E-Business
Ransomware: Microsoft Gives Details of Attack, Decries Govts’ Inaction
Microsoft has stressed the need for urgent collective action to keep people safe online, following the world’s biggest cyberattack at the weekend, sending countries into ‘disaster recovery mode.
In a blog post, ‘Lessons from last week’s cyberattack’, Brad Smith, president and chief legal officer at Microsoft, said the global tech giant takes every single cyberattack on a Windows system seriously.
Starting first in the United Kingdom and Spain, the malicious “WannaCrypt” software quickly spread globally, blocking customers from their data unless they paid a ransom using Bitcoin.
The WannaCrypt exploits used in the attack were drawn from the exploits stolen from the National Security Agency, or NSA, in the United States, Smith said. “That theft was publicly reported earlier this year. A month prior, on March 14, Microsoft had released a security update to patch this vulnerability and protect our customers. While this protected newer Windows systems and computers that had enabled Windows Update to apply this latest update, many computers remained unpatched globally. As a result, hospitals, businesses, governments, and computers at homes were affected.
“All of this provides the broadest example yet of so-called “ransomware,” which is only one type of cyberattack”.
He lamented that, unfortunately, consumers and business leaders have become familiar with terms like “zero day” and “phishing” that are part of the broad array of tools used to attack individuals and infrastructure.
“We take every single cyberattack on a Windows system seriously, and we’ve been working around the clock since Friday to help all our customers who have been affected by this incident. This included a decision to take additional steps to assist users with older systems that are no longer supported. Clearly, responding to this attack and helping those affected needs to be our most immediate priority.
“At the same time, it’s already apparent that there will be broader and important lessons from the ‘WannaCrypt’ attack we’ll need to consider to avoid these types of attacks in the future. I see three areas where this event provides an opportunity for Microsoft and the industry to improve.
“As a technology company, we at Microsoft have the first responsibility to address these issues. We increasingly are among the first responders to attacks on the internet. We have more than 3,500 security engineers at the company, and we’re working comprehensively to address cybersecurity threats.
“This includes new security functionality across our entire software platform, including constant updates to our Advanced Threat Protection service to detect and disrupt new cyberattacks. In this instance, this included the development and release of the patch in March, a prompt update on Friday to Windows Defender to detect the WannaCrypt attack, and work by our customer support personnel to help customers afflicted by the attack.
“But as this attack demonstrates, there is no cause for celebration. We’ll assess this attack, ask what lessons we can learn, and apply these to strengthen our capabilities. Working through our Microsoft Threat Intelligence Center (MSTIC) and Digital Crimes Unit, we’ll also share what we learn with law enforcement agencies, governments, and other customers around the world.
“Second, this attack demonstrates the degree to which cybersecurity has become a shared responsibility between tech companies and customers. The fact that so many computers remained vulnerable two months after the release of a patch illustrates this aspect.
“As cybercriminals become more sophisticated, there is simply no way for customers to protect themselves against threats unless they update their systems. Otherwise they’re literally fighting the problems of the present with tools from the past. This attack is a powerful reminder that information technology basics like keeping computers current and patched are a high responsibility for everyone, and it’s something every top executive should support.
“At the same time, we have a clear understanding of the complexity and diversity of today’s IT infrastructure, and how updates can be a formidable practical challenge for many customers. Today, we use robust testing and analytics to enable rapid updates into IT infrastructure, and we are dedicated to developing further steps to help ensure security updates are applied immediately to all IT environments.
“Finally, this attack provides yet another example of why the stockpiling of vulnerabilities by governments is such a problem. This is an emerging pattern in 2017. We have seen vulnerabilities stored by the CIA show up on WikiLeaks, and now this vulnerability stolen from the NSA has affected customers around the world.
“Repeatedly, exploits in the hands of governments have leaked into the public domain and caused widespread damage. An equivalent scenario with conventional weapons would be the U.S. military having some of its Tomahawk missiles stolen. And this most recent attack represents a completely unintended but disconcerting link between the two most serious forms of cybersecurity threats in the world today – nation-state action and organized criminal action”.
Smith noted that the governments of the world should treat the attack as a wake-up call. “They need to take a different approach and adhere in cyberspace to the same rules applied to weapons in the physical world. We need governments to consider the damage to civilians that comes from hoarding these vulnerabilities and the use of these exploits.
