Connect with us

News

Stolen Credentials Selling on Dark Web for Price of 3 Litres of Fuel – Report

Published

on

Kindly share this post

HP has released The Evolution of Cybercrime: Why the Dark Web is Supercharging the Threat Landscape and How to Fight Back – an HP Wolf Security Report.

The findings show cybercrime is being supercharged through “plug and play” malware kits that make it easier than ever to launch attacks. Cyber syndicates are collaborating with amateur attackers to target businesses, putting our online world at risk.

The HP Wolf Security threat team worked with Forensic Pathways, a leading group of global forensic professionals, on a three-month dark web investigation, scraping and analysing over 35 million cybercriminal marketplaces and forum posts to understand how cybercriminals operate, gain trust, and build reputation.

Key findings include:

– Malware is cheap and readily available – Over three quarters (76%) of malware advertisements listed, and 91% of exploits (i.e., code that gives attackers control over systems by taking advantage of software bugs), retail for under ₦4,923.17. The average cost of compromised Remote Desktop Protocol credentials is just ₦2,092.35.

Vendors are selling products in bundles, with plug-and-play malware kits, malware-as-a-service, tutorials, and mentoring services reducing the need for technical skills and experience to conduct complex, targeted attacks – in fact, just 2-3% of threat actors today are advanced coders.

-The irony of ‘honor amongst cyber-thieves’ – Much like the legitimate online retail world, trust and reputation are ironically essential parts of cybercriminal commerce: 77% of cybercriminal marketplaces analysed require a vendor bond – a license to sell – which can cost up to ₦1,230,793.

Eighty-five per cent of these use escrow payments, and 92% have a third-party dispute resolution service. Every marketplace provides vendor feedback scores. Cybercriminals also try to stay a step ahead of law enforcement by transferring reputation between websites – as the average lifespan of a dark net Tor website is only 55 days.

– Popular software is giving cybercriminals a foot in the door – Cybercriminals are focusing on finding gaps in software that will allow them to get a foothold and take control of systems by targeting known bugs and vulnerabilities in popular software.

Examples include the Windows operating system, Microsoft Office, web content management systems, and web and mail servers. Kits that exploit vulnerabilities in niche systems command the highest prices (typically ranging from ₦393,853.76 – ₦1,723,110.20). Zero Days (vulnerabilities that are not yet publicly known) are retailing at tens of thousands of dollars on dark web markets.

“Unfortunately, it’s never been easier to be a cybercriminal. Complex attacks previously required serious skills, knowledge and resource. Now the technology and training is available for the price of 3 litres of fuel.

“And whether it’s having your company and customer data exposed, deliveries delayed or even a hospital appointment cancelled, the explosion in cybercrime affects us all,” comments report author Alex Holland, Senior Malware Analyst at HP Inc.

“At the heart of this is ransomware, which has created a new cybercriminal ecosystem rewarding smaller players with a slice of the profits.

“This is creating a cybercrime factory line, churning out attacks that can be very hard to defend against and putting the businesses we all rely on in the crosshairs,” Holland adds.

HP consulted with a panel of experts from cybersecurity and academia – including ex-black hat hacker Michael ‘Mafia Boy’ Calce and authored criminologist, Dr. Mike McGuire – to understand how cybercrime has evolved and what businesses can do to better protect themselves against the threats of today and tomorrow.

They warned that businesses should prepare for destructive data denial attacks, increasingly targeted cyber campaigns, and cybercriminals using emerging technologies like artificial intelligence to challenge organisations’ data integrity.

To protect against current and future threats, the report offers up the following advice for businesses:

Master the basics to reduce cybercriminals’ chances: Follow best practices, such as multi-factor authentication and patch management; reduce your attack surface from top attack vectors like email, web browsing and file downloads; and prioritise self-healing hardware to boost resilience.

Focus on winning the game: plan for the worst; limit risk posed by your people and partners by putting processes in place to vet supplier security and educate workforces on social engineering; and be process-oriented and rehearse responses to attacks so you can identify problems, make improvements and be better prepared.

