Daily Writeups
@Daily_Writeups
4.13K subscribers
4 photos
138K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.13K subscribers
Daily Writeups
⤷ Title: Net Shield Bot: A Free Telegram Bot for Online Security
════════════════════════
𐀪 Author: paula emad
════════════════════════
ⴵ Time: Tue, 18 Mar 2025 16:58:09 GMT
════════════════════════
⌗ Tags: #security #bots #telegram_bot #telegram #cybersecurity
Medium
Net Shield Bot: A Free Telegram Bot for Online Security
🚀 Introduction
20 views
Daily Writeups
⤷ Title: How I Built My Own Telegram C2 Framework
════════════════════════
𐀪 Author: Sarah
════════════════════════
ⴵ Time: Thu, 24 Apr 2025 13:17:36 GMT
════════════════════════
⌗ Tags: #cybersecurity #telegram_bot #projects
Medium
How I Built My Own Telegram C2 Framework
Ever wondered how red teamers control devices remotely? I built a simple Command and Control (C2) system using Python and Telegram — and…
50 views
Daily Writeups
⤷ Title: AI Tools Turn Trojan: Fake Video Platforms Drop Noodlophile Stealer and XWorm Payloads
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 May 2025 00:33:27 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Malware #AI Malware #CapCut Exploit #Fake AI Platforms #Infostealer #Malware_as_a_Service #Noodlophile Stealer #Telegram bot #XWorm
Daily CyberSecurity
AI Tools Turn Trojan: Fake Video Platforms Drop Noodlophile Stealer and XWorm Payloads
Attackers exploit fake AI video tools to deploy Noodlophile Stealer and XWorm, stealing credentials and data via Telegram bots.
20 views
Daily Writeups
⤷ Title: PupkinStealer: Tiny Malware, Big Theft via Telegram Bot Exposed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 May 2025 00:20:41 +0000
════════════════════════
⌗ Tags: #Malware #browser credentials #Cyfirma #Data Theft #Discord #Infostealer #malware #PupkinStealer #Telegram #Telegram bot
Daily CyberSecurity
PupkinStealer: Tiny Malware, Big Theft via Telegram Bot Exposed
New lightweight PupkinStealer malware silently steals browser data, messaging sessions, and desktop files, sending it all via Telegram.
18 views
Daily Writeups
⤷ Title: ️‍♂️ I Found a Telegram Bot That Handles Fake Emails Like a Pro (And I Had to Talk About It)
════════════════════════
𐀪 Author: PanicAtTheKernel
════════════════════════
ⴵ Time: Sat, 14 Jun 2025 10:36:24 GMT
════════════════════════
⌗ Tags: #telegram_bot #productivity #ai #telegram #cybersecurity
Medium
🕵️‍♂️ I Found a Telegram Bot That Handles Fake Emails Like a Pro (And I Had to Talk About It)
I Was Gone, But I Wasn’t Idle
18 views
Daily Writeups
⤷ Title: PyPI Supply Chain Attack: “cloudscrapersafe” Steals Credit Cards via Fake Python Library
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sun, 20 Jul 2025 00:04:23 +0000
════════════════════════
⌗ Tags: #Malware #cloudscrapersafe #credit card theft #cybersecurity #malware #PyPI #Python #supply chain attack #Telegram bot
Daily CyberSecurity
PyPI Supply Chain Attack: "cloudscrapersafe" Steals Credit Cards via Fake Python Library
Imperva uncovered a PyPI supply chain attack: "cloudscrapersafe" disguised as a legitimate Python library, stealing credit card data and exfiltrating it to a Telegram bot.
35 views
Daily Writeups
⤷ Title: How I LEGALLY HACKED a Company’s Telegram Bot during a Pentest
════════════════════════
𐀪 Author: Said-Abbosxon Nabijonov | 0trc
════════════════════════
ⴵ Time: Fri, 08 Aug 2025 23:57:44 GMT
════════════════════════
⌗ Tags: #telegram_bot #penetration_testing #software_development #hacking #cybersecurity
Medium
How it began:
This is a real life story!
