Connect with us

E-Business

‘Emotet’ Malware Attacks Banks- Check Point

Published

on

Kindly share this post

Check Point Research has found sharp increase in the Emotet botnet spreading spam campaigns after period of inactivity, aiming to steal banking credentials, and spread inside targeted networks.

‘Emotet’ Malware Attacks Banks- Check Point

Check Point Research, the Threat Intelligence arm of Check Point® Software Technologies Ltd., a leading provider of cyber security solutions globally, has published its latest Global Threat Index for July 2020.

Researchers found that after a five-month absence, Emotet has surged back to 1st place in the Index, impacting 5% of organizations globally.

Since February 2020, Emotet’s activities – primarily sending waves of malspam campaigns – started to slow down and eventually stopped, until re-emerging in July. This pattern was observed in 2019 when the Emotet botnet ceased activity during the summer months but resumed in September.

In July, Emotet was spreading malspam campaigns, infecting its victims with TrickBot and Qbot, which are used to steal banking credentials and spread inside networks. Some of the malspam campaigns contained malicious doc file with names like “form.doc” or “invoice.doc”.

According to researchers, the malicious document launches a PowerShell to pull the Emotet binary from remote websites and infect machines, adding them to the botnet.

The resumption of Emotet’s activities highlights the scale and power of the botnet globally.

“It’s interesting that Emotet was dormant for several months earlier this year, repeating a pattern we first observed in 2019.  We can assume that the developers behind the botnet were updating its features and capabilities. But as it is active again, organizations should educate employees about how to identify the types of malspam that carry these threats and warn about the risks of opening email attachments or clicking on links from external sources. Businesses should also look at deploying anti-malware solutions that can prevent such content reaching end-users,” said Maya Horowitz, Director, Threat Intelligence & Research, Products at Check Point.

The research team also warns that “MVPower DVR Remote Code Execution” is the most common exploited vulnerability, impacting 44% of organizations globally, followed by “OpenSSL TLS DTLS Heartbeat Information Disclosure” which impacts 42% of organizations worldwide. “Command Injection Over HTTP Payload” is in third place, with a global impact of 38%.

 Top malware families

(The arrows relate to the change in rank compared to the previous month).

 

This month Emotet is the most popular malware with a global impact of 5% of organizations, closely followed by Dridex and Agent Tesla affecting 4% of organizations each.

↑ Emotet– Emotet is an advanced, self-propagating and modular Trojan. Emotet was originally a banking Trojan, but recently is used as a distributor of other malware or malicious campaigns. It uses multiple methods for maintaining persistence and evasion techniques to avoid detection. In addition, it can be spread through phishing spam emails containing malicious attachments or links.

↑ Dridex– Dridex is a Trojan that targets the Windows platform and is reportedly downloaded via a spam email attachment. Dridex contacts a remote server and sends information about the infected system. It can also download and execute arbitrary modules received from the remote server.

↓ Agent Tesla – Agent Tesla is an advanced RAT functioning as a keylogger and information stealer capable of monitoring and collecting the victim’s keyboard input, system clipboard, taking screenshots, and exfiltrating credentials belonging to of a variety of software installed on a victim’s machine (including Google Chrome, Mozilla Firefox and Microsoft Outlook email client).

Top exploited vulnerabilities

This month “MVPower DVR Remote Code Execution” is the most common exploited vulnerability, impacting 44% of organizations globally, followed by “OpenSSL TLS DTLS Heartbeat Information Disclosure” which impacts 42% of organizations worldwide. “Command Injection Over HTTP Payload” is in third place, with a global impact of 38%.

↑ MVPower DVR Remote Code Execution– A remote code execution vulnerability that exists in MVPower DVR devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request.

↓OpenSSL TLS DTLS Heartbeat Information Disclosure (CVE-2014-0160; CVE-2014-0346) – An information disclosure vulnerability that exists in OpenSSL. The vulnerability is due to an error when handling TLS/DTLS heartbeat packets. An attacker can leverage this vulnerability to disclose memory contents of a connected client or server.

↑ Command Injection Over HTTP Payload – A command injection over HTTP payload vulnerability has been reported. A remote attacker can exploit this issue by sending a specially crafted request to the victim. Successful exploitation would allow an attacker to execute arbitrary code on the target machine.

