Dubai FSA is alerting institutions to the increased risk of cyber attacks, as it has observed an increase in attacks leveraging known and new malware and a soaring number of newly registered malicious domains referencing COVID-19 since March. Amid these circumstances, Dubai FSA also announced that its Cyber Threat Intelligence Platform (TIP) is gaining traction, as more than 130 DFSA-authorized firms and DFIC-registered [Dubai International Financial Center] companies have joined the platform. Based on the information collected so far, one of the most prominent threats relate to direct targeting of banking customers to obtain credit card data and banking credentials.
The Dubai FSA launched its Cyber Threat Intelligence Platform in January 2020. Since its launch, the Threat Intelligence Platform has collected information on threat actors targeting the Middle East and North Africa region, especially the United Arab Emirates (UAE). The most prominent threats affecting the finance sector fall into three primary categories. These categories include the direct targeting of banking customers to obtain credit card data and banking credentials; ransomware attacks; and the targeting of the finance sector by cyber-criminal syndicates. The Threat Intelligence platform provided members with information and technical indicators on a multitude of cyber threats, with an average of 160 new threats per week. The Threat Intelligence platform is the first financial services regulator-led cyber-threat intelligence platform in the region and is delivered in collaboration with leading government entities—the Dubai Electronic Security Center (DESC), the National Computer Emergency Response Team for the UAE (aeCERT), and the Computer Incident Response Center Luxembourg (CIRCL). The platform is available at no cost to all Dubai FSA-authorized and DIFC-registered companies.
Related Link: Press Release
Keywords: Middle East and Africa, Dubai, Banking, Cyber Risk, TIP, Cyber Threat Intelligence Platform, DIFC, COVID-19, Dubai FSA
Previous ArticleBank of Italy Extends Dividend Payout and P2G Guidance Amid Crisis
BIS published a paper that provides an overview on the use of big data and machine learning in the central bank community.
APRA finalized the reporting standard ARS 115.0 on capital adequacy with respect to the standardized measurement approach to operational risk for authorized deposit-taking institutions in Australia.
ECB published a guide that outlines the principles and methods for calculating the penalties for regulatory breaches of prudential requirements by banks.
MAS and The Association of Banks in Singapore (ABS) jointly issued a paper that sets out good practices for the management of operational and other risks stemming from new work arrangements adopted by financial institutions amid the COVID-19 pandemic.
ACPR announced that a new data collection application, called DLPP (Datalake for Prudential), for collecting banking and insurance prudential data will go into production on April 12, 2021.
BCB announced that the Financial Stability Committee decided to maintain the countercyclical capital buffer (CCyB) for Brazil at 0%, at least until the end of 2021.
EIOPA has launched a European-wide comparative study on non-life underwriting risk in internal models, also kicking-off of the data collection phase.
SRB published an overview of the resolution tools available in the Banking Union and their impact on a bank’s ability to maintain continuity of access to financial market infrastructure services in resolution.
EBA is consulting on the implementing technical standards for Pillar 3 disclosures on environmental, social, and governance (ESG) risks, as set out in requirements under Article 449a of the Capital Requirements Regulation (CRR).
ESAs Issue Advice on KPIs on Sustainability for Nonfinancial Reporting