FalconX further expands APAC reach into Hong Kong

Akira ransomware, responsible for stealing $42 million from over 250 organizations across North America, Europe and Australia in just a year, is now targeting businesses in Singapore. In response, Singaporean authorities have issued a joint advisory warning local businesses about the increasing threat posed by a variant of this ransomware.Photo by Mike Enerio on UnsplashAlert follows complaintsThe alert follows multiple complaints from victims, prompting agencies like the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF) and the Personal Data Protection Commission (PDPC) to take action. These agencies emphasize the urgency of recognizing and combating this threat. How Akira operatesAkira affiliates employ various techniques to infiltrate a victim's network. These include exploiting known vulernabilities. For example, that could mean the targeting of services like Cisco virtual private networks (VPNs) that have been configured without multi-factor authentication (MFA). Another approach that the ransomware incorporates is attacking external-facing services such as the Remote Desktop Protocol (RDP) via brute force. Social engineering is another tool within its repertoire. This involves tricking victims into downloading malicious software or entering credentials on phishing websites. There is a marketplace for compromised credentials in the dark web. Akira also relies on such data, acquiring it from access brokers who sell network access.  Once inside a network, Akira affiliates often create new domain accounts to maintain persistent access, even after reboots. They use numerous tools to steal user credentials, escalate privileges and spread throughout the network. Detection and prevention measuresThe Singaporean advisory outlines several strategies for detecting, deterring and neutralizing Akira attacks. Authorities strongly advise against paying ransoms, on the basis that doing so does not guarantee data recovery or prevent future attacks. Authorities also warn that paying ransoms can encourage further attacks. The FBI has noted that Akira operators do not contact victims. Instead, they expect victims to initiate contact. Payment in BitcoinThe advisory outlines how Bitcoin is implicated in the ransomware scam. It states:”Ransom payments are requested in Bitcoin, which are directed to cryptocurrency wallet addresses specified by the affiliates. The TOR site (.onion) where victims contact the affiliates, contains stolen information and a list of the affected organisations.” It’s not the first time that Singaporean authorities have issued warnings that have implicated Bitcoin and crypto. In January, the CSA and SPF, in a joint advisory, suggested that people should use hardware wallets in an effort to guard against crypto-related malware and phishing attacks. A number of weeks prior to that, Singapore’s former Prime Minister, Lee Hsien Loong, took to Facebook to issue a warning with regard to a crypto scam that involved the use of deceptive content generated using artificial intelligence (AI). Mitigation techniquesBusinesses are being urged by the authorities to adopt best practices to mitigate the Akira ransomware threat. They suggest the implementation of a recovery plan alongside the use of multi-factor authentication (MFA) in order to secure data and the access to that data.  They also suggest filtering network traffic as it helps in identifying and blocking malicious activities. Meanwhile, disabling unused ports and hyperlinks curbs the risk further as it reduces the attack surface. Lastly, the authorities suggested the use of system-wide encryption to protect data even if it is accessed by unauthorized entities.

Taiwan’s FSC to Release Cryptocurrency Guidelines for Banks in SeptemberHuang Tien-Mu, Chairman of the Taiwanese Financial Supervisory Commission (FSC), said at the Legislative Yuan that regulatory guidelines for banks concerning cryptocurrencies will be available in September, as reported by local blockchain media Blocktempo.© Pexels/ Timo VolzHuang’s remarks were in response to questions from Legislator Lee Guei-min about crypto-related issues.Legislator’s three concernsLee raised three concerns: the accessibility of DBS Digital Exchange, currently operating in Singapore, for Taiwanese users; whether traditional banks should be permitted to provide crypto trading platforms; and investor protection against exchange collapses like the one experienced by FTX.FSC Chairman’s answersHuang stated that the FSC has not received any requests related to DBS Digital Exchange. He mentioned the commission’s concerns about the intrinsic value of cryptocurrencies and their ongoing work on regulatory guidelines, set for release in September. Huang also highlighted the importance of financial authorities overseeing crypto trading platforms, citing FTX Japan as an example, where users are protected under Japanese regulations.To safeguard investors from potential collapses, Huang suggested separating assets between hot and cold wallets. Furthermore, he noted that the FSC is not considering allowing the 27 crypto trading platforms registered with the commission to be listed on Taiwanese stock exchanges.

Further Setback for Luno With Loss of Top ExecGlobal crypto exchange Luno has been challenged of late, with job cuts, the closure of its presence in Singapore and now the loss of a key executive from the company.According to a report published by CNBC on Tuesday, the embattled crypto firm is losing Vijay Ayyar, its Vice President of Corporate Development and International. The setback follows an announcement last month by the company to withdraw its presence from the Singaporean market.Photo by Marten Bjork on UnsplashUnrelated to Singapore closureAyyar made the following comment via WhatsApp message: “I’ll be leaving Luno after 7 years at the company. Given the time I’d spent at Luno, it just seemed like it was time for another challenge.” It’s understood that Ayyar has confirmed that Luno’s move to exit Singapore (where he was based) was not related to his own decision to move on. Instead the top executive has said that he will be joining another company within the crypto and over-arching Web3 space.Luno management had previously outlined that its decision to exit Singapore formed part of an overall “evaluation of [its] global strategy and presence.” As part of its retreat from that South East Asian market, it withdrew its licensing application from consideration by the local regulator, the Monetary Authority of Singapore (MAS).At the time of that announcement, the company stated: “ It’s not a decision we’ve taken lightly. It’s always been our mission to put the power of crypto in everyone’s hands. This is still true.”Organizational changesThe company is clearly going through a period of adjustment from a staffing and resourcing perspective. Last month, Luno announced that its co-founder, Marcus Swanepoel, would be stepping down as CEO. Filling his boots in that role will be Luno’s Chief Operating Officer (COO), James Lanigan.This organizational upheaval follows a further setback in January, when the company announced a 35% cut in headcount. The decision for those job cuts was taken as a knock on reaction to what had been a very challenging trading environment for Luno and crypto companies generally during a year long crypto bear market in 2022.A troubled parent companyLuno’s difficulties have been further compounded given that it is a portfolio company of crypto industry conglomerate, Digital Currency Group (DCG). DCG had acquired the company in 2020. DCG also owns digital assets-focused financial services firm Genesis which filed for bankruptcy in January. It owes $575 million to Genesis in a scenario that places DCG itself in default risk.Genesis and DCG have recently entered into a 30 day mediation process in order to reach a resolution relative to creditors who participated in the Gemini Earn programme associated with the Gemini cryptocurrency business run by Cameron and Tyler Winklevoss.As yet DCG has not sought to sell off any of its portfolio companies which includes Grayscale, CoinDesk and Foundry. However, it’s understood that Luno has hired investment bank Canaccord Genuity in an effort to garner suitors who would be interested in investing in the company. This may be part of a plan to unburden the troubled DCG parent company.