Attack types
자격증명 탈취 (Credential harvesting)
Definition
Collecting usernames/passwords, typically via fake login pages.
For executives (CEO·CISO)
If staff reuse passwords across work and personal sites, a leak anywhere becomes the key to your accounts. Commonly missed: password policy is not enough — mandate MFA org-wide and monitor dark-web credential dumps to pre-emptively lock already-exposed accounts.