News
Stolen Credentials Selling on Dark Web for Price of 3 Litres of Fuel – Report
HP has released The Evolution of Cybercrime: Why the Dark Web is Supercharging the Threat Landscape and How to Fight Back – an HP Wolf Security Report.
The findings show cybercrime is being supercharged through “plug and play” malware kits that make it easier than ever to launch attacks. Cyber syndicates are collaborating with amateur attackers to target businesses, putting our online world at risk.
The HP Wolf Security threat team worked with Forensic Pathways, a leading group of global forensic professionals, on a three-month dark web investigation, scraping and analysing over 35 million cybercriminal marketplaces and forum posts to understand how cybercriminals operate, gain trust, and build reputation.
Key findings include:
– Malware is cheap and readily available – Over three quarters (76%) of malware advertisements listed, and 91% of exploits (i.e., code that gives attackers control over systems by taking advantage of software bugs), retail for under ₦4,923.17. The average cost of compromised Remote Desktop Protocol credentials is just ₦2,092.35.
Vendors are selling products in bundles, with plug-and-play malware kits, malware-as-a-service, tutorials, and mentoring services reducing the need for technical skills and experience to conduct complex, targeted attacks – in fact, just 2-3% of threat actors today are advanced coders.
-The irony of ‘honor amongst cyber-thieves’ – Much like the legitimate online retail world, trust and reputation are ironically essential parts of cybercriminal commerce: 77% of cybercriminal marketplaces analysed require a vendor bond – a license to sell – which can cost up to ₦1,230,793.
Eighty-five per cent of these use escrow payments, and 92% have a third-party dispute resolution service. Every marketplace provides vendor feedback scores. Cybercriminals also try to stay a step ahead of law enforcement by transferring reputation between websites – as the average lifespan of a dark net Tor website is only 55 days.
– Popular software is giving cybercriminals a foot in the door – Cybercriminals are focusing on finding gaps in software that will allow them to get a foothold and take control of systems by targeting known bugs and vulnerabilities in popular software.
Examples include the Windows operating system, Microsoft Office, web content management systems, and web and mail servers. Kits that exploit vulnerabilities in niche systems command the highest prices (typically ranging from ₦393,853.76 – ₦1,723,110.20). Zero Days (vulnerabilities that are not yet publicly known) are retailing at tens of thousands of dollars on dark web markets.
“Unfortunately, it’s never been easier to be a cybercriminal. Complex attacks previously required serious skills, knowledge and resource. Now the technology and training is available for the price of 3 litres of fuel.
“And whether it’s having your company and customer data exposed, deliveries delayed or even a hospital appointment cancelled, the explosion in cybercrime affects us all,” comments report author Alex Holland, Senior Malware Analyst at HP Inc.
“At the heart of this is ransomware, which has created a new cybercriminal ecosystem rewarding smaller players with a slice of the profits.
“This is creating a cybercrime factory line, churning out attacks that can be very hard to defend against and putting the businesses we all rely on in the crosshairs,” Holland adds.
HP consulted with a panel of experts from cybersecurity and academia – including ex-black hat hacker Michael ‘Mafia Boy’ Calce and authored criminologist, Dr. Mike McGuire – to understand how cybercrime has evolved and what businesses can do to better protect themselves against the threats of today and tomorrow.
They warned that businesses should prepare for destructive data denial attacks, increasingly targeted cyber campaigns, and cybercriminals using emerging technologies like artificial intelligence to challenge organisations’ data integrity.
To protect against current and future threats, the report offers up the following advice for businesses:
Master the basics to reduce cybercriminals’ chances: Follow best practices, such as multi-factor authentication and patch management; reduce your attack surface from top attack vectors like email, web browsing and file downloads; and prioritise self-healing hardware to boost resilience.
Focus on winning the game: plan for the worst; limit risk posed by your people and partners by putting processes in place to vet supplier security and educate workforces on social engineering; and be process-oriented and rehearse responses to attacks so you can identify problems, make improvements and be better prepared.
Cybercrime is a team sport. Cybersecurity must be too: talk to your peers to share threat information and intelligence in real-time; use threat intelligence and be proactive in horizon scanning by monitoring open discussions on underground forums; and work with third-party security services to uncover weak spots and critical risks that need addressing.
“We all need to do more to fight the growing cybercrime machine,” says Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc. “For individuals, this means becoming cyber aware.
Most attacks start with a click of a mouse, so thinking before you click is always important. But giving yourself a safety net by buying technology that can mitigate and recover from the impact of bad clicks is even better.”
