Hong Kong Authorities Unite to Form Crypto-Centric Taskforce

Akira ransomware, responsible for stealing $42 million from over 250 organizations across North America, Europe and Australia in just a year, is now targeting businesses in Singapore. In response, Singaporean authorities have issued a joint advisory warning local businesses about the increasing threat posed by a variant of this ransomware.Photo by Mike Enerio on UnsplashAlert follows complaintsThe alert follows multiple complaints from victims, prompting agencies like the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF) and the Personal Data Protection Commission (PDPC) to take action. These agencies emphasize the urgency of recognizing and combating this threat. How Akira operatesAkira affiliates employ various techniques to infiltrate a victim's network. These include exploiting known vulernabilities. For example, that could mean the targeting of services like Cisco virtual private networks (VPNs) that have been configured without multi-factor authentication (MFA). Another approach that the ransomware incorporates is attacking external-facing services such as the Remote Desktop Protocol (RDP) via brute force. Social engineering is another tool within its repertoire. This involves tricking victims into downloading malicious software or entering credentials on phishing websites. There is a marketplace for compromised credentials in the dark web. Akira also relies on such data, acquiring it from access brokers who sell network access.  Once inside a network, Akira affiliates often create new domain accounts to maintain persistent access, even after reboots. They use numerous tools to steal user credentials, escalate privileges and spread throughout the network. Detection and prevention measuresThe Singaporean advisory outlines several strategies for detecting, deterring and neutralizing Akira attacks. Authorities strongly advise against paying ransoms, on the basis that doing so does not guarantee data recovery or prevent future attacks. Authorities also warn that paying ransoms can encourage further attacks. The FBI has noted that Akira operators do not contact victims. Instead, they expect victims to initiate contact. Payment in BitcoinThe advisory outlines how Bitcoin is implicated in the ransomware scam. It states:”Ransom payments are requested in Bitcoin, which are directed to cryptocurrency wallet addresses specified by the affiliates. The TOR site (.onion) where victims contact the affiliates, contains stolen information and a list of the affected organisations.” It’s not the first time that Singaporean authorities have issued warnings that have implicated Bitcoin and crypto. In January, the CSA and SPF, in a joint advisory, suggested that people should use hardware wallets in an effort to guard against crypto-related malware and phishing attacks. A number of weeks prior to that, Singapore’s former Prime Minister, Lee Hsien Loong, took to Facebook to issue a warning with regard to a crypto scam that involved the use of deceptive content generated using artificial intelligence (AI). Mitigation techniquesBusinesses are being urged by the authorities to adopt best practices to mitigate the Akira ransomware threat. They suggest the implementation of a recovery plan alongside the use of multi-factor authentication (MFA) in order to secure data and the access to that data.  They also suggest filtering network traffic as it helps in identifying and blocking malicious activities. Meanwhile, disabling unused ports and hyperlinks curbs the risk further as it reduces the attack surface. Lastly, the authorities suggested the use of system-wide encryption to protect data even if it is accessed by unauthorized entities.

