At the first crime scene, evidence with little to no traces complicates the investigation of law enforcement agents. However, in our defense, there is no way for us to track activities that we had on our computer, every purchase, or every website click. Thus, it created an opportunity for hackers or evil parties to infiltrate our mobile devices, particularly laptops, where we often store our valuable information. We never know when they will collect our private information, like credit cards or social media accounts. However, once they hacked and installed ransomware, there is little we can do to solve them. So, how to solve hacking or ransomware?

You don’t need to master coding or hack to unlock encrypted files. With Desktop Triage, anyone can track the hacking history and know its source with only a few clicks! We have helped law enforcement agents to shorten days and weeks of evidence collection into minutes while maintaining our top-notch technology. One of our clients, the Telecommunications Investigation Corps of Criminal Investigation Bureau, has been using our software to collect their on-site evidence. Even the National Police Agency branch has used our software, so why don’t you?

Why choose us?

Desktop Triage is the most advanced computer forensics field kit. It captures both non-volatile and volatile data on operating Windows while keeping critical evidence such as login accounts and open files safe. Along with our sister software, Smartphone Triage, our software is built with an intuitive user interface, so anyone can master our software and collect evidence in no time. Also, our screen capture feature increases the software’s capability to retrieve evidence instantly. The OCR and PSR technology also allows users to preserve chat history and messages presented on the screen, which helps them map out suspects’ social networks. Our team has crafted features that improve evidence retrieval efficiency and maximize user experience. So now, say goodbye to ransomware!

Our Main Functions

1. Enhanced Windows PSR and Screen Recorder

Documents whole forensics process on the computer screen, avoiding ambiguity and serving as a crucial element of Chain of Custody.

2. Automatic scroll

Captures screens of social media and websites on-site, ensuring the collection of evidence that can only be seen on the field to guarantee the most thorough investigation.

3. Comprehensive list of Windows artifacts

Collects over 35+ key Windows artifacts on-site in just a few minutes, including security, application, and other related event logs. For the registry category, all essential keys are included, such as Prefetch, Shellbags, RecentFile, UserAssist, and many more. Our software provides 3 express recommendations for those of you who are unfamiliar with extracting evidence. Also, 2 custom options for you to freely choose the artifacts you need.

4. Disk Compression

Compress critical files to zip disk as the substitute of key logical image. The disk contains most artifacts and has proven to be more time-efficient than the usual imaging process.

5. LiveSearch

Retrieves all the file information from physical and logical disks, targeting the existence of suspicious and critical files. By identifying the related files, investigators can copy and export the data while keeping the crucial evidence.

6. Report generator

Ensures evidence admissibility and report customization. By selecting the contents desired, investigators can generate a report according to the requirements of cases. The software also provides an option to preserve evidence on the blockchain with a hash value.

Wanna Know How Desktop Triage Fight Against Hackers?

We made a youtube video about laptop hacking processes and the software solution to solve that problem. So, if you are interested in the hacking process and how desktop triage can help investigators to track them out, check our video on youtube now!

Interested in Partnering with Us?

We love to build valuable connections worldwide and share our passion for forensic software with our partners! Until you read this passage, we have successfully collaborated with companies in America, Europe, Southeast Asia, and many more. Now, we are welcoming new partners and resellers anywhere across the world to join our passionate community. Click this link below and become our strategic partners now!

https://www.my-triage.com/smartphone/partners.html

Free Registration Just For You

For our Medium readers, we are giving you a free trial for the Desktop Triage service. Just click the registration link below, fill in the registration form, and you are done. It does not even take 5 minutes to finish!

https://www.my-triage.com/desktop/

We are BlockChain Security. We make digital evidence dependable!

This Is How You Track Hackers History Within Minutes! was originally published in BlockChain Security Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

Smartphone Triage is a data collection software that combines blockchain and digital forensics to collect digital evidence on smartphones. With Smartphone Triage, law enforcement agents can now collect crucial data and save the day!

Upon the advancement of technology, people enjoy services and routines that were considered science fiction a few decades back. We have heard the greatness and unlimited possibilities of technology progress in the news, social media, or any available internet platform. However, its convenience has also brought us new problems, such as overwhelming data, outdated technology (hand-held video cameras), lack of facility resources, etc. Since these issues will surface along with technology developments, the government should play a vital role in minimizing its harm to society, one of them being law enforcement agents. As government bodies, they have the responsibility to fight those digital crimes by collecting relevant evidence. Although evidence collection is one of their main priorities, the unlimited access to data complicates their overall justice process.

So, how to solve them effectively and efficiently? With Smartphone Triage, law enforcement agents can now collect crucial data and save the day! Since mastering traditional forensic tools requires years of experience, we designed software for front-line investigators for fast and simple data extractions. They can collect key evidence from the targeted device and generate custom reports in only five minutes. Our system is equipped with automatic scroll and screenshots features, so any evidence shown on screen can be obtained easily. We also assure the authenticity and permanent storage for those pieces of evidence with our blockchain technology. Now, collecting data from mobile devices is simple and safe.

Introduction to Smartphone Triage

Smartphone Triage is an innovative solution combining digital forensics and blockchain to collect mobile and cloud data. This trusted software has assisted law enforcement agents and corporate auditing departments in collecting screenshots of suspicious mobile phones as evidence. Screenshot capturing modes such as fully automatic, continuous, or single are available to use. Moreover, the software allows users to import files from mobile phones, perform text recognition and fast keyword searches. Since reports can be automatically generated based on collected evidence, it will undoubtedly improve the efficiency of on-site investigations.

What’s Good about Smartphone Triage?

