Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: ModStealer: The New Stealth Malware That Bypasses Antivirus
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Sep 2025 08:33:55 +0000
════════════════════════
⌗ Tags: #Malware #antivirus #cybersecurity #Data Theft #hacking #Linux #macos #malware #ModStealer #windows
Penetration Testing Tools
ModStealer: The New Stealth Malware That Bypasses Antivirus
A new, undetectable malware called ModStealer is spreading through fake job ads, stealing data from macOS, Windows, and Linux systems.
12 views
Daily Writeups
⤷ Title: EvilAI: The New Malware Using AI to Evade Detection
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Sep 2025 08:07:33 +0000
════════════════════════
⌗ Tags: #Malware #AI #cybersecurity #Data Theft #enterprise security #EvilAI #hacking #malware #Threat Actors #Trend Micro
Penetration Testing Tools
EvilAI: The New Malware Using AI to Evade Detection
EvilAI is a new AI-powered malware that uses legitimate-looking applications and advanced obfuscation to bypass security and steal data from victims.
13 views
Daily Writeups
⤷ Title: Raven Stealer: The New Infostealer Using Telegram to Steal Your Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 19 Sep 2025 07:56:28 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Data Theft #Delphi #Infostealer #malware #pirated software #Raven Stealer #Telegram
Penetration Testing Tools
Raven Stealer: The New Infostealer Using Telegram to Steal Your Data
A new infostealer, Raven Stealer, is distributing via pirated software and exfiltrating stolen data to attackers via Telegram. Learn how it works and how to stay safe.
20 views
Daily Writeups
⤷ Title: First-Ever MCP Supply Chain Attack: Malicious Package Steals Emails by Adding Hidden BCC
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 27 Sep 2025 02:38:23 +0000
════════════════════════
⌗ Tags: #Malware #AI #cybersecurity #Data Theft #Emails #malicious package #MCP #npm #Postmark_mcp #supply chain attack
Penetration Testing Tools
First-Ever MCP Supply Chain Attack: Malicious Package Steals Emails by Adding Hidden BCC
The npm package postmark-mcp was backdoored to silently forward emails to an external server. The incident shows how Model Context Protocol (MCP) servers are a new supply chain risk.
19 views
Daily Writeups
⤷ Title: Trinity of Chaos: How LAPSUS$, Scattered Spider, and ShinyHunters Forged a Cybercrime Alliance
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 00:23:12 +0000
════════════════════════
⌗ Tags: #Vulnerability #APT #Cybercrime #Data Theft #Extortion #LAPSUS$ #MFA Bypass #Resecurity #Scattered Spider #ShinyHunters #social engineering
Daily CyberSecurity
Trinity of Chaos: How LAPSUS$, Scattered Spider, and ShinyHunters Forged a Cybercrime Alliance
A new report shows LAPSUS$, Scattered Spider, and ShinyHunters have formed a collaborative alliance, sharing tactics like social engineering and MFA bypass to launch global attacks.
15 views
Daily Writeups
⤷ Title: Red Hat Confirms Breach of GitLab Instance, Customer Network Blueprints Stolen
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 05 Oct 2025 06:58:10 +0000
════════════════════════
⌗ Tags: #Data Leak #Consulting #Crimson Collective #Customer Engagement Reports #cybersecurity #Data Theft #GitLab Breach #red hat
Daily CyberSecurity
Red Hat Confirms Breach of GitLab Instance, Customer Network Blueprints Stolen
Red Hat confirmed a breach of its consulting arm's GitLab instance. Hackers stole 570 GB of data, including Customer Engagement Reports that detail client network infrastructure.
19 views
Daily Writeups
⤷ Title: Mysterious Elephant APT Campaign Targets South Asian Diplomacy, Steals WhatsApp Data with New MemLoader Backdoor
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Oct 2025 01:45:48 +0000
════════════════════════
⌗ Tags: #Vulnerability #APT #BabShell #cyber_espionage #Data Theft #MemLoader #Mysterious Elephant #Pakistan #WhatsApp
Daily CyberSecurity
Mysterious Elephant APT Campaign Targets South Asian Diplomacy, Steals WhatsApp Data with New MemLoader Backdoor
Kaspersky exposed the Mysterious Elephant APT targeting South Asia. The group uses MemLoader and custom tools (BabShell) to steal sensitive WhatsApp desktop data and exfiltrate documents.
9 views
Daily Writeups
⤷ Title: Ransomware Steals Meeting Videos and Financial Data Ahead of SEC Filing
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 25 Oct 2025 07:08:47 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Data Theft #Financial Crime #Jewett_Cameron #ransomware #SEC
Penetration Testing Tools
Ransomware Steals Meeting Videos and Financial Data Ahead of SEC Filing
Jewett-Cameron told the SEC that a ransomware attack stole corporate meeting videos and financial documents, threatening to delay its Form 10-K filing.
13 views
Daily Writeups
⤷ Title: Blackmail Ring Busted: Gang Stole Client Data to Threaten Victims with Fake Tapes
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 06 Nov 2025 04:10:58 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Blackmail #Data Theft #Extortion #Fraud #malware #Massage Parlor #Organized Crime #South Korea
Penetration Testing Tools
Blackmail Ring Busted: Gang Stole Client Data to Threaten Victims with Fake Tapes
South Korean police charged 15 members of an extortion ring that used malware to steal client data, blackmailing 62 victims with fake videos for over $1.25M.
