Frame-14

Privacy Ninja

        • DATA PROTECTION

        • CYBERSECURITY

        • Secure your network against various threat points. VA starts at only S$1,000, while VAPT starts at S$4,000. With Price Beat Guarantee!

        • API Penetration Testing
        • Enhance your digital security posture with our approach that identifies and addresses vulnerabilities within your API framework, ensuring robust protection against cyber threats targeting your digital interfaces.

        • On-Prem & Cloud Network Penetration Testing
        • Boost your network’s resilience with our assessment that uncovers security gaps, so you can strengthen your defences against sophisticated cyber threats targeting your network

        • Web Penetration Testing
        • Fortify your web presence with our specialised web app penetration testing service, designed to uncover and address vulnerabilities, ensuring your website stands resilient against online threats

        • Mobile Penetration Testing
        • Strengthen your mobile ecosystem’s resilience with our in-depth penetration testing service. From applications to underlying systems, we meticulously probe for vulnerabilities

        • Cyber Hygiene Training
        • Empower your team with essential cybersecurity knowledge, covering the latest vulnerabilities, best practices, and proactive defence strategies

        • Thick Client Penetration Testing
        • Elevate your application’s security with our thorough thick client penetration testing service. From standalone desktop applications to complex client-server systems, we meticulously probe for vulnerabilities to fortify your software against potential cyber threats.

        • Source Code Review
        • Ensure the integrity and security of your codebase with our comprehensive service, meticulously analysing code quality, identifying vulnerabilities, and optimising performance for various types of applications, scripts, plugins, and more

        • Email Spoofing Prevention
        • Check if your organisation’s email is vulnerable to hackers and put a stop to it. Receive your free test today!

        • Email Phishing Excercise
        • Strengthen your defense against email threats via simulated attacks that test and educate your team on spotting malicious emails, reducing breach risks and boosting security.

        • Cyber Essentials Bundle
        • Equip your organisation with essential cyber protection through our packages, featuring quarterly breached accounts monitoring, email phishing campaigns, cyber hygiene training, and more. LAUNCHING SOON.

Hacker Forum Contest Gives $100K For New Ways to Steal Digital Assets

Hacker Forum Contest Gives $100K For New Ways to Steal Digital Assets

The administrator of a Russian-speaking cybercriminal forum has held a contest for the community to share uncommon methods to target cryptocurrency-related technology.

Members of the forum had one month to submit their papers and enter a competition that promised more than $100,000 in prizes.

Eyes on digital assets

The announcement came on April 20 and asked for research papers that explored various ways to steal private keys and cryptocurrency wallets, uncommon mining software, smart contracts, or non-fungible tokens (NFTs).

In a report today, threat intelligence company Intel 471 notes that after the initial post from the administrator, another forum member added $15,000 to the initial prize pool.

Incentivized by the increased prize value, multiple members of the community started to share their papers, Intel 471 says.

“One entry looked at manipulating APIs from popular cryptocurrency-related services or decentralized-file technology in order to obtain private keys to cryptocurrency wallets” – Intel 471

Another forum user detailed how to create a phishing site for grabbing the keys to the cryptocurrency wallets and the corresponding seed phrases, which are essential to recovering access to the digital wallet.

Focusing on cryptocurrency and associated technology makes sense these days. The rising price of digital coins and the explosion of the NFT market are too attractive for cybercriminals to pass.

Also Read: 4 Best Practices On How to Use SkillsFuture Credit

Just like security researchers, cybercriminals also make an effort to stay at the top of their game by updating their methods and techniques or developing new ones.

Various underground forums have sponsored such contests before and even cybercriminal groups pitched in to gain new knowledge that could help with their attacks.

Intel 471 says that past calls for papers on two popular cybercriminal forums covered topics ranging from botnets, and ATM or PoS fraud, to fake GPS signals.

To spark interest, anyone submitting their paper was promised $50, while the “best research” got up to $10,000.

Ransomware groups like REvil and Lockbit have done the same, in an effort to find new avenues of attack and increase their profits.

Also Read: 3 Reasons Why You Must Take a PDPA Singapore Course

Although these contests are not novelty, they show how cybercriminals have taken a business-like approach to their activity and also look for innovative or less common methods to target organizations and cash in as big as possible.

0 Comments

KEEP IN TOUCH

Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection

REPORTING DATA BREACH TO PDPC?

We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.
×

Hello!

Click one of our contacts below to chat on WhatsApp

× Chat with us