Top

Singapore police suggest hardware wallets to combat malware

Policy & Regulation·February 02, 2024, 3:12 AM

The Singapore Police Force (SPF) and the Cyber Security Agency of Singapore (CSA) have jointly issued an advisory to raise awareness about the escalating use of cryptocurrency drainers in cyberattacks.

 

The advisory aims to inform citizens about the threat and provide recommendations to protect against such attacks, with a specific emphasis on utilizing hardware wallets for enhanced security. Cryptocurrency drainers represent a form of malware that specifically targets crypto wallets. These malicious tools are often employed in phishing attacks to illicitly extract funds from users' wallets without proper authorization.

https://asset.coinness.com/en/news/38365430f808a1c538e2831346c3e8d0.webp
Photo by Junrui Wu on Unsplash

Drainer-as-a-service threat

Of particular concern are commercial crypto draining kits, which empower less experienced cyber-criminals with sophisticated malware at no upfront costs. Operating on a drainer-as-a-service (DaaS) model, attackers share a predetermined percentage of the stolen funds with the service provider.

 

The SPF and CSA underscored that crypto-drainer-related attacks typically originate from phishing campaigns. These campaigns commonly involve infiltrating verified social media accounts or dispatching fraudulent emails to users from compromised databases of major service providers.

 

Unsuspecting victims who click on phishing links are redirected to counterfeit trading websites that prompt them to connect their Web3 wallets. Subsequently, a malicious smart contract is injected into the victim's system, enabling hackers to withdraw funds without additional authorization.

 

MS Drainer and Inferno Drainer

While no such attacks have been reported in Singapore to date specifically, the advisory acknowledges the rising recognition of this threat among hackers. Notably, an off-the-shelf crypto drainer called MS Drainer contributed to hackers stealing $59 million worth of cryptocurrency in 2023.

 

Last month, Singapore-based cyber security firm Group-IB produced a report concerning the Inferno Drainer operation. According to the company’s research, the malware operation led to the theft of $80 million in digital assets globally, until the developers behind it shut it down last November.

 

In December, the Pink Drainer hacking group notched up another victim, to the tune of $4.4 million in LINK tokens. Last week blockchain security firm Scam Sniffer reported that $10 million in digital assets had been stolen in phishing-related incidents over the course of just five days.

 

Hardware wallets

To counteract these threats, Singapore authorities recommend the use of hardware wallets as a security measure against wallet drainer attacks. Additionally, the advisory instructs crypto investors to conduct thorough research before engaging with cryptocurrency services or platforms. Singaporeans are encouraged to report any suspicious incidents related to crypto drainers or phishing attacks to both relevant authorities and crypto service providers.

 

In the event of a security breach, victims are urged to revoke any suspicious token approvals and promptly transfer their remaining funds to a different, secure wallet address to prevent further losses. This proactive approach aims to empower individuals with the knowledge and tools needed to navigate the risks associated with crypto drainers and foster cybersecurity awareness within the cryptocurrency ecosystem.

 

As the threat landscape evolves relative to digital assets, this advisory serves as a valuable resource to educate citizens about the risks posed by crypto drainers.

 

 

