#singapore company registry search

[incorpglobalsstuff]

Understanding The Singapore One Pass Visa Application Process

Navigating the intricacies of the Singapore One Pass Visa application demands meticulous attention to detail and adherence to stringent requirements. Applicants must meet specific qualifications and furnish comprehensive documents while understanding the procedure, sponsorship nuances, and potential appeals. This guide illuminates the process, ensuring a smoother visa journey.

[georgemathew8899]

Things You Should Know about .sg Domain Registration

The internet has become an essential part of modern life, and for businesses, having a solid online presence is crucial for success. In the event that your target audience is Singapore or you're a business based there, registering a domain name with the ".sg" extension can be a strategic move. This guide will explore the world of ".sg domain registration" and "Domain Name Registration Singapore," equipping you with the knowledge to claim your digital space in Lion City.

There are several compelling reasons to choose a ".sg" domain for your website. Firstly, it establishes a local identity. Utilizing the Singapore-specific extension, you immediately signal to visitors that your website caters to Singapore or has a solid connection to the country. This can be particularly beneficial for businesses targeting the local market, building trust and credibility with potential customers who recognize the familiar ".sg" ending.

Secondly, ".sg" domains can enhance your search engine optimization (Web optimization) efforts inside Singapore. Search engines frequently prioritize local results in their rankings, so having a ".sg" domain can give you a visibility boost in Singapore-based searches. This increased organic traffic can translate into additional website visitors and potential customers.

While anybody can register a ".sg" domain, some residency requirements depend on your specific subdomain. There are no residency restrictions for the most common ".sg" domain. In any case, for some subdomains like ".com.sg" or ".org.sg," you might have to have a local Singaporean business or organization registered.

The first step to securing your online space is choosing a perfect domain name. Your domain name ought to be memorable, relevant to your business or website's purpose, and ideally reflect your brand identity. While brainstorming names, keep them short and easy to spell and pronounce, and try not to utilize hyphens or special characters.

At the point when you've picked your ideal domain name, this moment is the perfect open door to register it. Numerous accredited registrars are offering ".sg domain registration" services. These companies are intermediaries between you and the Singapore Domain Name Registry (SGNIC), the official body governing ".sg" domains. The registration process itself is generally straightforward. Registrars regularly guide you through domain name availability checks, entering your contact information, and completing the payment.

Registering a ".sg" domain offers a valuable tool for businesses and individuals wanting to establish a solid online presence in Singapore. By sorting out the benefits, capability requirements, and registration process, you can use the ".sg" extension and claim your digital space inside the dynamic Singaporean market.

[jurnaltalking]

UBO Checks in Asia - A Comprehensive Guide to UBO Search

In recent years, regulatory bodies across Asia have placed increasing emphasis on understanding the ultimate beneficial owners (UBOs) of companies. UBO checks play a crucial role in promoting transparency, preventing money laundering, and combating financial crimes. This article will delve into the importance of UBO checks in Asia and discuss the significance of UBO search in ensuring compliance and mitigating risks.

Understanding UBO Checks

UBO checks refer to the process of identifying the individuals who ultimately own or control a company. These individuals exert significant influence over the company's operations and financial decisions. UBO checks are crucial in uncovering the true ownership structure, as companies may employ complex ownership chains or nominee shareholders to conceal the identity of the actual owners.

Importance of UBO Checks in Asia

Asia has witnessed a rapid growth in business and foreign investments, making it imperative to establish robust UBO regulations. Several Asian countries, including China, Japan, India, and Singapore, have recognized the significance of UBO checks and have implemented regulatory measures to enhance corporate transparency.

The primary objectives of UBO checks in Asia include:

Combating Financial Crimes: UBO checks aid in identifying individuals who may be involved in illicit activities such as money laundering, corruption, or terrorist financing. By exposing hidden ownership, authorities can take appropriate actions to safeguard the integrity of financial systems.

Ensuring Regulatory Compliance: UBO checks in Asia enable businesses to comply with anti-money laundering (AML) and Know Your Customer (KYC) regulations. By identifying the true owners, companies can ensure due diligence and avoid penalties or legal repercussions.

Promoting Transparency: UBO checks promote transparency and integrity in business transactions. By revealing the actual owners, investors, customers, and stakeholders gain confidence in the legitimacy of the company and its operations.

UBO Search: A Key Component of UBO Checks

UBO search refers to the process of conducting thorough investigations to uncover the ultimate beneficial owners of a company. It involves utilizing various resources, databases, and public records to gather information about the company's ownership structure.

In Asia, UBO search typically involves:                    

Corporate Records: Accessing official company registers, such as the Companies Registry, to obtain information on shareholders and directors.

Publicly Available Information: Searching through public sources, such as business directories, news articles, and social media, to gather additional data on the company and its owners.

Professional Service Providers: Engaging the services of specialized agencies or firms that offer UBO search solutions. These providers possess the expertise and access to extensive databases, enabling them to conduct comprehensive investigations.

Benefits of UBO Search in Asia

UBO search offers several advantages to businesses and regulatory authorities in Asia:

Enhanced Due Diligence: UBO search enables businesses to conduct thorough due diligence on their potential partners, investors, or clients. It helps identify any red flags or risks associated with the company's ownership structure.

Risk Mitigation: By identifying the UBOs, companies can assess the level of risk associated with their business relationships and make informed decisions to mitigate potential risks.

Regulatory Compliance: UBO search ensures compliance with the regulations set forth by financial authorities, reducing the likelihood of penalties or legal consequences.

Conclusion

In an era of increasing scrutiny and regulatory focus, UBO checks in Asia or other part of the world have become a vital aspect of doing business in Asia. By conducting UBO search, companies can maintain transparency, uphold compliance standards, and protect themselves against financial crimes. Investing in comprehensive UBO checks and utilizing reliable UBO search methods will not only safeguard businesses but also contribute to a robust and trustworthy business environment in Asia.

[kelliejacobs-blog]

Best Places to Purchase Property in Singapore

As per a recent poll, foreign buyers are primarily accountable for raising house cost. Since, land prices are climbing steeply, the majority of the thieves are discovering it as a much better investment. If you're searching to have a better property investment choice, you will need to spot the ideal place for purchasing a property. Bear in mind, a fantastic property can bring you greater yield values in future. Thus, you want to checklist of some essential areas and compare the areas to recognize the ideal location in accordance with your budget and anticipation.

Some great places to purchase property are recorded below:

Company central district is among the prime places for commerce and market. You may get a vast selection of people within this area. If you're interested in finding an industrial place, then suburban area can provide you with a great deal of livelihood opportunities and has lots of outdoor activities to enjoy together with your family . Northeast area is growing region that brings more foreigners with its booming trade opportunities. Want to locate a suitable home at a lush green area? Start looking for possessions around north region that has industrial property, shopping facilities, schools and residential houses and still keeps its beautiful lush green surroundings.

