구글광고를 통한 바이낸스 해킹 피싱 사례 분석 by stylegold

View this thread on: hive.blog | peakd.com | ecency.com

kr · @stylegold · Jan 29 '18 (edited)

$3.11

구글광고를 통한 바이낸스 해킹 피싱 사례 분석

안녕하세요. @stylegold 입니다. 

**현재 구글에서 바이낸스를 검색한 후, 바이낸스 사이트를 접속하면 피싱(phishing)사이트로 접속됩니다.**
실제 해킹 사례는 [@nomader 님의 글](https://steemit.com/kr/@nomader/7e72gc) 참조하세요.

--- 
### 실체부터 알려드리면, 국제화도메인을 이용한 xn--bnance-bl8b.com 의 피싱 입니다.
![](https://steemitimages.com/DQmQXp1RW4pvjmRzxZfzyb7kZLhUMYF4Rzo53v44xRyMDoL/image.png)

---
구글 광고에서 바이낸스를 검색하면 첫줄에 광고가 뜨고, 해당 링크를 누르면 bịnance.com 로 이동합니다. (정상적으로 바이낸스 주소를 접속하고 나면 해당주소로 접근 되진 않습니다.)
![](https://steemitimages.com/DQmUEQAh12EmTuXDA63XjrhfJkQyUxhY1dxrTNKHFmXDciN/image.png)



#### https://bịnance.com(접속하지 마세요)
여기서 주목할껀, 주소의 i부분에 붙은 점입니다. 뭔가 독특하죠? 원래는 인터넷주소에는 저런게 들어갈 순 없는데요. 이상해서 해당 주소를 복사해봤습니다. 


#### https://xn--bnance-bl8b.com
복사한 결과는 위의 주소입니다. 이게 실제 주소입니다. 
근데 어떻게 브라우저에 바이낸스와 비슷하게 보일수 있는지가 의문이죠?

### 우리가 주목할껀 https:// 다음에 있는 xn-- 이라는 문자입니다.
> 그건 바로 [국제화도메인 네임](https://ko.wikipedia.org/wiki/%EA%B5%AD%EC%A0%9C%ED%99%94_%EB%8F%84%EB%A9%94%EC%9D%B8_%EB%84%A4%EC%9E%84)의 ASCII 표현입니다.

즉, 한국.kr, 신한은행.kr 이런것 처럼 해당국가의 언어로 주소창에 표시되도록 하게 하는 걸 이용한 피싱이었습니다.

#### 결국 bịnance.com이라고 치면 xn--bnance-bl8b.com 로 이동하게 만드는 겁니다. (특히  알파벳에 익숙하지 않은 걸 이용한 아시아권 타겟 공격인것 같네요.)


--- 
이녀석들 정말 치밀합니다. ssl인증서 여부를 물어보니까. 인증서까지 발급받아서 사람들을 헷갈리게 하네요. 모바일에서는 정말 속기쉬운것 같습니다.

### 정상적인 사이트 
![](https://steemitimages.com/DQmaUrCwduPfMs5v7Ry3Dw8FWaBQfcBrFrhAoybXacYQ2Mi/image.png)

![](https://steemitimages.com/DQmcfks9vrBPkc3wmGJqS773jtuxQWtu5enqDAz5hrjFaaK/image.png)

![](https://steemitimages.com/DQmXRUzvunyaCnmxESv2mM9SUYN28jTPH1Uy2QNQnSQWzCT/image.png)




### 피싱 사이트
![](https://steemitimages.com/DQmdf9d39iHdSLnrgybyuTHZPv7tQzvfDqx354EG6a6rCyX/image.png)

![](https://steemitimages.com/DQmYkeY9GzwjeHLLSkXZMACiApeJVYkMwarXfnroeg2Luzc/image.png)

![](https://steemitimages.com/DQmYxb2BZjrKEG8d4q7wmBZKQaxgKz323mLpubZsztfReLQ/image.png)


---
## 결론
피싱에 국제화 도메인을 이런식으로 사용할줄은 오랜시간 웹개발자로 있던 저도 참신한(?) 방법이네요.
암호화폐의 가치가 높아질수록 해커들은 더 많은 노력을 할테니.. 우리 소중한 돈을 지키기 위해서는 그 어떤 곳도 믿지 않는게 방법인것 같네요.!!!

P.S: 해당내용은 최대한 많은 사람들에게 유표해야 피해를 보시지 않을것 같습니다. !!!

