News
Stolen Credentials Selling on Dark Web for Price of 3 Litres of Fuel – Report
HP has released The Evolution of Cybercrime: Why the Dark Web is Supercharging the Threat Landscape and How to Fight Back – an HP Wolf Security Report.
The findings show cybercrime is being supercharged through “plug and play” malware kits that make it easier than ever to launch attacks. Cyber syndicates are collaborating with amateur attackers to target businesses, putting our online world at risk.
The HP Wolf Security threat team worked with Forensic Pathways, a leading group of global forensic professionals, on a three-month dark web investigation, scraping and analysing over 35 million cybercriminal marketplaces and forum posts to understand how cybercriminals operate, gain trust, and build reputation.
Key findings include:
– Malware is cheap and readily available – Over three quarters (76%) of malware advertisements listed, and 91% of exploits (i.e., code that gives attackers control over systems by taking advantage of software bugs), retail for under ₦4,923.17. The average cost of compromised Remote Desktop Protocol credentials is just ₦2,092.35.
Vendors are selling products in bundles, with plug-and-play malware kits, malware-as-a-service, tutorials, and mentoring services reducing the need for technical skills and experience to conduct complex, targeted attacks – in fact, just 2-3% of threat actors today are advanced coders.
-The irony of ‘honor amongst cyber-thieves’ – Much like the legitimate online retail world, trust and reputation are ironically essential parts of cybercriminal commerce: 77% of cybercriminal marketplaces analysed require a vendor bond – a license to sell – which can cost up to ₦1,230,793.
Eighty-five per cent of these use escrow payments, and 92% have a third-party dispute resolution service. Every marketplace provides vendor feedback scores. Cybercriminals also try to stay a step ahead of law enforcement by transferring reputation between websites – as the average lifespan of a dark net Tor website is only 55 days.
– Popular software is giving cybercriminals a foot in the door – Cybercriminals are focusing on finding gaps in software that will allow them to get a foothold and take control of systems by targeting known bugs and vulnerabilities in popular software.
Examples include the Windows operating system, Microsoft Office, web content management systems, and web and mail servers. Kits that exploit vulnerabilities in niche systems command the highest prices (typically ranging from ₦393,853.76 – ₦1,723,110.20). Zero Days (vulnerabilities that are not yet publicly known) are retailing at tens of thousands of dollars on dark web markets.
“Unfortunately, it’s never been easier to be a cybercriminal. Complex attacks previously required serious skills, knowledge and resource. Now the technology and training is available for the price of 3 litres of fuel.
“And whether it’s having your company and customer data exposed, deliveries delayed or even a hospital appointment cancelled, the explosion in cybercrime affects us all,” comments report author Alex Holland, Senior Malware Analyst at HP Inc.
“At the heart of this is ransomware, which has created a new cybercriminal ecosystem rewarding smaller players with a slice of the profits.
“This is creating a cybercrime factory line, churning out attacks that can be very hard to defend against and putting the businesses we all rely on in the crosshairs,” Holland adds.
HP consulted with a panel of experts from cybersecurity and academia – including ex-black hat hacker Michael ‘Mafia Boy’ Calce and authored criminologist, Dr. Mike McGuire – to understand how cybercrime has evolved and what businesses can do to better protect themselves against the threats of today and tomorrow.
They warned that businesses should prepare for destructive data denial attacks, increasingly targeted cyber campaigns, and cybercriminals using emerging technologies like artificial intelligence to challenge organisations’ data integrity.
To protect against current and future threats, the report offers up the following advice for businesses:
Master the basics to reduce cybercriminals’ chances: Follow best practices, such as multi-factor authentication and patch management; reduce your attack surface from top attack vectors like email, web browsing and file downloads; and prioritise self-healing hardware to boost resilience.
Focus on winning the game: plan for the worst; limit risk posed by your people and partners by putting processes in place to vet supplier security and educate workforces on social engineering; and be process-oriented and rehearse responses to attacks so you can identify problems, make improvements and be better prepared.
