News
Zero-day in Microsoft Windows Used in Nokoyawa Ransomware Attacks
In February, Kaspersky experts discovered an attack using zero-day vulnerability in the Microsoft Common Log File System (CLFS). A cybercriminal group used an exploit developed for different versions and builds of Windows OS including Windows 11 and attempted to deploy Nokoyawa ransomware.
Microsoft assigned CVE-2023-28252 to this vulnerability and patched it on April 11th. The threat actor also attempted to execute similar elevation of privilege exploits in attacks on different small and medium-sized businesses in the Middle East and North America, and previously in Asia regions.
While most of the vulnerabilities discovered by Kaspersky are used by APTs, this one turned out to be exploited for cybercrime purposes by a sophisticated group that carries out ransomware attacks.
This group stands out by the usage of similar but unique Common Log File System (CLFS) exploits. Kaspersky has seen at least five different exploits of this kind. They were used in attacks on retail and wholesale, energy, manufacturing, healthcare, software development and other industries.
Microsoft assigned CVE-2023-28252 to the discovered zero-day. This is the Common Log File System elevation of privilege vulnerability which gets triggered by the manipulation of file format used by this subsystem.
Kaspersky researchers uncovered the vulnerability in February as a result of additional checks into a number of attempts to execute similar elevation of privilege exploits on Microsoft Windows servers belonging to different small and medium-sized businesses in the Middle Eastern and North American regions.
CVE-2023-28252 was first spotted by Kaspersky in an attack where cybercriminals attempted to deploy a newer version of Nokoyawa ransomware. Older variants of this ransomware were just “rebranded” variants of JSWorm ransomware, but in the aforementioned attack the Nokoyawa variant was quite distinct from JSWorm in terms of a codebase.
The exploit used in the attack was developed to support different versions and builds of Windows OS including Windows 11. Attackers used CVE-2023-28252 vulnerability to elevate privileges and steal credentials from the Security Account Manager (SAM) database.
“Cybercrime groups are becoming increasingly more sophisticated using zero-day exploits in their attacks. Previously it was primarily a tool of Advanced Persistent Threat actors (APTs), but now cybercriminals have the resources to acquire zero-days and routinely use them in attacks.
There are also exploit developers willing to help them and develop exploit after exploit. It’s very important for businesses to download the latest patch from Microsoft as soon as possible, and use other methods of protection, such as EDR solutions,” said Boris Larin, Lead Security Researcher with the Global Research and Analysis Team (GReAT) at Kaspersky.
A former Executive Director at Asset Management Corporation of Nigeria (AMCON), Abbas Muhammed Jega, has shed light on the financial dealings between Arik Air and Union Bank, revealing that the airline’s debt to AMCON was over N100 billion as of 2015 and remained unpaid.
Testifying as the third prosecution witness in the ongoing trial of Ahmed Kuru, former AMCON MD/CEO, and four others, Jega disclosed that AMCON acquired Arik’s loans from Union Bank and Keystone Bank, but not Zenith Bank, which was purchased after his exit.
According to Jega, AMCON discovered in a London meeting that Union Bank had sold them a guarantee rather than a loan, which was meant to cover foreign lenders in case Arik defaulted.
“We invited Arik to resolve the issue with Union Bank, but the arrangement disclosed by me never existed,” Jega said.
Jega attributed Arik’s inability to repay to over-trading, which led to their inability to service existing debts. He revealed that AMCON attempted to restructure Arik’s debt and even offered additional loan facilities to help the airline with working capital problems.
However, Arik failed to meet repayment obligations, prompting AMCON to propose two solutions: a debt equity swap and management control. Both options were rejected or delayed by Arik.
Under cross-examination, Jega confirmed that Kamilu Omokide and Captain Roy Ilegbodu played no role in the loan purchase or London meeting.
The matter has been adjourned to June 30, July 1, and July 2, 2025, for further cross-examination.
The case involves alleged financial misappropriation amounting to N76 billion and $31.5 million, with Ahmed Kuru, Kamilu Omokide, Captain Roy Ilegbodu, Union Bank Ltd, and Super Bravo Ltd as defendants, presided over by Justice Mojisola Dada.
Alhaji Mohammed Idris, Minister of Information and National Orientation is to chair the public presentation of the book Nigeria Media Renaissance: GOCOP Perspective on Online Publishing, a publication of Guild of Corporate Online Publishers (GOCOP). The event is scheduled for 110am on Tuesday June 17, 2025 at the Continental Hotel, Abuja.
President of GOCOP, Maureen Chigbo, who confirmed this development said the book presentation will be graced by eminent personalities from all walks of life, including government officials, captains of industry, media practitioners and other professionals, representatives of international organisations, directors of non-governmental organisations.
Alhaji Idris was sworn in as Minister of Information and National Orientation on August 21, 2023, following his appointment by President Bola Ahmed Tinubu. With over three decades of experience in broadcasting, newspapering, public relations, and advertising, Idris has brought a wealth of expertise to the role.
