Connect with us

E-Financial

Kaspersky Warns: Faketoken Mobile Banking Trojan Targeting Over 2000 App

Published

on

Kindly share this post

Kaspersky Lab experts have discovered a modification of the mobile banking Trojan, Faketoken that can encrypt user data. Disguised as various programs and games, including Adobe Flash Player, the modified Trojan can also steal credentials from more than 2,000 Android financial applications

Kaspersky Lab experts, late December 2016, discovered a modification of the mobile banking Trojan, Faketoken that can encrypt user data.

Disguised as various programs and games, including Adobe Flash Player, the modified Trojan can also steal credentials from more than 2,000 Android financial applications.

“To date, the modified Faketoken has claimed over 16,000 victims in 27 countries, with most located in Russia, Ukraine, Germany and Thailand.

“The newly added data-encryption capability is unusual in that most mobile ransomware focuses on blocking the device rather than the data, which is generally backed-up to the cloud. In Faketoken’s case, the data – including documents and media files such as pictures and videos – is encrypted using an AES symmetric encryption algorithm that can, in some cases, be decrypted by the user without paying a ransom.

“During the initial infection process, the Trojan demands administrator rights, permission to overlay other apps or to be a default SMS application – often leaving users with little or no choice but to comply. Among other things, these rights enable Faketoken to steal data: both directly, like contacts and files, and indirectly, through phishing pages”.

The IT security giant said that the Trojan is designed for data theft on an international scale: once all the necessary rights are in place, it downloads a database from its command and control server containing phrases in 77 languages for different device localizations.

These are used to create phishing messages to seize passwords from users’ Gmail accounts, the report said, the Trojan can also overlay the Google Play Store, presenting a phishing page to steal credit card details.

In fact, the Trojan can download a long list of applications for attack and even an HTML template page to generate phishing pages for the relevant apps. Kaspersky Lab researchers uncovered a list of 2,249 financial applications.

Intriguingly, the modified Faketoken also tries to replace with its own versions application shortcuts for social media networks, instant messengers and browsers. The reason for this is unclear as the substitute icons lead to the same legitimate applications.

Kaspersky Lab advises Android users to take the following steps to protect themselves against the Faketoken Trojan and other malware threats:

Ensure all data is backed-up.
Don’t automatically agree to hand over rights and permissions when an app asks you to do so – think about what is being asked for, and why you are being asked for it.

Install an antimalware solution on all devices and keep OS software up-to-date.

Kaspersky Lab has detected several thousand Faketoken installation packages capable of encrypting data, the earliest of which dates back to July 2016.  Kaspersky Lab products detect all modifications of the Faketoken malware family.

“The latest modification of the Faketoken mobile banking Trojan is interesting in that some of the new features appear to provide limited additional benefit for the attackers.  That doesn’t mean we shouldn’t take them seriously.  They may represent the groundwork for future developments, or reveal the ongoing innovation of an ever-evolving and successful malware family. In exposing the threat, we can neutralize it, and help to keep people, their devices and their data safe,” said Roman Unuchek, Senior Malware Analyst, Kaspersky Lab.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Financial

Former SEC Leadership Failed to Regulate, Develop Capital Market- ASCSN

Published

on

Kindly share this post

Senior Staff Union under the aegis of Association of Senior Civil Servants of Nigeria (ASCSN) of Securities and Exchange Commission (SEC) has accused the past administration of the Commission led by Dr. Lamido Yuguda of failing in its mandate of effectively regulating and developing the capital market, which is an intricate part of the nation’s economy.

Former SEC Leadership Failed to Regulate, Develop Capital Market- ASCSN

ASCSN also urged the federal government to exempt workers of the commission from 50 percent operating surplus remittance

Abba Mamman Ali, chairman of the Union, stated this on Monday during a briefing with journalists in Abuja.

Recall that President Bola Tinubu had last Friday sacked Dr. Lamido Yuguda, former director general and announced a new management and board for the Commission.

While Mr. Mairiga Aliyu Katuka is the chairman of the new board, Dr. Emomotimi Agama is the new director-general.

Abba said the administration of the Yuguda “failed in its mandate to effectively regulate and develop the capital market, which is an intricate part of the Nigerian economy.”

Furthermore, he said the Yuguda-led Management “was insensitive and unresponsive towards issues of staff welfare especially issues bordering on staff promotion, gratuity and increase of staff emolument, amongst many others.”

He said, “Unfortunately, staff morale was at the lowest ebb under the regime of the immediate past Management.

‘It became clear to the SEC Staff Union and our parent body, the Association of Senior Civil Servants of Nigeria (ASCSN) that a vibrant capital market and a highly motivated SEC workforce could only be achieved through a change of SEC Management by Mr President.

“This prompted the Union to cry out to His Excellency, President Bola Ahmed Tinubu. By clearing out the ineffective SEC Management led by Lamido Yuguda, His Excellency, President Bola Ahmed Tinubu has lived up to his sterling reputation as a listening President.”