Cybercrime is a team sport. Cybersecurity must be too: talk to your peers to share threat information and intelligence in real-time; use threat intelligence and be proactive in horizon scanning by monitoring open discussions on underground forums; and work with third-party security services to uncover weak spots and critical risks that need addressing.
“We all need to do more to fight the growing cybercrime machine,” says Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc. “For individuals, this means becoming cyber aware.
Most attacks start with a click of a mouse, so thinking before you click is always important. But giving yourself a safety net by buying technology that can mitigate and recover from the impact of bad clicks is even better.”
“For businesses, it’s important to build resiliency and shut off as many common attack routes as possible,” Pratt continues.
“For example, cybercriminals study patches on release to reverse engineer the vulnerability being patched and can rapidly create exploits to use before organisations have patched. So, speeding up patch management is important.
“Many of the most common categories of threat such as those delivered via email and the web can be fully neutralised through techniques such as threat containment and isolation, greatly reducing an organisation’s attack surface regardless of whether the vulnerabilities are patched or not.”
The Lagos State Governor, His Excellency Babajide Sanwo-Olu has commended Africa’s leading e-commerce platform, Jumia Nigeria, for its giant strides and in the growth of the country’s e-commerce sector, as well as its unique contributions to its economic development.
He said that Jumia has earned its place as a major brand, with its growth and trajectory in the country’s e-commerce ecosystem over the years which, he said, has made it a household name. He urged the company to not only strive to maintain its excellent service standards, but to also work towards improving them.
The Governor who was speaking during a courtesy visit by the management of Jumia Nigeria to the State House in Marina on Thursday March 27, reaffirmed the strategic importance of the company in the economic development of Lagos State and Nigeria, especially in job creation.
He restated his administration’s commitment in ensuring that Lagos State remains environmentally friendly for businesses to grow.
“Our administration has always prioritized creating an enabling environment for businesses to thrive. Through various initiatives, we have strengthened the ease of doing business, and fostered innovation to drive economic growth, and we will continue to support businesses and create opportunities that will aid in their growth”, Sanwo-Olu said.
Governor Sanwo-Olu said that the Lagos State Government remains open to collaborations with the private sector to enhance service delivery, infrastructure development, and create opportunities for residents, with the aim of building a resilient and sustainable future.
He said the administration recognises the importance of working with the private sector to achieve its goals of improving the lives of its citizens.
Speaking also, the Chief Executive Officer of Jumia Nigeria, Sunil Natraj, thanked the governor for creating an enabling environment in the state for businesses like Jumia to grow. He stated Jumia’s commitment to contributing towards the growth and development of the state, and the country.
Natraj said the company has made tremendous strides from its early days as a tech start-up in Lagos and has grown to become the number one e-commerce platform in Nigeria, with a presence in nine African countries. He said the company presently employs hundreds of Nigerians directly, and thousands more indirectly as independent sales agents and partners.
He restated Jumia Nigeria’s commitment to providing excellent service, focusing on delivering exceptional value and fostering long-term relationships with its customers around the country.
Among other things, he said the company is actively working to enhance customer experience, aiming to simplify the e-commerce process, making it easier for customers to navigate and shop online.
According to him, Jumia aims to transform everyday life in Africa by making it easier for consumers to access goods and services conveniently and affordably, adding that the company is focused on expanding access to retail across the country.
Nigerian National Petroleum Company (NNPC) Limited has announced its readiness for the capital market with an Initial Public Offer (IPO) now in the final stage.
Mr. Olugbenga Oluwaniyi, chief finance and investor relations officer (CFIO), NNPC, stated this at a consultative meeting with partners at the NNPC Towers, Abuja, on Thursday.
He said the move aligned with the provisions of the Petroleum Industry Act, 2021.
He said NNPCL was currently engaging with prospective partners in an exercise tagged: “NNPC Ltd. IPO Beauty Parade” in line with capital market regulations before the commencement of the IPO.
According to the CFIO, the aim of the IPO Beauty Parade is to assess potential partners and determine in what ways they could be of support to the company.
