E-Business
McAfee Reveals Threats Prone 5000 Versions of 21 Mobile App
Intel Security’s McAfee Labs Threats Report of June 2016, has revealed the dynamics of mobile app collusion, where cybercriminals manipulate two or more apps to orchestrate attacks capable of exfiltrating user data, inspecting files, sending fake SMS messages, loading additional apps without user consent, and sending user location information to control servers.
McAfee Labs has observed such behavior across more than 5,000 versions of 21 apps designed to provide useful user services such as mobile video streaming, health monitoring, and travel planning.
Unfortunately, the failure of users to regularly implement essential software updates to these 21 mobile apps raises the possibility that older versions could be commandeered for malicious activity, the report shows.
Widely considered a theoretical threat for many years, colluding mobile apps carry out harmful activity together by leveraging inter app communication capabilities common to mobile operating systems.
These operating systems incorporate many techniques to isolate apps in sandboxes, restrict their capabilities, and control which permissions they have at a fairly granular level. Unfortunately, mobile platforms also include fully documented ways for apps to communicate with each other across sandbox boundaries.
Working together, colluding apps can leverage these interapp communication capabilities for malicious purposes.
McAfee Labs has identified three types of threats that can result from mobile app collusion:
Information theft: An app with access to sensitive or confidential information willingly or unwillingly collaborates with one or more other apps to send information outside the boundaries of the device
Financial theft: An app sends information to another app that can execute financial transactions or make financial API calls to achieve similar objectives
Service misuse: One app controls a system service and receives information or commands from one or more other apps to orchestrate a variety of malicious activities.
Mobile app collusion requires at least one app with permission to access the restricted information or service, one app without that permission but with access outside the device, and the capability to communicate with each other.
Either app could be collaborating on purpose or unintentionally due to accidental data leakage or inclusion of a malicious library or software development kit. Such apps may use a shared space (files readable by all) to exchange information about granted privileges and to determine which one is optimally positioned to serve as an entry point for remote commands.
“Improved detection drives greater efforts at deception,” said Vincent Weafer, vice president of Intel Security’s McAfee Labs group. “It should not come as a surprise that adversaries have responded to mobile security efforts with new threats that attempt to hide in plain sight. Our goal is to make it increasingly harder for malicious apps to gain a foothold on our personal devices, developing smarter tools and techniques to detect colluding mobile apps.”
The McAfee Labs report discusses forward-looking research to create tools, initially used by threat researchers manually but eventually to be automated, to detect colluding mobile apps. Once identified, colluding apps may be blocked using mobile security technology.
The report suggests a variety of user approaches to minimize mobile app collusion, including downloading mobile apps only from trusted sources, avoiding apps with embedded advertising, not “jailbreaking” mobile devices, and most importantly, always keeping operating system and app software up-to-date.
Q1 2016 Threat Statistics
Ransomware: New ransomware samples rose 24% this quarter due to the continued entry of relatively low-skilled criminals into the ransomware cybercrime community. This trend is the result of widespread adoption of exploit kits to deploy the malware.
Mobile. New mobile malware samples grew 17% quarter over quarter in Q1 2016. Total mobile malware samples grew 23% quarter over quarter and 113% over the last four quarters.
Mac OS malware. Mac OS malware grew quickly in Q1, primarily due to an increase in VSearch adware. While the absolute number of Mac OS samples is still low, the total number of samples has increased 68% quarter over quarter and 559% over the last four quarters.
Macro Malware. Macro malware continues on the growth trajectory begun in 2015 with a 42% quarter over quarter increase in new macro malware samples.
The new breed of macro malware continues to attack corporate networks primarily through sophisticated spam campaigns that leverage information gathered through social engineering to appear legitimate.
Gamut botnet. The Gamut botnet became the most productive spam botnet in Q1, increasing its volume nearly 50%.
Prevalent spam campaigns offer get-rich-quick schemes and knockoff pharmaceutical supplies. Kelihos, the most prolific spamming botnet during Q4 2015 and a widespread malware distributor, slipped to fourth place.
McAfee Labs is the threat research division of Intel Corporation’s Intel Security Group, and one of the world’s leading sources for threat research, threat intelligence, and cybersecurity thought leadership.
The McAfee Labs team of researchers collects threat data from millions of sensors across key threat vectors—file, web, message, and network.
It then performs cross-vector threat correlation analysis and delivers real-time threat intelligence to tightly integrated McAfee endpoint, content, and network security products through its cloud-based McAfee Global Threat Intelligence service.
McAfee Labs also develops core threat detection technologies—such as application profiling, and graylist management—that are incorporated into the broadest security product portfolio in the industry.
