Hong Kong leads East Asia in crypto transaction growth

Akira ransomware, responsible for stealing $42 million from over 250 organizations across North America, Europe and Australia in just a year, is now targeting businesses in Singapore. In response, Singaporean authorities have issued a joint advisory warning local businesses about the increasing threat posed by a variant of this ransomware.Photo by Mike Enerio on UnsplashAlert follows complaintsThe alert follows multiple complaints from victims, prompting agencies like the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF) and the Personal Data Protection Commission (PDPC) to take action. These agencies emphasize the urgency of recognizing and combating this threat. How Akira operatesAkira affiliates employ various techniques to infiltrate a victim's network. These include exploiting known vulernabilities. For example, that could mean the targeting of services like Cisco virtual private networks (VPNs) that have been configured without multi-factor authentication (MFA). Another approach that the ransomware incorporates is attacking external-facing services such as the Remote Desktop Protocol (RDP) via brute force. Social engineering is another tool within its repertoire. This involves tricking victims into downloading malicious software or entering credentials on phishing websites. There is a marketplace for compromised credentials in the dark web. Akira also relies on such data, acquiring it from access brokers who sell network access.  Once inside a network, Akira affiliates often create new domain accounts to maintain persistent access, even after reboots. They use numerous tools to steal user credentials, escalate privileges and spread throughout the network. Detection and prevention measuresThe Singaporean advisory outlines several strategies for detecting, deterring and neutralizing Akira attacks. Authorities strongly advise against paying ransoms, on the basis that doing so does not guarantee data recovery or prevent future attacks. Authorities also warn that paying ransoms can encourage further attacks. The FBI has noted that Akira operators do not contact victims. Instead, they expect victims to initiate contact. Payment in BitcoinThe advisory outlines how Bitcoin is implicated in the ransomware scam. It states:”Ransom payments are requested in Bitcoin, which are directed to cryptocurrency wallet addresses specified by the affiliates. The TOR site (.onion) where victims contact the affiliates, contains stolen information and a list of the affected organisations.” It’s not the first time that Singaporean authorities have issued warnings that have implicated Bitcoin and crypto. In January, the CSA and SPF, in a joint advisory, suggested that people should use hardware wallets in an effort to guard against crypto-related malware and phishing attacks. A number of weeks prior to that, Singapore’s former Prime Minister, Lee Hsien Loong, took to Facebook to issue a warning with regard to a crypto scam that involved the use of deceptive content generated using artificial intelligence (AI). Mitigation techniquesBusinesses are being urged by the authorities to adopt best practices to mitigate the Akira ransomware threat. They suggest the implementation of a recovery plan alongside the use of multi-factor authentication (MFA) in order to secure data and the access to that data.  They also suggest filtering network traffic as it helps in identifying and blocking malicious activities. Meanwhile, disabling unused ports and hyperlinks curbs the risk further as it reduces the attack surface. Lastly, the authorities suggested the use of system-wide encryption to protect data even if it is accessed by unauthorized entities.