Cybercrime is a team sport. Cybersecurity must be too: talk to your peers to share threat information and intelligence in real-time; use threat intelligence and be proactive in horizon scanning by monitoring open discussions on underground forums; and work with third-party security services to uncover weak spots and critical risks that need addressing.

“We all need to do more to fight the growing cybercrime machine,” says Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc. “For individuals, this means becoming cyber aware.

Most attacks start with a click of a mouse, so thinking before you click is always important. But giving yourself a safety net by buying technology that can mitigate and recover from the impact of bad clicks is even better.”

“For businesses, it’s important to build resiliency and shut off as many common attack routes as possible,” Pratt continues.

“For example, cybercriminals study patches on release to reverse engineer the vulnerability being patched and can rapidly create exploits to use before organisations have patched. So, speeding up patch management is important.

“Many of the most common categories of threat such as those delivered via email and the web can be fully neutralised through techniques such as threat containment and isolation, greatly reducing an organisation’s attack surface regardless of whether the vulnerabilities are patched or not.”

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

Nigerian Banks Lost N42.6b to Fraud in Q2 2024

Published

on

Kindly share this post

Fasasi Sarafadeen Atanda National President of the Association of Mobile Money and Bank Agents in Nigeria (AMMBAN) said Nigerian Banks lost N42.6b to fraudsters in Nigeria within the Q2 of 2024.

Atanda quoting Financial Institutions Training Center (FITC) report, said the loses were traced to agent locations through the use of stolen cards, phones, fake alerts and ransom cash out.

Atanda, who made the disclosure at the 8th Annual National Conference of the association in Benin City, Edo State with the theme “Match Data With Actions” said that to steam the tide AMMBAN has introduced an automated verifiable identity card for agents and launched a Joint Task Force (JTF) in conjunction with the Office of the Inspector General of Police (IGP), DSS, NSCDC and other security agencies.

According to him, “The 8th AMMBAN annual national conference is unique as it is meant to match data with actions.

Data on Access to Financial Inclusion: As at the last EFInA report in 2023, financial inclusion was at 64% but on the ground, over 300 local government areas in Nigeria are without bank branches (AMMBAN Survey, 2024).

Why access to commercial banks are of concern? CBN recent regulation on mandatory BVN and/or NIN for owning an account or a wallet requires the presence of bank branches, because they are majorly the structures enabled for BVN enrollment/modification.

On action from AMMBAN, he noted that the association has introduced a one-stop shop for financial services, offering NIN, BVN, Account Opening, Card Issuance, Sim Registration, Savings, Credit, Insurance etc across the excluded local government areas.

Continuing, he said. “Data on Security: Nigerian banks lost N42.6B to fraud in Q2, 2024 (FITC), and most were traced to agent locations through the use of stolen cards or phones, fake alerts, ransom cash out, etc.

“Action From AMMBAN: AMMBAN introduced an automated verifiable identity card for agents and launched a Joint Task Force (JTF) in conjunction with the Office of the Inspector General of Police (IGP), DSS, NSCDC and other security agencies. JTF has been providing intelligence for the security agencies on enforcement sanity and regulatory standards at agent locations – in public interest.

AMMBAN has indeed led the way of data to actions by turning our insights into inclusive financial solutions (NFIC, Agent QR-coded ID card, Agent Joint Task Force, AMMBAN cooperative, AMMBAN women wing etc).”

In his keynote address Mr. Philip Ikeazor, Deputy Governor Financial Stability, Central Bank of Nigeria (CBN) represented by the apex bank Controller, Benin Branch, Michael Mgbeze said that the Central Bank aims at advancing financial inclusion and building a robust and inclusive financial system that leaves no Nigerian behind.

He said the contribution of AMMBAN have been instrumental in ensuring that millions of Nigerians particularly in the underserved communities now have access to financial services.

“We gather today with a shared mission – to advance financial inclusion and build a robust and inclusive financial system that leaves no Nigerian behind. Your contributions have been instrumental in ensuring that millions of Nigerians, particularly in underserved communities, now have access to financial services.

“As we approach the end of 2024, we are closer than ever to our goal of 95% financial inclusion. Currently, less than 25% of Nigerians are financially excluded – an impressive leap from 32% in 2020. This figure represents millions of people gaining access to the tools needed to improve their lives, from savings and loans to insurance and investment products.

