Cases Studies and Countermeasures of Credential Stuffing Attacks Using Leaked Accounts
Abstract Credential stuffing attacks using leaked passwords have been rapidly increasing. These attacks that began with a simple technique has evolved—through advances in automation tools and the vulnerability of credential reuse—into large-scale account breaches and financial damages. Previously, the threats could be identified simply by detecting the large number of
January 2025 Security Issues in Korean & Global Financial Sector
This report comprehensively covers actual cyber threats and security issues that have occurred in the financial industry in South Korea and abroad. This includes the analysis of malware and phishing cases distributed to the financial sector, the Top 10 malware targeting the financial sector, and statistics on the industries of
Ransom & Dark Web Issues Week 1, January 2025
ASEC Blog publishes Ransom & Dark Web Issues Week 1, January 2025 Customer information data from a South Korean children’s bookstore has been leaked on BreachForums. RDP access credentials for a South Korean internet-only bank are being sold on BreachForums. Source code from South Korea’s
Ransom & Dark Web Issues Week 2, November 2024
ASEC Blog publishes Ransom & Dark Web Issues Week 2, November 2024 Massive Data Breach Exploiting MOVEit Security Vulnerability: Employee Information from Amazon, McDonald’s, HSBC, and More Leaked South Korean Energy Company: Data Breach Due to RA World Ransomware Attack New Ransomware Gang Kairos: Six New
Ransom & Dark Web Issues Week 1, November 2024
ASEC Blog publishes Ransom & Dark Web Issues Week 1, November 2024 Pro-Russian hacktivist NoName05716 carried out DDoS attacks on several South Korean institutions User account information of Saudi Arabian government agencies leaked on BreachForums New Dedicated Leak Sites of the ransomware gang HellDown
October 2024 Security Issues in Korean & Global Financial Sector
This report comprehensively covers real-world cyber threats and security issues that have occurred in the financial industry both in Korea and abroad. This article includes an analysis of malware and phishing cases distributed to the financial industry. It also provides a list of the top 10 malware strains targeting the
Ransom & Dark Web Issues Week 2, September 2024
ASEC Blog publishes Ransom & Dark Web Issues Week 2, September 2024 Pro-Russian Hacktivists: Conducting DDoS Attacks Targeting Taiwanese Government Agencies Customer Data Breach at South Korea’s Largest Shopping Mall: The Role and Threats of E-Commerce Platforms [Ransom] Medusa Ransomware’s New Victim: U.S. Water Service Provider
Ransom & Dark Web Issues Week 2, July 2024
ASEC Notes publishes Ransom & Dark Web Issues Week 2, July 2024
Threat Trend Report on Deep Web &Dark Web – Ransomware Groups & Cybercrime Forums and Markets in June 2024
Note This trend report on the deep web and dark web of June 2024 is sectioned into Ransomware, Forums & Black Markets, and Threat Actor. We would like to state beforehand that some of the content has yet to be confirmed to be true. Major Issues 1.
Ransom & Dark Web Issues Week 3, Jun 2024
ASEC Notes publishes Ransom & Dark Web Issues Week 3, Jun 2024
