E-Business
New Research from Trend Micro Shows Cyberattacks Relied on Substance Over Size in 2023
Trend Micro Incorporated, a global cybersecurity leader, has revealed that it blocked around 18 million email threats, almost two million malicious URLs and over four million malicious mobile apps targeted at Nigerian businesses and consumers between January and December 2023. This as threat actors deviate from big-batch attacks to focus on a narrower range of more lucrative targets.
These new patterns in the cybercrime landscape are highlighted in the Trend Micro 2023 Annual Cybersecurity Report, which presents highlights from the company’s telemetry covering the broadest attack surface view across millions of commercial and consumer clients.
“Our latest data shows that threat actors are fine-tuning their operations, shifting away from large-scale attacks, and instead focusing on a smaller range of targets but with higher victim profiles for maximum gain with minimum effort. As they continue to double down on tried and tested techniques, they are also delegating and streamlining operations — resulting in bolder, more effective strikes,” says Gareth Redelinghuys, Country Managing Director, African Cluster at Trend Micro.
Attacks focused on substance over quantity are more difficult to block
Though thousands of ransomware attacks were blocked by Trend Micro in Nigeria in 2023, year-on-year research shows that ransomware groups are working smarter instead of harder, prioritising high-value targets over volume.
There has been a general downward trend in ransomware detections, with worldwide detections from 2021 to 2023 averaging less than half of the recorded detections in 2020; however, this should not be misconstrued as a cue for security operations centres and decision-makers to lower their guards. Historically, ransomware attacks were launched in “bulk,” such as spam campaigns with malicious links, but attacks that focus on quantity can more easily be blocked.
What’s more, a continued increase in Trojan FRS threat detections globally could suggest that attackers are using more effective ways to evade preliminary detection by focusing on arrival and defense evasion techniques. Examples of this include Living-Off-The-Land Binaries and Scripts. Because these computer files are non-malicious in nature and local to the operating system, they can be used by threat actors to camouflage their attacks.
Last year, several ransomware families across the world were also observed maximising remote and intermittent encryption, as well as abusing unmonitored virtual machines to bypass Endpoint Detection and Response. Because there is less content used during intermittent encryption, for example, there is less chance of triggering detection.
Gangs are also launching bolder attacks: Prolific groups were some of the most active in 2023: Clop exploited major vulnerabilities, and BlackCat launched a new variant, while also making its extortion public by leveraging the U.S. Security and Exchange Commission’s four-day disclosure requirement to incentivise its victim to communicate more quickly with them.
Email threats – attackers are using more sophisticated ways to avoid detection
This trend towards threat actors opting for quality over quantity is equally present in the patterns observed around email threats. Though email threat detections in Nigeria decreased from more than 45 million in 2021 to 18 million in 2023, the increase in malware detection count over the same period suggests a shift in the threat landscape that finds attackers making use of more sophisticated ways to avoid detection.
Trend Micro’s data also shows a slight decrease in malicious URL detection in Nigeria from 2021 to 2023, indicating that instead of focusing on malicious links to randomly victimise users, criminals are using more targeted operations, such as BEC schemes, where emails are less likely to undergo scrutiny because of how legitimate they look.
Instead of launching attacks on a wider range of users and relying on victims clicking on malicious links in websites and emails, more sophisticated attacks are launched using specificity to trick a narrower field of high-profile victims. This also allows them to bypass early detection layers like network and email filters.
AI-powered phishing attempts are more convincing than ever
Over the course of 2023, AI showed great promise in social engineering attempts globally: its automation proved most useful in mining datasets for actionable information, while generative AI have made phishing on mass scale virtually effortless with error-free and convincing messages. The use of generative AI in phishing attempts is already branching beyond emails and texts to include persuasive audio and video ‘deepfakes’ for an even more business-affecting threat.
Imagine a company that requires live voice authorisation for purchases above a million dollars, for example. An attacker could send a real-seeming email request with a rigged phone number embedded and answer the confirmation call with a deepfaked voice to validate the transaction. These new tactics introduce the possibility of everything from stock market manipulations to democratic or wartime disinformation campaigns, or smear attacks on public figures.
The barriers to entry for techniques like these have fallen away radically with the rise of readily available app-style interfaces like HeyGen. Cybercriminals with no coding knowledge or special computing resources can produce customised high-resolution outputs that are humanly undetectable.