---
이후 진행사항과 추가로 안전하게 거래하는 방법은 아래의 포스트를 확인하시면 됩니다.
 [거래소 안전하게 이용하기 + 바이낸스 피싱 현재 상태](https://steemit.com/kr/@stylegold/4hzy7y)

👍 sandmans, lklab2013, leomichael, hannaju, project7, nps0132, earthturtle, leejiman, absolutefive, eversloth, rmaxhuni, wanabe, qrwerq, wipi, felixchoi, youngbin, jeonmp, madcrasher, ljmone0802, blue-water, stylegold, alicom, paskar, elecpole, wolfganghan, prototypedevelop, spertzkum, knight4sky, steemitalone, sunny1124, esccere, manduuu, skyderek, koreaminer, kws4679, eldorado2018

`author`	stylegold
`permlink`	binance-google-phishing
`category`	kr
`json_metadata`	{"tags":["kr","kr-dev","coinkorea","kr-coin","jjangjjangman"],"users":["stylegold"],"links":["https://steemit.com/kr/@nomader/7e72gc","https://b","https://xn--bnance-bl8b.com","https://ko.wikipedia.org/wiki/%EA%B5%AD%EC%A0%9C%ED%99%94_%EB%8F%84%EB%A9%94%EC%9D%B8_%EB%84%A4%EC%9E%84","https://steemit.com/kr/@stylegold/4hzy7y"],"app":"steemit/0.1","format":"markdown","image":["https://steemitimages.com/DQmQXp1RW4pvjmRzxZfzyb7kZLhUMYF4Rzo53v44xRyMDoL/image.png","https://steemitimages.com/DQmUEQAh12EmTuXDA63XjrhfJkQyUxhY1dxrTNKHFmXDciN/image.png","https://steemitimages.com/DQmaUrCwduPfMs5v7Ry3Dw8FWaBQfcBrFrhAoybXacYQ2Mi/image.png","https://steemitimages.com/DQmcfks9vrBPkc3wmGJqS773jtuxQWtu5enqDAz5hrjFaaK/image.png","https://steemitimages.com/DQmXRUzvunyaCnmxESv2mM9SUYN28jTPH1Uy2QNQnSQWzCT/image.png","https://steemitimages.com/DQmdf9d39iHdSLnrgybyuTHZPv7tQzvfDqx354EG6a6rCyX/image.png","https://steemitimages.com/DQmYkeY9GzwjeHLLSkXZMACiApeJVYkMwarXfnroeg2Luzc/image.png","https://steemitimages.com/DQmYxb2BZjrKEG8d4q7wmBZKQaxgKz323mLpubZsztfReLQ/image.png"]}
`created`	2018-01-28 05:13:51
`last_update`	2018-01-29 09:04:00
`depth`	0
`children`	25
`last_payout`	2018-02-04 05:13:51
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	2.420 HBD
`curator_payout_value`	0.694 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	2,092
`author_reputation`	16,670,352,484,704
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,915,100
`net_rshares`	378,011,883,921
`author_curate_reward`	""

properties (23)vote details (36)

voter	rshares	pct
leejiman	1,669,210,993	100%
leomichael	75,990,107,596	5%
nps0132	5,566,906,283	100%
stylegold	613,937,027	100%
sandmans	118,762,408,545	100%
lklab2013	107,483,330,786	100%
rmaxhuni	1,153,000,910	100%
project7	6,720,034,325	100%
jeonmp	614,503,785	100%
hannaju	40,524,964,563	10%
felixchoi	615,320,000	100%
elecpole	584,592,978	100%
wipi	616,039,148	100%
koreaminer	65,833,162	9%
eversloth	1,361,712,619	4%
absolutefive	1,409,015,906	100%
earthturtle	5,030,019,313	100%
knight4sky	518,853,661	100%
prototypedevelop	553,595,075	100%
wanabe	731,896,379	100%
paskar	599,137,500	100%
madcrasher	614,500,000	100%
qrwerq	619,852,088	100%
spertzkum	553,050,000	100%
alicom	602,161,847	100%
steemitalone	511,017,531	100%
eldorado2018	0	100%
kws4679	0	100%
skyderek	328,746,402	100%
youngbin	614,887,494	100%
wolfganghan	565,316,288	100%
esccere	417,840,597	100%
manduuu	344,103,924	100%
ljmone0802	614,469,132	100%
blue-water	614,467,707	100%
sunny1124	427,050,357	100%

