E-Financial
Lazarus, Hacking Group Targets Cryptocurrency Space- Kaspersky
Kaspersky Lab, cybersecurity watchdogs yesterday issued a warning that the well-known hacking group known as Lazarus, which is allegedly sponsored by the North Korean government, is alive and well and still targeting the cryptocurrency industry.
According to the folks at Kaspersky Lab, the hacking group began a new operation in November 2018, using new methods to infiltrate the computer systems of businesses in the financial sector and gain access to sensitive data.
Research done by Kaspersky Lab shows the hackers customized PowerShell scripts that “communicate with malicious C2 servers and execute commands from the operator.”
The scripts, dubbed “macro-weaponized document[s],” look like WordPress files and other open-source projects. Once the malware has control over a company’s servers, it can “set sleep time (delay between C2 interactions), exit malware, collect basic host information, check malware status, show current malware configuration, update malware configuration, execute system shell command, [and] download [and] upload files.”
These weaponized documents are specifically designed to catch the attention of cryptocurrency professionals.
Kaspersky Lab believes that the hacking group is explicitly targeting Korean crypto exchanges based on the fact that the malware is delivered using a malicious “Korean Hangul Word Processor format” (HWP), which takes advantage of a known weakness in the PostScript software and is popular only among Korean users. That one of the weaponized documents was sent to a crypto exchange based in Korea is also telling.
The Lazarus group uses several methods to infect exchanges’ servers. According to Kaspersky Lab, research shows that the group is most likely “running an old vulnerable instance of Internet Information Services (IIS) 6.0 on Microsoft Windows Server 2003.” The group is also suspected of purchasing servers from a hosting company that it uses to “host macOS and Windows payloads.” The cybersecurity watchdog believes the group only puts malware on rented servers and uses servers that are already infected to run C2 scripts. These servers have been found from China to the European Union.
The research done by Kaspersky Lab further shows that the group has adopted better methods to avoid detection. Lazarus is separately developing malware for “32-bit and 64-bit Windows” so it has more choices concerning the platform its wishes to infiltrate and the type of compiled code it wishes to use. Kaspersky Lab concludes that the same developers are using these methods to infect Apple products, which is why the group built the macOS malware.
The report ends with a warning to the larger crypto and tech industry:
“If you’re part of the booming cryptocurrency or technological startup industry, exercise extra caution when dealing with new third parties or installing software on your systems. It’s best to check new software with an antivirus…[a]nd never ‘Enable Content’ (macro scripting) in Microsoft Office documents received from new or untrusted sources.”
The Lazarus group is suspected of perpetrating some of the biggest hacks ever seen in the cryptocurrency industry.
The group allegedly committed the hack against Coincheck, in which approximately 500 million NEM tokens were stolen in January 2018. The group also allegedly infiltrated the Bithumb network and made off with $31.5 million worth of digital currency.
E-Financial
EFCC Says Nigerian Banks are Notorious Conduits of Financial Crimes
Economic and Financial Crimes Commission (EFCC) has warned banks against making themselves available as instruments of fraud.
Ola Olukoyede, charman, EFCC, issued the warning on Friday when the management team of Moniepoint, led by Tosin Eniolorunda, its founder and Group CEO, paid a courtesy visit to the commission’s headquarters in Abuja.
Speaking through Michael Nzekwe, his chief of staff, the EFCC boss noted that Nigerian banks over the years have become notorious as conduits of financial crimes and advised them to turn a new leaf for the sake of the growth of the country.
“There’s hardly any financial crime that would not go through the financial institutions. Money laundering is a major issue and you find out also that the perpetrators go through the banks. Nigeria will be the greatest beneficiary when we do the right thing,” he said.
Addressing the Moniepoint delegation, Olukoyede said, “Try as much as possible on your own to avoid any form of connivance and don’t be a channel for money
“Don’t be a tool. Don’t make your system porous. You are a major stakeholder when it comes to the fight against corruption. We are open and would assist, however we can. No one is above the law”.
Olukoyede observed that there was a high level of poor internal control by fintechs at the level of the unbanked, the under-served and the middle class population spectrum.
