Connect with us

E-Business

Sophos 2019 Threat Report Unveils Rise of Hand-delivered, Targeted Cyberattacks

Published

on

Kindly share this post

Sophos has launched its 2019 Threat Report providing insights into emerging and evolving cybersecurity trends. The report, produced by SophosLabs researchers, explores changes in the threat landscape over the past 12 months, uncovering trends and how they are expected to impact cybersecurity in 2019.

“The threat landscape is undoubtedly evolving; less skilled cyber criminals are being forced out of business, the fittest among them step up their game to survive and we’ll eventually be left with fewer, but smarter and stronger, adversaries.

“These new cybercriminals are effectively a cross-breed of the once esoteric, targeted attacker, and the pedestrian purveyor of off-the-shelf malware, using manual hacking techniques, not for espionage or sabotage, but to maintain their dishonorable income streams.” – Joe Levy, CTO, Sophos, as referenced in the SophosLabs 2019 Threat Report

The SophosLabs 2019 Threat Report focuses on these key cybercriminal behaviours and attacks:

  • Capitalist cybercriminals are turning to targeted ransomware attacks that are premeditated and reaping millions of dollars in ransom – 2018 saw the advancement of hand-delivered, targeted ransomware attacks that are earning cybercriminals millions of dollars. Attacks are different than ‘spray and pray’ style attacks that are automatically distributed through millions of emails.

Targeted ransomware is more damaging than if delivered from a bot, as human attackers can find and stake out victims, think laterally, trouble shoot to overcome roadblocks, and wipe out back-ups so the ransom must be paid.

This “interactive attack style,” where adversaries manually maneuver through a network step-by-step, is now increasing in popularity. Sophos experts believe the financial success of SamSam, BitPaymer and Dharma to inspire copycat attacks and expect more happen in 2019.

  • Cybercriminals are using readily available Windows systems administration tools – This year’s report uncovers a shift in threat execution, as more mainstream attackers now employ Advanced Persistent Threat (APT) techniques to use readily available IT tools as their route to advance through a system and complete their mission – whether it’s to steal sensitive information off the server or drop ransomware:
  • Turning admin tools into cyberattack tools

In an ironic twist, or Cyber Catch-22, cybercriminals are utilising essential or built-in Windows IT admin tools, including Powershell files and Windows Scripting executables, to deploy malware attacks on users.

  • Cybercriminals are playing Digital Dominos

By chaining together a sequence of different script types that execute an attack at the end of the event series, hackers can instigate a chain reaction before IT managers detect a threat is operational on the network, and once they break in it’s difficult to stop the payload from executing.

  • Cybercriminals have adopted newer Office exploits to lure in victims

Office exploits have long been an attack vector, but recently cybercriminals have cut loose old Office document exploits in favour of newer ones.

  • EternalBlue becomes a key tool for cryptojacking attacks

Patching updates appeared for this Windows threat more than a year ago, yet the EternalBlue exploit is still a favourite of cybercriminals; the coupling of EternalBlue to cryptomining software turned the activity from a nuisance hobby into a potentially lucrative criminal career.

Lateral distribution on the corporate networks allowed the cryptojacker to quickly infect multiple machines, increasing payouts to the hacker and heavy costs to the user.

  • The continued threat of mobile and IoT malware – Malware’s impact extends beyond the organization’s infrastructure as we see the threat from mobile malware grow apace.

With illegal Android apps on the increase, 2018 has seen an increased focus in malware being pushed to phones, tablets and other IoT devices.

As homes and businesses adopt more internet-connected devices, criminals have been devising new ways to hijack those devices to use as nodes in huge botnet attacks.

In 2018, VPNFilter demonstrated the destructive power of weaponized malware that affects embedded systems and networked devices that have no obvious user interface.