“Looking at the overall trend in decreasing ransomware threats, it might be tempting for local organisations to develop a false sense of security and lower their defenses. However, our research shows that these increasingly sophisticated attacks are going to become more and more difficult for businesses to detect and that they will be increasingly costly when they succeed. IT leaders must refine their processes and protocols to enable their defenses to combat persistence with efficiency,” concludes Zaheer Ebrahim, Solutions Architect, Middle East and Africa at Trend Micro.
Kaspersky has warned that fake Telegram Premium offers have been spreading globally, targeting users with phishing scams and malware disguised as alternative app versions.
These attacks aim to steal account credentials or compromise devices. The scams capitalise on Telegram Premium’s popularity and gifting feature, making it crucial for users to remain vigilant.
Telegram Premium is a subscription that offers exclusive features, such as faster download speeds, voice-to-text conversion, premium stickers, an ad-free experience, and more. Users can gift a subscription, and scammers capitalise on this gifting feature and the Telegram Premium topic in general.
One of the tricks begins when a user receives a message that appears to come from someone in their contact list, whose account may have been hacked. The message claims: “You’ve been sent a gift — a Telegram Premium subscription”.
Below, there’s a link that looks legitimate but actually redirects the user to a phishing page, prompting them to log in to Telegram. If victims scan the code or enter their credentials, their account is immediately compromised, giving scammers access to their login details, password, and potentially their authentication code.
There are other tricks referencing the Telegram Premium theme, and not all of them necessarily start with messages on Telegram. Attackers may also use other methods to send phishing links, for example, email.
For instance, perpetrators host fake “giveaways” for Telegram Premium subscriptions. Victims are lured into participating, and in a series of steps, they are directed to a phishing site where they are prompted to enter their Telegram account credentials, ultimately resulting in their account being compromised.
Another machination involves cybercriminals sending victims an invitation to download a ZIP archive that claims to contain a version of the messenger service with a “Premium” subscription. The download link redirects users to a phishing page where they are once again asked to log in to Telegram.
Yet another fraud involves distributing malicious software disguised as an alternative version of the Telegram app with a “built-in” Premium subscription. Scammers send victims links to download APK files claiming they are modified versions of the app, but they turn out to be malware.
“Phishing schemes capitalising on the Telegram Premium topic has been observed in several languages, suggesting that the perpetrators operate globally. Even if these scams haven’t yet reached a specific region, there is a probability they could eventually make their way there.
Therefore, it’s always important to remain cautious and skeptical of offers that seem too good to be true. Additionally, make sure your Telegram security and privacy settings are up to date, and your device has a robust security solution,” advises Olga Svistunova, security expert at Kaspersky.
National Identity Management Commission of Nigeria (NIMC) has said that it is looking at ways of streamlining and expanding the rollout of digital ID in Nigeria and one of the options on the table is adding iris biometrics to its digital ID enrollment.
Iris biometrics is a biometric authentication technology that uses the unique patterns of the iris to identify a person
The hint was dropped recently by Abisoye Coker-Odusote, director general and chief executive officer, NIMC, during a Digital Public Infrastructure (DPI) Journalism Fellowship training which took place in Abuja.
Speaking through a representative, the NIMC boss said this idea is among a litany of innovations which they are planning to introduce to the digital ID system in order to make it more inclusive, The Sun reports.
At the moment, biometric enrollment for the National Identification Number (NIN) in Nigeria involves face and fingerprints.
Adding the iris modality, according to the official, will make it possible for citizens with disabilities to be equally issued the important credential which is necessary to access a wide range of services in the country.
“We are exploring the use of iris recognition technology to cater to the specific needs of individuals with disabilities,” the representative was quoted as saying. Uganda is one other African country which has announced the addition of iris biometrics to its new generation biometric national ID card.
The NIMC CEO said despite the challenges the ID authority faces, its commitment to build an inclusive ID system and expand coverage remain unwavering.
She emphasized the important of the NIN as an essential tool in getting access to several services.
In order to streamline access to services, Odusote said they have been working tirelessly with their partners to enhance interoperability among government agencies to facilitate identity verification.
This, she says, will save Nigerians the stress of having to register many times with government agencies to obtain services.
