Daily Writeups
@Daily_Writeups
4.11K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.11K subscribers
Daily Writeups
⤷ Title: The KGB’s All-Seeing Eye: How ResidentBat Spyware Turns Seized Phones into Total Surveillance Tools
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 22 Dec 2025 00:33:47 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service #Android security #Belarus #Journalists #KGB #Physical Access #Reporters Without Borders #ResidentBat #spyware #surveillance
Daily CyberSecurity
The KGB’s All-Seeing Eye: How ResidentBat Spyware Turns Seized Phones into Total Surveillance Tools
RSF uncovers ResidentBat, a Belarusian KGB spyware physically installed during interrogations to hijack encrypted messages and monitor journalists.
10 views
Daily Writeups
⤷ Title: New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 06 Jan 2026 00:06:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #accessibility #Apple #AppleScript #CVE_2025_43530 #macOS #macOS Sequoia #macOS Sonoma #macOS Tahoe #Mickey Jin #privacy #TCC Bypass #TOCTOU #Voiceover
Daily CyberSecurity
New TCC Bypass (CVE-2025-43530) Exposes macOS to Unchecked Automation
Apple’s privacy fortress, the Transparency, Consent, and Control (TCC) framework, has been breached once again. Security researcher Mickey Jin (@patch1t) has disclosed a sophisticated new vulnerab…
24 views
Daily Writeups
⤷ Title: AI Hub Hijacked: Polymorphic Android RAT Abuses Hugging Face to Steal Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:11:27 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Services Abuse #Android RAT #Banking Trojan #Bitdefender #Cybercrime #Hugging Face #mobile security #Polymorphic Malware #Premium Club #TrustBastion
Daily CyberSecurity
AI Hub Hijacked: Polymorphic Android RAT Abuses Hugging Face to Steal Data
13 views
Daily Writeups
⤷ Title: PortSwigger Labs: User ID Controlled by Request Parameter (Lab 7 & 8)
════════════════════════
𐀪 Author: Sanjivani Dobhal
════════════════════════
ⴵ Time: Sun, 22 Feb 2026 17:29:51 GMT
════════════════════════
⌗ Tags: #hacking #portswigger #accessibility #penetration_testing #idor
Medium
PortSwigger Labs: User ID Controlled by Request Parameter (Lab 7 & 8)
In this blog, I explain Lab 7 and Lab 8 from the PortSwigger Web Security Academy, both focused on Insecure Direct Object Reference (IDOR)…
42 views
Daily Writeups
⤷ Title: The IPTV Trap: How the “Massiv” Trojan Hijacks Government IDs and Empties Bank Accounts
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:25:09 +0000
════════════════════════
⌗ Tags: #Malware #accessibility services abuse #Android banking Trojan #Chave Móvel Digital #credential exfiltration #device hijacking #FuncVNC #gov.pt #IPTV fraud #Massiv malware #Southern Europe #Tech News 2026
Penetration Testing Tools
The IPTV Trap: How the "Massiv" Trojan Hijacks Government IDs and Empties Bank Accounts
A nascent Android banking Trojan has resurfaced, meticulously engineered to execute a recurring stratagem: coercing individuals into sideloading
19 views
Daily Writeups
⤷ Title: The Taxman’s Shadow: How a $2M Fraud Syndicate Impersonated Indonesia’s Official Coretax Service
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:21:39 +0000
════════════════════════
⌗ Tags: #Cybercriminals #accessibility services abuse #Android malware #Coretax Indonesia #DJP Online #Gigabud.RAT #GoldFactory #Group_IB #MMRat #Taotie Trojan #tax fraud 2026 #Vishing
Penetration Testing Tools
The Taxman’s Shadow: How a $2M Fraud Syndicate Impersonated Indonesia’s Official Coretax Service
In Indonesia, a sophisticated fraudulent enterprise has been unmasked, masquerading as the official Coretax fiscal service. Adversaries orchestrated
11 views
Daily Writeups
⤷ Title: Total System Eclipse: “Oblivion” Malware Hijacks Android 16 with Unprecedented Stealth