21 views
Daily Writeups
⤷ Title: How I Found SQL Injection in a Telegram Bot (and Built a Simulation)
════════════════════════
𐀪 Author: Eiliya Keshtkar
════════════════════════
ⴵ Time: Sun, 31 Aug 2025 20:54:51 GMT
════════════════════════
⌗ Tags: #sqli #sql_injection #input_validation #telegram_bot #vulnrability_simulation
Medium
How I Found SQL Injection in a Telegram Bot (and Built a Simulation)
Hi everyone, I’m Eiliya Keshtkar, a web and mobile pentester who enjoys digging into systems, breaking them apart, and simulating…
35 views
Daily Writeups
⤷ Title: GrabThePhisher
════════════════════════
𐀪 Author: Adewale Ayomide
════════════════════════
ⴵ Time: Wed, 24 Sep 2025 19:30:00 GMT
════════════════════════
⌗ Tags: #blue_team #web3 #telegram_bot #phishing #cybersecurity
Medium
GrabThePhisher
Another article? yes 😁
11 views
Daily Writeups
⤷ Title: TeleHunt — BotInTheMiddle [EN]
════════════════════════
𐀪 Author: Jimmy Bianco
════════════════════════
ⴵ Time: Sun, 12 Oct 2025 12:43:00 GMT
════════════════════════
⌗ Tags: #hacking #telegram #cybersecurity #telegram_bot #python
Medium
TeleHunt — BotInTheMiddle [EN]
In 2023, I published the article “Phishing Analysis | Who is Behind This Type of Attack?”, in which I analyzed a phishing site targeting a…
33 views
Daily Writeups
⤷ Title: TeleHunt — BotInTheMiddle [ES]
════════════════════════
𐀪 Author: Jimmy Bianco
════════════════════════
ⴵ Time: Sun, 12 Oct 2025 12:34:47 GMT
════════════════════════
⌗ Tags: #telegram_bot #threat_intelligence #python #cybsersecurity #hacking
Medium
TeleHunt — BotInTheMiddle [ES]
En 2023 publiqué el artículo “Análisis de Phishing | Quién está detrás de este tipo de ataques?”, en el que analicé un sitio de phishing…
27 views
Daily Writeups
⤷ Title: Fantasy Hub RAT MaaS Uncovered: Russian Spyware Uses Telegram Bot and WebRTC to Hijack Android Devices
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 10 Nov 2025 00:40:08 +0000
════════════════════════
⌗ Tags: #Malware #Android RAT #Banking Trojan #Fantasy Hub #MaaS #phishing #spyware #Telegram bot #WebRTC
Daily CyberSecurity
Fantasy Hub RAT MaaS Uncovered: Russian Spyware Uses Telegram Bot and WebRTC to Hijack Android Devices
Researchers at zLabs have uncovered a sophisticated Android Remote Access Trojan (RAT) known as Fantasy Hub, being sold on Russian-language cybercrime channels under a Malware-as-a-Service (MaaS) …
13 views
Daily Writeups
⤷ Title: The Ghost in the Machine: Operation MoneyMount-ISO Uses Fake Payment Lures to Unleash Phantom Stealer
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 17 Dec 2025 04:38:51 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Data Exfiltration #Discord Webhooks #Financial Cybercrime #Info_stealer #ISO Malware #Operation MoneyMount_ISO #Phantom Stealer #phishing campaign #Seqrite Labs #Telegram Bot
Penetration Testing Tools
The Ghost in the Machine: Operation MoneyMount-ISO Uses Fake Payment Lures to Unleash Phantom Stealer
While monitoring digital threat activity, researchers at Seqrite Labs uncovered a new targeted campaign dubbed Operation MoneyMount-ISO. The
11 views
Daily Writeups
⤷ Title: Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 23 Dec 2025 00:11:27 +0000
════════════════════════
⌗ Tags: #Malware #Android security #Banking Trojan #Cybercrime #Dropper Malware #Group_IB #mobile security #SMS Stealer #Telegram bot #Uzbekistan #Wonderland Malware
Daily CyberSecurity
Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts
A sophisticated wave of mobile malware is sweeping through Central Asia, marking a dangerous evolution in how cybercriminals target Android users. A new in-depth analysis by Group-IB reveals that …
24 views
Daily Writeups
⤷ Title: New WordPress Phishing Scam Steals Credit Cards via Telegram
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 00:17:44 +0000
════════════════════════
⌗ Tags: #Cybercriminals #3_D Secure bypass #Anurag #credit card theft #cyber fraud #DMARC #Domain Renewal Scam #Exfiltration #OTP Harvesting #phishing #soyfix[.]com #Telegram bot #wordpress
Daily CyberSecurity
New WordPress Phishing Scam Steals Credit Cards via Telegram
Researcher Anurag uncovers a WordPress phishing campaign that steals credit cards and 3-D Secure OTPs, exfiltrating data directly via Telegram bots.