Smartphone Triage has dedicated itself to provide the best evidence extraction service in the industry. Our technology has five highlight features, which are:

1. Case management
   Fill in case information, adjust OCR results and conduct cross-case keyword searching to maximize the software experience
2. Android and IOS evidence collection
   Choose between Automatic, Batch Automatic, Single, Semi-Automatic, File import, scheduled screenshot, screen recording modes which supports most of the social media and chat apps in the market
3. OCR and keyword filtering
   With Optical Character Recognition (OCR), the context of the captured images can be identified and filtered with 99% of accuracy
4. Motion Detection Algorithm
   Extract from H264, exclude moving ones, and conduct video OCR
5. Report Generator
   Export all captured evidence or just selected ones as Docx, CSV, or pdf. The hash value of pdf reports can be uploaded to the blockchain. By permanently stored on the blockchain, the admissibility of evidence is secured.
6. Relationship Analysis
   View which users interact with the target device in a simple graphical design and filter the chats with calls, files, or photo history

New Features

After experimenting with trials and errors, Smartphone Triage is back with new features to improve your user experience. We proudly welcome Social Connection Collect and Downgrade as a part of our big family. So, how can these features help your user experience?

Social Connection Collect allows users to have a connection overview in the targeted devices in seconds. Apart from chatting software, users can retrieve valuable information from SMS and call logs, which may be the most valuable leads in many investigations.

With our Downgrade feature, users can obtain the database of the target applications. The database could include deleted messages, chat rooms, or files that are undetectable from the screenshot feature. Furthermore, users can import those databases to other mobile forensic software for further investigation. This efficient feature allows users to check their progress and how far they are in the seven-step process. Even when the downgrade fails to execute, the users can still identify which step fails and make corresponding solutions.

New Youtube Video

Our new youtube video has come out! If you want to know more about Smartphone Triage and its latest features, check it out on youtube now! You are going to love it.

Interested in Partnering with Us?

We love to build valuable connections worldwide and share our passion for forensic software with our partners! Until you read this passage, we have successfully collaborated with companies in America, Europe, Southeast Asia, and many more. Now, we are welcoming new partners and resellers anywhere across the world to join our passionate community. Click this link below and become our strategic partners now!

🤝 https://www.my-triage.com/smartphone/partners.html

Don’t We All Love Something Free?

We are offering a Smartphone Triage free trial for everyone! Yes, free.

All you need is to click the link down below and fill in the registration form. Enjoy your free trial!

👉 https://www.my-triage.com/

We are BlockChain Security. We make digital evidence dependable!

This Software Collects Smartphone Data in Seconds! was originally published in BlockChain Security Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

Sometimes unforeseeable incidents such as traffic accidents, document falsification, patent infringement happened. During this chance of dispute, the court will not count every submitted evidence as admissible…

Felicia Ellenby

Ever since the rapid development of the internet, we experience a recent wave of problems that never existed in the previous decade. Issues such as overwhelming data and emerging hackers have made it hard for public authorities and law enforcers to convict modern criminals. There are fewer reasons for law courts to believe every digital evidence eligibility, and they have limited resources on handling those cases.

Finding the relevant supporting evidence will help any public authorities to overcome such problems. Among billions of digital data available, they need to find the Cinderella shoe. If the data found is fitting and proven authentic, it will change the court game and significantly increase the lawsuit success rate. The question is, how to turn in evidence as admissible? How to let the judges believe in the authenticity and validity of the evidence provided? This is where Blockchain Witness comes in handy.

With a few clicks, you can use our digital service whenever and wherever you are. Every time you find relevant digital evidence, all you need is a screenshot or screen record of those rightful or shameful deeds. Our blockchain technology will help you determine the authenticity of those pieces of evidence, and now, you can safely submit them to court. Finding relevant evidence to each case will undoubtedly fasten your lawsuit closing, and Blockchain Witness is the service to go.

About Blockchain Witness

Blockchain Witness is a one-stop digital evidence preservation service for enterprises who often in need of court evidence. Our professional service allows users to manage, sign, store, and secure documents in a simple procedure. Should there be any search for relevant evidence, users can upload and screenshot the critical contents from those documents or websites for preservation purposes. Every time the data is being uploaded, the content remains protected through asymmetric encryption, and our server will store its encrypted data. Now, accumulating evidence will never be a problem. Try our service for the ultimate experience!

Blockchain To The Rescue

Blockchain Witness dedicated itself to utilizing the tamperproof, irrefutable, and permanent features of blockchain to enable individuals, businesses, and law enforcement agencies to store digital evidence and data on the blockchain. In addition to preserving crucial evidence, it can also be effortlessly validated in the system whenever needed. Our technology allows users to:

1. Identify Files in a Unique Way
Discover Blockchain files with its unique digital fingerprint identifications, preventing file tampering

2. Prove Digital Evidence Validity
Verify files using Blockchain’s consensus mechanism, averting tampering suspicions

3. Encrypt and Preserve Files Permanently
Upload and chain files to Blockchain, preventing digital evidence loss or damage

Service Features

Blockchain Witness enables users to manage crucial data by protecting and managing their files through our numerous technologies. Our service is equipped with a search function that locates any targeted files while tackling the latest impractical and high-risk issues. We make sure our technology is providing a safer and more efficient process workflow.

The features consist of:

a. One-Click Screenshot Upload
Instantly capture your browser’s screen and upload it to our cloud storage

b. Information Forgery Prevention
Block captured screenshots after altering page content or URL, which prevents content impersonation

c. Blockchain-based Preservation
Easily upload digital fingerprint documents on blockchain for lifelong preservation. The client and attorney can both rest assured that their evidence is safely stored on our distributed nodes. Even in case of any evidence tampering, you can easily verify the file authenticity on the blockchain.

d. Cloud-Storage Convenience
Keep track of your cases online, and no need to worry about your mobile device and desktop limited storage space. Now, you can manage and protect all your important files and documents efficiently

e. Double-Protection File Security
Users can only unlock their uploaded files with our advanced USB fingerprint reader. This security prevents confidential data leakage by unauthorized personnel or malicious hacker attacks.

f. Private and Timely Information Sharing
After updating our software, you can now share crucial documents with designated parties. We provide an additional feature where you can set sharing time limits which enables flexible private file sharing.

