Japan’s Largest Airline Opens NFT Marketplace

Akira ransomware, responsible for stealing $42 million from over 250 organizations across North America, Europe and Australia in just a year, is now targeting businesses in Singapore. In response, Singaporean authorities have issued a joint advisory warning local businesses about the increasing threat posed by a variant of this ransomware.Photo by Mike Enerio on UnsplashAlert follows complaintsThe alert follows multiple complaints from victims, prompting agencies like the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF) and the Personal Data Protection Commission (PDPC) to take action. These agencies emphasize the urgency of recognizing and combating this threat. How Akira operatesAkira affiliates employ various techniques to infiltrate a victim's network. These include exploiting known vulernabilities. For example, that could mean the targeting of services like Cisco virtual private networks (VPNs) that have been configured without multi-factor authentication (MFA). Another approach that the ransomware incorporates is attacking external-facing services such as the Remote Desktop Protocol (RDP) via brute force. Social engineering is another tool within its repertoire. This involves tricking victims into downloading malicious software or entering credentials on phishing websites. There is a marketplace for compromised credentials in the dark web. Akira also relies on such data, acquiring it from access brokers who sell network access.  Once inside a network, Akira affiliates often create new domain accounts to maintain persistent access, even after reboots. They use numerous tools to steal user credentials, escalate privileges and spread throughout the network. Detection and prevention measuresThe Singaporean advisory outlines several strategies for detecting, deterring and neutralizing Akira attacks. Authorities strongly advise against paying ransoms, on the basis that doing so does not guarantee data recovery or prevent future attacks. Authorities also warn that paying ransoms can encourage further attacks. The FBI has noted that Akira operators do not contact victims. Instead, they expect victims to initiate contact. Payment in BitcoinThe advisory outlines how Bitcoin is implicated in the ransomware scam. It states:”Ransom payments are requested in Bitcoin, which are directed to cryptocurrency wallet addresses specified by the affiliates. The TOR site (.onion) where victims contact the affiliates, contains stolen information and a list of the affected organisations.” It’s not the first time that Singaporean authorities have issued warnings that have implicated Bitcoin and crypto. In January, the CSA and SPF, in a joint advisory, suggested that people should use hardware wallets in an effort to guard against crypto-related malware and phishing attacks. A number of weeks prior to that, Singapore’s former Prime Minister, Lee Hsien Loong, took to Facebook to issue a warning with regard to a crypto scam that involved the use of deceptive content generated using artificial intelligence (AI). Mitigation techniquesBusinesses are being urged by the authorities to adopt best practices to mitigate the Akira ransomware threat. They suggest the implementation of a recovery plan alongside the use of multi-factor authentication (MFA) in order to secure data and the access to that data.  They also suggest filtering network traffic as it helps in identifying and blocking malicious activities. Meanwhile, disabling unused ports and hyperlinks curbs the risk further as it reduces the attack surface. Lastly, the authorities suggested the use of system-wide encryption to protect data even if it is accessed by unauthorized entities.

In a stride towards global expansion Alchemy Pay, the cryptocurrency payment gateway based in Singapore, has secured its inaugural Money Transmitter License in the United States.Photo by Jametlene Reskp on Unsplash Arkansas licenseThe license, issued by the Arkansas Securities Department on September 13, enables Alchemy Pay to provide a comprehensive suite of financial services, including crypto-to-fiat transactions, within the state of Arkansas. The license was issued to Alchemy Pay, Inc., the crypto payments firm’s US entity which was first registered as a corporation in the US in October of last year.This milestone represents Alchemy Pay’s inaugural foray into the US market and demonstrates the company’s intent in terms of regulatory adherence. The Singapore-based firm now joins the ranks of authorized cryptocurrency enterprises operating in Arkansas, including industry giants like Coinbase, Jack Dorsey’s Block, MoonPay, and the bitFlyer exchange. Global expansionIn a press release published to the firm’s website on Thursday, Robert McCraken, Alchemy Pay’s Ecosystem Lead, underscored the meticulous efforts invested in securing licenses across diverse global jurisdictions, emphasizing the company’s unwavering dedication to compliance.It’s evident that the company is pursuing a strategy to globalize its market offering. Alchemy Pay has previously obtained operating licenses in strategic markets such as Indonesia and Lithuania, while it is making ongoing efforts to secure Money Transmitter Licenses in additional US states.In April it secured $10 million in funding from Singapore’s DWF Labs, with the intention of using the capital to expand its business in South Korea. The following month it enabled a rupee-denominated on-ramp using India’s UPI real-time payments system. In July it announced a collaboration with Checkout.com, enabling transactions between fiat currency and cryptocurrency over Checkout.com’s Visa and Mastercard channels.Since its establishment in 2017, Alchemy Pay has continuously worked on its mission of bridging the gap between fiat and cryptocurrency economies. The platform currently facilitates seamless transactions between traditional fiat currencies like the US dollar and leading cryptocurrencies such as Bitcoin and Ethereum. It boasts a presence in 173 countries, including Australia, Canada, Hong Kong, the United Arab Emirates (UAE), and India. The Singapore-based payments gateway has emerged as a key player in the global digital payment landscape. Cracking the US marketThis milestone in Arkansas aligns with Alchemy Pay’s broader strategy to penetrate the vast US market, delivering its services to American users and furthering its mission to harmonize fiat and cryptocurrency payments. The development closely follows Alchemy Pay’s recent strategic collaborations with global payment titans Mastercard and Visa, cementing its status as an influential contributor to the rapidly evolving digital payment sector.According to an updated version of its roadmap published in August, the company also plans to offer a digital banking service before the end of the year. That offering would enable users to open bank accounts directly through the Alchemy Pay platform once collaborations are firmly in place with EU and UK banks.The acquisition of the Money Transmitter License in Arkansas signifies a pivotal moment in Alchemy Pay’s ambitious US expansion agenda. It’s likely to be a crucial stepping stone for the firm in positioning itself as a prominent catalyst in the seamless integration of cryptocurrencies into mainstream financial systems. This achievement not only propels Alchemy Pay’s global presence but also reinforces its efforts to ensure safe, compliant, and accessible cryptocurrency-based financial services.

