Connect with us

E-Financial

Kaspersky Warns: Faketoken Mobile Banking Trojan Targeting Over 2000 App

Published

on

Kindly share this post

Kaspersky Lab experts have discovered a modification of the mobile banking Trojan, Faketoken that can encrypt user data. Disguised as various programs and games, including Adobe Flash Player, the modified Trojan can also steal credentials from more than 2,000 Android financial applications

Kaspersky Lab experts, late December 2016, discovered a modification of the mobile banking Trojan, Faketoken that can encrypt user data.

Disguised as various programs and games, including Adobe Flash Player, the modified Trojan can also steal credentials from more than 2,000 Android financial applications.

“To date, the modified Faketoken has claimed over 16,000 victims in 27 countries, with most located in Russia, Ukraine, Germany and Thailand.

“The newly added data-encryption capability is unusual in that most mobile ransomware focuses on blocking the device rather than the data, which is generally backed-up to the cloud. In Faketoken’s case, the data – including documents and media files such as pictures and videos – is encrypted using an AES symmetric encryption algorithm that can, in some cases, be decrypted by the user without paying a ransom.

“During the initial infection process, the Trojan demands administrator rights, permission to overlay other apps or to be a default SMS application – often leaving users with little or no choice but to comply. Among other things, these rights enable Faketoken to steal data: both directly, like contacts and files, and indirectly, through phishing pages”.

The IT security giant said that the Trojan is designed for data theft on an international scale: once all the necessary rights are in place, it downloads a database from its command and control server containing phrases in 77 languages for different device localizations.

These are used to create phishing messages to seize passwords from users’ Gmail accounts, the report said, the Trojan can also overlay the Google Play Store, presenting a phishing page to steal credit card details.

In fact, the Trojan can download a long list of applications for attack and even an HTML template page to generate phishing pages for the relevant apps. Kaspersky Lab researchers uncovered a list of 2,249 financial applications.

Intriguingly, the modified Faketoken also tries to replace with its own versions application shortcuts for social media networks, instant messengers and browsers. The reason for this is unclear as the substitute icons lead to the same legitimate applications.

Kaspersky Lab advises Android users to take the following steps to protect themselves against the Faketoken Trojan and other malware threats:

Ensure all data is backed-up.
Don’t automatically agree to hand over rights and permissions when an app asks you to do so – think about what is being asked for, and why you are being asked for it.

Install an antimalware solution on all devices and keep OS software up-to-date.

Kaspersky Lab has detected several thousand Faketoken installation packages capable of encrypting data, the earliest of which dates back to July 2016.  Kaspersky Lab products detect all modifications of the Faketoken malware family.

“The latest modification of the Faketoken mobile banking Trojan is interesting in that some of the new features appear to provide limited additional benefit for the attackers.  That doesn’t mean we shouldn’t take them seriously.  They may represent the groundwork for future developments, or reveal the ongoing innovation of an ever-evolving and successful malware family. In exposing the threat, we can neutralize it, and help to keep people, their devices and their data safe,” said Roman Unuchek, Senior Malware Analyst, Kaspersky Lab.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Financial

Confusion as CBN Deletes, Reinstates Tweet Calling Crypto-Related Directive Fake

Published

on

Kindly share this post

Central Bank of Nigeria (CBN) has been forced to deny a report saying it issued a directive requiring all banks and financial institutions to identify individuals or entities engaging in transactions with cryptocurrency exchanges and to ensure that such accounts are put on Post No Debit (PND) instruction for six months.

Confusion as CBN Deletes, Reinstates Tweet Calling Crypto-Related Directive Fake

A “Post No Debit” instruction is a directive issued by a bank or financial institution to restrict certain transactions on a customer’s account.

When a PND instruction is in place, the account holder is prohibited from making debit transactions, meaning they cannot withdraw funds or make payments using the affected account.

Confusion occurred when the central bank denied the story on X but then deleted the denial.

