HKCERT Security Newsletter (April 2025 Issue)

The cybersecurity industry is currently facing a severe talent shortage. Statistics show that there is a global shortage of nearly 4 million cybersecurity professionals. Although the number of cybersecurity practitioners is growing at an annual rate of 8.7%, the supply-demand gap continues to widen.

🌐 According to statistics from the World Economic Forum, the global cybersecurity talent gap is close to 4 million. Increasing the proportion of female professionals in the industry is key to alleviating this issue. 🛡️Fully tapping into and leveraging the potential of women's power in the field of cybersecurity will help build a safer digital world.

In an era of rapid digital technology advancement, cyber threat intelligence is both an opportunity and a strategic defense imperative. Ir Alex CHAN, General Manager of the Digital Transformation Division of HKPC - Hong Kong Productivity Council and spokesperson for HKCERT, recently attended the 'Cyber Threat Intelligence Insights: Uniting Intelligence & Action' seminar hosted by the Cyber Security and Technology Crime Bureau (CSTCB) of the Hong Kong Police Force.

HKCERT recently had the opportunity to deliver a presentation to the members of Hong Kong Association of Property Management Companies Limited (HKAPMC) in the property management industry. The focus was on the critical topic of security risks associated with digital signage. 📊🔒

🛡️HKCERT attended a media briefing hosted by Digital Policy Office yesterday. At the event, Mr. Tony Wong, the Commissioner for Digital Policy, introduced the government's key cybersecurity promotion plans for 2025. HKCERT, along with the Hong Kong Police Force Cyber Security and Technology Crime Bureau and the Hong Kong Internet Registration Corporation Limited (HKIRC), shared the latest trends in cybersecurity and specific measures to enhance the cybersecurity defense capabilities of SMEs.

Recent threat intelligence indicates a significant rise in phishing attacks employing a new tactic known as 'ClickFix.' The 'ClickFix' scam mimics the 'Verify You are a Human' tests that websites commonly use to differentiate real users from bots. Users are asked to pass the test by pressing specific keyboard keys. This action triggers the download of malware on Microsoft Windows.

🖥️Welcome to the students from Hong Kong Metropolitan University (HKMU) majoring in Computer Science and Engineering, and Cybersecurity, visited HKPC - Hong Kong Productivity Council for an insightful exchange recently!

⚠️Beware of impersonation scams! Scammers may pose as celebrities, government officials, or even banking institutions, using various tactics to deceive you into transferring money or providing personal information.

🚨Beware of high-return, low-risk investment opportunities! Scammers may impersonate investment experts and use promises of high returns to lure investors. Stay vigilant and avoid trusting investment advice from unknown sources. If you receive investment invitations from strangers, do not provide personal or financial details.

🚨 Beware of job scams and don't be lured by high-paying job offers! Be cautious of any job opportunities from unknown sources or those that promise quick riches, especially if they require you to provide personal information or pay fees. Always verify the legitimacy of the company before accepting any job offers.

Invited by Hong Kong Police Force, Ir Alex CHAN, General Manager of the Digital Transformation Division of HKPC - Hong Kong Productivity Council and spokesperson for HKCERT, recently participated in the recording of the TVB (Television Broadcasts Limited) special program網罪速「逮」to reveal common ransomware infection methods!

The 'Hong Kong Cybersecurity Talent Development Summit,' organized by Hong Kong Metropolitan University, was successfully held on 22 February! Mr. Edmond LAI, Chief Digital Officer of HKPC, was invited as the guest of honor, and delivered the opening speech. Edmond emphasized the urgent need for local cybersecurity talent, citing a 2024 global shortage of over 4.7 million professionals, with nearly 3.4 million needed in the Asia-Pacific region. 🛡️ Over the past five years, the HKCERT CTF competition has attracted over 5,200 participants, successfully forstering local youth's interest in cybersecurity. Notably, the competition has also attracted numerous international teams, significantly promoting talent exchange and cooperation on a global scale.

The “Let’s Secure as we Digitalise” Instant Messaging Apps Stickers Design Contest (“the Contest”) is jointly organised by the Digital Policy Office, the Hong Kong Police Force and the Hong Kong Computer Emergency Response Team Coordination Centre. This Contest aims to allow participants to understand the importance of cybersecurity through a fun and interactive way and to further raise public awareness of cybersecurity, hoping that a collaborative platform can be built to strengthen the city's ability to combat cyberattacks. We look forward to your participation!