Major investment entities linked to the Abu Dhabi government increased their exposure to Bitcoin in the third quarter, according to newly released data. These moves came ahead of a broader decline in the digital asset market amid shifting macroeconomic conditions in the U.S.Photo by Kanchanara on UnsplashInstitutional accumulationThe Abu Dhabi Investment Council (ADIC), a subsidiary of Mubadala Investment Company, more than tripled its holdings in BlackRock’s iShares Bitcoin Trust ETF (IBIT) during the third quarter, increasing its position from 2.4 million to nearly 8 million shares, Bloomberg reported. An ADIC spokesperson told Bloomberg that the organization views Bitcoin as “a store of value similar to gold,” and described the allocation as “part of a long-term diversification strategy.” Other UAE-based conglomerates are also maintaining sizable Bitcoin positions. The Royal Group, which is linked to the Abu Dhabi royal family, holds around 6,450 BTC, according to a Crypto Briefing report citing Arkham data. The assets were accumulated through the group’s majority-owned subsidiary, Citadel Mining. Regulatory and infrastructure developmentsThe UAE’s efforts to position digital assets as a driver of economic growth are also reflected in its regulatory framework. A recent Global Digital Assets Report by the Global Finance & Technology Network (GFTN) identified the UAE as one of seven jurisdictions worldwide whose crypto-exchange rules meet all three key standards for AML/CFT compliance: know-your-customer (KYC) and ID verification, suspicious transaction reporting, and implementation of the Financial Action Task Force (FATF) Travel Rule. The report characterized the UAE’s approach as “federated oversight with zone-specific AML regimes.” Responsibilities are divided among the Securities and Commodities Authority (SCA) at the federal level, the Virtual Assets Regulatory Authority (VARA) in Dubai, and the Financial Services Regulatory Authority (FSRA) of the Abu Dhabi Global Market (ADGM). In decentralized finance (DeFi), VARA has issued specific rulebooks covering activities such as lending and borrowing. ADGM has introduced DLT Foundations Regulations to provide legal structures for decentralized autonomous organizations (DAOs), while DeFi operations within the jurisdiction still require authorization from the FSRA. In addition to regulatory developments, the UAE is also advancing the practical deployment of digital asset technologies. In the payments sector, Abu Dhabi Airport has signed a memorandum of understanding (MOU) with Al Hail Holding to pilot stablecoin payment options and digital wallets for travelers, according to Cryptopolitan. Bitcoin declining below $87KThe buildup in institutional exposure has occurred against a backdrop of declining market prices. Bitcoin (BTC) reached a peak of $126,080.00 on Oct. 6 before dropping to roughly $87,000 as of Nov. 21, its lowest level since April 21. Technical indicators show that Bitcoin has fallen below both its 50-day and 200-day moving averages. IBIT has followed a similar trajectory. After closing the third quarter at $65 per share, the ETF rose to $71 on Oct. 6 before falling to $48.96 by Nov. 20. Two days before that, the fund recorded a net outflow of $513.47 million, the largest in its history, according to data from Trader T. Reuters reported that the recent weakness in Bitcoin and other risk assets is tied to the U.S. Federal Reserve’s cautious stance on rate cuts amid persistent inflation pressures. That concern was reinforced on Nov. 20 when the U.S. Bureau of Labor Statistics released September nonfarm payrolls data that had been delayed by the federal government shutdown, showing a figure of 119,000 against the market forecast of 53,000. The stronger-than-expected labor reading has reduced expectations for a rate cut next month, adding pressure to both equities and Bitcoin.