“For businesses, it’s important to build resiliency and shut off as many common attack routes as possible,” Pratt continues.
“For example, cybercriminals study patches on release to reverse engineer the vulnerability being patched and can rapidly create exploits to use before organisations have patched. So, speeding up patch management is important.
“Many of the most common categories of threat such as those delivered via email and the web can be fully neutralised through techniques such as threat containment and isolation, greatly reducing an organisation’s attack surface regardless of whether the vulnerabilities are patched or not.”
The Nigerian Insurers Association has urged the House Committee on Capital Market and Institutions to respect the constitutional separation of powers as it carries out a probe on over 20 insurance firms.
In a statement on Tuesday night, the Director General/Chief Executive Officer of NIA, Mrs Bola Odukale, said the decision of NIA and the affected firms to approach the court was to seek clarity on the constitutional limits of the House Committee’s probe.
It would be recalled that the House of Representatives on Monday is investigating no fewer than 25 insurance companies operating in the country for various financial infractions spanning financial reporting, claims settlement, premium remittance, and issuance of policies.
The Chairman, House Sub-Committee on Capital Market and Institutions, Kwamoti Laori, during a meeting with the management of the insurance companies at the National Assembly Complex in Abuja, said the meeting was convened following the receipt of a petition on infractions by the insurance companies.
In the statement, Odukale said, “The Association wishes to state unequivocally that all actions taken by the NIA and the affected member companies in response to the Committee’s invitations and pronouncements were based entirely on legal advice by its Solicitors. It was on the firm instruction of legal counsel that recourse was made to the courts.
“The objective of approaching the Court is to seek judicial guidance on the legality, propriety, and constitutional limits of the Committee’s intervention in order to safeguard institutional integrity, uphold regulatory independence, and ensure that legislative oversight remains within the bounds of law.
“The Court action seeks to determine whether the current posture of the Committee reflects an exercise of legislative judgment, which, by constitutional design, is the exclusive province of statutory regulators, such as the National Insurance Commission, Securities and Exchange Commission, Nigerian Exchange, Financial Reporting Council, Nigeria Data Protection Commission, and the National Information Technology Development Agency.
“This raises serious questions about legislative overreach and an erosion of the doctrine of separation of powers, a cornerstone of Nigeria’s constitutional democracy.”
Odukale maintained that the NIA was committed to lawful and constructive engagement with all arms of government, provided that such engagement respects the autonomy of statutory regulators and the boundaries established by the Constitution.
“The NIA will continue to provide its full support to all member companies while upholding the principles of legal compliance and sector-wide integrity,” Odukale concluded.
17 of the companies that went to court were represented by their lawyer, Mr Abimbola Kayode, at the meeting with the committee.
Finance ministers and development partners from the Horn of Africa have called for enhanced digital integration to boost trade, drive economic growth and promote regional stability during the 25th Ministerial Meeting of the Horn of Africa Initiative (HoAI).
Held in Nairobi, on July 14, the meeting was co-chaired by the African Development Bank’s Vice President for Regional Development, Integration and Business Delivery, Nnenna Nwabufo and Somalia’s Minister of Finance, Bihi Iman Egeh. Discussions underscored the critical role of digital integration in reducing trade barriers, boosting government service delivery and creating employment — particularly for the region’s youth.
“Digital technologies are shaping today’s economy and tomorrow’s industries. By embedding these technologies into our programs, we can not only improve inclusion but also leapfrog outdated development models,” said Nwabufo.
She called for digital integration a “central enabler” in each of the Horn of Africa Initiative’s pillars – trade, infrastructure, resilience, and human capital,
Learning through experience
Drawing from global and regional success stories, speakers highlighted the transformative potential of technology-led development. The ministers pointed to the Philippines as a strong example, where ICT has generated millions of jobs in business process outsourcing. Similarly, Kenya’s fintech innovation—especially the success of M-PESA—was cited as a model for scaling digital financial services across the region.
Participants urged governments to proactively foster digital ecosystems by capitalizing on the demographic dividend, identifying infrastructure upgrades, tighter regulatory reforms, and digital skills trainings as priorities to enable broader participation in the digital economy.
Minister Egeh reiterated the need for more coordinated regional efforts to create the enabling environment required for accelerated digital integration and expansion. He referenced the HoAI Digital Policy Matrix, adopted in 2023 which provides a blueprint on how to address key obstacles to achieving effective digital integration across the region.