@binance-exchange · Jan 28 '18

Buy your favorite Altcoins on Binance Exchange

[Binance Exchnage](https://www.binance.com/?ref=10117962) is listing many new altcoins. <br/> Binance has the highest marketshare today. Read [Binance Exchange Review](https://steemit.com/binance/@binance-exchange/binance-exchange-review) to know more.

properties (22)

`author`	binance-exchange
`permlink`	re-stylegold-binance-google-phishing-20180128t051357833z
`category`	kr
`json_metadata`	{"tags":["binance","altcoins","exchanges"]}
`created`	2018-01-28 05:13:57
`last_update`	2018-01-28 05:13:57
`depth`	1
`children`	0
`last_payout`	2018-02-04 05:13:57
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	252
`author_reputation`	-87,210,521,580
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,915,113
`net_rshares`	0

@binance-exchange · Jan 28 '18

Buy your favorite Altcoins on Binance Exchange

[Binance Exchnage](https://www.binance.com/?ref=10117962) is listing many new altcoins. <br/> Binance has the highest marketshare today. Read [Binance Exchange Review](https://steemit.com/binance/@binance-exchange/binance-exchange-review) to know more.

properties (22)

`author`	binance-exchange
`permlink`	re-stylegold-binance-google-phishing-20180128t051537399z
`category`	kr
`json_metadata`	{"tags":["binance","altcoins","exchanges"]}
`created`	2018-01-28 05:15:36
`last_update`	2018-01-28 05:15:36
`depth`	1
`children`	0
`last_payout`	2018-02-04 05:15:36
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	252
`author_reputation`	-87,210,521,580
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,915,396
`net_rshares`	0

@binance-exchange · Jan 28 '18

Buy your favorite Altcoins on Binance Exchange

[Binance Exchnage](https://www.binance.com/?ref=10117962) is listing many new altcoins. <br/> Binance has the highest marketshare today. Read [Binance Exchange Review](https://steemit.com/binance/@binance-exchange/binance-exchange-review) to know more.

properties (22)

`author`	binance-exchange
`permlink`	re-stylegold-binance-google-phishing-20180128t051600625z
`category`	kr
`json_metadata`	{"tags":["binance","altcoins","exchanges"]}
`created`	2018-01-28 05:16:00
`last_update`	2018-01-28 05:16:00
`depth`	1
`children`	0
`last_payout`	2018-02-04 05:16:00
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	252
`author_reputation`	-87,210,521,580
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,915,470
`net_rshares`	0

@binance-exchange · Jan 28 '18

Buy your favorite Altcoins on Binance Exchange

[Binance Exchnage](https://www.binance.com/?ref=10117962) is listing many new altcoins. <br/> Binance has the highest marketshare today. Read [Binance Exchange Review](https://steemit.com/binance/@binance-exchange/binance-exchange-review) to know more.

properties (22)

`author`	binance-exchange
`permlink`	re-stylegold-binance-google-phishing-20180128t051621568z
`category`	kr
`json_metadata`	{"tags":["binance","altcoins","exchanges"]}
`created`	2018-01-28 05:16:21
`last_update`	2018-01-28 05:16:21
`depth`	1
`children`	0
`last_payout`	2018-02-04 05:16:21
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	252
`author_reputation`	-87,210,521,580
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,915,520
`net_rshares`	0

@binance-exchange · Jan 28 '18

Buy your favorite Altcoins on Binance Exchange

[Binance Exchnage](https://www.binance.com/?ref=10117962) is listing many new altcoins. <br/> Binance has the highest marketshare today. Read [Binance Exchange Review](https://steemit.com/binance/@binance-exchange/binance-exchange-review) to know more.

properties (22)

`author`	binance-exchange
`permlink`	re-stylegold-binance-google-phishing-20180128t051710111z
`category`	kr
`json_metadata`	{"tags":["binance","altcoins","exchanges"]}
`created`	2018-01-28 05:17:09
`last_update`	2018-01-28 05:17:09
`depth`	1
`children`	0
`last_payout`	2018-02-04 05:17:09
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	252
`author_reputation`	-87,210,521,580
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,915,656
`net_rshares`	0

@binance-exchange · Jan 28 '18

Buy your favorite Altcoins on Binance Exchange

[Binance Exchnage](https://www.binance.com/?ref=10117962) is listing many new altcoins. <br/> Binance has the highest marketshare today. Read [Binance Exchange Review](https://steemit.com/binance/@binance-exchange/binance-exchange-review) to know more.

properties (22)

