Daily Writeups
@Daily_Writeups
3.56K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.56K subscribers
Daily Writeups
⤷ Title: CVE-2025-10184: Unpatched OnePlus Flaw Exposes SMS Data & Breaks MFA, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 24 Sep 2025 03:10:10 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_10184 #MFA #OnePlus #OxygenOS #security #SMS #Vulnerability
Daily CyberSecurity
CVE-2025-10184: Unpatched OnePlus Flaw Exposes SMS Data & Breaks MFA, PoC Available
A critical, unpatched OnePlus flaw (CVE-2025-10184) allows any app to read SMS data without permission, breaking MFA protections. PoC is available.
11 views
Daily Writeups
⤷ Title: PoC Released for Unpatch OnePlus Flaw: Any App Can Read Your SMS Messages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 03:54:31 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_10184 #mobile security #OnePlus #OxygenOS #Rapid7 #SMS Leak #SQL injection #zero_day
Penetration Testing Tools
PoC Released for Unpatch OnePlus Flaw: Any App Can Read Your SMS Messages
A critical flaw (CVE-2025-10184) in OnePlus OxygenOS allows any app to read users’ SMS/MMS data without permission. The PoC is public, but a fix is unavailable.Export to Sheets
12 views
Daily Writeups
⤷ Title: Exploited Routers: Flaw in Milesight Industrial Devices Used for Mass Smishing in Europe
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 03 Oct 2025 03:50:03 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CVE_2023_43261 #cybersecurity #Milesight #router #SEKOIA #Smishing #SMS API #vulnerability
Penetration Testing Tools
Exploited Routers: Flaw in Milesight Industrial Devices Used for Mass Smishing in Europe
A critical flaw in Milesight industrial routers is being exploited to launch mass smishing campaigns across Europe, exposing 572 devices and using SMS APIs to send phishing links.
16 views
Daily Writeups
⤷ Title: UK CMA Designates Google with Strategic Market Status Over 90% Search Dominance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 13 Oct 2025 00:01:17 +0000
════════════════════════
⌗ Tags: #Technology #AI Overviews #Antitrust #CMA #google #regulation #Search Advertising #SMS #Strategic Market Status
Daily CyberSecurity
UK CMA Designates Google with Strategic Market Status Over 90% Search Dominance
The UK's CMA gave Google Strategic Market Status (SMS) over its 90% search dominance. The designation grants the regulator new powers to mandate changes in Google's search and AI services.
13 views
Daily Writeups
⤷ Title: New York Issues Warning on ‘Inflation Refund’ SMS Phishing Scam Stealing SSNs and Financial Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 14 Oct 2025 03:30:24 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Governor Hochul #identity theft #Inflation Refund #New York #Smishing #SMS Phishing #Tax Fraud
Penetration Testing Tools
New York Issues Warning on 'Inflation Refund' SMS Phishing Scam Stealing SSNs and Financial Data
New York is warning residents about an "Inflation Refund" SMS phishing scam. Fraudsters impersonate the Tax Dept. to lure users to a fake site and steal SSNs and personal/financial data.
13 views
Daily Writeups
⤷ Title: Dark Web Alert: Massive Data Leak from Russian SMS Aggregators Threatens Global Accounts
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 20 Oct 2025 02:52:51 +0000
════════════════════════
⌗ Tags: #Data Leak #2FA #cybersecurity #data breach #Russia #SMS #supply chain attack
Penetration Testing Tools
Dark Web Alert: Massive Data Leak from Russian SMS Aggregators Threatens Global Accounts
A dark web post claims 3TB of data from two Russian SMS aggregators has been stolen, posing a huge risk of mass account takeover via 2FA codes.
13 views
Daily Writeups
⤷ Title: Wear OS Messages Flaw (CVE-2025-12080) Allows Unprivileged Apps to Send SMS/RCS Without Permission, PoC Available
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 00:26:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Confused Deputy #CVE_2025_12080 #Google Messages #Intent Abuse #Smartwatch Security #SMS Injection #Wear OS
Daily CyberSecurity
Wear OS Messages Flaw (CVE-2025-12080) Allows Unprivileged Apps to Send SMS/RCS Without Permission, PoC Available
A flaw (CVE-2025-12080) in Google Messages for Wear OS allows any installed app to send SMS/RCS messages without permission by abusing ACTION_SENDTO intents.
24 views
Daily Writeups
⤷ Title: SILENT HIJACK: Wear OS Flaw Lets Any App Send User’s Messages Without Permission
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 31 Oct 2025 03:10:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #CVE_2025_12080 #Google Messages #Intent Abuse #Privacy Breach #Smartwatch Security #SMS Flaw #Wear OS
Penetration Testing Tools
SILENT HIJACK: Wear OS Flaw Lets Any App Send User's Messages Without Permission
CVE-2025-12080 in Google Messages on Wear OS allows any app to silently send SMS/MMS messages, bypassing permissions. Update immediately to prevent fraud.
8 views
Daily Writeups
⤷ Title: No More SMS: Telegram is Developing Passkey Authentication for Secure Login
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 00:00:00 +0000
════════════════════════
⌗ Tags: #Technology #authentication #Biometrics #Login #messaging app #passkey #security #SMS Verification #Telegram
Daily CyberSecurity
No More SMS: Telegram is Developing Passkey Authentication for Secure Login
Telegram is developing passkey authentication to replace unreliable SMS codes. The move promises a far more secure login, leveraging biometrics (Face ID/fingerprint).
