E-Business
Check Point Identifies Trickbot, Emotet and the Log4j Plague as December 2021’s Most Wanted Malware
Check Point Research, the Threat Intelligence arm of Check Point Software Technologies, a leading provider of cyber security solutions globally, has published its latest Global Threat Index for December 2021.
In a month that saw the Apache Log4j vulnerability sweep the internet, researchers reported that Trickbot is still the most prevalent malware, albeit at a slightly lower rate affecting 4% of organizations worldwide (5% in November).
The recently resurgent Emotet has swiftly risen from seventh position to second. CPR also reveals that the most attacked industry continues to be Education/Research.
This month “Apache Log4j Remote Code Execution” is the most exploited vulnerability, affecting 48.3% of organizations globally. The vulnerability was first reported on December 9th in the Apache logging package Log4j – the most popular Java logging library used in many Internet services and apps with over 400,000 downloads from its GitHub project.
The vulnerability caused a new plague, impacting almost half of all companies worldwide in a very short space of time. Attackers are able to exploit vulnerable apps to execute cryptojackers and other malware on compromised servers.
Until now, most of the attacks have focused on the use of cryptocurrency mining at the expense of the victims however, advanced attackers have started to act aggressively and take advantage of the breach on high-quality targets.
“Log4j dominated headlines in December. It is one of the most serious vulnerabilities we have ever witnessed, and due to the complexity in patching it and its easiness to exploit, it is likely to stay with us for many years to come unless companies take immediate action to prevent attacks,” said Maya Horowitz, VP Research at Check Point Software. “This month we have also seen the Emotet botnet move from the seventh most prevalent malware to the second.
Just as we suspected, it has not taken long at all for Emotet to build a strong foothold since it resurfaced in November. It is evasive and is spreading fast via phishing emails with malicious attachments or links.
It is now more important than ever to have a robust email security solution in place and to ensure that users know how to identify a suspicious looking message or attachment.”
CPR revealed this month that Education/Research is the most attacked industry globally, followed by Government/Military and ISP/MSP. “Apache Log4j Remote Code Execution” is the most commonly exploited vulnerability, impacting 48.3% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which affects 43.8% of organizations worldwide. “HTTP Headers Remote Code Execution” remains in third place in the top exploited vulnerabilities list, with a global impact of 41.5%.
Top malware families
*The arrows relate to the change in rank compared to the previous month.
This month, Trickbot is the most popular malware impacting 4% of organizations worldwide, followed by Emotet and Formbook, both with a global impact of 3%.
In Nigeria, Ramnit is the most popular malware impacting 12.64% of organizations in the country, followed by Phorpiex at 10.34% and Formbook with a country impact of 8.05%.
- ↔ Ramnit – Ramnit is a banking Trojan which incorporates lateral movement capabilities. Ramnit steals web session information, enabling the worm operators to steal account credentials for all services used by the victim, including bank accounts, corporate and social networks accounts.
- ↑ Phorpiex – Phorpiex is a botnet (aka Trik) has been since 2010 and at its peak controlled more than a million infected hosts. Known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
- ↔ Formbook – First detected in 2016, FormBook is an InfoStealer that targets the Windows OS. It is marketed as MaaS in underground hacking forums for its strong evasion techniques and relatively low price. FormBook harvests credentials from various web browsers, collects screenshots, monitors and logs keystrokes, and can download and execute files according to orders from its C&C.
Top Attacked Industries Globally:
This month, Education/Research is the most attacked industry globally, followed by Government/Military and ISP/MSP. In Africa the most attacked industry is Communications followed by ISP/MSP and Finance/Banking.
|
|
|
Top exploited vulnerabilities
This month, “Apache Log4j Remote Code Execution” is the most commonly exploited vulnerability, impacting 48.3% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which affects 43.8% of organizations worldwide. “HTTP Headers Remote Code Execution” remains in third place in the top exploited vulnerabilities list, with a global impact of 41.5%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↔ Web Server Exposed Git Repository Information Disclosure- An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow an unintentional disclosure of account information.
- ↔ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
Top Mobile Malwares
This month, AlienBot takes first place in the most prevalent Mobile malwares, followed by xHelper and FluBot.
- AlienBot – AlienBot malware family is a Malware-as-a-Service (MaaS) for Android devices that allows a remote attacker, as a first step, to inject malicious code into legitimate financial applications. The attacker obtains access to victims’ accounts, and eventually completely controls their device.
- xHelper – A malicious application seen in the wild since March 2019, used for downloading other malicious apps and display advertisements. The application is capable of hiding itself from the user and can even reinstall itself in the event that it was uninstalled.
- FluBot – FluBot is an Android botnet distributed via phishing SMS messages, most often impersonating logistics delivery brands. Once the user clicks the link inside the message, FluBot is installed and gets access to all sensitive information on the phone.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.
Flexify Solutions, a leading tech-based firm in Oyo State, has introduced “CyberAgric,” an innovative solution designed to drive food production in Nigeria.
This is in recognition of the crucial role of modern agricultural practices in ensuring food security.
Food security is a top priority for every nation, and Nigeria is no exception.
