E-Business
How 20-Year Old Nigerian Attacked 4,000 Organizations Worldwide
An international hacking campaign targeting thousands of oil, mining and construction firms sounds like the work of a sophisticated criminal operation.
The scale of such an endeavour suggests it would need extensive resources and manpower, potentially even nation-state backing.
But a newly uncovered cyberattack that targeted more than 4,000 organisations in the oil and gas, mining, construction, and transportation sectors has been found to have been carried out by a 20-year-old man in Nigeria.
The lone attacker successfully hacked into the networks of at least 14 organisations, including a marine and energy company in Croatia, a transportation company in Abu Dhabi, a mining company in Egypt, a construction company in Dubai, an oil and gas firm in Kuwait, and a construction organisation in Germany.
Using a remote access Trojan and a keylogger, the attacker stole login credentials and financial information from these companies.
The fact that attacks were targeted at financial staff working in specific regions and sectors — energy and transportation firms in Europe and the Middle East — and the use of a phishing email lure claiming to be from oil and gas giant Saudi Aramco, initially led researchers to believe the campaign was the work of a well-organised group.
But researchers at Check Point investigating the attack found this wasn’t the case.
“We realised this was just one person, because of the technical analysis of the malware and the C&C communications, we realised it was a criminal, not a nation state conducting espionage,” Maya Horowitz, head of research for Check Point, told ZDNet.
And unlike professional hacking gangs, the culprit has very poor operational security, allowing researchers to identify him and monitor his actions.
“You can see holes in the phishing emails themselves and there are holes all over the infrastructure,” Horowitz said.
Put simply, the phishing emails are crude and unconvincing, with spelling errors, generic subjects and the target referred to as ‘Sir/Ms’. The mass-mailed messages ask users to download an attachment, which asks for macros to be enabled then installs two forms of malware — both of which are freely available on the web.
Victims end up infected with Netwire, a remote access Trojan that allows the attacker to gain full control of infected machines, and Hawkeye, a commercially available form of keylogging software. While both forms of malware are relatively simple, they’ve enabled the attacker to steal banking and other credentials, and earn thousands by stealing from accounts and selling on credentials.
While they’ve managed to infiltrate a number of large organizations, the perpetrator is far from a cybercriminal mastermind. Indeed, he has not even made much of an effort to cover his tracks and has even discussed his actions on Facebook.
“He’s not very techie, but he’s on a Facebook group of several Nigerian hackers where they exchange tactics and techniques,” said Horowitz.
Attacks using phishing to infect machines with malware are gaining in popularity, she added, and are replacing the infamous 419 scams of old. “The same people who ten years ago were only able to send Nigerian Prince scams today they can just rent malware and send it to whoever,” said Horowitz.
“It’s the same people, with the same technical skills, but now this whole market works more like a business where you can just buy or rent your tools online as malware-as-as-service. In this case it’s not even on the dark web, it’s just on the internet,” she added.
The increasingly availability of malware-as-a-service — or freeware such as Netwire and Hawkeye — means it’s easier than ever for budding cybercriminals to get in on the action. However, in many cases, the attacker doesn’t have the knowledge to take the necessary steps to hide themselves.
In the case of this individual, Check Point has shared its findings with Nigerian police and international agencies in order to stop future attacks and arrest the culprit.
Those organisations that have already fallen victim to the attacks will need to take extra security precautions, because it’s likely log-in credentials and other sensitive information have been sold on to criminals who could use them to perform further attacks.
Ultimately, the phishing emails used in this attack were very basic but nonetheless fooled employees in the target organisations. Horowitz stressed the importance of companies making employees aware what these emails look like and the threats they pose.
“These attacks can be prevented, nobody has to be infected with this malware,” said Horowitz.
“Fourteen organisations were hit but there’s no reason they should have, because with proper security measures and — more importantly — education and awareness, these emails shouldn’t have got into the systems.”
National Information Technology Development Agency (NITDA) and the National Identity Management Commission (NIMC) have announced a collaboration on National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI) to enhance synergy between digital identity, payment ecosystems and secure seamless data exchange capabilities for Nigeria.
l-r: Kashifu Inuwa, Director General of NITDA, and Bisoye Coker-Odusote, Director General of NIMC, during the meeting at the NIMC headquarters in Abuja..
NITDA, which made the announcement on its X handle, said that the collaboration was to further strengthen Nigeria’s digital economy in line with President Bola Tinubu’s Renewed Hope Agenda,
During the meeting, Kashifu Inuwa, director general of NITDA, and Bisoye Coker-Odusote, director general of NIMC, with some management staff of both organisations, discussed various initiatives, which include building DPI stacks for a secured and seamless data exchange and forming partnerships to transform the national identity system.
This collaboration also aims to harness the potential of the innovative ecosystem and emphasise the use of public-key infrastructure (PKI) to drive digital transformation in Nigeria.
To ensure a smooth implementation, a 12-man committee was set up.
This committee will play a crucial role in kickstarting and harmonising the initiatives and is expected to deliver a comprehensive implementation report within the next 4 weeks.
Noble Ajuonu, head, Sydani Technologies Ltd., has urged the Federal Government to harmonise National Identification Number (NIN) and Bank Verification Number (BVN) to tackle crimes and insecurity in the country.
