Beware of phishing emails disguised as quote requests (SnakeKeylogger)
The AhnLab SEcurity intelligence Center (ASEC) recently confirmed that phishing emails disguised as requests for quotes are being circulated. The email body is disguised as a request from a representative of the Materials Management Division in the Purchasing Department asking the recipient to review a quote, and it prompts the
Beware of phishing emails disguised as purchase order confirmation requests (Xloader)
Recently, the AhnLab SEcurity intelligence Center (ASEC) identified a case of phishing emails that disguise themselves as requests to confirm purchase orders. The email body prompts recipients to open a malicious DOCX file disguised as a purchase order to verify the order. [Figure 1] Phishing email body When
RATatouille: Today’s Special: Impersonating Companies in Korea, Payments in Cryptocurrency
While tracking infrastructure related to ValleyRAT, numerous suspicious websites were identified that impersonated companies and brands from Korea such as Doosan Robotics and Cheonjeong. The identified sites used the actual companies’ logos, promotional videos, and descriptions to disguise themselves as official websites. The websites offered features such as invitation-code-based registration,
They told me to check my retirement savings balance, but now they’re asking for my password?
You should also be wary of emails urging you to check the status of your retirement pension fund—a topic that might interest office workers. Recently, phishing emails have been identified that use retirement pension notifications as a pretext to steal email account information. Under the pretext of verifying a secure
Beware of Phishing Emails Disguised as Purchase Orders
Recently, the AhnLab SEcurity intelligence Center (ASEC) identified instances of phishing emails being circulated that disguise themselves as requests to confirm purchase orders. The email body asks recipients to review the attached purchase order and reply with the relevant information, prompting users to download and open the attached DOCX file.
Beware of SMS messages claiming to protect your Pi Coin account—phishing sites are stealing wallets
One day, out of the blue, I received a text message claiming to protect my cryptocurrency account. However, this message concealed a sinister intent: to steal the user’s wallet information. Recently, a smishing campaign was identified that impersonated Pi Coin account protection to lure users to phishing pages and steal
Beware of Malware infection in Facebook Ads Offering Cryptocurrency Rewards
Just because it’s a familiar tactic doesn’t mean you can let your guard down. A similar attack method using cryptocurrency rewards as bait has recently been identified again. This time, a case was confirmed in which the Node.Js-based malware JSCEAL was distributed through Facebook ads impersonating a cryptocurrency exchange. The
Beware of Phishing Emails That Disguise Themselves as Project Material Purchase Requests
Recently, the AhnLab SEcurity intelligence Center (ASEC) identified a case of phishing emails that disguise themselves as project material purchase request forms. These emails impersonate employees of a specific company in Korea and trick recipients into opening a malicious XLS file attached to the email, which is disguised as a
Beware of phishing emails disguised as quote requests
Recently, the AhnLab SEcurity intelligence Center (ASEC) confirmed that phishing emails disguised as requests for project quotes are being circulated. The email body is disguised as a request to submit a quote for discussing the project budget and prompts recipients to download an attached compressed file for verification. [Figure