He listed the areas of partnership required to include Investor Relations, IPO Readiness Advisors, and Investment Bank Partners.
He said the company with the best offer in terms of project partnership would be selected for each of the three categories.
The PIA provides for NNPCL to list its shares in the capital market in line with the provisions of the Company and Allied Matters Act (CAMA) 1990.
Federal High Court in the Bwari Judicial Division has thrown out a case of fraud filed against the Chairman of Zinox Technologies, Mr. Leo Stan Ekeh, his wife, Chioma Ekeh, and 11 others.
Femi Falana and Leo Stan Ekeh
This is the umpteenth time.
The latest is the dismissal of the suit by Justice Akpan Okon Ebong of the FCT High Court, who struck out the case filed by Mr. Femi Falana SAN, purporting to act on a fiat donated to him by Mr. Lateef Fagbemi SAN, attorney general and minister of Justice of the Federal Republic of Nigeria, against Mr. Leo Stan Ekeh, chairman of Zinox Technologies, and 12 others.
The other defendants are Mr. Chris Eze Ozims, Oyebode Folashade, Charles Adigwe, Obilo Onuoha, Agartha Ukoha, Anya O. Anya, Femi Dosumu, Nnenna Kalu, Admas Digital Technologies Limited, Technology Distributions Limited and Zinox Technologies Limited.
In the suit No. FCT/HC/CR/985/24 filed in November 2024, Falana, on behalf of his client, Benjamin Joseph, the CEO of Citadel Oracle Concept Limited, an Ibadan-based computer firm, filed charges against Ekeh, 9 other individuals and 3 companies before the Federal High Court in Abuja for allegedly diverting N162,247,513.80 being payment for laptop supply contract at the Federal Inland Revenue Service (FIRS) Headquarters which Technology Distribution Ltd (now TD Africa), the biggest tech equipment distributor in sub-Saharan Africa supplied on behalf of Citadel in 2012.
However, in the certified true copy of the judgment dated March 20, 2025, Justice Ebong ruled as follows: “It is my conclusion based on the foregoing that this charge (No. FCT/HC/CR/985/2024, Federal Republic of Nigeria v Leo Stan Ekeh and 12 ORS) constitutes a gross abuse of court process and is liable to dismissal. I accordingly hereby dismiss it.”
Before arriving at his judgment, which has put the final nail in the coffin of a case that other courts had also dismissed in the past as dead on arrival, Justice Ebong considered the outcome of previous cases and petitions filed by Mr. Joseph, none of which was in his favour.
Justice Ebong said: “One intriguing aspect of this matter is that none of the law enforcement agencies involved in the investigation of the nominal complainant’s (Mr. Joseph) numerous petitions has found merit in any of his allegations against the defendants. When called upon before Senchi J. (Justice Danlami Z. Senchi) to prove his said allegations to the court, he failed to turn up in court. One then wonders on what premise he wants to maintain this campaign of persecution against the defendants.”
Previous judgments on the matter had established that rather than being the culprit, Ekeh and the 12 others were actually the victims of a failed money diversion scheme plotted by Mr. Joseph and Citadel.
When contacted, one of the defendants, Mr. Chris Eze Ozims, a lawyer, said: “This ruling truly reflects our consistent position on the allegations, and it is good that we have been vindicated, once more, by a competent high court.”
He asserted that the judgment of Justice Ebong was consistent with the position of the defendants and in tandem with the rulings of other judges who had previously adjudicated on the same matter.
Mr. Matthew Burkaa SAN, chief counsel to the defendants, described the judgment as a victory for integrity and the rule of law.
Court papers showed that Falana’s suit was based on the same claims that various courts had dismissed in the past as falsehood and baseless. The case arose from a contract between Citadel and Technology Distributions Limited over the supply of computers to the Federal Inland Revenue Service (FIRS), a project fully funded by Technology Distributions and has no bearing whatsoever with Zinox and its promoter, Mr Leo Stan Ekeh.
