Japanese cabinet approves crypto tax reform

The Singapore Police Force (SPF) and the Cyber Security Agency of Singapore (CSA) have jointly issued an advisory to raise awareness about the escalating use of cryptocurrency drainers in cyberattacks. The advisory aims to inform citizens about the threat and provide recommendations to protect against such attacks, with a specific emphasis on utilizing hardware wallets for enhanced security. Cryptocurrency drainers represent a form of malware that specifically targets crypto wallets. These malicious tools are often employed in phishing attacks to illicitly extract funds from users' wallets without proper authorization.Photo by Junrui Wu on UnsplashDrainer-as-a-service threatOf particular concern are commercial crypto draining kits, which empower less experienced cyber-criminals with sophisticated malware at no upfront costs. Operating on a drainer-as-a-service (DaaS) model, attackers share a predetermined percentage of the stolen funds with the service provider. The SPF and CSA underscored that crypto-drainer-related attacks typically originate from phishing campaigns. These campaigns commonly involve infiltrating verified social media accounts or dispatching fraudulent emails to users from compromised databases of major service providers. Unsuspecting victims who click on phishing links are redirected to counterfeit trading websites that prompt them to connect their Web3 wallets. Subsequently, a malicious smart contract is injected into the victim's system, enabling hackers to withdraw funds without additional authorization. MS Drainer and Inferno DrainerWhile no such attacks have been reported in Singapore to date specifically, the advisory acknowledges the rising recognition of this threat among hackers. Notably, an off-the-shelf crypto drainer called MS Drainer contributed to hackers stealing $59 million worth of cryptocurrency in 2023. Last month, Singapore-based cyber security firm Group-IB produced a report concerning the Inferno Drainer operation. According to the company’s research, the malware operation led to the theft of $80 million in digital assets globally, until the developers behind it shut it down last November. In December, the Pink Drainer hacking group notched up another victim, to the tune of $4.4 million in LINK tokens. Last week blockchain security firm Scam Sniffer reported that $10 million in digital assets had been stolen in phishing-related incidents over the course of just five days. Hardware walletsTo counteract these threats, Singapore authorities recommend the use of hardware wallets as a security measure against wallet drainer attacks. Additionally, the advisory instructs crypto investors to conduct thorough research before engaging with cryptocurrency services or platforms. Singaporeans are encouraged to report any suspicious incidents related to crypto drainers or phishing attacks to both relevant authorities and crypto service providers. In the event of a security breach, victims are urged to revoke any suspicious token approvals and promptly transfer their remaining funds to a different, secure wallet address to prevent further losses. This proactive approach aims to empower individuals with the knowledge and tools needed to navigate the risks associated with crypto drainers and foster cybersecurity awareness within the cryptocurrency ecosystem. As the threat landscape evolves relative to digital assets, this advisory serves as a valuable resource to educate citizens about the risks posed by crypto drainers.  

Japan Tops Crypto Losses to North Korean HackersHackers affiliated with the North Korean regime have been responsible for the theft of $721 million in digital assets from Japan.That’s the finding of a recent report by UK-based crypto compliance analysis firm Elliptic. Elliptic had produced the report on behalf of Japanese news media group, Nikkei. It leaves Japan at the top of the table when considering the distribution of digital asset losses suffered due to North Korean hackers on a country by country basis.Photo by FLY:D on UnsplashIncreasing lossesElliptic has the wherewithal to track and identify blockchain-based transfers. As part of its analysis, it grouped by region and by country those businesses that it identified as having cryptocurrency holdings that later were transferred to digital wallets held by the Lazarus Group, the most notorious hacker group connected with the North Korean government. It’s the first such analysis to break down crypto-related hacking losses on a country by country basis.The study included a consideration of both hacking and ransomware attacks. The loss associated with Japanese-based entities represents in excess of 30% of the global recorded loss. This latest analysis follows a recent report submitted to the United Nations which found that North Korea stole more digital assets in 2022 than any other year. That report had been submitted to the 15 members of a North Korea sanctions committee, finding that between $630 million and $1 billion worth of digital assets had been stolen.Lax securityElliptic’s analysis and subsequent report point to lax security being employed within Vietnamese and Japanese cryptocurrency marketplaces. Nikkei referred to an unnamed source who asserts that at least three Japanese cryptocurrency exchanges had been compromised by hackers between 2018 and 2021.One of those instances involved Zaif, a company that lost $51.4 million in 2018 and subsequently shut down operations. Overall, Elliptic estimates a global loss of $2.3 billion to hackers between 2017 and 2022 in digital assets, as suffered by crypto firms. It also estimates such losses suffered in the United States at $497 million, while Hong Kong-based losses have been calculated at $281 million.International responseIn April, the Office of Foreign Assets Control (OFAC) within the Department of the Treasury in the United States stated that it had sanctioned two Chinese nationals and a Hong Kong British national for allegedly having aided the North Korean government in crypto money laundering activities.On Saturday, a joint statement was issued by the Group of Seven finance ministers and central bank governors, following a meeting in Japan, outlining the “growing threat from illicit activities by state actors.” It’s widely believed that the proceeds of these hacks are contributing towards the funding of North Korea’s missile program and other such activities that threaten stability within the region.The Japan External Trade Organization (JETO) has estimated that the estimated $721 million stolen from Japan amounts to 8.8 times the value of North Korea’s exports in 2021.

XPLA-Kado Partnership allows fiat-to-crypto transactions for XPLA usersXPLA, the layer 1 blockchain project operated by South Korean gaming company Com2uS Group, announced on Friday (local time) its partnership with Kado, a fiat-to-crypto on/off ramp platform, enabling XPLA users to move between fiat currencies and cryptocurrencies seamlessly.Photo by Ibrahim Boran on UnsplashXPLA available via Visa, MastercardKado simplifies the process of converting between fiat and crypto. Usually, Web3 users have to deal with the inconvenience of using centralized exchanges to make such conversions. But Kado makes this much easier, allowing users to make purchases with either fiat currencies or cryptocurrencies. The platform accommodates an array of more than 20 fiat currencies and supports well-established payment options, including Visa, Mastercard, Apple Pay, ACH Transfer and Wire Transfer. Moreover, Kado’s services extend across over 150 countries that support Know Your Customer (KYC) protocols.Paul Kim, CEO of XPLA, acknowledged Kado’s contributions to establishing a base for the growth of the Web3 economy. He pointed out that this collaboration will make it simpler and more intuitive for XPLA users to engage with the Web3 economy. Thanks to Kado’s services, XPLA users will now be able to transact with their tokens with greater ease.Vince Dowdle, co-founder of Kado, underscored the importance of this partnership, noting that Kado has recognized XPLA as a frontrunner in shaping the future of Web3 gaming. This recognition comes from XPLA’s proactive stance in acquiring the intellectual properties (IPs) of multiple major games, reflecting a firm belief in the potential of the Web3 content space.Meanwhile, XPLA boasts a diverse roster of validators such as Oasys, Animoca Brands, YGG, Blockdaemon, Cosmostation and LayerZero. It has also onboarded popular games like Summoners War: Chronicles, Minigame Party, Ace Fishing: Crew, Idle Ninja Online and The Walking Dead: All-Stars. With these titles, XPLA is actively working to establish itself as a major hub for Web3 content on a global scale.