Free Trial, Free Trial, Free Trial

To honor the legal enforcement, we offer Blockchain Witness free trials for law practitioners and witnesses to enjoy. For many decades, they have spent hundreds of thousands of time researching and collecting supporting evidence to win lawsuits and reclaim what’s rightfully theirs. However, with rapid technological development, it is nowhere possible for a human to filter billions of data in a short amount of time. Therefore, we wish to support the sacred legal system and reduce the mountains of paperwork in our way. If you are lawyers, prosecutors, witnesses, or law enforcers in need of help, we are more than glad to offer Blockchain Witness as your dependable digital partner.

What are you waiting for? Contact us now: service@chainsecurity.asia

Scan this QR Code to download our mobile app for free!

We are BlockChain Security. We make digital evidence dependable!

The Simplest Way to Preserve Digital Evidence: Blockchain Witness was originally published in BlockChain Security Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

不動產後疫情數位革命：E-contract 區塊鏈平台讓房地產經紀人實現零接觸遠端簽約

五月疫情爆發，短時間內升級至三級警戒，造成許多產業及企業不得不施行遠端辦公，但對於不動產領域之房仲、地政士、估價師、測量人員等從業人員，受作業流程習慣與法規限制影響，仍須冒著風險外出工作。目前雖有部分虛擬實境零接觸看屋，但在最後「簽約」階段，仍遭遇許多困難，在疫情嚴峻時期只能犧牲健康安全，持續土法煉鋼的拜訪客戶簽約以尋求生路。

不動產業數位轉型競賽的號角已吹響

未來在疫苗注射普及或後疫情時代，民眾在疫情期間所改變的生活和工作習慣卻不會回到過去，疫情已成為數位轉型的推手。當遠距作業成為新日常型態，產業的數位轉型將是勢在必行，也將會是拉開企業競爭力的關鍵。此外，內政部於本月初通過「土地登記規則」之修正草案，協助從業人員降低接觸風險，更加速推動產業數位化及轉型。有專家更預期解封後將有一波報復性需求，而如何在業界率先掌握更自由、更有效率的不動產新作業分工模式的轉型競賽也正式開展。

自己人挺自己人！台灣新創與領域專家推出簽約存證平台

在這前所未見的關鍵時機，為求廣大的不動產從業同仁；尤其是仲介與地政士的執業安全與消費者權益，協助產業度過危機。台灣本土新創「區塊科技」、「雪喬」與「安轉不動產區塊鏈公司」結合逢甲大學陳建元教授團隊、產業界與科技界的資源，利用區塊鏈技術推出 E-contract 線上簽約與存證平台，專門為不動產作業特性設計規劃，讓所有從業同仁都能安心、放心執行遠距簽約，文件存證有效又免佔空間。並決定在疫情期間同島一命，免費提供使用至八月底，一同渡過難關。

逢甲大學建設學院院長周天穎教授也表示智慧城市的核心在智慧治理，智慧智理的核心在區塊鏈與智能合約，公私部門都應該及早導入區塊鏈與智能合約為基礎的無紙化行政作業流程，E-contract 是一個很好的開始，土地開發與不動產業者都要開始探索應用。

數位轉型須確保文件法律效力及證明力

E-contract 不只提供線上簽約服務，減少作業時間與紙張列印及儲存成本，虛擬取代實體，免受時間與空間的限制。更透過區塊鏈技術保障合約完整性與不可篡改性，確保交易安全與買賣雙方權益，亦可成為日後糾紛發生的舉證證據。在房地 2.0 時代下，也能幫您永保列舉扣除額的依據。

E-contract 的遠距簽約與文件存證的使用，是適應新時代最好的開始，區塊科技與雪喬及安轉公司期許能協助並和產業一同渡過危機，改善流程效率，安全的迎向數位化作業常態。目前 21 世紀不動產總部及旗下加盟店與美商 ERA 易而安不動產都已開始實際導入應用，面對突發的疫情快速反應，讓客戶服務及公司營運能如常進行，提升業界競爭力。

關於 區塊科技

區塊科技 BlockChain Security 主要為整合資訊安全、數位證據保存及區塊鏈技術，建構出適用於各產業的資安鑑識與數位存證解決方案。平衡區塊鏈處理效能與資料隱私，區塊科技同時注入數位資料防偽、區塊鏈合約簽核、電子郵件防詐等自研發專利能量，以先進技術確保專業品質，並持續將區塊鏈存證應用導入多元場域中，為企業及民眾帶來安全及便利的生活。更多訊息，請瀏覽公司網站 https://chainsecurity.asia/

關於 安轉不動產區塊鏈公司

由一群跨領域的專業人士所組成，主要由逢甲大學土管系陳建元教授的區塊鏈研究團隊、地理資訊研究中心、雪喬公司以及具有前瞻視野之不動產業者所組成。各領域的專家之集結，希望能專注於不動產領域之區塊鏈技術應用與導入，並與金融科技、智慧城市、大數據與 AI 科技互相整合，透過以區塊鏈為基礎的地產科技的發展帶動不動產業界之數位轉型，讓不動產交易更安全與更有效率，大幅降低交易費用與交易風險。更多訊息，請瀏覽產品網站 https://e-contract.entrance.asia/

關於 雪喬股份有限公司

雪喬股份有限公司 (Snowbridge Inc.) 致力把北歐金融科技介紹到台灣，透過和本地夥伴廠商的合作，協助金融機構和企業客戶快速地讓新創應用落地。雪喬由瑞典與台灣的連續創業家合資創立，公司願景是建立銜接北歐「雪」國和台灣金融科技之「橋」，讓兩地產品與技術互通有無，加速新一代 Fintech 應用落地實現。我們著重的領域包括：區塊鏈平台、電子支付、資訊安全、文件存證管理等。本公司除了開發應用系統之外，也提供技術顧問服務、教育訓練，以協助銀行和企業用戶快速升級應用方案。更多區塊鏈技術訊息，請瀏覽雪喬網站 http://snowbridge.tw

We are BlockChain Security. We make digital evidence dependable!