“Nigeria’s financial inclusion landscape has transformed significantly from 2016 to 2024. As at 2023, the formal financial service usage has grown from 30% to 57%, the adoption of financial service agents has also skyrocketed, from 4.4% in 2018 to 54%in 2023.

“The Usage of informal financial service providers increased by 39% since 2020, with significant increase in the use of village associations predominantly in the South East. The use of financial services, including transaction accounts, savings, remittances, credit, and insurance, is on the rise. Notably, savings increased by 2%, remittances by 8%, and credit by 4%”, he said.

On his part, the Sen Ibrahim Hadejia Deputy Chief of Staff to the President Office of the Vice President, represented by Nurudeen Abubakar, said President Bola Ahmed Tinubu’s administration is putting sustainable mechanisms in place to build a $1trillion economy by 2030, adding that while substantial progress has been made. Something around 26% of the adult population primarily women, rural dwellers, and small business owners are financially excluded.

“As we seek to achieve this milestone, financial inclusion is at the heart of our economic agenda, ensuring that all Nigerians—regardless of location, gender, or socioeconomic status—are not only included but also empowered in our financial system.

“President Bola Ahmed Tinubu’s administration is putting sustainable mechanisms in place to build a $1 trillion economy by 2030,

“This has been made evident in the administration’s effort to boost access to credit for Micro, Small, Medium, and Nano Enterprises (MSMSNE), and various other programs targeted at enhancing inclusive growth through economic and financial inclusion”, Abubakar stated.


Kindly share this post
Continue Reading

News

Ibukun Awosika, Ziad Maalouf, Others Set to Take the Stage @TEDxPAU 2024

Published

on

Kindly share this post

Pan-Atlantic University is thrilled to announce the second edition of TEDxPAU, themed ‘Shaping the Future’ which will take place on the 16th of November at Africa’s premier business school—Lagos Business School.

After the success of its previous edition, which featured notable speakers such as the MD/CEO of Airtel Nigeria—Carl Cruz, the Group CEO of RED Media—Ayodeji Rasaq, and the Dean of the School of Media and Communication, Pan-Atlantic University—Dr. Ikechukwu Obiaya, the planning committee returns with an even stronger commitment to shape the future through present action.

According to Bella Victor, the event organiser: “The theme ‘Shaping the Future’ was inspired by the incredible power we hold as individuals and organisations to create lasting change.

“TEDxPAU 2024 is a platform where visionaries and leaders will converge to share ideas that can shape not just tomorrow, but the generations to come.

“We believe the future is a canvas, and this event will ignite the creativity, innovation, and drive needed to paint it.”

This year’s edition boasts a stellar lineup of influential speakers, including:

  • Ziad Maalouf – CEO/MD, Seven Up Bottling Company Nigeria
  • Ibukun Awosika – First Female Chairperson, First Bank of Nigeria
  • Peter Bamkole, PhD – Deputy Vice Chancellor (Admin), Pan-Atlantic University
  • Korty EO – Filmmaker & YouTuber
  • Adesuwa Ifedi – Senior Vice President, Heifer International
  • Fabian Ajogwu, SAN, FCIArb – Founding Partner, Kenna Partners
  • Temitope Runsewe – CEO, Dutum Group
  • Michael Oluwagbemi, PE, PMP, MBA – CEO, Presidential CNG Initiative

The event is expected to play a crucial role in shaping conversations about the future of Nigeria and Africa as a whole. With industry experts spanning fields such as entertainment, oil & gas, banking, agriculture, law, construction, and more, TEDxPAU 2024 will provide valuable insights into the most pressing challenges of our time, thereby paving the way for a brighter Africa.

TEDxPAU 2024 is looking to house entrepreneurs, students, creatives, and innovators with a passion for shaping the future, one conversation at a time.

The event offers an opportunity to network and build relationships with like-minded individuals.


