Connect with us

E-Business

Sophos Identifies Top Ransomware Families in Africa

Published

on

Cyber security vendor Sophos has identified the top ransomware families that affected Africa in 2017.

According to Sophos, the Ceber ransomware accounted for 80% of attacks in Africa, followed by WannaCry (17%), and others like Jaff (1%), Locky (1%) and Petya (0.5%).

One of the most active kinds of ransomware out there, Cerber encrypts the files of infected users and demands money in exchange for enabling access to their files. It works even if a user is not connected to the Internet, so they can’t stop it by unplugging their PC.

Cerber, sold as a ransomware kit on the Dark Web, remains a dangerous threat, says Sophos, adding the creators of Cerber continuously update the code and charge a percentage of the ransom that the “middle-men” attackers receive from victims.

Regular new features make Cerber not only an effective attack tool, but perennially available to cyber criminals, the cyber security firm notes.

“This Dark Web business model is unfortunately working and, similar to a legitimate company, is likely funding the ongoing development of Cerber. We can assume the profits are motivating the authors to maintain the code,” says Dorka Palotay, SophosLabs security researcher and contributor to the ransomware analysis in the SophosLabs 2018 Malware Forecast.

The WannaCry ransomware attack was a May 2017 worldwide cyber attack by the WannaCry ransomware cryptoworm, which targeted computers running the Microsoft Windows operating system by encrypting data and demanding ransom payments in the Bitcoin crypto-currency.

“Looking at the whole world, WannaCry was responsible for 45.3% of the ransomware attacks, while in Africa this value is only 17%,” Palotay says.

“In Africa, clearly Cerber was the biggest ransomware threat this year, since 80% of the ransomware lookups was caused by Cerber, while this number is only 44.2% if we look at the whole world. Regarding the smaller families, the results are very similar.”

The SophosLabs 2018 Malware Forecast report recaps ransomware and other cyber security trends based on data collected from Sophos customer computers worldwide from 1 April to 3 October 2017.

One key finding shows that while ransomware predominately attacked Windows systems in the last six months, Android, Linux and MacOS platforms were not immune.

“Ransomware has become platform-agnostic. Ransomware mostly targets Windows computers, but this year, SophosLabs saw an increased amount of crypto-attacks on different devices and operating systems used by our customers worldwide,” says Palotay.

She notes that for the first time Sophos saw ransomware with worm-like characteristics, which contributed to the rapid expansion of WannaCry.

“This ransomware took advantage of a known Windows vulnerability to infect and spread to computers, making it hard to control.

“Even though our customers are protected against it and WannaCry has tapered off, we still see the threat because of its inherent nature to keep scanning and attacking computers. We’re expecting cyber criminals to build upon this ability to replicate as seen in WannaCry and NotPetya, and this is already evident with Bad Rabbit ransomware, which shows many similarities to NotPetya.”

Continue Reading
Advertisement
Comments

E-Business

Why and How Government Should Encourage Coding Education

Published

on

Coding education has been identified as critical to prepare young people with requisite skills for future jobs and that is why governments must embrace the programme to reduce unemployment,

 

Mr. Olajide Ajayi, ambassador Africa Code Week Nigeria, in a chat with Nigeria CommunicationsWeek underscored the benefits of learning to code at a young age.

 

Ajayi said, “…cannot be overemphasized. Yes, it is agreed that not all future jobs would require you to be a coder, what’s certain is that most would require collateral skills and competencies that can be acquired through coding education”.

 

“Such essential skills”, Ajayi noted” are as logical and critical reasoning, patience, attention to detail, self-reliance, language and memorization are all examples of skills one can gain through coding Education”.

 

Launched in 2015 by SAP EMEA, in partnership with the Cape Town Science Centre and the Galway Education Centre, Africa Code Week is an initiative that brings together hundreds of schools, teachers, governments, businesses and non-profit organisations with the aim to empower young people across Africa with digital literacy skills.

 

In the report released earlier in the week, Claire Gillissen-Duval, director of EMEA Corporate Social Responsibility at SAP and global project lead for Africa Code Week, explained “We also saw unprecedented collaboration between our public and private sector partners, as well as from NGOs such as Code For Change that leveraged their participation in Africa Code Week 2017 to scale coding classes across 100 secondary schools in SA over the next 12 months.”

 

The initiative, which took place in October, is now actively supported by UNESCO YouthMobile, Google, the German Federal Ministry for Economic Cooperation and Development, 15 African governments, over 100 partners and 100 ambassadors across the continent.

Continue Reading

E-Business

Experts task NASS on Legal Framework for Data Protection

Published

on

African Academic Network on Internet Policy has requested that the National Assembly inserts the following in data protection framework or bill, “the use of personal data must be in accordance with the purpose for which it was collected, consent of the individual must be obtained prior to collecting his/her personal data; rights of the individual to seek legal remedies for misuse and or unauthorized access to his/her personal data must be guaranteed”.

