E-Business
FireEye Inaugurates Labs Advanced Reverse Engineering Team, Challenge
FireEye, a renowned network security company, announced on Monday the formation of the FireEye Labs Advanced Reverse Engineering Team and Challenge, also known as FLARE
FireEye is known for the provision of automated threat forensics and dynamic malware protection against advanced cyber threats, such as advanced persistent threats and spear phishing.
Mike Sikorski, advanced malware, Threat Research, FireEye Inc., who made the announcement said that as part of FireEye Labs, the focus of the team is to support all of FireEye and Mandiant from a reverse engineering standpoint.
Many FireEye groups have reversing engineering needs: Global Services discovers malware during incident response, Managed Defense constantly discovers threats on monitored client networks, and Products benefit from in-depth reversing to help improve detection capabilities.
“We primarily focus on malware analysis, but we also perform red-teaming of software and organizations, and we develop tools to assist reverse engineering. Our research and tools assist with automatic malware triage to quickly get initial results out to incident responders in the field. Auto-unpackers unravel obfuscated samples without the need for an analyst.
“Automatic clustering and classifying samples helps identify if a binary is good or bad and whether we have analyzed it before. We develop reverse engineering scripts for IDA Pro and systems that help us quickly share our analysis results. We also write scripts that can help incident responders decrypt and interpret malware network traffic and host artifacts,” he said.
Sikorski added that the elite technical enclave of reversers, malware analysts, researchers, and teachers, will team up with our FireEye Labs peers to help bring the best detection to FireEye customers and promote knowledge sharing with the security research community.
“We’ll continue to provide technical training on malware analysis privately and at conferences like Black Hat. Look for us to present webinars on malware analysis and a blog series of scripts for IDA Pro to aid reverse engineering of malware,” he added.
On the challenge, he said, “To commemorate the launch, the FLARE team is hosting a challenge for all reverse engineers and malware analysts. We invite you to compete and test your skills. The challenge runs the gamut of skills we believe are necessary to succeed on the FLARE team. We invite everyone who is interested to solve the challenge and get their just reward!
“The puzzles were developed by Richard Wartell, a reverse engineer with a PhD in “IDA Pro” (actually Computer Science, but his thesis used IDA Pro) from the University of Texas at Dallas where he worked on binary rewriting techniques for the x86 instruction set. He recently presented this work at the REcon conference in Montreal. At Mandiant Richard focused on incident response, but now on the FLARE team he reverse engineers malware, teaches malware classes, and helps develop our auto-unpacking technology.
“As reverse engineers we’ve seen a variety of anti-reverse engineering techniques. Oftentimes the armoring malware authors employ is sophisticated and requires time to unravel. Sometimes it is misguided and easily circumvented.
“Writing these binary puzzles has given us a chance to recreate some of the sophisticated (and sometimes ridiculous) techniques we see. The seven puzzles start with basic skills and escalate quickly to more difficult reversing tasks. At FLARE we have to deal with whatever challenges come our way, so the challenge reflects this. If you take on the challenge you might see malicious PDFs, .NET binaries, obfuscated PHP, Javascript, x86, x64, PE, ELF, Mach-O, and so on.
“And after completing the final challenge, you’ll win a prize and be contacted by a FLARE team member”.
E-Business
Ride the ‘Wicked’ Wave: Temu Brings Green Magic to Christmas
Temu is set to enchant the holiday season with its unique blend of green magic, bringing a touch of festive wonder to Christmas celebrations. The initiative, themed “Ride the ‘Wicked’ Wave,” promises to deliver an unforgettable experience, combining technology, entertainment, and commerce to create a magical holiday atmosphere.
Temu’s green magic initiative aims to captivate audiences with a variety of festive offerings, from fashion to home decor, handmade crafts, beauty items, chic clothes, shoes, and more.
The platform’s innovative approach ensures that customers can enjoy a seamless shopping experience, with free shipping on all orders1.
As part of the celebration, Temu has also introduced a magical winter Christmas backdrop, perfect for creating a festive ambiance at home.
This backdrop, made from high-quality polyester, is designed to bring the spirit of the season to life, making it an ideal addition to any holiday decor.
With its commitment to providing exceptional products and services, Temu continues to set new standards in the e-commerce industry, ensuring that customers can enjoy the magic of Christmas in style
E-Business
Kaspersky Cybersecurity Experts Warn of Evolving Holiday Scams
With the holiday season here, it’s not only a time for magic and celebration but also a prime opportunity for fraudsters to exploit the festive rush for gifts and bargains.