He said the SEC Staff Union has pledged to collaborate seamlessly with the new board under the leadership of board chairman, Mr. Mairiga Aliyu Katuka and Director General, Dr. Emomotimi Agama, to deliver a vibrant capital market in line with President Tinubu’s Renewed Hope Agenda.

However, to achieve this, he called for the commission to be exempted from the 50 per cent deductions on operating surplus as contained in the Finance Act 2024 because the Commission is a development institution.

He said, “We want this management to look into issues of staff promotion, vacancies and gratuity. We urge them to look at it very well and settle those issues as they concern staff directly.

“Also, there is need for Management to meet with the government on the issue of 50 per cent deductions on operating surplus. These deductions have almost incapacitated the Commission as the SEC has been having great difficulties carrying out its dual functions of regulating and developing the capital market.”

On the capital market, he said the Union is “urging the new management to constitute a market wide committee who will proffer solutions to the various issues currently bedevilling the market.”


Kindly share this post
Continue Reading

E-Financial

Kenya to Extradite Anjarwalla, Binance Executive Linked to Tax Evasion to Nigeria

Published

on

Kindly share this post

Kenya is preparing to extradite Nadeem Anjarwalla, a Binance executive wanted by Nigerian authorities for alleged involvement in tax evasion and a dramatic escape from custody.

Kenya to Extradite Anjarwalla, Binance Executive Linked to Tax Evasion to Nigeria

Anjarwalla was apprehended in Kenya over the weekend in a joint operation involving several agencies, including the Economic and Financial Crimes Commission (EFCC), Nigeria Police Force, Kenya Police Service, FBI, and INTERPOL, following weeks of search efforts.

He is expected to be extradited to Nigeria within the week to face trial on tax evasion charges, with the possibility of additional charges related to illegal passport use and escape from custody.

Anjarwalla, Binance Africa’s regional manager, along with another executive, Tigran Gambrayan, encountered legal issues in Nigeria in February due to their association with the crypto exchange.

Anjarwalla evaded custody in March using a Kenyan passport and had been evading authorities until his recent capture.

This development adds to the ongoing tension between Binance and Nigerian authorities. Gambrayan, who has been detained since February, is currently facing trial for alleged tax evasion.

However, the proceedings have faced delays, with the court adjourning the case twice due to issues with formally serving charges to the exchange. Binance CEO Richard Teng has expressed willingness to cooperate with Nigerian authorities, but specific efforts to secure the release of the detained executives remain undisclosed.

Similarly, Gambrayan’Kenya to Extradite Binance Executive Linked to Tax Evasion to Nigeria attempts to secure bail have encountered obstacles, with a federal high court in Abuja postponing his bail application hearing.

He is presently held at the Kuje Correctional Center pending further legal proceedings.


Kindly share this post
Continue Reading

E-Financial

Moniepoint MFB opens office in Lagos, pledges to do more for customers

Published

on

Kindly share this post

In today’s fast paced financial services landscape, which has been defined by the ubiquity of digital and mobile banking tools, microfinance banks continue to play a crucial role in advancing financial inclusion. The hallmark of banking is customer satisfaction as such organizations that consistently invent new ways to meet consumer needs and ensure that they are well catered to are viewed as exemplars.

In a move aimed at enhancing customer satisfaction while providing more outlets for addressing customers’ enquiries and requests, the definitive bank for small and medium-sized businesses in Nigeria, as well as their customers and employees, Moniepoint Microfinance Bank has announced the opening of a new office in Lagos.

The new office which is situated on Admiralty Road in the Lekki area of Lagos follows from the relocation of its MFB office from Oyo-Ibadan Rd to Lagos. The new Moniepoint MFB office offers a full suite of banking services that cater to the essential financial needs of its customers, empowering them to truly live productive lives.

Commenting on the development, the Managing Director, Moniepoint MFB, Babatunde Olofin noted that the Bank’s visionary commitment to ensuring the creation of a society where everyone experiences financial happiness and they are sufficiently empowered to bring their dreams to fruition adding that the new branch is in strong alignment with this proposition which alongside its other core digital banking channels, plays a key role in how the financial institution serves and provide solutions to customers across the country.

“As we consistently bolster our digital capabilities, we recognize that physical sites remain an important touchpoint for many customers, who relish the trust, inter-personal touch and clarity at face-to-face conversations which our amazing customer service personnel provide.

“As such, creating connected experiences – physical and digital to provide access to best in class banking services affords us the privilege to deliver customer satisfaction and drive our business growth even as we strive to meet and surpass the expectations of our stakeholders,” he said.

Olofin reiterated that at the heart of Moniepoint’s success are its highly esteemed customers and that judging from feedback, testimonials, as well as the huge adoption of its products and services, the Bank is poised and well positioned to deliver more quality and value-adding banking services.

It will be recalled that Moniepoint MFB recently launched a USSD code,*5573# to offer customers a fast and user-friendly platform for consumers to carry out their banking activities safely and securely. This is in addition to a partnership that has been forged with the Corporate Affairs Commission (CAC) to digitize over 30 million MSMEs in the next 5 years with a view to enabling them to contribute more meaningfully to job creation and national growth.


Kindly share this post
Continue Reading

Trending