Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

E-Business

Kaspersky Detects 23 Percent Increase in Attacks Targeting Vulnerable Windows Drivers

Published

on

Kindly share this post

Attackers are increasingly targeting Windows by exploiting vulnerable drivers, according to Kaspersky experts. In the second quarter of 2024, the number of systems attacked using this technique increased by nearly 23% compared to the first quarter.

Vulnerable drivers may be exploited for a wide range of attacks, including ransomware and Advanced Persistent Threats (APTs).

Cyberattacks that utilise vulnerable drivers are known as BYOVD (Bring Your Own Vulnerable Driver). They allow threat actors to attempt to disable security solutions on a system and escalate privileges, enabling them to carry out various malicious activities, such as installing ransomware or establishing persistence for espionage or sabotage, particularly if an Advanced Persistent Threat (APT) group is behind the attack.

Kaspersky reports that this attack technique accelerated in 2023 and is currently gaining momentum, with a potential impact on both individuals and organisations. In Q2 2024, the number of systems attacked with the BYOVD technique increased by almost 23% compared to the previous quarter.

“While the drivers themselves are legitimate, they may contain vulnerabilities. These vulnerabilities can then be exploited for malicious purposes. Perpetrators use various tools and methods to install a vulnerable driver on the system.

“Once the operating system loads this driver, the attacker can exploit it to circumvent OS kernel security boundaries for their own goals,” explains Vladimir Kuskov, Head of Anti-Malware Research at Kaspersky.

One concerning aspect of this trend is the proliferation of tools that exploit vulnerable drivers – they can be found online. While relatively few of these tools exist in 2024 – only 24 projects have been published since 2021– Kaspersky experts observed an increase in the number of these tools being published online last year.

“Although nothing really stops threat actors from developing their own private tools, the publicly available ones eliminate the need for the specific skills required to research and exploit vulnerable drivers.

“In 2023 alone, we identified approximately 16 new tools of this nature, marking a substantial increase from the mere one or two we observed in previous years. Given this rise, it is highly advisable to implement robust protective measures for any system”, elaborates Kuskov.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

E-Business

FG Partners UK to Combat Cross-border Cyber-crime

Published

on

Kindly share this post

The federal government and the United Kingdom signed an agreement Tuesday to combat the growing threat of cyber-crime. The Memorandum of Understanding was signed following a courtesy visit by David George Hanson, minister of the home office, UK, to the Nigeria Police Force headquarters, Louis Edet House in Abuja.

Transnational crime is a big problem for both the UK and Nigeria, so the governments intend to strengthen existing collaboration efforts to crack down on cyber-criminals and protect their industries from unlawful activities.

Offences such as online fraud, identity theft, digital extortion, and ransomware , operate across many jurisdictions, and frequently necessitate sophisticated cooperation efforts, according to the two governments during a press conference.

Furthermore, Lateef Fagbemi, Nigeria’s attorney-general and minister of justice, established the Joint Case Team on Cybercrime, which aims to address the need for a coordinated and robust approach to combating cybercrime, as stated in the Cybercrimes Act of 2015, which criminalises cyber-related offences.

Hanson underlined the importance of ongoing cooperation efforts to combat international crime in a number of areas, affecting vulnerable individuals.

He said: “We need to look again at how we can build cooperation between the Federal Government, the federal police, and our police forces and National Crime Agency to take action against these international criminals, who are exploiting vulnerable people in a whole range of areas. The National Crime Agency, the Home Office Fraud Department, and the High Commission need to make sure we make a big impact on this transnational crime.”

“The collaboration between the Nigerian Police Force and National Crime Agency continues to serve as a model in international law enforcement cooperation. We have successfully conducted joint operations into many cases of cybercrimes and online fraud. With your [UK government] cooperation, we have continued to bust other criminal networks around the world,” added inspector-general of Nigerian Police Force, Kayode Adeolu Egbetokun.

 


Kindly share this post
Continue Reading

E-Business

CAC to Prosecute Business Owners Operating Without Registration

Published

on

Kindly share this post

Corporate Affairs Commission (CAC) has reaffirmed its commitment to enforcing business registration laws in Nigeria, warning that individuals and organizations operating unregistered businesses will face prosecution.

In a statement, the CAC emphasized that conducting business without proper registration violates the Companies and Allied Matters Act (CAMA) 2020, undermining transparency and accountability in the corporate sector.

The commission stressed that registration is not only a legal requirement but also a gateway to formal business opportunities, including access to bank loans, government grants, and partnerships.

The enforcement drive will be nationwide, targeting small and medium-sized enterprises (SMEs), online vendors, and informal traders who have failed to comply despite previous awareness campaigns and registration amnesty windows.

The CAC disclosed that enforcement teams, in collaboration with security agencies, will be deployed to identify and prosecute defaulters.

The commission urged business owners to take advantage of its simplified registration platform to regularize their status, noting that compliance will boost investor confidence and improve Nigeria’s ease of doing business. It warned that ignorance of the law will not be accepted as an excuse.

Business owners are advised to act promptly to avoid legal consequences, as the CAC moves to ensure a more structured and regulated business environment in Nigeria.


Kindly share this post
Continue Reading

E-Business

NCC Vows to Tackle Online Infringement, Block Illegal Music Websites

Published

on

Kindly share this post

Nigerian Copyright Commission (NCC) has pledged to enforce its legal obligations to combat online intellectual property infringement and urged commercial music users to obtain proper licences from rights holders or their representatives.

NCC Vows to Tackle Online Infringement, Block Illegal Music Websites

The Commission stated that this ensures creators are fairly compensated, supporting the music industry’s sustainable growth.

In a statement commemorating the 2025 World Intellectual Property Day, themed “IP and Music: Feel the Best of IP,” the NCC announced plans to enforce the Copyright Act 2022, which allows for the takedown of infringing materials and blocking of websites hosting illegal content.

Signed by Mrs Ijeoma Egbunike, director of Public Affairs, the statement outlined an aggressive anti-piracy campaign in collaboration with the private sector, targeting the online environment.

Egbunike affirmed the NCC’s commitment to establishing enforceable standards for transparency, digital audits, and real-time royalty reporting to protect creators’ rights. She stated, “The NCC will continue to champion policies that support the growth of the music industry, improve the livelihoods of Nigerian musicians, and foster a culture of creativity and respect for intellectual property.”

Despite the global success of Afrobeats and other Nigerian genres, the NCC noted that many musicians face low royalty returns due to rampant digital piracy.

To address this, the Commission revised its Collective Management Regulations to enhance transparency and accountability among Collective Management Organisations (CMOs).

The NCC emphasised that proper licensing is a legal obligation and vital for Nigeria’s creative economy, stating, “Music must feel the beat of intellectual property for the full potential of creativity to be realised.”

The Commission highlighted that creators’ livelihoods depend on fair royalty compensation.

Recent enforcement measures include the NCC’s designation by the Attorney-General of the Federation as an authority under the Proceeds of Crime (Recovery and Management) Act 2022.

This, combined with the Copyright Act 2022, empowers the NCC to order takedowns and block illegal music distribution websites.


Kindly share this post
Continue Reading

Trending