Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

News

Zero-day in Microsoft Windows Used in Nokoyawa Ransomware Attacks

Published

on

Kindly share this post

In February, Kaspersky experts discovered an attack using zero-day vulnerability in the Microsoft Common Log File System (CLFS). A cybercriminal group used an exploit developed for different versions and builds of Windows OS including Windows 11 and attempted to deploy Nokoyawa ransomware.

Microsoft assigned CVE-2023-28252 to this vulnerability and patched it on April 11th. The threat actor also attempted to execute similar elevation of privilege exploits in attacks on different small and medium-sized businesses in the Middle East and North America, and previously in Asia regions.

While most of the vulnerabilities discovered by Kaspersky are used by APTs, this one turned out to be exploited for cybercrime purposes by a sophisticated group that carries out ransomware attacks.

This group stands out by the usage of similar but unique Common Log File System (CLFS) exploits.  Kaspersky has seen at least five different exploits of this kind. They were used in attacks on retail and wholesale, energy, manufacturing, healthcare, software development and other industries.

Microsoft assigned CVE-2023-28252 to the discovered zero-day. This is the Common Log File System elevation of privilege vulnerability which gets triggered by the manipulation of file format used by this subsystem.

Kaspersky researchers uncovered the vulnerability in February as a result of additional checks into a number of attempts to execute similar elevation of privilege exploits on Microsoft Windows servers belonging to different small and medium-sized businesses in the Middle Eastern and North American regions.

CVE-2023-28252 was first spotted by Kaspersky in an attack where cybercriminals attempted to deploy a newer version of Nokoyawa ransomware. Older variants of this ransomware were just “rebranded” variants of JSWorm ransomware, but in the aforementioned attack the Nokoyawa variant was quite distinct from JSWorm in terms of a codebase.

The exploit used in the attack was developed to support different versions and builds of Windows OS including Windows 11. Attackers used CVE-2023-28252 vulnerability to elevate privileges and steal credentials from the Security Account Manager (SAM) database.

“Cybercrime groups are becoming increasingly more sophisticated using zero-day exploits in their attacks. Previously it was primarily a tool of Advanced Persistent Threat actors (APTs), but now cybercriminals have the resources to acquire zero-days and routinely use them in attacks.

There are also exploit developers willing to help them and develop exploit after exploit. It’s very important for businesses to download the latest patch from Microsoft as soon as possible, and use other methods of protection, such as EDR solutions,” said Boris Larin, Lead Security Researcher with the Global Research and Analysis Team (GReAT) at Kaspersky.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

Abbas Jega, Ex-AMCON ED, Testifies, Says Arik Never Cooperated With AMCON

Published

on

Kindly share this post

A former Executive Director at Asset Management Corporation of Nigeria (AMCON), Abbas Muhammed Jega, has shed light on the financial dealings between Arik Air and Union Bank, revealing that the airline’s debt to AMCON was over N100 billion as of 2015 and remained unpaid.

Testifying as the third prosecution witness in the ongoing trial of Ahmed Kuru, former AMCON MD/CEO, and four others, Jega disclosed that AMCON acquired Arik’s loans from Union Bank and Keystone Bank, but not Zenith Bank, which was purchased after his exit.

According to Jega, AMCON discovered in a London meeting that Union Bank had sold them a guarantee rather than a loan, which was meant to cover foreign lenders in case Arik defaulted.

“We invited Arik to resolve the issue with Union Bank, but the arrangement disclosed by me never existed,” Jega said.

Jega attributed Arik’s inability to repay to over-trading, which led to their inability to service existing debts. He revealed that AMCON attempted to restructure Arik’s debt and even offered additional loan facilities to help the airline with working capital problems.

However, Arik failed to meet repayment obligations, prompting AMCON to propose two solutions: a debt equity swap and management control. Both options were rejected or delayed by Arik.

Under cross-examination, Jega confirmed that Kamilu Omokide and Captain Roy Ilegbodu played no role in the loan purchase or London meeting.

The matter has been adjourned to June 30, July 1, and July 2, 2025, for further cross-examination.

The case involves alleged financial misappropriation amounting to N76 billion and $31.5 million, with Ahmed Kuru, Kamilu Omokide, Captain Roy Ilegbodu, Union Bank Ltd, and Super Bravo Ltd as defendants, presided over by Justice Mojisola Dada.


Kindly share this post
Continue Reading

News

Minister of Information to Chair GOCOP Book Launch in Abuja

Published

on

Kindly share this post

Alhaji Mohammed Idris, Minister of Information and National Orientation is to chair the public presentation of the book Nigeria Media Renaissance: GOCOP Perspective on Online Publishing, a publication of Guild of Corporate Online Publishers (GOCOP). The event is scheduled for 110am on Tuesday June 17, 2025 at the Continental Hotel, Abuja.

