Connect with us

TECHNOLOGY

You’ve Got Spam Mail: APAC accounts for a quarter of global malicious emails in 2022

September 7, 2022 2:05 p.m.

Spam mails have evolved since the first one was sent back in 1978. Its evolutions span from the techniques, tactics, and the latest trends cybercriminals piggyback on to make it more legitimate-looking and urgent-sounding – an effective formula to prey upon an unsuspecting user.

One of Kaspersky’s elite researchers, Noushin Shabab, probed into the spam threat landscape in Asia Pacific (APAC) this year to answer – what if emails do not get opened?

Shabab, presented in front of selected media from the region during Kaspersky’s 8th APAC Cyber Security Weekend, revealed that the region received 24% of the global malicious spam mails being detected and blocked by Kaspersky solutions. This means one in four junk electronic messages were delivered to computers in APAC.

Noushin Shabab, Senior Security Researcher for Global Research and Analysis Team (GReAT) at Kaspersky  

Malicious spam is not a technologically complex attack, but when done with sophisticated social engineering techniques, it poses a severe threat to individuals and enterprises alike. These junk mails are sent out in mass quantities by spammers and cybercriminals who are looking to do one or more of the following:

  • Make money from the small percentage of recipients that actually respond to the message
  • Run phishing scams – in order to obtain passwords, credit card numbers, bank account details, and more
  • Spread malicious code onto recipients’ computers

In 2022, more than half (61.1%) of the malicious spam detected in the region targeted Kaspersky users from Vietnam, Malaysia, Japan, Indonesia, and Taiwan.

Shabab cited three main factors which cause the bulk of spam emails targeting APAC —- its population, the high adoption of e-services, and the pandemic lockdowns.

The APAC region has almost 60% of the world’s population and this means that there are more potential victims for scammers here compared to other parts of the world. The extensive use of online services such as online shopping and other online platforms for day-to-day activities here also makes individuals more susceptible to falling victim to scams. There is also the lingering pandemic aftermath which led to lockdowns and work-from-home set up in the region where people took their work computers home. Home networks are usually less protected from cyberattacks.

“Since 2018, the number of malicious spam mails detected by our solutions has seen a gradual decline after its peak in 2019. This, however, does not equate to our mailboxes being cleaner and safer. Our constant monitoring of the current and new Advanced Persistent Threats (APTs) operating in Asia Pacific showed that majority of these notorious threat actors use targeted phishing called spear phishing to crack into an organization’s systems,” reveals Noushin Shabab, Senior Security Researcher for Global Research and Analysis Team (GReAT) at Kaspersky.

The most recent example of an APT targeting key entities in APAC through sophisticated malicious mails is the “Sidewinder” threat actor.  Since October 2021, the Sidewinder threat actor has been using new malicious JS code with recently created C2 server domains. The attacker, also known as Rattlesnake or T-APT4, targets victims with spear-phishing emails containing malicious RTF and OOXML files.

Known for targeting military, defense and law enforcement agencies, foreign affairs, IT, and aviation entities in Central and South Asia, Sidewinder is considered one of the most prolific threat actors monitored in the APAC region. Kaspersky experts also recently found spear phishing documents which appear to be aimed at future targets in Singapore.

Some of the main characteristics of this threat actor that make it stand out among the others are the sheer number, high frequency and persistence of their attacks, and the large collection of encrypted and obfuscated malicious components used in their operations. Kaspersky experts, who have been monitoring Sidewinder since 2012, have detected over a thousand spear phishing attacks by this APT actor since October 2020.

Sidewinder also continues to expand its victimology and to sharpen its phishing tactics.

For instance, to reduce the suspicion raised by some of their spear-phishing documents that had no text content, the group followed their first attempt to attack the victim – a spear-phishing email containing a malicious RTF exploit file – with another similar email, but in this case, the title of the malicious document was “_Apology Letter.docx”, and it contained some text explaining that the previous email was sent in error and that they are reaching out to apologize for that mistake.

“There are many more well-oiled APT groups like Sidewinder who are constantly upgrading their tools and tactics to target high-profile victims in APAC through believable spam and phishing emails. The implication for enterprises and government organizations here is that a single malicious email when clicked can crumble your most sophisticated defenses, and usually, APTs like Sidewinder just need one door to open, one machine to infect, and then it can hide and stay undetected for long,” Shabab adds.

