Connect with us

News

2017: Why Malicious Apps in Official Markets May Increase- ESET

Published

on

esset.jpg
Kindly share this post

ESET, dedicated to developing high-performing security solutions for home users and corporate customers, detecting and disabling all known and emerging forms of malware, has warned that common occurrence in recent times has been the emergence of malicious apps in the official iOS and Android app repositories.

The Company described the phenomenon as first seemed extremely rare but that has unfortunately become more common over time.

This trend has even affected the Apple App Store, which theoretically has more controls than the Google Play Store for Android, Denise Giusto Bilić, ESET Security Researcher, said in a 2017 IT security trends report released by the company recently.

Bilić identified that as for publishing applications, numerous factors encourage the existence of malicious apps in Google’s app store.

According to her, not only is Android a favorite target for cybercriminals because it has the largest number of potential victims, but the speed at which apps are published on the Play Store also makes it a potential target for many attackers trying to propagate their threats.

Advertisement

She said, “With Android, any developer can create an account with a one-off payment of USD 25, upload an application, and have it published within 24 hours. In contrast, the cost of iOS development membership is more than USD 99 per year and the app approval waiting period can last weeks.

“So while improvements to Bouncer (Google’s module for automatic analysis and malware detection) are made on a regular basis, and manual code analysis is being strengthened, the huge number of new apps that are created daily and the haste with which they are incorporated into the market makes accurate analysis of each one difficult”.

Bilić added that it is possible that in order to reduce future cases of malware introduced into its official app store, Google will need to modify one of these variables—or both—to devote more resources to intensive analysis of a reduced number of applications and/or extend the time needed for the approval process, undermining the speed of publication.

“One of the several strategies Google might use to reduce the number of candidate applications could be raising the price for developers’ accounts.

“What is certain is that so long as the policy framework for publication in the Play Store remains unchanged and none of these corrective measures are taken, we can expect to see a greater amount of malware in official stores in 2017 as attackers double down on this new modus operandi and find new mechanisms to evade detection.

Advertisement

“With regard to this last point, it should be noted that there are many techniques that render mobile malware detection difficult: time bombs, dynamic code executed through reflection, packers, encryption, obfuscated strings, scripts in other programming languages for remote downloading of malicious code, new forms of C&C, anti-emulation, rootkits, etc.

“But above all, cybercriminals are betting and will continue to bet on social engineering, waiting attentively for the official launch of popular apps to distribute their own fake versions, as happened recently with Pokémon GO, Prisma and Dubsmash.

“The speed with which these malicious applications rack up hundreds and even thousands of downloads is a cause for concern among users of the platform. What will happen when cybercriminals decide to greatly increase the complexity of their creations? Users’ different approaches with respect to the installation of applications also plays counterproductive role when it comes to Android”.

Bilić emphasized that the ease with which someone can modify an APK obtained from the official store in order to inject malicious code and distribute it through websites or fake app stores, added to the ease with which users install files from untrustworthy sources, results in a higher rate of malware detection (and in the worst case, infestation) compared to other mobile operating systems.

 

Advertisement

Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

News

World Bank Debars United Aviation Services, Owner over Fraudulent Activities

Published

on

Kindly share this post

The World Bank Group has announced the 31-month debarments of United Aviation Services Limited (UNASEL), a transportation services company based in Nigeria, and Air Vice Marshal Alkali Mamu, its owner and president, “in connection with fraudulent practices under the Enhancing Niger Northeastern Connectivity Project,” according to a press release issued by the multilateral development bank.

World Bank Debars United Aviation Services, Owner over Fraudulent Activities

The statement said that the project aims to enhance connectivity and road safety along the Zinder-Agadez Road section and improve access to basic socioeconomic infrastructure for selected communities in that road section.

However, according to the statement: “UNASEL and Mr. Mamu presented false experience documents in a prequalification application to qualify for a contract under the project. This was a fraudulent practice under the World Bank’s sanctions framework.”

“The debarments make UNASEL and Mr. Mamu ineligible to participate in projects and operations financed by Bank Group institutions. The debarments are part of two settlement agreements under which UNASEL and Mr. Mamu admit culpability for the underlying sanctionable practices,” it added.

The statement further said: “Per the Bank Group Sanctioning Guidelines, the settlement agreements provide for a reduced period of debarment in light of UNASEL and Mr. Mamu’s cooperation.

Advertisement

As a condition for release from sanction under the terms of the settlement agreements, UNASEL and Mr. Mamu commit to developing and implementing integrity compliance measures that reflect the relevant principles set out in the Bank Group Integrity Compliance Guidelines, and Mr. Mamu further agrees to complete corporate ethics training.

UNASEL and Mr. Mamu also commit to continue to fully cooperate with the Bank Group’s Integrity Vice Presidency.

“The debarments of UNA SEL and Mr. Mamu qualify for cross-debarment by other multilateral development banks under the Agreement for Mutual Enforcement of Debarment Decisions that was signed on April 9, 2010.”

Kindly share this post
Continue Reading

News

Enugu State Approves Land for ITF’s Digital Fabrication Centre

Published

on

Kindly share this post

Governor Peter Mbah of Enugu State, has approved the allocation of a parcel of land in Enugu, the state capital, for the establishment of a state-of-the-art Digital Fabrication Centre by the Industrial Training Fund.