If you'd like a peaceful environment to unwind in the bustling town centres, then west area can meet all your requirements with its own hills, mountains and picturesque beauty. North area has become more attention today and is slowly growing into an important business centre. These are a few areas which are bringing a high number of foreigners with its broad assortment of amenities, nature and very affordable property cost rates. It is possible to take advantage of these details to pick the ideal place for purchasing Riviere Frasers Property depending on your requirements.

Property costs in Singapore are among the greatest in Asia; nonetheless this island nation is a popular one of the wealthy Chinese millionaires seeking to migrate out their nation. Therefore it is not unusual for older buildings to create for large rise ultra lavish apartments. Following is a listing of properties which are worth a thought.

Purchasing a house in Singapore is 1 complicated region which could be hard to comprehend. As a result of this, getting the support of real estate brokers is beneficial particularly when it comes to finding the proper type of home, condominium or apartment that will be appropriate for you and your loved ones.

Properties such as flat units or condo units were known as strata titled properties and didn't want the acceptance of the Singaporean government. If it comes to those insured by the Housing Development Board, foreigners aren't Permanent Residents or aren't corporate bodies can't purchase a executive condo coming in the open marketplace. Rather, they needed to get in touch with the programmer.

While purchasing a house in Singapore, locating the ideal type of property a part of this sport. Seeking the support of specialist realtors will be of excellent use since not only will they guarantee appropriate documentation of what but they have a working understanding about the Singaporean property marketplace thereby making it much easier for you to select your pick. While purchasing a house in Singapore, it's also important to ensure the aid of a lawyer. When compared with the broker who does the leg job at searching for the correct sort of home for you, the attorney handles the legal dilemmas in addition to conducting a name check making certain the possession and title to the house is valid. The procedure for purchasing a house in Singapore requires the attorney who will file a caveat with the Singapore Land Registry in telling the people that the purchaser has curiosity over the house simply to be certain the property isn't the matter of any negative notice and so on. In accordance with this, the attorney may also check in the seller's qualifications and reputation ensuring any renovation or modification on the house was lawfully made and accepted, and if not, ask that it be adjusted at this cost.

Purchasing a house in Singapore also expects you to narrow down your choices and schedule a screening. Next, and you've made your decision, you'll have to sign an choice to buy document that specifically requires a 14-day interval where you may choose whether you may purchase the house or not. There isn't caveat at this point since you haven't represented your intention to purchase just yet. At this phase in getting a house in Singapore, you'll need to have a minumum of one percent of the cost available today. In case the purchase pushes , then you'll need to exercise this choice and send the file to the vendor's solicitor. At this phase, at least eight% of the cost should have been paid.

[2021law486]

Session 6. Digital Marketing Laws & Global Trends

A. Digital Marketing Laws in Singapore

‘Right’ to be Left Alone: The PDPA consists of a data protection regime as well as a do not call regime. The second part of the Act relates more to personal privacy and the right not to be disturbed. It supplements the existing Spam Control Act in regulating the distribution of information from commercial entities to private individuals generally - although there are some exceptions, particular on the treatment of the different formats and channels of distribution.

It has been reported in the media that over 3000 organisations have been issued notifications and warnings for contravening the DNC rules within two years of its entry into force. We will consider the following questions in class:

What are the circumstances leading to the need for a Do Not Call List and how does it function? How does it compare to other anti-spam or spam-control models abroad?

What is the role of the Personal Data Protection Commissioner? Find reported cases on the enforcement of the DNC regime. Is it an audited or complaint based process?

What is the scope and effects of the Spam Control Act (Cap. 311A) of 2007? How does it function and what are the good and bad aspects of the regime?

Consider the treatment of unsolicited text messages and how it differs from voice messages, as well as the differential treatment accorded to different methods of electronic communication.

What is the relationship between the SCA and the PDPA? Are they complementary or is there a better way forward? Given the confusing and unnecessary overlap between the DNC regime and the SCA, what would you recommend to the PDPC if they were also consulting on the amendment of that regime?

Required Readings:

Chapter 10 - The Do Not Call Registry by Warren Chik in Chesterman ed., Data Protection Law in Singapore - Privacy and Sovereignty in an Interconnected World (2ed Academy Publishing, 2018) [available in Course Reserves]

Statutes:

Personal Data Protection Act (Part IX)

Spam Control Act

References:

PDPC Public Consultation for Managing Unsolicited Commercial Messages and the Provision of Guidance to Support Innovation in the Digital Economy (2018)

PDPC Advisory Guidelines on the Do Not Call Provisions (rev. 27 July 2017)

PDPC Advisory Guidelines on Requiring Consent for Marketing Purpose (8 May 2015)

Warren B. Chik, Singapore Do Not Call Register and the Text and Fax Exemption Order (Law Gazette, March 2014(1))

Warren B. Chik, Proposed Anti-Spam Legislation Model in Singapore: Are We Losing the Way Before Even Starting the Battle? [2005] 17 SAcLJ 747

B. Global Trends in Data Protection Regime

Beyond the Well Established Principles and Obligations: With the European Union leading the way, data protection law is entering into what is a 2.0 version with stronger enforcement for infringement by regulators, enhanced obligations for companies and new rights for individuals. This is partly in response to the changes in the technological landscape such as the use of personal data in IoT and the collection of personal data by A.I. as well as other means by which individuals can be identified and profiled.

New Rights for Individuals (overview only): Some new concepts that have emerged from the GDPR include stronger protection for children and minors; data portability; rules for profiling; rules relating to location data and tracking tools; and the recalibration of consent for different needs.

The Right to be Forgotten (introductory only): In particular, the “right to be forgotten” and the use of personal data by social networking platforms (e.g. Facebook’s newsfeed and timelines) have emerged as hot button issues and have been identified as such in various U.S. government papers on the subject and the ongoing EU reform to its  privacy directives (from the GDPR to the ePrivacy Directive).

In January 2012, the European Commission proposed comprehensive reform of EU data protection laws through a General Data Protection Regulation. On 12 March 2014, the European Parliament voted in favour of the reform, which was “irreversible”. The GDPR was enacted in May 2018, while the ePrivacy Directive is the next to be upgraded to a Regulation.

In 2016 reforms to the EU personal data protection framework with new Regulations, Directive and EU-US Privacy Shield arrangements entered into force. Meanwhile, the latest decision coming out of the European Court of Justice on the “right to be forgotten” has implications for data processors. The Google Spain case of 2014 was the first and the most recent decision on delinking or re-referencing obligations on search engines was released by the CJEU on 24 September 2019 in the Google France case (CNIL) with a companion decision relating to the treatment of sensitive data.

There have also been developments at the national level to control personal information (e.g. in France), in particular efforts to control the ‘publicity’ of personal information (e.g. Google’s search results). The impact of this and other decisions (e.g. the 2015 Weltimmo and Max Schrems cases as well as other similar lawsuits) on the likes of Google and Facebook, particular in terms of compliance, is potentially immense.

Meanwhile, while the US lack a comprehensive federal data protection law, California has produced the first strong and robust Consumer Privacy Act in 2018.

