본 글은 2024년 5월 3일 발생한 Whale Wallet 해킹 사건을 중심으로, 사건 개요, 자산 유출 구조, 공격 방식, 세탁 경로, 그리고 보안 시사점을 종합적으로 분석한 기술 칼럼입니다.

By: Safa’at Dinata Putra — Versatile IT Technician

A DNS Zone Transfer (AXFR) is a mechanism used to replicate DNS databases across a set of DNS servers. It’s the process where a secondary…

How I Turned a File Read Into Full Server Control in 37 Minutes

The New Arms Race in the Digital Shadows

In the era of AI-driven social media, what you post isn’t just yours anymore, it’s data fuel.

APIs are a favorite target for automated scripts, scrapers, and bots. Whether it’s someone hammering your endpoints with curl, or a bot…

The digital landscape is rapidly expanding and evolving, presenting unprecedented challenges for traditional vulnerability assessment. As…

DevSecOps in Action: From Pre-Commit to Post-Deploy

Modern network infrastructures, characterized by their distributed nature, dynamic cloud deployments, and sophisticated threat landscape…

In an era defined by escalating cyber threats, a robust vulnerability assessment stands as an indispensable pillar of digital defense. This…

In today's interconnected digital landscape, organizations face an unrelenting barrage of sophisticated cyber threats, making the proactive…

Sherlock Scenario

When Development Tools Become Digital Trojan Horses

안녕! こんにちは! 你好! Привет!Hola!

Microsoft released an emergency patch after its August security update broke the system reset and recovery tools on Windows 10 and 11, forcing an out-of-band fix.

A new "DOM-based extension clickjacking" vulnerability discovered at DEF CON allows attackers to steal passwords and 2FA codes from popular password managers.

A new report reveals that over 370,000 conversations with the xAI chatbot Grok have been exposed to the public via search engines, without user warning.

A new report reveals how AI bots are impersonating job candidates in video interviews, with some linked to North Korean networks seeking access to corporate systems.

A new report from Kaspersky reveals GodRAT, a remote access trojan targeting financial firms via Skype. The malware is an evolution of the Winnti-linked AwesomePuppet.