Bybit suspends services in India amid regulatory blowback

The Singapore Police Force (SPF) and the Cyber Security Agency of Singapore (CSA) have jointly issued an advisory to raise awareness about the escalating use of cryptocurrency drainers in cyberattacks. The advisory aims to inform citizens about the threat and provide recommendations to protect against such attacks, with a specific emphasis on utilizing hardware wallets for enhanced security. Cryptocurrency drainers represent a form of malware that specifically targets crypto wallets. These malicious tools are often employed in phishing attacks to illicitly extract funds from users' wallets without proper authorization.Photo by Junrui Wu on UnsplashDrainer-as-a-service threatOf particular concern are commercial crypto draining kits, which empower less experienced cyber-criminals with sophisticated malware at no upfront costs. Operating on a drainer-as-a-service (DaaS) model, attackers share a predetermined percentage of the stolen funds with the service provider. The SPF and CSA underscored that crypto-drainer-related attacks typically originate from phishing campaigns. These campaigns commonly involve infiltrating verified social media accounts or dispatching fraudulent emails to users from compromised databases of major service providers. Unsuspecting victims who click on phishing links are redirected to counterfeit trading websites that prompt them to connect their Web3 wallets. Subsequently, a malicious smart contract is injected into the victim's system, enabling hackers to withdraw funds without additional authorization. MS Drainer and Inferno DrainerWhile no such attacks have been reported in Singapore to date specifically, the advisory acknowledges the rising recognition of this threat among hackers. Notably, an off-the-shelf crypto drainer called MS Drainer contributed to hackers stealing $59 million worth of cryptocurrency in 2023. Last month, Singapore-based cyber security firm Group-IB produced a report concerning the Inferno Drainer operation. According to the company’s research, the malware operation led to the theft of $80 million in digital assets globally, until the developers behind it shut it down last November. In December, the Pink Drainer hacking group notched up another victim, to the tune of $4.4 million in LINK tokens. Last week blockchain security firm Scam Sniffer reported that $10 million in digital assets had been stolen in phishing-related incidents over the course of just five days. Hardware walletsTo counteract these threats, Singapore authorities recommend the use of hardware wallets as a security measure against wallet drainer attacks. Additionally, the advisory instructs crypto investors to conduct thorough research before engaging with cryptocurrency services or platforms. Singaporeans are encouraged to report any suspicious incidents related to crypto drainers or phishing attacks to both relevant authorities and crypto service providers. In the event of a security breach, victims are urged to revoke any suspicious token approvals and promptly transfer their remaining funds to a different, secure wallet address to prevent further losses. This proactive approach aims to empower individuals with the knowledge and tools needed to navigate the risks associated with crypto drainers and foster cybersecurity awareness within the cryptocurrency ecosystem. As the threat landscape evolves relative to digital assets, this advisory serves as a valuable resource to educate citizens about the risks posed by crypto drainers.  

South Korean digital marketing company FSN’s subsidiary Fingerlabs has been selected as a tenant of the city of Busan’s Blockchain Offshore Firm Development Center. The company confirmed that it moved in recently on Jan. 2.Photo by Héctor J. Rivas on UnsplashFostering growth and collaborationThe Blockchain Offshore Firm Development Center is part of a project conducted by the Korea Internet & Security Agency (KISA) and the Ministry of Science and ICT and operated by Busan to create a special corporate cluster of blockchain firms, thus revitalizing the blockchain industry and nurturing a sustainable industrial ecosystem. "We are excited to be a new tenant at the Blockchain Offshore Firm Development Center,” said Kim Dong-hoon, CEO of Fingerlabs. “We will share our business know-how with other tenants and commit to joint growth. We will also actively participate in various programs provided by the center to contribute to Busan's leap into becoming a digital economy city." Various companies operating blockchain-related businesses outside of Busan were selected to be a part of the development center after a comprehensive overall evaluation of factors like technological facets, marketability and contributions to innovation. Corporate residents have access to various infrastructure and benefits, including facilities and programs at the Busan Blockchain Venture Convention, also dubbed “b-space”. Fingerlabs plans to participate in various programs led by the public sector such as councils, seminars and conferences to help Busan – notably the first regulation-free special zone for blockchain businesses in South Korea – foster its digital economy based on its expertise in the field of Web3.  Innovating Web3 solutionsFingerlabs has grown to become one of the country’s major blockchain companies through its varied services and products, which are provided to corporate clients like SK Planet, Lotte Home Shopping and SK Networks. In particular, it recently launched Bling, a participatory Web3 membership platform that allows businesses to create and manage NFTs that are linked to membership-only benefits. The company also operates a Web3 content distribution hub called Xclusive and Favorlet, an NFT wallet and customer management service. 

Crypto custodian Korea Digital Asset (KODA) has seen its custody assets exceed the $6 billion mark, equivalent to about KRW 8 trillion, according to game media outlet Kyunghyang Games.  Established in November 2020 through a collaboration between KB Bank, the blockchain venture capital firm Hashed and blockchain tech company HatchLabs, KODA provides custodial services for crypto assets. A custodial service provider refers to a third-party institution that manages virtual assets on behalf of clients. Several big banks overseas such as Goldman Sachs and Citibank provide asset custodial services. Photo by Chris Liverani on UnsplashA leading provider of crypto asset custodial services Having been offering one-stop crypto asset custodial services for companies and institutional clients since March 2021, KODA has become a notable virtual asset business operator in South Korea with it being registered with the Financial Intelligence Unit (FIU). By the end of June 2023, KODA made up nearly 80% of the local custodial service market share, per FIU data. At the time, out of the total KRW 2.9 trillion in crypto assets held by 49 local custodial service providers registered with the FIU, KRW 2.3 trillion was managed by KODA. By December 2023, KODA announced it was managing KRW 8 trillion in crypto assets, with over 200 custodial wallets and about 50 institutional clients using its services.  Bracing for the potential approval of spot bitcoin ETFs in KoreaThe demand for crypto asset custodial services is expected to rise as Korea’s ruling and opposition parties are pledging to integrate crypto assets into the traditional financial system, leading up to the general election in April. Major political parties are considering the possibility of allowing transactions of spot bitcoin ETFs and legalizing investment in crypto assets by private companies. Cho Jin-seok, CEO of KODA, said that the integration of digital assets into the traditional financial system is an unstoppable global trend that no one can resist, and that KODA will be able to serve as a key crypto infrastructure if the local financial authority approves trading spot bitcoin ETFs.  Kim Seo-joon, CEO of Hashed, stressed the significance of preparing for the potential approval of spot bitcoin ETF transactions, noting how a number of spot bitcoin ETFs were released in the U.S. right after the approval. He added that KODA’s commitment to regulatory compliance and technological expertise would make it an essential partner in introducing virtual asset ETFs to the local market.