Primary Materials:

General Data Protection Regulation (for reference in class only)

Cases:

GC and Others v Commission nationale de l'informatique et des libertés (CNIL) (2019) C-136-17 (Judgment and Opinion)

Google Spain SL, Google Inc. v Agencia Española de Protección de Datos, Mario Costeja González (2014) C-131-12 (Judgment and Opinion)

References:

European Commission, Latest Data Protection Reforms (Europa)

The Law Library of Congress, Online Privacy Law (LoC)

Laraine Laudati, Summaries of EU Court Decisions Relating to Data Protection (OLAF, 2000-2015)

[incorpglobalsstuff]

A Guide to Searching the Singapore Company Registry

InCorp Global provides an indispensable tool with the Singapore company registry search, combining efficiency, comprehensive access, verification, and support for informed decision-making. This robust system is integral for anyone looking to engage with the Singaporean business landscape, ensuring due diligence and strategic insight.

[2020law486]

Session 6. Digital Marketing Laws & Global Trends

A. Digital Marketing Laws in Singapore

‘Right’ to be Left Alone: The PDPA consists of a data protection regime as well as a do not call regime. The second part of the Act relates more to personal privacy and the right not to be disturbed. It supplements the existing Spam Control Act in regulating the distribution of information from commercial entities to private individuals generally - although there are some exceptions, particular on the treatment of the different formats and channels of distribution.

It has been reported in the media that over 3000 organisations have been issued notifications and warnings for contravening the DNC rules within two years of its entry into force. We will consider the following questions in class:

What are the circumstances leading to the need for a Do Not Call List and how does it function? How does it compare to other anti-spam or spam-control models abroad?

What is the role of the Personal Data Protection Commissioner? Find reported cases on the enforcement of the DNC regime. Is it an audited or complaint based process?

What is the scope and effects of the Spam Control Act (Cap. 311A) of 2007? How does it function and what are the good and bad aspects of the regime?

Consider the treatment of unsolicited text messages and how it differs from voice messages, as well as the differential treatment accorded to different methods of electronic communication.

What is the relationship between the SCA and the PDPA? Are they complementary or is there a better way forward? Given the confusing and unnecessary overlap between the DNC regime and the SCA, what would you recommend to the PDPC if they were also consulting on the amendment of that regime?

Required Readings:

Chapter 10 - The Do Not Call Registry by Warren Chik in Chesterman ed., Data Protection Law in Singapore - Privacy and Sovereignty in an Interconnected World (2ed Academy Publishing, 2018) [available in Course Reserves]

Statutes:

Personal Data Protection Act (Part IX)

Spam Control Act

References:

PDPC Public Consultation for Managing Unsolicited Commercial Messages and the Provision of Guidance to Support Innovation in the Digital Economy (2018)

PDPC Advisory Guidelines on the Do Not Call Provisions (rev. 27 July 2017)

PDPC Advisory Guidelines on Requiring Consent for Marketing Purpose (8 May 2015)

Warren B. Chik, Singapore Do Not Call Register and the Text and Fax Exemption Order (Law Gazette, March 2014(1))

Warren B. Chik, Proposed Anti-Spam Legislation Model in Singapore: Are We Losing the Way Before Even Starting the Battle? [2005] 17 SAcLJ 747

B. Global Trends in Data Protection Regime

Beyond the Well Established Principles and Obligations: With the European Union leading the way, data protection law is entering into what is a 2.0 version with stronger enforcement for infringement by regulators, enhanced obligations for companies and new rights for individuals. This is partly in response to the changes in the technological landscape such as the use of personal data in IoT and the collection of personal data by A.I. as well as other means by which individuals can be identified and profiled.

New Rights for Individuals (overview only): Some new concepts that have emerged from the GDPR include stronger protection for children and minors; data portability; rules for profiling; rules relating to location data and tracking tools; and the recalibration of consent for different needs.

The Right to be Forgotten (introductory only): In particular, the “right to be forgotten” and the use of personal data by social networking platforms (e.g. Facebook’s newsfeed and timelines) have emerged as hot button issues and have been identified as such in various U.S. government papers on the subject and the ongoing EU reform to its  privacy directives (from the GDPR to the ePrivacy Directive).

In January 2012, the European Commission proposed comprehensive reform of EU data protection laws through a General Data Protection Regulation. On 12 March 2014, the European Parliament voted in favour of the reform, which was “irreversible”. The GDPR was enacted in May 2018, while the ePrivacy Directive is the next to be upgraded to a Regulation.

In 2016 reforms to the EU personal data protection framework with new Regulations, Directive and EU-US Privacy Shield arrangements entered into force. Meanwhile, the latest decision coming out of the European Court of Justice on the “right to be forgotten” has implications for data processors. The Google Spain case of 2014 was the first and the most recent decision on delinking or re-referencing obligations on search engines was released by the CJEU on 24 September 2019 in the Google France case (CNIL) with a companion decision relating to the treatment of sensitive data.

There have also been developments at the national level to control personal information (e.g. in France), in particular efforts to control the ‘publicity’ of personal information (e.g. Google’s search results). The impact of this and other decisions (e.g. the 2015 Weltimmo and Max Schrems cases as well as other similar lawsuits) on the likes of Google and Facebook, particular in terms of compliance, is potentially immense.

Meanwhile, while the US lack a comprehensive federal data protection law, California has produced the first strong and robust Consumer Privacy Act in 2018.

Primary Materials:

General Data Protection Regulation (for reference in class only)

Cases:

GC and Others v Commission nationale de l'informatique et des libertés (CNIL) (2019) C-136-17 (Judgment and Opinion)

Google Spain SL, Google Inc. v Agencia Española de Protección de Datos, Mario Costeja González (2014) C-131-12 (Judgment and Opinion)

References:

European Commission, Latest Data Protection Reforms (Europa)

The Law Library of Congress, Online Privacy Law (LoC)

Laraine Laudati, Summaries of EU Court Decisions Relating to Data Protection (OLAF, 2000-2015)

[bradleyhoeger18-blog]

How to Proceed With Plans of Company Formation in Singapore

Singapore is one of those countries where rules are tight and highly observed. You simply cannot get through any crack of the rules and supervisory bodies. Therefore your documentation, permission, and legal preparation to open a company in Singapore have to be perfect.

What do you need to know about opening a new company?

 Whether you are from Singapore, or from a different place, you must know the policies for company incorporation in Singapore. The nation has a set of strict rules. Adhering to them, and making a company that is compliant to al the state rules is a must. Therefore in short and simple way, you must know the law and implement things that way. In case you are falling short somewhere, you must know the right way to appeal or find an alternative. That's why you need a law firm which helps in Singapore company formation.

 Legal help in setting up a company

 There are firms in Singapore and other countries, who operate in several countries and helps people, settle with their businesses and companies. They have learned and experienced people who help in setting up a company in Singapore, and other overseas locations too. You actually need to get in touch with one such firm who helps in settling a company.

