Connect with us

E-Business

Scammers go ‘InterPlanetary’ Using a Decentralised File System in their Attacks

Published

on

Kindly share this post

Kaspersky experts have discovered how cybercriminals are using the InterPlanetary File System (IPFS) in email phishing attacks. Since late 2022, fraudsters have been using this safe, decentralised and reliable way for file distribution – considered to be one of the cutting-edge technologies of Web 3.0 – to target companies around the world.

In a new report by Kaspersky, researchers reveal how attackers are putting phishing HTML files in IPFS to cut web hosting costs.

This technique, used for both ongoing mass and targeted phishing campaigns, saw almost 400,000 phishing emails detected in February 2023.

IPFS is a peer-to-peer distributed file system enabling users around the world to exchange files. Unlike centralised systems, IPFS uses addressing performed according to unique content identifiers (CID), and not file paths.

The file itself resides on the computer of the user who had “uploaded” it to IPFS and downloaded directly from that computer.

By default, uploading or downloading a file to IPFS requires special software (IPFS client). For users to view the files residing in IPFS freely without installing any software, the so-called gateways are provided.

In 2022, scammers began actively using IPFS for email phishing attacks. They place HTML files containing a phishing form in IPFS and use gateways as proxies, so that victims can open the file, whether or not they are running an IPFS client on their devices.

The scammers also include file access links via a gateway into phishing letters dispatched to would-be victims.

The use of a distributed file system allows attackers to cut back on phishing page hosting costs. Besides, it’s impossible to delete files uploaded by third parties from IPFS.

If somebody wants a file to disappear from the system completely, they can urge its owners to delete it, but the method will probably never work with cybercriminals anyway.

IPFS gateway providers attempt to combat IPFS phishing by regularly deleting links to fraudulent files.

Yet detection and deletion of links at gateway level does not always happen as quickly as the blocking of a phishing website, cloud form, or document. The URL addresses of IPFS files first appeared in October 2022. As for now, the campaign is ongoing and being blocked by Kaspersky.

Phishing letters containing IPFS links are hardly ever too original — they contain the typical phishing content the purpose of which is to obtain the victim’s account login and password. What is interesting about this technique is where the HTML page links go.

The URL parameter contains the recipient’s email address. Once modified, the corporate logo on top of the phishing form and email address entered into the login field will change too. This way, one link can be used in several phishing campaigns targeting different users — sometimes even in dozens of campaigns.

In late 2022, Kaspersky observed up to 15,000 IPFS phishing letters-a-day for most of the time. Starting this year, IPFS phishing began to grow in scale, reaching more than 24,000 letters-a-day in January and February.

February was the busiest month in terms of IPFS phishing activity. In that month alone, researchers observed almost 400,000 letters – a 100,000 increase than in November and December 2022.

“Attackers have and will continue to use cutting-edge technologies to reap profits. As of late, we have observed an increase in the number of IPFS phishing attacks — both mass and targeted.

“The distributed file system allows scammers to save money on domain purchase. Plus, it is not easy to completely delete a file, although, there are attempts to combat fraud at IPFS gateway level.

“The good news is that anti-spam solutions detect and block links to phishing files in IPFS, just like any other phishing links. In particular, Kaspersky products employ a number of heuristics to detect IPFS phishing,” comments Roman Dedenok, a security expert at Kaspersky.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Zequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector

Published

on

Kindly share this post

Mr Adeoye Oludamilola, managing director, Zequence Digital, a digital agency,  has said strong enforcement of Intellectual Property (IP) laws , protection of Nigeria’s software industry against piracy will encourage innovation and investment.

Zequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector

Adeoye told reporters lately in Lagos that software piracy and the unauthorised use of proprietary technology are widespread in the country.

According to report Intellectual Property (IP) laws in software refers to the legal rights that protect the creations of the mind used in software development.

These rights, which include copyrights, patents, trade secrets, and trademarks, grant developers exclusive control over their software and related assets, preventing unauthorised use or reproduction.

Adeoye said that many startups do not protect their innovations, due to a lack of knowledge and the cumbersome legal processes involved.