CyberAgric is a cutting-edge mobile application that leverages artificial intelligence (AI) to support Nigerian farmers, particularly those involved in cash crop cultivation such as cassava and maize.
The app’s groundbreaking features include early disease detection, with the capability to identify diseases like Cassava Brown Streak Disease (CBSD) in cassava leaves within the first two weeks of infection.
By utilizing smartphone cameras, farmers can capture images of their crops and receive real-time analysis and recommendations, empowering them to take proactive measures to protect their crops and ensure optimal yields.
Moreover, CyberAgric is designed to function offline, ensuring accessibility for farmers in remote areas with limited internet connectivity.
Speaking on the significance of CyberAgric, Johnson Oyeniyi, CEO of Flexify Solutions, emphasized the app’s accessibility and educational value. “Our goal with CyberAgric is to ensure that every Nigerian farmer, regardless of their location or internet access, can benefit from advanced agricultural technology,” said Oyeniyi.
“Beyond disease detection, the app serves as an educational platform, providing farmers with the latest agricultural best practices and expert resources.”
Flexify Solutions collaborated closely with Cybermate Technologies to tailor CyberAgric to the specific needs of Nigerian farmers.
The app initially focuses on cassava and maize cultivation, addressing the critical challenges faced by farmers in these sectors.
Through advanced AI-driven disease detection capabilities, CyberAgric aims to mitigate the impact of crop diseases and enhance food security in Nigeria.
Flexify Solutions Ltd is a global company specializing in disruptive digital solutions. With a strong focus on innovation, Flexify Solutions excels in crafting AI solutions optimized for mobile platforms and driving transformative change across industries.
With a proven track record in mobile app development, Flexify Solutions seamlessly integrates cutting-edge AI technologies to create intelligent solutions that resonate with users and drive success.
Kaspersky has released its annual Financial Threats Report for 2023, offering a detailed analysis of the evolving financial cyberthreat landscape.
The report reveals significant increases in mobile banking malware and cryptocurrency-related phishing, signaling growing threats to digital financial assets.
The previous 12-months has witnessed a substantial rise in the number of users encountering mobile banking Trojans, with attacks on Android users surging by 32% – contrary to 2022.
The most prevalent banking trojan was Bian.h, accounting for 22% of all Android attacks. Geographically, Afghanistan, Turkmenistan, and Tajikistan recorded the highest share of users encountering banking Trojans, with Turkiye leading mobile banking malware attacks, with almost 3% of users affected (2.98%).
While the number of users affected by financial PC malware saw an 11% decline in 2023, Ramnit and Zbot were identified as the predominant malware families, targeting more than 50% of affected users. Consumers continued to be the primary target, comprising 61.2% of all attacks.
In 2023, financial phishing remained a significant threat, accounting for 27.32% of all phishing attacks on corporate users and 30.68% on home users. E-shop brands were identified as the top lure, with 41.65% of financial phishing attempts.
Additionally, PayPal phishing represented 54.78% of phishing pages targeting electronic payment system users. The report also highlighted a 16% year-on-year growth in cryptocurrency phishing, with 5.84 million detections in 2023 compared to 5.04 million in 2022.
E-shop phishing was identified as the most prevalent, recording 41.65% of all financial phishing pages. Amazon emerged as the most mimicked online store, accounting for 34% of phishing attempts, followed by Apple at 18.66% and Netflix at 14.71%. PayPal was the most targeted payment system, with 54.73% of attacks.
Cryptocurrency-related phishing and scams continued to grow, with Kaspersky preventing 5,838,499 attempts to follow cryptocurrency-themed phishing links – a 16% increase on 2022. Scammers mimicked cryptocurrency exchanges and offered coins in the name of large enterprises like Apple.
“Money has always been a magnet for cybercriminals, and a substantial portion of malware attacks are financially motivated. The surge in mobile malware witnessed last year highlights a concerning trend in cybercrime.
“With the emergence of new and aggressive malware strains, attackers are evolving their tactics to target mobile devices more aggressively. This underscores the imperative for individuals and businesses to maintain heightened vigilance, update protective measures, and fortify device security accordingly,” commented Igor Golovin, a security expert at Kaspersky.
The African e-commerce market grossed USD 277.1 billion in 2023 and is projected to reach USD 939.8 billion in 2023. However, with a global cart abandonment rate of 70%, many of which are related to payment issues, there is a clear need for ecommerce businesses in Nigeria and beyond to provide seamless and efficient transactions to increase their revenue and scale. An effective payment solution for e-commerce businesses is payment link integration.
Payment link integration emerges as a powerful tool for e-commerce businesses to facilitate payment in a convenient and streamlined way. This SeerBit article delves into what a payment link is, how it works, and its benefits for your ecommerce business.
What Is a Payment Link?
A payment link is a unique, shareable URL that directs the customer to a secure payment page where they can make payment for their purchase. This method ensures a seamless and streamlined payment process for customers, particularly removing the need for a physical card or a card terminal. A business can generate this link for any specific transaction and send it directly to the customer through one of several possible channels (email, social media, SMS, etc.).