“There’s quite a whole lot of fraud that goes around that particular level, so the issue of KYC (Know Your Customer) is very important, especially because of the issue of how fintechs open tier-one accounts, sometimes without attention to KYC.
“And people take advantage of this and are quick to commit fraud through this negligence. So, that’s one area you have to also look at to see how you can improve on your KYC.
“Increasing your level of collaboration with the EFCC would mean to see yourselves as stakeholders in the fight against corruption.
“We would like you to be able to respond to us when we make inquiries and when we make requests.
On EFCC’s readiness to collaborate with Moniepoint, Olukoyede stated that, “On our part, we are open to whatever it is that you want us to do. We value it that you are here today to seek a stronger tie and collaboration.
“When we have stakeholders come in and want to be part of what we are doing, majorly stakeholders like you, it gives us joy because we know that no one man can fight corruption alone.
“The collaboration you seek tells us that you want to strengthen your system; you want to be able to create more internal controls. You want to be able to put in place things that will mitigate those weaknesses that will lead to fraud within your system, that’s what we do. Our core mandate is enforcement and investigation of economic and financial crimes. So, we’re glad and wish to collaborate with you”
Earlier in his remarks, Eniolorunda noted that the expansion in the operations and services of the fintech and microfinance company have come with challenges which have made the need for a strategic collaboration with the EFCC compelling.
“Moniepoint has over the years grown to become one of Nigeria’s largest payment service providers and the bank for mostly mid-class businesses and the under-served.
“Today, Moniepoint processes roughly 70% of Nigeria’s payments on Point-of-Sale (PoS) and transfers. We are present also in the UK and we are going through some potential set-up also in Kenya, which is at an advanced stage with its Central Bank. And also in Tanzania.
“Of course, with all this growth comes also challenges. One of the biggest challenges is the nature of our country, where if people find the opportunity to make fast money, they will make fast money. And we have realised that as Moniepoint is helping people make ends meet, these sorts of people are also trying to use Moniepoint channels to achieve their criminal objectives.
“So, we are actively fighting, improving all the necessary KYC accounts, money laundering and fund protection systems, but we know that we can’t do this alone. There are experts in a government organisation like the EFCC that we believe we need to have a strategic relationship with to be able to fight these people together.
“There are intels that you see that we don’t see. There are many things that come across your desk, every day that we don’t see. There are also things that we see that we think that if we should show to you, we will all be able to come together and fight these bad guys. We have, over the years improved on many things; discover a lot of potential fraud, collaborated with law enforcement agencies.
“With our whole management team, we will be able to find a strategic partnership with the EFCC that would take us to the next level.
“So we need to quickly build stronger alliances to prevent any form of risks that will blossom into national security issue,” he said.
E-Financial
N159m Up for Grabs in Fidelity Bank’s GAIM 6 Promo
Fidelity Bank Plc, leading financial institution has announced that it will be giving out N159 million to lucky customers in its recently launched Get Alerts in Millions Season 6, (GAIM 6) promo.
Speaking at the press conference to kick off the promo at the bank’s Lagos head office, Executive Director, Lagos & South-West, Fidelity Bank Plc and the Promo Committee Chairman, Dr Ken Opara, said that the aim of the promo was to build a culture of financial discipline and enable the bank’s customers improve their standard of living, achieve their goals, and secure a brighter future for themselves and their families.
He said, “Over the years, we’ve seen firsthand how GAIM has transformed lives by helping customers pay off debts, fund their children’s education, start-up businesses, and invest in projects.
“These stories of the transformative power of GAIM in the lives of our customers, motivated us to raise the stakes with each new season, and I am excited to share that GAIM 6 will feature an even larger prize pool with over N159 million in cash prizes.
“As a Bank, we remain committed to ensuring this season is bigger and better than ever. In the coming months, we will provide additional updates through roadshows and community outreaches, and we encourage you to join us in spreading the word and inviting your friends and family to be a part of this initiative.
