Top

Hackers utilize social engineering, move funds through Cambodian platform

Policy & Regulation·July 16, 2024, 11:28 PM

A couple of recent reports have revealed how North Korean hackers have been moving funds to a Cambodian crypto payments platform while further insight has come to light with regard to how these hackers are compromising crypto companies.

 

Huoine Pay

On July 15, Reuters reported that Cambodian currency exchange and payments firm Huione Pay had received in excess of $150,000 in digital currency from a wallet associated with notorious North Korean hacking group Lazarus. Analysis of blockchain data demonstrated that the funds had been received by the Phnom Penh-headquartered payments firm in June 2023 and February 2024. 

https://asset.coinness.com/en/news/5dcc9ca840696cba8765b6b77f39bbf6.webp
Photo by allPhoto Bangkok on Unsplash

‘Pig butchering’

It’s understood that Lazarus stole those digital assets from three crypto firms during the months of June and July of 2023. While Huione has suggested that it was oblivious to the origin of the funds, a blog article by blockchain analytics company Elliptic, published to its website on July 10, suggested that “Huione Guarantee is an online marketplace that has become widely used by scam operators in South East Asia.” 

 

Elliptic went on to assert that some of these scammers employ “pig butchering” techniques, where fraudsters manipulate the victim into investing into fraudulent crypto schemes. It added that “merchants on the platform offer technology, data and money laundering services, and have engaged in transactions totaling at least $11 billion.”

 

The National Bank of Cambodia explained to Reuters that the company is not permitted to trade crypto and that it "would not hesitate to impose any corrective measures" against Huione. The platform is believed to have strong ties to Cambodia’s ruling family. One of the firm’s three directors is understood to be a cousin of the Cambodian Prime Minister, Hun Manet.

 

The Lazarus hacking group is believed to have masterminded a $305 million hack of Japanese cryptocurrency DMM Bitcoin in May of this year. Pseudonymous on-chain investigator ZachXBT claimed on X that $35 million of the proceeds had been laundered through the Huione platform.

 

Compromising crypto businesses

In a related development, a report by DL News published on July 15 has found that North Korean hackers are employing a new tactic in order to compromise crypto businesses. The hackers are scanning the internet for job postings advertised by the companies they’re targeting and submitting bogus applications.

 

A report by the United Nations Security Council has revealed that in excess of 4,000 North Koreans have taken up employment with international technology firms. Part of the social engineering-based tactics employed by the hackers includes contriving to get employees within targeted companies to install malware. 

 

Oftentimes, the resumes and LinkedIn profiles of real people are used in order to find a way in via the recruitment process. A report by DeFiLlama suggests that $664 million has been lost via instances of crypto hacking within the first half of 2024. 

More to Read
View All
Web3 & Enterprise·

Sep 01, 2023

Ground X Teams Up with Oasys for Digital Wallet and SDK Collaboration

Ground X Teams Up with Oasys for Digital Wallet and SDK CollaborationGround X, the blockchain subsidiary of South Korean conglomerate Kakao, announced on Wednesday that it has entered a strategic partnership with Oasys, a Japanese blockchain gaming platform.Through this partnership, Ground X and Oasys aim to collaborate on multiple fronts and onboard each other’s respective Web3 ecosystems. Ground X said that it will participate as a partner company in Oasys’ Web3 ecosystem, collaborating with other Japanese blockchain and gaming firms.Photo by GuerrillaBuzz on UnsplashSDK sharingIn particular, Ground X also plans to provide a software development kit (SDK) that will enable game developers around the world to embed digital asset wallets into their services by leveraging the convenience and technical capabilities of Kakao’s digital wallet, Klip.“By providing the embedded SDK through this partnership, this will serve as an opportunity for Ground X to expand globally by attracting more Klip users,” said Kim Tae-geun, Head of the Business Group Division at Ground X.Dominic Jang, Head of Business Development at Oasys, expressed similar sentiments, stating, “This Klip wallet SDK will allow Oasys’ partners in the gaming industry to operate more smoothly, serving as valuable infrastructure.”NFT allianceOasys will also become a member of GRID — Ground X’s alliance of over 130 local companies aimed at popularizing and fostering non-fungible token (NFT) usage in Korea. Ground X will subsequently share with Oasys the expertise it has gained through success stories of various NFTs on Klip. Through a combination of all these efforts, the company’s goal is to expand the local NFT business ecosystem and increase opportunities for networking and joint marketing between Korean and Japanese companies.“Ground X is at the forefront of Kakao’s blockchain business and has accumulated a wealth of expertise in the blockchain field. Through our collaboration with them, the Oasys ecosystem gains a strong partner,” Jang emphasized.In addition, Ground X is participating as a partner company and panel judge in a blockchain hackathon organized by Oasys and XPLA.

