Cybersecurity Archives | Page 338 of 408 | Digital Watch Observatory

US tightens chip curbs on China in major crackdown

The United Sta t es has imposed its third major round of export controls on China’s semiconductor industry in three years, targeting 140 companies with restrictions on chipmaking equipment, software, and advanced memory chips. Among those affected are prominent firms like Naura Technology, ACM Research, and SiCarrier Technology, as well as entities linked to Huawei, a key player in China’s chip advancements.

The measures, aimed at stalling China’s progress in AI and military technologies, also introduce new licensing requirements for US and foreign companies shipping equipment with US components to China. Commerce Secretary Gina Raimondo stated the restrictions are intended to block China’s military modernisation. Despite the sanctions, Chinese officials condemned the move as “economic coercion” and vowed countermeasures.

The rules also impact allies, with restrictions extending to chipmaking equipment from countries like Singapore and South Korea, while Japan and the Netherlands are exempt. Some global players, including Dutch firm ASML, downplayed the immediate impact but acknowledged potential long-term effects. These actions come as China accelerates efforts toward self-sufficiency in semiconductor production, though it remains years behind industry leaders like Nvidia and ASML.

This latest crackdown follows the sweeping 2022 curbs on high-end chips and manufacturing tools under the Biden administration, reflecting a sustained US effort to curtail China’s access to critical technologies.

Ukraine anticipates a surge in AI-driven drones and uncrewed ground vehicles next year

Ukraine plans to acquire tens of thousands of uncrewed ground vehicles next year, aiming to enhance battlefield logistics and safety. These robotic platforms, already deployed near the front, will transport supplies, evacuate casualties, and keep soldiers away from dangerous zones. Deputy Prime Minister Mykhailo Fedorov highlighted the growing role of technology in mitigating risks along active conflict lines.

Advancements in military tech are reshaping Ukraine’s defence strategy. With increased production of long-range attack drones, Kyiv is narrowing the technological gap with Moscow. Ukraine has also adopted decoy drones to counter Russian tactics, alongside AI-driven systems to improve battlefield precision and reduce reliance on direct piloting.

Efforts are underway to innovate drone defences, including intercepting Russia’s Shahed drones. Autonomous technologies are expected to rise, with potential for early-stage drone swarm deployment. Fedorov noted the importance of connectivity and launch methods as Ukraine adapts to changing enemy responses.

Ukraine’s government-backed initiatives continue to support military innovation, fostering partnerships with private firms to scale up production and refine technologies. These developments mark a significant shift in how modern warfare is conducted, blending AI and robotics into entrenched combat scenarios.

Talks continue after Telefonica deal falls through

Telefonica’s plan to sell stakes in its Peruvian fibre optic network to KKR and Entel has fallen through. The agreement, announced in July 2023, would have seen Telefonica sell 54% to private equity fund KKR and 10% to Chilean telecoms operator Entel. The deal’s failure was confirmed by Entel in a filing to the regulator, citing unspecified breaches of closing conditions.

Despite the setback, Telefonica remains in discussions with both KKR and Entel, according to a filing with the Peruvian stock market regulator. The proposed transaction valued the entire fibre network at approximately €550 million, including debt, and was expected to reduce Telefonica’s debt by €200 million.

Telefonica has been selling assets in recent years to manage its debt load and fund significant investments in 5G infrastructure. The collapse of the deal adds to the challenges the company faces in navigating its financial strategy and expanding next-generation networks.

Gas works damage causes network outage for Worldline in Italy

Payment services in Italy have largely returned to normal following significant disruptions caused by gas pipeline installations damaging network cables. French payments firm Worldline confirmed that restoration efforts, including repairs by its provider, have been effective since Friday afternoon.

The outage began on Thursday morning, during the busy Black Friday shopping period, affecting both Italian and international markets. Italian business group Fipe-Confcommercio voiced serious concerns over the disruption’s timing and impact.