19 views
Daily Writeups
⤷ Title: Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 06 Feb 2026 00:11:49 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cloud Security #Credential Harvesting #Dropbox Impersonation #Email Security #PDF Phishing #phishing #social engineering #Telegram bot #Vercel Blob #X_Labs
Daily CyberSecurity
Cloud-Hosted Trap: Phishers Use Vercel & Telegram to Bypass Filters
Phishing attacks have evolved from simple “click here” links to complex, multi-stage puzzles designed to baffle security scanners. A new report from the X-Labs team uncovers a sophisti…
15 views
Daily Writeups
⤷ Title: The Dark Side of Telegram: How Cybercriminals Weaponize Bot APIs for Stealthy Data Exfiltration
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 12 Mar 2026 01:54:45 +0000
════════════════════════
⌗ Tags: #Cybercriminals #C2 Infrastructure #Cofense #Command and Control #cybersecurity #data exfiltration #infosec #malware #phishing #Telegram Bot API #threat intelligence
Daily CyberSecurity
The Dark Side of Telegram: How Cybercriminals Weaponize Bot APIs for Stealthy Data Exfiltration
A new Cofense report reveals how hackers abuse legitimate Telegram Bot APIs to create stealthy Command and Control (C2) centers for data exfiltration.
17 views
Daily Writeups
⤷ Title: Bot Revolution: How Telegram’s New “Manager Mode” Lets AI Agents Spawn Their Own Sub-Bots
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Apr 2026 09:11:48 +0000
════════════════════════
⌗ Tags: #Technology #@BotFather #AI Agents #Automation #Manager Mode #Messaging Apps #Multi_tenant Architecture #software development #Tech News #Telegram #Telegram Bot API
Daily CyberSecurity
Bot Revolution: How Telegram’s New "Manager Mode" Lets AI Agents Spawn Their Own Sub-Bots
Telegram launches Manager Mode! Now bots can create and manage sub-bots, enabling developers to deploy multi-tenant AI agent services with zero user setup.
14 views
Daily Writeups
⤷ Title: AI in the Driver’s Seat: How the ‘Bissa’ Scanner Hijacked 900+ Firms in Weeks
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 24 Apr 2026 07:00:01 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.env file theft #AI Cyber Attack #AWS #Bissa Scanner #Claude Code #Cloud Security #CVE_2025_55182 #Dr. Tube #OpenAI #OpenClaw #React2Shell #Stripe #Telegram bot #The DFIR Report
Daily CyberSecurity
AI in the Driver’s Seat: How the ‘Bissa’ Scanner Hijacked 900+ Firms in Weeks
Dr. Tube’s AI-assisted Bissa scanner exploited 900+ companies using React2Shell (CVE-2025-55182) to steal 30,000 .env files. See the AI-led attack workflow.
20 views
Daily Writeups
⤷ Title: GitBait Phishing Campaign Targets 12 Mexican Banks via GitHub Pages
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Tue, 23 Jun 2026 09:22:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Credential Harvesting #Financial Sector #GitBait #GitHub Pages #Mexican banks #phishing #SheetBest #Telegram bot
Daily CyberSecurity
GitBait Phishing Campaign Targets 12 Mexican Banks via GitHub Pages
The GitBait phishing campaign abuses GitHub Pages and the SheetBest API to steal banking credentials from at least 12 Mexican financial institutions.
26 views