E-Business
Kaspersky Reveals Half of Dark Web Exploit Listings Target Zero-day Vulnerabilities
Between January 2023 and September 2024, Kaspersky Digital Footprint Intelligence experts identified 547 listings to buy and sell exploits targeting software vulnerabilities.
These advertisements are posted on various dark web forums and shadow Telegram channels, with half involving zero-day and one-day vulnerabilities.
However, it is difficult to confirm whether these exploits are functional, as the dark market is rife with scams. Additionally, Kaspersky found that, on average, the cost of exploits for remote code execution vulnerabilities amounted to $100,000.
Exploits are tools used by cybercriminals to take advantage of vulnerabilities in various software programs, like those from Microsoft, to commit illegal activities, such as gaining unauthorised access or stealing data.
More than half of the dark web posts (51%) offered or sought to purchase exploits for zero-day or one-day vulnerabilities. Zero-day exploits target undiscovered vulnerabilities that software vendors have not identified and patched yet, while one-day exploits focus on systems that do not have the patch installed.
“Exploits can target any program, but the most desirable and expensive ones often focus on enterprise-level software. These tools enable cybercriminals to carry out attacks, which equate to substantial gains for them, such as stealing corporate information or spying on an organisation undetected.
However, some exploit offers on the dark web may be fake or incomplete, meaning they don’t function as advertised. Additionally, a significant portion of transactions are likely to occur in private.
These two factors complicate the assessment of the actual market volume for functional exploits,” explains Anna Pavlovskaya, Senior Analyst at Kaspersky Digital Footprint Intelligence.
The dark web market offers a wide array of different types of exploits. Two of the most widespread are those for RCE (Remote Code Execution) and LPE (Local Privilege Escalation) vulnerabilities.
According to an analysis of over 20 listings, the average price for RCE exploits is around $100,000, while LPE exploits typically cost about $60,000. RCE vulnerabilities are considered more dangerous, as they allow attackers to take control of a system or its components, or confidential data.
Dark web listings for buying and selling exploits, 2023-2024, where some offers can be repetitive. Source: Kaspersky Digital Footprint Intelligence
This year, the peak level in exploit sales and purchases occurred in May, with 50 relevant posts, compared to an average of about 26 per month in the period surrounding the surge. “Peaks in the exploit market’s activity are unpredictable and hard to link to specific events.
“Interestingly, in May, the dark web witnessed the sale of one of the most expensive exploits during the analysed period – allegedly, for a Microsoft Outlook zero-day vulnerability priced at nearly two million US dollars,” elaborates Anna Pavlovskaya.
“Overall, the exploit market remains stable; while activity fluctuates, the threat is always present. This highlights the need for cybersecurity hygiene practices, such as the regular patching and monitoring of digital assets on the dark web.”
Spotify Premium users no longer need to suffer in silence when they’re offline and have forgotten to download tracks or playlists in advance.
The streaming music company says it’s adding an Offline Backup feature that’ll automatically display a playlist of available tracks that can be played offline even if they weren’t manually downloaded.
The feature will start rolling out this week on iOS and Android apps, and will work with Android Auto and Apple CarPlay, according to Spotify.
The company noted that the feature might be useful for people who are boarding a flight with no internet connection and realize they haven’t downloaded any music in advance.
Spotify says the playlist will be generated from tracks that are already in the user’s data cache, so it presumably wouldn’t take up additional storage space on a mobile device.
The playlist will show up when a user is offline, and can be filtered and sorted by artist, mood and genre.
The Offline Backup playlist changes over time and can be added to the user’s library for easy access.
The number of tracks in the playlist will vary based on how frequently subscribers use Spotify. Some Offline Backup playlists will contain hours of music.
Though the Offline Backup playlist hasn’t shown up yet on the Spotify Home feed on my iOS device, an option in settings for “Offline listening” under Storage was enabled by default.
Users have the option to remove downloads or clear their cache, but that could disrupt the playlist.
In order for offline listening to work, Spotify said, users should’ve listened to at least five songs recently.
The SanDisk Dual Drive Luxe USB Type-C is a versatile and stylish storage solution that caters to users looking for a practical way to transfer and store data across multiple devices. SanDisk, known for its reliable storage products, delivers a sleek dual drive that combines functionality with durability.
Key Features
- Dual Connector (USB Type-C & USB Type-A):
One of the standout features of this drive is its dual interface, which allows you to transfer files between devices with both USB Type-C and USB Type-A ports. This is perfect for those who switch between newer laptops or phones with USB-C and older machines or peripherals that rely on USB-A.
- Fast Transfer Speeds:
With the USB 3.1 Gen 1 technology, the Dual Drive Luxe offers fast file transfer speeds, with read speeds of up to 150MB/s. Whether you’re transferring large video files or backing up important documents, the speed ensures a smooth and efficient experience.
- Ample Storage Options:
The drive comes in various storage capacities, ranging from 32GB up to 1TB, making it suitable for different needs. Whether you are a casual user storing simple documents or a content creator managing large media files, there’s an option that will suit your requirements.
