Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

E-Business

Kaspersky Identifies New Stealthy Ransomware

Published

on

Kindly share this post

Kaspersky’s Global Emergency Response Team has identified a previously unseen ransomware strain in active use, deployed in an attack following the theft of employee credentials.

The ransomware, dubbed “Ymir”, employs advanced stealth and encryption methods. It also selectively targets files and attempts to evade detection.

Ymir ransomware introduces a unique combination of technical features and tactics that enhance its effectiveness.

Uncommon memory manipulation techniques for stealth. Threat actors leveraged an unconventional blend of memory management functions – malloc, memmove, and memcmp – to execute malicious code directly in the memory.

This approach deviates from the typical sequential execution flow seen in widespread ransomware types, enhancing its stealth capabilities. Furthermore, Ymir is flexible; by using the –path command, attackers can specify a directory where the ransomware should search for files.

If a file is on the whitelist, the ransomware will skip it and leave it unencrypted. This feature gives attackers more control over what is or isn’t encrypted.

Use of data-stealing malware. In the attack observed by Kaspersky experts, which took place on an organisation in Colombia, threat actors were observed using RustyStealer, a type of malware that steals information, to obtain corporate credentials from employees.

These were then utilised to gain access to the organisation’s systems and maintain control long enough to deploy ransomware. This type of attack is known as initial access brokerage, where attackers infiltrate systems and sustain access.

Typically, initial access brokers sell the access they gain on the dark web to other cybercriminals, but in this case, they appear to have continued the attack themselves by deploying ransomware.

“If the brokers are indeed the same actors who deployed the ransomware, this could signal a new trend, creating additional hijacking options without relying on traditional Ransomware-as-a-Service (RaaS) groups,” explains Cristian Souza, Incident Response Specialist at Kaspersky Global Emergency Response Team.

Advanced encryption algorithm. The ransomware employs ChaCha20, a modern stream cipher known for its speed and security, even outperforming Advanced Encryption Standard (AES).

Although the threat actor behind this attack has not shared any stolen data publicly or made further demands, researchers are closely monitoring it for any new activity. “We haven’t observed any new ransomware groups emerging in the underground market yet.

Typically, attackers use shadow forums or portals to leak information as a way to pressure victims into paying the ransom, which is not the case with Ymir. Given this, the question of which group is behind the ransomware remains open, and we suspect this may be a new campaign,” elaborates Souza.

Looking for a name for the new threat, Kaspersky experts considered a Saturnian moon called Ymir. It is an “irregular” moon that travels in the opposite direction of the planet’s rotation – a trait that intriguingly resembles the unconventional blend of memory management functions used in the new ransomware.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Vatican Says AI Possesses ‘Shadow of Evil’, Calls for Careful Regulation

Published

on

Kindly share this post

The Vatican has issued new guidelines on the use of artificial intelligence (AI), warning about the potential for “the shadow of evil” in the technology, which it said offered “a source of huge opportunities but also profound risks.”

Vatican Says AI Possesses ‘Shadow of Evil’, Calls for Careful Regulation

AI can fundamentally make a positive contribution in various areas of societal life, according to a newly published document.

“Yet, as in all areas where humans are called to make decisions, the shadow of evil also looms here.”

In the new document meant to admonish the Catholic faithful, the church warned that the technology should be used to complement human intelligence, “rather than replace its richness.”

The document was approved by Pope Francis, who has repeatedly warned that the application of artificial intelligence should be grounded in ethical and moral considerations.

“In all areas where humans are called to make decisions, the shadow of evil also looms here,” the Vatican said in the paper.

It added, “The moral evaluation of this technology will need to take into account how it is directed and used.”

The paper “is a synthesis of a lot of the existing materials that have been developing organically over the last while,” drawing on Francis’s past statements and writings to look at A.I.’s effect on relationships, education, warfare and work, said the Rev. Paul Tighe, one of the people who worked on it.

The paper according to New York Times was written over six months by a Vatican team in consultation with various experts, including those in A.I.

In light of the dangers, the document with the Latin title “Antiqua et Nova” (Old and New), states that governments and international organizations should ensure AI is used for the benefit of all.

“This issue requires careful regulation, as misinformation — especially through AI-controlled or influenced media — can spread unintentionally, fuelling political polarization and social unrest,” the document warned.

However, the head of the Catholic Church frequently warns of the dangers of AI in public appearances and seeks to bring ethical concerns surrounding the technology to the forefront.

 

 

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Shares Tips to Stay Safe While Using AI Assistants

Published

on

Kindly share this post

The new DeepSeek AI assistant has attracted a lot of attention in recent days. Kaspersky experts have also detected scam activity related to it.