APTs target any sensitive data; one doesn’t need to be a government agency, major financial institution, or energy company to become a victim.

The major danger of APT attacks is that even when they are discovered and the immediate threat appears to be gone, the hackers may have left multiple backdoors open that allow them to return when they choose. This increases the importance of guarding mailboxes – an entry point they usually exploit to get a foothold of an organization’s networks.

Employees across all ranks need to be aware of the threats, such as the possibility of bogus emails landing in their inboxes. Besides education, technology that focuses on email security is necessary.

To be able to search for potential spear-phishing signs without diminishing the company’s actual security, Kaspersky suggests private and public companies to install protective anti phishing solutions on mail servers as well as on employee workstations.

Enterprises should also utilize advanced security software that can detect sophisticated APT attacks.

For governments, Shabab suggests defining better spam regulations to curb spam risks. “Fewer spam emails from legitimate organizations means people are less used to receiving unexpected emails every day and are more vigilant when they are being targeted with malicious spear phishing emails,” she adds.

TECHNOLOGY

TECHSHAKE announces strategic business alliance with Mirai Works

6:00 p.m. July 18, 2024

TECHSHAKE PTE. LTD., headquartered in Makati City, Philippines, with a branch office in Singapore, is pleased to announce that it has entered into a business alliance agreement with Mirai Works Inc., headquartered in Minato-ku, Tokyo, a professional-focused human resource service provider in Japan. 

This alliance aims to provide support for the growth and market entry of startups in Japan and Southeast Asia. 

TECHSHAKE’s Business

TECHSHAKE’s vision is to expand the startup ecosystem in Southeast Asia, with a focus on the Philippines, and to connect Southeast Asia with the world. 

TECHSHAKE (Kotaro Adachi, CEO & Co-Founder) manages and runs the Philippines’ premier innovation conference “IGNITE” in collaboration with dentsu X, a subsidiary of Dentsu Inc. and a provider of integrated media planning, branding, and marketing services. Furthermore, TECHSHAKE operates media platforms, matches startups with established companies and investors, and provides essential support for startups to thrive. 

TECHSHAKE is committed to fostering a global environment for business development in the Philippines.

TECHSHAKE is dedicated to nurturing the startup ecosystem in Southeast Asia by connecting entrepreneurs with the necessary resources and networks to succeed. With a strong presence in the Philippines and extensive experience in supporting startups, TECHSHAKE aims to bridge the gap between Southeast Asia and global markets.

Mirai Works (Nagaharu Okamoto, CEO & Co-Founder) is driven by a mission to empower individuals to embrace challenges that shape the future of Japan. Their vision is to cultivate an ecosystem where professionals thrive, regardless of traditional work structures. They are developing a business to provide opportunities for professionals to navigate changes throughout their careers and to support them in the midst of diverse career paths, including independence, entrepreneurship, side businesses, and full-time employment. 

Mirai Works’ initiatives aim to provide resources for individuals to succeed in an evolving work landscape, fostering innovation and growth.

In May 2023, Mirai Works launched “Booster,” (https://booster.mirai-works.co.jp/) a startup support platform aimed at empowering professionals to start and scale their businesses. Booster facilitates growth through acceleration programs, providing information regarding startup ecosystem events and pitch competitions, and personalized mentorship, ensuring startups have access to critical resources for success.

In this collaboration, TECHSHAKE will leverage its expertise and network to support Japanese startups looking to enter the Southeast Asian market. Mirai Works, known for its professional human resource services and startup support platforms, will enhance TECHSHAKE’s efforts by providing hands-on support in various aspects of business promotion. This partnership underscores Mirai Works’ commitment to facilitating cross-border collaboration and growth opportunities for startups in Japan and Southeast Asia.

Details of Cooperation

Not only does Mirai Works support startups registered with Booster, but it also offers a service called “Free Consultant,” (https://freeconsultant.jp/) a freelancer business matching platform. Through Free Consultant, Mirai Works plans to connect highly skilled professionals with Southeast Asian startups supported by TECHSHAKE. Mirai Works provides hands-on support in various aspects of business promotion, including management strategy planning, marketing and PR, IPO preparation, and M&A activities, to drive business growth. Furthermore, Mirai Works will collaborate with TECHSHAKE to hold acceleration programs and offer support for overseas expansion.

