E-Business
Qbot, April 2023’s Most Wanted Malware Launches Substantial Malspam Campaign
Check Point® Software Technologies, a leading provider of cybersecurity solutions globally, has published its Global Threat Index for April 2023.
Last month, researchers uncovered a substantial Qbot malspam campaign distributed through malicious PDF files attached to emails seen in multiple languages. Meanwhile, Internet-of-Things (IoT) malware Mirai made the list for the first time in a year after exploiting a new vulnerability in TP-Link routers, and Healthcare moved up to become the second most exploited industry.
The Qbot campaign seen last month involves a new delivery method in which targets are sent an email with an attachment that contains protected PDF files. Once these are downloaded, the Qbot malware is installed on the device. Researchers found instances of the malspam being sent in multiple different languages, which means organizations can be targeted worldwide.
Last month also saw the return of Mirai, one of the most popular IoT malwares. Researchers discovered it was exploiting a new zero-day vulnerability CVE-2023-1380 to attack TP-Link routers and add them to its botnet, which has been used to facilitate some of the most disruptive distributed DDoS attacks on record. This latest campaign follows an extensive report published by Check Point Research (CPR) on the prevalence of IOT attacks.
There was also a change in impacted industries, with healthcare overtaking government as the second most exploited sector in April. Attacks on healthcare institutions have been well documented and some countries continue to face constant assaults.
For example, cybercriminal group Medusa recently launched attacks on cancer facilities in Australia. The industry remains a lucrative target for hackers as it gives them potential access to confidential patient data and payment information. It could have implications for pharmaceutical companies as it could lead to leaks regarding clinical trials or new medical drugs and devices.
“Cybercriminals are constantly working on new methods to bypass restrictions and these campaigns are further proof of how malware adapts to survive. With Qbot on the offensive again, it acts as another reminder of the importance of having comprehensive cybersecurity in place, and due diligence when it comes to trusting the origins and intent of an email.” said Maya Horowitz, VP Research at Check Point Software.
CPR also revealed that “Web Servers Malicious URL Directory Traversal” was the most exploited vulnerability, impacting 48% of organizations globally, followed by “Apache Log4j Remote Code Execution” with 44% and “HTTP Headers Remote Code Execution” with a global impact of 43%.
Top malware families
Globally, AgentTesla was the most prevalent malware last month with an impact of more than 10% on worldwide organisations respectively, followed by Qbot and Formbook with a 4% global impact.
In Nigeria, Qbot was the most prevalent malware last month with an impact of 20% on organisations, followed by Expiro with 10.67% and Formbook with an 8% impact.
- Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials and keystrokes. Often distributed via spam email, Qbot employs several anti-VM, anti-debugging, and anti-sandbox techniques to hinder analysis and evade detection.
- Expiro – Expiro is a polymorphic file infector first seen in 2010. It inserts its malicious code into executable files on the infected host. These files lead to new infections when they are run on other machines. Expiro steals user and system information from Windows, as well as FTP credentials.
- Formbook – Formbook is an Infostealer targeting the Windows OS and was first detected in 2016. It is marketed as Malware as a Service (MaaS) in underground hacking forums for its strong evasion techniques and relatively low price. FormBook harvests credentials from various web browsers, collects screenshots, monitors and logs keystrokes, and can download and execute files according to orders from its C&C.
Top Attacked Industries in Africa
Last month, Consultant was most attacked industry, followed by Manufacturing and Retail/Wholesale.
- Consultant
- Manufacturing
- Retail/Wholesale
Top exploited vulnerabilities
Last month, “Web Servers Malicious URL Directory Traversal” was the most exploited vulnerability, impacting 48% of organizations globally, followed by “Apache Log4j Remote Code Execution” with 44% and “HTTP Headers Remote Code Execution” with a global impact of 43%.
- ↑ Web Servers Malicious URL Directory Traversal – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
- ↓ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↓ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
Top Mobile Malwares
Last month, Ahmyth moved to the top spot as the most prevalent mobile malware, followed by Anubis and Hiddad.
- AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.
E-Business
Coins Launches to Empower Nigerians in Diaspora with Affordable Remittances
Bamboo, the investment platform enabling Africans to invest globally through real-time access to global markets, has announced the launch of its remittance app, “Coins by Bamboo.”
Backed by the Canadian Money Service Business licence, the new remittance app, available on the Google Play and Apple stores for download, will enable Nigerians in the diaspora to make faster, more secure and cheaper money transfers to loved ones from the convenience of their mobile phones.
The Y-Combinator-backed company was founded in 2019 as the first online brokerage service to connect Africans with the US stock market, allowing those across the socioeconomic bracket to buy and trade global stocks on the Bamboo app.