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 08:59:24 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service exploit #Android 16 malware #Android banking Trojan #Certo security #cyber news 2026 #mobile finance security #Oblivion RAT #Remote Access Trojan #Samsung One UI exploit #Xiaomi MIUI security
Penetration Testing Tools
Total System Eclipse: "Oblivion" Malware Hijacks Android 16 with Unprecedented Stealth
A novel tool for the remote exploitation of Android devices has surfaced on clandestine forums, already earning the
33 views
Daily Writeups
⤷ Title: “Oblivion” Malware Hijacks Android 15 with Unprecedented Stealth
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 03 Mar 2026 04:22:11 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service exploit #Android 15 security #Android malware #APK builder #Certo research #Cyber Security 2026 #HVNC #mobile banking trojan #Oblivion RAT #Remote Access Trojan
Penetration Testing Tools
"Oblivion" Malware Hijacks Android 15 with Unprecedented Stealth
An advertisement hawking Oblivion, a novel Remote Access Trojan (RAT) designed explicitly for Android ecosystems, has materialized on
21 views
Daily Writeups
⤷ Title: Broken Access Control — When the System Lets You Walk Into Rooms You Were Never Supposed to Enter
════════════════════════
𐀪 Author: Rufus Kehinde
════════════════════════
ⴵ Time: Wed, 11 Mar 2026 17:57:14 GMT
════════════════════════
⌗ Tags: #accessibility #cybersecurity #application_security #broken_access_control #web_app_security
Medium
Broken Access Control — When the System Lets You Walk Into Rooms You Were Never Supposed to Enter
Most security failures are not about someone breaking down the door. They are about the system quietly forgetting to lock it in the first…
29 views
Daily Writeups
⤷ Title: The Silent Hijack: How AI-Powered Android Trojans Are Intercepting Real-Time Payments
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 07:11:28 +0000
════════════════════════
⌗ Tags: #Malware #accessibility permissions #Android malware #banking trojan #BeatBanker #BTMOB RAT #Cryptocurrency Theft #Malware_as_a_Service #mobile security 2026 #Pix payment security #PixRevolution #TaxiSpy RAT
18 views
Daily Writeups
⤷ Title: The Accessibility Lockdown: How Android 17’s Advanced Protection Mode Ends API Exploitation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 04:50:50 +0000
════════════════════════
⌗ Tags: #Android #AAPM #Accessibility API #Advanced Protection Mode #Android 16 #Android 17 #App Permissions #Google Play Protect #Malware Prevention #Mobile Security 2026 #Phishing Defense
Daily CyberSecurity
The Accessibility Lockdown: How Android 17’s Advanced Protection Mode Ends API Exploitation
Google is shielding Android 17 users by banning non-essential apps from the Accessibility API. Discover how Advanced Protection Mode locks down your device.
17 views
Daily Writeups
⤷ Title: Digital Wraiths: How Android’s “God Mode” is Turning Smartphones into Banking Trojans
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 06 Apr 2026 09:52:53 +0000
════════════════════════
⌗ Tags: #Android #Malware #Accessibility Service #Android 17 #Android malware #banking trojan #India Cybercrime #Infosec #phishing #SBI YONO Scam #Smartphone Security #WhatsApp Malware
Penetration Testing Tools
Digital Wraiths: How Android’s "God Mode" is Turning Smartphones into Banking Trojans
Digital marauders have devised methodologies to transmute mundane Android smartphones into entirely subjugated apparatuses. Indian authorities report that
20 views
Daily Writeups
⤷ Title: Sophisticated Android Banking Trojan Threat Evades Detection via High-Trust Lures
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 01 Jun 2026 08:17:46 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service #Android Malware #CRIL #cyber fraud #mobile banking security #OverlayPhantom
Daily CyberSecurity
Sophisticated Android Banking Trojan Threat Evades Detection via High-Trust Lures
A new Android banking trojan threat targets 180+ apps. Learn how credential harvesting overlays steal banking data.