不動產數位新時代！新創區塊科技聯手安轉不動產專家推出 E-contract 區塊鏈線上簽約存證平台 was originally published in BlockChain Security Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

Companies are either based in Taiwan or founded by Taiwanese-Americans

(Press Release, TTA) San Francisco, CA —

On June 8, Taiwan Tech Arena Silicon Valley (TTA SV), a non-profit that helps Taiwanese startups grow in the United States and U.S. startups to connect with technology in Taiwan, is joining forces with Plug and Play, a top accelerator in Silicon Valley, to host GOAL 21 Expo, a virtual showcase of seven startups in the blockchain, augmented reality and virtual reality spaces. The event is virtual and open to the public and will take place online from 4 to 6 p.m. PDT.

All companies that are showcasing their services at the GOAL 21 Expo were part of Plug and Play’s Global Overseas Acceleration & Learning (GOAL) program, which helps prominent start-ups from around the world foster connections in Silicon Valley and provides tools the start-ups need to get to the next level.

The companies that will participate in GOAL 21 Expo include:

• BlockChain Security

BlockChain Security helps property managers and agents to get rid of bad tenants and win court cases easily by providing authenticity of documents, including lease agreements and multimedia and communication records. https://chainsecurity.asia

• MAKAR (MIFLY)

Want to edit an artificial reality and virtual reality (AR/VR) video but don’t have a technical background? MAKAR is the AR/VR editing platform for educators. https://www.makerar.com/

• ScienceVR

ScienceVR is working with Smithsonian museums to create exciting and educational digital museum experiences using virtual reality technologies, so that kids can learn history or science in a fun way. https://sciencevr.com

• AIPLUX

AIPLUX provides a one-stop platform for cross-border IP protection. Their first product, LOFA, allows users to file for trademark applications in multiple countries without the barriers of languages and local regulations, and finish the filing in five minutes, saving 70% of the service fees. https://aiplux.com

• Tourmato

A housing property virtual tour technology that looks real. Tourmato helps shorten the home sale cycle by allowing buyers to virtually visit a property in detail via a drone. https://www.unusly.com/

• KryptoGO

KryptoGO helps financial institutions, such as banks and insurance companies, to quickly identify high money-laundering risks with its due diligence engine built on top of artificial intelligence and other technologies. https://kryptogo.com/

• ITM

International Trust Machines offers blockchain-enabling software development kits that help supply chain manufacturers, smart mobility and energy enterprises save time and money during their data verification process. ITM is currently a Microsoft co-sell partner and listed in Azure marketplace. https://itrustmachines.com

The GOAL 21 Expo will kick off with a virtual fireside chat between Chih Cheng Yeh, director of Science & Technology Divisions at the Taipei Economic and Cultural Office in San Francisco, and Jojo Flores, co-founder of Plug and Play.

Then Nils Michaelis, managing director of Accenture, and Dave Blakely, senior vice president of Mach 49, will talk about blockchain and the future of augmented reality, virtual reality and education entertainment.

TTA PRESS CONTACT：林茗歆 Erica Lin
Email: erica.lin@itri.org.tw

We are BlockChain Security. We make digital evidence dependable!

7 Blockchain and Virtual Reality Start-Ups to Participate in Virtual Showcase June 8 was originally published in BlockChain Security Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

(Press Release, TTA) San Francisco, CA —

突破疫情限制，來自台灣的四個區塊鏈（Blockchain）與三個虛擬實境(AR/VR)科技新創團隊，六月九日在矽谷知名新創加速器Plug and Play主辦、台灣科技新創基地（Taiwan Tech Arena, TTA）協辦的線上GOAL 21 EXPO，向矽谷與台灣超過100名投資人與企業代表，展示數位經濟的創新技術與商業模式，其中重量科技Krypto更以嶄新技術獲得台灣兆豐金海外分行金融監理平台訂單，台灣科技新創在全球數位經濟競爭中展露頭角。

此次GOAL 21 EXPO 有來自台灣和奧地利共8家科技新創參與。科技部產學司許增如司長在開幕致詞中表示，近年科技部積極發掘潛力科研成果，透過TTA計畫加速國際商業化，今年邀請 Plug and Play 輔導七個新創團隊，由於疫情限制全程線上虛擬進行，透過多元方式團隊直接接觸矽谷商業文化，深入國際一級新創戰區，輔導期間個別團隊獲得競賽獎項與國際試訂單，輔導成效優異，本次成果發表會的成功就是最好證明。

Plug and Play 聯合創辦人 JoJo Flores 和駐舊金山台北經濟文化辦事處科技組葉至誠組長，針對台灣面對疫情時，如何推動新創政策、協助新創發展、鏈結台灣與矽谷的重要性等議題進行精彩對話。之後，Accenture 總經理 Nils Michaelis 和 Mach49 資深副總裁 Dave Blakely，深入探討區塊鏈以及結合 AR/VR 技術的教育與娛樂未來，和圍繞在這兩個主題的最具創新性的創業理念，以及來自世界各地的創意。

從 2016 年開始，科技部每年經過核定，透過公開甄選機制，接受台灣的新創公司，申請參加前進矽谷赴美商務發展計畫，獲選團隊可以赴美接受國際加速器與矽谷業師的輔導，讓新創團隊在短期間內，無論在主打產品定位、進入美國市場機制、重要客戶管理、商業模式、稅務法律等，各面向地提高其市場競爭力。期待能在短期間內適應美國矽谷當地的新創生態文化，並且獲得美國的第一筆訂單或是資金。

此次入選參加培訓的團隊有睿加科技(AIPLUX)、區塊科技(BlockChain Security)、國際信任機器(ITM)、重量科技 (KryptoGo)、米菲多媒體(Mifly)、實境數位科技(ScienceVR) 和延展實境(Tourmato)。

• 睿加科技 (AIPLUX)

睿加科技 (AIPLUX) 提供智能平台讓任何人都可以在五分鐘內輕鬆註冊國內外商標，獲取智財保護。https://aiplux.com

• 區塊科技 (BlockChain Security)