Coins by Bamboo is an extension of the brand ethos of Bamboo which is to give Africans the ability to invest in anything from everywhere. It further reflects the company’s commitment to democratising wealth building and facilitating meaningful investments in local communities as well as Africa’s future.
Having successfully scaled the Canadian vetting process to acquire an MSB licence, Bamboo is certified to offer remittance financial services to a high standard of regulatory and operational compliance.
The company is also able to take advantage of lessons it’s learnt connecting Africans with global asset classes to bring cost savings that are crucial for the millennials and Gen-Z who have migrated to Canada over the last ten years but still maintain strong ties to their home country.
Speaking on the announcement, Richmond Bassey, Co-founder and CEO of Bamboo says, “We are thrilled to officially launch “Coins by Bamboo” to the public. “Coins” is a logical evolution of our core values – providing an opportunity for Africans to participate in the global investment economy.”
Bassey continues, “We believe that one of the most preferred and important investments of Africans is in other Africans – investing in people and their futures through human capital development; and we want to contribute to making this a seamless process.
For us, this new app further ignites our mission to democratise access to investment opportunities for Africans by fostering social impact and opportunities to invest in the wellbeing of those who matter the most to them.”
Bamboo is also partnering with several charitable foundations including Women at Risk International Foundation (WARIF), Chess2Slums and Bethesda Home For The Blind to make it easier for Nigerians in the diaspora to donate to causes and projects that they care about.
According to the World Bank, remittance flows to sub-Saharan Africa peaked at $54 billion in 2023 and remittance via formal channels is projected to reach $283 billion by 2035. Yet, SSA continues to have the highest average remittance cost at about 7.9 per cent to every $200 compared to the global average of $5.
Historically, Nigeria dominates the remittance sector, sometimes accounting for up to half of the region’s inflows. With emigration at an all-time high, there remains a growing demand for affordable and accessible digital remittance solutions necessitating the birth of Coins by Bamboo.
The new app will offer competitive rates comparable to their counterparts, in addition to offering customers the unique opportunity to directly donate to a curated list of charities. It will be initially available to Africans in the Nigeria-Canada corridor before expanding to the United Kingdom.
For many in Africa, the remittance industry is a crucial lifeline. By addressing the high fees and complex transfer processes, Coins by Bamboo is offering a more streamlined and cost-effective alternative that benefits both senders and recipients.
E-Business
FG Invests $40m in Intercept Technology, $583m in Surveillance- S4C
Nigeria has reportedly invested $40 million in intercept technology and $583 million on public surveillance, according to a new report by Spaces for Change (S4C), a civil society organization.
So-called intercept technology and surveillance allow legally sanctioned official access to private communications, such as telephone calls or e-mail messages in a bid to enhance national security, prevent crime and aid criminal investigations.
Victoria Ibezim-Ohaeri, executive director of S4C, said that “The Nigerian government has allocated approximately $40m for intercept technologies and an estimated $583m on public surveillance projects with Chinese tech firms.”
Ibezim-Ohaeri, spoke at the West Africa Civil Society Week held in Abuja with the “Leveraging Technology for Civic Engagement and Social Change in West Africa”
At the event held in collaboration with Civic Space Resource Hub, West Africa Civil Society Institute and the Ford Foundation, Ibezim-Ohaeri stated that this expenditure prioritised security over essential public services like education and healthcare, raising questions about the government’s commitment to human rights.
With lawful interception (LI), law enforcement authorities, in response to a warrant from a judge, can perform interception, simply by applying a ‘tap’ on the telephone line of the target, making it possible for security agencies in Nigeria to listen to terrorist and criminal cell phone calls and gather communications intelligence on their dark activities.
But Ibezim-Ohaeri said her organization’s report emphasised the historical context of surveillance in Nigeria, linking colonial practices to modern state surveillance tactics.
Ibezim-Ohaeri noted, “Colonial authorities established a framework for surveillance that persists today, where security agencies continue to repress dissent and monitor civic actors.”
Key findings from the report indicated that the military regime significantly intensified state surveillance, enacting laws that curtailed press freedoms and facilitated the harassment of journalists and political activists.
“Just as the U.S. expanded surveillance post-9/11, Nigeria mirrored this response after the 2011 UN building bombing,” she remarked, referring to legislation that broadened surveillance powers under the guise of national security.
The report outlined how civic actors and opposition politicians are often the primary targets of these surveillance initiatives.
“Evidence shows that state governors have acquired surveillance technologies to monitor political rivals, demonstrating the pervasive nature of these tactics,” Ibezim-Ohaeri explained.
