E-Business
Kaspersky Identifies New Stealthy Ransomware
Kaspersky’s Global Emergency Response Team has identified a previously unseen ransomware strain in active use, deployed in an attack following the theft of employee credentials.
The ransomware, dubbed “Ymir”, employs advanced stealth and encryption methods. It also selectively targets files and attempts to evade detection.
Ymir ransomware introduces a unique combination of technical features and tactics that enhance its effectiveness.
Uncommon memory manipulation techniques for stealth. Threat actors leveraged an unconventional blend of memory management functions – malloc, memmove, and memcmp – to execute malicious code directly in the memory.
This approach deviates from the typical sequential execution flow seen in widespread ransomware types, enhancing its stealth capabilities. Furthermore, Ymir is flexible; by using the –path command, attackers can specify a directory where the ransomware should search for files.
If a file is on the whitelist, the ransomware will skip it and leave it unencrypted. This feature gives attackers more control over what is or isn’t encrypted.
Use of data-stealing malware. In the attack observed by Kaspersky experts, which took place on an organisation in Colombia, threat actors were observed using RustyStealer, a type of malware that steals information, to obtain corporate credentials from employees.
These were then utilised to gain access to the organisation’s systems and maintain control long enough to deploy ransomware. This type of attack is known as initial access brokerage, where attackers infiltrate systems and sustain access.
Typically, initial access brokers sell the access they gain on the dark web to other cybercriminals, but in this case, they appear to have continued the attack themselves by deploying ransomware.
“If the brokers are indeed the same actors who deployed the ransomware, this could signal a new trend, creating additional hijacking options without relying on traditional Ransomware-as-a-Service (RaaS) groups,” explains Cristian Souza, Incident Response Specialist at Kaspersky Global Emergency Response Team.
Advanced encryption algorithm. The ransomware employs ChaCha20, a modern stream cipher known for its speed and security, even outperforming Advanced Encryption Standard (AES).
Although the threat actor behind this attack has not shared any stolen data publicly or made further demands, researchers are closely monitoring it for any new activity. “We haven’t observed any new ransomware groups emerging in the underground market yet.
Typically, attackers use shadow forums or portals to leak information as a way to pressure victims into paying the ransom, which is not the case with Ymir. Given this, the question of which group is behind the ransomware remains open, and we suspect this may be a new campaign,” elaborates Souza.
Looking for a name for the new threat, Kaspersky experts considered a Saturnian moon called Ymir. It is an “irregular” moon that travels in the opposite direction of the planet’s rotation – a trait that intriguingly resembles the unconventional blend of memory management functions used in the new ransomware.
E-Business
Vatican Says AI Possesses ‘Shadow of Evil’, Calls for Careful Regulation
The Vatican has issued new guidelines on the use of artificial intelligence (AI), warning about the potential for “the shadow of evil” in the technology, which it said offered “a source of huge opportunities but also profound risks.”
AI can fundamentally make a positive contribution in various areas of societal life, according to a newly published document.
“Yet, as in all areas where humans are called to make decisions, the shadow of evil also looms here.”
In the new document meant to admonish the Catholic faithful, the church warned that the technology should be used to complement human intelligence, “rather than replace its richness.”
The document was approved by Pope Francis, who has repeatedly warned that the application of artificial intelligence should be grounded in ethical and moral considerations.
“In all areas where humans are called to make decisions, the shadow of evil also looms here,” the Vatican said in the paper.
It added, “The moral evaluation of this technology will need to take into account how it is directed and used.”
The paper “is a synthesis of a lot of the existing materials that have been developing organically over the last while,” drawing on Francis’s past statements and writings to look at A.I.’s effect on relationships, education, warfare and work, said the Rev. Paul Tighe, one of the people who worked on it.
The paper according to New York Times was written over six months by a Vatican team in consultation with various experts, including those in A.I.
In light of the dangers, the document with the Latin title “Antiqua et Nova” (Old and New), states that governments and international organizations should ensure AI is used for the benefit of all.
“This issue requires careful regulation, as misinformation — especially through AI-controlled or influenced media — can spread unintentionally, fuelling political polarization and social unrest,” the document warned.
However, the head of the Catholic Church frequently warns of the dangers of AI in public appearances and seeks to bring ethical concerns surrounding the technology to the forefront.
E-Business
Kaspersky Shares Tips to Stay Safe While Using AI Assistants
The new DeepSeek AI assistant has attracted a lot of attention in recent days. Kaspersky experts have also detected scam activity related to it.
Due to high numbers of new users and an alleged cyberattack on DeepSeek, there are glitches in the registration process on DeepSeek’s app and website – many registrations cannot come through.
This situation can be used by cybercriminals to steal the credentials of users through fake DeepSeek web pages.
Through such fake registration pages, attackers can collect users’ emails and passwords. These can be exploited to access users’ accounts – on DeepSeek or in other services (if the password is the same for multiple accounts).
