Top

Kaspersky Says Crypto Phishing on the Rise in the Philippines

Policy & Regulation·July 13, 2023, 12:55 AM

The Philippines witnessed a significant increase in detected cryptocurrency-related attacks last year while Vietnam recorded the highest level in Southeast Asia, according to cybersecurity firm Kaspersky.

Photo by Markus Spiske on Unsplash

 

Ease of crypto access

Vietnam topped the list with over 64,000 detections. Meanwhile, the Philippines recorded 24,737 cases of crypto-phishing attacks in 2022, up from 9,164 cases in 2021, making it the second-highest number in Southeast Asia.

Adrian Hia, Managing Director for Asia Pacific at Kaspersky, attributed the rise to the ease of accessing cryptocurrency in the Philippines. He explained that as users increasingly turn to mobile devices, they are inadvertently exposing themselves to potential breaches, as malware can be installed through various touch points.

Research published by Malaysian crypto data aggregator, CoinGecko, earlier this month, also points to the Philippines as having the second highest level of interest in crypto in Southeast Asia, after Singapore.

 

Targeting popular platforms

Cybercriminals commonly target accounts of popular online gaming platforms and crypto wallets using advanced stealers or “stalkerware” that allow them to spy on individuals through their mobile devices, Kaspersky stated. The firm’s monitoring data revealed that malware is spreading through legitimate channels such as official marketplaces and advertisements in popular apps.

Across Southeast Asia, the total number of crypto-phishing detections decreased to 147,649 in 2022 from 164,330 in 2021, according to Kaspersky. However, only Singapore (down 74%), Thailand (down 51%), and Vietnam (down 15%) observed declines in detections. Besides the Philippines, crypto-related attacks also increased in Indonesia (from 19,584 in 2021 to 24,642 in 2022) and Malaysia (from 16,071 to 16,767).

Kaspersky discovered an average of 400,003 new malicious files per day in 2022, representing an increase of 20,000 files per day compared to the previous year. Hia emphasized that scammers are relentless in their efforts to steal cryptocurrency due to its increasing popularity and adoption, particularly in Southeast Asia. He urged cryptocurrency adopters in the region to stay informed about the latest tricks used by crypto phishers to protect their digital assets.

 

Email-based attacks

Roman Dedenok, a spam analysis expert at Kaspersky, revealed that crypto phishers often employ email-based attacks to target crypto users. He explained that scammers entice victims with the prospect of participating in a cryptocurrency giveaway, offering popular digital assets such as Bitcoin, Ethereum, Litecoin, Tron, or Ripple.

The scammers provide a three-point guide to claim the free cryptocurrency along with a link to the “promotion” website. Clicking on the link leads users to a phishing site where they are prompted to specify the wallet to which they want the funds transferred.

In response to the growing cybersecurity concerns, Kaspersky is engaging in discussions with government institutions worldwide. In the Philippines, while the central bank does not directly regulate cryptocurrency, it has established guidelines for virtual asset service providers. The Chairman of the Securities and Exchange Commission (SEC) in the Philippines, Emilio Aquino, recently delayed publication of a regulatory framework for crypto, on the basis of having “to make sure people don’t get burned.”

Entities involved with virtual assets are required to obtain a license from the Bangko Sentral ng Pilipinas, the central bank of the Philippines, to comply with regulations.

More to Read
View All
Policy & Regulation·

Apr 10, 2023

Korean Travel Rule Solution Provider Partners with ACAMS to Enhance AML Measures

Korean Travel Rule Solution Provider Partners with ACAMS to Enhance AML MeasuresConnect Digital Exchanges (Code), the Korean Travel Rule solution provider, announced today that it has forged a partnership with the Association of Certified Anti-Money Laundering Specialists (ACAMS), the largest international membership organization of its kind.©Pexels/Savvas StavrinosTravel RuleThe Travel Rule, issued by the Financial Action Task Force (FATF) to prevent money laundering and terrorist financing, requires virtual asset service providers to screen the information of the senders and recipients of crypto transactions.Code’s collaboration with ACAMSCode will collaborate with ACAMS to develop more effective anti-money laundering (AML) measures in Korea by producing anti-financial crime experts, and enhancing Travel Rule regulations. ACAMS offers internationally recognized training programs, with more than 40,000 certified AML specialists in over 175 countries and regions.More about CodeCode was jointly established by Korea’s major crypto exchanges Bithumb, Coinone, and Korbit in August 2021. Code recently published a report containing the Travel Rule operation results over the past year in Korea and its recommendations.