26 views
Daily Writeups
⤷ Title: Cheap Bots for Sale: Cambridge Study Reveals SMS Verification Bypassed for Just 8 Cents
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:48:05 +0000
════════════════════════
⌗ Tags: #Vulnerability #Bot Armies #Cambridge University #COTSI #cybersecurity #Disinformation #fake accounts #Gray Market #Identity Crisis #SIM Farms #SMS Verification
Penetration Testing Tools
Cheap Bots for Sale: Cambridge Study Reveals SMS Verification Bypassed for Just 8 Cents
One of the key defensive barriers against the creation of fake online accounts has proven alarmingly fragile—capable of
31 views
Daily Writeups
⤷ Title: 21,000 SIMs Discovered: CBI Dismantles Massive “Phishing Factory” in Operation Chakra-V
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 03:29:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #CBI #Cyber Security India #Digital Arrest #Financial Scams #KYC Violation #Lord Mahavira Services #NCR #Operation Chakra_V #phishing #SIM Box #SMS Fraud
Penetration Testing Tools
21,000 SIMs Discovered: CBI Dismantles Massive "Phishing Factory" in Operation Chakra-V
India’s Central Bureau of Investigation (CBI) has announced the arrest of three individuals suspected of orchestrating a large-scale
19 views
Daily Writeups
⤷ Title: Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:11:27 +0000
════════════════════════
⌗ Tags: #Malware #Android security #Banking Trojan #Cybercrime #Dropper Malware #Group_IB #mobile security #SMS Stealer #Telegram bot #Uzbekistan #Wonderland Malware
Daily CyberSecurity
Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts
A sophisticated wave of mobile malware is sweeping through Central Asia, marking a dangerous evolution in how cybercriminals target Android users. A new in-depth analysis by Group-IB reveals that …
23 views
Daily Writeups
⤷ Title: Spy, Steal, Lock: deVixor Android Trojan Hits Banking & Crypto Users
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 14 Jan 2026 00:11:08 +0000
════════════════════════
⌗ Tags: #Malware #Android Malware #Banking Trojan #Cyble Research #deVixor #Iran Cyber Threat #mobile security #phishing #ransomware #Remote Access Trojan (RAT) #SMS Stealer
Daily CyberSecurity
Spy, Steal, Lock: deVixor Android Trojan Hits Banking & Crypto Users
New deVixor Android malware combines banking fraud with ransomware. Targeting Iranian users, it steals credentials and locks devices. Avoid APKs.
20 views
Daily Writeups
⤷ Title: Never Use Your Mobile Number for Authentication Codes: The Safer Alternative is CallnFax…
════════════════════════
𐀪 Author: Callnfax
════════════════════════
ⴵ Time: Sat, 21 Feb 2026 17:28:04 GMT
════════════════════════
⌗ Tags: #sms #information_security #voip #two_factor_authentication #hacking
Medium
Never Use Your Mobile Number for Authentication Codes: The Safer Alternative is CallnFax…
Author: Yakov Nissen, Chief Technology Officer, CallnFax
25 views
Daily Writeups
⤷ Title: RedAlert: Mobile Espionage Exploiting Crisis and Fear
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 00:27:39 +0000
════════════════════════
⌗ Tags: #Malware #CloudSEK #cyber_espionage #infosec #Israel_Iran Conflict #Malware Analysis #mobile security #Red Alert Malware #smishing #SMS Spoofing #Trojanized App
Daily CyberSecurity
RedAlert: Mobile Espionage Exploiting Crisis and Fear
CloudSEK exposes a smishing campaign spreading a trojanized "Red Alert" app. The fake emergency tool tracks locations and steals data during air raids.
15 views
Daily Writeups
⤷ Title: The Red Alert Trap: How Arid Viper’s New Android Spyware Masquerades as a Life-Saving App
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 10 Mar 2026 03:44:14 +0000
════════════════════════
⌗ Tags: #Cyber Security #Acronis #Android malware #Arid Viper #Cyber Espionage 2026 #Hamas #Israel #mobile security #Oref Alert #phishing #Red Alert App #SMS scam #Spyware
Penetration Testing Tools
The Red Alert Trap: How Arid Viper’s New Android Spyware Masquerades as a Life-Saving App
A nascent espionage campaign has been chronicled within Israel, masterfully masquerading as a ubiquitous emergency broadcast service. Malefactors
10 views
Daily Writeups
⤷ Title: Scotland Man Pleads Guilty in Massive $8 Million Crypto-Heist and Phishing Campaign
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 21 Apr 2026 04:00:15 +0000
════════════════════════
⌗ Tags: #Cybercriminals #2FA bypass #Aggravated Identity Theft #Cryptocurrency Theft #Cybercrime #Department of Justice #Dundee #fbi #Scotland #SIM Swapping #SMS phishing #Tyler Robert Buchanan #Wire Fraud
Daily CyberSecurity
Scotland Man Pleads Guilty in Massive $8 Million Crypto-Heist and Phishing Campaign
Tyler Buchanan pleads guilty in US court for an $8M cyber heist. Discover how SMS phishing and SIM swapping bypassed 2FA to drain corporate & crypto assets.
21 views
Daily Writeups
⤷ Title: Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Sat, 25 Apr 2026 11:10:58 +0000
════════════════════════
⌗ Tags: #Security #Scams and Fraud #Captcha #Cyber Attack #Cybersecurity #Fraud #Privacy #Scam #SMS
Hackread
Fake CAPTCHA Scam Abuses Verification Clicks to Send Costly International Texts
Infoblox reveals a massive Click2SMS fraud scheme using fake CAPTCHAs and back button hijacking to trick victims into sending costly international texts.
34 views