Worldline revealed that local gas pipeline works had severely compromised its network connection to data centres. The company apologised for the inconvenience and promised heightened vigilance in the coming days to prevent further issues.

The Bank of Italy also monitored the situation, noting that some services remain affected. Italian payment firm Nexi expressed dissatisfaction with the response, announcing its own investigation and warning of possible further action.

UN and international agencies establish advisory body for submarine cables

The United Nationshas launched the International Advisory Body for Submarine Cable Resilience to protect critical underwater communication infrastructure.

The initiative, announced in October 2024, brings together the International Telecommunication Union (ITU), and the International Cable Protection Committee (ICPC) to address growing risks to submarine cables, facilitating over 99% of global data transmission.

The initiative follows high-profile incidents, including damage to undersea cables and will prioritise enhancing cable security, promoting global best practices, and expediting repairs. With around 150 to 200 cable damage incidents annually—mainly due to ship anchors, fishing activities, and natural disasters—the ICPC highlights the urgency of coordinated action.

Officials from Nigeria and Portugal will co-chair the 40-member advisory body. Scheduled to convene twice a year, the body’s first meeting will occur virtually in December, followed by an in-person session in Abuja, Nigeria, in February.

Submarine cable disruptions have significant consequences. Earlier this year, outages from cable cuts in Africa left 13 countries offline for days, while damage in the Red Sea caused widespread internet disruption in the Middle East.

Interpol and South Korea lead operation, arresting over 5,500 cybercrime suspects

A coordinated global effort involving law enforcement from 40 countries has resulted in over 5,500 arrests and the seizure of more than $400 million in virtual and fiat currencies during Operation HAECHI V (July–November 2024).

The operation, led by INTERPOL and financially supported by South Korea, targeted seven major types of cyber-enabled fraud, including voice phishing, romance scams, investment fraud, and business email compromise schemes.

In one significant success, Korean and Chinese authorities dismantled a voice phishing network that defrauded over 1,900 victims of 1,511 billion KRW ($1.1 billion). The syndicate, which impersonated law enforcement and used fake IDs, saw 27 members arrested, with 19 facing formal charges.

INTERPOL issued a Purple Notice during the operation to warn member countries of a new cryptocurrency scam targeting stablecoin users. Known as the USDT Token Approval Scam, fraudsters lured victims with romance-based schemes, directing them to buy Tether stablecoins through legitimate platforms. Victims were then tricked into granting scammers full access to their cryptocurrency wallets through phishing links, allowing unauthorized fund transfers.

Operation HAECHI V also achieved record-breaking results, solving 8,309 cases—nearly double those from the previous year—and blocking 1,023 virtual asset service provider (VASP) accounts, a threefold increase from 2023.

HAECHI V participating countries, territories and regions: Albania, Argentina, Australia, Brunei, Cambodia, Canada, Cayman Islands (UK), China, France, Ghana, Hong Kong (China), India, Indonesia, Ireland, Japan, Korea, Kyrgyzstan, Laos, Liechtenstein, Macao (China), Malaysia, Maldives, Mauritius, Nigeria, Pakistan, Philippines, Poland, Portugal, Romania, Seychelles, Singapore, Slovenia, Spain, Sweden, Thailand, Timor Leste, United Arab Emirates, United Kingdom, United States, Viet Nam.

How AI helped fraudsters steal £20,000 from a UK woman

Ann Jensen, a woman from Salisbury, was deceived into losing £20,000 through an AI-powered investment scam that falsely claimed endorsement by UK Prime Minister Sir Keir Starmer. The scammers used deepfake technology to mimic Starmer, promoting a fraudulent cryptocurrency investment opportunity. After persuading her to invest an initial sum, they convinced her to take out a bank loan, only to vanish with the funds.

