Top

Hackers utilize social engineering, move funds through Cambodian platform

Policy & Regulation·July 16, 2024, 11:28 PM

A couple of recent reports have revealed how North Korean hackers have been moving funds to a Cambodian crypto payments platform while further insight has come to light with regard to how these hackers are compromising crypto companies.

 

Huoine Pay

On July 15, Reuters reported that Cambodian currency exchange and payments firm Huione Pay had received in excess of $150,000 in digital currency from a wallet associated with notorious North Korean hacking group Lazarus. Analysis of blockchain data demonstrated that the funds had been received by the Phnom Penh-headquartered payments firm in June 2023 and February 2024. 

https://asset.coinness.com/en/news/5dcc9ca840696cba8765b6b77f39bbf6.webp
Photo by allPhoto Bangkok on Unsplash

‘Pig butchering’

It’s understood that Lazarus stole those digital assets from three crypto firms during the months of June and July of 2023. While Huione has suggested that it was oblivious to the origin of the funds, a blog article by blockchain analytics company Elliptic, published to its website on July 10, suggested that “Huione Guarantee is an online marketplace that has become widely used by scam operators in South East Asia.” 

 

Elliptic went on to assert that some of these scammers employ “pig butchering” techniques, where fraudsters manipulate the victim into investing into fraudulent crypto schemes. It added that “merchants on the platform offer technology, data and money laundering services, and have engaged in transactions totaling at least $11 billion.”

 

The National Bank of Cambodia explained to Reuters that the company is not permitted to trade crypto and that it "would not hesitate to impose any corrective measures" against Huione. The platform is believed to have strong ties to Cambodia’s ruling family. One of the firm’s three directors is understood to be a cousin of the Cambodian Prime Minister, Hun Manet.

 

The Lazarus hacking group is believed to have masterminded a $305 million hack of Japanese cryptocurrency DMM Bitcoin in May of this year. Pseudonymous on-chain investigator ZachXBT claimed on X that $35 million of the proceeds had been laundered through the Huione platform.

 

Compromising crypto businesses

In a related development, a report by DL News published on July 15 has found that North Korean hackers are employing a new tactic in order to compromise crypto businesses. The hackers are scanning the internet for job postings advertised by the companies they’re targeting and submitting bogus applications.

 

A report by the United Nations Security Council has revealed that in excess of 4,000 North Koreans have taken up employment with international technology firms. Part of the social engineering-based tactics employed by the hackers includes contriving to get employees within targeted companies to install malware. 

 

Oftentimes, the resumes and LinkedIn profiles of real people are used in order to find a way in via the recruitment process. A report by DeFiLlama suggests that $664 million has been lost via instances of crypto hacking within the first half of 2024. 

More to Read
View All
Policy & Regulation·

Jan 11, 2024

Apple India blocks eight exchanges subject to FIU notice

It emerged on Wednesday that the Indian version of the Apple App Store has blocked access to eight crypto exchanges that were recently subject to a show cause notice from an Indian government agency, the Financial Intelligence Unit (FIU). The development occurred only two weeks after these global firms were flagged for allegedly operating "illegally" in the country. The FIU had cited non-compliance with India's anti-money laundering rules. In its statement on Dec. 28, the FIU urged India's IT Ministry to block the websites of all nine services in the country. The affected exchanges include Huobi, Gate.io, Bittrex, Binance, Kraken, Kucoin, MEXC Global and Bitfinex. Binance acknowledged the issue in a social media post, stating that it will continue to work with local regulators. Interestingly, Bitstamp, another exchange mentioned by the FIU, remained operational on the App Store in India. While these apps have been removed from the Apple App Store, they are still available on the Google Play Store in India and their websites remain accessible within the country. Users who had previously installed these apps on their devices can still access them. Photo by Naveed Ahmed on UnsplashTax avoidanceThe backdrop for this action involves a trend where many Indian traders had shifted to global cryptocurrency platforms rather than native digital asset exchanges. India initiated cryptocurrency taxation last year, imposing a 30% tax on gains and a 1% deduction on each crypto transaction.  While Indian-based exchanges like CoinSwitch, CoinDCX and WazirX maintain compliant know-your-customer verifications, global platforms have not followed suit. Notably, WazirX has experienced a drastic 97% drop in trading volume over two years as many traders migrated to global apps. It’s thought that as many as five million crypto users have shifted their trading activity to offshore exchanges. The tax has proven to be controversial and according to Dr. Vikash Gautam, the author of a report on the tax measure published last November, “it just isn’t enforceable . . . It is possible to be done with international cooperation, but we do understand it is a long process. Some of the other countries have some arrangements with international exchanges to track that." Leveling the playing fieldIt’s amid that competitive backdrop that native Indian exchanges lobbied the Indian government through the Bharat Web3 Association (BWA) to take action against unregulated offshore exchanges recently. CoinSwitch's co-founder and CEO, Ashish Singhal, urged offshore exchanges to comply with local regulations, suggesting registration with the FIU and adherence to India's Anti-Money Laundering (AML) and Counter-Terrorist Financing (CFT) measures. Singhal, whose CoinSwitch platform is a founding member of the BWA industry advocacy group, highlighted that this would not only benefit offshore exchanges but also enhance consumer protection in India through increased regulatory oversight. Earlier warnings from Indian cryptocurrency exchanges foresaw users shifting to decentralized exchanges or non-compliant services due to the New Delhi government's taxation policy on crypto. In response, CoinDCX announced incentives for customers transferring their crypto assets from global exchanges to its India-based platform. Taking to social media on Wednesday, CoinDCX founder Sumit Gumpta stated:”This is a defining moment for [virtual digital assets] in India, and we're dedicated to facilitating a seamless and secure transition for investors navigating these changes.”   

