All posts
Text messages impersonating crypto exchanges and wallet companies use 'protect your assets' as the hook to get you to tap a link. Follow the link and you land on a screen asking for your wallet recovery words. Based on the advisory KISA issued on October 16 and a case reported by AhnLab ASEC, here is what to do right now.
You tapped 'Update' in a short-drama app — and a few days later your banking app has become a tampered build that only looks the same. Here is a rundown of Hirudo, the Android malware disclosed by security firm ThreatFabric: why it works, and what you can check right now.
A Ledger hardware wallet sold at nearly half the list price was reported to contain a chip the manufacturer never made. According to researchers' analysis, that chip sent out the 24 recovery words that appear during initial setup. Here's why where you bought your device is itself a security question, and what to do right now.
Some of the ultra-cheap Android phones carrying Samsung and Apple names had malicious apps inside them from the moment they left the factory. Because the apps sit inside the system, they are hard to delete, and a factory reset does not get rid of them. Based on a Bitdefender report, here is who is affected and what you can do right now.
You clicked 'Sign in with Google' and a window appeared whose address was genuinely Google's. But that window was a fake the phishing page had drawn inside its own screen. Behind it, a human operator was taking the password and the verification code in real time. Based on a report from the security firm Island, here is the one place that separates a real window from a fake one.
Apple's official preorder opens on October 16. Ahead of that, a fake preorder page dangling a '$500 coupon' has been found. According to the analysis, on an iPhone that has put off updating, merely opening this page starts the attack.
Reports say the names, phone numbers, annual incomes, and loan limits of roughly 25,000 people who inquired about loans at Shinhan Bank have leaked. The fact that a caller knows your information precisely is not proof that they work at the bank. Here are the two things to do now, and what we still don't know.
A technique has been disclosed in which ChatGPT, Gemini, and Google's AI Overviews hand out fake customer support numbers as if they were real. The researcher found at least 374 companies whose names were impersonated and tens of thousands of fake contact pages. Here is how the AI was fooled, and what to check before you dial.
Level13, the operator of the men's fashion app Lookpin, has admitted to a hack. Beyond the email addresses and phone numbers it first disclosed, addresses, refund account numbers, order histories, and even personal customs clearance codes for overseas direct purchases have been confirmed as leaked. We separate what cannot be changed from the number you can have reissued, and lay out what to do today.
It was reported that the test-reservation site of 'Thinking Bull' (생각하는황소), a math academy with branches nationwide including Daechi-dong, was breached and that student names, schools, grades, dates of birth, and parents' phone numbers may have leaked. Here is what to do when someone holding that information calls to say 'your child has been hurt' — and what has not yet been confirmed.
You clicked an ad from an official account with a verified badge, and instead of an installer, a box popped up telling you to paste a command. The hand doing the pasting is yours, but what leaves is your passwords, notes, and crypto wallet. We unpack this technique — 108 ads posted in two days — with a single school locker.
A 100GB-plus file is circulating in search results, communities, and torrents as a 'leaked build' of an unreleased game. Click install and it seems to end with an error — but behind that, remote-control, password-stealing, and file-destroying programs all install at once. We've laid out what to do before downloading, and what to do if you've already run it.
It has been reported that the information of some 219,000 users of Gangnam Unni, a cosmetic-medicine app, was leaked. Not just names and phone numbers, but which clinic they consulted, which procedure they discussed, and even consultation photos. Here is what to do when someone holding that information calls and pretends to be the clinic.
An investigation found that the discount shopping sites you see in ads lifted their photos, their product descriptions, and even their customer service numbers straight from the real brands. 119,000-plus confirmed addresses, 44,000 brands whose names were stolen. Here's what to look at before you type a card number into a checkout page.
You clicked a link, a real Google sign-in page appeared, and after signing in you pressed a blue 'Allow' button once. This is the technique the FBI's IC3 warned about on September 1. The password never reaches the attacker, yet mail and files keep leaking out.
Mirai was a program three college students built to attack a game server. The day they dumped the source code onto the internet, the story changed — and ten years later it is still knocking on our servers' doors.
