E-Business
Symantec Uncovers Plot to Attack the Internet of Things
Symantec has discovered Linux.Darlloz as a new worm engineered to attack the Internet of Things, so-called uniquely identifiable objects and their virtual representations in an Internet-like structure.
Experts have therefore warned companies and firms to take precaution because the virus is capable of attacking PCs, adding that it is targeted at the growing range of internet-connected small Linux-based devices such as home routers, set-top boxes and security cameras.
Symantec Corporation is an American computer security, backup and availability solutions Software Corporation who discovered Linux.Darlloz, and says that it “appears to be engineered to target the ‘Internet of things.'”
It exploits an old PHP vulnerability to propagate, although Symantec has not yet found it in the wild. “The attacker,” said Kaoru Hayashi in a company blog, “recently created the worm based on the Proof of Concept (PoC) code released in late Oct 2013.”
According the report by Infosecurity, this is not (yet) an actual threat to the Internet of Things. Hayashi note, “We have also verified that the attacker already hosts some variants for other architectures including ARM, PPC, MIPS and MIPSEL…. The attacker is apparently trying to maximize the infection opportunity by expanding coverage to any devices running on Linux. However, we have not confirmed attacks against non-PC devices yet.”
Davi Ottenheimer, president of flyingpenguin and EMC senior director of trust, picks up on this. “In other words, the only known attacks are on PCs,” he blogged yesterday.
“Other devices are just speculation. Given the Symantec report details, it seems quite clear the attacker is Not Targeting Hidden Devices.”
Nevertheless, Linux.Darlloz highlights the coming problems. It uses an old vulnerability long since patched; but ‘things’ are not easily updated.
“This particular threat is not a concern from an Internet of Things perspective,” PandaLabs’ technical director Luis Corrons told Infosecurity; “however it should be a heads up. We are talking about millions of devices that are usually untouched once installed: their default password is never changed, their operating system is never updated – which leads,” he added, “to millions of devices available to be hacked.
“Users,” he stressed, “have to be aware of this. Most, for example, don’t realize that IP cameras are really easy to hack; and the same goes for every device with network capabilities. People think that this happens in personal computers and could also happen every leap year in mobile devices, while the truth is that every network connected device is at risk: from our computer to our smart TV.”
David Harley, ESET senior research fellow, agrees that this is more of a warning for the future than a threat today. He notes that the attacker seems to be testing versions for other architectures, and comments, “the fact that someone is thinking about distinguishing between targets by architecture does suggest potential for much more targeted attacks in the future, with malware that discriminates not only by e_machine but by function, providing openings for other kinds of malicious activity.
Targeting devices that aren’t PCs and therefore probably don’t have an explicit malware detection mechanism would reduce the likelihood of early detection of device-specific malware. Payloads that would take advantage of device-specific functionality would require significant research and development,” he told Infosecurity, “but who, a few years ago, would have given much thought to the likelihood of malware targeting uranium enrichment centrifuges?”
The problem for the future, he says, is that things in the Internet of Things are not likely to attract much security software. “I guess we can only hope that the makers of such devices will devote more thought to building in sound security and update mechanisms for internet-connected devices. And maybe talking to security specialists about the potential intrusive or disruptive attacks against such devices in the design and planning stages.”
The federal government and the United Kingdom signed an agreement Tuesday to combat the growing threat of cyber-crime. The Memorandum of Understanding was signed following a courtesy visit by David George Hanson, minister of the home office, UK, to the Nigeria Police Force headquarters, Louis Edet House in Abuja.
Transnational crime is a big problem for both the UK and Nigeria, so the governments intend to strengthen existing collaboration efforts to crack down on cyber-criminals and protect their industries from unlawful activities.
Offences such as online fraud, identity theft, digital extortion, and ransomware , operate across many jurisdictions, and frequently necessitate sophisticated cooperation efforts, according to the two governments during a press conference.
Furthermore, Lateef Fagbemi, Nigeria’s attorney-general and minister of justice, established the Joint Case Team on Cybercrime, which aims to address the need for a coordinated and robust approach to combating cybercrime, as stated in the Cybercrimes Act of 2015, which criminalises cyber-related offences.
Hanson underlined the importance of ongoing cooperation efforts to combat international crime in a number of areas, affecting vulnerable individuals.
He said: “We need to look again at how we can build cooperation between the Federal Government, the federal police, and our police forces and National Crime Agency to take action against these international criminals, who are exploiting vulnerable people in a whole range of areas. The National Crime Agency, the Home Office Fraud Department, and the High Commission need to make sure we make a big impact on this transnational crime.”
