Top

Hackers utilize social engineering, move funds through Cambodian platform

Policy & Regulation·July 16, 2024, 11:28 PM

A couple of recent reports have revealed how North Korean hackers have been moving funds to a Cambodian crypto payments platform while further insight has come to light with regard to how these hackers are compromising crypto companies.

 

Huoine Pay

On July 15, Reuters reported that Cambodian currency exchange and payments firm Huione Pay had received in excess of $150,000 in digital currency from a wallet associated with notorious North Korean hacking group Lazarus. Analysis of blockchain data demonstrated that the funds had been received by the Phnom Penh-headquartered payments firm in June 2023 and February 2024. 

https://asset.coinness.com/en/news/5dcc9ca840696cba8765b6b77f39bbf6.webp
Photo by allPhoto Bangkok on Unsplash

‘Pig butchering’

It’s understood that Lazarus stole those digital assets from three crypto firms during the months of June and July of 2023. While Huione has suggested that it was oblivious to the origin of the funds, a blog article by blockchain analytics company Elliptic, published to its website on July 10, suggested that “Huione Guarantee is an online marketplace that has become widely used by scam operators in South East Asia.” 

 

Elliptic went on to assert that some of these scammers employ “pig butchering” techniques, where fraudsters manipulate the victim into investing into fraudulent crypto schemes. It added that “merchants on the platform offer technology, data and money laundering services, and have engaged in transactions totaling at least $11 billion.”

 

The National Bank of Cambodia explained to Reuters that the company is not permitted to trade crypto and that it "would not hesitate to impose any corrective measures" against Huione. The platform is believed to have strong ties to Cambodia’s ruling family. One of the firm’s three directors is understood to be a cousin of the Cambodian Prime Minister, Hun Manet.

 

The Lazarus hacking group is believed to have masterminded a $305 million hack of Japanese cryptocurrency DMM Bitcoin in May of this year. Pseudonymous on-chain investigator ZachXBT claimed on X that $35 million of the proceeds had been laundered through the Huione platform.

 

Compromising crypto businesses

In a related development, a report by DL News published on July 15 has found that North Korean hackers are employing a new tactic in order to compromise crypto businesses. The hackers are scanning the internet for job postings advertised by the companies they’re targeting and submitting bogus applications.

 

A report by the United Nations Security Council has revealed that in excess of 4,000 North Koreans have taken up employment with international technology firms. Part of the social engineering-based tactics employed by the hackers includes contriving to get employees within targeted companies to install malware. 

 

Oftentimes, the resumes and LinkedIn profiles of real people are used in order to find a way in via the recruitment process. A report by DeFiLlama suggests that $664 million has been lost via instances of crypto hacking within the first half of 2024. 

More to Read
View All
Policy & Regulation·

Sep 21, 2023

Mt. Gox Extends Repayment Deadline to 2024

Mt. Gox Extends Repayment Deadline to 2024In a development that has captured the attention of the cryptocurrency community, failed Japanese crypto exchange Mt. Gox has officially announced a one-year extension of its repayment deadline.The decision, authorized by the Tokyo District Court, represents a one-year delay from the previously stipulated date of October 31, 2023.Photo by Andre Benz on UnsplashInfamous collapseAt its height, Mt. Gox was the world’s largest cryptocurrency exchange, facilitating over 70% of all cryptocurrency trades. However, its fall from grace began in 2014 when it fell victim to a colossal hack, resulting in the loss of 850,000 Bitcoins. The collapse left approximately 24,000 creditors in its wake, each of them agonizing over a multi-year period for the return of their digital assets.In a letter dated September 21, Rehabilitation Trustee Nobuaki Kobayashi announced the extension of the repayment deadline. This extension applies to the base repayment, early lump-sum repayment, and intermediate repayment, all of which have been rescheduled to October 31, 2024.The rationale behind this delay is twofold. Firstly, to provide creditors with additional time to furnish essential information required for the repayment process. Secondly, it will allow the trustee to coordinate with associated banks, fund transfer service providers, and cryptocurrency exchanges to facilitate the repayments.Potential payout for diligent creditorsA glimmer of hope exists for creditors who have diligently provided the necessary information. Repayments may commence sequentially as early as the close of this year. That said, it should be noted that the specific timing of repayments for each creditor remains uncertain.Kobayashi emphasized that the schedule is subject to change depending on circumstances, and further adjustments are possible. The Mt. Gox Debtor has encouraged creditors who have as yet not provided required information to facilitate payments to do so.Naturally enough, long suffering creditors are frustrated by this latest update. Taking to X (formerly Twitter), one user named “Mt.Gox’ed” wrote: “People will not get their Mt.Gox money back.” . . . “I’ve been tweeting for a long time that infinite delays are coming.”The move evoked a similar response from distressed debt specialist Thomas Braziel, who wrote: “Another delay from the MtGox trustee’s office — COME ON!”Mt. Gox’s journey towards rehabilitation has been arduous and protracted since its declaration of insolvency in 2014. Legal battles, extensive delays, and the need for meticulous coordination have all contributed to this postponement. Nonetheless, creditors are holding onto the hope that, with this extension, the path to recovering their lost assets will become smoother.Crypto market impactThis latest news has drawn considerable attention within the broader crypto sector as it may have implications for the market as a whole. The repayment delay holds the potential to impact Bitcoin prices, given the sheer volume of tokens that will be released when repayments begin. The Mt. Gox estate holds 142,000 BTC, 143,000 BCH, and 69 billion JPY.As per UBS analysts, while this influx of funds could influence the market, it is unlikely to destabilize Bitcoin. Notably, the recovery of approximately 20% of the stolen tokens after the hack reflects a positive step in the ongoing rehabilitation process.