The scam left Ms. Jensen not only financially devastated but also emotionally shaken, describing the experience as a “physical reaction” where her “body felt like liquid.” Now facing a £23,000 repayment over 27 years, she reflects on the incident as a life-altering crime. “It’s tainted me for life,” she said, emphasising that while she doesn’t feel stupid, she considers herself a victim.

Cybersecurity expert Dr. Jan Collie highlighted how AI tools are weaponised by criminals to clone well-known figures’ voices and mannerisms, making scams appear authentic. She advises vigilance, suggesting people look for telltale signs like mismatched movements or pixelation in videos to avoid falling prey to these sophisticated frauds.

Meta tightens financial ad rules in Australia

Meta Platforms announced stricter regulations for advertisers promoting financial products and services in Australia, aiming to curb online scams. Following an October initiative where Meta removed 8,000 deceptive ‘celeb bait’ ads, the company now requires advertisers to verify beneficiary and payer details, including their Australian Financial Services License number, before running financial ads.

This move is part of Meta’s ongoing efforts to protect Australians from scams involving fake investment schemes using celebrity images. Verified advertisers must also display a “Paid for By” disclaimer, ensuring transparency in financial advertisements.

The updated policy follows a broader regulatory push in Australia, where the government recently abandoned plans to fine internet platforms for spreading misinformation. The crackdown on online platforms is part of a growing effort to assert Australian sovereignty over foreign tech companies, with a federal election looming.

DMM Bitcoin to shut down after $320 million hack loss

DMM Bitcoin, a Japanese cryptocurrency exchange, is preparing to wind down its operations after suffering a significant loss of $320 million in Bitcoin due to a hack in May. The breach, which compromised a private key linked to a wallet holding over 4,500 Bitcoin, forced the company to halt its restructuring efforts and focus on safeguarding customer assets. In response, DMM Bitcoin has arranged to transfer all customer accounts and assets to SBI VC Trade, a crypto exchange operated by financial giant SBI Group, with the transition expected to be completed by March 2025.

The company confirmed that customer assets, including Japanese yen and cryptocurrencies, will be secure during the move. Despite initial assurances that customer deposits would be protected, DMM Bitcoin was forced to suspend withdrawals, new account registrations, and trading following the attack. The company also pledged to compensate affected users by procuring an equivalent amount of Bitcoin, backed by its group companies.

The hack is one of Japan’s largest crypto breaches, second only to the $530 million Coincheck hack in 2018. Blockchain analysts have linked the breach to the Lazarus Group, a North Korean cybercrime organisation, suggesting similarities in laundering techniques. DMM Bitcoin, which launched in 2018, has also been facing challenges with its Web3 gaming project and stablecoin initiatives, ultimately leading to the decision to wind down its operations.

This attack is part of a broader trend of rising cyberattacks on cryptocurrency exchanges in 2024, including major breaches of other exchanges such as WazirX, BingX, and BtcTurk. The growing frequency of such incidents underscores the ongoing risks facing centralized crypto platforms.

SEMI calls for stronger EU semiconductor policy

Industry group SEMI Europe has urged the incoming European Commission to adopt a more unified industrial strategy and expand on the existing European Chips Act. The group highlighted the importance of Mario Draghi’s recommendations, including a centralised EU budget and expedited approvals for strategic high-tech initiatives, to maintain competitiveness against the US and China.

SEMI emphasised the need for additional funding to bolster Europe’s semiconductor ecosystem, particularly in light of global export restrictions on chip technology and critical minerals. Quick action on EU export policies is vital to protect strategic interests and strengthen Europe’s global influence, the group said.

While the Chips Act focuses on attracting new manufacturing, SEMI and other industry voices, like ESIA, have called for broader support. This includes incentives for ‘legacy and foundational’ chip production and innovations essential for Europe’s green transition. Together, SEMI and ESIA represent leading players such as ASML, Infineon, and STMicroelectronics.

A revamped Chips Act would not only counter state-subsidised competition from China but also enhance Europe’s semiconductor supply chain resilience, crucial for its economic and technological independence.