President of GOCOP, Maureen Chigbo, who confirmed this development said the book presentation will be graced by eminent personalities from all walks of life, including government officials, captains of industry, media practitioners and other professionals, representatives of international organisations, directors of non-governmental organisations.

Alhaji Idris was sworn in as Minister of Information and National Orientation on August 21, 2023, following his appointment by President Bola Ahmed Tinubu. With over three decades of experience in broadcasting, newspapering, public relations, and advertising, Idris has brought a wealth of expertise to the role.

His academic background includes degrees in English Studies from Uthman Danfodio University, Sokoto, and Bayero University, Kano. As an entrepreneur, he established notable media outlets such as Blueprint, WE FM radio station, and Rapid Television in Abuja.

He is a prominent figure in professional associations such as National Institute of Public Relations, African Public Relations Association, Public Relations Consultants Association of Nigeria, and Newspaper Proprietors Association of Nigeria.

As the founder of Bifocal Communications, a leading public relations and communications consultancy, Idris has served both local and transnational corporations.

Beyond his professional endeavours, Idris is committed to social responsibility through the Mohammed Idris Malagi (MIM) Foundation, which has positively impacted many lives. As a reward for his contributions to the development of his immediate environment and beyond, The Etsu Nupe conferred “Kaakaki Nupe” on him.

A press statement by the GOCOP Publicity Secretary, Ogbuefi Remmy Nweke, quoted the GOCOP president as saying that the proceeds of the book will be used to fund the N2.3 billion GOCOP MEDIA CENTRE, a multi-purpose resource centre comprising a secretariat, a 21st Century library and event halls, among others.

Nweke further noted that the Guild of Corporate Online Publishers (GOCOP) was established to promote professionalism in online publishing, ensuring its members uphold the fundamental principles of journalism.

Comprising seasoned editors and senior journalists with distinguished career in print and electronic media, GOCOP’s membership has traversed the online publishing, recognizing its pivotal role in shaping the future of journalism globally. With 120 corporate publishers as members, GOCOP continues to uphold the highest standards of online journalism.


Kindly share this post
Continue Reading

News

ARCON to Crackdown on AI-Generated Fake Ads

Published

on

Kindly share this post

Advertising Regulatory Council of Nigeria (ARCON) has issued a stern warning to marketers, content creators, and social media influencers amid an alarming rise in fraudulent, AI-generated advertisements circulating across digital platforms.

ARCON to Crackdown on AI-Generated Fake Ads

Dr. Olalekan Fadolapo, director-general, ARCON, during a press briefing at its Lagos headquarters, decried the “porous” state of Nigeria’s online ad ecosystem and pledged to prosecute offenders to the fullest extent of the law.

Dr. Fadolapo opened the media parley by highlighting how easily unscrupulous operators deploy artificial intelligence tools to produce convincing—but entirely fabricated—advertisements.

“Our social media space has become so porous that people now freely post fake adverts, some of which claim outrageous and bogus benefits,” he remarked.

According to the Director-General, these deceptive campaigns often promise “miraculous cures” or “guaranteed returns” without any credible data or verifiable sources to back them.

Among the most alarming examples cited was an herbal remedy advertisement alleging to cure over 200 ailments—ranging from HIV to cancer—through a single “miracle” concoction.

“Imagine an advert claiming that a single herbal drug could cure HIV, cancer, and more than 200 other diseases,” Dr. Fadolapo said.

ARCON’s DG emphasized that such misleading advertisements not only jeopardize public health—by luring vulnerable individuals into purchasing untested or harmful products—but also undermine consumer confidence in legitimate businesses operating within advertising guidelines.

Dr. Fadolapo pointed to the regulatory vacuum that allows bad actors to exploit the anonymity of social media.

Unlike traditional broadcast or print media—where advertisements must pass through editorial or legal vetting—online platforms can be manipulated with minimal oversight.

Creating an ad using AI-powered design and voice generators, he warned, takes only minutes, making it difficult for regulators to identify the original perpetrators.

“The CBEX case is a painful reminder of what can happen when digital platforms are left unchecked,” Dr. Fadolapo said, explaining that the scheme purportedly defrauded unsuspecting Nigerians of nearly $2 trillion through slick, unregulated social media promotions.

He described how the CBEX promoters used AI-generated video testimonials, falsified financial statements, and cloned websites to entice victims with promises of triple-digit returns on cryptocurrency trades.


Kindly share this post
Continue Reading

Trending