E-Business
Kaspersky’s Projections for 2024’s Advanced Threats Landscape
Kaspersky Global Research and Analysis Team (GReAT) experts offer insights and projections for 2024 in the Kaspersky Security Bulletin, with a focus on the evolution of Advanced Persistent Threats (APT).
Kaspersky researchers predict APT actors will introduce new exploits on mobile, wearables, and smart devices and use them to form botnets, refine supply chain attack methods, and utilise AI for more effective spear-phishing. These advancements are anticipated to intensify politically motivated attacks and cybercrime.
AI-powered impersonation, the rise of creative exploits for mobile, and new botnets
Emerging AI tools will streamline spear-phishing message production, even enabling the mimicry of specific individuals. Attackers may devise creative automation methods by gathering online data and feeding it to LLMs to craft letters in the style of a person connected to the victim.
“Operation Triangulation” marks a groundbreaking year for mobile exploits, potentially inspiring more research into APTs attacking mobile, wearables, and smart devices. We will likely witness threat actors broadening their surveillance efforts, targeting various consumer devices through vulnerabilities and “silent” exploit delivery methods, including zero-click attacks through messengers, one-click attacks via SMS or messaging apps, and network traffic interception. Protection of personal and corporate devices has become increasingly vital.
The exploitation of vulnerabilities in commonly used software and appliances is yet another point where we should be vigilant. The discovery of high and critical severity vulnerabilities sometimes receives limited research and delayed fixes, potentially paving the way for new, large-scale, and stealthy botnets capable of targeted attacks.
Growth in cyberattacks by state-sponsored actors and hacktivism as a new normal
State-sponsored cyberattack numbers also have the potential to surge in the year ahead, amid increasing geopolitical tensions. These attacks will likely threaten data theft or encryption, IT infrastructure destruction, long-term espionage, and cyber-sabotage.
Another notable trend is hacktivism, which has become more common as part of geopolitical conflicts. Geopolitical tensions indicate a likely increase in hacktivist activity, both destructive and aimed at spreading false information, leading to unnecessary investigations and subsequent alert fatigue of SOC analysts and cybersecurity researchers.
Other advanced threat predictions for 2024 include:
- Supply chain attacks as a service: operators’ bulk-buying access
Supply chain attacks targeting smaller firms to breach major ones: the Okta breaches in 2022-2023 highlight the threat’s scale. Motives of such attacks may range from financial gain to espionage. 2024 might witness new developments in dark web access market activities related to supply chains, enabling more efficient and large-scale attacks.
- Emergence of more groups offering hack-for-hire services
Hack-for-hire groups are on the rise, providing data theft services to clients ranging from private investigators to business rivals. This trend is expected to grow in the coming year.
- Kernel rootkits are hot again
Despite modern security measures like Kernel Mode Code Signing, PatchGuard, HVCI (Hypervisor-Protected Code Integrity), kernel-level code execution barriers are being bypassed by APTs and cybercrime groups. Windows kernel attacks are on the rise, enabled by WHCP abuses, and the underground market for EV certificates and stolen code signing certificates is growing. Threat actors are increasingly leveraging BYOVD (Bring Your Own Vulnerable Driver) in their tactics.
- Managed File Transfer (MFT) systems used for advanced attacks
Managed File Transfer (MFT) systems face escalating cyber threats, exemplified by 2023 breaches of MOVEit and GoAnywhere. This trend is poised to escalate, with cyber adversaries eyeing financial gains and operational disruptions.
The intricate MFT architecture, integrated into broader networks, harbors security weaknesses. Organisations should implement robust cybersecurity measures, including Data Loss Prevention and encryption, and foster cybersecurity awareness to fortify MFT systems against evolving threats.
“In 2023, the notable surge in the availability of AI tools didn’t elude the attention of advanced malicious actors engaged in extensive and highly sophisticated campaigns.