“IP registration and litigation are expensive and time-consuming, which further discourages developers from protecting their work,” Adeoye said.

He added that the lack of awareness among developers about their IP rights contributed to the problem.

To address these challenges, Adeoye stressed the need for the formation of an IP Protection Consortium, comprising tech firms, legal experts, and regulators, to advocate for stronger IP enforcement.

He also suggested collaborating with legal tech startups to create simplified platforms for fast-tracked IP registration.

The managing director further called for joint initiatives between legal bodies and tech communities to launch IP rights education campaigns.

This, he said, would equip developers with the knowledge they needed to protect their innovations and grow their businesses.

Adeoye emphasised the need for the government and stakeholders to create an ecosystem for development and inclusivity by proactively engaging with regulators.

According to him, this will help ensure that policies are created with the input of concerned agencies and industry experts.

 

 


Kindly share this post
Continue Reading

E-Business

PalmPay Partners AXA Mansard Health to Make Digital Insurance Accessible, Affordable

Published

on

L-r: Oluwatoyin Alao, Head, Emerging Customers & Project Management, AXA Mansard Insurance Plc; Tope Adeniyi, CEO AXA Mansard Health Limited; Habib Kowontan, Head of Wealth Product, PalmPay; Jumoke Odunlami, Chief Distribution Officer, AXA Mansard Insurance Plc; Olorunfemi Hanson, Head of Marketing & Communications, PalmPay.
Kindly share this post

PalmPay, a leading fintech platform and full-stack digital neobank for emerging markets, has partnered with Nigeria’s biggest Health Insurance Company, AXA Mansard Health a member of the globally trusted AXA Group, to provide millions of Nigerians with affordable, accessible digital health insurance.

This strategic partnership enables PalmPay users to seamlessly access a range of health insurance packages from AXA Mansard directly within the PalmPay app. With plans starting as low as N500 per month, users can now choose from flexible insurance options tailored to fit their everyday needs.

The plans are designed to meet a wide range of needs; for example, the AXA Digital Health plan offers access to telemedicine consultations with doctors, N5,000 worth of medications, and up to N40,000 in surgical coverage. Users can also opt for the AXA Mansard MicroHealth plan at N1,000 per month, which provides unlimited diagnostic tests and funeral benefits. Additionally, the AXA Mansard Accident plan, available for N500 monthly, offers comprehensive death cover for both accidental and non-accidental cases.

Speaking on the partnership, Habib Kowontan, Head of Wealth Product at PalmPay, said: “Insurance is a key pillar of financial security, yet millions of Nigerians remain underserved. Our partnership with AXA Mansard Health breaks down long-standing barriers by placing reliable and affordable insurance solutions right at our users’ fingertips.”

In her remarks, Jumoke Odunlami, Chief Distribution Officer, AXA Mansard Insurance said that the partnership with Palmpay presents the AXA with another opportunity to improve health and productivity of Nigerians. “Through partnerships like this, we are covering over 1.8 million Nigerians and ensuring that healthcare is accessible, available and affordable.

“So we are excited about joining forces with a brand like Palmpay to compliment the range of financial possibilities they offer their customers with health plans. It fits well with our mission and our purpose of acting for human progress by protecting what matters, and we are looking forward to doing even more with Palmpay”, she explained.

This partnership reflects PalmPay’s broader mission to create a more inclusive digital financial ecosystem, one that empowers users to not only manage their money efficiently, but also secure their future.

This partnership reflects PalmPay’s broader mission to create a more inclusive digital financial ecosystem, one that empowers users to not only manage their money efficiently, but also secure their future.


Kindly share this post
Continue Reading

E-Business

Artificial Intelligence: The Indispensable Catalyst for Nigeria’s Agricultural Revolution

Published

on

Kindly share this post

By Diana Tenebe, Chief Operating Officer, Foodstuff Store

Nigeria’s agricultural sector, a cornerstone of its economy, faces a critical crossroads. While employing a staggering 40% of the population and holding over 84 million hectares of arable land, the industry is hobbled by deep-seated challenges. Low productivity, a fragmented supply chain, poor infrastructure, and a lack of access to financial services are just a few of the hurdles that prevent the sector from reaching its full potential. Coupled with the unpredictable and severe shocks of climate change—from prolonged droughts to devastating floods—these issues threaten the food security of a rapidly growing population.