“This is one reason we called in February for a new ‘Digital Geneva Convention’ to govern these issues, including a new requirement for governments to report vulnerabilities to vendors, rather than stockpile, sell, or exploit them. And it’s why we’ve pledged our support for defending every customer everywhere in the face of cyberattacks, regardless of their nationality. This weekend, whether it’s in London, New York, Moscow, Delhi, Sao Paulo, or Beijing, we’re putting this principle into action and working with customers around the world.
“We should take from this recent attack a renewed determination for more urgent collective action. We need the tech sector, customers, and governments to work together to protect against cybersecurity attacks. More action is needed, and it’s needed now. In this sense, the WannaCrypt attack is a wake-up call for all of us. We recognize our responsibility to help answer this call, and Microsoft is committed to doing its part”.
Brad Smith is Microsoft’s president and chief legal officer. Smith plays a key role in representing the company externally and in leading the company’s work on a number of critical issues including privacy, security, accessibility, environmental sustainability and digital inclusion, among others.
“MyLagos App,” which was launched with fanfare by the Lagos State Government in collaboration with MTN Nigeria has remained unavailable for download on app stores, raising questions about its immediate accessibility.
Hours after its official introduction on March 13, a search on Google PlayStore for the app returned the message, “No results for MyLagos App.”
Similarly, attempts to locate it on the Apple Store yielded no results, prompting concerns over the rollout’s status.
The digital platform was introduced as a comprehensive solution to enhance city navigation and improve the overall experience for Lagos residents.
It was touted to provide essential features, including real-time traffic updates, personalized navigation, emergency services, utility payments, business listings, and tourism information.
This reporter’s attempt to download the app proved unsuccessful. Furthermore, tests by Lagos-based individuals mirrored these findings, suggesting the app may not yet be publicly accessible.
The absence of the app has sparked speculation: could it be a work in progress, or was its availability restricted post-launch for undisclosed reasons?
Dr. Obafemi Hamzat, Lagos State Deputy Governor, described the app as a revolutionary tool aimed at improving governance and service delivery.
“Technology has evolved from being a luxury to a necessity. In our fast-paced world, effectively utilising technology can significantly enhance governance, improve service delivery, and simplify the lives of every resident in this vibrant state.
“With the launch of the MyLagos App, Lagos State is poised to remain at the forefront of digital transformation, not just in Nigeria but across Africa,” he said.
Abdulhakeem Giwa, manager of Digital Channel Management, MTN Nigeria, echoed this sentiment, highlighting the app’s potential to transform urban living and enhance navigation for residents.
While the app’s unavailability casts doubt on its immediate implementation, stakeholders remain optimistic about its promised benefits once fully operational. Whether technical challenges or strategic decisions have delayed its rollout remains unclear.
National Social Investment Management System (NASIMS) has leaked millions of federal government records in a major system oversight which could be exploited by cyber criminals.
NASIMS is the central management platform for the administration and coordination of Social Investment Programmes under the Federal Ministry of Humanitarian Affairs, Disaster Management and Social Development
The major leak exposed everything from home addresses to work backgrounds of tens of millions of Nigerians
According to the Cybernews research team, the exposed AWS S3 bucket stored over 23 million files, including passports, birth certificates, educational certificates, and N-Power-submitted applications.
N-Power is a social welfare scheme to combat youth unemployment. N-Power applicants use the NASIMS platform to apply to take part in the program.
“The implications of exposing 23 million application-related documents of N-Power candidates could be severe for the affected individuals. Identity theft, fraud, and targeted phishing attacks are the most likely risks for the leaks’ victims,” Cybernews research team said.
According to Cybernews research team, “Worryingly, the instance remains open to the public, even after multiple attempts to reach NASIMS administrators and relevant authorities in Nigeria. We have also reached out to the ministry behind NASIMS for a comment and will update the article once we receive a reply”
What data leaked, and why is it dangerous?
Documents stored on the exposed instance include different sets of citizens’ data. However, the team surmised that the leak revealed:
Full names
Dates of birth
Places of birth
National Identification Number (NIN)
Email addresses
Phone numbers
Home addresses
Work background
Education background
Exposing sensitive and personal data poses numerous threats to the individuals involved.
Most pressingly, attackers might utilize the information for identity theft and various fraud schemes. For one, malicious actors could try opening fraudulent bank accounts or use stolen identities for illicit activities, masking their own IDs.
“Another way attackers can exploit similar data sets is by exploiting the identities to access financial services or execute unauthorized transactions, potentially causing long-term financial damage to the victims,” Cybernews research team said.
Cybercrooks could also exploit the leak to carry out targeted phishing and social engineering attacks.