news
Web3 & Enterprise·

Mar 08, 2024

The Seoul AI Innovation Tour 2024 comes to an end, sharing insights on digital finance

The Seoul AI Innovation Tour 2024 – scheduled from March 5 to 7 – came to an end yesterday, Korean media outlet ETNews reported. Under the theme of “Navigating the Future: Unveiling Seoul’s Prowess in AI Innovation,” the event highlighted Seoul’s potential as an AI technology hub and facilitated discussions on global cooperation to foster the Asian fintech and digital asset industry.  The event was jointly hosted by the Korea Fintech Industry Association (KFIA) and The Asian Banker, a Singapore-based consultancy in finance and banking services. Several major Asian banks and fintech industry insiders attended the event, including officials from Permata Bank in Malaysia and Bank SinoPac in Taiwan. Photo by Headway on UnsplashLee Keun-ju, President of the KFIA, stated in his opening speech that cutting-edge technologies such as AI will further accelerate innovation in financial services. He also emphasized how the Korean financial and fintech industry developed at a breakneck speed over the past decade, introducing the landscape of the Korean fintech industry to bank officials.  Sharing insights on fintech and digital asset industry In the initial session, KFIA officials delivered speeches on the current financial environment of Korea and the association’s contributions to the local fintech industry. The following discussions revolved around development strategies for the fintech industry and collaborative efforts between the association and government institutions. In the later part of the event, leading local fintech insiders discussed the outlook of the security token offering (STO) and digital asset industry, sharing strategies to broaden their businesses to overseas markets. 

news
Policy & Regulation·

May 15, 2024

Falcon Labs fined in settlement with CFTC

U.S. regulator, the Commodity Futures Trading Commission (CFTC), has fined Seychelles-headquartered crypto prime brokerage Falcon Labs as part of an overall settlement with the company.  The CFTC had found that the company had operated as an unregistered futures commission merchant (FCM) and furthermore, that it had enabled access to digital asset exchanges without the requisite registration.Photo by Joshua Hoehne on UnsplashSettlement termsIn a press release published to its website on May 13, the CFTC set out the nature of its settlement with Falcon Labs. The parties have agreed that Falcon Labs must discontinue its activities in acting as an unregistered FCM, with particular emphasis on it having provided U.S. individuals with access to digital asset derivatives trading.  Furthermore a fine of $1,179,008 has been applied in disgorgement and in addition, Falcon will have to pay a civil monetary penalty of $589,504. These penalties have been significantly reduced by comparison with the CFTCs original ask, on the basis that Falcon Labs cooperated fully with the CFTC’s Division of Enforcement over the course of the regulator’s investigative process into the activities of the company. In its statement the regulator set out its intent relative to enforcement going forward. Ian McGinley, the CFTC’s Director of Enforcement, stated:”The CFTC is taking the fight one step further by, for the first time, charging an intermediary that inappropriately facilitated access to those exchanges. Today’s action highlights that the CFTC will not hesitate to charge any entities—exchanges or intermediaries—who are providing customers access to digital asset products and services that require registration but have failed to appropriately register.” McGinley added that “the CFTC’s enforcement program has made clear it will not tolerate digital asset exchanges that fail to register with the CFTC or comply with the agency’s rules that maintain integrity in the derivatives markets.” No admission of guiltIn responding to the CFTCs original complaint, Falcon Labs tried to up the ante in terms of compliance. It moved to improve customer identification controls. As a consequence of its market position as a trading intermediary Falcon Labs enabled customer trading on a number of digital asset exchange platforms.  That activity included facilitating U.S.-based institutional customers relative to crypto derivatives trading. It allowed its own account with various digital asset trading platforms to be used, through a system of sub-accounts, by its customers, oftentimes without adequate customer information having been sought. In reaching this settlement with the CFTC Falcon Labs has not made any admission of guilt relative to the regulator’s findings. Alongside paying the agreed upon fines, it will voluntarily agree to adhere to the implementation of improved controls and to withhold its services from user groups that are deemed to be restricted, including all U.S. nationals. Taking to the X social media platform to comment on the matter, Mike Sellig, a partner at New York-based law firm Willkie Farr & Gallagher, claimed that the settlement demonstrated that the CFTC was following in the footsteps of the Securities and Exchange Commission (SEC), establishing “a body of widely applicable precedent.”

news
Loading