Kindly share this post
Continue Reading

News

23 Years After, Obasanjo was Right on Zinox

Published

on

Kindly share this post

By Ayodele Adigun

It was a weather-friendly Tuesday morning on October 9, 2001 at Eko Hotel and Suites in Lagos. History was made in Nigeria. Zinox, a wholly indigenous tech brand, was launched with many firsts and unique features. The brainchild of Forbes Best of Africa’s Tech Icon, Dr. Leo Stan Ekeh, it had the blessings of the then President Olusegun Obasanjo, an African statesman of peerless courage.

The event was attended by dignitaries from both the public and private sectors, diplomats and representatives of multinational computer brands.

The then Vice President Atiku Abubakar was Special Guest of Honour, while President of the Senate at that time, Rt. Hon. Anyim Pius Anyim, was Chairman of the occasion. Asiwaju Bola Ahmed Tinubu, then Governor of Lagos State, was chief host. Lagos was on lockdown literally, from the Island to the mainland as many governors, ministers, senators and members of the National Assembly, top corporate moguls, the leadership of the different labour unions, led by Adam Oshiomhole, then President of the Nigeria Labour Congress, were in attendance.

Beyond the razzmatazz of the colourful launch, Zinox more than justified the confidence Obasanjo reposed in Ekeh and the brand. It did not just transform into a formidable African brand, it scored many firsts, a salute to the legendary innovative entrepreneurial skill of Ekeh and his team and a testament to the outstanding leadership clairvoyance of Obasanjo. It is safe to say that in Zinox, Obasanjo saw the future.

After the launch, Obasanjo invited the management to Aso Rock and endorsed the Zinox brand as a national pride. It was no surprise that Obasanjo branded Ekeh: “Icon of Hope,” on October 1, 2002, as a role model to future Nigerian digital entrepreneurs, a fitting cap for an exemplar of the true Nigerian spirit of chutzpah, excellence, innovation, humility and integrity.

True, President Obasanjo achieved a lot in the ICT ecosystem from the introduction of the GSM genre of telephony via one of the most transparent mobile digital auctions administered by Dr. Ernest Ndukwe, to the creation of several indigenous computer assembly plants. But it was obvious that Zinox brand and its promoter, Ekeh, occupied a huge space in the President’s heart. Obasanjo boldly flaunted the Zinox brand, travelling the world with it, not just as a user but as a national brand and pride and was never shy to show it to other world leaders that Nigerians can also produce computers.

In one of his books, Obasanjo is a prolific writer, it has to be said, he celebrated Ekeh as a model for Nigerian youths. He topped the presidential adulation for Ekeh with the Officer of the Order of the Federal Republic, one of the high-ranking honours of the Federal Republic of Nigeria. Obasanjo never hid his admiration for Ekeh or his pride in his accomplishments as an indigenous player with global clout. On one occasion when President Obasanjo was hosting the nation’s captains of industry at State House, he singled out Ekeh and openly prayed for him, showering him with presidential blessings and publicly affirming his positive impact on Nigerian youths as a man who is living the Nigerian dream with hard work.

On account of the reliability of the Zinox brand and Obasanjo’s matchless sense of patriotism, he directed all Ministries, Departments and Agencies (MDAs) to standardise on Zinox and equivalent indigenous brands. This gave a spur to the growth of the Zinox brand and it became the preferred brand in the industry among public and private sector officials.

Zinox at 23 is beyond a celebration of an African brand. It is a celebration of uniqueness, doggedness, resilience and entrepreneurial majesty of an African who dared the digital nerds of the advanced economies and succeeded in creating digital mills in and across Africa. But more significantly, Ekeh singlehandedly turned global attention to Nigeria.

And just by Ekeh’s stroke of genius, Zinox scored many firsts. The first internationally certified indigenous computer brand in West Africa and the first computer brand in the world to incorporate the Naira sign (N) on its keyboard. First Original Equipment Manufacturer in sub-Saharan Africa to receive Microsoft Windows Hardware Quality Lab Certification; first Microsoft Prime Production Online Automation Partner in Sub-Saharan Africa with the OA Version 3.0; first Intel Premium Partner; first OEM in West Africa to attain the ISO 9001-2015 Certification; first to acquire the Google Mobile Application Distribution Agreement in West Africa; first OEM in Nigeria to introduce renewable energy and lifestyle products and attaining the status of Intel Platinum Partner in sub-Saharan Africa.