For example, malicious actors could attempt to masquerade as legitimate organizations in order to deceive individuals into providing even more sensitive data – such as login credentials – or downloading malware.
“The implications of exposing 23 million application-related documents of N-Power candidates could be severe for the affected individuals. Identity theft, fraud, and targeted phishing attacks are the most likely risks for the leaks’ victims.”
The leaks’ nature empowers attackers to craft spear-phishing attacks custom-made for each individual or group of individuals. Such attacks are hard to distinguish, as they often include targets’ personal details and other data points meant to lure in unsuspecting victims.
“Criminals could use the exposed data to offer fake job opportunities or promise assistance with the N-Power application process in exchange for payments or additional personal information, exploiting the candidates’ vulnerabilities,” the team explained.
Additional attack vectors involve risks to victims’ physical safety. For example, criminals could exploit leaked data to locate and target victims for various malicious purposes, such as stalking, harassment, or even burglary.
To avoid similar leaks in the future, Cybernews research team advised:
Change the access controls to restrict public access and secure the bucket. Update permissions to ensure that only authorized users or services have the necessary access.
Monitor retrospectively access logs to assess whether the bucket has been accessed by unauthorized actors.
Enable server-side encryption to protect data at rest.
Use AWS Key Management Service (KMS) to manage encryption keys securely.
Implement SSL/TLS for data in transit to ensure secure communication.
Consider implementing security’s best practices, such as regular audits, automated security checks, and employee training.
MTN Group, in collaboration with the Lagos State Government (LASG), has launched MyLagosApp, an innovative mobile application designed to improve productivity, enhance connectivity, and transform the lifestyle of Lagos residents.
It also aims to provide a centralised digital hub for accessing essential services, fostering a more efficient and connected Lagos.
Speaking at the official inauguration in Lagos, Karl Toriola, chief executive officer MTN Nigeria, described the app as a one-stop platform for information, services, entertainment, and hospitality.
He highlighted its role in facilitating e-governance and providing essential services to both residents and visitors.
“This app offers access to various services, including restaurant and accommodation reservations, transport options—both land and water—library access, and e-governance solutions. It is designed to simplify life for Lagosians while promoting efficiency and productivity,” Toriola said.
He emphasised that technological innovations like MyLagosApp drive economic growth by increasing productivity and improving societal well-being. He noted that Lagos, classified as a hyper-city with over 20 million residents, has the potential to become Africa’s most important city.
Toriola also revealed that Lagos State’s economy is larger than that of Kenya and reaffirmed MTN’s commitment to deepening investment in Nigeria. He disclosed plans to build a new headquarters in Eko Atlantic City and establish West Africa’s most advanced data centre, addressing the region’s need for large-scale tech infrastructure.
At a Fireside Chat, Oluwaseun Osiyemi, Lagos State Commissioner for Transport, noted that MyLagosApp would support the state’s multimodal transport policy, leveraging user data and feedback to enhance urban mobility.
Aisha Mumuni, chief digital officer, MTN, reiterated the company’s dedication to seamless connectivity despite power challenges, calling for increased collaboration to boost digital literacy.
Tokunbo Wahab, Commissioner for Environment and Water Resources, highlighted Lagos’ daily waste production of 13,000 tonnes and suggested that the app could aid waste management through advocacy, enforcement, and regulation.
MyLagos App Unavailable despite Launch with Fanfare
Airtel Launches AI Spam Alert in Nigeria
Allegations of Fraud against us Unfounded, False — First Bank
Nigeria’s Cash Payments to Decline 32% by 2030 on Digital Transaction Surge
NCC, ALTON, LASIMRA Engage to Strengthen Telecom Infrastructure in Lagos
General News2 days agoTony Elumelu Foundation Set to Announce 2025 Cohort of TEF Entrepreneurship Programme
E-Business3 days agoMillions of Nigerians @ Risk as NASIMS Leaks over 23m FG Records
Telecom2 days agoAirtel Launches AI Spam Alert in Nigeria
Broadcasting3 days agoSpotify Earnings for Nigerian Artists Exceed ₦58 Billion in 2024
E-Financial2 days agoAllegations of Fraud against us Unfounded, False — First Bank
E-Business2 days agoMyLagos App Unavailable despite Launch with Fanfare
E-Business3 days agoKaspersky Uncovers Cybercriminals Blackmailing YouTube Creators to Spread Cryptocurrency Mining Malware
Telecom3 days agoNANS Issues Fresh Protest Notice over Telecom Tariff Hike