News
Check Point Research Reveals XLoader as August’s Top Malware in Nigeria
Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies, a provider of cyber security solutions globally, has published its latest Global Threat Index for August 2022.
In Nigeria, XLoader is the most widespread malware this month impacting 14.47% of organisations in the country, followed by Phorpiex and Guloader both with 6.58%.
Globally, CPR reports that FormBook is now the most prevalent malware, taking over from Emotet, which has held that position since its reappearance in January.
FormBook is an Infostealer targeting Windows OS which, once deployed, can harvest credentials, collect screenshots, monitor and log keystrokes as well as download and execute files according to its command and control (C&C) orders.
Since it was first spotted in 2016, it has continued to make a name for itself, marketed as a Malware as a Service (MaaS) in underground hacking forums, known for its strong evasion techniques and relatively low price.
August also saw a rapid increase in GuLoader activity, which resulted in it being the fourth most widespread malware. GuLoader was initially used to download Parallax RAT but has since been applied to other remote access trojans and infostealers such as Netwire, FormBook and Agent Tesla.
It is commonly distributed through extensive email phishing campaigns, that lure the victim into downloading and opening a malicious file, allowing the malware to get to work.
Additionally, Check Point Research reports that Joker, an Android spyware, is back in business and has claimed third place in the top mobile malware list this month. Once Joker is installed, it can steal SMS messages, contact lists and device information as well as sign the victim up for paid premium services without their consent. Its rise can partially be explained by an uplift in campaigns as it was recently spotted to be active in some Google Play Store applications.
“The shifts that we see in this month’s index, from Emotet dropping from first to fifth place to Joker becoming the third most prevalent mobile malware, is reflective of how fast the threat landscape can change” said Maya Horowitz, VP Research at Check Point Software.
“This should be a reminder to individuals and companies alike, of the importance of keeping up to date with the most recent threats as knowing how to protect yourself is essential.
“Threat actors are constantly evolving and the emergence of FormBook shows that we can never be complacent about security and must adopt a holistic, prevent-first approach across networks, endpoints and the cloud.”
CPR also revealed this month that the Education/Research sector is still the most targeted industry by cybercriminals globally. With Government/Military and Healthcare taking second and third place as the most attacked sectors.
“Apache Log4j Remote Code Execution” returns to first place as the most exploited vulnerability, impacting 44% of organizations worldwide, after overtaking “Web Server Exposed Git Repository Information Disclosure” which had an impact of 42%.
Top malware families
*The arrows relate to the change in rank compared to the previous month.
FormBook is the most widespread malware this month impacting 5% of organizations worldwide, followed by AgentTesla with an impact of 4% and XMRig with 2%.
- XLoader – XLoader is an Android Spyware and Banking Trojan developed by the Yanbian Gang, a Chinese hacker group. This malware uses DNS spoofing to distribute infected Android apps to collect personal and financial information..
- Phorpiex – Phorpiex is a botnet (aka Trik) that has been active since 2010 and at its peak controlled more than a million infected hosts. It is known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
- Guloader – GuLoader is a downloader that has been widely used since December 2019. When it first appeared, GuLoader was used to download Parallax RAT but has been applied to other remote access trojans and info-stealers such as Netwire, FormBook, and Agent Tesla.
Top Attacked Industries Globally
This month the Education/Research sector remained in first place as the most attacked industry globally, followed by Government/Military and Healthcare.
- Education/Research
- Government/Military
- Healthcare
Top Exploited Vulnerabilities
This month, “Apache Log4j Remote Code Execution” is the most common exploited vulnerability, impacting 44% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which dropped from first place to second with an impact of 42%. “Web Servers Malicious URL Directory Traversal” remains in the third place, with a global impact of 39%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↓ Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow unintentional disclosure of account information.
- ↔ Web Servers Malicious URL Directory Traversal (CVE-2010-4598,CVE-2011-2474,CVE-2014-0130,CVE-2014-0780,CVE-2015-0666,CVE-2015-4068,CVE-2015-7254,CVE-2016-4523,CVE-2016-8530,CVE-2017-11512,CVE-2018-3948,CVE-2018-3949,CVE-2019-18952,CVE-2020-5410,CVE-2020-8260) – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
Top Mobile Malwares
This month AlienBot is the most prevalent Mobile malware, followed by Anubis and Joker.