“However, we anticipate that upcoming trends go beyond AI implications, including new methods for conducting supply chain attacks, the emergence of hack-for-hire services, novel exploits for consumer devices, and more.
“Our goal is to provide defenders with advanced threat intelligence that stays ahead of the latest threat developments, enhancing their capacity to fend off cyberattacks more effectively”, says Igor Kuznetsov, Director, Global Research and Analysis Team (GReAT) at Kaspersky.
E-Business
NIMC Grants NCoS Licence to Register Inmates for NIN
National Identity Management Commission (NIMC) has granted licence for the Nigerian Correctional Service, (NCoS) to register inmates in the over 252 custodial centres across the country for National Identity Numbers, (NIN).
The approval followed the request made by Sylvester Nwakuche, acting controller general of the NCoS, who paid a visit to Engr Abisoye Coker-Odusote, director general/chief executive Officer of NIMC, in her office.
The acting controller-general, said the licence to carry out registration of inmates for NIN would eliminate exclusion of inmates from the country’s National Development plans, ensure their safety and security and facilitate their smooth recapture in times of jailbreaks.
The NCoS boss said the visit to the headquarters of NIMC was in search of collaboration that would enable the Service carry out its mandate seamlessly following on going reforms of the Correctional Service system.
According to Nwakuche, there are lots of socio-economic developments within the Correctional Service systems which had led to a number of inmates obtaining University degrees, Masters Degrees and Doctor of Philosophy (PhD) in various fields.
He said such inmates should not be excluded from the national development plans of the country as they should be integrated into the society to become useful for their families and the country.
Nwakuche said inside the Correctional centres are those awaiting trials whose innocence and otherwise has to be decided by the Courts, but argued that in times of National planning, census and other critical national development issues, they should not be disallowed from participating.
Coker-Odusote who granted the licence said NIN has become critical and essential to the country’s national development plans, stressing that NIMC has gone far with the private sector, especially the banks and the Central Bank of Nigeria (CBN) as all banks accounts are now linked with the NIN.
Coker-Odusote said the Eight points Agenda of President Bola Tinubu are also anchored on the Country’s digital identity or National identity Number, stressing that for instance NIN was tied to students loans to eradicate duplicity and prevent ghost beneficiaries.
Coker-Odusote expressed delight in the partnership with the NCoS, saying that the Commission had already entered into partnership with the Nigeria Immigration Service, NIS and other agencies in order to facilitate the smooth delivery of their constitutional mandates.
She commended Dr Olubunmi Tunji-Ojo, minister of Interior, for his dynamic leadership and role in ensuring the delivery of dividends of democracy to Nigeria through various reforms.
E-Business
NIMC Trains 388 Personnel to Boost NIN Enrolment
National Identity Management Commission (NIMC) has kicked off a three-day training program for 388 personnel aimed at enhancing the National Identification Number (NIN) enrolment process across the country.
The training, tagged “Refresher Training of Trainers on NIN Integration to the National Social Register: Technical and hands-on devices and field operations and procedures”, is in collaboration with the National Social Safety-Net Coordinating Office.
The training is also to equip personnel with the necessary skills to efficiently handle the complexities of enrolment processes
In her address at the event held in Port Harcourt on Monday, Abisoye Coker-Odusote, director-general and chief executive officer, NIMC, noted that the initiative aligns with the commission’s overarching goal of achieving secured and great success for the Renewed Hope social initiatives.
Represented by Adedapo Adedoyin, her technical advisor on ICT, the NIMC DG said the event is a pivotal initiative that marks a significant step forward in our mission to enhance and modernize the National Identification Number enrolment process across Nigeria.
She stated, “Today, I am pleased to announce the launch of a comprehensive training program aimed at refreshing the technical and operational skills of the National Social Safety-Net Coordinating Office State Operations Coordinating Unit and NIMC staff.
“This initiative focuses on practical and field-based exercises, ensuring that our teams are well-equipped to handle the complexities of enrolment processes with precision and efficiency.