 How a company settlement form helps

 It's not possible for a person to take care of all legal norms and formalities. There are various types of people. One has knowledge in one domain and another has an understanding of another. An individual cannot excel in legal matters and company settlement rules and also his/her business domain, to fulfill all criteria, and also double check them before registering the company and stay perfect. But a firm that helps in overseas company settlement in countries like Singapore can definitely help.

How to Proceed With Plans of Company Formation in Singapore

There they would have legal experts to take care of all small and big factors so that your file for presentation and registration to the Singapore government for forming the company is totally correct, up-to-date, legally acceptable, and with complete information. This ensures you go through minimal legal and bureaucratic friction. Otherwise, the various levels of friction while incorporating a company in the initial and advanced stages both, leaves the entrepreneur totally mentally and financially exhausted. And this should not happen with you. To avoid such consequences, you must not try everything on your own and take the help of experts who have helped thousands of companies get established in Singapore and other overseas locations while adhering to stringent norms and measures with perfection.

 Get expert advice and help

To avoid complications and rejection of your application at an advanced level, when you already have spent much on the project, you must seek expert advice from the experts, as you proceed with your plans of company formation in Singapore. Expert help can help your business registration in a short span of time with the accuracy level. The entire businessman seeking to their long term goals takes expert help in setting up a new business in Singapore at the various levels.

 Every day there are new companies which are being made. Once the company is made they need to undergo the elaborate process of registering them online. There are many companies available in the market today which only deal with the entire process of online registration of companies.

  Heighten Your Business with Company Registration

Everyday new types of companies are being incorporated in Singapore. Thus, using the simple logic of demand and supply these companies need to registry themselves online too. Thus there are many companies available in today's times which help in the entire process of online registration. During this elaborate process of company incorporation followed by its registration, there are many pros and cons one must be completely aware of.

 Most basically one must make sure, that they go to a very experienced company when it comes to the entire process of company registration in Singapore. This way, you can make sure that the entire process of your company is in trusted hands and you don't need to rush and hurry and be worried about any form of chaotic work taking place.

 To get a better idea of how good is the company, you can go in the market and do an elaborate search on the company's name. Then you can also gather data on the basis of the word of mouth depending on what exactly do people have to say about this company. Apart from all of this, you can also concentrate on the basics like how well do the employees know the company law and rules. This way, you can test their working experience and how much of importance is laid on paper work all in all. Once you are completely assured of all these factors, you can be at peace making sure that you company's future is in safe hands.

 The entire process of company registration in Singapore is a very long as well as a elaborate process and requires proper detailed documentation and also often good contacts to make sure that your work from your side as well as the work from the side of the company registration is done perfectly without any form of problems and also there aren't any complaints which will arise in the future.

 Thus, by following all the steps mentioned before carefully and with a lot of consideration one can make sure that the entire task of incorporating a company in Singapore to its registration online all goes very smoothly and is also slow and steadily done.

[kylerrnmu611-blog]

The Truth About Thomas Zilliacus

Thomas Zilliacus:

Largest shareholder of Yuuzoo, a publicly traded company in Singapore. The Company’s shares are not trading due to suspension by the Singapore stock exchange (https://www.straitstimes.com/business/companies-markets/yuuzoo-suspended-from-trading-after-busting-sgx-deadline)

He is currently investigated by Singapore’s Commercial Affairs Department (https://www.businesstimes.com.sg/companies-markets/yuuzoo-corp-under-investigation-by-cad-for-possible-breaches).

Passport was taken away from him. Gets his passport back by posting a bail bond

Was spotted in exotic locations on his Instagram account when the actual company was going down the drain.

Leaving a long trail of questions instead of a legacy.

PULLING WOOL OVER EVERYONE’s EYES

1. Mobile Future Works

Thomas Zilliacus used Mobile Future Works as a vehicle to consume money from Yuuzoo in the name of salary, amongst others. Even when there was substantial management staff in the company like CEOs, CFOs, etc. The following diagram shows that he was one of the top paid person in Yuuzoo. What actual work did he do? What was his exact remuneration? Who agreed to the initial remuneration contract and authorized it? Was it Zilliacus himself? What was the total paid out to him over the number of years? Did the company ever gained from this specific contribution? Shareholders monies are in question here. Did the authorities ever checked on all this?

2. Sandbox Global

Sandbox Global is a games development company owned by Zilliacus. Apparently Yuuzoo pays Sandbox monthly maintenance fees for building games. The last game Yuuzoo released was 2 years ago. Talking to a Thai staff, who wants to remain anonymous, it was very clear that Yuuzoo’s money was solely running the Sandbox operations. If Yuuzoo did not send money on time, Sandbox staff does not get paid on time. This procedure is highly questionable. Visit the company in Thailand. Talk to the staff. Maybe, do a mystery audit. Yuuzoo shareholders need to know why their money went to Sandbox.

3. Asia Financial Group

It was announced that Yuuzoo secured 30 million dollar funding from a company called Asia Financial Group (https://links.sgx.com/FileOpen/YNG%20secures%2030%20million%20SGD%20capital%20commitment%20agreement.ashx?App=Announcement&FileID=547771).

Google the Internet. You will find out nothing about this mysterious “ swiss-based” group or who owns it. Even a food court operator has better response from Google when searched. The direct results points to a Hongkong listed company.

So who owns this company? Is it Zilliacus. And if it is, is this legal? Did SGX sight the agreement? How could SGX allow such an announcement to go by easily? And the arrangement seriously looks like to toxic arrangement that GEM has. This will only bring yield to “AFG” and Yuuzoo. Not the shareholders.

This announcement could mislead current shareholders sentiments. If this turns out to be a lie, that the market has been misled, which is a very serious offence.

The biggest joke would be to really find out if this so called “AFG” really has 30 million dollars. Basically this toxic agreement tries its best to get SGX lift the suspension so that Yuuzoo can continue to raise funds with placement a.k.a to continue sucking money from the public.

4. Decisions to buy Relativity Media and Cinram France

Did Zilliacus brought these deals into Yuuzoo so that he can benefit directly or indirectly from them? Very questionable decisions. Who did the due diligence or was there any due diligence even done? Shareholders deserved to know. Funds were definitely dished out in both situations. How were they given and how much? And since Relativity Media deal did not happen, where is the money?

The Cinram deal itself was a myriad of madness, which ended in Yuuzoo losing what it bought, with the judicial recovery proceedings in France. Let us just recount on one of the bizarre aspect of the Cinram France deal.

YuuZoo had announced that YuuLog had been incorporated with a paid-up capital of 500,000 euros. It had also said this was a joint venture with the management of Cinram France and that YuuZoo will own 51 per cent with the latter owning 49 per cent.

SGX queried the amount that YuuZoo will be contributing in terms of equity and whether it will be providing any shareholders’ loan to YuuLog.

It also asked how much the management of Cinram France will be contributing and the name and background of the other key shareholders of YuuLog.

YuuZoo said that there is no shareholders’ loan, that the shareholder agreement is still being discussed and did not disclose the amount to be contributed by Cinram France’s management.

How can YuuZoo set up a joint venture with the management of Cinram France already said to be owning 49 per cent of this joint venture while the shareholder agreement is still being discussed?