More to Read
View All
Web3 & Enterprise·

May 11, 2023

LINE Xenesis Introduces AVA, an Entertainment NFT Platform

LINE Xenesis Introduces AVA, an Entertainment NFT PlatformLINE Xenesis, a blockchain affiliate of Tokyo-based messaging app provider LINE Corp, announced on Wednesday the launch of AVA, an entertainment non-fungible token (NFT) platform aimed at both Japanese and international users.Photo by Choong Deng Xiang on UnsplashDOSI servicesFollowing the integration of LINE BITMAX Wallet into DOSI Wallet in March, LINE Xenesis has been striving to provide DOSI services for its users in Japan. DOSI Wallet enables users to manage a range of digital assets, including NFTs. As of April, the company has rolled out two new services: DOSI Citizen, a membership program, and AlphaCrewz, an app allowing users to create 3D avatars utilizing NFTs.NFTs known as CrystalsLaunched on May 9, AVA is the third service designed to engage LINE Xenesis users in Japan. The platform employs NFTs, known as Crystals, to connect artists and fans, which are divided into three categories: normal, rare, and unique, each offering different benefits.TREASUREBefore AVA’s debut, a March 27 airdrop event featuring the world-renowned South Korean boy band TREASURE attracted over 7,000 participants. With the launch of AVA, 7,000 TREASURE Crystals have been made available for purchase.TREASURE Crystal holders can enjoy four perks: storing exclusive videos in Crystals, receiving autographed trading cards and polaroid pictures, earning a portion of Crystal revenues for promoting TREASURE locally and on buses, and having the opportunity to submit inquiries and requests directly to the group. For the last benefit, TREASURE will respond to the most popular questions, as decided by user votes, with voting influence determined by the type of Crystal held.ATEEZThe second NFT collection on AVA will highlight another K-pop boy group ATEEZ, with ATEEZ Crystals available for purchase from May 16 to 31. An airdrop event with registration open until May 15 will precede the sales, giving users who complete missions a chance to win one of 600 normal ATEEZ Crystals. AVA will also host an event where ATEEZ members will answer eight selected questions submitted by fans.This fall, AVA will introduce a virtual space called Playground, enabling users to trade Crystals with each other and interact with artists through various activities.Additionally, participants in the ATEEZ airdrop event who fulfill tasks on social media will have a chance to enter a lucky draw for one of 30 exclusive ATEEZ photo card sets.

news
Policy & Regulation·

Mar 05, 2024

South Korea investigates Worldcoin for its personal data collection

On Thursday, South Korea’s Personal Information Protection Committee (PIPC) launched an investigation into Worldcoin’s personal data collection, processing and potential overseas transfer of sensitive personal data, the PIPC announced today via its official website. This comes after a number of complaints were filed against Worldcoin for its data collection practices.  Sam Altman’s crypto project Worldcoin gathers people’s personal data who signed up to have their irises scanned by “orbs” devices, which are currently installed in about 10 locations in Korea, including Yeouido, Pangyo and Apgujeong. The project started with the aim of distributing universal basic income to people whose jobs will be potentially replaced by artificial general intelligence (AGI) in the future. Photo by Colin Lloyd on UnsplashThe PIPC said the regulators will examine if any local privacy law has been violated by Worldcoin, and take further action in line with the Personal Information Protection Act. Following the launch of the investigation on Feb. 29, Worldcoin has withdrawn six orbs devices in Korea and stopped accepting new members. It has also suspended the distribution of the Worldcoin token (WLD) to members who have already signed up, media outlet Chosun Biz reported.  Free crypto tokens in exchange for personal data For individuals who have their irises scanned, Worldcoin rewards three WLD tokens every two weeks, which are worth approximately $22.5 (KRW 30,000) at the time of writing. The price of WLD has soared by nearly ten-fold from about KRW 1,300 last year to over KRW 13,000 today, according to the data from the local crypto exchange Bithumb. This price surge followed OpenAI’s launch of a text-to-video AI tool, Sora. The current circulating supply of WLD stands at around 100 million tokens. According to Worldcoin’s white paper, the WLD’s total supply cap will remain fixed at 10 billion tokens during the first 15 years following its launch.  The data collected from the eyeball scanning is shared on the Worldcoin blockchain, which is protected by the zero-knowledge proof technology that prevents the data from being tracked or shared with other applications. The personal data remaining in the orbs devices is deleted.  Ongoing overseas investigation on Worldcoin South Korea is not the only country that is examining Worldcoin’s personal data collection practices. The project’s processing of information has raised concerns in other jurisdictions as well, including the U.K., France, Argentina and Kenya. In the U.S., the issuance of WLD tokens has been banned by the country’s authority. 