It will be recalled that Mr. Joseph had lost the case and its adjunct suits at different courts in the past. In his petition to the police in 2013, police authorities discovered that Mr. Joseph provided false information to the police, prompting the Inspector General of Police to charge him for false information in charge no.CR/216/16.
In another case filed by the EFCC in his instance against his partner, Princess Kama, in charge no. FCT/HC/CR/244/2018, Honorable Justice Danlami Z. Senchi of the FCT High Court (as he then was) dismissed as false all the allegations made by Benjamin Joseph, and imposed the sum of N20 million as damages against him for false petitioning in relation to these same allegations.
Earlier court papers showed that Joseph, in his statement on oath in suit No:LD/4335/2014 in the High Court of Justice, Lagos State, dated June 28, 2019, averred that his company, Citadel, did not execute any contract with FIRS and that he was not aware that a contract had been awarded to Citadel.
In his deposition under oath, Joseph claimed that Citadel “did not at any time execute any contract for the FIRS and neither did the 2nd defendant (Princess O. Kama) who is its agent in respect of the contract it bid for with the FIRS deliver/release any documents to the Claimant (Citadel) indicating that the contract it bid for, or any other contract was awarded to it by the FIRS or any other body.”
However, a letter from the FIRS addressed to the chamber of Afe Babalola & Co dated February 11, 2014 (FIRS/PD/GDS/2559) and signed by one Idrissa Kogo, Head Legal Department, stated: “Contrary to your client’s claim that they knew nothing about the execution of the contract awarded to them and that they did not receive any payment for the execution of the contract, our record reveals otherwise.
“Your client instructed FIRS through a letter dated December 13, 2012, to deal with Princess O. Kama (Your client’s agent) in relation to the contract. Through three separate letters dated December 20, 2012, your client instructed FIRS to pay to the client’s account with Access Bank plc. Please note that FIRS acted in compliance with your client’s instruction and with due diligence,” the FIRS letter stated.
The FIRS letter was a response to inquiry by Afe Babalola Chamber, lawyers to Citadel Oracle Concept Ltd and its MD, Mr. Benjamin Joseph, at that time.
The current charges filed by Falana on the basis of a fiat from the Attorney General is the third in a row as Mr Joseph had earlier filed charge no.CR/469/2022, which was struck out by Honorable Justice C. O. Oba of the FCT High Court, by an order dated November 8, 2022.
Determined to push through with his case, Mr Joseph filed the same charges before Honorable Justice A. S. Adepoju of the FCT High Court, and the charges were, once again, struck out by the Honorable Court on March 19, 2024, with Honorable Justice Adepoju holding that: “This matter was brought in dead, extinct and should be confined into the dustbin of history…I hold that the instant suit is an abuse of the process of court, and it is hereby struck out accordingly.”
Titan Trust Bank Selects Oracle FSS for Core and Digital Banking Technology
IMF Appoints Elumelu, Nigerian Businessman to Advisory Council
NCS to Launch Electronic System for Cash Declarations at Airports
IHS Nigeria Hosts Telecom Industry Stakeholders to Discuss Protection of Critical National Infrastructure in Lagos State
Aquaterra Energy Secures Multi-million-dollar well Intervention Contract with Intrepid Energy in Nigeria
Telecom2 days agoAgain, Labour Fumes, Threatens Shutdown of Telcos over Non-Implementation of 15 Percent Tariff Reduction
News2 days agoNNPC Ready to Go to Capital Market for IPO- CFIO
E-Business2 days agoFG Launches Online Visa Approval Centre
E-Business2 days agoQNET Disassociates From Fraudulent Academy in Abuja, Supports EFCC Arrest
E-Business2 days agoFirm Discovers Sophisticated Chrome Zero-day Exploit Used in Active Attacks
E-Financial2 days agoFintech, Remittances Anchor Africa’s Booming Payments System
E-Business2 days agoNITDA Partners JICA to Launch Nigeria-Japan Startup Hub
Telecom2 days agoEverything You Need to Know About MTN’s MIP 2025 Fellowship Webinar