E-Business
Malware Infiltrating Millions of Yahoo
Fox-IT, a Dutch security firm, on Friday, January 3, detected malicious activity on some of its clients’ networks, presuming, is following a common phenomenon that they had all previously visited yahoo.com.
Further investigation by InfoSecurity revealed malvertising on the Yahoo site – and it is possible that millions of users have been infected via Yahoo.
“Clients visiting yahoo.com received advertisements served by ads.yahoo.com,” blogged Joost Bijl, Fox-IT’s product manager for ProtACT, its security monitoring service. “Some of the advertisements are malicious. Those malicious advertisements are iframes hosted on [five separate domains].”
The iFrames, InfoSecurity highlighted, silently redirected the Yahoo visitors “to seemingly random subdomains” of several domains all served from a single IP address that appears to be hosted in the Netherlands.
Here the visitors were served with the Magnitude exploit kit which attempted to exploit several Java exploits. If any of the exploits were successful, the victim was infected with one of a range of trojans including Zeus, Andromeda, Dorkbot, Tinba, Necurs and click fraud malware.
InfoSecurity said that magnitude is proving an increasingly popular exploit kit among cybercriminals since the arrest of Paunch, the alleged author of the Blackhole EK.
“The investigation showed that the earliest signs of infection were at December 30, 2013. Other reports suggest it might have started even earlier”, continued Fox-IT. It updated its report, still on 3 January, with the comment, “It appears the traffic to the exploit kit has significantly decreased. It looks like Yahoo is taking steps to fix the problem.”
Fox-IT estimates that around 300,000 users visited the site every hour during the infection. “Given a typical infection rate of 9% this would result in around 27.000 infections every hour,” it suggests. A second Dutch company, SurfRight, provided additional information on its Hitman blog on Sunday. It confirmed December 30 as the start of the infections.
“Our systems detected the first threats associated with this malware campaign on Monday December 30th, 2013 (now 6 days ago). This means that a lot more users are infected than initially thought (4 days x 24 hours x 27,000 infections = 2.5 million infected computers),” it concluded.
At the time of writing this report, Yahoo has not published a formal statement on the issue. It has, however, released two brief statements to journalists. On Saturday it said, “We recently identified an ad designed to spread malware to some of our users. We immediately removed it and will continue to monitor and block any ads being used for this activity.”
On Sunday it added, “On Friday, January 3 on our European sites, we served some advertisements that did not meet our editorial guidelines, specifically they spread malware. We promptly removed these advertisements. Users in North America, Asia Pacific and Latin America were not served these advertisements and were not affected. Additionally, users using Macs and mobile devices were not affected.”
E-Business
NIMC Trains 388 Personnel to Boost NIN Enrolment
National Identity Management Commission (NIMC) has kicked off a three-day training program for 388 personnel aimed at enhancing the National Identification Number (NIN) enrolment process across the country.
The training, tagged “Refresher Training of Trainers on NIN Integration to the National Social Register: Technical and hands-on devices and field operations and procedures”, is in collaboration with the National Social Safety-Net Coordinating Office.
The training is also to equip personnel with the necessary skills to efficiently handle the complexities of enrolment processes
In her address at the event held in Port Harcourt on Monday, Abisoye Coker-Odusote, director-general and chief executive officer, NIMC, noted that the initiative aligns with the commission’s overarching goal of achieving secured and great success for the Renewed Hope social initiatives.
Represented by Adedapo Adedoyin, her technical advisor on ICT, the NIMC DG said the event is a pivotal initiative that marks a significant step forward in our mission to enhance and modernize the National Identification Number enrolment process across Nigeria.
She stated, “Today, I am pleased to announce the launch of a comprehensive training program aimed at refreshing the technical and operational skills of the National Social Safety-Net Coordinating Office State Operations Coordinating Unit and NIMC staff.
“This initiative focuses on practical and field-based exercises, ensuring that our teams are well-equipped to handle the complexities of enrolment processes with precision and efficiency.
“This initiative aligns with our overarching goal of achieving secured and great success for the Renewed Hope social initiatives. Through verified digital identification, we aim to improve the lives of Nigerians by providing them with access to essential services and opportunities that require a reliable and secure identity verification system”.
Coker-Odusote explained that the training program will be conducted in two batches, encompassing four states: Kwara, Nasarawa, Kano, and Rivers. A total of 388 attendees will participate in this initiative, including 225 NASSCO State Operations Coordinating Unit representatives, 35 NIMC facilitators, and 128 State support staff.
She added, “The sessions are meticulously designed to foster knowledge sharing and hands-on experience with NIMC’s enrolment device and software, ensuring that our personnel are adept at using these tools to their full potential.
“By empowering our teams with enhanced skills and practical experience, we are setting the stage for more efficient and accurate NIN enrolment processes across the nation”.
Coker-Odusote further said the training program “is a crucial step toward achieving the World Bank’s Identification for Development Initiative target of enrolling 180 million Nigerians with secure digital IDs.