Ajuonu made the call at a media roundtable, organised by Sydani Group in Abuja.
The News Agency of Nigeria (NAN) reports that the roundtable focuses on driving sustainability through a comprehensive analysis of Nigeria’s key development areas.
Ajuonu said that Nigeria could overcome its security challenges and pave the way for a safer, more secure future for all Nigerians by embracing technology and implementing practical solutions,
“We need to harmonise data, prioritise seamless integration of databases like NIN, BVN, and security agency records, establish clear protocols for data sharing and access, with robust safeguards against misuse,’’ expert said.
According to him, the unified data pool will empower intelligence gathering and targeted operations.
He also called for investments in smart surveillance, intelligent video analytics software, training of personnel in data analysis, interpretation of data in real-time to combat crimes.
“There is need to implement a legal framework for call interception in criminal investigations, with strict oversight to prevent abuse, encourage community cohesion, training of tech savvy security personnel with tech-enabled tools.’’
Ajuonu also urged the government to address infrastructure deficit in technology, saying that technology was all encompassing to address insecurity.
“According to the National Identity Management Commission (NIMC), as of December 2023, only 104.2 million Nigerians had been enrolled for the National Identity Number (NIN).’’
Ajuonu added that over 122.2 million citizens left uncaptured for NIN were people in rural areas where enrolment centres, digital services were limited.
“Most crimes are being perpetuated from rural communities and this lack of comprehensive identification creates a gap where elements not captured in the national database can constitute public nuisance, crimes.
“There is the inadequacy in the integration of NIN, BVN and Voters Identification Number (VIN).
“Advanced call interception and analysis tools, used successfully in other countries, could provide invaluable insights into criminal networks and operations but infrastructure is lacking,’’ he said.
Also, Mr Godfrey Petgrave, the Agricultural Expert, Sydani Group, called for empowerment of smallholder farmers with access to finance and training to enhance productivity.
According to Petgrave, Nigeria requires policy reform and institutional strengthening to improve agricultural practices and embrace digital agriculture solutions to address food insecurity.
Mr Akolade Jimoh, another expert of the group on health, advocated for expanded community-based health insurance programmes for rural and underserved areas.
Jimoh added that the country needed to encourage Public Private Partnership to revolutionise products design and quality improvement on health services.
Konga, Nigeria’s leading composite e-commerce group, is thrilled to announce the launch of amazing deals at its Infinix Brand Week. Infinix, a leading global smartphone brand known for its innovative products and cutting-edge technology promises exclusive discounts and special offers on select smartphones, marking an exciting milestone in the realm of online shopping.
Shoppers can expect nothing short of extraordinary deals on a wide range of Infinix products, all available exclusively on the Konga online platform. With discounts of up to 30% off, this partnership between Konga and Infinix aims to redefine the shopping experience for tech enthusiasts across Nigeria.
Konga Brand Week has become synonymous with excitement and unbeatable deals, and this year’s edition is no exception. In addition to exclusive discounts on Infinix smartphones, shoppers can explore a diverse array of products across various categories, including electronics, fashion, home essentials, and more.
“At Konga, we are dedicated to providing our customers with the best shopping experience possible,” said Rita Ohaedoghasi, VP Marketing at Konga. “The Infinix Week during Konga Brand Week allows us to continue delivering on that promise by offering incredible discounts and special offers on some of the most sought-after smartphones in the market.”
To stay updated on the latest developments and exclusive deals during Konga Brand Week, shoppers are encouraged to connect with Konga across all platforms, including social media and the Konga website. Don’t miss out on this opportunity to score big savings and elevate your tech game with Infinix and Konga.
AMN Activates Starlink Cellular Backhaul Connectivity in Nigeria
Banks Lose N10Bn to Cyber Fraud in 2023’
ARISE News Channel Goes Live in SA, 9 Other Southern African Countries
Tinubu Rejigs SEC Board, Makes New Appointments
Transcorp Power Reports N67.86Bn Revenue
See Full List of Fake Loan Apps Blacklisted By CBN
FIRS Files Tax Evasion Charges against Binance
IFC Invests in New 4DX Ventures Fund to Support Tech Startups in Africa
AXA Mansard Empowers Female SMEs with Financial, Digital Skills
NGX RegCo, FRCN Unveil Roadmap for SFRS Adoption
Telecom2 days agoImperative of Upholding Nigeria’s Telecoms Lifeline
News2 days agoKaspersky Warns of Data Stealers Hunting for User Credentials
Telecom2 days agoWhat You Need to Know About Multifactor Authentication Fatigue Attacks and How they can be Prevented
Telecom2 days agoSamsung Returns to Top of The Smartphone Market – Industry tracker
E-Financial2 days agoHydrogen, CCHub Partner to Encourage Fintech Startup Success
E-Financial2 days agoCBN Cuts Banks’ Loan-to-Deposit Ratio to 50 Percent
Telecom1 day agoFG Plans EO to Criminalise Fiber Cable Damage Costing Telcos Billions
E-Financial2 days agoAccess Bank Unveils DiamondXtra Season 16, Dangles N200m, 3 SUVs