news
Web3 & Enterprise·

Sep 05, 2023

OKX Enters Final Stages of Securing VASP License in Hong Kong

OKX Enters Final Stages of Securing VASP License in Hong KongSeychelles-headquartered cryptocurrency exchange OKX is on the verge of securing its virtual asset service provider (VASP) license in Hong Kong, with approval expected as early as June 2024.That’s according to Li Zhikai, OKX’s Global Chief Commercial Officer, who, in a recent interview with Infocast, shed light on the exchange’s preparations, including collaborations with banks and other related technological integrations.Photo by Simon Zhu on UnsplashThe Road to a VASP LicenseObtaining a VASP license in Hong Kong is no easy feat. Regulatory requirements impose a 30% cap on investors’ crypto investments, ensuring they do not risk more than one-third of their net income.Furthermore, the Hong Kong regulator has implemented stringent crypto asset storage protocols, mandating that crypto exchanges securely store 98% of their crypto assets in cold wallets. Additionally, they must provide insurance and compensation arrangements to protect clients’ interests.Cost has been another issue. In June it emerged that Web3 businesses have been shelling out anywhere between 20 million and 200 million Hong Kong dollars ($2.55 million and $25.5 million) in order to see out the licensing application process.Alongside these licensing difficulties, Hong Kong’s Securities and Futures Commission (SFC) issued a warning last month aimed at unregistered crypto businesses engaging in “improper practices” within the Chinese autonomous territory.OKX’s remarkable growthWith OKX having reported growth within the Hong Kong market earlier this year, pointing to the onboarding of over 10,000 new users in just one month, it’s likely that licensing is both worthwhile and necessary for the firm despite the difficulties in obtaining it. In March the exchange established OKX Hong Kong, a local entity, with the primary objective of securing a VASP license and operating as a virtual asset trading platform within the city.Hong Kong’s decision to open its doors to retail investors as of June 1 generated significant interest, with more than 80 foreign and Mainland China-based crypto companies expressing their intent to establish a presence in Hong Kong and obtain local licenses. Among these firms are Gate.io, Huobi, CoinEx, and Interactive Brokers.Expanding global reachNotably, OKX has been actively acquiring licenses in various jurisdictions worldwide as part of its strategic expansion plan. The exchange secured a Minimal Viable Product (MVP) license from the Dubai Virtual Assets Regulatory Authority (VARA) in June. This licensing milestone followed the establishment of a new office at the Dubai World Trade Center by OKX.Before venturing into the Middle East, OKX took steps to obtain a French digital asset service provider (DASP) license in May, aiming to position France as its regional hub in Europe. To facilitate this, OKX established a local subsidiary, OKX France. The application and registration process with the French regulator is expected to enable OKX to operate in full compliance with European regulations.Hong Kong embarked on its journey to become a crypto-friendly jurisdiction over the course of the past 12 months, but particularly so when it unveiled its licensing framework for cryptocurrency exchanges catering to retail customers earlier this year. However, only a handful of platforms, such as HashKey and OSL, managed to secure licenses for offering retail crypto trading services. Others, including Huobi and Gate.io, are still awaiting that regulatory nod.

news
Policy & Regulation·

Nov 02, 2023

South Korean FIU rejects Hanbitco’s bid to become fiat-to-crypto exchange

South Korean FIU rejects Hanbitco’s bid to become fiat-to-crypto exchangeWhile numerous cryptocurrency-only exchanges in Korea have been vying for registration as fiat-to-crypto exchanges with the financial regulator, the government has turned down another platform’s attempt to achieve this status.Photo by Dim Hou on UnsplashUnmet standardsAccording to a report from local news provider MoneyToday, the Financial Intelligence Unit (FIU) of the Financial Services Commission (FSC) recently convened a committee that decided against approving Hanbitco’s request to change its business status. Industry sources suggest that this decision was based on Hanbitco’s inability to meet the standards set by the Act on Reporting and Using Specified Financial Transaction Information, often referred to as the Financial Transaction Reporting Act.Fine and cautionary orderA person familiar with the matter that the committee started deliberating on Hanbitco’s request to alter its business status about two weeks ago and ultimately decided against it. A significant factor in this decision might have been the KRW 2 billion ($1.49 million) fine levied on Hanbitco, stemming from numerous violations found in recent on-site inspections, the source added.Before approaching the FIU with its request, Hanbitco formed a partnership with Kwangju Bank in June to obtain real-name accounts, facilitating Korean won deposits and withdrawals. Achieving this is quite uncommon for a crypto-only exchange. In Korea, exchanges are legally required to have real-name bank accounts for trading in Korean won. Presently, only five platforms hold registration as fiat-to-crypto exchanges: Upbit, Bithumb, Coinone, Korbit and Gopax, each having its own banking partnership.As per the details released by the FIU, besides the levied fine, Hanbitco was issued a cautionary order, and five of its employees faced reprimands.The fine of KRW 2 billion is the heaviest handed out to a virtual asset service provider from on-site inspections held between last year and the first half of this year. For perspective, Upbit, the country’s largest crypto exchange, was fined KRW 80 million.An FIU representative noted that during the evaluation of Hanbitco’s application to transition into a fiat-to-crypto exchange, factors such as the firm’s anti-money laundering (AML) protocols, its internal control systems and past sanctions played a role in the decision-making process.

news
Loading