- AlienBot – AlienBot is a banking Trojan for Android, sold underground as a Malware-as-a-Service (MaaS). It supports keylogging, dynamic overlays for credentials theft, as well as SMS harvesting for 2FA bypass. Additional remote control capabilities are provided by using a TeamViewer module.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger and audio recording capabilities as well as various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Joker – An Android Spyware in Google Play, designed to steal SMS messages, contact lists and device information. Furthermore, the malware can also sign the victim up for paid premium services without their consent or knowledge.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.
News
Egueke, Former Bank Manager Jailed for $46,900 Fraud
Fidelis Egueke, former bank manager, , has been convicted and sentenced to six months in prison by an Asaba, Delta State Chief Magistrate’s Court for defrauding a victim of $46,900.
Chief Magistrate Callistus Isioma Moeteke found Egueke guilty of a single charge brought against him by the police under case number CMA/295c/2024.
Raphael Eze, prosecutor, of the State Criminal Investigation Department (SCID), Asaba, said Egueke, a former Asaba branch manager of a tier-one bank, fraudulently obtained $46,900 by using two Certificates of Occupancy (CofOs) as collateral.
One of the land titles, however, was not his, and the other was fake.
After receiving the money, Egueke used it for personal expenses and failed to repay the victim as promised.
The prosecution argued that Egueke’s actions violated Section 419 of the Criminal Code Law, Cap C21, Vol.1 Laws of Delta State, Nigeria, 2006.
Despite denying the offence, Egueke failed to present evidence of repayment during the trial.
Chief Magistrate Moeteke determined that the prosecution had proven its case beyond a reasonable doubt.
Egueke was convicted and sentenced to six months imprisonment.
However, the court also gave him the option to pay a fine of N350,000 in lieu of serving the prison term.
The court ordered Egueke to pay N30 million in restitution to the victim within six months of his conviction.
The charge against Egueke stated that, in 2016, he fraudulently obtained a credit facility worth $46,900 (approximately N60 million) from Chief Jude Ndudi by presenting false documents, including land titles that did not belong to him, in violation of Section 419 of the Criminal Code Law.
Egueke is also facing trial before a Lagos Federal High Court on charges related to a separate fraud case involving N179.498 million.
He is being prosecuted by the Force Criminal Investigation Department (ForceCID), Annex Alagbon-Ikoyi, Lagos.
News
PalmPay, Jumia Reward Users in Festive Campaign
This holiday season just got a whole lot more exciting! PalmPay, one of Africa’s leading fintech platforms, operates Nigeria’s most used mobile wallet and has teamed up with Jumia, the continent’s e-commerce giant, to launch a festive campaign that’s all about convenience, rewards, and enhancing your shopping experience.
Running from December 11th to 28th, 2024, this holiday campaign is set to reward shoppers who use the new “Pay with PalmPay” feature on Jumia with cash prizes. Every purchase made using the direct payment method automatically enters participants into a draw, giving them a chance to win exciting cash rewards while enjoying the seamless shopping and payment process.
A Strategic Partnership To Enhance Digital Payments
The integration of the “Pay with PalmPay Wallet” feature on Jumia marks a major milestone in the partnership between the two industry leaders.
Speaking at the media announcement, Mr. Chika Nwosu, Managing Director of PalmPay, highlighted the broader mission driving this collaboration: “We are thrilled to join forces with Jumia to redefine convenience for shoppers. At PalmPay, our mission has always been to drive economic empowerment through accessible and user-friendly financial services. This partnership is a natural step forward in achieving that goal.”
Beyond the holidays, this partnership with Jumia m,k is a signal of bigger things to come. Mr. Chika added: “This is more than just about payments—it’s about creating value for our customers. We are excited about the opportunities this partnership will unlock in 2025, including campaigns and innovative initiatives that will further transform the online shopping landscape.”