news
Web3 & Enterprise·

Nov 24, 2023

NEOPIN teams up with Ticker Capital to expand Web3 ecosystem

NEOPIN teams up with Ticker Capital to expand Web3 ecosystemCentralized decentralized finance (CeDeFi) protocol NEOPIN announced on Friday (local time) that it has signed a business agreement with global accelerator Ticker Capital to expand its Web3 ecosystem, explore new business opportunities and nurture promising Web3 projects.Photo by Shubham’s Web3 on UnsplashGlobal Web3 allianceNEOPIN has been accumulating its blockchain expertise and technology by serving as a node validator in multiple global blockchain projects, including Ethereum, Tron, Cardano and Cosmos. Its CeDeFi protocol was launched more recently last year to provide Web3 users with a safe and convenient DeFi platform.Ticker Capital is an investment firm dedicated to early-stage blockchain technology projects. It has invested in, consulted with and accelerated more than 50 projects since 2018, including Carry Protocol, SuperWalk, Lillius and more. It operates multiple branch offices around the world, including in South Korea, Singapore and Hong Kong.While Ticker Capital has established a strong foothold in Chinese-speaking countries, NEOPIN has done so in other countries like the United Arab Emirates, Japan and the Southeast Asian region. By leveraging these dispersed geographical influences along with their distinct business models and expertise, the two companies plan to expand NEOPIN’s Web3 ecosystem to include new games, metaverses, NFTs and services built on the CeDeFi protocol. They also revealed plans to integrate their respective platforms in the event that a Web3 project nurtured by Ticker Capital is deemed compatible with NEOPIN.“Through this MOU, we will expand our global foothold and diversify our Web3 ecosystem,” said Ethan Kim, CEO of NEOPIN. “Since NEOPIN and Ticker Capital possess different strengths, we expect to create solid synergies through our mutual partnership.”The partnership’s main goal is to integrate innovative Web3 projects into the NEOPIN ecosystem, launch DeFi services and acquire users around the world. NEOPIN’s business partners will also be able to boost their opportunities for global success by gaining access to networking with Ticker Capital.Boosting presence in the UAEEarlier this year, NEOPIN was selected to participate in the Innovative Program of the Abu Dhabi Investment Office (ADIO), attracting a series of investments. It is also working with the Abu Dhabi Global Market (ADGM), an international financial center and free zone in the UAE, to create the world’s first DeFi regulations through a public-private partnership.

news
Web3 & Enterprise·

Jul 22, 2023

McDonald’s Enters the Metaverse with McNuggets Land

McDonald’s Enters the Metaverse with McNuggets LandMcDonald’s, the global fast food giant, has ventured into the metaverse realm to commemorate the 40th anniversary of its beloved Chicken McNuggets, with McDonald’s Hong Kong spearheading the immersive experience.McNuggets Land, a virtual world situated within the metaverse platform The Sandbox, now welcomes enthusiastic players to embark on a quirky adventure filled with pixelated McNugget characters like “Coach McNugget” and his trusty sidekick, “Assistant Coach McNugget.” The project team behind The Sandbox laid out the details of the initiative via a blog post published on Medium on Thursday.In this novel virtual landscape, players are tasked with the mission of locating four McDonald’s signs, sparking excitement for the rewards that await. Among the enticing incentives are a shared prize pool of 100,000 SAND (approximately $44,000) and enigmatic “mystery boxes.” SAND is the native token of The Sandbox virtual world.Photo by Jas Rolyn on UnsplashCustomer engagement challengesThe CEO of The Sandbox, Sebastien Borget, expressed enthusiasm for collaborating with global brands like McDonald’s to drive mass adoption of the metaverse. The Sandbox has already witnessed the presence of several prominent brands like Adidas, Atari, and Gucci within its virtual world. Comparatively, it might be challenging for McNuggets Land to carve out a distinctive niche to capture enduring user engagement.Numerous brands have attempted whimsical activations within metaverses over the years, from Snapple’s virtual bodega to Taco Bell’s metaverse wedding. However, the fundamental question arises when virtual food or drink experiences are introduced — what’s the point when you can’t taste or smell in the metaverse?Bear market & regulatory setbacksMoreover, the timing of brands entering the Web3 space may be subject to scrutiny. With venture capital money flowing toward AI and Disney closing its metaverse ventures, the Web3 landscape faces a more challenging environment in 2023. The ongoing crypto winter and Securities and Exchange Commission (SEC) crackdowns have somewhat dampened the allure of these activations, making it imperative for brands like McDonald’s to offer a compelling “why” for their Web3 endeavors.Starbucks has been experimenting with its Web3 loyalty program called “Odyssey,” which ties in seamlessly with its customers’ real-world coffee purchases. This strategic approach aligns virtual rewards and digital collectibles with existing behaviors, giving added value to their regular activities. In doing so, Starbucks fosters a sense of community and gains valuable feedback for future improvements, ensuring a more sustainable and purposeful presence in the Web3 space.Formative developmentWhile McDonald’s McNuggets Land in the metaverse may excite some players with its whimsical charm, the bigger question remains: What value does it truly bring to the participants, and how does it ensure a lasting impact? In a rapidly evolving Web3 landscape, success lies in offering meaningful experiences that align with users’ existing behaviors and aspirations, fostering genuine engagement and community-building.We are still at a stage where consideration of the metaverse in terms of what it is, what it represents, and what experience users can or should glean from it is still formative. It remains to be seen as to the extent to which Mcdonald's will be successful in this instance, but it is encouraging that they’re brave enough to get involved with the innovation.

news
Loading