Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The $1.5B Bybit Hack & How OSINT Led to Its Attribution

netlas.io | blog | #cloud | #supply-chain | #cryptocurrency | #osint | #attribution | #bybit | #lazarus

Summary

Reconstructs the record-breaking $1.5B Bybit hack: how Lazarus social-engineered signers, hijacked an AWS token and injected code in Safe{Wallet}, and how OSINT aided attribution.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Anonymously Enumerating Azure Services
Karl Fosaaen releases a script for anonymous Azure service enumeration, brute forcing DNS across azurewebsites.net, cloudapp.net, and blob.core.windows.net to map a target's public Azure footprint.
blog · netspi.com
2013 Cyber Threat Forecast Released
Reviews the Georgia Tech 2013 cyber threat forecast: cloud botnets, mobile browser and wallet flaws, malware obfuscation, counterfeit hardware in the supply chain, and healthcare data risks.
research · wiz.io
TraderTraitor: Deep Dive
Wiz Threat Research profiles TraderTraitor, the North Korean Lazarus subgroup behind the $1.5B Bybit hack and DMM's $308M heist — tracing its shift from phishing to supply-chain and cloud attacks.
blog · netlas.io
What is Threat Intelligence
Primer on threat intelligence: definition and value, elements of a mature program, the data lifecycle and platform/AI-driven tooling, with market-size and adoption statistics.
blog · netlas.io
Whois History: How to Check the Domain Owner History
Guide to checking historical WHOIS records: what domain owner history reveals, red flags to review before buying a used domain, and archival tools for retrieving registration data.
blog · netlas.io
Top WHOIS & RDAP Tools for Fast IP Address Lookup
Survey of IP WHOIS and RDAP lookup tooling, from command-line utilities to web platforms, covering registry data, privacy-protected records, and how to investigate IP ownership fast.
back