His academic background includes degrees in English Studies from Uthman Danfodio University, Sokoto, and Bayero University, Kano. As an entrepreneur, he established notable media outlets such as Blueprint, WE FM radio station, and Rapid Television in Abuja.
He is a prominent figure in professional associations such as National Institute of Public Relations, African Public Relations Association, Public Relations Consultants Association of Nigeria, and Newspaper Proprietors Association of Nigeria.
As the founder of Bifocal Communications, a leading public relations and communications consultancy, Idris has served both local and transnational corporations.
Beyond his professional endeavours, Idris is committed to social responsibility through the Mohammed Idris Malagi (MIM) Foundation, which has positively impacted many lives. As a reward for his contributions to the development of his immediate environment and beyond, The Etsu Nupe conferred “Kaakaki Nupe” on him.
A press statement by the GOCOP Publicity Secretary, Ogbuefi Remmy Nweke, quoted the GOCOP president as saying that the proceeds of the book will be used to fund the N2.3 billion GOCOP MEDIA CENTRE, a multi-purpose resource centre comprising a secretariat, a 21st Century library and event halls, among others.
Nweke further noted that the Guild of Corporate Online Publishers (GOCOP) was established to promote professionalism in online publishing, ensuring its members uphold the fundamental principles of journalism.
Comprising seasoned editors and senior journalists with distinguished career in print and electronic media, GOCOP’s membership has traversed the online publishing, recognizing its pivotal role in shaping the future of journalism globally. With 120 corporate publishers as members, GOCOP continues to uphold the highest standards of online journalism.
Advertising Regulatory Council of Nigeria (ARCON) has issued a stern warning to marketers, content creators, and social media influencers amid an alarming rise in fraudulent, AI-generated advertisements circulating across digital platforms.
Dr. Olalekan Fadolapo, director-general, ARCON, during a press briefing at its Lagos headquarters, decried the “porous” state of Nigeria’s online ad ecosystem and pledged to prosecute offenders to the fullest extent of the law.
Dr. Fadolapo opened the media parley by highlighting how easily unscrupulous operators deploy artificial intelligence tools to produce convincing—but entirely fabricated—advertisements.
“Our social media space has become so porous that people now freely post fake adverts, some of which claim outrageous and bogus benefits,” he remarked.
According to the Director-General, these deceptive campaigns often promise “miraculous cures” or “guaranteed returns” without any credible data or verifiable sources to back them.
Among the most alarming examples cited was an herbal remedy advertisement alleging to cure over 200 ailments—ranging from HIV to cancer—through a single “miracle” concoction.
“Imagine an advert claiming that a single herbal drug could cure HIV, cancer, and more than 200 other diseases,” Dr. Fadolapo said.
ARCON’s DG emphasized that such misleading advertisements not only jeopardize public health—by luring vulnerable individuals into purchasing untested or harmful products—but also undermine consumer confidence in legitimate businesses operating within advertising guidelines.
Dr. Fadolapo pointed to the regulatory vacuum that allows bad actors to exploit the anonymity of social media.
Unlike traditional broadcast or print media—where advertisements must pass through editorial or legal vetting—online platforms can be manipulated with minimal oversight.
Creating an ad using AI-powered design and voice generators, he warned, takes only minutes, making it difficult for regulators to identify the original perpetrators.
“The CBEX case is a painful reminder of what can happen when digital platforms are left unchecked,” Dr. Fadolapo said, explaining that the scheme purportedly defrauded unsuspecting Nigerians of nearly $2 trillion through slick, unregulated social media promotions.
He described how the CBEX promoters used AI-generated video testimonials, falsified financial statements, and cloned websites to entice victims with promises of triple-digit returns on cryptocurrency trades.
Telcos Threaten to Disconnect Banks over Misinformation on New USSD Charges
MTN Nigeria Plans N900Bn in Service Upgrade
NDIC Calls for Inputs to IADI Core Principles for Effective Deposit Insurance
Netflix Hikes Subscription Fees Again in Nigeria over “Market Conditions”
DSO: STBMAN Accuses NBC of Contempt, Seeks Presidential Intervention
E-Business3 days agoNIMC Plans to Register 95 Percent Nigerians by December
News3 days agoJAMB Waxes Worriedly over Rising Digital Exam Fraud
Telecom3 days ago9mobile Nigeria Inks Agreement to Roam with MTN
Telecom3 days agoIHS Nigeria Moves to Enhance G4S Secure Solutions Site Patrols and Increase Operational Efficiency with Patrol Vehicles
E-Business2 days agoAXIAN Telecom Invests in Jumia Post-MTN Era
Telecom3 days agoBanks, Telcos to Start Deducting USSD Charges from Airtime Today
- E-Financial2 days ago
UBA Compiles with NCC, to Deduct USSD from Customers’ Accounts
E-Financial3 days agoFitch Upgrades Fidelity Bank’s National Rating to ‘A+(nga)’, Affirms Long-Term IDR at ‘B’