Continue Reading

TECHNOLOGY

Last Call for Entries to the OPPO imagine IF Photography Awards 2024

8:59 p.m. July 15, 2024

OPPO today issued a last call for entries to the OPPO imagine IF Photography Awards 2024. Since the competition was launched on January 17, over one million submissions have been received from 73 countries and regions, each showcasing a vibrant tapestry of cultures and traditions from around the world. As the global submission deadline approaches on July 28, OPPO is calling on photography enthusiasts to seize the final opportunity to capture spectacular moments through the lens of their cameras and collectively demonstrate the power of mobile imaging.

imagine IF Campaigns Gather Inspiring Work from around the World

Since inaugurating the competition at the start of the year, OPPO has initiated a series of themed activities aimed at encouraging its global user base to use the power of images to expand their imaginative boundaries. From May to July, coinciding with Mother’s Day and the beginning of the summer season, the ‘Road to Paris’ campaign invited users to portray the grace of mothers and capture the excitement of sport through the photographic lens for the chance to win a spot at Paris Photo 2024. The ‘In Sync with the World’ campaign meanwhile sought images that portrayed exploration around the world. Across both campaigns, the wide breadth of entries received showcased strong and emotive works that help to foster exchange and understanding between different cultures.

Photo 1 Shot by Isthisreal; Photo 2 Shot by Andrewoptics; Photo 3 Shot by Shisan and Petrichor

Celebrating Culture in All Its Diversity

Many of the entries submitted so far this year have seen participants from around the world showcase the unique landscapes and traditions of their home countries through stunning photographs. From the lively coastal life of Rio de Janeiro to the profound natural wonders of the Amazon rainforest, each image offers a portal into a new world for audiences to step into.

Alongside the main OPPO imagine IF Photography Awards, OPPO has also collaborated with Discovery Channel to showcase the diversity and allure of world cultures through the ‘Culture in a Shot’ program. Kicking-off in June in northern Thailand, the program has so far seen OPPO capture traditional crafts and musical instruments in a series of captivating images that bring the region’s rich and colorful cultural heritage to global audiences while advocating for deeper cross-cultural exchange.

Shot by Jerome Teo

Share Your Imagination for the Chance to Win Incredible Prizes

Entries for the OPPO imagine IF Photography Awards 2024 remain open until 24:00 (UTC+8) on July 28. Submission to this year’s competition will be judged by a prestigious global judging panel that includes the likes of contemporary photography icon Steve McCurry, together with National Geographic Photographer Michael Yamashita, Hasselblad Master Tina Signesdottir Hult, Magnum Photos member Alec Soth, and OPPO Senior Vice President and Chief Product Officer Pete Lau. A series of exciting awards are on offer to all participants, including individual prizes of up to USD24,000 and the chance to have their work exhibited at Paris Photo 2024.

Schedule and Prizes of OPPO imagine IF Photography Awards 2024

More than just a photography competition, the OPPO imagine IF Photography Awards is a platform for cultural exchange and creative inspiration. All photography enthusiasts are invited to take part and share moving moments that ignite inspiration and imagination through the global platform. To learn more about the OPPO imagine IF Photography Awards and to submit an entry, please visit the official website at https://imagine-if.oppo.com/en/.

Continue Reading

TECHNOLOGY

ZTE CEO Xu Ziyang at MWC Shanghai 2024: Ingenuity for Solid Foundation, Openness for Win-Win

10:20 p.m. July 12, 2024

ZTE Corporation (0763.HK / 000063.SZ), a global leading provider of integrated information and communication technology solutions, announced today that the company’s CEO, Xu Ziyang, has delivered keynote speeches at both the “AI First” session and the GTI Summit themed “5G-A×AI” at MWC Shanghai 2024. Mr. Xu shared ZTE’s practices and innovations in intelligent digitalization amidst the AI wave.

In his keynote speech at the “AI First” session, Xu Ziyang shared insights under the theme “Ingenuity for Solid Foundation, Openness for Win-Win.” He emphasized that while the world has already entered an AI-driven industrial revolution, the development of generative AI faces challenges that extend from hallucinations, security, and ethics, to computing power, energy consumption, datasets, standardization, and commercial applications. To address these challenges, ZTE proposes three major principles: openness and decoupling, computing and network evolution, and training and inference enhancement.