區塊科技 (BlockChain Security) 推出區塊鏈不動產租賃存證平台，協助房屋租賃業者保存證據、贏得官司，趕走惡意不付房租的房客。https://chainsecurity.asia

• 國際信任機器 (ITM)

國際信任機器 (ITM)幫助能源等工業企業，在物聯網時代、大量資料移轉過程中，保持數據完整性。透過整合物聯網設備與區塊鏈技術，讓企業和他們的合作廠商相信彼此的資料，大幅降低溝通成本，加速企業與政府數位化轉型。https://itrustmachines.com

• 重量科技 (KryptoGo)

重量科技 (KryptoGo)為銀行、保險等金融機構提供防洗錢科技，以人工智慧交叉比對負面新聞，還能追溯到虛擬金融的金流軌跡，並有中文自然語言處理技術。https://kryptogo.com/

• 米菲多媒體 (Mifly)

米菲多媒體 (Mifly)的MAKAR增廣實境、虛擬實境影片編輯器讓像是老師等非技術人員也能製作增廣實境、虛擬實境影片，已有2萬多開發者使用，這讓更多民眾了解到什麼是AR/VR/MR​。https://www.makerar.com/

• 實境數位科技 (ScienceVR)

實境數位科技 (ScienceVR)和Smithsonian博物館合作創造虛擬展覽，讓學生能使用增廣實境體驗博物館，學習科學與歷史。https://sciencevr.com

• 延展實境 (Tourmato)

延展實境 (Tourmato)結合無人機，提供房屋買家虛擬看房的科技，幫助仲介和賣家更快賣出房子。https://www.unusly.com/

TTA PRESS CONTACT：林茗歆 Erica Lin
Email: erica.lin@itri.org.tw

We are BlockChain Security. We make digital evidence dependable!

台灣新創矽谷發光 科技部TTA七個區塊鏈與虛擬實境新創團隊 獲矽谷投資人青睞 was originally published in BlockChain Security Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

伴隨著雲端浪潮來襲，過去十年間，企業上雲成了數位轉型最重要的 IT 現代化策略之一。同時，為減少繁瑣的運營環節及提高工作效率，企業也紛紛走向無紙化辦公模式。區塊科技與 Openfind 網擎資訊再度攜手合作，以區塊鏈技術與網擎雲端信箱服務結合，推出「e-Attestor 數位存證信函服務」，提供郵件內容雜湊值（Hash Value）上鏈（保存副本），和區塊鏈驗證（查閱副本）的功能，以公私雙鏈存證的方式來扮演數位世界的公正第三方，並用加密防偽專利來確保資訊安全，協助網擎 MailCloud用戶與所有 Email 使用者寄發「數位版」存證信函。

傳統紙本存證信函必須透過郵局做為公正第三方，保存信件副本以供查閱證明，且寄發時還需要員工專程跑郵局購買信函專用紙、依規定格式繕寫、寄雙掛號，過程繁複且費時。區塊科技執行長黃敬博表示：「e-Attestor 除了更符合現代人寄 Email 往來的使用習慣，也能夠同時保障證據完整性與使用者隱私，且費用上電子版本更可減少 50% 的支出。」

同時，區塊科技也與達文西個資暨高科技法律事務所聯名，由專業律師檢視存證流程與機制，並確保法律效力與紙本存證信函相同。達文西法律事務所葉奇鑫所長表示：「e-Attestor 數位存證信函服務不僅能作為可靠證據，在企業數位轉型的過程中，亦能完善電子文件與智慧財產管理流程，並大幅降低成本，對於常寄存證信函的單位無疑是一大福音。」

數位存證信函服務使用上不受時間、地點限制，MailCloud 用戶與一般使用者只要透過收發 Email，簡單三步驟即可隨時隨地輕鬆寄出數位存證信函：

1. 撰寫電子郵件。
2. 將 BCC 密件副本欄位加入 email@e-attestor.com 後寄出。
3. 區塊科技 e-Attestor 會通知付款，完成付款後就會立即存證。

e-Attestor 數位存證信函服務推廣期間，任何使用者都可以享有前 3 封免費體驗，若是 Openfind MailCloud 組織單位用戶，更免費提供寄 20 封電子存證信函體驗，省下跑郵局、手寫紙本一式三份的勞力與時間，並提供無限次副本查詢、收件人開信通知、簡訊通知存證信函收件人等多元模式，所有流程均可在線上完成，無形中為企業節省大量資源與巨額辦公經費。

關於 e-Attestor 數位存證信函服務

e-Attestor 為 區塊科技 BlockChain Security 推出的區塊鏈加值數位轉型解決方案，提供使用者寄發存證信函的數位化型式服務，講求效率、彈性、符合現代人使用習慣，並同時確保證據力及使用者隱私。更多訊息，請瀏覽服務官網 e-attestor.com。

關於 MailCloud 企業雲端服務

MailCloud 為 Openfind 推出的企業雲端服務品牌，維運團隊通過國際資訊安全 ISO27001 認證，整合軟硬體效能搭配國際電信等級的機房與頻寬管理，提供客戶 One-Stop Shopping 的商務溝通套餐方案與全方位辦公室生產力服務，包含「雲端信箱、郵件安全、稽核歸檔、檔案分享、即時通訊、線上共編」等服務，輕輕鬆鬆滿足企業商務應用需求，是客戶尋求專業的訊息溝通協作平台的最佳選擇。更多訊息，請瀏覽： 數位存證服務、MailCloud 套餐ABC。

關於 區塊科技

區塊科技 BlockChain Security 成立於 2018 年 2 月，目標為整合資訊安全、數位證據保存及區塊鏈技術，建構出適用於各產業的資安鑑識與數位存證解決方案。平衡區塊鏈處理效能與資料隱私，區塊科技同時注入數位資料防偽、區塊鏈合約簽核、電子郵件防詐等自研發專利能量，以先進技術確保專業品質，並持續將區塊鏈存證應用導入多元場域中，為企業及民眾帶來安全及便利的生活。更多訊息，請瀏覽公司網站 https://chainsecurity.asia/

關於 Openfind

Openfind 成立於 1998 年 1 月，長期致力於網際網路相關技術研發，為企業用戶與廣大網友提供高品質、高穩定與高擴充性的軟體與服務。從企業市場搜尋引擎系列產品、電子郵件伺服器或郵件防護、稽核、歸檔系統，到一般使用者的電子郵件信箱與企業郵件代管服務，Openfind 堅守「創新技術與優質服務」的企業文化，以提供使用者最符合成本效益的解決方案。更多訊息，請瀏覽公司網站 https://openfind.com/

We are BlockChain Security. We make digital evidence dependable!

