E-Business
Necro Trojan Sneaks into Google Play with up to 11m Victims
In late August 2024, Kaspersky experts identified a new version of the Necro Trojan that had infiltrated several popular applications on Google Play and modified applications on unofficial platforms, including Spotify, WhatsApp and Minecraft.
Necro is an Android downloader that downloads and runs other malicious components on infected devices based on commands issued by the Trojan’s creators. Kaspersky’s solutions recorded* Necro attacks targeting users in Russia, Brazil, Vietnam, Ecuador, and Mexico as part of this malicious campaign.
Capabilities of the Necro Trojan
The variant of Necro discovered by Kaspersky experts can download modules onto infected smartphones that display ads in invisible windows and click on them, download executable files, install third-party applications, and open arbitrary links in invisible WebView windows to execute JavaScript code.
Based on its technical characteristics, the Trojan is also likely capable of subscribing users to paid services. Additionally, the downloaded modules allow attackers to redirect Internet traffic through the victim’s device. This enables cybercriminals to visit prohibited or desired resources using the victim’s device, potentially utilising it as part of a proxy botnet.
Infected Apps on Unofficial Platforms
The first discovery of Necro by company’s experts was in a modified version of Spotify Plus. The creators of the app claimed that it was safe for devices and offered additional features not found in the official music streaming app.
Subsequently, experts also found a modified version of WhatsApp containing the Necro downloader, followed by infected versions of popular games, including Minecraft, Stumble Guys, and Car Parking Multiplayer. Necro was embedded into these applications via an unverified ad module.
Infected Apps on Google Play
The Necro campaign extended beyond third-party platforms and was also discovered on Google Play. The malicious downloader was found in the Wuta Camera app and Max Browser.
According to Google Play statistics, the combined downloads of these apps exceeded 11 million. On this platform, Necro was also distributed via an unverified ad module. Following Kaspersky’s report to Google, the malicious code was removed from Wuta Camera, and Max Browser was taken down from the store. However, users still risk encountering Necro on unofficial platforms.
“Users often download unofficial, modified apps to bypass restrictions in official applications or to access additional free features. Cybercriminals exploit this behaviour, spreading malware with these apps as there is no moderation on third-party platforms,” comments Dmitry Kalinin, cybersecurity expert at Kaspersky.
“It is also noteworthy that the version of Necro embedded in these applications used steganography techniques, hiding its payload within images to remain undetected – a very rare method for mobile malware.”
E-Business
Nigeria, Ghana Africa’s Digital Hubs Hardest Hit by Cyber Attacks – Report
Nigeria, a major digital hub in Africa, has one of the highest volume of cyberattacks in West Africa, coming in at 2,721 for the first half of 2024.
Attacks on the computer-related services field were prevalent, as in Ghana, with 867 incidents, but local beauty salons were second on the list for Nigeria, enduring 206 incidents, followed by data processing hosting companies at 116.
“The growing complexity of distributed denial of service (DDoS) threats seen worldwide, including a notable increase in both attack frequency and sophistication, is clearly reflected in Nigeria. The country experienced more complex attacks than others within the region, with 23 different attacks vendors seen in one single attack, from TCP and CLDAP (Connection-less Lightweight Directory Access Protocol) attacks to Domain Name System (DNS) amplification and many more,” Bryan Hamman, regional director for Africa at NETSCOUT, adding that the country stood out third on the list.
Ghana, however, led the region in both the frequency and diversity of cyber threats for the first half of 2024, facing a high volume of DDoS attacks directed at industries including computer services and telecommunications.
In fact, according to NETSCOUT’s 1H2024 DDoS Threat Intelligence Report (TIR), the country was subjected to a total of 4,753 attacks over the six months, of which 2,759 were aimed at computer-related services businesses. Wireless telecommunications carriers (except satellite) received the second highest number of attacks, at 110, with full-service restaurants also noted as another vertical industry under fire. Furthermore, Ghana experienced by far the highest volume attack in West Africa, with the maximum bandwidth of its largest DDoS attack measuring 314.25 Mbps.
Known for an economic resilience that is driven by agriculture and mining, Guinea surprisingly took second spot in the NETSCOUT results for West Africa in terms of attack frequency, with 2,918 incidents listed. Wireless telecommunications carriers bore the brunt of these strikes, which were mostly TCP-type attacks.
Côte d’Ivoire and Liberia both faced similar attack frequencies, with 1,598 and 1,515 incidents noted respectively. The two countries also experienced similarities in the types of attacks vectors used – mostly TCP-related – as well as the sector that was hardest hit, which was wireless telecommunications for both.
Again, wireless telecommunications carriers were identified as the prime targets for threat actors in Benin (196 incidents), Senegal (107), Mali (32) and Cameroon (16).
“This is in line with NETSCOUT’s global Threat Intelligence Report figures, which measured attacks on the sector at 834,471 for the first part of 2024, a substantial 34 per cent increase on the figures seen for 2H 2023, which was calculated at 622,295. We believe this points to an objective by cybercriminals to disrupt critical communication infrastructure,” Hamman said.
E-Business
NITDA Invites Public Input on Guidelines for IT Projects and Regulatory Instruments
The National Information Technology Development Agency (NITDA) is seeking public feedback on several draft documents related to Information Technology (IT) projects and regulations. This aligns with NITDA’s commitment to an open and collaborative rulemaking.
The legal Documents Open for Public Review are:
- Guidelines for Licensing IT Projects Clearance Compliance Assurance Firms 2024;
- Regulatory Guidelines for Electronic Invoicing in Nigeria;
- Guidelines for Software Development; and
- Guidelines for Software Testing.