This was the submission at the two day seminar/Colloquium of the African Academic Network on Internet Policy held at IITA, Ibadan recently.

The theme of the two day seminar was, ‘Privacy and Security: Building the Evidence Base and a multi-stakeholder action base for Personal Data Protection in Nigeria’. It was revealed at the seminar, that most African countries including Nigeria do not have data protection laws.

It was revealed at the panel sessions that there are five primary concerns around the collection of the use of personal data both online and offline in Nigeria, they include, the use of personal data may be incompatible with the purpose for which it was collected; individuals have no rights in relation to the collection, use and storage of their personal information; Nigerians are not offered adequate opportunities to consent to or opt out of data collection.

More so, there is limited to no transparency around the processing of personal data and there is limited information available around how this personal data is used and stored, leading to greater risk of a personal data breach; children are exposed to privacy risks online and often lack the legal capacity to give valid consent and may unknowingly disclose personal information to online platforms due to the appealing nature of their visual content.

In his opening remarks, the Executive vice chairman of ISGPP, Dr. Tunji Olaopa said that African continent is touted as fertile ground for Netpreneurs, Mobile institutions, increasing use of technology and leveraging the internet to address developmental challenges.

He added that, with the exponential increase in the use of personal information by businesses in technology age, data protection has become such a defining compelling agenda for priority attention in many countries worldwide.

Olaopa emphasized that it is high time that Africa aligns itself with this global movement by coming up with sufficiently strong and intelligent data protection policy to drive the growth of the African Digital Economy.

While giving a brief overview of the African Academic Network on Internet Policy, member of the steering committee, Dr. Temitope Aladesanmi said that the formation of the group was as a result of the poor and low level of African voices specifically to Internet Policy and governance.

He explained that the European Union General Data Protection Rule (GDPR) would come to effect May 2019 and as such, it has significant impact for some local organizations who are in business with the EU maybe required to conform with the standard.

“One of the direct output of the main conference was the imperative of the need to begin an immediate discourse with respect to data protection and security in Africa.”

According to Co-creation Hub Nigeria, Emmanuel Okochu, said that the biggest challenge in Data Protection in Nigeria is that most users do not have a detailed understanding of positive sides of data protection entails.

“The people you seek to protect are the ones who don’t understand why they should be protected. When you try to explain to people how dangerous it is to keep posting every thing about them online”.

Several representatives came from other African including, Nigeria, South Africa, Mauritius, Kenya, Ghana, Code voir to mention a few.

According to Tope Ogundipe of Paradigm Initiative, “it is dangerous to exist in an environment where you don’t know how your information is used. It is possible you are put under surveillance without any legal framework”.

Dr. shyllon suggested that targeted national interventions and advocacy should be dependent on accessibility to ongoing or future national processes for the development of laws and policies on the protection of personal information.

Interventions could involve technical guidance for states to ensure proposed laws adopt a balanced approached with human rights consideration, assistance with amendment of laws and policies or addressing implementation challenges”.

Continue Reading

E-Business

Ibadan’s Tech Ecosystem Set to Host Stakeholders at IBPulse’s After5ive

Published

on

IBPulse, Ibadan’s leading online platform, will host tech startup founders, entrepreneurs and other tech industry players and enthusiasts at the Homecoming Edition of After5ive on Thursday December 21, at Latitude Lounge, Ventura Mall Ibadan, Oyo state, by 5pm.

 

It’s an interactive informal networking event where startup founders, entrepreneurs, industry players, government, media and other stakeholders discuss issues, developments, challenges and growth opportunities for the ecosystem.

 

This edition is supported by partners including Oyo state government, GberaTinrin Studios and TinklinD.

 

It is targeted at attracting tech founders, developers and other tech players that will be in Ibadan for end-of-the-year festivities.

 

Attendance at the event is free, while registration is required and this could be done by visiting ibpulse.com/afterfive

 

Speakers billed for this edition includes Abimbola Adekanmbi, Oyo state Commissioner for finance and budget, Seun Onigbinde, Co-founder at BudgIT, Niyi Ajao, Special Adviser to Oyo state government on ICT, Wole Odetayo, Executive Director, Wennovation Hub, Adewale Yusuf, CEO of Techpoint.ng, Adewale Oladipupo, Team Lead at TechCityNG and Ayobami Oyaleke, Founder, Placements.ng

 

Others include Olanrewaju Abidogun, Curator, ForLoop Ibadan, Oluwamayowa Oshidero, Head of Digital Strategy, TinklinD, and Tony Rowland Awobode, General Manager, thirtytwo FM.

 

Paul Adepoju, host and convener of After5ive, Speaking about the event said, “While tech in Nigeria had been adjudged by what is happening in Lagos, latest developments are convincing individuals in other parts of the country that they can successfully launch startups in any part of the country.

 

“We have several of such success stories in Ibadan and we look forward to connecting the various players and advancing various topical issues.”

Continue Reading

Trending

Copyright © 2017 Communication Week Media Limited.