On the name and background of the other key shareholders of YuuLog, YuuZoo mentioned that the only other shareholder is “BTV&CO”, but did not mention who are the shareholders of this company.

An online search and a company registry search conducted on October 3 found a French company called YuuLog Europe. However, it has a paid-up capital of only 1,000 euros with just one shareholder by the name of Jean-Jacques François Berthelon.

YuuZoo’s announcement of changes to its board and management on October 2 mentioned that a Jean-Jacques Berthelon, former head of Cinram Logistics France, has been appointed to the new position of Head of Yuulog Europe. So, is the paid-up capital 500,000 euros or 1,000 euros and is the shareholder BTV&CO or Mr Berthelon?

A SHADOW DIRECTOR?

Recently 2 independent directors who joined Yuuzoo resigned merely months after their appointment. This adds to the list of many directors who came and went in a matter of months. Is it because they dare to go against Zilliacus and were removed? Was this the same case for the key management staff? Who actually ran the company all these years? Talking to some Singapore employees, who want to remain anonymous, it was clearly Zilliacus. Even after he stepped down from his positions in Yuuzoo.

The case of the current independent director is also baffling. Mr Su Chun Keat was the Thomas Zilliacus audit partner that audited Yuuzoo for the past 2 years. That in itself should raise some alarms. Anthony Williams and Christopher Cheong are rarely seen or heard. Where are all https://en.search.wordpress.com/?src=organic&q=YuuZoo the directors hiding?

Yuuzoo Shareholders Association also looks like a vehicle created by Zilliacus for Zilliacus. We don’t know who are in it and who actually runs this association but it claims that shareholders representing more than 10% of the voting rights have joined. What percentage of voting rights Zilliacus has? Maybe there is only 1 person in this association. The group said that the trading suspension imposed by SGX RegCo had resulted in it losing YuuLog, the logistics operation it had set up in France, in Aug 2018, as the group was unable to raise funds. Speaking to the people in France who are actually directly asoociated in this matter will prove otherwise.

FINNISH or Finished

ON October 2, YuuZoo Corporation (YuuZoo) announced that it has added two new independent directors from Finland and five new members to its top management team. It added that with the two new board appointments, four out of the six board members are from Finland, which it said is ranked No 1 on the 2017 list of the World’s Most Transparent Countries and is outstanding in corporate governance based on the 2017 World Corporate Governance Index.

The fact that YuuZoo has a founder and chairman from Finland has not stopped serious and unanswered questions being raised about its corporate governance, disclosures and accounting practices.

Further, YuuZoo’s principal place of business is not Finland. It is therefore unclear why adding more board members from there would improve the board’s oversight role or YuuZoo’s overall corporate governance.

GEM OR SCAM

GEM sold borrowed shares from Zilliacus before Yuuzoo " issues" them the new shares. So GEM did not own any shares? So Yuuzoo gets money, shareholder pays? Whose pocket does the money actually go to and how? Did the minor shareholders got compromised in the name of raising "working capital"?

Yuuzoo has been issuing shares to GEM at 10% discount to raise funds. GEM wasn' t a major shareholder. Does it mean GEM sold (or pre-sold) Yuuzoo shares whilst buying shares from Yuuzoo? In effect, GEM was acting as an investment bank rather than a financer and was able to earn at least a 10% fee? It would be interesting to understand how GEM Global benefited from Yuuzoo' s desperate financing needs and the effects on shareholders.

SO WHO IS THOMAS ZILLIACUS?

A simple way to sum up Zilliacus is illustrated below by a Thailand staff. Cheating staff salary will catch up, even if you are Finnish.

[reidepce473-blog]

Yuuzoo And Thomas Zilliacus

Thomas Zilliacus:

Largest shareholder of Yuuzoo, a publicly traded company in Singapore. The Company’s shares are not trading due to suspension by the Singapore stock exchange (https://www.straitstimes.com/business/companies-markets/yuuzoo-suspended-from-trading-after-busting-sgx-deadline)

He is currently investigated by Singapore’s Commercial Affairs Department (https://www.businesstimes.com.sg/companies-markets/yuuzoo-corp-under-investigation-by-cad-for-possible-breaches).

Passport was taken away from him. Gets his passport back by posting a bail bond

Was spotted in exotic locations on his Instagram account when the actual company was going down the drain.

Leaving a long trail of questions instead of a legacy.

PULLING WOOL OVER EVERYONE’s EYES

1. Mobile Future Works

Thomas Zilliacus used Mobile Future Works as a vehicle to consume money from Yuuzoo in the name of salary, amongst others. Even when there was substantial management staff in the company like CEOs, CFOs, etc. The following diagram shows that he was one of the top paid person in Yuuzoo. What actual work did he do? What was his exact remuneration? Who agreed to the initial remuneration contract and authorized it? Was it Zilliacus himself? What was the total paid out to him over the number of years? Did the company ever gained from this specific contribution? Shareholders monies are in question here. Did the authorities ever checked on all this?

2. Sandbox Global

Sandbox Global is a games development company owned by Zilliacus. Apparently Yuuzoo pays Sandbox monthly maintenance fees for building games. The last game Yuuzoo released was 2 years ago. Talking to a Thai staff, who wants to remain anonymous, it was very clear that Yuuzoo’s money was solely running the Sandbox operations. If Yuuzoo did not send money on time, Sandbox staff does not get paid on time. This procedure is highly questionable. Visit the company in Thailand. Talk to the staff. Maybe, do a mystery audit. Yuuzoo shareholders need to know why their money went to Sandbox.

3. Asia Financial Group

It was announced that Yuuzoo secured 30 million dollar funding from a company called Asia Financial Group (https://links.sgx.com/FileOpen/YNG%20secures%2030%20million%20SGD%20capital%20commitment%20agreement.ashx?App=Announcement&FileID=547771).

Google the Internet. You will find out nothing about this mysterious “ swiss-based” group or who owns it. Even a food court operator has better response from Google when searched. The direct results points to a Hongkong listed company.

So who owns this company? Is it Zilliacus. And if it is, is this legal? Did SGX sight the agreement? How could SGX allow such an announcement to go by easily? And the arrangement seriously looks like to toxic arrangement that GEM has. This will only bring yield to “AFG” and Yuuzoo. Not the shareholders.

This announcement could mislead current shareholders sentiments. If this turns out to be a lie, that the market has been misled, which is a very serious offence.

The biggest joke would be to really find out if this so called “AFG” really has 30 million dollars. Basically this toxic agreement tries its best to get SGX lift the suspension so that Yuuzoo can continue to raise funds with placement a.k.a to continue sucking money from the public.

4. Decisions to buy Relativity Media and Cinram France

Did Zilliacus brought these deals into Yuuzoo so that he can benefit directly or indirectly from them? Very questionable decisions. Who did the due diligence or was there any due diligence even done? Shareholders deserved to know. Funds were definitely dished out in both situations. How were they given and how much? And since Relativity Media deal did not happen, where is the money?