China’s former central bank governor has warned that speculation in stablecoins could threaten financial stability, Bloomberg reported, citing a post from the Beijing-based think tank CF40 Research. His remarks run counter to calls from some economists and industry figures for a yuan-backed stablecoin as the U.S. advances its digital-asset policy agenda. Zhou Xiaochuan, who led the People’s Bank of China (PBOC) from 2002 to 2018, delivered the comments at a closed-door meeting in mid-July. He argued that China’s payment rails—spanning third-party platforms, the central bank digital currency (CBDC), digital wallets, and clearing infrastructure—are already highly efficient, leaving little scope for stablecoins to deliver meaningful cost savings. He also rejected the premise that conventional cross-border payments come at steep costs. Zhou identified price manipulation driven by speculative trading as the chief risk to financial and asset markets, adding that current safeguards in the U.S., Hong Kong, and Singapore remain inadequate.Photo by Mitchell Luo on UnsplashOnshore controls push yuan stablecoins offshoreAny debate over a yuan-linked token must also contend with China’s currency structure. The onshore yuan (CNY) is subject to strict capital controls and limited cross-border convertibility, while the offshore yuan (CNH) trades more freely. As a result, any prospective yuan stablecoin would likely reference the CNH; pegging directly to the CNY would conflict with Beijing’s capital rules. An earlier Reuters report has indicated that Beijing is weighing whether to authorize a yuan-pegged stablecoin to promote international use of the currency. Analysts caution that such a token would almost certainly be confined to offshore markets, even if regulators proceed. U.S. sets federal guardrails for stablecoinsMeanwhile, policy moves in the U.S. are gathering pace. In July, President Donald Trump signed the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act into law, creating a federal framework for stablecoins. A White House fact sheet says the law requires issuers to maintain 100% reserves in liquid assets such as U.S. dollars or short-term Treasuries and to publish monthly disclosures on reserve composition. The administration has argued that dollar-backed stablecoins could bolster demand for Treasuries and reinforce the dollar’s reserve-currency role. Hong Kong has emerged as comparatively receptive to digital assets. The special administrative region’s Stablecoins Ordinance entered into force on Aug. 1, establishing a licensing regime to oversee Hong Kong dollar–backed stablecoins. Earlier this month, CMB International Securities, a subsidiary of China Merchants Bank, became the first Chinese bank-affiliated institution to offer trading in Bitcoin, Ethereum, and Tether (USDT). Industry voices are also pressing the case for stablecoins. At the WebX conference in Tokyo on Aug. 25, Binance co-founder Changpeng Zhao (CZ) argued that CBDCs are becoming obsolete, while stablecoins—typically backed by real assets—enable wider transactions and are gaining market traction. He said CBDCs remain rarely implemented due to limited demand and suggested China appears more open to stablecoins after years of tighter oversight, pointing to Hong Kong’s efforts to build an ecosystem. Potential PBOC stimulus may lift cryptoChina remains a consequential force in global crypto markets. A recent report suggested that potential PBOC stimulus could fuel an altcoin rally. With China accounting for 19.5% of global GDP, shifts in its monetary stance are seen as important drivers of worldwide liquidity. Following July data showing a 0.1% month-on-month decline in retail sales, a 0.4% rise in industrial production, and an uptick in unemployment to 5.2%, analysts expect measures to support growth. Any additional liquidity could flow into risk assets, including cryptocurrencies, potentially pushing digital tokens toward new highs. 

PantherTrade applies for Hong Kong trading licensePantherTrade (Hong Kong) Limited, a subsidiary of Futu Holdings, had been reported last month as being in the process of preparing a licensing application to trade in Hong Kong. According to recent reports in local media, it appears that the company has now submitted such an application to the Hong Kong authorities.Photo by Simon Zhu on UnsplashKey appointmentsThis move aligns with the broader trend, as a total of six companies have submitted applications to the Securities and Futures Commission (SFC) of Hong Kong. It’s understood that PantherTrade submitted its application on Nov. 15. The move follows a similar application made by Hong Kong-based Meex Holdings on Oct. 12.Key strategic appointments within PantherTrade underscore the company’s vision for its virtual asset trading venture. Chen Zhihu, former Investment Director at Huobi Asset Management (Hong Kong), has joined as a director. The corporate establishment of PantherTrade in March also saw the addition of Hong Yimin, while the initial director, Fang Xingzhi, has a background with Jingdong Securities Co., Ltd.Interest from mainland ChinaRegulatory attention has intensified on PantherTrade and another applicant, Yax, affiliated with Tiger Brokers employees, according to reports from Nikkei Asia. Yax is another platform with mainland China ties, which was reported in October as intending to apply for a license to trade within Hong Kong.It’s understood that the local entity of Chinese enterprise blockchain firm OK Group, OKX Hong Kong FinTech Company Limited, submitted its own trading license application on Nov. 16.Licensing uptakeHong Kong’s regulatory environment has undergone a significant shift, with the city granting the first licenses to cryptocurrency companies under a new framework in August of the current year. The regulatory changes, effective in 2023, allow retail investors to trade crypto on exchanges licensed by the SFC. Importantly, the city has removed the restriction on crypto trading, no longer confining it to professionals with a minimum of $1 million in bankable assets.This regulatory evolution is part of Hong Kong’s broader strategy to position itself as an international hub for cryptocurrencies. The city aims to attract fresh capital and talent, especially in the aftermath of the pandemic. The licensing race among virtual asset trading platforms signifies a pivotal phase in Hong Kong’s vision to lead the digital asset industry in Asia.There had been some short-lived concern that momentum was moving against Hong Kong’s efforts to further the Web3 sector when it emerged recently that crypto derivatives platform Bitget was exiting the Hong Kong market and abandoning efforts to secure a trading license. That concern dissipated when Bitget’s motivations became clearer, following BGX, a related Bitget entity, making an investment into BC Technology Group, the owner of the already Hong Kong-licensed OSL exchange.PantherTrade’s application for a virtual asset exchange license in Hong Kong adds momentum to the city’s evolving crypto landscape. The strategic hires and the broader industry trend highlight the growing significance of Hong Kong in the global digital asset arena. As the regulatory framework becomes more conducive, the city aims to foster innovation and become a key player in the international crypto space.