Due to high numbers of new users and an alleged cyberattack on DeepSeek, there are glitches in the registration process on DeepSeek’s app and website – many registrations cannot come through.

This situation can be used by cybercriminals to steal the credentials of users through fake DeepSeek web pages.

Through such fake registration pages, attackers can collect users’ emails and passwords. These can be exploited to access users’ accounts – on DeepSeek or in other services (if the password is the same for multiple accounts).

There were also several new crypto tokens based on the DeepSeek hype available for sale. They are not tied to the DeepSeek brand officially, hence their capitalisation is speculative.

Such scam schemes like creating phishing emails are quite widespread with popular AI models – it’s important to recognize that cybercriminals will inevitably seek to exploit such tools for malicious purposes.

“What stands out in the case of DeepSeek is its open-source nature. While open-source frameworks foster transparency, collaboration, and innovation, they also introduce significant security and ethical risks.

“When you’re using an open-source tool, you can’t always be sure how your data is being handled, especially if someone else has deployed it,” comments Leonid Bezvershenko, Security Researcher, Kaspersky GReAT.

“Exploitation of open-source software was a major trend in the threat landscape last year, with cybercriminals running complex campaigns to embed malware. In 2024, our open-source scanner detected over 12,000 malicious packages in open repositories.

“Without centralised oversight, threat actors can start creating compromised versions of software or introduce backdoors under the guise of tools for using the API of DeepSeek, presenting serious risks to users and organisations.”


Kindly share this post
Continue Reading

E-Business

NDPC @ 2025 Data Privacy Day, Calls for Collaboration on Awareness

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) has called for increased collaboration to raise awareness and foster data privacy and protection across Nigeria.

NDPC @ 2025 Data Privacy Day, Calls for Collaboration on Awareness

Dr. Vincent Olatunji, national commissioner, NDPC

The call was made by Dr. Vincent Olatunji, national commissioner, NDPC, during an event marking the 2025 World Data Privacy Day in Lagos.

World Data Privacy Day, observed globally on January 28 every year, serves to highlight the importance of data privacy.

The theme for this year’s observance was “Respecting Privacy, Safeguarding Data, and Enabling Trust.”

Olatunji, who joined the event virtually, stressed that collective action was required to prioritise data privacy in order to attract foreign direct investment into Nigeria.

In his speech, Olatunji outlined the importance of protecting personal data, emphasising that everyone must understand how to safeguard their personal information.

“We need to know how to protect our personal information and data and make sure that we do not share personal information anyhow,” he said.

He also urged data controllers and processors to ensure the protection of data under their care.

Olatunji further discussed the necessity of developing a robust digital economy in the country, which depends on a comprehensive approach to data management, policies, and strategies.

“We all need to work together to make it happen,” he added.

Highlighting the Commission’s progress, Olatunji noted that over 10,000 people had been trained, to create 500,000 jobs in the Nigerian economy through data protection initiatives.

Mr. Tokunbo Smith, president, Data Knowledge Information Privacy Protection Initiative (DKIPPI), also spoke at the event, urging Nigerians to make full use of the Nigeria Data Protection Law, which was passed in June 2023.

Smith praised President Bola Tinubu for signing the law into effect, calling it a “day of freedom for Nigerians.”

He highlighted the law’s provision that empowers individuals to take legal action against anyone who misuses their personal data.

Smith also commended the NDPC for its efforts in training data protection officers and providing certification exams, encouraging Nigerians to leverage these opportunities to protect their data and explore career paths in data protection.

Mr. Fiyinfolu Okedara, guest speaker, further emphasised the need for continuous awareness of data privacy.

He explained that data protection should be an ongoing process, not just a one-time event.

Okedara urged both organisations and individuals to prioritise data privacy education year-round, rather than only on World Data Privacy Day.

During the panel discussion, Mr. Gbenga Sesan, executive director, Paradigm Initiative, stressed that respecting data privacy is a shared responsibility.

He urged people to safeguard their personal data by not writing it down carelessly and to foster trust by ensuring data protection is prioritised.

Mr. Olumide Babalola, another panelist, raised awareness about the future implications of data privacy, predicting a time when children might sue their parents for creating digital footprints for them.

He stressed that consent should always be obtained before adding someone to a WhatsApp group, as failing to do so would constitute a breach of privacy.

The event aimed to foster greater awareness of data privacy and promote best practices among individuals and organisations, ensuring that data protection remains a priority in Nigeria’s evolving digital landscape.


Kindly share this post
Continue Reading

Trending