Connect with us

E-Business

Firm Uncovers PipeMagic Backdoor Attacks Businesses Through Fake ChatGPT Application

Published

on

Kindly share this post

Kaspersky’s Global Research and Analysis Team (GReAT) has recently discovered a new malicious campaign involving the PipeMagic Trojan, which has shifted from targeting entities in Asia to expanding its reach to organisations in Saudi Arabia.

The attackers are using a fake ChatGPT application as bait, deploying a backdoor that both extracts sensitive data and enables full remote access to compromised devices. The malware also operates as a gateway, enabling the introduction of additional malware and the launch of further attacks across the corporate network.

Kaspersky initially discovered PipeMagic backdoor in 2022, this plugin-based trojan was targeting entities in Asia at that time.

The malware is capable of functioning as both a backdoor and a gateway. In September 2024, Kaspersky’s GReAT observed a resurgence of PipeMagic, this time targeting organisations in Saudi Arabia.

This version uses a fake ChatGPT application, built with the Rust programming language. At first glance, it appears legitimate, containing several common Rust libraries used in many other Rust-based applications.

However, when executed, the application displays a blank screen with no visible interface and hides a 105,615-byte array of encrypted data which is a malicious payload.

In the second stage, the malware searches for key Windows API functions, by searching the corresponding memory offsets using names hashing algorithm. It then allocates memory, loads the PipeMagic backdoor, adjusts necessary settings, and executes the malware.

One of the unique features of PipeMagic is that it generates a 16-byte random array to create a named pipe in the format \\.\pipe\1.<hex string>. It spawns a thread that continuously creates this pipe, reads data from it, and then destroys it.

This pipe is used for receiving encoded payloads, stop signals via the default local interface. PipeMagic usually works with multiple plugins downloaded from a command-and-control (C2) server, which, in this case, was hosted on Microsoft Azure.

“Cybercriminals are constantly evolving their strategies to reach more prolific victims and broaden their presence, as demonstrated by the PipeMagic Trojan’s recent expansion from Asia to Saudi Arabia. Given its capabilities, we expect to see an increase in attacks leveraging this backdoor,’ comments Sergey Lozhkin, Principal Security Researcher at Kaspersky’s GReAT.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Hisense Electronics Unveils Flagship Showroom in Abuja

Published

on

Kindly share this post

By Fabian Tarpael, Abuja

Hisense electronics unveiled a flagship showroom in Abuja over the weekend. Speaking at the event, Mr. Mustapha Khries, the Abuja Branch Manager of the Fouani Group, highlighted the significance of the flagship store, describing it as the first of its kind in the entire West African region.

He also addressed the challenges facing businesses in Nigeria, particularly the high exchange rates and transportation costs.

“The Fouani Group remains resilient and ready to overcome challenges, unlike others who often exit the market when faced with similar issues.”

Ms. Haifa Du, Senior Sales Manager for Hisense Electronics, emphasized the brand’s commitment to affordability and innovation, stating that Hisense offers the most cost-effective and advanced solutions in the market.

The event underscored Hisense’s dedication to technological innovation and sustainability while reaffirming its leadership position in the consumer electronics market.

Mr. Robbin Wei, Senior Sales Manager of Hisense Group, supported by Mr. Greg and Ms. Haifa Du, showcased various innovative products from the new flagship store.

Among the standout products showcased include; The Hisense 110″ Smart Ultra AMOLED TV, featuring unique capabilities such as a solar-powered remote control and a “locate remote” function to find misplaced remotes easily.


Kindly share this post
Continue Reading

E-Business

PalmPay, Jumia Partner to Launch Integration for Shoppers in Nigeria

Published

on

Kindly share this post

PalmPay, Africa-focused fintech operating Nigeria’s most used mobile wallet, and Jumia, Africa’s e-commerce giant, today announce a strategic partnership to enhance the digital payment ecosystem on the continent, starting with payment integrations and co-marketing efforts in Nigeria.

This partnership underscores both parties’ commitment to developing the digital payment ecosystem in Nigeria and grow the use of the cashless economy.

WIth PalmPay now available as a payment method, shoppers on Jumia will now be able to pay for their purchases with the option to check out with their PalmPay wallet, ensuring a seamless user experience and transaction reliability through the direct integration.

“We are proud to partner with Jumia as we bring together the best of fintech and e-commerce to redefine the online shopping experience,” said Sofia Zab, Chief Marketing Officer, PalmPay. “This strategic alliance aligns perfectly with our shared commitment to delivering a superior user experience and exceptional value to our customers.”

Speaking on the partnership, Sunil Natraj, CEO, Jumia Nigeria added: “At Jumia, we are dedicated to creating value for our customers by ensuring a convenient, reliable, and secure shopping experience.

“This partnership with PalmPay strengthens our commitment to enhancing the digital payments within our platform. By integrating PalmPay, we are providing more options for customers to access affordable and quality goods with the convenience of cashless transactions.”

This alliance marks the beginning of a long-term collaboration between two industry giants, aiming to drive innovation, increase convenience for consumers, and foster the adoption of digital payments across Africa.

To celebrate the launch of the partnership, PalmPay and Jumia are launching a special Christmas campaign, running from December 11th to 30th. During this period, customers who make purchases on Jumia using the PalmPay payment method will stand a chance to win exciting cash rewards. More details can be found on the brands’ respective social media pages. @palmpay_ng and @JumiaNigeria.


Kindly share this post
Continue Reading

E-Business

Aero Contractors Launches “12 Days of Christmas” Campaign

Published

on

Kindly share this post

Aero Contractors is thrilled to announce the launch of its “12 Days of Christmas” campaign, a festive and engaging social media initiative designed to spread holiday cheer and reward loyal customers.

Running from December 13 to December 24, 2024, this exciting campaign underscores Aero Contractors’ commitment to connecting families, friends, and communities during the holidays.

The “12 Days of Christmas” campaign invites travel enthusiasts, loyal customers, and holiday travelers to participate in fun and interactive activities on Aero Contractors’ social media platforms, including Instagram, Facebook, and X (formerly Twitter). Each day will feature engaging posts such as trivia, puzzles, and challenges designed to ignite the festive spirit and encourage community participation.

Participants are encouraged to follow Aero Contractors’ social media pages, engage with the daily posts by liking, commenting, or sharing, and follow the specific instructions for each day’s activity.

Winners will be selected daily and announced on the respective platforms. Exciting prizes await participants, with the grand reward of a free return economy class ticket—a perfect gift for reconnecting with loved ones or exploring new destinations this holiday season.

“At Aero Contractors, we believe in the power of togetherness, especially during the holidays,” said Capt. Ado Sanusi, Managing Director of Aero Contractors.

“Our ‘12 Days of Christmas’ campaign is our way of giving back to the community that has supported us throughout the year. It’s an opportunity to engage, celebrate, and reward our customers while spreading joy and festive cheer.”

This campaign targets travel enthusiasts, loyal Aero Contractors customers, and families looking to make the most of the holiday season. Through this initiative, Aero Contractors reaffirms its dedication to safe, reliable, and efficient air travel, bringing people closer when it matters most.

Follow Aero Contractors on Instagram, Facebook, and X to join the “12 Days of Christmas” campaign. Engage daily for a chance to win a free return economy class ticket and other exciting offers.


Kindly share this post
Continue Reading

Trending