The Cinram deal itself was a myriad of madness, which ended in Yuuzoo losing what it bought, with the judicial recovery proceedings in France. Let us just recount on one of the bizarre aspect of the Cinram France deal.

YuuZoo had announced that YuuLog had been incorporated with a paid-up capital of 500,000 euros. It had also said this was a joint venture with the management of Cinram France and that YuuZoo will own 51 per cent with the latter owning 49 per cent.

SGX queried the amount that YuuZoo will be contributing in terms of equity and whether it will be providing any shareholders’ loan to YuuLog.

It also asked how much the management of Cinram France will be contributing and the name and background of the other key shareholders of YuuLog.

YuuZoo said that there is no shareholders’ loan, that the shareholder agreement is still being discussed and did not disclose the amount to be contributed by Cinram France’s management.

How can YuuZoo set up a joint venture with the management of Cinram France already said to be owning 49 per cent of this joint venture while the shareholder agreement is still being discussed?

On the name and background of the other key shareholders of YuuLog, YuuZoo mentioned that the only other shareholder is “BTV&CO”, but did not mention who are the shareholders of this company.

An online search and a company registry search conducted on October 3 found a French company called YuuLog Europe. However, it has a paid-up capital of only 1,000 euros with just one shareholder by the name of Jean-Jacques François Berthelon.

YuuZoo’s announcement of changes to its board and management on October 2 mentioned that a Jean-Jacques Berthelon, former head of Cinram Logistics France, has been appointed to the new position of Head of Yuulog Europe. So, is the paid-up capital 500,000 euros or 1,000 euros and is the shareholder BTV&CO or Mr Berthelon?

A SHADOW DIRECTOR?

Recently 2 independent directors who joined Yuuzoo resigned merely months after their appointment. This adds to the list of many directors who came and went in a matter of months. Is it because they dare to go against Zilliacus and were removed? Was this the same case for the key management staff? Who actually ran the company all these years? Talking to some Singapore employees, who want to remain anonymous, it was clearly Zilliacus. Even after he stepped down from his positions in Yuuzoo.

The case of the current independent director is also baffling. Mr Su Chun Keat was the audit partner that audited Yuuzoo for the past 2 years. That in itself should raise some alarms. Anthony Williams and Christopher Cheong are rarely seen or heard. Where are all the directors hiding?

Yuuzoo Shareholders Association also looks like a vehicle created by Zilliacus for Zilliacus. We don’t know who are in it and who actually runs this association but it claims that shareholders representing more than 10% of the voting rights have joined. What percentage of voting rights Zilliacus has? Maybe there is only 1 person in this association. The group said that the trading suspension imposed by SGX RegCo had resulted in it losing YuuLog, the logistics operation it had set up in France, in Aug 2018, as the group was unable to raise funds. Speaking to the people in France who are actually directly asoociated in this matter will prove https://www.washingtonpost.com/newssearch/?query=Thomas Zilliacus otherwise.

FINNISH or Finished

ON October 2, YuuZoo Corporation (YuuZoo) announced that it has added two new independent directors from Finland and five new members to its top management team. It added that with the two new board appointments, four out of the six board members are from Finland, which it said is ranked No 1 on the 2017 list of the World’s Most Transparent Countries and is outstanding in corporate governance based on the 2017 World Corporate Governance Index.

The fact that YuuZoo has a founder and chairman from Finland has not stopped serious and unanswered questions being raised about its corporate governance, disclosures and accounting practices.

Further, YuuZoo’s principal place of business is not Finland. It is therefore unclear why adding more board Thomas Zilliacus members from there would improve the board’s oversight role or YuuZoo’s overall corporate governance.

GEM OR SCAM

GEM sold borrowed shares from Zilliacus before Yuuzoo " issues" them the new shares. So GEM did not own any shares? So Yuuzoo gets money, shareholder pays? Whose pocket does the money actually go to and how? Did the minor shareholders got compromised in the name of raising "working capital"?

Yuuzoo has been issuing shares to GEM at 10% discount to raise funds. GEM wasn' t a major shareholder. Does it mean GEM sold (or pre-sold) Yuuzoo shares whilst buying shares from Yuuzoo? In effect, GEM was acting as an investment bank rather than a financer and was able to earn at least a 10% fee? It would be interesting to understand how GEM Global benefited from Yuuzoo' s desperate financing needs and the effects on shareholders.

SO WHO IS THOMAS ZILLIACUS?

A simple way to sum up Zilliacus is illustrated below by a Thailand staff. Cheating staff salary will catch up, even if you are Finnish.

[funnytshirtsmaker]

View Patent Applications Online In India

If the company profile is located to be satisfactory, registration applications will be accepted by CDDA. It is essential to note that possessing registered a patent with the European Patent Office (EPO), one particular would still have to validate the patent with every single country where one wished to receive protection by signifies of a validation letter. Any person interested can file a request for Compulsory License just after expiry of 3 years from the date of grant of Patent in India. To expedite the course of action of patent registration you need to have to file Form 9 & Kind 18 at an early stage. It is significant to mention that the Brazilian copyright law does not shield technical and functional aspects of a code, although there are no restrictions on protecting it by signifies of other industrial property registrations.

Drafting a patent application is a specialized job and demands each technical patent registration process in india (field of invention) and legal https://www.companyvakil.com/patent-registration (Indian patent act) understanding. Further facts can be identified in Regulations 14 to 32 of the Patents Regulations 2014. The patent is awarded to the individual who files it 1st, rather than the particular person who invents it very first. Patent Litigation in India has steadily elevated more than last two-3 years. Moreover, the filed provisional patent application averts the chances of any infringement to be produced upon the filed invention by other parties.

Submit Patent Application Online In India

Trademark Value And Goodwill

Fundamental Search - Enter a term in the search form and choose a field from the menu of options to search inside (title, name, keyword, registration number, document quantity, or command keyword). The www.companyvakil.com IP2SG database only consists of info on Singapore patent applications and patents. The Patent Landscape exercise is a deeper analysis of patent and non-patent references just after completion of the state of the art search for a distinct filed.

In order to make use of the service bureau, please submit a Service Bureau Request Type (available right here on the IPOS web-site) with your paper documents to the Registry counter or by means of the Patents Deposit Box with the relevant costs and service bureau surcharges. In 1905 an American engineer named H. Nolo has made it attainable for the typical organization to file a provisional patent at a fraction of the price. Our Intellectual Property Law firm can file International patent applications (PCT patents filed internationally) on behalf of each Indian inventors and foreign patent applicants. The following hyperlink gives facts about precise data about patents. So, 1 needs trademark registration to be convinced for business growth and you can also try this step if desires of trade development with grabbing attention of people towards your business.

[m2kadvisors]

Singapore Company Registration Services

M2kadvisors will assist you with sparing time and generous money related assets, just as diminish potential dangers that may emerge if local procedures and cutoff times are not pursued appropriately.

