HKCERT Warns of 75% Rise in Double 11 Phishing; Hong Kong Accounts for Nearly One-Fifth of Exposed Servers in AI Automated Attack Framework — Daily AI and Cyber Risk Summary
In a nutshell: Phishing cases in Hong Kong have surged ahead of Double 11, nearly one-fifth of the globally exposed servers of an AI-driven automated attack framework are located in Hong Kong, and data breaches and AI fraud incidents continue to emerge both within and beyond the region.
HKCERT Warns of Double 11 Online Shopping Scams; Phishing Cases Up About 75% in First Ten Months (HKCERT via Yahoo Finance, 2026-11-06): HKCERT reminds the public to guard against "Double 11" online shopping scams. Data shows that from January to October 2026, a total of 8,764 phishing cases were recorded, a surge of about 75% compared with the same period last year; social media accounted for over 40% and e-commerce and payments about a quarter. HKCERT notes that fraudsters are already using generative AI to produce highly realistic fake messages, and it reveals the deception tactics across three high-risk stages — before ordering, at payment, and after purchase — urging the public to "verify first, then act".
AI Attack Framework ARTEX Widely Exposed; Hong Kong Accounts for Nearly One-Fifth (Check Point Research, Microsoft Threat Intelligence, 2026-11-05): The open-source AI automated penetration-testing framework ARTEX had its dashboard hosted on 2,557 systems in total, of which 1,608 were still publicly reachable at the time of investigation; the infrastructure was concentrated in the US (54%), Hong Kong (295, or 18%), and China (6%). Operation logs show attacks were mostly carried out automatically with minimal human intervention, most frequently using models such as DeepSeek Flash. Microsoft reported the same day that attackers used ARTEX to search for credentials on GitHub and stole Azure Key Vault data within about five minutes, illustrating how the speed and scope of automated AI attacks are rapidly expanding.
Kaohsiung Police Bust AI Automated Data-Theft System Involving 230,000 Taiwan–Hong Kong–Thailand Records (Central News Agency CNA, 2026-11-06): The Criminal Police Brigade of the Kaohsiung City Police Department arrested a Mr. Lin, who is suspected of using generative AI to learn programming and build an automated cyber attack system that illegally breached website back-ends to steal over 230,000 personal records from Taiwan, Hong Kong, Thailand, and elsewhere, selling them on the dark web for profit. Police remind enterprises and website operators to update systems regularly and conduct information-security health checks and vulnerability scans.
Singapore Telco M1 Hit by Cyber Attack; Customer Data Suspected Leaked (Lianhe Zaobao, 2026-11-06): Singapore telecommunications company M1 confirmed a data breach on 30 October 2026, suspected of leaking customers' names, ID numbers, dates of birth, mobile numbers, addresses, and email addresses, though payment card and bank details were unaffected; Singapore's Personal Data Protection Commission (PDPC) has launched an investigation and the incident is contained.
US Prosecutors Charge Three in $129 Million AI Voice-Fraud Scheme (ABC News via AISeng Tech, 2026-11-06): The US Attorney's Office for the Southern District of New York charged three men, alleging that over 18 months they used AI-generated voice and video to impersonate CEOs and lawyers, defrauding companies of nearly $130 million; victims included hospital systems, banks, and fintech firms, and the defendants have been arrested in Spain and the UK awaiting extradition.
The content of this column is provided for general information and educational purposes only, and does not constitute insurance, legal, or professional advice. Actual coverage is subject to the terms of individual policies.