Mbah announced this while receiving a delegation from the Industrial Training Fund on a courtesy visit to the Government House, Enugu.

The ITF disclosed this on Friday in a statement signed by its Director of Press and Public Relations, Thomas Ngor.

According to the statement, Mbah described the proposed project as timely and aligned with his administration’s vision of transforming Enugu into a leading destination for investment, innovation and technology-driven industrial development.

He noted that the future of economic prosperity lies in deliberate investments in human capital and emerging technologies, adding that the state has continued to create an enabling environment for innovation, enterprise and sustainable growth.

Advertisement

The governor explained that his administration has made technical education compulsory in the state’s basic education system, with emphasis on digital literacy, robotics and mechatronics to prepare learners for the future of work.

According to him, many traditional trades are now driven by digital technologies, making it imperative to equip young people with relevant technical competencies that will enable them to compete globally and contribute meaningfully to economic development.

Governor Mbah further disclosed that his administration has built smart schools across the state, equipped with robotics centres, mechatronics laboratories and other modern learning facilities, to prepare youths for the evolving global economy.

He noted that artificial intelligence is expected to contribute about $20tn to the global economy in the coming years.

He therefore stressed that the state must be intentional about upskilling its citizens, adding that the establishment of the ITF Digital Fabrication Centre will significantly strengthen the state’s drive to build a knowledge-based economy, foster innovation, promote local manufacturing and create employment opportunities for its growing youthful population.

Advertisement

Earlier, Afiz Ogun, the Director-General of the ITF, who led the delegation, said that upon his appointment by President Bola Tinubu, he was mandated to upskill Nigerian artisans to international standards.

He explained that the Fund subsequently repositioned its technical and vocational skills development efforts through strategic initiatives, including the Skill-Up Artisans Programme, which is designed to train, certify and license Nigerian artisans to international standards.

Ogun disclosed that the Fund had already established a Digital Fabrication Centre in Ikeja, Lagos, with the capacity to produce more than 400 different products. He therefore requested the allocation of land in Enugu State to establish a similar centre with the same production capacity.

According to him, the initiative is aimed at promoting industrialisation, reducing dependence on imports and preparing Nigerians for opportunities in the Fourth Industrial Revolution.

He also reaffirmed the Fund’s readiness to enter into public-private partnerships that will transform Nigeria’s artisanal ecosystem.

Advertisement

Ogun further noted that digital technologies, including artificial intelligence, robotics and computer-aided manufacturing, are rapidly transforming the global economy, making it imperative for Nigeria to deliberately invest in upskilling its workforce to remain globally competitive.

The ITF delegation was later conducted on a guided tour of facilities at one of the smart schools established by the Enugu State Government.

Kindly share this post
Continue Reading

News

Glovo Pioneers AI Quick-Commerce

Published

on

Kindly share this post

Glovo, a multi-category tech company, has announced its integration into the generative AI ecosystem with the launch of its “Shopping Assistant” for ChatGPT and Claude. Users can now discover retail products, compare prices, and seamlessly order any item using natural conversational language with the AI systems.

The Glovo experience inside such platforms introduces a conversational commerce model that shifts from a search-based web to an intent-based web. Rather than navigating traditional app menus and filters, users can express needs, such as asking for a “last-minute gift for a coffee lover under ₦50,000”, and the assistant handles semantic search, location validation, and product curation.

A Seamless, Concierge-Like Experience

Once both platforms have been connected through either ChatGPT or Claude apps, the user will be able to have a multi-turn dialogue where the assistant remembers context and constraints, such as budget caps. Users receive a visual carousel of up to five highly customised product options available at local stores. Each product displays its image, name, store details and ratings, and price. While the search and discovery experience takes place directly on the Generative AI platforms, selecting a product via the “view on Glovo” button takes the user to the Glovo mobile or web app, where the payment and final purchase are exclusively completed.

Strategic Focus on Retail and Growth

Advertisement

Glovo is prioritising the retail and grocery sectors for this initial launch, capturing the established habit of using AI for product research. Generative AI has driven a significant jump in retail traffic globally, so this first-mover advantage aims to meet customers where they are meeting Gen AI daily, and ensure it captures high-intent organic traffic as search behaviours evolve.

“We’re always looking for ways to meet our customers where they already are. Being available on Claude and ChatGPT means people can discover what Glovo has to offer as part of a natural conversation, with no friction. Glovo has always been about being the everyday app that provides choice and convenience, and this is another step in that direction”, said Shiro Theuri, Chief Technology Officer at Glovo.

How to look for products in the Glovo app through ChatGPT or Claude

  1. The user must sync ChatGPT or Claude with the Glovo app with the plug-in.
  2. Once synced, the user must type in @glovo followed by their request.
  3. The AI platform displays a carousel with 5 available options for the user.
  4. If the user wants to purchase any of the products or continue searching within the Glovo app, they must click “View on Glovo”, which will redirect the user to the Glovo app or website.
  5. After the order is confirmed, the store will prepare the item(s) and the courier will head up to the pick-up location. The user will receive the order in minutes.

Kindly share this post
Continue Reading

Trending