區塊科技與 Openfind MailCloud、達文西法律事務所聯手推出 e-Attestor 數位存證信函服務 was originally published in BlockChain Security Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

全球企業正⾯臨隨著數位轉型、快速變動帶來的挑戰，因資料遺失、被竄改或難以追溯來源等問題，多數可應用「區塊鏈技術」解決，許多軟體廠商都相繼投入研發。新創區塊科技近期與 Openfind 網擎資訊正式攜手合作，希望將區塊鏈存證技術與 Openfind ArkEase Pro 雲端儲存平台結合，使其檔案存取歷程完整保存的特性更上一層樓，協助企業更安全的儲存、傳輸、驗證大量機敏檔案，在資訊溝通往來過程中獲得最完整的保障。

為協助企業提升國際競爭力，近年來資策會科法所以「智慧財產」、「電⼦文書」或「數位合約」等主題推廣如何保護珍貴的智慧財產及其歷程與研發記錄，並強調保全數位證據的重要性；智財相關訴訟發生時，除了繁瑣的蒐證流程外，如何提出相關佐證尤其重要，而區塊鏈正是可運用的關鍵技術。因此，本平台也與達文西個資暨高科技法律事務所合作，確認使用區塊鏈存證機制的有效性，並提供本平台在存證應用時的證據能力相關諮詢及顧問服務。Openfind ArkEase Pro (AEP) 雲端儲存平台提供了完整的檔案存取、修改和下載紀錄，結合區塊科技的區塊鏈智財存證平台，可⼤幅縮短曠⽇費時的蒐證及公證流程，讓企業可專注於技術創新，輕鬆保障研發成果。

區塊科技提供的智財存證平台，不僅能夠自動盤點數位檔案，也能透過不可否認、不可篡改的區塊鏈，舉證研發資料生成時間；而網擎資訊 AEP 作為企業完整的檔案平台系統，除了不斷追求提升資料分享與管理效率外，也提供防制勒索軟體、遠端共編等各項應用，經由智財存證的加值，能夠在企業生產力工具上精益求精。區塊科技執行長黃敬博表示：「透過與市場領導者 Openfind 合作，不僅能夠加速實踐新創點子，也證明了區塊鏈技術可以在企業數位轉型的浪潮下扮演關鍵角色。」

隨著區塊鏈應⽤的蓬勃發展，藉由統整流程與技術專業，使用者將能輕鬆享用先進的數位安全服務。以 Openfind在郵件領域深耕多年的經驗，加上區塊科技的區塊鏈存證平台，未來整合防詐騙、信件已讀追蹤機制、電子存證信函等成熟技術後，不但能協助導入更全面的檔案保全系統，也能使企業的電⼦文件存證流程更臻完備！「區塊科技也會持續與網擎密切合作，完整支援各項智財存證應用，並結合網擎擅長的資安領域，提供同時滿足企業溝通與數位轉型之解決方案。」黃敬博指出。

關於 ArkEase Pro 雲端儲存服務平台

ArkEase Pro 雲端儲存服務平台為企業建立專屬私有雲，提供企業級檔案協作平台 (Content Collaboration Platform )，讓使用者能安全地儲存、分享以及同步電腦、手機和平板上的資料。完整的安全控管、權限與稽核設定，讓企業確保重要資料安全無虞，兼顧協作效率及資安要求、滿足法規遵循。更多訊息，請瀏覽產品網頁 https://openfind.com.tw/taiwan/arkeasepro.html

關於 區塊科技

區塊科技 BlockChain Security 成立於 2018 年 2 月，目標為整合資訊安全、數位證據保存及區塊鏈技術，建構出適用於各產業的資安鑑識與數位存證解決方案。平衡區塊鏈處理效能與資料隱私，區塊科技同時注入數位資料防偽、區塊鏈合約簽核、電子郵件防詐等自研發專利能量，以先進技術確保專業品質，並持續將區塊鏈存證應用導入多元場域中，為企業及民眾帶來安全及便利的生活。更多訊息，請瀏覽公司網站 https://chainsecurity.asia/

關於 Openfind

Openfind 成立於 1998 年 1 月，長期致力於網際網路相關技術研發，為企業用戶與廣大網友提供高品質、高穩定與高擴充性的軟體與服務。從企業市場搜尋引擎系列產品、電子郵件伺服器或郵件防護、稽核、歸檔系統，到一般使用者的電子郵件信箱與企業郵件代管服務，Openfind 堅守「創新技術與優質服務」的企業文化，以提供使用者最符合成本效益的解決方案。更多訊息，請瀏覽公司網站 https://openfind.com/

We are BlockChain Security. We make digital evidence dependable!

