Caution urged for critical infrastructure over threats
Police say they received 440,000 intelligence reports on cyber threats targeting Hong Kong last year. Photo: RTHK
Police have called on critical infrastructure operators to bolster their defensive efforts against cyber threats, after a number of firms were deemed to be vulnerable.
The force said it inspected 90,000 assets controlled by critical infrastructure firms last year and discovered more than 4,500 loopholes in their systems.
Officers identified three types of loopholes which are particularly risky.
"First of all it's the employees' log-in credentials, that they are leaked or stolen because they don't have a very good mechanism in ensuring that these kind of credentials are in a high level [of protection]," senior superintendent Carmen Leung said.
"And second, some organisations did not properly manage their domain and subdomain, allowing attacker to hijack those unused subdomains and create highly convincing phishing or scam websites.
"And for the third part, we noticed some organisations having some misconfigured cloud storage service and unintentionally exposed their internal system in a web-facing environment."
She said these organisations took remedial measures after being warned by the force, and no harm was done to their major services.
Police said they received 440,000 tip-offs regarding Hong Kong-related cyber threats last year.
The top three industries to be targeted were banking and finance, communication, and government departments.
Superintendent Baron Chan stressed that a "useful and powerful preventive mechanism" is in place.
"Luckily, under our protection mechanism, we collect these intelligence in a very earlier stage and we do analysis and then share [them] among our stakeholders, so that these intelligence can be used by different sectors, even though they are not the targets of these bad actors," he said.
Police said they recorded 7,680 technology crime cases from January to March, up 1.1 percent year on year.
The cases, most of which involved online shopping, inflicted losses of more than HK$1.43 billion.
Officers urged shoppers to make use police's Scameter app to check the validity of recipients before making financial transactions.
Police also issued their first ever cybersecurity report, which can be viewed online.
It covers SAR and global cybersecurity trends, together with predictions in the coming year.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
South China Morning Post
2 hours ago
- South China Morning Post
Hong Kong top talent scheme's 54% visa extension rate ‘ideal', labour chief says
More than half of the professionals admitted to Hong Kong under a top talent scheme launched two years ago have applied to extend their stay, a rate that the city's labour chief has hailed as 'ideal'. Reviewing the Top Talent Pass Scheme, Secretary for Labour and Welfare Chris Sun Yuk-han also revealed on Friday that the median monthly salary of those who had successfully extended their visas was HK$40,000 (US$5,128), while a quarter earned HK$80,000. Sun also dismissed concerns that the new arrivals had consumed Hong Kong resources, noting that half of those who succeeded in extending their stay were aged 40 or below, while saying that small details in the scheme could be enhanced. The scheme, under which a two-year visa is usually issued to successful applicants, was launched by the government in December 2022 to counter a brain drain during the Covid-19 pandemic. In a closed-door media briefing on Friday, Sun revealed that the visas of 13,678 individuals had expired as of July 31, with 7,394 or 54 per cent submitting applications for an extension. Secretary for Labour and Welfare Chris Sun. Photo: Sun Yeung Including 2,305 people whose visas had not expired before July 31 but who had already applied for extensions, the Immigration Department had received 9,699 applications in total.
The Standard
3 hours ago
- The Standard
HK to brace for squally showers and potential tropical storm threat
Road King to become first Hong Kong developer to default on bond as pressure mounts
South China Morning Post
3 hours ago
- South China Morning Post
Hong Kong worker dies after being pinned against wall at MTR Corp depot
A 20-year-old worker has died after being pinned against a wall by a railway motor car at a depot of the MTR Corporation in an industrial accident that is being investigated by the Labour Department. Sources said on Friday that the department had received a report at 12.16pm about a worker who was killed by the 56-metre-long railway motor car at the Siu Ho Wan depot at North Lantau. They said the man was walking past the rear of the motor car, but it suddenly slipped backwards and pressed him against a wall. Other workers rushed to rescue him, according to the insiders. The man was unconscious when sent to Princess Margaret Hospital in Lai Chi Kok, where he was certified dead. The rail giant said it was highly concerned and would offer more details soon.
