E-Business
Cybersecurity Experts Say Data-Stealing Malware Infections Increased Sevenfold since 2020
Nearly 10 million devices fell victim to data-stealing malware in 2023, Kaspersky Digital Footprint Intelligence has revealed, drawing from insights gathered from infostealer malware log files traded on underground markets.
With cybercriminals pilfering an average of 50.9 login credentials per infected device, the threat posed by data-stealers is growing for both consumers and businesses. In light of this growing threat, Kaspersky has launched a dedicated web page to raise awareness of the issue and provide strategies for mitigating associated risks.
The .com domain leads in compromised accounts with nearly 326 million logins and passwords for websites on this domain were compromised by infostealers in 2023.
It is followed by domain zones associated with Brazil (.br, 28,8 million), India (.in, 8,2 million), Colombia (.co), and Vietnam (.vn). In the .za domain, associated with South Africa, compromised accounts reached 1,070,000 in 2023, followed by .ke (Kenya – 970 000) and .ng (Nigeria – 920 000).
About 10,000,000 personal and corporate devices were compromised with data-stealing malware in 2023, amounting to a 643% increase over the past three years, Kaspersky Digital Footprint Intelligence data shows.
The data on infected devices stems from the dynamics of infostealer malware log-files actively traded in the underground markets and monitored by Kaspersky to help companies ensure the security of their clients and employees.
Even though the number of log-files – and therefore infections – in 2023 has only experienced a marginal decline of 9% compared to 2022, it doesn’t imply that cybercriminal demand for logins and passwords has stagnated.
It is possible that some credentials compromised in 2023 could be leaked to the dark web at some point during the current year.
Therefore, the actual number of infections is likely to be even higher than 10 million. According to Kaspersky’s assessment of infostealer log-file dynamics, the number of infections that occurred in 2023 is projected to reach roughly 16,000,000.
Cybercriminals steal an average of 50.9 login credentials per infected device. Threat actors either utilise these credentials for their own malicious purposes, including perpetrating cyberattacks, or sell or distribute them freely on dark web forums and shadow Telegram channels.
These credentials may encompass logins for social media, online banking services, crypto wallets, and various corporate online services, such as email and internal systems. According to Kaspersky’s data, 443,000 websites worldwide have experienced compromised credentials in the past 5 years.
“The dark-web value of log files with login credentials varies depending on the data’s appeal and the way it’s sold there. Credentials may be sold through a subscription service with regular uploads, a so called “aggregator” for specific requests, or via a “shop” selling recently acquired login credentials exclusively to selected buyers. Prices typically begin at $10 per log file in these shops.
This highlights how crucial it is both for individuals and companies – especially those handling large online user communities – to stay alert. Leaked credentials carry a major threat, enabling cybercriminals to execute various attacks such as unauthorised access for theft, social engineering, or impersonation”, says Sergey Shcherbel, expert at Kaspersky Digital Footprint Intelligence.
To guard against data-stealing malware, individuals are advised to use a comprehensive security solution for any device. This will help prevent infections and alert them to dangers, such as suspicious sites or phishing emails that can be an initial vector for infection.
Moreover, companies can help their users, employees and partners protect themselves from the threat this way. They can proactively monitor leaks and prompt users to change leaked passwords immediately.
E-Business
NIMC Grants NCoS Licence to Register Inmates for NIN
National Identity Management Commission (NIMC) has granted licence for the Nigerian Correctional Service, (NCoS) to register inmates in the over 252 custodial centres across the country for National Identity Numbers, (NIN).
The approval followed the request made by Sylvester Nwakuche, acting controller general of the NCoS, who paid a visit to Engr Abisoye Coker-Odusote, director general/chief executive Officer of NIMC, in her office.
The acting controller-general, said the licence to carry out registration of inmates for NIN would eliminate exclusion of inmates from the country’s National Development plans, ensure their safety and security and facilitate their smooth recapture in times of jailbreaks.
The NCoS boss said the visit to the headquarters of NIMC was in search of collaboration that would enable the Service carry out its mandate seamlessly following on going reforms of the Correctional Service system.
According to Nwakuche, there are lots of socio-economic developments within the Correctional Service systems which had led to a number of inmates obtaining University degrees, Masters Degrees and Doctor of Philosophy (PhD) in various fields.
He said such inmates should not be excluded from the national development plans of the country as they should be integrated into the society to become useful for their families and the country.
Nwakuche said inside the Correctional centres are those awaiting trials whose innocence and otherwise has to be decided by the Courts, but argued that in times of National planning, census and other critical national development issues, they should not be disallowed from participating.
Coker-Odusote who granted the licence said NIN has become critical and essential to the country’s national development plans, stressing that NIMC has gone far with the private sector, especially the banks and the Central Bank of Nigeria (CBN) as all banks accounts are now linked with the NIN.
Coker-Odusote said the Eight points Agenda of President Bola Tinubu are also anchored on the Country’s digital identity or National identity Number, stressing that for instance NIN was tied to students loans to eradicate duplicity and prevent ghost beneficiaries.
Coker-Odusote expressed delight in the partnership with the NCoS, saying that the Commission had already entered into partnership with the Nigeria Immigration Service, NIS and other agencies in order to facilitate the smooth delivery of their constitutional mandates.
She commended Dr Olubunmi Tunji-Ojo, minister of Interior, for his dynamic leadership and role in ensuring the delivery of dividends of democracy to Nigeria through various reforms.