The alleged circular also stated that regulated financial institutions engaged in crypto or facilitating payments for crypto exchanges are prohibited.

However, this contradicts an earlier ban lifted in December 2023, allowing banks to facilitate transactions for crypto exchanges.

The central bank lifted the ban nearly two years after enforcing a comprehensive ban on banks engaging with digital currencies.

According to a statement by the CBN at the time, it recognized that the increasing global demand and adoption of crypto make it unjustifiable to maintain the stringent restrictions imposed on financial institutions in 2021.

However, due to the swift devaluation of the naira and the subsequent inflation rate of 29.9%, the government shifted its attention to platforms offering cryptocurrency services.

It disabled websites associated with crypto trading that had gained notoriety for setting informal valuations for the naira.

Binance encountered significant scrutiny when the CBN raised concerns regarding “suspicious financial transactions” occurring through Binance Nigeria in 2023.

Olayemi Cardoso, governor, CBN, said $26 billion had passed through Nigeria via Binance in 2023 from unidentified sources and users.

Binance is facing further challenges in Nigeria, with its executive Tigran Gambaryan, who is based in the United States, being detained in the country.

He’s facing five charges linked to money laundering following a meeting with Nigerian officials regarding Binance’s regulatory compliance.

Nadeem Anjarwalla, one of the executives who met with Nigerian officials about Binance’s regulatory issues, subsequently escaped custody and was tracked down to Kenya, where he faces extradition.

 


Kindly share this post
Continue Reading

E-Financial

NDIC Inaugurates Anti-Corruption and Transparency Unit

Published

on

Kindly share this post

Nigeria Deposit Insurance Corporation (NDIC) has inaugurated an Anti-Corruption and Transparency Unit (ACTU) at its headquarters in Abuja.

NDIC Inaugurates Anti-Corruption and Transparency Unit

Speaking at the inauguration which was conducted by officials of the Independent Corrupt Practices and Other Related Offences Commission (ICPC); Mr. Bello Hassan, managing director/chief executive, NDIC, said the corporation has a culture of zero tolerance for corruption, which is further strengthened by its core values of teamwork, respect and fairness, integrity, professionalism, and passion.

Represented by Mr. Mustapha M. Ibrahim, executive director, Operations, Hassan, said, the NDIC ACTU has strengthened the Corporation’s operational system through the implementation of various compliance measures to ensure ethics, integrity, transparency and accountability in the workplace.

He explained that the specific measures include robust Internal Controls, regular Risk Assessments, and strict adherence to regulatory guidelines, and comprehensive training programs for employees.

Hassan described the inauguration as a significant step in the Corporation’s ongoing commitment in the fight against corruption and enhances transparency.

He emphasised that NDIC Management remains committed to supporting ACTU activities, recognizing the unit’s critical role in ensuring the Corporation’s operations are conducted with integrity, free from corruption, and fostering public trust.

Dr. Musa Adamu Aliyu, chairman, ICPC, who was represented by Mr. Olusegun Adigun, acting director System Study and Review, ICPC, praised NDIC management for their dedication and active support in establishing and advancing the activities of the ACTU to address corruption issues and foster ethical practices.

He applauded the efficiency and diligence of the NDIC ACTU in fulfilling its mandate, resulting in the Corporation retaining the first position for two consecutive years on the annual ICPC Ethics and Integrity Compliance Scorecard.

He urged the new ACTU members to see their nomination as an opportunity to build on the good legacies of the previous members and to complement Management’s efforts in promoting the core values of the Corporation through their assigned duties.

 

 


Kindly share this post
Continue Reading

E-Financial

Moniepoint, Community Pharmacists to Explore Digital Financial Inclusion for Health Industry

Published

on

Kindly share this post

Issues bordering on the need to strengthen the pharmaceutical supply chain and distribution leveraging digital technology, reducing the prevalence of fake medicines exacerbated by the unregulated and uncoordinated open drug market, bringing digital financial inclusion to the forefront of the health industry and achieving Universal Health Coverage, UHC for all Nigerians even in the face of its expanding population and limited human resources for health care have been brought to the fore.