news
Policy & Regulation·

Nov 17, 2025

Japan Exchange Group weighs tougher scrutiny of crypto treasury firms

The Japan Exchange Group (JPX), operator of the Tokyo and Osaka stock exchanges, is considering measures to curb the expansion of publicly listed digital-asset treasury (DAT) firms, according to sources speaking to Bloomberg. JPX is reportedly exploring various regulatory avenues, ranging from tightening backdoor listing rules to mandating new audits for applicable firms. Following recent scrutiny from the exchange, three Japanese public companies have suspended their cryptocurrency purchase plans since September. These firms were reportedly warned that pursuing crypto investment as a core strategy could restrict their ability to raise future capital. While JPX currently lacks binding regulations explicitly prohibiting listed companies from accumulating digital assets, a representative stated that the exchange is monitoring firms with potential governance and risk issues to protect the interests of shareholders and investors.Photo by Su San Lee on UnsplashMetaplanet responds to regulatory concernsFollowing the Bloomberg report, Metaplanet, a Japanese public company that has adopted a Bitcoin accumulation strategy similar to that of the American firm Strategy, issued a clarifying statement. The firm asserted that it "has not been subject to any regulatory actions or investigations by relevant authorities concerning our business operations." Metaplanet emphasized its willingness to engage in constructive dialogue with regulators should any inquiries arise. According to BitcoinTreasuries.net data, Metaplanet is currently Japan’s largest corporate Bitcoin holder and ranks fourth globally among public companies, trailing only Strategy, MARA Holdings, and XXI. The extent of the firm’s commitment to this strategy was highlighted by Shinpei Okuno, Metaplanet’s Head of IR and Capital Strategy, who shared the company’s holdings via X. Balance sheet data as of September 30, 2025, reveals that Bitcoin accounts for 99% of Metaplanet’s total assets, 542.7 billion yen out of 550.7 billion yen. Okuno noted that the company aims to maintain a balance sheet structure that supports the issuance of digital credits collateralized by its crypto holdings. Market performance and sector outlookThe stock performance of DAT firms highlights the market's reaction to these risks. According to Yahoo Finance data, Metaplanet’s share price has declined 40.29% over the past six months to 372 yen. This drop outpaces Bitcoin’s 8% decline over the same period. This downward pressure is visible across the broader DAT sector. Decrypt reported that Strategy's stock has fallen 50% from its July peak, while SharpLink, which invests in Ethereum, has dropped nearly 90%. Data from StrategyTracker indicates that the market-net-asset values (mNAVs) of these firms have slipped to near or below 1, reflecting depressed valuations. Analysts warn that low mNAVs complicate capital raising efforts, potentially forcing these firms to liquidate crypto holdings to cover operating expenses. At the same time, the analysts acknowledged possible tailwinds. Fakhul Miah, Managing Director at GoMining Institutional, told Decrypt that Bitcoin-oriented DATs generally outperform those investing in multiple, higher-risk crypto assets. He suggested that if U.S. economic data indicates easing inflation and the Federal Reserve cuts rates in December, Bitcoin could rally. Yaroslav Patsira, Fractional Director at CEX.IO, echoed this sentiment, noting that the outlook for DATs is tied closely to Bitcoin’s potential upside. Taking a longer-term view, Decrypt noted that despite the recent pullback, crypto-related equities have shown strong year-to-date (YTD) performance relative to the underlying asset. Galaxy Digital is up 73.4% and SharpLink 43.2% YTD, compared to Bitcoin’s 8.6% gain, suggesting the current correction is taking place within a broader uptrend. Japanese stablecoin push faces U.S. resistanceBeyond the equity markets, Japanese crypto initiatives are also encountering regulatory friction in the U.S. Decrypt reported that a coalition of small U.S. banks has formally objected to a bid by Connectia Trust, a proposed subsidiary of Sony Bank, to issue dollar-backed stablecoins in the U.S. Sony Group’s banking arm last month applied to the Office of the Comptroller of the Currency for a national trust charter to facilitate these issuances. The Independent Community Bankers of America (ICBA) argues that the Japanese institution is attempting to exploit regulatory gaps to avoid the oversight applied to traditional banks, noting that Connectia’s stablecoin bears similarities to bank deposits. However, Kadan Stadelmann, CTO of Komodo Platform, offered a different view, telling Decrypt the concerns are “overstated and driven by big-bank interests.” As Connectia’s application undergoes U.S. regulatory review, it has once again exposed the underlying divide between established banking interests and crypto-native approaches to financial services, particularly around how stablecoin issuers should be overseen.

news
Loading