“This initiative aligns with our overarching goal of achieving secured and great success for the Renewed Hope social initiatives. Through verified digital identification, we aim to improve the lives of Nigerians by providing them with access to essential services and opportunities that require a reliable and secure identity verification system”.
Coker-Odusote explained that the training program will be conducted in two batches, encompassing four states: Kwara, Nasarawa, Kano, and Rivers. A total of 388 attendees will participate in this initiative, including 225 NASSCO State Operations Coordinating Unit representatives, 35 NIMC facilitators, and 128 State support staff.
She added, “The sessions are meticulously designed to foster knowledge sharing and hands-on experience with NIMC’s enrolment device and software, ensuring that our personnel are adept at using these tools to their full potential.
“By empowering our teams with enhanced skills and practical experience, we are setting the stage for more efficient and accurate NIN enrolment processes across the nation”.
Coker-Odusote further said the training program “is a crucial step toward achieving the World Bank’s Identification for Development Initiative target of enrolling 180 million Nigerians with secure digital IDs.
“By bolstering our technical and operational capabilities, we are ensuring that NIMC is well-positioned to meet and exceed this target, thereby contributing to the global vision of inclusive and accessible digital identification for all”.
The NIMC boss8 called for collaboration between all stakeholders saying, “As we embark on this journey, I urge all participants to embrace this opportunity for growth and development.
“Together, we can build a robust and efficient National Identification System that will serve as the cornerstone for Nigeria’s social and economic progress.”
E-Business
Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media
Kaspersky experts have uncovered a new phishing scam targeting businesses that promote their pages on Facebook. Scammers send emails allegedly on behalf of Meta for Business – Facebook’s platform for businesses – claiming the recipient’s page contains prohibited content.
The email suggests users provide explanations in order for their account and page to be unblocked. The goal of the attackers is likely to get access to users’ business accounts.
Kaspersky’s anonymised data shows that such emails started reaching users on 14 December 2024, with complaints coming from organisations all over the world, including the Middle East, Turkiye and Africa.
By examining the “From” field in the email it can be seen that the domain does not belong to Facebook. According to Kaspersky data the emails that this campaign used were sent from different domains.
The link in the email redirects users to Facebook Messenger. On Messenger, the account posing as Facebook’s support team appears legitimate, creating a false sense of trust.
There is an indication that this is a fan page, but it is easy to miss in a situation of high stress after being accused of spreading illegitimate content.
This scheme stands out for its sophistication. Unlike earlier scams that accused users of copyright violations and directed them to respond via email, this approach simulates internal communication on the Facebook platform itself.
“In 2025, we anticipate a rise in attacks leveraging social engineering and user trust in major platforms. Scams like this are becoming more sophisticated as attackers strive to mimic official services closely.
“Users must remain vigilant, verify the authenticity of messages, and avoid clicking on suspicious links. We strongly advise users not to engage with suspicious accounts and to activate additional security measures, such as two-factor authentication.
“If you receive such an email, report the incident to Facebook’s support team and update your passwords immediately if any information has been compromised,” comments Andrey Kovtun, Email Threats Protection Group Manager at Kaspersky.
- Telecom3 days ago
USSD Dispute: FG May Blacklist 18 Banks Allegedly Owing Telcos N250Bn
- E-Financial3 days ago
NGX Warns Public of Fraudulent Impersonation by ‘Value Gain’
- E-Business3 days ago
Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media
- General News3 days ago
Enterprise Development Fund Launched to Bridge Capital Access Gap
- News3 days ago
AfDB to Partner LAMATA to Expand Existing Rail System
- General News3 days ago
UBA Rewards Customers with over N41m in Final Edition of Legacy Promo
- E-Business3 days ago
NIMC Trains 388 Personnel to Boost NIN Enrolment
- News2 days ago
EFCC Dismantles Fake Hotel Review Syndicate, Arrests 105 in Crackdown