區塊科技與 Openfind 合作推出數位資料存證安全方案 was originally published in BlockChain Security Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

2019 年，世界外匯市場每日平均的交易金額是 6.6 萬億美元，自國與國之間的邊界只剩下世界地圖上的那幾條虛線後，各國企業金錢往來的緊密性成了經濟發展蓬勃的依據，但同時也成了滋養犯罪的溫床⋯⋯。

FBI 將 BEC（Business Email Compromise，商務電子郵件入侵）定義為針對與外國供應商合作企業或經常進行匯款支付企業的精密騙局。而這種犯罪類型崛起與郵件伺服器代管服務業發展、電子商務迅速普及有莫大關連。IC3 (Internet Crime Complaint) 曾統計 2016 年 6 月～2019 年 7 月這三年間全球的 BEC 案例：共 16 萬起案件，累計的損失金額高達 262 億美元。以此數據可發現平均一起案件的受騙金額為 15 萬美金（約莫 450 萬台幣），誘因之高，完全可以想像 BEC 為目前網路犯罪範疇中最大的犯罪類型。

詐騙界的獨角獸

出於好奇，我找出美國聯邦調查局的歷年年刊，並整理 2014~2019 年發生在美國境內的 BEC 案例金額與受害人數。這六年來，受害案例以每年 110％ 的速度成長，總損失金額以 1.4 倍速增加，累積金額來到了 44 億美元。若未來以此速度成長，預計在兩年後累計損失金額就會超過 100 億美元。

除了獲益收入高，BEC 更誘人的是低成本。以前較普及的詐騙類型都是釣魚信或是勒索詐騙等等，攻擊一次的成本大約是 2000 美元以上，但 BEC 詐騙已經發展出許多簡單易上手的惡意軟體，像是 Ardamax, RAT, Lokibot 等，其中 Ardamax 售價 50 美元，這樣的價格大幅降低進入門檻。

綜觀看來，2019 年美國所有網路犯罪中，以 BEC 的總損失金額最高，第二名——穩操勝算與愛情詐騙類別——的損失不到 BEC 的 1/3。然而，若是觀察所有網路犯罪中被害案例，則會發現 BEC 只有兩萬多起案例，僅居於第六名，相較於其他犯罪類型來說，是屬於數量不多但遭逢一次就後果慘重的手法，這種感覺有點像是核彈，不「投」則已，一「投」驚人。

值得冒險一試？

以美國境內為例，在 2019 年每發動一次攻擊預期可以獲益 74723 美元，並依照 Statista 網站提供的數據指出詐欺類型犯罪破案率大約落在 17.6%，至於美國法律則對詐欺罪的判刑 6 個月～30年不等。對詐騙集團好一點好了，假定他會被關五年，以美國高中學歷畢業的基本薪資來說，五年可以累積 18 萬美元的財富（不花任何一毛錢的情況下），那麼如此計算進行一次 BEC 犯罪的風險獲益結果為 2 萬 8 千多美元（82.4%*74723–17.6%*185640），如果是以單純投機獲利的角度出發，BEC 的確是滿值得冒險的。

當然，這只是非常粗略的估計，包括 7 萬塊的獲利不可能一個人完全獨吞，而且想要駭進去商務信更改帳務資訊，不只需要技術，還得事先獲得公司商務上的交易資訊，通常會有完整的戰術、工具跟程序，這並非一般組織單位可以發動的攻擊。另外道德層面上的損失是永遠沒有辦法推估的。

草民：大人，此人罪該萬死，該當重罰？

經由上述，才發現沒辦法有效嚇退詐騙集團們（說不定還不小心說服一群人跳入火海），而看到這裡的大家一定會非常憤慨，認為詐騙集團承受的風險太小，要關就關久一點，怎麼算也得把風險獲益結果打平才對，但有幾個現象大家得先了解：

1. BEC 詐騙的案例中，大部分的款項是無法追回的，他們永遠都可以把錢弄得像是蒸發了一樣，所以即使人在獄中，錢仍在「消遙法外」。
2. 再者，詐欺是刑事案件，警檢並不會負責幫你把錢要回來，還要自己去拿一筆保證金去申請民事訴訟，但他只要雙手一攤說帳戶裡沒錢，錢花光了，司法體制也拿他沒轍。錢，當然也拿不回來。
3. 依照上述的說法，既然錢收不回來，關他越久反而損失越多，台北監獄在 103 年的報告中指出一位受刑人一年所花費的費用大約是 32000 元左右（包含食、住、設備）因此多關一年等於多灑了 32 張小朋友給他。且近年來通貨膨脹、物價上漲，這個數目應該是有增無減。

所以該怎麼辦才好？把他關起來也不對，不關又怕受害者更多。

揭開 BEC 的隱形斗篷

2019 年底，iThome 網站做了一個台灣資安大調查，關於企業無法阻擋資安攻擊的首要原因（63.1％）在於「員工資安意識不足」，換句話來說，根本是整個大環境在製造機會給詐騙集團犯罪。

因應如此趨勢，當務之急是提升每個人的警覺性。但仔細想想 BEC 案件從 2013 年起就遍佈全球，每個涉案的金額又這麼高，怎麼過了七年大家還是無感？甚至有很多人根本沒有聽過 BEC 詐騙？

「壞人將女主角綁走了，使得男主角束手無策⋯⋯」這樣的電影橋段想必大家不陌生，而詐騙集團有恃無恐的原因之一正是因為深諳目標對象的弱點：不願公開。大部分的 BEC 受害者都是中小型公司，當遇上BEC時，為了保護公司商譽，許多公司都會低調進行調查，甚至如果有上市上櫃，不造成股票波動是他們第一個止血劑，因此除非有檢調單位強力執行調查或被爆料才會被媒體曝光。像是在 2019 年年底，美國終於抓到逃了 4 年的 BEC 騙子 ——Evaldas，他在 2013～2015 短短兩年時間得到了 1.2 億美元的贓款，然而在整個司法調查過程中，均以「Company 1」 「Victim 1」 「Victime 2」等代號來代表被假冒公司與受騙公司，至於究竟是哪些公司，警檢隻字未提，反而是路透社與彭博社得到有效消息指出，這三家業者分別為廣達、Google 和臉書，大眾此時才知道整個犯罪全貌，然而事過境遷，案件的關注度與討論程度並不熱絡，這也讓這些大企業鬆了一大口氣。

缺乏曝光的犯罪手法，等於為 BEC 罩了個隱形斗篷，讓許多相關人員一不小心就落入圈套，如何在這樣的趨勢下，增加所有人對於資訊安全的意識，這是非常值得思考、也是我寫這系列文章的初衷。

如果喜歡這篇文章請幫我拍手，給予初「寫」者一些鼓勵！同時也十分歡迎大家討論與指正。

延伸閱讀：不再輕易上當！聰明看穿 BEC 電子郵件詐騙手法

參考資料：
Internet Crime Report by IC3, FBI: 2019, 2018, 2017, 2016, 2015, 2014.
FBI, 2019. BUSINESS EMAIL COMPROMISE THE $26 BILLION SCAM.
Statista Research Department, 2019. Clearance rate — crime clearance rate by type 2018.
李宗翰，2019。iThome 2019臺灣資安大調查重點整理。

We are BlockChain Security. We make digital evidence dependable!