NITDA is also proposing the amendment of the Guidelines for Clearance of IT Projects for Federal Public Institutions (FPIs). guidelines, initially issued in 2018.
The Guidelines for Licensing IT Projects Clearance Compliance Assurance Firms 2024 aims to ensure that IT projects within Federal Public Institutions (FPIs) are managed and implemented according to approved and established standards, regulations, and best practices.
The instrument will regulate and professionalise the clearance of IT projects, ensuring that FPIs IT projects and initiatives are effectively conceptualised, designed, evaluated, and compliant with relevant Federal Government extant rules and standards in line with the Federal Government’s digital infrastructure goals and the Renewed Hope Agenda.
The Regulatory Guidelines for Electronic Invoicing is designed to promote transparency and deepen the use of technology for e-government automation as well as support the fiscal development of Nigeria through prudent administration of government revenue.
The guidelines will improve tax compliance, enhance efficiency and enhance standardisation and interoperability, thereby ensuring that Nigeria is ready for international digital commerce.
The Guidelines for Software Development establishes the minimum requirements for the development of software to be used by Nigerian government entities. It ensures that all software meets quality, security, and operational standards, promotes the growth of the local software testing market, and enhances the efficiency and effectiveness of government services.
The objectives of the guideline are to ensure that software is fit-for-purpose, meeting functional and non-functional requirements, and protect government institutions from operational risks through security, reliability, and performance standards.
To Participate:
These draft documents have undergone internal review and stakeholder consultations. NITDA now invites the public to contribute their feedback by reviewing the documents available for download at: https://nitda.gov.ng/draft-regulatory-instruments/
Public participation is crucial for NITDA to develop comprehensive and effective regulatory instruments.
By considering diverse perspectives, NITDA can ensure these guidelines best serve the needs of the IT industry and promote the development of a thriving digital economy in Nigeria.
Stakeholders are advised to send in their review to [email protected] on or before 26th November 2024.
E-Business
inq. Nigeria Celebrates Double Win at Tech Innovation Awards (TIA) 2024
inq. Nigeria, the leading provider of Edge technology solutions in Nigeria, has achieved a remarkable double win at the 8th annual Technology Innovation Awards (TIA).
Known for delivering innovative, business-relevant solutions in Edge AI and IoT, SDN/NFV for Edge Cloud, Secure Access Service Edge (SASE), and Elastic Edge, inq. Nigeria was honoured as the “MVNO Provider of the Year” and received the “Cloud Product of the Year” award for its groundbreaking product, inq.Fabric.
The TIA Awards, one of the most prestigious accolades in the tech industry, celebrates exceptional individuals and organisations at the forefront of digital transformation. This year, inq. Nigeria was acknowledged for its comprehensive impact on the Nigerian tech landscape and its commitment to innovation.
The MVNO Provider of the Year award highlights inq. Nigeria’s leadership in delivering flexible, high-performance MVNO services in an emerging market.
Through its adaptable network platform, inq. empowers licensed MVNO providers with seamless, scalable connectivity solutions for data-driven applications and IoT, bypassing traditional infrastructure needs. This enables them to meet critical network demands and integrate efficiently across diverse environments in Nigeria’s evolving market.
The Cloud Product of the Year award celebrates inq. Nigeria’s inq.Fabric, a pioneering cloud connectivity solution that automates provisioning and routing for cloud access. This software-defined networking solution provides secure, agile, and reliable connectivity, supporting rapid deployment and scalability, which is critical for multinationals, government bodies, and SMEs in Nigeria.
Reflecting on this achievement, Ifeanyi Akosionu, Managing Director of Anglophone West Africa, inq. Nigeria, expressed his gratitude, stating, “These awards reflect our commitment to excellence and innovation. At inq., we are dedicated to continuously advancing our solutions, contributing to Nigeria’s economic growth by empowering businesses to thrive.”
He highlighted inq.’s leadership in supporting Nigeria’s emerging MVNO industry, noting, “Our MVNO solutions equip licensed providers with the agility, tools, and support needed to enter the market confidently and succeed in a dynamic landscape.” Akosionu also acknowledged Fabric by inq., which offers a flexible, cloud-based environment designed to boost productivity and streamline decision-making for clients.
Akosionu attributed inq.’s success to its close partnerships with a diverse clientele, whose collaboration inspired the development of forward-thinking solutions that address critical needs in connectivity and digital transformation across Nigeria.
Akosionu also extended appreciation to inq.’s dedicated team, saying, “Our thanks go to our valued customers for their trust and to our team at inq. Nigeria, whose dedication ensures that we consistently deliver world-class solutions.”
Previously, at the 7th edition of the TIA Awards, inq. Nigeria also received recognition as “IoT Solutions Provider of the Year” and “Digital Services Provider of the Year”, further solidifying its leadership in digital and IoT solutions.
- News2 days ago
NITDA, CISCO, Partner on Digital Literacy Initiative in NSUK
- Broadcasting20 hours ago
Echefu Launches LUFT TV, another Pay TV after Failed TSTV Project
- Telecom2 days ago
Dr. Aminu Maida Advocates for Smarter Data Usage at Telecoms Consumer Parliament
- Telecom2 days ago
Gwandu Urges African Countries to Unite for 600MHz Spectrum Allocations
- Telecom2 days ago
MTN Foundation Shines Bright at 8th Tech Innovation Awards with Multiple Wins
- E-Business20 hours ago
Nigeria, Ghana Africa’s Digital Hubs Hardest Hit by Cyber Attacks – Report
- News20 hours ago
Senate to Increase EFCC Budget to Fuel Anti-Corruption Drive
- News20 hours ago
TETFund Puts Education Tax Revenue @N1.5trn in 2024