The innovations envisaged by the NIMC are part of a broader reforms plan which aims to give the ID authority a new legislative framework for more efficient identity management.
It also comes at a time when the World Bank has extended its support for the country’s digital ID program by another two years, with a target to issue 180 million digital IDs by the close of the extension.
The Nigeria ID4D has pledged in the past to create the enabling environment to the issuance of NINs to persons living with disabilities.
A recent investigative report however suggests that many aged and physically challenged citizens in Nigeria go through tough times seeking the NIN.
Some have reportedly had their SIM cards blocked while others have been locked out of their bank accounts for their inability to register for a digital ID.
According to the recent Kaspersky IT Security Economics report, the majority of companies surveyed globally find the loss of productivity, securing complex tech environments, and enabling data protection to be the most concerning business issues, driven by growing IT security needs and requirements.
The Kaspersky IT Security Economics report is released every year to analyse the changes in budgets, breaches and business challenges affecting IT Security decision makers.
This report is compiled from interviews with IT and IT security professionals from organisations of different sizes and industries. The survey was carried out in 27 countries across Europe, the Asia-Pacific region, Latin America, North America, the Middle East, Turkiye and the Africa (META) region, including in Egypt, KSA, Pakistan, South Africa, Turkiye, UAE.
According to the report, downtime and lost productivity are the most concerning business problems caused by ineffective IT security, an opinion expressed by 38% of companies globally and 34% in the META region. They encounter this problem mainly because of the long-time taken to detect and remediate threats.
Data protection is another important concern that was expressed by 33% of companies globally and 34% in the META region.
Respondents were worried about this because they regularly encountered the physical loss of devices by employees and experienced leakage of data from corporate systems caused by both external and internal reasons.
Securing complex technology environments and ensuring data connectivity were also on the list of key concerns, according to 33% of respondents globally and 26% in the META region.
Among the main IT issues that cause this challenge, respondents pointed to the rising number of incidents involving non-computing connected devices and incorrect operations of cybersecurity solutions that leave systems exposed.
Additionally, difficulties in managing security across different computing platforms play a crucial role in their inability to build a reliable all-encompassing cybersecurity system.
“It is crucial for organisations to safeguard every aspect of their operations from potential breaches. Attackers no longer solely rely on zero-day exploits, as a simple click on a malicious link or a vulnerability in a contractor’s infrastructure can lead to devastating consequences.
“This underscores the idea that information security should be based on a comprehensive and systematic approach, rather than being limited to the implementation of individual point-specific measures,” comments Alexey Vovk, Information Security Director at Kaspersky.
Cybersecurity Firm Warns of Phishing Threats Targeting Telegram Premium
Nigeria Recovers $52.88m in Assets Linked to Former Petroleum Minister Diezani Alison-Madueke
TikTok Announces Plans to Cease Operations in the U.S. by January 19, 2025
Transform Your Health with QNET’s BELITE 123: The Ultimate Weight Management Solution
Nigeria Has World’s Most Affordable Data Costs – GSMA
MTN Nigeria Renews Spectrum Lease Agreement with NTEL
NERC Discloses $5.7 Million Debt Owed by International Customers for Q3 2024 Electricity Supply
A beginner’s guide to Temu: Your ultimate shopping companion
Corporate Blackmail, My Story as a Case Study, by Leo Stan Ekeh, Chairman Zinox Group
CBN, SEC Approve FCMB Group’s N147bn Rights Offer
E-Financial2 days agoSEC to Strengthen Borrowing Framework for Governments, Corporates
Telecom2 days agoBismarck, Economist Claims Planned Tariff Hike by Telcos Will Reduce Inflation
E-Business2 days agoKaspersky Reviews Main Business Headache Related to IT Security
General News1 day agoNigeria Recovers $52.88m in Assets Linked to Former Petroleum Minister Diezani Alison-Madueke
General News1 day agoTransform Your Health with QNET’s BELITE 123: The Ultimate Weight Management Solution
E-Business2 days agoFG to Add Iris Biometrics to Digital ID for more Inclusion
E-Business1 day agoCybersecurity Firm Warns of Phishing Threats Targeting Telegram Premium
News2 days agoNBS Website Still Down More than 3 Weeks after Cyber Attack