BEC 詐騙真的有賺頭？解析詐騙集團成本與獲利 was originally published in BlockChain Security Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

Do you know what an email scam actually looks like? By going over the following ‘7 mantras’ meant to be rather easily followed by average users, we can raise external awareness leading to better distinguishing scams.

In today’s modern society, people often use email to communicate, not only everyday matters, but also important or sensitive information. Attackers, meanwhile, using their email scam methods, have been exploiting people’s vulnerabilities to cheat them, by passing off fake contents as genuine. As AI and Cloud technologies are gradually gaining widespread acceptance, coupled with the emergence of other advanced technologies such as 5G, Fintech and new digital identity verification around the world, mass email usage will only continue to rise, most certainly leading to continual increase in email fraud.

Now, the question is: do we know what an email scam actually looks like? Even if not that easy, the fact is that all scams are traceable. Therefore, as a very basic step, we all need to be alert when we see e-mail sources that look unfamiliar. Next, by going over the following ‘7 mantras’ meant to be rather easily followed by average users, we can raise external awareness leading to better distinguishing scams. In addition, by using online tools, we can make use of their built-in technology, in order to more accurately identify fraud and to protect users from falling for scammers’ tempting tricks.

1) Contents including money, account transfers, or transactions

Whenever we receive emails with sensitive contents related to money, or account transfers, among others, it is best to use alternate channels, such as making a phone call to be assured of its source, just in case. This is despite whether the sender appears to be known, or originates from a trusted business unit or not.

2) Email content text showing abnormalities

When we find unusual format or grammar in the subject line or body text, such as use of symbols, garbled letters or strange characters, we should immediately be reminded that this may be a suspicious email. Consequently, it is imperative to refrain from clicking on links and opening attachments within the email. Despite that, the safest method is actually to confirm the sender information and email content with the other party through other communication channels, as well as to report the case to the relevant IT department within our school or place of work.

3) Emails with sensational or suspicious subject lines or attachments

In order to fool users, attackers often take advantage of human weaknesses, using enticing subject lines or contents to generate curiosity. When encountering this, it is best to remain calm and collected, not to open the email attachments indiscriminately or to forward the email. Such email is best to be deleted immediately.

4) Emails concerning topics on current affairs

When receiving emails concerning popular current events and trending information, be alert not to simply open the email or its attachment. Scammers often take advantage of users’ curiosity and prey on them, in cases involving popular daily life topics, such as a list of tips on non-standard food ingredients, ways to reduce supplementary health insurance fees, among other contents of that nature. It is mostly due to mass attention to such hot topics that they are able to entice users to fall victim to their scams.

5) Emails highlighting preferential or promotional news

This includes emails underlying service upgrades, various promotions/give-aways, and preferential/exclusive notices, among others. They often take advantage of common human greed, encouraging users to click on the included links or attachment files. If users do not remain vigilant, they can easily fall victim to those scammers’ traps.

6) Forged system-notification emails (average user is often not able to detect: use of online tools recommended)

It is important not to automatically trust and open emails containing system-notification information. Nowadays, fake emails notifying issues with user accounts or announcing system upgrades have become quite common. In addition, since online groups and platforms have already been widely used, average online user may not fully remember all online services or systems they have already registered with. Therefore, in order to verify emails such as above, some supplementary tools are currently available online assisting users in determining whether those emails are suspicious or not. These tools are further explored in the next section.

7) Seemingly genuine/important fake emails, emails from executive officers, mails between customers and suppliers… (all rather difficult to discern: it is thus recommended to use online tools for assistances)

This type of email is known to be the most successful method in scamming users. Attackers usually use the recipient’s psychology of fear of missing important emails to exploit them. These emails are usually in the form of business notification emails, often with titles containing words like ‘Order’, ‘Invoice’, shipping companies like ‘UPS’/’Fedex’/’Amazon’, or ‘Report’, etc. These kinds of scam emails generally have a high chance of scamming users, by making the users believe they are indeed work communication emails or important/urgent messages requiring immediate attention and consequently distracting users from using caution.

When attempting to open this type of email, it is best to make use of an alternate channel to confirm with the other party prior to opening it. As it is often not easy to directly identify the sender at a glance, however, it is recommended to make use of an online tool, once the email is opened for the first time, in order to make sure if the email is suspicious or not.

The above examples are all common cases of BEC (Business Email Compromise). The losses caused are comparable to the ones by Trojan horse programs and malicious viruses. The only way to counter them is for the recipient to directly identify the source, unless an alternate channel is utilized every time to verify the incoming source.

In identifying email details, online tools can prove invaluable. Currently there is a browser extension (Website: chksender.com) allowing the recipient, upon opening an email, to first verify the sender as well as email domain’s information, applicable to above 7 types of e-mail scam prevention methods. In addition to raising awareness in proactive email identification, the information database can be used to determine whether the sender is suspicious or the mail has been tampered with by someone with bad intentions, benefiting all users at large.

Chrome Web Store Page (accessible on Chrome): https://chksender.pse.is/addon

For more information, follow ChkSender and join Chat group!

We are BlockChain Security. We make digital evidence dependable!

7 Simple Methods to Proactively Counter Email Scams was originally published in BlockChain Security Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.