“By bolstering our technical and operational capabilities, we are ensuring that NIMC is well-positioned to meet and exceed this target, thereby contributing to the global vision of inclusive and accessible digital identification for all”.
The NIMC boss8 called for collaboration between all stakeholders saying, “As we embark on this journey, I urge all participants to embrace this opportunity for growth and development.
“Together, we can build a robust and efficient National Identification System that will serve as the cornerstone for Nigeria’s social and economic progress.”
E-Business
Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media
Kaspersky experts have uncovered a new phishing scam targeting businesses that promote their pages on Facebook. Scammers send emails allegedly on behalf of Meta for Business – Facebook’s platform for businesses – claiming the recipient’s page contains prohibited content.
The email suggests users provide explanations in order for their account and page to be unblocked. The goal of the attackers is likely to get access to users’ business accounts.
Kaspersky’s anonymised data shows that such emails started reaching users on 14 December 2024, with complaints coming from organisations all over the world, including the Middle East, Turkiye and Africa.
By examining the “From” field in the email it can be seen that the domain does not belong to Facebook. According to Kaspersky data the emails that this campaign used were sent from different domains.
The link in the email redirects users to Facebook Messenger. On Messenger, the account posing as Facebook’s support team appears legitimate, creating a false sense of trust.
There is an indication that this is a fan page, but it is easy to miss in a situation of high stress after being accused of spreading illegitimate content.
This scheme stands out for its sophistication. Unlike earlier scams that accused users of copyright violations and directed them to respond via email, this approach simulates internal communication on the Facebook platform itself.
“In 2025, we anticipate a rise in attacks leveraging social engineering and user trust in major platforms. Scams like this are becoming more sophisticated as attackers strive to mimic official services closely.
“Users must remain vigilant, verify the authenticity of messages, and avoid clicking on suspicious links. We strongly advise users not to engage with suspicious accounts and to activate additional security measures, such as two-factor authentication.
“If you receive such an email, report the incident to Facebook’s support team and update your passwords immediately if any information has been compromised,” comments Andrey Kovtun, Email Threats Protection Group Manager at Kaspersky.
E-Business
Lagos, NIPOST Partner to Transform e-Commerce Delivery
Lagos State government and the Nigerian Postal Service (NIPOST) are joining forces to revolutionise e-commerce logistics in Nigeria’s economic capital.
The collaboration aims to enhance last-mile delivery and optimise connectivity within Lagos and beyond.
During a courtesy visit to governor Babajide Sanwo-Olu, Ms. Tola Odeyemi, postmaster-general and CEO of NIPOST, highlighted the strategic importance of Lagos in driving innovation in the e-commerce sector.
“As the e-commerce landscape continues to evolve, Lagos leads the charge in this growth. Through enhanced postal and logistics services, we seek to empower small businesses and individuals engaging in this expanding sector,” Odeyemi said.
She underscored her commitment to fostering partnerships that would align NIPOST with the demands of a modern economy, identifying Lagos as a pivotal partner.
Lagos is central to achieving our vision of efficient and future-ready postal services, she added.
Odeyemi applauded Lagos state for its vibrant programmes that drew global attention during the December festivities, stating that such initiatives could drive further economic growth and diaspora engagement.
She pledged enhanced postal and logistics support to drive e-commerce growth and empower small businesses in Nigeria., highlighting NIPOST’s readiness to collaborate with Lagos State to enhance last-mile delivery, foster innovation, and improve public service delivery.
Lagos, as Nigeria’s economic hub, is a critical partner in our vision to make NIPOST’s services more efficient and relevant in today’s world, Odeyemi stated.
She commended Lagos State for its strides in infrastructure and governance, underscoring the importance of strategic partnerships to optimize connectivity within Lagos and nationwide.
Governor Sanwo-Olu challenged NIPOST to rethink its approach and embrace technology as a transformative tool for business facilitation.
“For NIPOST to remain relevant, you must challenge the status quo, revamp your services, and adopt innovative strategies that address today’s needs and anticipate future demands,” the governor advised.
He also pledged Lagos state’s support in upgrading NIPOST’s infrastructure to improve service delivery and create an enabling environment for seamless e-commerce operations.
- Telecom1 day ago
Suspected Lakurawa Terrorists Kill 3 Telcoms Workers in Kebbi
- General News1 day ago
Lagos State Sets Strict Deadline for 2024 Tax Returns Filing
- E-Financial1 day ago
BudgIT Queries Irregularities in FG’s Proposed 2025 Budget
- News1 day ago
SERAP Drags FG, Govs to ECOWAS Court over ‘Misuse of Cybercrimes Act’
- E-Financial1 day ago
NAICOM Seeks Police’s Support to Enforce Third-party Motor Insurance
- E-Financial1 day ago
GAIM 6: Fidelity Bank Rewards 10 Customers with N10m
- E-Business1 day ago
Lagos, NIPOST Partner to Transform e-Commerce Delivery
- News1 day ago
GOCOP Applauds Edo Gov for Appointing Edomaruse, SA, Int’l Development