Incheon Joins Hands with The Sandbox to Promote City in the Metaverse

Police Crack Down on JPEX Continues with Millions RecoveredHong Kong authorities are intensifying their efforts to deliver justice to victims of the JPEX cryptocurrency exchange fraud, a scandal that has left thousands of investors in distress.According to recent reports in the South China Morning Post (SCMP) on Wednesday and Friday, more arrests have been made, with the recovery of more assets. The pursuit of those responsible for orchestrating this massive scam is in full swing.Photo by RJ Joquico on UnsplashLargest digital asset fraud in Hong Kong historyThe Dubai-headquartered JPEX crypto exchange, an unauthorized platform, stands accused of defrauding more than 2,400 individuals of nearly $200 million, marking it as the largest digital asset fraud case in Hong Kong’s history. During a recent press conference, the Secretary for Security of Hong Kong, Chris Tang Ping-keung, expressed his commitment to ensuring justice prevails for the victims.Tang revealed that among the assets seized by the police were more than HK$8 million ($1 million) in cash and assets valued at HK$77 million ($9.8 million), including real estate and digital currency. These significant seizures mark a pivotal step in the ongoing investigation. Furthermore, the police have apprehended 12 individuals connected to the JPEX scheme, including three employees of JPEX Technical Support Company and two YouTubers.The first signs of trouble emerged when JPEX users faced difficulties in withdrawing their funds on September 15. In response to mounting complaints and regulatory warnings, JPEX infamously raised its withdrawal fees to 999 Tether in a desperate attempt to discourage users from withdrawing funds. This maneuver raised suspicion and intensified the scrutiny on the exchange.Ongoing investigationLocal authorities in Hong Kong have been inundated with 2,369 complaints from victims who lost their investments in the unregulated exchange. The estimated total monetary loss is HK$1.4 billion ($178 million). While the police continue towards bringing those responsible to justice, they are also collaborating closely with regulators to implement measures aimed at preventing the emergence of such fraudulent schemes in the future.Recent developments have seen the net tighten around the individuals connected to JPEX. Additional arrests have been made in Hong Kong and Macao. Hong Kong police apprehended two individuals who were caught attempting to destroy documents with paper shredders and bleach. In addition, they seized almost HK$9 million ($1.15 million) in cash and gold from three apartments.Meanwhile, Macao authorities apprehended two more individuals and confiscated over HK$14 million ($1.8 million) in cash and valuables. The suspects had made multiple visits to Macau this month, which may be linked to their illicit activities.Hong Kong’s Securities and Futures Commission (SFC) had issued a prior warning, stating that JPEX operated without the necessary licenses and had maliciously frozen users’ funds. Last week, the SFC took a step further, blocking access to web and mobile versions of the platform with JPEX responding by encouraging users to sidestep the measure through the use of VPN.

Indian Crypto Platform Mudrex Expands Operations in ItalyMudrex, the Indian cryptocurrency investment platform, has achieved a new milestone by successfully registering to operate in Italy.News of Mudrex’s move into the Italian market emerged via a press release published on Tuesday, as well as through an interview given recently by CEO and Co-Founder Edul Patel to CoinDesk. The expansion into Italy marks a rare international move for Indian crypto entities, which have faced challenges due to stringent taxation policies and the global crypto market’s fluctuations.Photo by Mathew Schwartz on UnsplashGlobal expansion planPatel unveiled Mudrex’s ambitious plan for global expansion, with half of the team actively working on international initiatives. The firm’s journey into the Italian market involved gaining approval for registration with Italy’s Organismo Agenti e Mediatori (OAM), a crucial step for crypto firms operating in the country. This registration, granted on September 1, was a strategic move that the company had been carefully planning. Patel explained:“We just wanted some time to pass after the approval before we made the news public.”Coin Sets and thematic indexesDespite having only one million registered users, Mudrex stands out as one of India’s largest crypto platforms. It offers a unique investment approach, focusing on index investing through Coin Sets, an innovative alternative to speculative trading. These Coin Sets encompass various categories, including small, mid, and large-cap assets, as well as Bitcoin (BTC) and Ethereum (ETH). Additionally, Mudrex provides thematic indexes that cover layer one and layer two solutions, NFTs, metaverse projects, and Dow trackers.“While India is our home and where we initially grew, our international customers have told us that investment products in their regions lack diversity,” Patel noted. “We believe that our product is unique and offers distinct advantages.”Mudrex was established in 2018 in Bengaluru while also establishing an office in San Francisco. Alongside Patel, its other Founders included Alankar Saxena as CTO, Rohit Goyal in the role of VP of DeFi, and Prince Arora as VP of Engineering.In 2021 it raised $2.5 million in funding with a view towards launching crypto mutual funds and ETFs. It followed that up in 2022 when it raised $6.5 million in a pre-series A funding round, supported by Y-Combinator, Arkham Ventures, and Tribe Capital.The firm participated in what has become a crypto platform trend over recent months by incorporating an AI chatbot into its platform in June to assist platform users when it comes to learning about crypto.Lithuanian trading licenseMudrex’s expansion into Italy was facilitated by the company’s prior fulfillment of EU operating requirements. The company had obtained a license in Lithuania less than a year ago, enabling it to navigate the EU regulatory landscape efficiently. During the six months of pursuing registration in Italy, Mudrex’s presence in the EU grew substantially, with user numbers increasing from approximately 5,000 to 17,000.With its foothold established in Italy, Mudrex now seeks to make its investment products accessible through various registered entities, including banking partner apps. Patel confirmed ongoing discussions with potential partners, further signaling the company’s commitment to expanding its global footprint.