In 23 years, Zinox has become one of a kind, unique in name, quality, global competitiveness and readiness for the market. The high-profile stature of its launch said it all. Zinox is truly like no other indigenous brand.

Atiku, a retired Customs Officer, widely travelled businessman and nationalist, underscored the seriousness of the Zinox brand at the launch. He said: “I have been in both public and private sector. I have travelled widely and have witnessed the launch of products and services across the world but nowhere in the world have I seen a product launch of this magnitude and type. Zinox has just made a huge marketing statement out of Nigeria that would be heard in the rest of Africa and around the globe.”

Atiku gushed as he addressed the enraptured and sufficiently excited audience. An elated Atiku spoke glowingly about the Zinox project, describing it as a perfect example of backward integration which sits well with the Federal Government policy of looking inward to boost the nation’s primary sector. He saluted Ekeh and his team for their ingenuity and tech-savvy showmanship.

An excited Oshiomhole, who launched the “Computerise Nigeria Project”, a social project at the event by Zinox meant to democratise the ownership of computers to the unreached and under-reached, described Ekeh as a “digital militant”.

A good 23 years after, Atiku deserves to be called a master of clairvoyance. As he predicted 23 years ago, Zinox’s influence has spread across Africa and beyond.

The public presentation of Zinox range of products was beyond a product launch. It was a loud statement on the sovereignty of Nigeria. In the 21st century, no nation is truly sovereign without her home-grown tech identity and sufficiency. Ekeh sings this as his abiding song: the need to create a truly Nigerian IT identity.

Ekeh is a serial digital disruptor, an incurable challenger of status quo. And Zinox is a product of both personal determination and patriotism. It was born to break protocol and discard stereotype. It answered the question: Can anything good come out of Nigeria?

Ekeh says with a sense of national pride and self-satisfaction: “We showed that in Nigeria, it’s possible to create technology that is smart, competitive and stands shoulder to shoulder with any of its kind across the globe. We went a step further in domesticating the technology behind Zinox. We conceptualised and built into the systems stabilizers and surge protectors to take care of our peculiar challenges of irregular electricity supply and the problems associated with switching from Alternating Current (AC – national grid) to Direct Current (DC-generators). What gives me joy above monetary reward is that today when our children hear about Zinox, they have a sense of self-belief because they have been to our plant and they now know there’s nothing so special about the computer and the technology behind it.”

So far, Zinox has proven both competence and capacity at home and other parts of Africa. It was the preferred technology that powered several mega projects including the 8th All Africa Games codenamed COJA 2003; the 18th Commonwealth Heads of Government Meeting held in Nigeria in 2003; All-Africa University Games held in Bauchi in 2004; and 7th Ordinary Session of the Assembly of the Africa Union held in The Gambia in 2006. It has also undertaken critical interventions by transforming the Nigeria and Guinea Bissau electoral systems from analogue to digital. The conduct of Nigeria general elections in 2007 and 2011 is a good example. Zinox has also fully provided the technology for the postponed national census.

A quintessential family man, Ekeh has stayed deep-rooted in the ICT space. His wife, Lady Chioma Ekeh, a mathematician and chartered accountant, oversees the biggest tech distribution company in sub-Sahara Africa, TD Africa. His first son, Prince Nnamdi Ekeh, aka The Prince of Konga, with MBA from Oxford, leads Konga, the ecommerce giant, which he acquired through his company, Yudala, in one of the most ambitious and seamless acquisitions in Africa’s tech history.

His first daughter, Gozy Ajogun, nee Ekeh, an alumnus of London School of Economics, oversees Task Systems, an ICT solutions firm under the Zinox Group. T second daughter, Chidalu Ekeh, with Masters in Digital Marketing from Imperial College, London, is a Fintech whiz, while his other two younger sons also play in the tech space.

Ekeh has built a digital family rooted in ICT. He has added digital value to Africa, but the best of them all is the gift of Zinox, for which the nation is grateful.

. Adigun, an Associate Professor of Mechatronics, writes from Lagos.


Kindly share this post
Continue Reading

Trending