`author`	binance-exchange
`permlink`	re-stylegold-binance-google-phishing-20180128t051755136z
`category`	kr
`json_metadata`	{"tags":["binance","altcoins","exchanges"]}
`created`	2018-01-28 05:17:54
`last_update`	2018-01-28 05:17:54
`depth`	1
`children`	0
`last_payout`	2018-02-04 05:17:54
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	252
`author_reputation`	-87,210,521,580
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,915,780
`net_rshares`	0

@binance-exchange · Jan 28 '18

Buy your favorite Altcoins on Binance Exchange

[Binance Exchnage](https://www.binance.com/?ref=10117962) is listing many new altcoins. <br/> Binance has the highest marketshare today. Read [Binance Exchange Review](https://steemit.com/binance/@binance-exchange/binance-exchange-review) to know more.

properties (22)

`author`	binance-exchange
`permlink`	re-stylegold-binance-google-phishing-20180128t052231133z
`category`	kr
`json_metadata`	{"tags":["binance","altcoins","exchanges"]}
`created`	2018-01-28 05:22:30
`last_update`	2018-01-28 05:22:30
`depth`	1
`children`	0
`last_payout`	2018-02-04 05:22:30
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	252
`author_reputation`	-87,210,521,580
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,916,598
`net_rshares`	0

@binance-exchange · Jan 28 '18

Buy your favorite Altcoins on Binance Exchange

[Binance Exchnage](https://www.binance.com/?ref=10117962) is listing many new altcoins. <br/> Binance has the highest marketshare today. Read [Binance Exchange Review](https://steemit.com/binance/@binance-exchange/binance-exchange-review) to know more.

properties (22)

`author`	binance-exchange
`permlink`	re-stylegold-binance-google-phishing-20180128t052300981z
`category`	kr
`json_metadata`	{"tags":["binance","altcoins","exchanges"]}
`created`	2018-01-28 05:23:00
`last_update`	2018-01-28 05:23:00
`depth`	1
`children`	0
`last_payout`	2018-02-04 05:23:00
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	252
`author_reputation`	-87,210,521,580
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,916,685
`net_rshares`	0

@binance-exchange · Jan 28 '18

Buy your favorite Altcoins on Binance Exchange

[Binance Exchnage](https://www.binance.com/?ref=10117962) is listing many new altcoins. <br/> Binance has the highest marketshare today. Read [Binance Exchange Review](https://steemit.com/binance/@binance-exchange/binance-exchange-review) to know more.

properties (22)

`author`	binance-exchange
`permlink`	re-stylegold-binance-google-phishing-20180128t052724811z
`category`	kr
`json_metadata`	{"tags":["binance","altcoins","exchanges"]}
`created`	2018-01-28 05:27:24
`last_update`	2018-01-28 05:27:24
`depth`	1
`children`	0
`last_payout`	2018-02-04 05:27:24
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	252
`author_reputation`	-87,210,521,580
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,917,425
`net_rshares`	0

@browniebear · Jan 29 '18

좋은 정보 감사합니다.
요즘 바이넨스로 옮기시려는 분들 많아보이던데 위험하네요...

저도 많이 보시길 바라면서 리스팀 해가겠습니다.

properties (22)

`author`	browniebear
`permlink`	re-stylegold-binance-google-phishing-20180129t081312023z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemit/0.1"}
`created`	2018-01-29 08:13:12
`last_update`	2018-01-29 08:13:12
`depth`	1
`children`	1
`last_payout`	2018-02-05 08:13:12
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	74
`author_reputation`	469,258,995,464
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	33,226,469
`net_rshares`	0

@stylegold · Jan 29 '18

감사합니다. 해외거래소는 아무래도 익숙하지 않은 영어다보니(안그러신 분도 있겠죠.^^), 피싱에 더 취약해지는 부분이 있는것 같습니다.^^

properties (22)

`author`	stylegold
`permlink`	re-browniebear-re-stylegold-binance-google-phishing-20180129t084019811z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemit/0.1"}
`created`	2018-01-29 08:40:21
`last_update`	2018-01-29 08:40:21
`depth`	2
`children`	0
`last_payout`	2018-02-05 08:40:21
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	77
`author_reputation`	16,670,352,484,704
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	33,231,670
`net_rshares`	0

@kjwon15 · Jan 29 '18

사실 예전부터 있어왔던 기법이긴 합니다. 파이어폭스에선 설정을 변경하는 것으로(유니코드 문자열이 아닌 퓨니코드로 표시하는 기능) 이런 피싱을 피할 수 있을 것 같네요
https://www.xudongz.com/blog/2017/idn-phishing/

