appConfigEntityId

bodyType

customContents

entityId

entityUuid

isVideo

articlePageQuery

article

articleSchemaContent

content

hooksArticlePageAdvertisementConfigArticle

appConfig

filter

json

liveArticle

Lo Hoi-ying

Hong Kong police received more than 18,000 reports of cybersecurity attacks in the first quarter, with the number of incidents involving robot zombie computers seeing the greatest increase.
Phishing attacks accounted for nearly 46 per cent of the 18,758 incidents logged in the first three months while malware reports made up another 29 per cent, said Chief Superintendent Raymond Lam Cheuk-ho of the force’s cybersecurity and technology crime bureau.
The force said 25,510 attacks were reported in the same period last year.
Lam said the number of malware incidents dropped from the “significantly” high level of 15,131 in the first quarter of 2023 to 5,482 in the same period this year.
The cases, which involve victims being scammed by fake mobile apps downloaded from unofficial links, decreased after the police moved to take down those websites.
He emphasised that other types of cyberattacks were on the rise and were expected to only increase with time.
The number of botnet incidents – which involve attacks by a network of malware-infected computers – spiked by 44.5 per cent year on year, the biggest increase among five types of cyberattacks.
The force said it recorded more than 10,000 cybercrime cases in the first four months of the year, involving over HK$1.8 billion (US$230 million) in financial losses.

Among them were 14 hacking cases and 17 involving ransomware, involving HK$2.2 million in total.
“Of the 14 hacking cases, three were related to hacking of a company’s email system and sending phishing links to high-level staff for monetary transactions,” Lam told a press briefing for this year’s “BugHunting Campaign”, a cybersecurity drive.
Lam said none of the companies hit by ransomware crimes paid out money.
“We don’t encourage companies to pay the ransom, as the aim of these syndicates is to defraud,” he said. “There is no guarantee that the syndicates will destroy the data they obtained once the ransom is paid. It does not solve the problem.”
He warned that with the proliferation of cybercrime technology, syndicates did not need advanced systems to carry out highly targeted attacks that were increasingly discreet.
“As Hong Kong companies keep up with the trend of digital transformation, they also need to update their software and make sure they secure loopholes,” he said.
The bureau’s Superintendent Baron Chan Shun-ching said syndicates set their sights on companies because of the large amount of data they handled, which endangered the personal information of their users.
“Like annual body checks, companies should also regularly check the health of their cybersecurity systems,” he said.
“But they usually lack resources or do not have enough knowledge about what protection their systems lack.”
Police collaborated with cybersecurity start-up Cyberbay to launch the second edition of the BugHunting Campaign on Monday to help protect local businesses and other institutions from harmful attacks on their websites.
The two-month initiative connects businesses with local cybersecurity talent, sometimes known as “bounty hunters”, to help them manage risks.
The troubleshooting service is free for organisations, while those who flag any vulnerabilities receive cash rewards.
Businesses also get a HK$10,000 subsidy to hire talent to fix cybersecurity loopholes and are rewarded with a badge to show their system is robust.
“When the businesses earn this badge, this also gives their clients more confidence,” Chan said.
Sixty organisations signed up to the campaign last year. Half of them were start-ups and small and medium-sized enterprises, while another 30 per cent were NGOs.
Organisers said 197 online security risks were discovered during the two-month programme, with 10 per cent listed as “critical”.


1 dead, 2 in critical condition after fire at luxury Hong Kong flat

Hong Kong must not delay making bid-rigging a criminal offence

Ex-chief of Hong Kong journalist union serving 5-day jail term after losing appeal

Hong Kong police arrest boy, 14, after blade found on Citybus double-decker

Crime in Hong Kong

18,000 cybersecurity attacks reported to Hong Kong police in 3 months

Fourteen hacking cases were reported to police in the first four months of the year. Photo: Shutterstock


Chief Superintendent Raymond Lam joins last year’s “BugHunting Campaign”. Photo: Jelly Tse

Hong Kong police arrest 43 people over 32 cases of cyber fraud totalling more than HK$28 million, most suspects recruited to set up bank accounts

The fraud cases in the recent operation involved love scams and bogus investment deals. Photo: Shutterstock

Scammers swindled HK$830 million from Hong Kong cyber fraud victims in first 3 months of year

Latest figures show the force handled 7,361 reports of technology-related crimes between January and March this year. Photo: Shutterstock Images

Police seized mobile phones and other evidence during a two-week operation code-named “Tigerwar”. Photo: Handout 

News

Hong Kong

Law and Crime

Phishing attacks accounted for nearly 46 per cent of the incidents, police said


Phishing attacks accounted for nearly 46 per cent of the incidents, police said.


Cybersecurity

18,000 cybersecurity attacks reported to Hong Kong police in 3 months

.css-1mniedq{color:inherit;font-weight:inherit;font-size:inherit;font-family:inherit;line-height:inherit;}Phishing attacks accounted for nearly 46 per cent of the incidents, police said

Phishing attacks accounted for nearly 46 per cent of the incidents, police said