Diana Tenebe

To truly transform this vital sector, a new approach is needed, one that moves beyond traditional methods and embraces the power of technology. Artificial Intelligence (AI) is not just a futuristic buzzword; it is the imperative for Nigeria’s agricultural revolution. AI holds the key to unlocking higher yields, building resilience, and fostering an inclusive and sustainable food system that can feed a nation and drive economic growth.

The most immediate impact of AI is in the area of precision farming. By integrating AI with technologies like Internet of Things (IoT) sensors, drones, and satellite imagery, farmers can gain an unprecedented understanding of their land. AI-powered systems can analyse real-time data on soil moisture, nutrient levels, and plant health, providing actionable insights for targeted interventions. For instance, smart irrigation systems can optimize water usage, a critical resource in a country facing increasing water scarcity. AI-enabled drones can survey vast farmlands in minutes, identifying early signs of pests or disease and allowing for precise application of pesticides, reducing chemical use and cost. Early trials of these technologies in Nigeria have already demonstrated significant gains, with some reports showing a remarkable 60-70% increase in crop yields.

Climate adaptation is another area where AI’s role is indispensable. Nigeria’s farmers are on the front lines of climate change, enduring erratic rainfall and extreme weather events. AI can provide a shield against this volatility. By analyzing historical weather data and real-time forecasts, AI models can offer accurate, localized predictions. This allows farmers to proactively adjust their planting schedules, select climate-resilient crop varieties, and plan for potential risks, effectively mitigating the devastating impact of droughts and floods.

The economic benefits extend far beyond the farm gate. A significant portion of Nigeria’s agricultural produce is lost due to an inefficient and fragmented supply chain. AI can streamline logistics, optimize transportation routes, and enhance inventory management. By reducing spoilage and waste, AI ensures that more of what is harvested reaches the market, thereby boosting the incomes of farmers and providing a more stable supply of food for consumers. The success of Nigerian agritech companies like Crop2Cash, which has reportedly helped over 500,000 farmers increase their income by up to 70%, demonstrates the tangible economic impact of these technologies.

AI is a powerful tool for promoting financial inclusion and education. Millions of smallholder farmers, who form the backbone of Nigerian agriculture, are often excluded from formal financial systems due to a lack of collateral and credit history. AI-driven fintech solutions can bridge this gap by assessing creditworthiness using alternative data, making it easier for farmers to access the loans and insurance they need to scale their operations. AI-powered mobile apps and chatbots can also serve as virtual extension agents, providing personalized advice on best farming practices, pest control, and crop management, democratizing knowledge and empowering farmers to make better decisions.

Despite this immense potential, the journey towards widespread AI adoption is not without its hurdles. High upfront costs for AI-enabled equipment, a general lack of understanding and experience with these tools, and a preference for traditional methods are all significant barriers. Furthermore, infrastructural gaps, including poor roads and inadequate storage facilities, hinder the seamless implementation of these technologies. Data availability and computational capacity are also key challenges that need to be addressed.

However, the Nigerian government and a burgeoning ecosystem of agritech startups are already paving the way forward. The government’s vision is articulated in initiatives like the National AI Strategy, which aims to establish AI research centers and support R&D. Programs such as the Nigeria Artificial Intelligence Research Scheme (NAIRS) and the NITDA AI Developers Group are building the necessary skills among entrepreneurs and farmers. Strategic partnerships between government bodies, financial institutions, and innovative startups are creating localized solutions that are tailored to the unique conditions of Nigerian agriculture.

Ultimately, AI is not a luxury but an imperative for Nigeria to unlock its agricultural potential. Its successful integration will transform the role of the farmer from a manual laborer to a strategic planner and overseer of a smart, efficient, and sustainable food system.

By investing in infrastructure, fostering strategic partnerships, and prioritizing education and capacity building, Nigeria can harness the power of AI to feed its people, drive economic prosperity, and secure its place as a leader in the African agricultural revolution.


Kindly share this post
Continue Reading

Trending