Sunil Natraj, CEO of Jumia Nigeria, highlighted the shared vision between both companies, stating: “At Jumia, we are dedicated to creating value for our customers by ensuring a convenient, reliable, and secure shopping experience. This partnership with PalmPay strengthens our commitment to enhancing the digital payments within our platform. By integrating PalmPay, we are providing more options for customers to access affordable and quality goods with the convenience of cashless transactions.”
How to Join the Holiday Fun
Participating in the campaign is simple. When shopping on Jumia, select the “Pay with PalmPay” option at checkout, and your entry into the draw is automatic. It’s that easy!
Bonus Entry: Share a screenshot of your purchase on X (formerly Twitter) using the hashtag #PalmPayXJumia to increase your chances of winning. Additional winners will be selected from participants engaging with the campaign on Twitter.
Whether you are shopping for gifts, or gadgets this festive season, PalmPay and Jumia are making sure your experience is not only seamless but also rewarding.
To learn more about the campaign, stay tuned to the official X accounts (formerly Twitter) of @palmpay_ng and @JumiaNigeria. for updates, announcements, and more chances to win.
News
Corruption: ICPC Threatens Sanctions as 330 MDAs Fail Financial, Governance Tests
Independent Corrupt Practices and Other Related Offenses Commission (ICPC), has revealed that none of the Ministries, Departments, and Agencies (MDAs), in the country complied fully with ethical standards, policies, and anti-corruption measures in the passing year.
This was following the findings from the Commission’s Ethics and Integrity Compliance Scorecard (EICS) for the MDAs.
The Commission warned that henceforth, non-compliant MDAs will face necessary actions, including enforcement, to ensure adherence to government directives.
According to the EICS scorecard released on Thursday in Abuja by Demola Bakare, ICPC spokesperson, no MDA out of 330 MDAs that were assessed through physical deployment by ICPC teams achieved full compliance.
The EICS serves as a preventive tool used to assess and enhance the compliance of MDAs with ethical standards, policies, and anti-corruption measures.
Findings from the report indicated that no MDA achieved full compliance, while 29.55 per cent of MDAs captured attained substantial compliance, and 51.62 per cent had partial compliance.
The report also observed that 15.91 per cent showed poor compliance, while 292 per cent were non-compliant.
According to the report, common gaps included a lack of whistle-blower policies, strategic plans, and effective stock verification units, adding that many MDAs failed to conduct any forms of system studies or render financial and audit reports.
Commenting on the report, Bakare noted: “This year, 2024, the tool covered 323 responsive MDAs, with 15 MDAs non-responsive and categorised as high corruption risk.
“It is imperative to inform you that this initiative has yielded some positive and value-driven impacts, and these are, but not limited to, increased awareness and compliance with anti-corruption measures, enhanced competition among MDAs to meet criteria, and improved procurement processes and data reliability.
“The Commission recognises the MDAs with substantial compliance and will continue deploying these tools to promote integrity and accountability.
“Non-compliant MDAs will face necessary actions, including enforcement, to ensure adherence to government directives. We are certain that these efforts will continue to underline ICPC’s dedication to enhancing good governance and preventing corruption.”
- Telecom2 days ago
From Niche App to Global Giant: TikTok’s Controversial Journey
- Telecom2 days ago
Group Advocates for Digital Rights at 2024 Internet Governance Forum
- Broadcasting2 days ago
Aero Contractors Celebrates Long-Serving Employees at Award Ceremony
- E-Financial2 days ago
CBN Permits BDC Operators to Buy FX from NAFEM During Festive Season
- Telecom2 days ago
Patricia Technologies Begins Repayments to Customers Affected by 2022 Security Breach
- Broadcasting18 hours ago
Africa Magic Announces Call for Entries for 11th AMVCA
- E-Business18 hours ago
Ozi Launches to Redefine $460Bn Global Package Delivery Market
- Telecom18 hours ago
How Artificial Intelligence is Revolutionizing Business Plans for Entrepreneurs