There were also several new crypto tokens based on the DeepSeek hype available for sale. They are not tied to the DeepSeek brand officially, hence their capitalisation is speculative.
Such scam schemes like creating phishing emails are quite widespread with popular AI models – it’s important to recognize that cybercriminals will inevitably seek to exploit such tools for malicious purposes.
“What stands out in the case of DeepSeek is its open-source nature. While open-source frameworks foster transparency, collaboration, and innovation, they also introduce significant security and ethical risks.
“When you’re using an open-source tool, you can’t always be sure how your data is being handled, especially if someone else has deployed it,” comments Leonid Bezvershenko, Security Researcher, Kaspersky GReAT.
“Exploitation of open-source software was a major trend in the threat landscape last year, with cybercriminals running complex campaigns to embed malware. In 2024, our open-source scanner detected over 12,000 malicious packages in open repositories.
“Without centralised oversight, threat actors can start creating compromised versions of software or introduce backdoors under the guise of tools for using the API of DeepSeek, presenting serious risks to users and organisations.”
E-Business
NDPC @ 2025 Data Privacy Day, Calls for Collaboration on Awareness
Nigeria Data Protection Commission (NDPC) has called for increased collaboration to raise awareness and foster data privacy and protection across Nigeria.
The call was made by Dr. Vincent Olatunji, national commissioner, NDPC, during an event marking the 2025 World Data Privacy Day in Lagos.
World Data Privacy Day, observed globally on January 28 every year, serves to highlight the importance of data privacy.
The theme for this year’s observance was “Respecting Privacy, Safeguarding Data, and Enabling Trust.”
Olatunji, who joined the event virtually, stressed that collective action was required to prioritise data privacy in order to attract foreign direct investment into Nigeria.
In his speech, Olatunji outlined the importance of protecting personal data, emphasising that everyone must understand how to safeguard their personal information.
“We need to know how to protect our personal information and data and make sure that we do not share personal information anyhow,” he said.
He also urged data controllers and processors to ensure the protection of data under their care.
Olatunji further discussed the necessity of developing a robust digital economy in the country, which depends on a comprehensive approach to data management, policies, and strategies.
“We all need to work together to make it happen,” he added.
Highlighting the Commission’s progress, Olatunji noted that over 10,000 people had been trained, to create 500,000 jobs in the Nigerian economy through data protection initiatives.
Mr. Tokunbo Smith, president, Data Knowledge Information Privacy Protection Initiative (DKIPPI), also spoke at the event, urging Nigerians to make full use of the Nigeria Data Protection Law, which was passed in June 2023.
Smith praised President Bola Tinubu for signing the law into effect, calling it a “day of freedom for Nigerians.”
He highlighted the law’s provision that empowers individuals to take legal action against anyone who misuses their personal data.
Smith also commended the NDPC for its efforts in training data protection officers and providing certification exams, encouraging Nigerians to leverage these opportunities to protect their data and explore career paths in data protection.
Mr. Fiyinfolu Okedara, guest speaker, further emphasised the need for continuous awareness of data privacy.
He explained that data protection should be an ongoing process, not just a one-time event.
Okedara urged both organisations and individuals to prioritise data privacy education year-round, rather than only on World Data Privacy Day.
During the panel discussion, Mr. Gbenga Sesan, executive director, Paradigm Initiative, stressed that respecting data privacy is a shared responsibility.
He urged people to safeguard their personal data by not writing it down carelessly and to foster trust by ensuring data protection is prioritised.
Mr. Olumide Babalola, another panelist, raised awareness about the future implications of data privacy, predicting a time when children might sue their parents for creating digital footprints for them.
He stressed that consent should always be obtained before adding someone to a WhatsApp group, as failing to do so would constitute a breach of privacy.
The event aimed to foster greater awareness of data privacy and promote best practices among individuals and organisations, ensuring that data protection remains a priority in Nigeria’s evolving digital landscape.
- E-Financial3 days ago
CBN Orders NIBSS to Debit Banks over Fraudulent Transactions
- E-Business3 days ago
NDPC @ 2025 Data Privacy Day, Calls for Collaboration on Awareness
- E-Financial3 days ago
UBA Foundation Wins ‘Philanthropy of the Year’ at Prestigious THISDAY Awards
- Telecom3 days ago
Galaxy Backbone National Shared Service DC1, PH1, Abuja Achieves Tier III Certification of Constructed Facility
- Telecom3 days ago
PMI Drives Digital Transformation at Tech Revolution Africa 2025
- News3 days ago
FG Secures 340 Patents for Indigenous Inventors
- News3 days ago
The Ekehs: Digital Father and Son Shine at Thisday Awards
- E-Business2 days ago
Vatican Says AI Possesses ‘Shadow of Evil’, Calls for Careful Regulation