McAfee Labs is now part of Intel Security. With its Security Connected strategy, innovative approach to hardware-enhanced security and unique McAfee Global Threat Intelligence, Intel Security is intensively focused on developing proactive, proven security solutions and services that protect systems, networks and mobile devices for business and personal use around the world.
The National Information Technology Development Agency (NITDA) is seeking public feedback on several draft documents related to Information Technology (IT) projects and regulations. This aligns with NITDA’s commitment to an open and collaborative rulemaking.
The legal Documents Open for Public Review are:
- Guidelines for Licensing IT Projects Clearance Compliance Assurance Firms 2024;
- Regulatory Guidelines for Electronic Invoicing in Nigeria;
- Guidelines for Software Development; and
- Guidelines for Software Testing.
NITDA is also proposing the amendment of the Guidelines for Clearance of IT Projects for Federal Public Institutions (FPIs). guidelines, initially issued in 2018.
The Guidelines for Licensing IT Projects Clearance Compliance Assurance Firms 2024 aims to ensure that IT projects within Federal Public Institutions (FPIs) are managed and implemented according to approved and established standards, regulations, and best practices.
The instrument will regulate and professionalise the clearance of IT projects, ensuring that FPIs IT projects and initiatives are effectively conceptualised, designed, evaluated, and compliant with relevant Federal Government extant rules and standards in line with the Federal Government’s digital infrastructure goals and the Renewed Hope Agenda.
The Regulatory Guidelines for Electronic Invoicing is designed to promote transparency and deepen the use of technology for e-government automation as well as support the fiscal development of Nigeria through prudent administration of government revenue.
The guidelines will improve tax compliance, enhance efficiency and enhance standardisation and interoperability, thereby ensuring that Nigeria is ready for international digital commerce.
The Guidelines for Software Development establishes the minimum requirements for the development of software to be used by Nigerian government entities. It ensures that all software meets quality, security, and operational standards, promotes the growth of the local software testing market, and enhances the efficiency and effectiveness of government services.
The objectives of the guideline are to ensure that software is fit-for-purpose, meeting functional and non-functional requirements, and protect government institutions from operational risks through security, reliability, and performance standards.
To Participate:
These draft documents have undergone internal review and stakeholder consultations. NITDA now invites the public to contribute their feedback by reviewing the documents available for download at: https://nitda.gov.ng/draft-regulatory-instruments/
Public participation is crucial for NITDA to develop comprehensive and effective regulatory instruments.
By considering diverse perspectives, NITDA can ensure these guidelines best serve the needs of the IT industry and promote the development of a thriving digital economy in Nigeria.
Stakeholders are advised to send in their review to [email protected] on or before 26th November 2024.
inq. Nigeria, the leading provider of Edge technology solutions in Nigeria, has achieved a remarkable double win at the 8th annual Technology Innovation Awards (TIA).
Known for delivering innovative, business-relevant solutions in Edge AI and IoT, SDN/NFV for Edge Cloud, Secure Access Service Edge (SASE), and Elastic Edge, inq. Nigeria was honoured as the “MVNO Provider of the Year” and received the “Cloud Product of the Year” award for its groundbreaking product, inq.Fabric.
The TIA Awards, one of the most prestigious accolades in the tech industry, celebrates exceptional individuals and organisations at the forefront of digital transformation. This year, inq. Nigeria was acknowledged for its comprehensive impact on the Nigerian tech landscape and its commitment to innovation.
The MVNO Provider of the Year award highlights inq. Nigeria’s leadership in delivering flexible, high-performance MVNO services in an emerging market.
Through its adaptable network platform, inq. empowers licensed MVNO providers with seamless, scalable connectivity solutions for data-driven applications and IoT, bypassing traditional infrastructure needs. This enables them to meet critical network demands and integrate efficiently across diverse environments in Nigeria’s evolving market.
The Cloud Product of the Year award celebrates inq. Nigeria’s inq.Fabric, a pioneering cloud connectivity solution that automates provisioning and routing for cloud access. This software-defined networking solution provides secure, agile, and reliable connectivity, supporting rapid deployment and scalability, which is critical for multinationals, government bodies, and SMEs in Nigeria.
Reflecting on this achievement, Ifeanyi Akosionu, Managing Director of Anglophone West Africa, inq. Nigeria, expressed his gratitude, stating, “These awards reflect our commitment to excellence and innovation. At inq., we are dedicated to continuously advancing our solutions, contributing to Nigeria’s economic growth by empowering businesses to thrive.”
He highlighted inq.’s leadership in supporting Nigeria’s emerging MVNO industry, noting, “Our MVNO solutions equip licensed providers with the agility, tools, and support needed to enter the market confidently and succeed in a dynamic landscape.” Akosionu also acknowledged Fabric by inq., which offers a flexible, cloud-based environment designed to boost productivity and streamline decision-making for clients.