Payment links make payments convenient for both businesses and customers. Even e-commerce businesses without a website can receive payments online with a payment link. For e-commerce businesses with websites, online payment link integration allows them to boost sales by selling their products on other platforms beyond the business’ website.
Here’s How Your E-commerce Business Benefits from Payment Link Integration
Implementing payment links in your e-commerce setup can offer several advantages that streamline the purchasing process for you and your customers. Here are some reasons why you should integrate payment links for your e-commerce business:
Customer Experience and Convenience
Payment links provide a convenient way for customers to complete transactions without having to navigate through a complex checkout process. This improves the customer experience during shopping as they can pay with ease. With just a click on the payment link, customers can quickly and easily make a purchase, reducing the likelihood of cart abandonment.
Flexibility
Payment links offer your business flexibility in receiving payments, as they can be customised for different types of transactions. It supports multiple payment methods, such as credit/debit cards, digital wallets, bank transfers, etc., allowing you to cater to your customer’s preferred payment method. Consequently, you have more successful transactions and an increased customer satisfaction level.
Improved Cash Flow
With payment links, the speed and efficiency of payments increase. Consequently, this helps to improve your business’s cash flow. The accompanying ease of payments also means that customers are more willing to part with their money, thereby boosting your bottom line.
Security
Payment links are typically hosted on secure payment gateways, ensuring the safety of sensitive customer information during transactions. By leveraging trusted payment providers and encryption technologies, you can instil confidence in your customers and protect their data from unauthorised access.
Reduces Payment Processing Error
Payment link ensures efficiency in the payment process, leaving little room for processing errors. It also ensures that customers don’t have to manually type in their payment information, hence cutting out the risks of human errors, such as wrong billing address or credit card information in the payment process.
Mobile-friendly
As mobile commerce continues to grow, having a mobile-friendly payment solution is crucial. Payment links are inherently mobile-friendly, allowing customers to complete transactions directly from their smartphones, whether they’re on the go or at home.
Tracking and Analytics
Payment links often come with built-in tracking and analytics features that provide valuable insights into customer behaviour, transaction trends, and sales performance. By analysing this data, you can make informed decisions to optimise your ecommerce strategy and maximise revenue.
How To Create a Payment Link for Online Payment
Creating a payment link to receive online payment involves the following steps:
Choose a payment gateway provider
The first step is to partner with a reliable payment gateway like SeerBit that offers payment links as part of its service. Read our blog post on what to consider when choosing a payment provider to help you make the right choice. A few factors to consider are your business needs, security, compatibility, and pricing structure. SeerBit easily checks all the boxes.
Create a SeerBit account
Once you’ve decided on SeerBit as your payment gateway provider, the next thing is to create your SeerBit account. This is a straightforward process that involves providing your business’ information and completing the KYC process for compliance.
Access and set up the payment link feature
SeerBit offers payment links as a part of its service. Once you’re logged in, you can create a payment link in your dashboard which you send to your customers. This link works for both one-time and recurring payments.
To set up your payment link, go to “Payments” on your dashboard, click on “Payment Links,” then “Create Payment Link” and fill in the required details. A link will be created afterward which you can send to your customer via email, messenger apps, social media, invoice, or QR code.
Conclusion
By integrating payment links into your ecommerce business, you make payments very convenient for your customers and considerably improve your customer satisfaction. SeerBit payment link offers you an easy payment collection process while allowing you to cater to your customers’ payment needs. SeerBit also uses the best security tools and the latest encryption and tokenization technologies to ensure the security of transactions and customer payment information.
Binance Alleges Request of $150m Bribe by Some Nigerian Officials
Nigerians Pay Five Levies for Electronic Transactions
SIM Boxing, And the Unboxing of Crime Syndicate
Flexify Solutions Launches CyberAgric App to Revolutionize Agricultural Sector in Nigeria
Shell Nigeria Paid $1.09Bn in Taxes, Royalties in 2023
CBN Sacks another 50 Staff, 117 Disengaged in 20 Days
AfDB, AGF Partner on Female Entrepreneurs’ Access to Finance
IMF says Rising Cyber Threats Pose Serious Concerns for Financial Stability
Sun International Finalizes $14.4M Exit from Nigeria, Sells Interests to RFC
Financial Firms Lost $2.5Bn To Cyberattacks in 4 Years – IMF
Telecom2 days agoRewane, Financial Expert Backs Telcos’ Move to Hike Tariff
News2 days agoDigital Transformation Can Unlock Nigeria’s Prosperity -NIGCOMSAT Boss
E-Business2 days agoKonga Launches Free Same Day Deliveries on Starlink, Apple & Samsung Nationwide
E-Business2 days agoCybervergent’s Q1 2024 Report Reveals Rising Threat of Remcos RAT Malware in Financial Sector
E-Business2 days agoISDL Achieves IMS Certification
- Uncategorized2 days ago
Uche Ikejimba Secures Sixth Consecutive AMVCA Nomination With Best Unscripted M-Net Original Nod
Telecom2 days agoAfrica Data Centres Unveils ADC Channel Programme
E-Financial2 days agoCourt Jails Nwachukwu, Ex FCMB Manager 121 Years for N112m Fraud