Furthermore, the report highlighted that most surveillance technologies used in Nigeria are imported from countries like Israel, China, and the United States, emphasizing the risks posed by dual-use technologies that can be repurposed for oppressive measures.
“The dual-use nature of these technologies significantly contributes to their unchecked proliferation, often leading to abuses by both state and non-state actors,” she stated.
Despite existing legal frameworks, the report criticised the inadequacy of regulatory controls over surveillance technologies.
“While laws exist to govern surveillance, their enforcement is weak, creating a fertile ground for abuse and misuse,” Ibezim-Ohaeri cautioned.
In light of these findings, the report called for urgent reforms, including improved regulatory oversight and transparency in the procurement processes for surveillance technologies.
“We need a commitment to human rights that begins at the production stage, ensuring that surveillance technologies do not infringe on civil liberties,” she said.
Llawful interception (LI), in response to a warrant from a judge, lawful interception is performed simply by applying a ‘tap’ on the telephone line of the target, making it possible for security agencies in Nigeria to listen to terrorist and criminal cell phone calls and gather communications intelligence on their dark activities.
E-Business
Oba Otudeko Honoured with Doyen of Business Award @Family Business Summit 2024
Dr. Oba Otudeko, business mogul and chairman of Honeywell Group, has been awarded the prestigious “Doyen of Business” accolade at the recently concluded Family Business Summit 2024.
The summit held on Thursday, October 17, at the Wheatbaker Hotel, Ikoyi, Lagos, and themed “Family Business Legacy: Strategies for Building and Maintaining Multigenerational Wealth,” focused on empowering family-owned enterprises and explored strategies for navigating leadership transitions and transferring wealth and values across generations.
Dr. Otudeko was recognised for his significant contributions to nation building and economic development through his various investments and commitment to job and wealth creation opportunities in Nigeria.
The citation described Otudeko as “a paragon of innovation,” noting his unwavering commitment to creating value and driving economic prosperity across multiple sectors through Honeywell Group Limited.
Under his leadership, the company has set new benchmarks in various industries, including food, agriculture, and real estate, fostering sustained excellence and growth.
At the event, Honeywell Group was also honoured with the ‘Revolutionary Family Business Award’ in recognition of its commitment to innovation, strategic leadership, and sustained excellence.
The company was lauded for consistently setting new standards across diverse industries it operates in, including food, agriculture, real estate, among others.
In his acceptance speech, Otudeko highlighted the importance of resilience in business longevity, noting that the ultimate measure of success is a legacy that outlives its founder.
“Business leadership is a continuous journey that transcends short-term gains.
“A legacy is built on resilience, and at an advanced stage, your primary concern becomes ensuring continuity at a level even higher than when you started,” he said.
He expressed gratitude to the event organisers, BusinessDay and PwC, for the recognition, noting that it serves as a motivation for emerging family businesses.
“I am honoured to receive this award, and I extend my heartfelt thanks to BusinessDay and PwC for this acknowledgement.
“As we look ahead, succession and the empowerment of the next generation of leaders must remain key priorities to guarantee that the legacy we are building today endures for generations to come.”
The summit also honoured other outstanding leaders, including Dr. Stella Chinyelu Okoli, founder and CEO of Emzor Pharmaceuticals, for her exceptional contributions to Nigeria’s pharmaceutical industry and overall economic development.
Several leading family-owned businesses were recognized for their impact, including Tolaram Group, Orange Drugs Limited, Daily Need Group, amongst others.
The Family Business Summit, an annual event, is dedicated to supporting the growth of family businesses in Africa.
It provides a platform for discussing the unique challenges facing these enterprises, particularly around succession planning, governance structures, and strategies for sustaining wealth across generations.
- Telecom2 days ago
ACTIS Threatens MTN with Loss of 80m Subscribers if It Hikes Tariff
- E-Financial3 days ago
Moniepoint Secures $110 Million Investment to Scale Digital Payments, Banking Solutions
- E-Financial2 days ago
Google among Investors Funneling $110m into Moniepoint Nigeria
- E-Business1 day ago
FG Invests $40m in Intercept Technology, $583m in Surveillance- S4C
- Telecom2 days ago
Sanwo-Olu Lauds MTN for Renovating 110 Science Laboratories within a Decade
- News2 days ago
EFCC Arrests 4 Suspected Bank Hackers in Abuja
- News2 days ago
PalmPay Recognized for Driving Financial Inclusion @ BrandCom Awards
- Telecom2 days ago
TD Africa, Dell, Intel Partner on Innovative AI