Barack Makokha, Kenya’s Cabinet Secretary for National Treasury, underscored the importance of regionally-aligned public private partnerships and advocated for blended financing to reduce investment risk and expand digital access in underserved areas.
World Bank Vice President for Eastern and Southern Africa, Ndiame Diop, called for a comprehensive multi-pronged approach, combining cross-border coordination, large-scale financing, robust policy support, and digital infrastructure investments. He pointed out that such measures could transform digital integration into, “a powerful engine of economic transformation” for the Horn of Africa—ensuring no one is left behind in the digital era.
The meeting concluded with a shared recognition that sustained political will and the determination to implement a multifaceted approach are essential to unlocking the region’s economic potential and driving long-term growth.
The event also welcomed observers from the East African Community, Agence française de développement, and Shelter Afrique, reflecting strong regional and international backing for the HoAI in the development community.
Central Securities Clearing System Plc (CSCS), Nigeria’s capital market infrastructure provider, has launched its Custodian Portal, a user-centric digital solution designed to optimise custodian operations through intuitive, secure and efficient features.
Haruna Jalo-Waziri, Chief Executive Officer (CEO), CSCS, announced this in a statement on Monday.
The CSCS is a Public Limited Company with a diversified shareholder base, which serves as the Central Securities Depository for the Nigerian Capital Market.
It serves as the Central Depository for Equities, Commercial Papers, Corporate Bonds, Sub-National Bonds, certain Sovereign Bonds like the FGN Sukuk and the FGN Savings Bond, Equity-traded Funds, Real Estate Investment Trusts, Mutual funds and Commodities.
Jalo-Waziri said that the custodian portal offered a streamlined experience for market participants with powerful tools that facilitate comprehensive portfolio and trade management, document tracking, share transfer operations, client symbol search, and real-time access to vital data.
He explained that the portal, designed to operate through a flexible subscription-based model, empowered users to manage their records effortlessly and securely through convenient payment channels such as GTPay and Paystack.
According to him, “Digital transformation remains at the core of our strategy to enhance the efficiency, transparency and accessibility of Nigeria’s capital market services.
“The custodian portal is a significant leap in that direction, offering custodians a centralised platform to manage critical processes in real-time.
“We are excited about the value this innovation brings to our stakeholders, and we will continue to evolve the platform in line with users’ needs and industry trends.”
The CEO also explained that the portal was designed with user experience in mind with feature tools like portfolio viewing and downloads in PDF or Excel format.
He further said that it also featured tracking of stock movements across date ranges, inbox messaging and request tracking, as well as robust user management capabilities including role assignment and status tracking.
Similarly, the Divisional Head, Business Technology and Digital Innovation, CSCS Plc, Tobe Nnadozie, said that the portal aligned with CSCS’s drive to automate the market.
“In addition to the normal features, the platform is a part of an omnichannel platform for custodians, and includes API services.
“It also connects to the market-wide workflow, which CSCS has built to ensure secured communication and approvals across all major stakeholders in the market.
“The platform is well secured with best-of-breed cybersecurity solutions and our SOC,” he said.
The Custodian Portal reinforces CSCS’s commitment to leveraging technology to streamline back-office functions and support a more agile, data-driven capital market ecosystem.
All custodians in the Nigerian capital market have now been successfully on-boarded on the Custodian Portal, marking a significant milestone in CSCS’s ongoing drive to enhance collaboration, standardise operational processes, and promote digital adoption across the market.
Guinness Nigeria Sustains Growth Momentum in Q4 Amid Market Headwinds
Moody’s Upgrades Ecobank’s Outlook to Stable
Airtel Africa Grew Customer Base to 169m as Q1 Revenue Hits $1.4 Billion
SEC Grants “No objection” to N323Bn First Holdco Shares Deal
FintechNGR Rejigs Nigeria Fintech Week with Multi-location Model
E-Financial3 days agoKuda Unveils New Wallet for Multiple Currencies
Telecom3 days agoTelcos Resume SIM Card Sales after 2-Week Halt
Telecom3 days agoNigeria, Others Achieve 84% Adult Mobile Phones Penetration
E-Business3 days agoHow AI Alert by Airtel is Transforming Mobile Security in Africa
E-Business3 days agoNITDA, API Partner Against Harmful Online Content
Telecom2 days agoGlo Launches Nigeria’s First-of-its-kind Device Protection Plan
Telecom2 days agoTelcos: How and Why Network Services have Been Poor
News3 days agoHorn of Africa Leaders Seek Enhanced Digital Integration for Increased Regional Growth