34 views
Daily Writeups
⤷ Title: Glitch SPY Android RAT Spreads Through a Fake Polish Rental App
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Fri, 03 Jul 2026 07:30:11 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Service abuse #Android Malware #Android RAT #Brokewell #Crypto Clipper #Cyble #fake rental app #Glitch SPY
Daily CyberSecurity
Glitch SPY Android RAT Spreads Through a Fake Polish Rental App
At a glance Malware family Glitch SPY (Android RAT and builder platform) Threat actor Unattributed; operator unidentified Targets People seeking rental properties in Poland; Polish speakers Delive…
16 views
Daily Writeups
⤷ Title: Broken Access Control
════════════════════════
𐀪 Author: Gamuchirai
════════════════════════
ⴵ Time: Mon, 13 Jul 2026 13:36:55 GMT
════════════════════════
⌗ Tags: #hacking #ai #broken_access_control #accessibility #broken_authentication
Medium
Broken Access Control
Broken access controls are a type of security vulnerability that arises when an application or system fails to properly restrict access to…
14 views
Daily Writeups
⤷ Title: Albiriox Android Banking Trojan Spreads Through Fake UniCredit Rewards on Telegram
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Thu, 16 Jul 2026 07:30:12 +0000
════════════════════════
⌗ Tags: #Malware #Accessibility Abuse #Albiriox #Android Banking Trojan #Android RAT #D3Lab #Fake Banking Rewards #On_Device Fraud #Telegram malware #UniCredit
Daily CyberSecurity
Albiriox Android Banking Trojan Spreads Through Fake UniCredit Rewards on Telegram
At a Glance Malware family Albiriox (Android banking RAT, sold as Malware-as-a-Service), delivered by a UniCredit-branded dropper Threat actor Unattributed operator; Albiriox is sold on Russian-sp…
26 views
Daily Writeups
⤷ Title: The Sphere, DEF CON, and a 72-Year-Old Who Wanted to See The Wizard of Oz
════════════════════════
𐀪 Author: Len Noe
════════════════════════
ⴵ Time: Mon, 10 Aug 2026 19:29:49 GMT
════════════════════════
⌗ Tags: #cybersecurity #accessibility #hacking #technology #defcon
Medium
The Sphere, DEF CON, and a 72-Year-Old Who Wanted to See The Wizard of Oz
What I was told, what I can verify, and what I’m choosing to do about it.
11 views
Daily Writeups
⤷ Title: Windows 11 Enhances Mouse Visibility and Customization
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 28 Sep 2026 03:27:36 +0000
════════════════════════
⌗ Tags: #Windows #accessibility #Microsoft #User Interface #Windows 11
Daily CyberSecurity
Windows 11 Enhances Mouse Visibility and Customization
Recent speculation suggested that Microsoft intended to integrate a mouse pointer locator feature directly into Windows 11. This feature draws heavy inspiration from the utility previously offered…
13 views
Daily Writeups
⤷ Title: What Years of Mendix Development and Findings Taught Me to Build
════════════════════════
𐀪 Author: João Guedes
════════════════════════
ⴵ Time: Fri, 16 Oct 2026 15:57:54 GMT
════════════════════════
⌗ Tags: #accessibility #application_security #low_code #mendix #code_quality
Medium
What Years of Mendix Development and Findings Taught Me to Build
A Studio Pro extension that checks security, accessibility and code quality. What it does, how we’re piloting it, and where it stops.
25 views
Daily Writeups
⤷ Title: I Removed the CAPTCHA. Could Customers Still Get Through?
════════════════════════
𐀪 Author: Tinguyen
════════════════════════
ⴵ Time: Sat, 24 Oct 2026 15:01:04 GMT
════════════════════════
⌗ Tags: #web_development #software_engineering #application_security #accessibility
Medium
I Removed the CAPTCHA. Could Customers Still Get Through?
A hidden field can catch spam. The harder part is knowing whose request never reached you.
25 views