Akira ransomware, responsible for stealing $42 million from over 250 organizations across North America, Europe and Australia in just a year, is now targeting businesses in Singapore. In response, Singaporean authorities have issued a joint advisory warning local businesses about the increasing threat posed by a variant of this ransomware.Photo by Mike Enerio on UnsplashAlert follows complaintsThe alert follows multiple complaints from victims, prompting agencies like the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF) and the Personal Data Protection Commission (PDPC) to take action. These agencies emphasize the urgency of recognizing and combating this threat. How Akira operatesAkira affiliates employ various techniques to infiltrate a victim's network. These include exploiting known vulernabilities. For example, that could mean the targeting of services like Cisco virtual private networks (VPNs) that have been configured without multi-factor authentication (MFA). Another approach that the ransomware incorporates is attacking external-facing services such as the Remote Desktop Protocol (RDP) via brute force. Social engineering is another tool within its repertoire. This involves tricking victims into downloading malicious software or entering credentials on phishing websites. There is a marketplace for compromised credentials in the dark web. Akira also relies on such data, acquiring it from access brokers who sell network access.  Once inside a network, Akira affiliates often create new domain accounts to maintain persistent access, even after reboots. They use numerous tools to steal user credentials, escalate privileges and spread throughout the network. Detection and prevention measuresThe Singaporean advisory outlines several strategies for detecting, deterring and neutralizing Akira attacks. Authorities strongly advise against paying ransoms, on the basis that doing so does not guarantee data recovery or prevent future attacks. Authorities also warn that paying ransoms can encourage further attacks. The FBI has noted that Akira operators do not contact victims. Instead, they expect victims to initiate contact. Payment in BitcoinThe advisory outlines how Bitcoin is implicated in the ransomware scam. It states:”Ransom payments are requested in Bitcoin, which are directed to cryptocurrency wallet addresses specified by the affiliates. The TOR site (.onion) where victims contact the affiliates, contains stolen information and a list of the affected organisations.” It’s not the first time that Singaporean authorities have issued warnings that have implicated Bitcoin and crypto. In January, the CSA and SPF, in a joint advisory, suggested that people should use hardware wallets in an effort to guard against crypto-related malware and phishing attacks. A number of weeks prior to that, Singapore’s former Prime Minister, Lee Hsien Loong, took to Facebook to issue a warning with regard to a crypto scam that involved the use of deceptive content generated using artificial intelligence (AI). Mitigation techniquesBusinesses are being urged by the authorities to adopt best practices to mitigate the Akira ransomware threat. They suggest the implementation of a recovery plan alongside the use of multi-factor authentication (MFA) in order to secure data and the access to that data.  They also suggest filtering network traffic as it helps in identifying and blocking malicious activities. Meanwhile, disabling unused ports and hyperlinks curbs the risk further as it reduces the attack surface. Lastly, the authorities suggested the use of system-wide encryption to protect data even if it is accessed by unauthorized entities.