Shots Fired in New OKX Ad CampaignGlobal crypto spot and derivatives exchange OKX has launched a daring ad campaign that sets US-based rival exchange Coinbase firmly in its cross hairs.The formerly Chinese and now Seychelles-based exchange has pushed out a global ad campaign along the following theme: “The system doesn’t need an upgrade; it needs a rewrite.” The ads were launched on Tuesday, pointing out the ills of the traditional, centralized financial system.Photo by Merakist on UnsplashCrypto exchange rivalryThe advert doesn’t explicitly call out its rival, Coinbase. However, it is nuanced in taking a subtle dig at the US-based exchange. Exactly two months prior, on March 9, Coinbase released its own ad campaign. Coinbase claimed in its ad that “it’s time to update the system,” with OKX’s subsequent commercial having been carefully worded to poke fun at the Coinbase commercial.With a number of high profile epic failures of crypto businesses over the past twelve months, including the fall of FTX, the remaining exchanges in the business have been tripping over themselves in an effort to convince the alternative asset-investing public that theirs is the safest platform upon which they can securely trade.In its sixty second commercial, OKX poses the question “why don’t we change everything?”, set up by its claim that the conventional finance system is broken.The last of the big spendersThere’s been a notable change of strategy in the marketing activities of crypto businesses since the height of the last crypto bull run. Gone are the marketing excesses exemplified most by the now bankrupt FTX exchange.FTX demonstrated itself to be a profligate spender on all manner and means of marketing, particularly during 2021 and 2022. It paid Wall Street investor and Shark Tank star Kevin O’Leary $15 million to be a spokesperson for the company. Similar deals were struck with a range of celebrities including former NBA star Shaquille O’Neal, NFL stars such as former New England Patriots quarterback, Tom Brady, and a host of others.At the height of its marketing opulence, the fraudulently run firm signed a $135 million sponsorship deal that provided it with the naming rights to the home stadium of the NBA’s Miami Heat. 2022's Super Bowl, one of the world’s largest single marketing opportunities, saw FTX and others pay out big on advertising spend.By contrast, this year’s Super Bowl was almost a complete washout as far as crypto business participation was concerned. Meanwhile, all of the celebrities that featured in FTX’s marketing activities have found themselves the subject of multi-million dollar class action lawsuits filed by FTX creditors.A more sobering marketing strategyDespite the reputational damage that crypto has suffered due to these high profile failures, firms like OKX and Coinbase have continued to maintain a responsible level of advertising and marketing activity.That’s best exemplified by OKX’s ongoing marketing relationships with McLaren’s Formula One racing team and Manchester City Football Club. In March, US-based crypto exchange Kraken announced a marketing partnership with the Williams Formula One racing team.Crypto.com is probably the only crypto firm that spent excessively during the last bull run yet has continued to maintain a relatively high level of marketing activity. Much of that may have been due to commitments it had made during a more buoyant market. Notwithstanding that, the firm did fall foul of the UK advertising regulator, who banned its NFT promotion in December 2022.

Korea considers legal recognition of virtual assets as trust assets for investor protectionSouth Korea’s Ministry of Justice (MOJ) is assessing whether customers’ virtual assets on cryptocurrency exchanges should be legally recognized as trust assets. This classification would give users priority in claiming their virtual assets in case of an exchange’s bankruptcy, thus strengthening investor protection. There’s a noted concern about potential disputes in such bankruptcy situations, as users’ digital assets are typically considered to be in the custody or storage of these platforms.Photo by Daniel Bernard on UnsplashLegal study by Seoul National UniversityAccording to a Tuesday report by local news outlet ChosunBiz, citing industry and legal sources, the MOJ has initiated a legal study on this subject. The research is being conducted by the Seoul National University R&DB Foundation, which started the project earlier this month.Through this study, the MOJ is expected to examine the legal classification of cryptocurrency as property. This review is significant because, for cryptocurrencies to be held in a trust, they must be legally recognized as property. Meanwhile, the upcoming Virtual Asset User Protection Act, set to come into effect next July, mandates that only cash deposits made by users be segregated from the assets of the exchange itself.In Korea, under the current provisions of the Capital Markets Act, virtual assets are not recognized as being held in a trust. Instead, staked cryptocurrencies are seen as being under custodial management or storage. In such arrangements, only a debtor-creditor relationship concerning virtual assets is acknowledged, differing from the legal framework of a trust.Prioritization of rightsIf a cryptocurrency exchange becomes insolvent and enters liquidation, the current legal framework could end up prioritizing the rights of the exchange’s creditors or shareholders over those of the crypto investors. This situation has faced criticism for its inadequate protection of investors. However, if the crypto assets were considered to be held in trusts, it would enable users to acquire “rights to foreclose outside bankruptcy.” This means users would have the right to receive priority reimbursement for their crypto assets, offering them a higher level of protection in the event of an exchange’s bankruptcy.Regarding this development, an official from the MOJ said that while the study is a fundamental legal review focused on exploring ways to protect users through the application of trusts for various cryptocurrency transactions, including those involving decentralized finance (DeFi), it is too early to provide specific details at this stage.