👍 stylegold, madcrasher

`author`	kjwon15
`permlink`	re-stylegold-binance-google-phishing-20180129t040042315z
`category`	kr
`json_metadata`	{"tags":["kr"],"links":["https://www.xudongz.com/blog/2017/idn-phishing/"],"app":"steemit/0.1"}
`created`	2018-01-29 04:00:42
`last_update`	2018-01-29 04:00:42
`depth`	1
`children`	1
`last_payout`	2018-02-05 04:00:42
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	140
`author_reputation`	338,387,923,176
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	33,179,193
`net_rshares`	2,053,734,378
`author_curate_reward`	""

properties (23)vote details (2)

voter	weight	wgt%	rshares	pct	time
stylegold	0 B		1,451,524,378	100%
madcrasher	0 B		602,210,000	100%

@stylegold · Jan 29 '18

아 그렇군요. 좋은 자료 감사합니다.!!!

properties (22)

`author`	stylegold
`permlink`	re-kjwon15-re-stylegold-binance-google-phishing-20180129t041210966z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemit/0.1"}
`created`	2018-01-29 04:12:12
`last_update`	2018-01-29 04:12:12
`depth`	2
`children`	0
`last_payout`	2018-02-05 04:12:12
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	23
`author_reputation`	16,670,352,484,704
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	33,181,368
`net_rshares`	0

@nps0132 · Jan 28 '18 (edited)

진짜 마음먹고 조직적으로 하는 것 같네요 ... 사무실에 몇 명이 근무하면서 피해자가 정보 입력하면 곧바로 빛과 같은 속도로 로그인해서 탈취하는듯 보입니다 리스팀까지 하겠습니다 !

properties (22)

`author`	nps0132
`permlink`	re-stylegold-binance-google-phishing-20180128t103234239z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemkr/0.1"}
`created`	2018-01-28 10:32:33
`last_update`	2018-01-28 10:33:51
`depth`	1
`children`	2
`last_payout`	2018-02-04 10:32:33
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	100
`author_reputation`	3,503,075,766,228
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,969,879
`net_rshares`	0

@stylegold · Jan 28 '18

저도 이분야에서 거의 20년이 다되가는 시간동안 여러 피싱 해킹을 많이 봤지만...
이런케이스는 처음봅니다.  "이젠 모든 것이 공개되었다"라는 생각으로 사이트주소와 인증서 정보등을 꼼꼼히 보셔야 피해를 보시지 않으실것 같습니다.

properties (22)

`author`	stylegold
`permlink`	re-nps0132-re-stylegold-binance-google-phishing-20180128t122537325z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemit/0.1"}
`created`	2018-01-28 12:25:39
`last_update`	2018-01-28 12:25:39
`depth`	2
`children`	1
`last_payout`	2018-02-04 12:25:39
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	128
`author_reputation`	16,670,352,484,704
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,992,003
`net_rshares`	0

@nps0132 · Jan 28 '18

그러게요, 대부분 피싱 사이트들은 보안인증서까지는 신경을 안써서 .. 브라우저 자체 필터에 걸리기도 하는데 이렇게까지 공을 들일줄이야 ;;

properties (22)

`author`	nps0132
`permlink`	re-stylegold-re-nps0132-re-stylegold-binance-google-phishing-20180128t125232446z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemkr/0.1"}
`created`	2018-01-28 12:52:33
`last_update`	2018-01-28 12:52:33
`depth`	3
`children`	0
`last_payout`	2018-02-04 12:52:33
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	77
`author_reputation`	3,503,075,766,228
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,997,913
`net_rshares`	0

@sscnp · Jan 29 '18

제 지인이 저것에 당했더군요. 그분이 나이가 조금 있으신 분이신데, 아무 의심없이 구글에서 바이낸스를 검색했다고 하시더군요. 다행이 큰 금액이 아니었다지만...모두들 조심하시길 바랍니다.

properties (22)

`author`	sscnp
`permlink`	re-stylegold-binance-google-phishing-20180129t151859737z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemit/0.1"}
`created`	2018-01-29 15:19:00
`last_update`	2018-01-29 15:19:00
`depth`	1
`children`	3
`last_payout`	2018-02-05 15:19:00
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	104
`author_reputation`	462,733,303
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	33,313,221
`net_rshares`	0