Amid the sparkle of year-end celebrations, cybersecurity experts at Kaspersky have identified several prominent scams targeting consumers across various regions and languages.
Fake holiday shops
Deceptive online stores mimic the look and feel of legitimate e-commerce sites, offering seasonal items such as decorations, gifts, and even trees at steep discounts.
These sites often appear highly localised, adapting their language and currency based on the user’s geographic location, leveraging data extracted from browsers.
Victims typically encounter these stores by following links in ads or pop-ups.
These sites aim to steal funds. Often, these fraudulent stores exist only for a short period, as they get flagged by the vendors of goods.
Free mobile data offer
This scam plays on the allure of free services, claiming to provide free mobile data valid across all major telecom providers.
In order to receive the free data, victims are required to share the promotion link with 10–15 contacts via WhatsApp, ensuring the scam spreads exponentially.
After sharing, victims are prompted to enter their personal details — name, phone number, and email — into a form.
The collected data is then sold on the Dark Web or used in other fraudulent activities.
In some cases, victims unknowingly download malware that compromises their devices, leading to further exploitation.
Holiday payments on behalf of government agencies
Fraudsters impersonate government authorities, promising fictitious payments in celebration of the holidays.
This scam has been reported in several African countries, including Kenya and Nigeria.
To receive payment, victims are directed to fill out a survey which requires personal details like name and phone number.
Once the survey is completed the user is asked to share the link to the announcement with their connections via WhatsApp.
These details are collected and added to fraudulent databases, then sold to third parties or used for phishing attacks and identity theft.
This scam exploits trust in government systems and the festive spirit of giving.
Christmas recipe scam
This scam begins with a seemingly harmless email promoting a holiday cake recipe.
Victims are encouraged to pay a small fee to access the recipe.
Once payment is made, the victim’s credit card information is stolen. The fraudsters also collect other personal information essential for accessing banking services.
“Holiday scams are not a new phenomenon, but they have evolved to become increasingly sophisticated, leveraging regional traditions and technology to exploit unsuspecting victims.
The rush of the holidays makes people more vulnerable — they’re distracted, eager to grab a deal, or trust promotions that align with festive themes. Cybercriminals are not just stealing money — they’re building massive databases of personal information that fuel future fraudulent schemes.
The holiday season is a time for joy and giving, but users need to remain vigilant to ensure they’re not unknowingly giving fraudsters the tools to exploit them further,” said Olga Svistunova, Senior Web Content Analyst at Kaspersky.
E-Business
Hackers Seize NBS Newly Redesigned Website
Cybercriminals have persisted in targeting Nigerian government websites, with the most recent attack on the National Bureau of Statistics (NBS).
The NBS confirmed the development in a brief statement posted on its X (formerly Twitter) account
It said that its newly redesigned official website has been hacked.
The NBS disclosed the incident and assured the public that efforts are underway to recover the website.
It urged the public to disregard any messages or reports posted until the full recovery of its website.
The statement on X read: “This is to inform the public that the NBS website has been hacked, and we are working to recover it. Please disregard any message or report posted until the website is fully restored.”
The NBS plays a vital role in Nigeria’s development, serving as the official statistical agency responsible for collecting, analyzing, and disseminating statistical data on the country’s economy, governance, and development
This marks the latest in a series of attacks on Nigerian government websites, a trend that has been ongoing for some years.
From government ministries to officials, cyberattacks in Nigeria have surged to alarming levels, with even financial institutions falling victim.
The Nigerian Communications Commission (NCC) and National Information Technology Development Agency (NITDA) frequently issue warnings of cybercriminals targeting individuals, government entities, banks, and telecom companies.
- E-Business3 days ago
Ride the ‘Wicked’ Wave: Temu Brings Green Magic to Christmas
- Telecom3 days ago
NCC Holds Virtual Forum on A2P Licensing Framework
- News3 days ago
PalmPay, Jumia Reward Users in Festive Campaign
- Telecom16 hours ago
From Niche App to Global Giant: TikTok’s Controversial Journey
- Telecom16 hours ago
Group Advocates for Digital Rights at 2024 Internet Governance Forum
- Broadcasting16 hours ago
Aero Contractors Celebrates Long-Serving Employees at Award Ceremony
- E-Financial16 hours ago
CBN Permits BDC Operators to Buy FX from NAFEM During Festive Season
- Telecom16 hours ago
Patricia Technologies Begins Repayments to Customers Affected by 2022 Security Breach