“The collaboration between the Nigerian Police Force and National Crime Agency continues to serve as a model in international law enforcement cooperation. We have successfully conducted joint operations into many cases of cybercrimes and online fraud. With your [UK government] cooperation, we have continued to bust other criminal networks around the world,” added inspector-general of Nigerian Police Force, Kayode Adeolu Egbetokun.
Corporate Affairs Commission (CAC) has reaffirmed its commitment to enforcing business registration laws in Nigeria, warning that individuals and organizations operating unregistered businesses will face prosecution.
In a statement, the CAC emphasized that conducting business without proper registration violates the Companies and Allied Matters Act (CAMA) 2020, undermining transparency and accountability in the corporate sector.
The commission stressed that registration is not only a legal requirement but also a gateway to formal business opportunities, including access to bank loans, government grants, and partnerships.
The enforcement drive will be nationwide, targeting small and medium-sized enterprises (SMEs), online vendors, and informal traders who have failed to comply despite previous awareness campaigns and registration amnesty windows.
The CAC disclosed that enforcement teams, in collaboration with security agencies, will be deployed to identify and prosecute defaulters.
The commission urged business owners to take advantage of its simplified registration platform to regularize their status, noting that compliance will boost investor confidence and improve Nigeria’s ease of doing business. It warned that ignorance of the law will not be accepted as an excuse.
Business owners are advised to act promptly to avoid legal consequences, as the CAC moves to ensure a more structured and regulated business environment in Nigeria.
Nigerian Copyright Commission (NCC) has pledged to enforce its legal obligations to combat online intellectual property infringement and urged commercial music users to obtain proper licences from rights holders or their representatives.
The Commission stated that this ensures creators are fairly compensated, supporting the music industry’s sustainable growth.
In a statement commemorating the 2025 World Intellectual Property Day, themed “IP and Music: Feel the Best of IP,” the NCC announced plans to enforce the Copyright Act 2022, which allows for the takedown of infringing materials and blocking of websites hosting illegal content.
Signed by Mrs Ijeoma Egbunike, director of Public Affairs, the statement outlined an aggressive anti-piracy campaign in collaboration with the private sector, targeting the online environment.
Egbunike affirmed the NCC’s commitment to establishing enforceable standards for transparency, digital audits, and real-time royalty reporting to protect creators’ rights. She stated, “The NCC will continue to champion policies that support the growth of the music industry, improve the livelihoods of Nigerian musicians, and foster a culture of creativity and respect for intellectual property.”
Despite the global success of Afrobeats and other Nigerian genres, the NCC noted that many musicians face low royalty returns due to rampant digital piracy.
To address this, the Commission revised its Collective Management Regulations to enhance transparency and accountability among Collective Management Organisations (CMOs).
The NCC emphasised that proper licensing is a legal obligation and vital for Nigeria’s creative economy, stating, “Music must feel the beat of intellectual property for the full potential of creativity to be realised.”
The Commission highlighted that creators’ livelihoods depend on fair royalty compensation.
Recent enforcement measures include the NCC’s designation by the Attorney-General of the Federation as an authority under the Proceeds of Crime (Recovery and Management) Act 2022.
This, combined with the Copyright Act 2022, empowers the NCC to order takedowns and block illegal music distribution websites.
NITDA Inaugurates Start-up Consultative Forum
NFIU Alerts Nigerians of Rising Ponzi Schemes, Unregulated Crowdfunding Scams
Firm Warns Against AI Password Generation @ World Password Day
FG Partners UK to Combat Cross-border Cyber-crime
CBN Slams ₦250m Fine on Paystack Over Zap Wallet Operations
News2 days agoNBC Loses Appeal as Tribunal Upholds ₦190m Fine for Misleading Packaging
Telecom2 days agoMTN’s Talent Hunt Returns: A Stage for Nigeria’s Next Creative Stars
Telecom1 day agoEmerging Technologies, Cybersecurity, Others Form Key Focus of NCA 2003 Review
E-Financial2 days agoCBN Urges Banks to Source FX for PAPSS Settlement Through NFEM
News2 days agoUS Identifies Corruption as Key Barrier to Trade and Investment in Nigeria
General News2 days agoWanted CBEX Promoter Surrenders to EFCC Amid $1 Billion Fraud Probe
E-Business1 day agoCAC to Prosecute Business Owners Operating Without Registration
Telecom1 day agoMTN Nigeria Reports N1 Trillion Revenue