E-Business
NIMC Trains 388 Personnel to Boost NIN Enrolment
National Identity Management Commission (NIMC) has kicked off a three-day training program for 388 personnel aimed at enhancing the National Identification Number (NIN) enrolment process across the country.
The training, tagged “Refresher Training of Trainers on NIN Integration to the National Social Register: Technical and hands-on devices and field operations and procedures”, is in collaboration with the National Social Safety-Net Coordinating Office.
The training is also to equip personnel with the necessary skills to efficiently handle the complexities of enrolment processes
In her address at the event held in Port Harcourt on Monday, Abisoye Coker-Odusote, director-general and chief executive officer, NIMC, noted that the initiative aligns with the commission’s overarching goal of achieving secured and great success for the Renewed Hope social initiatives.
Represented by Adedapo Adedoyin, her technical advisor on ICT, the NIMC DG said the event is a pivotal initiative that marks a significant step forward in our mission to enhance and modernize the National Identification Number enrolment process across Nigeria.
She stated, “Today, I am pleased to announce the launch of a comprehensive training program aimed at refreshing the technical and operational skills of the National Social Safety-Net Coordinating Office State Operations Coordinating Unit and NIMC staff.
“This initiative focuses on practical and field-based exercises, ensuring that our teams are well-equipped to handle the complexities of enrolment processes with precision and efficiency.
“This initiative aligns with our overarching goal of achieving secured and great success for the Renewed Hope social initiatives. Through verified digital identification, we aim to improve the lives of Nigerians by providing them with access to essential services and opportunities that require a reliable and secure identity verification system”.
Coker-Odusote explained that the training program will be conducted in two batches, encompassing four states: Kwara, Nasarawa, Kano, and Rivers. A total of 388 attendees will participate in this initiative, including 225 NASSCO State Operations Coordinating Unit representatives, 35 NIMC facilitators, and 128 State support staff.
She added, “The sessions are meticulously designed to foster knowledge sharing and hands-on experience with NIMC’s enrolment device and software, ensuring that our personnel are adept at using these tools to their full potential.
“By empowering our teams with enhanced skills and practical experience, we are setting the stage for more efficient and accurate NIN enrolment processes across the nation”.
Coker-Odusote further said the training program “is a crucial step toward achieving the World Bank’s Identification for Development Initiative target of enrolling 180 million Nigerians with secure digital IDs.
“By bolstering our technical and operational capabilities, we are ensuring that NIMC is well-positioned to meet and exceed this target, thereby contributing to the global vision of inclusive and accessible digital identification for all”.
The NIMC boss8 called for collaboration between all stakeholders saying, “As we embark on this journey, I urge all participants to embrace this opportunity for growth and development.
“Together, we can build a robust and efficient National Identification System that will serve as the cornerstone for Nigeria’s social and economic progress.”
E-Business
Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media
Kaspersky experts have uncovered a new phishing scam targeting businesses that promote their pages on Facebook. Scammers send emails allegedly on behalf of Meta for Business – Facebook’s platform for businesses – claiming the recipient’s page contains prohibited content.
The email suggests users provide explanations in order for their account and page to be unblocked. The goal of the attackers is likely to get access to users’ business accounts.
Kaspersky’s anonymised data shows that such emails started reaching users on 14 December 2024, with complaints coming from organisations all over the world, including the Middle East, Turkiye and Africa.
By examining the “From” field in the email it can be seen that the domain does not belong to Facebook. According to Kaspersky data the emails that this campaign used were sent from different domains.
The link in the email redirects users to Facebook Messenger. On Messenger, the account posing as Facebook’s support team appears legitimate, creating a false sense of trust.
There is an indication that this is a fan page, but it is easy to miss in a situation of high stress after being accused of spreading illegitimate content.
This scheme stands out for its sophistication. Unlike earlier scams that accused users of copyright violations and directed them to respond via email, this approach simulates internal communication on the Facebook platform itself.
“In 2025, we anticipate a rise in attacks leveraging social engineering and user trust in major platforms. Scams like this are becoming more sophisticated as attackers strive to mimic official services closely.
“Users must remain vigilant, verify the authenticity of messages, and avoid clicking on suspicious links. We strongly advise users not to engage with suspicious accounts and to activate additional security measures, such as two-factor authentication.
“If you receive such an email, report the incident to Facebook’s support team and update your passwords immediately if any information has been compromised,” comments Andrey Kovtun, Email Threats Protection Group Manager at Kaspersky.
- Telecom2 days ago
Suspected Lakurawa Terrorists Kill 3 Telcoms Workers in Kebbi
- General News2 days ago
Lagos State Sets Strict Deadline for 2024 Tax Returns Filing
- News2 days ago
SERAP Drags FG, Govs to ECOWAS Court over ‘Misuse of Cybercrimes Act’
- E-Financial2 days ago
BudgIT Queries Irregularities in FG’s Proposed 2025 Budget
- E-Financial2 days ago
NAICOM Seeks Police’s Support to Enforce Third-party Motor Insurance
- E-Business2 days ago
Lagos, NIPOST Partner to Transform e-Commerce Delivery
- E-Financial2 days ago
GAIM 6: Fidelity Bank Rewards 10 Customers with N10m
- Telecom1 day ago
USSD Dispute: FG May Blacklist 18 Banks Allegedly Owing Telcos N250Bn