@stylegold · Jan 30 '18

아이고 걱정이 많겠군요..
저도 구글 맹신하는게 좀 있긴한데 구글사람보단 매커니즘을 통한 처리 위주로해서 프로토콜을 잘지킨(?) 피싱이 광고되는 홀이 좀 있는것 같습니다.그냥 다 의심해야 될듯 합니다.

properties (22)

`author`	stylegold
`permlink`	re-sscnp-re-stylegold-binance-google-phishing-20180130t001425213z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemit/0.1"}
`created`	2018-01-30 00:14:27
`last_update`	2018-01-30 00:14:27
`depth`	2
`children`	2
`last_payout`	2018-02-06 00:14:27
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	112
`author_reputation`	16,670,352,484,704
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	33,413,967
`net_rshares`	0

@nps0132 · Jan 30 '18

구글 애드센스나 유튜브 정책이나 그런것은 나날이 까다로워지고 있는데 정작 검색 시스템은 ...

properties (22)

`author`	nps0132
`permlink`	re-stylegold-re-sscnp-re-stylegold-binance-google-phishing-20180130t153116134z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemkr/0.1"}
`created`	2018-01-30 15:31:15
`last_update`	2018-01-30 15:31:15
`depth`	3
`children`	1
`last_payout`	2018-02-06 15:31:15
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	52
`author_reputation`	3,503,075,766,228
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	33,597,480
`net_rshares`	0

1 reply

@steemitalone · Jan 28 '18

정확한 분석글 감사드립니다.팔로/리스팀/보팅합니다.

properties (22)

`author`	steemitalone
`permlink`	re-stylegold-binance-google-phishing-20180128t233449174z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemit/0.1"}
`created`	2018-01-28 23:34:51
`last_update`	2018-01-28 23:34:51
`depth`	1
`children`	0
`last_payout`	2018-02-04 23:34:51
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	28
`author_reputation`	458,138,249,871
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	33,129,419
`net_rshares`	0

@steemitalone · Jan 28 '18

금방 보니까 binance로 글이 다리는데. 저게 뭐죠?  조심해야 할듯

properties (22)

`author`	steemitalone
`permlink`	re-stylegold-binance-google-phishing-20180128t233624202z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemit/0.1"}
`created`	2018-01-28 23:36:27
`last_update`	2018-01-28 23:36:27
`depth`	1
`children`	1
`last_payout`	2018-02-04 23:36:27
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	40
`author_reputation`	458,138,249,871
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	33,129,692
`net_rshares`	0

@stylegold · Jan 29 '18

글이 바뀌는것 말씀이시죠?
원래 웹주소는 ASCII문자만 쓸수있는데
국제화도메인(본문 링크참조)이라는게 생겨서 nx--라는걸 앞에 붙이면 지정문자로 표시되도록 하는겁니다.
변환되는걸 자세히 보시면 i밑에 점이 있습니다

properties (22)

`author`	stylegold
`permlink`	re-steemitalone-re-stylegold-binance-google-phishing-20180129t005916934z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemit/0.1"}
`created`	2018-01-29 00:59:18
`last_update`	2018-01-29 00:59:18
`depth`	2
`children`	0
`last_payout`	2018-02-05 00:59:18
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	121
`author_reputation`	16,670,352,484,704
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	33,145,029
`net_rshares`	0

@wanabe · Jan 28 '18

ㅎㄷㄷ 하네요. 그래서 저도 얼마전에 스팀잇 비번 바꿨습니다. 주기적으로 바꿔줘야겠어요

properties (22)

`author`	wanabe
`permlink`	re-stylegold-binance-google-phishing-20180128t114854496z
`category`	kr
`json_metadata`	{"tags":["kr"],"app":"steemit/0.1"}
`created`	2018-01-28 11:48:57
`last_update`	2018-01-28 11:48:57
`depth`	1
`children`	1
`last_payout`	2018-02-04 11:48:57
`cashout_time`	1969-12-31 23:59:59
`total_payout_value`	0.000 HBD
`curator_payout_value`	0.000 HBD
`pending_payout_value`	0.000 HBD
`promoted`	0.000 HBD
`body_length`	48
`author_reputation`	10,273,446,318,402
`root_title`	"구글광고를 통한 바이낸스 해킹 피싱 사례 분석"
`beneficiaries`	`[]`
`max_accepted_payout`	1,000,000.000 HBD
`percent_hbd`	10,000
`post_id`	32,984,429
`net_rshares`	0

@stylegold · Jan 28 '18

그러니까요. 우리가 편하다면 그들도 편할겁니다. 자주자주 비번 바꾸는게 방법인 듯 합니다.

properties (22)