Tiger Brokers subsidiary awarded crypto license in Hong Kong

Akira ransomware, responsible for stealing $42 million from over 250 organizations across North America, Europe and Australia in just a year, is now targeting businesses in Singapore. In response, Singaporean authorities have issued a joint advisory warning local businesses about the increasing threat posed by a variant of this ransomware.Photo by Mike Enerio on UnsplashAlert follows complaintsThe alert follows multiple complaints from victims, prompting agencies like the Cyber Security Agency of Singapore (CSA), the Singapore Police Force (SPF) and the Personal Data Protection Commission (PDPC) to take action. These agencies emphasize the urgency of recognizing and combating this threat. How Akira operatesAkira affiliates employ various techniques to infiltrate a victim's network. These include exploiting known vulernabilities. For example, that could mean the targeting of services like Cisco virtual private networks (VPNs) that have been configured without multi-factor authentication (MFA). Another approach that the ransomware incorporates is attacking external-facing services such as the Remote Desktop Protocol (RDP) via brute force. Social engineering is another tool within its repertoire. This involves tricking victims into downloading malicious software or entering credentials on phishing websites. There is a marketplace for compromised credentials in the dark web. Akira also relies on such data, acquiring it from access brokers who sell network access.  Once inside a network, Akira affiliates often create new domain accounts to maintain persistent access, even after reboots. They use numerous tools to steal user credentials, escalate privileges and spread throughout the network. Detection and prevention measuresThe Singaporean advisory outlines several strategies for detecting, deterring and neutralizing Akira attacks. Authorities strongly advise against paying ransoms, on the basis that doing so does not guarantee data recovery or prevent future attacks. Authorities also warn that paying ransoms can encourage further attacks. The FBI has noted that Akira operators do not contact victims. Instead, they expect victims to initiate contact. Payment in BitcoinThe advisory outlines how Bitcoin is implicated in the ransomware scam. It states:”Ransom payments are requested in Bitcoin, which are directed to cryptocurrency wallet addresses specified by the affiliates. The TOR site (.onion) where victims contact the affiliates, contains stolen information and a list of the affected organisations.” It’s not the first time that Singaporean authorities have issued warnings that have implicated Bitcoin and crypto. In January, the CSA and SPF, in a joint advisory, suggested that people should use hardware wallets in an effort to guard against crypto-related malware and phishing attacks. A number of weeks prior to that, Singapore’s former Prime Minister, Lee Hsien Loong, took to Facebook to issue a warning with regard to a crypto scam that involved the use of deceptive content generated using artificial intelligence (AI). Mitigation techniquesBusinesses are being urged by the authorities to adopt best practices to mitigate the Akira ransomware threat. They suggest the implementation of a recovery plan alongside the use of multi-factor authentication (MFA) in order to secure data and the access to that data.  They also suggest filtering network traffic as it helps in identifying and blocking malicious activities. Meanwhile, disabling unused ports and hyperlinks curbs the risk further as it reduces the attack surface. Lastly, the authorities suggested the use of system-wide encryption to protect data even if it is accessed by unauthorized entities.

Galaxia Moneytree partners with Charzin to integrate security tokens into EV charging systemsKorean financial platform services provider Galaxia Moneytree announced on Tuesday (local time) that it has signed a memorandum of understanding (MOU) with Charzin, a company that specializes in developing infrastructure for charging electric vehicles (EVs), to design a security token offering (STO) platform that issues security tokens for optimizing the process of EV charging. This includes securing installation sites and facilities for EV charging stations.Photo by Andrew Roberts on UnsplashMerging blockchain and transportationHeadquartered in Daegu, Charzin is notable for its app EVZ, which uses a blockchain-based sharing module to connect EV drivers and EV charger owners for faster charging and optimized revenue acquisition.Galaxia Moneytree will be responsible for establishing and operating the STO platform, while Charzin will handle business development, support for the launch of security token products and construction of EV charging facilities.The signing ceremony for the MOU took place at Galaxia Moneytree’s headquarters in Seoul on Monday with Galaxia Moneytree CEO Shin Dong-hoon and Charzin CEO Choi Young-seok in attendance. The two companies also discussed plans to launch other products that combine finance and EV charging infrastructure.“In addition to our ongoing efforts, we plan to design STO products for various underlying assets, such as renewable energy and aviation assets,” Galaxia Moneytree said. The company recently formed an aviation asset tokenization consortium in September.Ongoing partnershipsMeanwhile, Charzin recently announced its partnership with Hi Investment and Securities to venture into the security token business. The firms plan to raise funds for developing EV charging infrastructure by issuing security tokens and subsequently share the profits from running such projects.

Dunamu reports Q3 slump amid interest rate hikes and economic slowdownDunamu, the operator of South Korea’s largest cryptocurrency exchange Upbit, posted a lackluster performance in this year’s Q3 due to a decrease in trading volume caused by ongoing interest rate hikes and an economic downturn.Photo by Алекс Арцибашев on UnsplashLagging performanceAccording to the Financial Supervisory Service (FSS), Dunamu’s consolidated operating revenue in Q3 was KRW 193 billion (approximately $150 million), marking a 29% decrease from the same period a year earlier (KRW 271.9 billion). Operating income came in at KRW 101.8 billion, and net profit was KRW 29.5 billion, down 39.6% and 81.6% from the same period last year, respectively.This underwhelming financial performance reflects the sluggish crypto market amid the nation’s economic downturn and the U.S. Federal Reserve’s interest rate hikes. The decrease in the exchange’s net profit in particular can be attributed to a loss in the valuation of crypto assets due to crypto price declines compared to the previous quarter.Positive outlookHowever, with the expected approval of the spot bitcoin exchange-traded fund (ETF) next year and the next Bitcoin halving, the market outlook is expected to improve gradually. Despite the current market conditions, Dunamu plans to continuously promote the mainstream adoption of blockchain services and explore new business ventures.“We will make efforts to revitalize the blockchain ecosystem and create an advanced investment environment,” Dunamu said. “We will strive to offer innovative services building on our unique technological capabilities.”