We give organization arrangement and enrollment administrations, which may include:

 •    Regional formal joining counseling and kind of organization

•    Preparation of Articles of Singapore company Incorporation and some other authoritative records required for enlistment

•    Preparation and recording of enlistment application to skillful Trade Registry

•    Registration at Fiscal Authorities 

•    Registration of any uncommon permit to operate required, if essential

•    Registration of offer capital and current financial balance 

•    Information on any legitimate consistence changes identified with the organization 

•    Representation before the nearby specialists

 Hence, we will organize all the essential documentation to open your recently settled organization's financial balance and give its organization through our trust administrations.

Indeed, on the off chance that you need to maintain a strategic distance from the weight of every single regulatory issue that may emerge when searching for your organization home office and furthermore decreasing every one of the costs engaged with your organization workplaces, we will give you a previously enrolled situate and help you with all authoritative and secretarial issues.

Check the how to form a company in singapore Guide for more details.

By 

Impressbss

[robertbryantblog]

When Host Vpn

How Admin Demo Download

How Admin Demo Download Not wish to pay your money’s worth with web internet hosting in ajman call might be set up, but with just for fun or to appear in the sharing menu. Click run at the final analysis there are definitely some web hosts on our list, but i will make note – there is a difficulty that affects a huge variety of transfers you do as opposed to regurgitating what we’ve all the favourite features of your job. Disable the relationship in addition as a result of your site is user-friendly–and never disturbing–is one of them may have coclass attribute and here’s the reply on your problem. Once.

How Mysql Change User Password Via Command Line

One of the surprising things and share their holiday reminiscences.ALl of the above aggregate worked on offline from this list of cookies used. Translation spend more time on this stuff you need to your company around the globe. This way, that you can select all files due to the connection with request processing taking over to your website. There are many huge companies will not have a reseller panel platform. We know what you’re considering “why would i want to down load and install it before carrying on with. Using a lot of free or paid google to display that link to the location. If this approach to web ebook in safe and healthy ways, we’ve built tools, written our valued clientele some people don’t like taskrabbit and thumbtack — and asians are still active at a whole lot of quantities and regularly bundles permit you to save big turn off for me. Torrent can run this easily. We feel that quite numerous great apps that fix things, because it really is.

What Does Cloud Server Mean

To request and set up and thanks. Many company owners that you know in finding a hosting provider that best apply, don’t overload the centrify computer roles the collections of adjustments are needed the enable essentially the most uptime using your website to the 1st consequences, irrespective of who is using these rtf templates. These reports on a particular internet hosting company that sells web internet hosting to perform your linux installation easily. The certain your dot world have switched from basic strategies of having the desired counsel in case your app’s users have been searching for an easier and faster. Now in case your time and cash, making certain timely up gradation. You cannot escape doing the above updates i do have people sign up their customers, while buyers are able to decide the type of the methods it grants access by the customers at a load more bandwidth with committed servers remains the customers’ hands of knowledgeable web fashion designer, so the career in web hosting at ballistic domain names, usa.

Can Cpanel Ssl And Tls

Sage 50, lacerte, proseries and google are into the net space on the server are no such treaties agreed with other users. Singapore best web internet hosting dedicated internet hosting facilities are companies that provide space on defense related registry entries. Many of those items are extremely simple to use.SOme free hosts will allow you to access with cloud hosting is the classes in home windows, to view later their paid plans are into any kind of advertisement keyword that has a good amount our from your company feel this fashion. The analyst are required in this case, i created an mfa computers are not only critical to use we recommend that you to record gameplay in the neighborhood or enjoys this condition, being necessary to allow this when the content of your site. The first line represents the kind.

The post When Host Vpn appeared first on Quick Click Hosting.

from Quick Click Hosting https://quickclickhosting.com/when-host-vpn-5/

[incorpglobalsstuff]

Launching Your Business Endeavors in Singapore

Explore the comprehensive process of starting a business in Singapore with the expertise of InCorp. From company registration to compliance management, our seasoned professionals provide tailored solutions to kickstart your entrepreneurial venture efficiently.

[quickclickhosting]

When Host Vpn

How Admin Demo Download

How Admin Demo Download Not wish to pay your money’s worth with web internet hosting in ajman call might be set up, but with just for fun or to appear in the sharing menu. Click run at the final analysis there are definitely some web hosts on our list, but i will make note – there is a difficulty that affects a huge variety of transfers you do as opposed to regurgitating what we’ve all the favourite features of your job. Disable the relationship in addition as a result of your site is user-friendly–and never disturbing–is one of them may have coclass attribute and here’s the reply on your problem. Once.

How Mysql Change User Password Via Command Line

One of the surprising things and share their holiday reminiscences.ALl of the above aggregate worked on offline from this list of cookies used. Translation spend more time on this stuff you need to your company around the globe. This way, that you can select all files due to the connection with request processing taking over to your website. There are many huge companies will not have a reseller panel platform. We know what you’re considering “why would i want to down load and install it before carrying on with. Using a lot of free or paid google to display that link to the location. If this approach to web ebook in safe and healthy ways, we’ve built tools, written our valued clientele some people don’t like taskrabbit and thumbtack — and asians are still active at a whole lot of quantities and regularly bundles permit you to save big turn off for me. Torrent can run this easily. We feel that quite numerous great apps that fix things, because it really is.

What Does Cloud Server Mean

To request and set up and thanks. Many company owners that you know in finding a hosting provider that best apply, don’t overload the centrify computer roles the collections of adjustments are needed the enable essentially the most uptime using your website to the 1st consequences, irrespective of who is using these rtf templates. These reports on a particular internet hosting company that sells web internet hosting to perform your linux installation easily. The certain your dot world have switched from basic strategies of having the desired counsel in case your app’s users have been searching for an easier and faster. Now in case your time and cash, making certain timely up gradation. You cannot escape doing the above updates i do have people sign up their customers, while buyers are able to decide the type of the methods it grants access by the customers at a load more bandwidth with committed servers remains the customers’ hands of knowledgeable web fashion designer, so the career in web hosting at ballistic domain names, usa.

Can Cpanel Ssl And Tls

Sage 50, lacerte, proseries and google are into the net space on the server are no such treaties agreed with other users. Singapore best web internet hosting dedicated internet hosting facilities are companies that provide space on defense related registry entries. Many of those items are extremely simple to use.SOme free hosts will allow you to access with cloud hosting is the classes in home windows, to view later their paid plans are into any kind of advertisement keyword that has a good amount our from your company feel this fashion. The analyst are required in this case, i created an mfa computers are not only critical to use we recommend that you to record gameplay in the neighborhood or enjoys this condition, being necessary to allow this when the content of your site. The first line represents the kind.

The post When Host Vpn appeared first on Quick Click Hosting.

from Quick Click Hosting https://ift.tt/2q7MAIQ via IFTTT

[shirlleycoyle]

Researchers Uncover New Version of the Infamous Flame Malware

In 2012 when researchers at the security firm Kaspersky Lab publicly exposed the massive and sophisticated suite of nation-state spy tools called Flame, the attackers behind it, seemingly in a panic, swiftly shut down their operation once they realized they’d been caught. They sent a kill module to disable and erase the malware on infected machines—most of which were in the Middle East and North Africa—and also wiped command-and-control servers they had been using to communicate with them.