Centered on customer value, ZTE provides a full-stack and full-scenario intelligent computing solution encompassing computing power, networks, capabilities, intelligence, and applications. This establishes a robust foundation through technical expertise and fosters innovation through collaborative partnerships, aimed at empowering various industries in their digital transformation. By continuously injecting momentum into high-quality economic development, ZTE plays a pivotal role in shaping a brighter future in the AI era. 

At the GTI Summit during MWC Shanghai 2024, Xu Ziyang participated in the GTI-GSMA 5G-A×AI cooperation signing ceremony and delivered a speech titled “Computing and Network Evolution Towards an Intelligent Future.” He detailed the transition from traditional industrialization to new industrialization, addressing core challenges, proposing solutions, and citing practical cases. The critical pathway involves breakthroughs in core digital and intelligent technologies, enhancing infrastructure efficiency and capability, and deeply integrating industry expertise. This accelerates the convergence of digital and physical realms, enhances production and transaction efficiency, and establishes agile, resilient organizations prepared for an uncertain future.

According to Mr. Xu, ZTE advocates focusing on four dimensions – digitalization, networking, intelligence, and low-carbon initiatives – to tackle current challenges and drive continuous innovation and development. The company promotes openness and decoupling, unleashing superior computing with advanced networks, enhancing intelligence capabilities, and driving business growth through green initiatives, with a strong commitment to vigorously supporting the healthy and sustainable development of the industry chain, fostering a thriving digital economy.

Below is the original text of Xu Ziyang’s speech titled “Ingenuity for Solid Foundation, Openness for Win-Win”:

Good day, everyone. It’s an honor to be invited to speak here at the MWC Shanghai. Today, I’d like to share ZTE’s insights and practices under the theme of “Ingenuity for Solid Foundation, Openness for Win-Win”.

Embracing Changes and Promoting Intelligent Evolution

Over the past year, large language models and generative AI have accelerated the transformation towards an increasingly digital and intelligent world. With the rapid emergence of new technologies and products, new business scenarios and models are also gaining momentum. Although generative AI is still in the early stage, there is a growing consensus that the world has already entered an AI-driven industrial revolution. AI will have disruptive and far-reaching impacts on all aspects of production and life, and significantly reshape the global economic landscape. According to forecasts by a consulting firm, by 2030, AI will boost China’s GDP by 26% and North America’s by 14.5%. This is equivalent to USD 10.7 trillion and accounts for almost 70% of the global economic impact. Apparently, AI will bring unprecedented business opportunities in various sectors such as retail, financial services, and healthcare.

Apart from issues concerning hallucinations, security, and ethics, the development of generative AI also faces challenges in terms of computing power, energy consumption, dataset, standardization, commercial application, etc. Therefore, advancements in multiple areas are required. As such, ZTE proposes three major principles: computing and network evolution, training and inference enhancement, openness and decoupling.

First, to break through technology bottlenecks, it’s crucial to strengthen research on architectures, algorithms, computing networks, and hardware-software synergy, thus improving AI training and inference efficiency. Second, various solutions such as Retrieval-Augmented Generation (RAG) and AI agents should be employed to ensure reliability, security, and interpretability, thereby facilitating the widespread application of large models and higher value creation, and building a data flywheel that improves both capabilities and business efficiency. Finally, accelerating standardization through openness and decoupling will help build a thriving industrial and commercial ecosystem.

Building a Highly-Efficient Foundation Through Computing and Network Evolution

To begin with, we emphasize computing and network evolution to build a highly-efficient foundation. For intelligent computing, high-speed network connections are not just vital but also indispensable. From die-to-die connectivity to interconnects of chips, servers, and data centers, continuous innovation and breakthroughs in network technology will greatly enhance the performance and efficiency of intelligent computing.

More specifically, Die-to-Die (D2D) emphasizes high-speed interconnects between bare dies in a single package. Combined with the full series of in-house parallel and serial D2D interface IPs, as well as the advanced 2.5D and 3D packaging technologies, our solution enables heterogeneous integration and disaggregation. To a certain extent, challenges arising from the slowdown of Moore’s Law and constraints in manufacturing can be effectively mitigated. We have developed chip architectures that enable heterogeneous computing and network processing, which in turn deliver enhanced performance and cost efficiency.

Continue Reading