2025 15:36:14 GMT
════════════════════════
⌗ Tags: #cybersecurity #qr_code #artificial_intelligence #technology #ai_ethics
Medium
Black Mirror: Plaything — Could a QR Code Really Hack the World?
One square of pixels — could it start a catastrophe? (Spoiler: probably not — but parts are real.)
12 views
Daily Writeups
⤷ Title: Steganography Attack: Malicious NPM Package Hides Executable Code Inside a QR Code Image
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 03:56:47 +0000
════════════════════════
⌗ Tags: #Malware #fezbox #JavaScript #malware #npm #open source security #QR code #Steganography #supply chain attack
Penetration Testing Tools
Steganography Attack: Malicious NPM Package Hides Executable Code Inside a QR Code Image
The NPM package fezbox uses an inverted URL and steganography to hide executable JavaScript inside a QR code image to steal credentials. Update ASAP.Export to Sheets
20 views
Daily Writeups
⤷ Title: SOC251 — Operation Quishing Raid: When QR Codes Attack
════════════════════════
𐀪 Author: Andrew Williams
════════════════════════
ⴵ Time: Tue, 07 Oct 2025 22:43:33 GMT
════════════════════════
⌗ Tags: #phishing #threat_intelligence #cybersecurity #qr_code #email
Medium
SOC251 — Operation Quishing Raid: When QR Codes Attack
When you’re on SOC duty, alerts don’t politely “ding” like Slack pings — they crash into your SIEM like Reiner shoulder-charging through…
6 views
Daily Writeups
⤷ Title: CISA Emergency Alert: Commercial Spyware Exploiting Zero-Click and Malicious QR Codes to Hijack Messaging Apps
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 25 Nov 2025 02:42:03 +0000
════════════════════════
⌗ Tags: #Malware #CISA #commercial spyware #messaging app #Pegasus #QR code phishing #Signal #WhatsApp #Zero_Click
Daily CyberSecurity
CISA Emergency Alert: Commercial Spyware Exploiting Zero-Click and Malicious QR Codes to Hijack Messaging Apps
CISA issued an urgent alert: Commercial spyware is actively exploiting zero-click flaws and malicious QR codes to hijack messaging apps (Signal, WhatsApp) for espionage against government and civil society targets.
110 views
Daily Writeups
⤷ Title: GhostPairing: New Attack Hijacks WhatsApp via Linked Devices, Tricking Users with Fake Facebook QR Code
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 00:22:09 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Hijack #Gen Digital #GhostPairing #Linked Devices #phishing #QR Code Scam #User Trust #WhatsApp
Daily CyberSecurity
GhostPairing: New Attack Hijacks WhatsApp via Linked Devices, Tricking Users with Fake Facebook QR Code
Add as a preferredsource on Google A deceptive new cyberattack campaign is turning one of WhatsApp’s most convenient
19 views
Daily Writeups
⤷ Title: The Invisible Roommate: How the GhostPairing Scam Steals Your WhatsApp Without a Password
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:53:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #Cybersecurity 2025 #Device Pairing #Gen Digital #GhostPairing #phishing #privacy #QR Code Scam #Social Engineering #WhatsApp
Penetration Testing Tools
The Invisible Roommate: How the GhostPairing Scam Steals Your WhatsApp Without a Password
Researchers at Gen have reported a new WhatsApp account-takeover technique dubbed GhostPairing. The attack appears mundane and arouses
12 views
Daily Writeups
⤷ Title: North Korea’s Kimsuky Upgrades DOCSWAP Malware to Hijack Smartphones via QR Codes
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:18:02 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #DocSwap #DPRK #ENKI Research #Kimsuky #mobile security #North Korea #QR Code Scam #rat #smishing
Daily CyberSecurity
North Korea’s Kimsuky Upgrades DOCSWAP Malware to Hijack Smartphones via QR Codes
Kimsuky is deploying a new DOCSWAP RAT via QR codes and smishing. The DPRK-linked malware turns phones into surveillance tools for data theft.
13 views
Daily Writeups
⤷ Title: The Payroll Trap: New Quishing Campaign Uses Fake CAPTCHAs to Hijack Employee Paychecks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:01:30 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CAPTCHA Bypass #Credential Theft #Cyfirma #Employee Awareness #mobile security #Payroll Fraud #phishing #QR code phishing #Quishing #social engineering
Daily CyberSecurity
The Payroll Trap: New Quishing Campaign Uses Fake CAPTCHAs to Hijack Employee Paychecks
A sophisticated new phishing campaign is targeting employees where they are most vulnerable—their paychecks—by leveraging QR codes to bypass corporate security defenses. A new analysis by CYFIRMA …
26 views
Daily Writeups
⤷ Title: The Invisible Code: How HTML QR Codes Are Slipping Past Email Filters
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 10 Jan 2026 10:30:46 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Theft #Cybersecurity 2026 #email security #HTML Table #Infosec #phishing #QR code #Quishing #SANS #Social Engineering
Information Security News
The Invisible Code: How HTML QR Codes Are Slipping Past Email Filters
Cyber adversaries have conceived an ingenious method to circumvent the security protocols utilized by email services to intercept malicious QR codes. Rather than employing conventional image files…
11 views
Daily Writeups
⤷ Title: The Invisible Mosaic: How Tycoon’s HTML QR Codes and Teams Scams Are Blinding Modern Defenses
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Feb 2026 04:53:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Barracuda research #callback phishing #email security 2026 #Facebook copyright scam #Homoglyph Attack #HTML table QR #Microsoft Teams scam #Phishing_as_a_Service #QR Code Phishing #Tycoon toolkit
Penetration Testing Tools
The Invisible Mosaic: How Tycoon’s HTML QR Codes and Teams Scams Are Blinding Modern Defenses
In the preceding month, analysts at Barracuda have identified a flurry of sophisticated email-borne incursions targeting corporations and
19 views
Daily Writeups
⤷ Title: Hackers Use Signal QR Codes to Spy on Military and Political Leaders
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 09 Feb 2026 12:35:04 +0000
════════════════════════
⌗ Tags: #Security #Scams and Fraud #Cyber Crime #Cybersecurity #europe #Fake Support #Fraud #Germany #Malware #Military #Privacy #QR Code #Scam
Hackread
Hackers Use Signal QR Codes to Spy on Military and Political Leaders
Hackers are using Signal QR codes and fake support scams to spy on military and political leaders, German security agencies warn.
21 views
Daily Writeups
⤷ Title: Telegram Phishing Campaign Hijacks Accounts by Abusing Trust
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Feb 2026 00:00:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Account Takeover #API Abuse #Cyber Security #Cyfirma #infosec #mobile security #phishing #QR Code Scam #social engineering #Telegram
Daily CyberSecurity
Telegram Phishing Campaign Hijacks Accounts by Abusing Trust
A new phishing campaign is targeting Telegram users by turning the platform’s own security features into a weapon. CYFIRMA has uncovered an operation that bypasses traditional credential har…
42 views