“While GAIM provides an opportunity to win numerous cash prizes, it is important to state that GAIM is not just about winning prizes. It’s about changing the financial fortunes of our customers, strengthening communities and contributing to the country’s economic growth.
“The financial advisory services we offer to our winners are an essential part of providing key insights that help our winners preserve and grow their earnings in a sustainable manner.”
To participate in the promo, Osita Ede, Divisional Head, Product Development, Fidelity Bank Plc said, “The customer needs to have a savings account with Fidelity Bank, and make sure that from today, that you’re putting money in that account.
“And once your balance is increasing, every N5000 you put in, you qualify for the basic rewards, the ones that happen quarterly, the N10,000.But for the N1 million rewards you need to have at least a minimum of 10,000 naira.
“Every 10,000 Naira in your account gives you a ticket. With that ticket, you stand a chance of winning N1 million naira every month.
“We have 10 winners emerging every month with N1 million naira each. So, for the period of nine months, that’s 90 customers getting N1 million naira each.”
Ranked as one of the best banks in Nigeria, Fidelity Bank is a full-fledged commercial bank with over 8.3 million customers serviced across its 251 business offices in Nigeria and the United Kingdom as well as on digital banking channels.
The bank has won multiple local and international awards including the Export Financing Bank of the Year and Excellence in Digital Transformation & MSME Banking at the 2024 BusinessDay Banks and Other Financial Institutions (BAFI) Awards; the Best Payment Solution Provider Nigeria 2023 and Best SME Bank Nigeria 2022 by the Global Banking and Finance Awards; Best Bank for SMEs in Nigeria by the Euromoney Awards for Excellence 2023; and Best Domestic Private Bank in Nigeria by the Euromoney Global Private Banking Awards 2023.
E-Financial
Africa Processed 49Bn Transactions in 2023 – SIIPS Report
The SIIPS Report which offers valuable insights into the opportunities and challenges facing Africa’s digital payment systems has said that 2023 was a landmark year, with 49 billion transactions processed across the continent—the highest volume recorded to date.
This staggering number underscores a broader trend: the shift towards digital, fast, and efficient payments is becoming a cornerstone of Africa’s economic growth.
The SIIPS Report 2024, launched in Accra on Thursday, showcases the remarkable growth of Instant Payment Systems (IPS) across Africa, emphasizing their role in advancing financial inclusion.
With 31 operational IPS in 26 countries and another 27 on the way, the report reveals a 37% growth in transaction volume over five years.
While digital payment adoption surges, barriers remain for vulnerable groups, especially women, who face security and fraud concerns.
Despite progress, no system has fully achieved inclusive access, affordability, or transparency.
The report emphasizes the need for collective efforts to expand IPS, particularly in rural areas, to ensure universal financial inclusion by 2030.
Supported by partners like the World Bank and UNECA, the SIIPS Report offers valuable insights into the opportunities and challenges facing Africa’s digital payment systems, calling for innovation and regulatory support to achieve seamless, cross-border payments across the continent.
More importantly, the total value transacted surged at a remarkable average annual growth rate of 39% from 2019 to 2023, reaching over $1 trillion last year.
Such figures highlight Africa’s increasing reliance on digital financial systems and indicate a seismic shift in how money moves.
- News3 days ago
ALX Organises First-ever Business Showcase for its Community Entrepreneurs
- Telecom3 days ago
Airtel Africa-UNICEF Partnership Connects 1,200 Schools, 1M Africa Children to Digital Education
- Telecom3 days ago
Kari Toriola: How Telecom Can Propel Nigeria to a $1 Trillion Economy
- Telecom3 days ago
Treepz Embarks on Global Expansion Journey with Trade Accelerator Program
- E-Business2 days ago
NDPC to Begin Prosecution of Data Privacy Offenders from 2025
- Broadcasting3 days ago
Flymate Travel Unveils Visadoc App to Enhance Travel Convenience
- Telecom3 days ago
Galaxy Backbone, Bauchi State Government Sign Landmark MOU to Enhance Digital Infrastructure and ICT Capacity
- Telecom3 days ago
Empowering Women: Hermplify’s AI Platform Targets Africa’s $300B Digital Economy