Akosionu attributed inq.’s success to its close partnerships with a diverse clientele, whose collaboration inspired the development of forward-thinking solutions that address critical needs in connectivity and digital transformation across Nigeria.
Akosionu also extended appreciation to inq.’s dedicated team, saying, “Our thanks go to our valued customers for their trust and to our team at inq. Nigeria, whose dedication ensures that we consistently deliver world-class solutions.”
Previously, at the 7th edition of the TIA Awards, inq. Nigeria also received recognition as “IoT Solutions Provider of the Year” and “Digital Services Provider of the Year”, further solidifying its leadership in digital and IoT solutions.
Nigeria Data Protection Commission (NDPC) has taken a significant step forward in its mission to promote data protection and privacy awareness in Nigeria by signing a Memorandum of Understanding (MoU) with Enioluwa Adeoluwa, renowned social media influencer.
L-r: Enioluwa Adeoluwa, renowned social media influencer andDr. Vincent Olatunji, national commissioner, NDPC, at the signing of the MoU
This partnership aims to harness the power of social media to educate Nigerians on the importance of data protection and privacy.
The MoU, which will last for six months and is subject to renewal, is also aimed at creating a safer digital landscape for all Nigerians.
Speaking in Abuja, Dr. Vincent Olatunji, national commissioner, NDPC, stressed that with over 40 million Nigerians using social media daily, data protection and privacy have become crucial concerns.
He noted that this number highlights the immense importance of safeguarding personal information in Nigeria’s digital landscape.
“The Nigerian government is really taking this up to ensure that Nigerians are protected. More importantly, we know that about 40 million Nigerians go online every day, which is significant considering there are about 120 million people in total. That is huge. For this reason, we have to ensure adequate measures for safety to safeguard the data within our country.
“And Nigerians know their rights under the Nigeria Data Protection Laws and understand the kind of measures they need to implement to protect their data,” he stated.
Dr. Olatunji explained that the MoU was signed to increase awareness about data protection and privacy in Nigeria, helping individuals understand their privacy rights and ensuring that data controllers and processors are aware of their obligations.
The National Commissioner emphasised that, with Enioluwa’s social media following, this partnership will aid in educating the public about the Commission’s mandate and in advancing its roadmap for awareness creation.
“This partnership with Enioluwa Adeoluwa marks a significant milestone in our efforts to promote data protection and privacy awareness in Nigeria. We believe that social media has the power to shape public discourse and influence behaviour, and we’re excited to leverage this platform to drive positive change,” Olatunji said.
On his part, Adeoluwa emphasised that his motivation for collaborating with the Commission is not driven by financial gain, but rather by a desire to contribute meaningfully to Nigeria’s development. He encouraged more young people to participate in nation-building to ensure that Nigeria can become great again.
The Nigeria Data Protection Act, which established the Commission, was signed into law on June 12, 2023, by President Bola Tinubu.
Since then, the Commission, led by Dr. Olatunji, has been working actively to ensure that every Nigerian understands his or her privacy rights.
The Commission’s mandate includes protecting the rights of data subjects, promoting data protection best practices, and ensuring compliance with data protection regulations.
NITDA, CISCO, Partner on Digital Literacy Initiative in NSUK
Gwandu Urges African Countries to Unite for 600MHz Spectrum Allocations
MTN Foundation Shines Bright at 8th Tech Innovation Awards with Multiple Wins
Dr. Aminu Maida Advocates for Smarter Data Usage at Telecoms Consumer Parliament
African Fintech Sector Grows, Enhancing Access to Finance
First Bank Proposes New Name after Upgrading Banking Platforms
Moniepoint Boosts STEM Education with Unveiling of Tosin Eniolorunda Design Lab @OAU
TD Africa to Empower 400 Young Women with TecHERdemy
Edo State Launches Data Centre in Benin
GSMA, Automotive Edge Computing Consortium Partner to Drive Forward Interoperable Connected Vehicle Services
E-Financial2 days agoAfrican Fintech Sector Grows, Enhancing Access to Finance
E-Financial3 days agoCBN’s New Directive: Banks to Trade Foreign Currency Deposits
News3 days agoNewmark Group Wins PR Excellence Award at AfriTECH 2024 Summit
Telecom3 days agoQNET Named ‘Direct Selling Company of the Year’ at AfriTECH 4.0 Awards
E-Business2 days agoNITDA Invites Public Input on Guidelines for IT Projects and Regulatory Instruments
Telecom3 days agoMartin Ekpeke Honored with Digital Reporting Excellence Award @ATAEx
Uncategorized3 days agoCloud Energy Solar Shines Bright with 200 Watts Street Lighting Bulb
News18 hours agoNITDA, CISCO, Partner on Digital Literacy Initiative in NSUK