Top mobile malware families

This month xHelper is the most popular malware, followed by Necro and PreAMo.

xHelper – Amalicious application seen in the wild since March 2019, used for downloading other malicious apps and display advertisements. The application can hide itself from the user, and reinstall itself in case it was uninstalled.

Necro – Necro is an Android Trojan Dropper. It can download other malware, showing intrusive ads and stealing money by charging paid subscriptions.

PreAMo – PreAmo is an Android Malware imitates the user by clicking on banners retrieved from three ad agencies – Presage, Admob, and Mopub.

Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence, the largest collaborative network to fight cybercrime which delivers threat data and attack trends from a global network of threat sensors.

The ThreatCloud database inspects over 2.5 billion websites and 500 million files daily, and identifies more than 250 million malware activities every day.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Ozi Launches to Redefine $460Bn Global Package Delivery Market

Published

on

Kindly share this post

Ozi (www.ozionline.com), a pioneer community-driven delivery app, launches, offering users a new way to send packages and earn extra cash.

L-r: Co-Founders of Ozionline.com: Ikenna Ani (CEO), Azubike Augustine (COO) and Engr. Christian Chime (CTO)

By connecting people traveling with those needing package delivery, Ozi turns everyday trips into profitable opportunities, aiming to disrupt the global parcel delivery industry, also known as the Courier, Express, and Parcel (CEP) market, currently valued at around $460 billion.

Imagine this scenario – You’re traveling to Abuja from Lagos and have empty space in your car. With Ozi, that unused capacity can earn you extra cash by delivering a package along the way. Or maybe you’re a small business owner who needs to send a package to another state but balk at the high cost of courier services.

With Ozi, you can find a verified traveler heading in the right direction to handle your delivery, Engr. Christian Chime, Ozi’s co-founder and CEO, said during the startup launch held at Four Point by Sheraton, Victoria Island, Lagos.

“Why travel empty when you can earn?” asks Engr. Chime said. “Ozi allows travelers to make the most of their journeys while helping others get their packages delivered with ease.”

“This simple yet powerful idea leverages the daily movements of millions of Nigerians to create a logistics network that is fast, affordable, and efficient.

“Ozi’s unique approach leverages the everyday movement of travelers to bridge this gap, creating a system where everyone benefits”.

He said that the choice of Nigeria as the first launch-location for Ozi was due the potential the country holds in the parcel delivery sub-sector.

“Actually, we had the opportunity to launch OZI in another country outside Nigeria but for our thrust in the Nigerian dream and its potentials made us choose the country as the first to witness Ozi’s innovation”, Engr. Chime said.

“Travelers can now monetize their journeys by delivering packages along their routes, while senders gain access to an affordable and convenient alternative to traditional courier services”.

Ozi combines convenience, innovation, and community to deliver a win-win solution for Nigerians. From quick intra-city deliveries to long-distance trips, Ozi offers an affordable, efficient solution for all.

Whether you’re a traveler looking to earn on your trips or a sender seeking a reliable delivery option, Ozi offers a solution that works for everyone.

In the words of Azubuike Augustine, the co-founder and Chief Technology Officer of Ozi, “Ozi’s mission goes beyond simplifying package delivery. The app represents a broader effort to create shared value for all stakeholders in the logistics process.

“By connecting senders and travelers, Ozi creates a win-win scenario where costs are reduced, trust is built, and income opportunities are created”.

“Ozi prioritizes safety and transparency. Every user, whether sender or traveler, undergoes a comprehensive verification process that includes ID checks and phone number authentication. This ensures that all participants in the system are trustworthy and accountable”.

To enhance security further, the CTO said that Ozi offers real-time tracking for all transactions. Senders can monitor their packages throughout the delivery process, ensuring peace of mind. For high-value items, optional insurance coverage provides an added layer of protection, reinforcing Ozi’s commitment to reliability.

“At Ozi, we understand that trust is critical in logistics,” the Azubuike added. “That’s why we’ve built a platform where every step is designed to safeguard both the traveler and the sender.”

“Ozi is more than an app; it’s a community where everyone wins,” said Ikenna Ani, co-founder/COO of Ozi.

“From today, travelers across the globe can sign up through www.ozionline.com and start making every trip count”, he said. “We have put measures in place to ensure only genuine and verified travelers or senders use the platform. Security is primary for us”.