L- R Regional Sales Manager, Moniepoint Inc, Emmanuel Imouokhome, National Secretary, ACPN, Pharm. Omokhafe Ashore, National Chairman, ACPN, Pharm Wale Oladigbolu and Vice President, Sales and Partnerships, Moniepoint Inc, Ifeanyi Duru, Chairman, ACPN Conference Planning Committee, Pharm. Grace Ikani and Lagos State Coordinator, Richard Eseka, during the courtesy call which held at the Moniepoint Inc office in Lagos

These subjects among many were raised during a courtesy visit by some National Executive members of the Association of Community Pharmacists of Nigeria (ACPN) to the Moniepoint Inc office in Lagos. With an average of 480,000 daily footfalls across over 6,000 community pharmacies in Nigeria, the ACPN plays a vital role in Nigeria’s healthcare system as front-line workers who promote public health and well-being, beyond dispensing medications as they serve as trusted healthcare providers within communities, offering valuable advice, counsel, and preventive care.

Leading the ACPN delegation, the National Chairman, ACPN, Pharm Wale Oladigbolu lauded the giant strides made by Moniepoint in providing reliable and seamless digital payment services to community pharmacies across the country adding that some other players in the pharmaceutical still operated primarily with cash, thus limiting their growth potential and financial inclusion.

He noted that Nigeria’s health care industry was ripe for disruption using digital and technological know-how to achieve UHC, social health insurance, supply chain systems and data for policy formulation.

“This visit to Moniepoint today is underscored by our belief that a well structured collaboration between both organizations will produce transformative high yield results and benefit the nation’s healthcare system at large. Such collaborations enhance not only the operational efficiency of our pharmacies but also ensure that our patients and customers benefit from the convenience and security of digital financial services. Integrating financial technology seamlessly into everyday health services, making them more accessible and efficient for all is a noble task that all stakeholders should strive towards achieving,” he said.

Furthermore, he solicited for Moniepoint’s robust participation at the Association’s 43rd annual Scientific Conference scheduled for Ibadan, Oyo State later in the year. He noted that this year’s event will deliver a peerless experience for all attendees in terms of skills and knowledge acquisition, as well as the sporting and entertainment value added initiatives that have been lined up.

Vice President, Sales and Partnerships, Moniepoint Inc, Ifeanyi Duru who expressed his delight at the opportunity to collaborate with the ACPN and deploy the digital financial services provider’s cutting-edge technology to drive greater financial empowerment and inclusion in Nigeria’s healthcare industry.

“Creating financial happiness is our mantra and a more inclusive financial ecosystem that caters to the unique needs of the health industry in Nigeria is in perfect sync with what we stand for at Moniepoint. There is a significant opportunity here to elevate the interests of community pharmacists and give fresh impetus to the way community pharmacies operate by layering tech and digital payments for socio-economic development. The potential impact of this collaborative effort especially in bridging significant gaps in the value chain is huge and one which we relish the opportunity to tackle,” he said.

Notable professionals present during the visit include National Secretary, ACPN, Pharm. Omokhafe Ashore, Chairman, ACPN Conference Planning Committee, Pharm. Grace Ikani, Regional Sales Manager, Moniepoint Inc, Emmanuel Imouokhome, State Coordinator, Richard Eseka, Public Relations Manager, Moniepoint Inc, Bemigho Awala and Brand Story-teller, Emmanuel Paul.

Moniepoint’s comprehensive and easy to use suite of payment, banking, credit, and business management tools continues to empower over 2 million individuals and businesses across the country to thrive and better serve their communities in a manner that drives economic growth and social impact.


Kindly share this post
Continue Reading

Trending