13 views
Daily Writeups
⤷ Title: When You Thought You Deleted All Your Private Files and Yet Cybercrimals Recovered All Your Private…
════════════════════════
𐀪 Author: David SEHYEON Baek
════════════════════════
ⴵ Time: Sat, 08 Nov 2025 00:37:34 GMT
════════════════════════
⌗ Tags: #cybercrime #data_breach #data_theft #cybersecurity #hacking
Medium
When You Thought You Deleted All Your Private Files and Yet Cybercrimals Recovered All Your Private Files and Threatening You
You dragged those photos to the trash, emptied it, and felt a rush of relief. Then a stranger messaged you with screenshots you knew you’d…
12 views
Daily Writeups
⤷ Title: Cline Bot AI Agent Vulnerable to Data Theft and Code Execution
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Wed, 19 Nov 2025 11:59:03 +0000
════════════════════════
⌗ Tags: #Artificial Intelligence #Security #Agentic AI #AI #Cline Bot #Code Execution #Data Theft #Developer #Mindgard
Hackread
Cline Bot AI Agent Vulnerable to Data Theft and Code Execution
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
37 views
Daily Writeups
⤷ Title: LG Energy Solution Hacked: Akira Group Claims Theft of 1.7 TB of Data
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 21 Nov 2025 09:53:48 +0000
════════════════════════
⌗ Tags: #Data Leak #Akira Ransomware #Battery Manufacturer #cyber attack #Data Theft #Extortion #FBI Advisory #LG Energy Solution #LG Energy Solution confirmed an overseas facility was hit by a cyber attack; the Akira ransomware group claims to have stolen a massive 1.7 TB of internal data. #Manufacturing Security
Penetration Testing Tools
LG Energy Solution Hacked: Akira Group Claims Theft of 1.7 TB of Data
LG Energy Solution confirmed an overseas facility was hit by a cyber attack; the Akira ransomware group claims to have stolen a massive 1.7 TB of internal data.
34 views
Daily Writeups
⤷ Title: CISA KEV Alert: GeoServer XXE Flaw Under Active Attack Risks Data Theft & Internal Network Scanning
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 12 Dec 2025 03:00:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CISA KEV #CVE_2025_58360 #Data Theft #GeoServer #ssrf #XML External Entity #xxe
Daily CyberSecurity
CISA KEV Alert: GeoServer XXE Flaw Under Active Attack Risks Data Theft & Internal Network Scanning
CISA added a critical XXE flaw (CVE-2025-58360) in OSGeo GeoServer to the KEV Catalog. The actively exploited bug allows attackers to read arbitrary files and perform SSRF on internal networks. Patch immediately.
26 views
Daily Writeups
⤷ Title: Naughty List: SantaStealer Malware Unwrapped—The “New” Holiday Threat is Just Rebranded Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 18 Dec 2025 03:29:11 +0000
════════════════════════
⌗ Tags: #Malware #App_Bound Encryption #BluelineStealer #Chrome Security #Cybersecurity 2025 #Data Theft #Infostealer #Malware_as_a_Service #phishing #Rapid7 #SantaStealer
Penetration Testing Tools
Naughty List: SantaStealer Malware Unwrapped—The "New" Holiday Threat is Just Rebranded Code
In the run-up to the New Year holidays, underground marketplaces often see a surge of freshly minted data-stealing
14 views
Daily Writeups
⤷ Title: TikTok’s “Scam-Yourself” Trap: How AuraStealer Malware Tricks Users into Hacking Their Own PCs
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:37:11 +0000
════════════════════════
⌗ Tags: #Malware #AuraStealer #Cyber Security #Data Theft #Gen Digital #Infostealer #powershell #Scam_Yourself #social engineering #TikTok Malware #Windows malware
Daily CyberSecurity
TikTok’s “Scam-Yourself” Trap: How AuraStealer Malware Tricks Users into Hacking Their Own PCs
Gen Digital uncovers AuraStealer, a new infostealer using TikTok "Scam-Yourself" tactics to trick users into infecting their own Windows PCs.
13 views
Daily Writeups
⤷ Title: Game Over: “RenEngine” Malware Hides in Pirated Visual Novels
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 17 Feb 2026 00:22:22 +0000
════════════════════════
⌗ Tags: #Malware #ACR Stealer #Cyber Crime #Data Theft #Game Security #kaspersky #Lumma Stealer #malware #Pirated Games #Ren'Py #RenEngine #Visual Novels
Daily CyberSecurity
Game Over: "RenEngine" Malware Hides in Pirated Visual Novels
Kaspersky warns: Pirated visual novels are spreading RenEngine malware. Attackers use fake downloads to install ACR Stealer. Protect your data now.
19 views
Daily Writeups
⤷ Title: Academic Exposure: The Unpatched Flaw Siphoning Student Data from DRC INSIGHT
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 13:45:44 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Academic Security #COS Server #CVE_2026_5756 #Data Theft #DRC INSIGHT #EduTech #Exam Proctoring #infosec #network_security #no patch #Student Privacy
Daily CyberSecurity
Academic Exposure: The Unpatched Flaw Siphoning Student Data from DRC INSIGHT
Unpatched CVE-2026-5756 in DRC INSIGHT allows unauthenticated hijacking of student exam responses and traffic manipulation. Secure your school's network now.
23 views
Daily Writeups
⤷ Title: Trellix Investigates Unauthorized Breach of Internal Source Code Repository
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 04 May 2026 08:05:21 +0000
════════════════════════
⌗ Tags: #Data Leak #Cyber attack 2026 #cybersecurity news #Data Theft #digital forensics #Endpoint Protection #Infosec #Repository Security #Source Code Breach #Supply Chain Risk #Trellix #XDR
Penetration Testing Tools
Trellix Investigates Unauthorized Breach of Internal Source Code Repository
Cybersecurity giant Trellix confirms an incursion into its internal code repository. Independent experts are investigating potential risks to XDR and endpoint logic.
16 views