DFSA alerts institutions to increased risk of cyberattacks

Dubai, UAE: Since the Dubai Financial Services Authority (DFSA) launched the DFSA Cyber Threat Intelligence Platform (TIP) in January, over 130 DFSA Authorised Firms and DIFC registered companies have joined the platform. The platform has provided members with information and technical indicators on a multitude of cyber threats, with an average of 160 new threats per week.

Since launching, TIP has collected information on threat actors targeting the MENA region, especially the United Arab Emirates (UAE). The most prominent threats affecting the finance sector fall into three primary categories. The categories include: (1) the direct targeting of banking customers in order to obtain credit card data and banking credentials; (2) ransomware attacks; and, (3) the targeting of the finance sector by cybercriminal syndicates.

The DFSA has observed an increase in attacks leveraging known and new malware and a soaring number of newly registered malicious domains referencing COVID-19 since March. At the same time, many financial institutions were forced to rapidly implement remote working practices at an unprecedented scale. Consequently, there was an increase in attacks targeting remote access and teleworking infrastructure in the hope of exploiting hastily deployed systems.

Phishing attacks through email, SMS, and other messaging applications remain a common attack vector targeting financial institutions and their customers. Detailed technical information on recent cyber threats that can affect firms operating in the DIFC and around the world can be found on TIP.

Waleed Saeed Al Awadhi, Chief Operating Officer of the DFSA, said: “We strongly encourage firms to cooperate and share information about cyber threats. Cyber security is a shared responsibility, which we believe can best be addressed through public-private partnerships. We understand that our involvement with firms and other regulatory and professional associations is essential for building cyber security awareness among our stakeholders. We take, and will continue to take, a proactive approach to sharing knowledge, educating stakeholders and supporting companies in building their cyber resilience in line with the National Cybersecurity Strategy.”

In the context of cybersecurity, people tend be any organisation’s weakest link and cybercriminals design their campaigns using a variety of social engineering techniques. IT departments may implement a range of technical controls and systems to reduce the risk of a successful cyberattack. However, these alone may not be effective without sufficient employee cyber awareness. Therefore, education to increase the cyber awareness is one of the most important methods to reduce the risk of falling victim to a cyberattack.

The DFSA launched TIP on 21 January 2020. It is the first financial services regulator-led cyber threat intelligence platform in the region, delivered in collaboration with leading government entities the Dubai Electronic Security Centre (DESC), the National Computer Emergency Response Team for the UAE (aeCERT) and the Computer Incident Response Center Luxembourg (CIRCL). The independent cybersecurity specialist firm, Help AG, was appointed to manage and operate the platform and cybersecurity experts Kaspersky, Palo Alto Networks, and Recorded Future were engaged to contribute to TIP. The platform is available at no cost to all DFSA authorised and DIFC registered companies. DFSA authorised firms can register for TIP via the DFSA ePortal and DIFC registered companies can register through the DIFC ePortal.

As part of the DFSA’s broader efforts to elevate cybersecurity maturity within the DIFC, the DFSA hosted the “DFSA Cyber Threat Intelligence Platform Workshop” for TIP members in April. Help AG conducted the session and provided an overview of threat intelligence, demonstrated how to use and contribute to TIP, and showcased integration methods for advanced users. The DFSA intends to host more of these workshops as well as roundtable discussions. All DIFC companies are encouraged to register with TIP to ensure they receive timely threat information and to join in the fight against cybercrime.

For further information please contact:
Corporate Communications
Dubai Financial Services Authority
Level 13, The Gate, West Wing
Dubai, UAE
Tel: +971 (0)4 362 1613
Email: DFSAcorpcomms@dfsa.ae
www.dfsa.ae

The Dubai Financial Services Authority (DFSA) is the independent regulator of financial services conducted in and from the Dubai International Financial Centre (DIFC), a purpose built financial free zone in Dubai. The DFSA's regulatory mandate covers asset management, banking and credit services, securities, collective investment funds, custody and trust services, commodities futures trading, Islamic finance, insurance, crowdfunding platforms, an international equities exchange and an international commodities derivatives exchange. In addition to regulating financial and ancillary services, the DFSA is responsible for administering Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT) legislation that applies in the DIFC. Please refer to the DFSA's website for more information. 

Waleed Saeed Al Awadhi, Chief Operating Officer joined the DFSA in March 2013. He has over 18 years of international and local experience in leadership, strategy and innovation across financial services, Islamic banking, real estate, and media and telecommunications. Mr Al Awadhi is responsible for operational excellence at the DFSA by driving the development and implementation of world-class, innovative solutions and smart initiatives. Mr Al Awadhi represents the DFSA on strategic initiatives with Government entities and with local and regional regulators and international standard-setters. He is a member of the United Arab Emirates National Committee for Combating Money Laundering and the Financing of Terrorism and Illegal Organisations (NAMLCFTC) and the Dubai International Communication Committee (DICC) - a Government of Dubai Media Office (GDMO) initiative. He is also an international Financial Action Task Force (FATF) Assessor for Mutual Evaluation. He is a member of the Global Future Council on Financial and Monetary Systems, and he sits on the Board of CPI Financial. He plays a leading role in building UAE National capabilities both at the DFSA and within broader society. He also sits on the Board of CPI Financial. Previously, Mr Al Awadhi headed the Marketing and Communication division at Abu Dhabi Media, Priority Banking at Emirates Islamic Bank, and was Deputy Head of Retail Banking and Deputy Chief Marketing Officer at Dubai Bank, where he also managed Royal Banking and Wealth Management, Branding, Marketing and Communications. Prior to this, he was the Global Director of Marketing and Sales at Sama Dubai - a member company of Dubai Holding - where he was responsible for over 20 international markets. Mr Al Awadhi is an alumnus of Harvard Business School, where he completed the General Management Program. He has a Master of Law with a double major in Arbitration & Dispute Resolution and Financial Crimes and Money Laundering, and a Bachelor degree in Applied Business Science. In 2016 Mr Al Awadhi published his first book entitled ‘The Sustainability of Family Businesses in the United Arab Emirates – A Legal and Operational Perspective for Best Practice.’

© Press Release 2020