Elsewhere, Mirai Aidra, Wifatch, and Gafgyt delivered a range of automated attacks that hijacked networked devices to use as nodes in botnets to engage in distributed denial-of-service attacks, mine cryptocurrency and infiltrate networks.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Kaspersky Contributes to Joint INTERPOL-AFRIPOL Operation Combating Cybercrime Across Africa

Published

on

Kindly share this post

Kaspersky has recently assisted its partner law enforcement agencies INTERPOL and AFRIPOL in a joint effort to disrupt cybercrime across the African region.

Dubbed “Serengeti,” the operation has led to the arrest of more than 1,000 individuals suspected of links to cybercrimes such as ransomware operation and business email compromise (BEC) attacks, resulting in nearly US $193 million in financial losses worldwide.

As Africa is going through a rapid digitisation, the threat of cybercrime on the continent is also escalating. In the African region in general and West Africa in particular, ransomware emerges as one of the most prominent attack vectors, targeting critical infrastructure, financial institutions, and manufacturing facilities, among others.

During the first 10 months of 2024, ransomware detections in West Africa surged by 36% year-on-year, according to Kaspersky data. Other noticeable cyberthreats targeting users and organisations in the region include spyware and password stealers.

Conducted from September 2 to October 31, operation Serengeti dismantled 134,089 malicious infrastructures and networks linked to cybercrimes including ransomware operations, BEC attacks, digital extortion and online scams — all identified as prominent threats in INTERPOL’s 2024 Africa Cyber Threat Assessment Report.

Kaspersky has contributed to the operation by sharing information on threat actors, data on ransomware attacks and malware targeting the region, as well as up-to-date indicators of compromise (IoCs) for malicious infrastructure across Africa.

Among the malware targeting African countries was also a well-known Brazilian banking trojan Grandoreiro – Kaspersky recently released new findings on this trojan at its Security Analyst Summit. Additionally, ransomware families detected in attacks on African organisations among others included LockBit, Rhysida, and Medusa.

The operation has also resulted in the identification of more than 35,000 victims of cyber offenses investigated.

Valdecy Urquiza, Secretary General of INTERPOL, said: “From multi-level marketing scams to credit card fraud on an industrial scale, the increasing volume and sophistication of cybercrime attacks is of serious concern.

Operation Serengeti shows what we can achieve by working together, and these arrests alone will save countless potential future victims from real personal and financial pain. We know that this is just the tip of the iceberg, which is why we will continue targeting these criminal groups worldwide.”

Ambassador Jalel Chelba, AFRIPOL’s Acting Executive Director said: “Through Serengeti, AFRIPOL has significantly enhanced support for law enforcement in African Union Member States. We’ve facilitated key arrests and deepened insights into cybercrime trends. Our focus now includes emerging threats like AI-driven malware and advanced attack techniques.”

“We are proud to contribute to this multi-stakeholder operation orchestrated by INTERPOL and AFRIPOL,” comments Yuliya Shlychkova, Vice President, Global Public Affairs, Kaspersky. “The emerging dynamics of the threat landscape in Africa requires a stronger regional dialogue on mitigating acute cybersecurity risks.

Kaspersky firmly supports INTERPOL’s and AFRIPOL’s efforts to prevent and disrupt cybercrime attacks across Africa and shares the holistic approach towards creating a more cyber-resilient environment within the continent.”

Thanks to the cooperation with INTERPOL and AFRIPOL, Kaspersky has been an active contributor to fostering a more cyber-savvy environment in the African region.

In addition to the vast record of joint operations in Africa, with the latest being INTERPOL-led operation Synergia II, Kaspersky has recently sealed a five-year cooperation agreement with AFRIPOL to further strengthen its role in creating a more cybersafe climate on the continent by sharing Kaspersky’s extensive data on local cyberthreats and cybercrime trends with the organisation.


Kindly share this post
Continue Reading

E-Business

NITDA Alerts Nigerians on Cybersecurity Risks Linked to Spotify

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) has issued a public alert warning Nigerians about a cybersecurity threat involving the use of Spotify to promote malicious activities.

NITDA Alerts Nigerians on Cybersecurity Risks Linked to Spotify

The agency, in a public notice issued on Tuesday, disclosed that threat actors are exploiting the popular music streaming platform to advertise game hacks, pirated software, and spam links that could expose users to cyber threats.