Ikenna added that the app will be released on Google Play Store and Apple (iOS) on January 1, 2025.  Ozi Live on Instagram | Facebook.

 

 


Kindly share this post
Continue Reading

E-Business

Ride the ‘Wicked’ Wave: Temu Brings Green Magic to Christmas

Published

on

Kindly share this post

Temu is set to enchant the holiday season with its unique blend of green magic, bringing a touch of festive wonder to Christmas celebrations. The initiative, themed “Ride the ‘Wicked’ Wave,” promises to deliver an unforgettable experience, combining technology, entertainment, and commerce to create a magical holiday atmosphere.

Temu

Temu’s green magic initiative aims to captivate audiences with a variety of festive offerings, from fashion to home decor, handmade crafts, beauty items, chic clothes, shoes, and more.

The platform’s innovative approach ensures that customers can enjoy a seamless shopping experience, with free shipping on all orders1.

As part of the celebration, Temu has also introduced a magical winter Christmas backdrop, perfect for creating a festive ambiance at home.

This backdrop, made from high-quality polyester, is designed to bring the spirit of the season to life, making it an ideal addition to any holiday decor.

With its commitment to providing exceptional products and services, Temu continues to set new standards in the e-commerce industry, ensuring that customers can enjoy the magic of Christmas in style


Kindly share this post
Continue Reading

E-Business

Kaspersky Cybersecurity Experts Warn of Evolving Holiday Scams

Published

on

Kindly share this post

With the holiday season here, it’s not only a time for magic and celebration but also a prime opportunity for fraudsters to exploit the festive rush for gifts and bargains.

Kaspersky Cybersecurity Experts Warn of Evolving Holiday Scams

Amid the sparkle of year-end celebrations, cybersecurity experts at Kaspersky have identified several prominent scams targeting consumers across various regions and languages.

Fake holiday shops

Deceptive online stores mimic the look and feel of legitimate e-commerce sites, offering seasonal items such as decorations, gifts, and even trees at steep discounts.

These sites often appear highly localised, adapting their language and currency based on the user’s geographic location, leveraging data extracted from browsers.

Victims typically encounter these stores by following links in ads or pop-ups.

These sites aim to steal funds. Often, these fraudulent stores exist only for a short period, as they get flagged by the vendors of goods.

Free mobile data offer

This scam plays on the allure of free services, claiming to provide free mobile data valid across all major telecom providers.

In order to receive the free data, victims are required to share the promotion link with 10–15 contacts via WhatsApp, ensuring the scam spreads exponentially.

After sharing, victims are prompted to enter their personal details — name, phone number, and email — into a form.

The collected data is then sold on the Dark Web or used in other fraudulent activities.

In some cases, victims unknowingly download malware that compromises their devices, leading to further exploitation.

Holiday payments on behalf of government agencies

Fraudsters impersonate government authorities, promising fictitious payments in celebration of the holidays.

This scam has been reported in several African countries, including Kenya and Nigeria.

To receive payment, victims are directed to fill out a survey which requires personal details like name and phone number.

Once the survey is completed the user is asked to share the link to the announcement with their connections via WhatsApp.

These details are collected and added to fraudulent databases, then sold to third parties or used for phishing attacks and identity theft.

This scam exploits trust in government systems and the festive spirit of giving.

Christmas recipe scam

This scam begins with a seemingly harmless email promoting a holiday cake recipe.

Victims are encouraged to pay a small fee to access the recipe.

Once payment is made, the victim’s credit card information is stolen. The fraudsters also collect other personal information essential for accessing banking services.

“Holiday scams are not a new phenomenon, but they have evolved to become increasingly sophisticated, leveraging regional traditions and technology to exploit unsuspecting victims.

The rush of the holidays makes people more vulnerable — they’re distracted, eager to grab a deal, or trust promotions that align with festive themes. Cybercriminals are not just stealing money — they’re building massive databases of personal information that fuel future fraudulent schemes.

The holiday season is a time for joy and giving, but users need to remain vigilant to ensure they’re not unknowingly giving fraudsters the tools to exploit them further,” said Olga Svistunova, Senior Web Content Analyst at Kaspersky.

 

 

 

 

 

 


Kindly share this post
Continue Reading

Trending