news
Web3 & Enterprise·

Nov 07, 2023

Roger Ver sues Matrixport over frozen crypto funds

Roger Ver sues Matrixport over frozen crypto fundsRoger Ver, often referred to as “Bitcoin Jesus,” finds himself embroiled in a legal dispute with Jihan Wu, the co-founder and chairman of Matrixport, a Singapore-based digital assets financial services platform.Photo by Tingey Injury Law Firm on Unsplash$8 million disputeThe crux of the matter is a contentious $8 million that Ver claims Wu withheld from him in connection with the fallout of the unrelated failure of the CoinFLEX crypto platform. This conflict has led to a lawsuit filed by Ver’s counsel in the Seychelles.The legal complaint, which originated last year, revolves around bit.com, a crypto exchange owned by Matrixport, refusing to allow Ver to withdraw his $8 million. Wu, a creditor of CoinFLEX, contends that he incurred financial losses due to the exchange’s restructuring.However, Ver asserts that the insolvency of CoinFLEX, an unrelated entity, should not be tied to the funds owed to him by Matrixport. Off the back of that assertion, Ver confirmed to The Block that in August 2022, he sued Smart Vega Holding Limited, a Seychelles-incorporated subsidiary company of Matrixport, for $8 million.Ver asserts CoinFLEX collapse innocenceRoger Ver maintains that he is not to blame for CoinFLEX’s collapse. He states that the narrative emerged due to breaches of confidentiality regarding the arbitration between CoinFLEX and himself. It emerged last month that creditors of CoinFLEX had taken legal action against its CEO, Mark Lamb, as well as Ver. It’s understood that Ver had benefited from a settlement negotiated with Lamb. Creditors are seeking to recover any benefit realized by Ver as a consequence of this settlement.Ver told Coindesk in an email that he initiated arbitration proceedings against CoinFLEX in June 2022, seeking $200 million in damages. He maintains he was the plaintiff in this case, not CoinFLEX, which later filed a counterclaim for $84 million.Confidentiality is a key aspect of arbitration proceedings, especially in Hong Kong where the arbitration took place. Despite this, it is alleged that Lamb broke this confidentiality, which led to the misrepresentation that CoinFLEX was the plaintiff in the case. Ver firmly believes that CoinFLEX’s insolvency was primarily due to market turmoil in May 2022 and poor risk management on the part of its co-founders.Matrixport standing firmWhile Matrixport does not deny withholding the cryptocurrency from Ver, it argues that Ver should repay his debt to CoinFLEX, which is a creditor of Ver. Once this is done, CoinFLEX will release monies owed to Wu.The dispute also touches on the terms of service. Matrixport maintains that it has the right to withhold funds for penalties related to defaulted margin calls and legal fees and it is committing significant legal resources to defend its position. Ver’s attorney counters this argument, stating that Matrixport’s terms of service do not permit such penalties and that there is no legal justification for withholding the funds.Matrixport claims that the funds are being held because of an investigation into Ver’s “margin trading irregularities.” The company’s Head of Public Relations and Brand, Ross Gan, said that Ver “continues to make unreasonable demands.” Gan added:“We will respect the legal process and the ultimate Court ruling on this case and reserve all our rights to take further legal action in this ongoing dispute with Mr. Ver.”

news
Policy & Regulation·

Jun 28, 2024

Singer referred to Taiwan prosecutors over alleged links to JPEX

The Ministry of Justice Investigation Bureau in Taiwan has referred Nine Chen, a popular Taiwanese singer-songwriter and television program host, to the prosecutors' office in Taipei on suspicion of aggravated fraud and violations of banking laws for his alleged involvement in a fraud scheme linked to the JPEX cryptocurrency exchange. Local media publication the United Daily News reported on June 26 that as an outcome from an investigation into the matter, the authorities have established that Chen acted as a brand ambassador for JPEX in 2023, receiving 320,000 USDT in the process. While Chen has been referred on to the prosecutors’ office in Taipei, they have yet to press charges against him. Photo by Thomas Tucker on UnsplashOngoing sagaThe first public soundings of an issue in Taiwan relative to JPEX emerged in November 2023. At that time, the Taipei District Prosecutors Office (TDPO) requested that Chang Tung-ying be taken into custody amid allegations of fraud. Tung-ying was understood to have been chief partner at JPEX’s Taiwan office.  The previous month, the TDPO had called Chen in as a witness. The singer had informed local media that he was out of pocket for funds he had held in digital assets via JPEX, incurring a 15% loss.  At that time, the authorities in Taiwan arrested dozens of suspects related to what is believed to be a fraud to the value of approximately $205 million. Hong Kong investigationsJPEX garnered the most negative reaction in Hong Kong. In excess of 2,000 complaints were registered with local regulators within the Chinese autonomous territory relative to the cryptocurrency exchange.  Problems were first reported in September 2023 when the platform outlined that it had experienced a liquidity crisis. Losses in Hong Kong relative to the platform were understood to be in the region of $180 million.  In an effort to deal with the matter, JPEX proposed a plan in October 2023 to transition the business to a decentralized autonomous organization (DAO). Multiple arrests were made by the Hong Kong authorities, with a collection of assets being seized in an effort to gather up funds on behalf of platform customers who found themselves out of pocket. While JPEX hit the headlines in 2023 for questionable activity in Asian markets, the business is actually headquartered in Dubai in the United Arab Emirates (UAE). In September of last year, Dubai’s Virtual Assets Regulatory Authority (VARA) outlined that as far as it was concerned, JPEX wasn’t regulated in Dubai and hadn’t registered with the regulator.  Following the same pattern in Taiwan, JPEX had not registered with the Financial Supervisory Commission (FSC) relative to anti-money laundering (AML) regulations, which it requires crypto platforms to comply with. Taiwanese authorities have experienced issues with a number of crypto platforms over the course of the past 18 months. Aside from JPEX, the founder of ACE Exchange, David Pan, was arrested in January 2024. Charges of money laundering and fraud were brought against him. As with JPEX, there was a connection with Dubai in that Pan was also the founder of Dubai-based crypto exchange ZORIXchange. In November 2023, Bitgin, a local crypto exchange, found itself at the center of an investigation into money laundering.

news
Loading