According to NITDA, cybercriminals embed malicious promotions in playlist names and podcast descriptions on Spotify, explaining that these promotions are used to advertise game hacks for popular video games such as Fortnite, GTA, Apex, and Roblox. Additionally.

They also promote pirated software (commonly referred to as ‘cracks’), spam links, and other malicious sites.

This abuse is said to leverage Spotify’s web player results to improve the search engine visibility of these harmful websites, putting unsuspecting users at risk of malware, scams, and other cyber threats.

NITDA warned that the exploitation of Spotify could lead to exposure to scams and phishing attacks, downloading of malware that can compromise user devices and Loss of personal and financial data through interactions with malicious websites.

To manage the risks, NITDA advised users to exercise Caution with suspicious playlists and podcasts and avoid engaging with playlists or podcasts that feature unusual or suspicious text in their descriptions.

It also warned users not to click Unknown Links, and also ensure the Spotify app is updated to the latest version to minimise vulnerabilities.

The agency further advised Spotify users in Nigeria to remain vigilant and adhere to cybersecurity best practices to safeguard their personal information and devices.

According to the agency, the websites posing as OpenAI’s popular AI, ChatGPT, are tricking users into downloading malicious files or software to their devices.


Kindly share this post
Continue Reading

E-Business

Konga Yakata’s Last Week: Don’t Miss Out on Incredible Deals

Published

on

Kindly share this post

Excitement is reaching a fever pitch among shoppers as the Konga Yakata Black Friday shopping fiesta enters its final week. Shoppers nationwide are gearing up for a rain of last-minute deals and irresistible offers, with the promotion set to end on Saturday, November 30, 2024.

The month-long Konga Yakata campaign, which kicked off on Friday, November 1, has delivered an unparalleled shopping experience, treating customers to incredible discounts, engaging promos, and unbeatable incentives.

In addition to massive price cuts across a wide range of products, Konga has thrilled shoppers with exciting events such as Treasure Hunts, Flash Sales, Bargain Bash, Brand Days, and specialized Black Friday packages like the Budget Store, Under 50k Store, and TGIF Epic Drop.

The highlight of the Yakata 2024 season will be this year’s Black Friday, which takes place on Friday, November 29. Thousands of customers will be able to score exclusive discounts on items including electronics, clothes, home appliances, computers, and groceries.

Reflecting on the experience so far, a satisfied anonymous shopper who snagged a TV at a discounted rate said, “Konga Yakata has been nothing short of amazing this year. The discounts are unbelievable but true, and the convenience of shopping online is unmatched.

“I’ve already made several purchases, and I’m excited to see what other deals are in store for the final week.”

Konga’s Black Friday sale has been a boon for consumers, offering respite from the economic challenges many Nigerians face. By providing access to affordable products and services, Konga has empowered shoppers to make the most of their money.

Despite the prevailing economic challenges, shoppers have embraced the Yakata season, targeting high-value deals and leveraging Konga’s tailored offerings to make significant savings. With the countdown underway, the excitement is expected to hit its peak on Friday as customers traditionally wait for that day to grab the most exclusive deals.

Speaking on the heightened anticipation, Kunle Ajani, Group Head of Marketing at Konga, stated, “We’re thrilled with the overwhelming response to Konga Yakata this year, and we’re committed to ensuring the final week delivers the biggest surprises yet.

“We are proud to offer a platform where shoppers can enjoy exceptional value, despite the economic realities.”

As the curtain closes on the 2024 Yakata season, shoppers can look forward to a flurry of last-minute deals, culminating at midnight on November 30. From tech enthusiasts to lovers of electronics and deal hunters, Konga Yakata continues to redefine the shopping experience, making it a season to remember for all Nigerians.

Take advantage of the final week of Konga Yakata. Visit Konga.com and experience the thrill of shopping at unbeatable prices.


Kindly share this post
Continue Reading

Trending