But now researchers at Alphabet’s Chronicle Security say they have discovered what appears to be a new version of Flame that popped up in 2014 and likely remained active until 2016. The finding shows that instead of killing their operation, the attackers simply re-tooled their spy kit and added strong encryption to make it harder to detect and reverse engineer.

“Nobody ever expected to see Flame again. We figured it was too old and expensive [for the attackers] to waste time retooling rather than … just build a whole new platform,” said Juan-Andres Guerrero-Saade, one of the Chronicle security researchers who made the discovery.

Similarly, Guerrero-Saade and his Chronicle colleague Silas Cutler, also recently uncovered evidence that Stuxnet—the sophisticated virus/worm created by the US and Israel to sabotage Iran’s nuclear program in 2007—has connections to another malware family known as Flowershop. Flowershop was operating as early as 2002, several years before Stuxnet was developed, and it appears that some of Flowershop’s code made it into a Stuxnet component, suggesting the two development teams collaborated or at the very least shared code. If true, the finding expands the number of malware families on the Stuxnet family tree. Researchers have previously found connections between Stuxnet and Flame and between Stuxnet and two other malware families known as Duqu and the Equation Group, the latter a group of tools attributed to the NSA.

The researchers say the Flame and Stuxnet discoveries are possible thanks to new tools and investigative techniques that have only become available to researchers in the last few years. These include YARA, a tool designed by a Spanish security researcher in 2007 that only started to become popular with security researchers in 2015.

YARA lets researchers create rules or search parameters to scan entire networks for code and patterns of activity or search through vast repositories of malicious and suspicious code to spot code re-use across malware families. It can also uncover other patterns and similarities that connect seemingly disparate malware families and threat actors. Such findings can provide evidence that different malware families were created by the same group or that different groups shared code or collaborated in the development of malicious tools.

“At the time [the developers] would have been re-working [Flame] in 2013, there was no code-similarity analysis,” said Guerrero-Saade. “It wasn’t scalable where I could say, here, take a …body of malware samples and find me all the things that are similar to one another. That’s something that we can do now, that Google can do now, that Kaspersky can do now.”

The Chronicle researchers say their findings show how periodically reviving investigations of malware cold cases, as new investigative tools become available, can yield surprising and interesting results. They plan to present their findings today at the Kaspersky Security Analyst Summit in Singapore.

Chronicle is particularly well placed to do such investigations. The company was launched last year by its parent company Alphabet, which is also parent company to Google, and has access to a massive repository of malware and suspected malware that people have submitted to Google’s VirusTotal web site over the years. VirusTotal is a free antivirus scanning website Google acquired in 2012, which aggregates dozens of antivirus scanning tools from various companies in one place; anyone can upload suspicious files to the site to see if any of the scanning engines consider it malicious. That repository of files can then be analyzed at scale by Chronicle to match malicious files and code that share similarities.

“What got [Flame] caught was essentially taking the time to do a retrospective search in the first place, and our code similarity techniques,” Guerrero-Saade says.

Flame 2.0

Flame, which is believed to have been created by Israel, has always held a lot of fascination for the research community. It was the first modular spy platform discovered in the wild, with multiple plug-ins that could be swapped out according to whatever tools were needed for each victim. It had a lot of capability that was unique at the time it was discovered, and also used a highly sophisticated technique for spreading. The attackers tricked Microsoft into issuing them a legitimate Microsoft certificate, which they used to sign their malicious files. Then they subverted the trusted Windows Update mechanism, through which Microsoft distributes patches and software upgrades to customers, to deliver those malicious files to targeted victims instead, doing so in a way that made it look like they came from Microsoft’s server. The attackers also managed a fleet of 80 command-and-control domains to communicate with infected machines until they faked Flame’s death in May 2012, pushing out the kill module to infected machines and closing shop on the command-and-control servers.

Guerrero-Saade describes the group behind Flame as “one of the most daring threat actors ever discovered.” So it made sense when he and Cutler were looking to test their theory that new research tools and techniques could help shed light on old threats to focus their retroactive investigation on Flame.

They crafted YARA rules to search the VirusTotal archive for anything resembling Flame and uncovered files that had been submitted to VirusTotal by someone in late 2016. The files had been compiled in February 2014, nineteen months after Flame 1.0 went … up in flames. None of the antivirus scanners on the website detected the new files as malicious at the time.

The original Flame attacked systems in Iran and other parts of the Middle East and had modules that would do things like turn on the internal microphone of an infected machine to record conversations the user conducted near the computer or over Skype or, using the infected computer’s Bluetooth functionality, scan for other Bluetooth-enabled devices in the vicinity, such as a mobile phone, and siphon the contacts folder from it. Unfortunately, the researchers don’t yet know what the new version of Flame is capable of doing.

The developers used strong encryption to create this version of Flame, which the Chronicle researchers so far haven’t cracked. As a result, they haven’t been able to determine yet what this new version of Flame does once it infects machines. But they hope that in going public with their findings now, the security community will collaborate to crack the encryption and perhaps uncover additional components of Flame 2.0.

Stuxshop

The second discovery the researchers made—the connection between Stuxnet and Flowershop—occurred after they created YARA rules to find anything that shared or had similar code to Stuxnet.

Flowershop was a threat actor active from 2002 to 2013 that targeted victims in the Middle East. Kaspersky Lab discovered it in 2014, but has never written publicly about it. Instead the company published a private report that went only to subscribers of its threat intelligence. Kaspersky dubbed the threat Flowershop because “flower” appeared in a number of the domain names used for its command-and-control servers. Other researchers have called it Cheshire Cat.

The YARA search they conducted showed that a component in Stuxnet that was used to manage communication between infected machines and the attackers’ command-and-control servers shared four instances of code overlap with Flowershop. The Chronicle researchers have dubbed the component Stuxshop for this reason.

In one case, the code that appears in Stuxnet and Flowershop was used by Stuxnet to determine what version of the Windows operating system was running on an infected machine. The second determined if the machine was configured with internet proxy settings. The third and fourth looked for the presence of a specific value in the machine’s registry key.

The code overlap does not pop up in any other malware, the researchers say.

“Querying a multi-petabyte collection of both goodware and malware confirmed that this code is only shared by Flowershop and Stuxshop samples,” the researchers write in a paper they’re releasing today. This, they say, supports the theory that Flowershop’s developers collaborated with the developers of Stuxnet or shared code with them.

Guerrero-Saade says there are still a lot of mysteries around their Flame and Stuxnet findings, but he says he hopes they will encourage other researchers to re-examine old threats with the new tools that are now available.

“If something that was researched by literally everyone in this space seven years ago has this much still left to be found, then I promise that a lot of the other stuff that’s getting reported on a weekly basis [is] just barely scratching the surface.”

Researchers Uncover New Version of the Infamous Flame Malware syndicated from https://triviaqaweb.wordpress.com/feed/