- Durable and Compact Design:
The all-metal, polished finish adds an element of elegance while making the drive durable enough for daily use. The capless swivel design also protects the connectors when not in use and ensures portability without worrying about losing parts.
Performance:
In real-world usage, the SanDisk Dual Drive Luxe performs exceptionally well, particularly when transferring large media files such as 4K videos or high-resolution images. The transfer speeds hold up as advertised when connected to a USB 3.1 port.
However, using the drive with older USB 2.0 ports will see a drop in speed, but that’s to be expected with legacy technology.
Switching between USB Type-C and USB Type-A is seamless, making it a perfect companion for professionals on the go, students, or media creators who need to transfer files between devices regularly.
Pros:
– Dual USB Type-C and USB Type-A support.
– Fast read and write speeds (up to 150MB/s).
– Durable, all-metal design.
– Available in large storage capacities (up to 1TB).
– Compact and portable.
Cons:
– It may heat up slightly during extended use, though not excessively.
Verdict:
The SanDisk Dual Drive Luxe USB Type-C is an excellent choice for anyone who frequently transfers data between devices. Its dual connectivity, speed, and storage options make it a practical and efficient solution for both professionals and casual users alike. The design is both stylish and reliable without compromising the nature of being portable.
Immigration chiefs from the Economic Community of West African States (ECOWAS) have agreed that it is urgent for member countries to expedite the issuance of the regional ENBIC ID card in order to foster regional integration and simplify travel.
The heads of immigration services from a dozen ECOWAS countries made the resolve during a recent ECOWAS Heads of Immigration Forum which took place in the Gambian capital, Banjul.
ENBIC is the acronym for ECOWAS National Biometric Identity Card, a regional ID adopted in December 2014 as a tool for enhancing cross-border travel and economic integration among the countries that make up the west African political and economic bloc.
Since its launch, the rollout of the card has not been as strong as expected, but ECOWAS authorities have been pushing for its adoption as one of the ways of bringing down travel and trade barriers within the region.
The recent forum in Banjul was thus a platform for member countries to review the path so far covered, and to device ways of making the project more impactful in their quest of better addressing migration and mobility challenges.
It took place under the theme “Acceleration of the implementation of the ECOWAS National Biometric Identity Card (ENBIC) and the abolition of the 90-day stay limit/residence permits for community citizens.”
During the meeting, participants discussed why it is important for the ENBIC to replace the hand-written ECOWAS travel certificates and residence permits, emphasizing that the regional ID will facilitate movements, residence and the right to do business in any country of the region without the risk of compromising the national security of the host country, the Nigeria Immigration Service (NIN) said in a statement.
“The abolition of the 90-day stay limit, along with the deployment of the ENBIC, will significantly strengthen free movement, residence and establishment rights for ECOWAS citizens,” said KN Nandap, Comptroller General of the NIS, who was elected Chairperson of the ECOWAS forum during the Banjul meeting.
Among other things, delegates to the meeting also reviewed challenges related to irregular migration, human trafficking and border security. In the face of these, Nandap said there was need for a “coordinated and harmonized approach” to these problems in order to ensure effective border security and protection of citizens.
The Banjul meeting was not attended by Burkina Faso, Mali and Niger who have turned their back on ECOWAS. Last month, they announced plans to launch a common passport to easy travel among their citizens.
This comes after Burkina Faso also launched a new passport without the ECOWAS logo.
There have been calls from regional authorities for their return to the ECOWAS fold.
CBN Introduces EFEMS to Enhance Transparency in Forex Market
FG Hopeful Thuraya’s Relaunch in Nigeria Will Boost Fight against Insecurity, Others
Nigeria Police Charge 4 Journalists with Cybercrimes for Corruption Reporting
FG to Rename FIRS, Plans Tax Tribunal
Kaspersky Reveals Half of Dark Web Exploit Listings Target Zero-day Vulnerabilities
NCAIR Launches ₦100m AI Fund Supported by Google to Empower Local Startups
Breaking…. Fraudsters Steal N6.Bn from Hope PS Bank
Telecoms Workers Threaten Strike over Anti-Labour Practices
SEC Says 50 Crypto Exchanges have Applied for Licenses
Nigeria Police Arrest Operator of Pirate Domain Streaming MultiChoice Content
Broadcasting2 days agoMultiChoice-Canal+ Approach Regulators with Merger Terms
Telecom2 days agoWhatsApp Introduces Filters and Backgrounds for Video Calls
Broadcasting1 day agoCourt Dismisses Echefu, TSTV CEO’s Bid to Stop Trial of Alleged N2Bn Fraud
E-Financial2 days agoNDIC Partners Judiciary to Prosecute Failed Banks
Telecom2 days agoStarlink Doubles Subscription for Nigerian Customers
E-Financial2 days agoWithholding Tax Regulations Gazetted, to be Published Today – Oyedele
News2 days agoALX Africa Leads Tech Innovation with New Batch of Pioneer African Data Scientists
Telecom2 days agoBeware: Your Site Could be at Risk – NITDA warns WordPress users in Nigeria