Connect with us

E-Business

Study Shows Some $30,000 Stolen via Fake Hardware Wallet

Published

on

Kindly share this post

Cryptocurrency investors often turn to hardware wallets as a secure way to store their digital assets, assuming that they are impenetrable. However, even the most advanced hardware wallets on the market may not be foolproof, and there are still risks associated with using fake or infected devices.

Kaspersky has shared the details behind the incident of cryptocurrency theft involving a hardware wallet, which resulted in the loss of 1.33 BTC worth $29,585.

Hardware wallets, also known as ‘cold’ wallets, store cryptocurrency keys on a device the size of a USB stick, which must be plugged into a computer to send crypto or interact with decentralised finance protocols. As a result, these devices are generally considered safer than ‘hot’ wallets that are connected to the Internet at all times.

However, a recent investigation by Kaspersky revealed a rare case of theft of assets from a hardware wallet, demonstrating how cybercriminals are coming up with new tactics to maximise their profits.

The victim did not make any transactions that day, and the cold wallet was not connected to the computer. Thus, the victim did not immediately notice the theft, and the fraudster transferred 1.33 BTC (worth around $29,585) without the victim’s knowledge.

Although the copy we studied appeared identical to the original, the device showed signs of malicious tampering upon opening it. Rather than being welded together ultrasonically like genuine hardware wallets, each half of the device was filled with glue and held together with double-sided tape.

Additionally, the wallet had a different microcontroller with read protection mechanisms and the flash memory completely disabled, instead of the original one. This led the company’s researchers to conclude that the victim had purchased a hardware wallet that had already been infected.

The attackers made only three changes to the original firmware of the bootloader and the wallet itself. They removed the control of protective mechanisms, replaced the randomly generated seed phrase with one of the 20 preset phrases, and used only the first character of any additional password. This gave the attackers a total of 1280 options to pick the key per one wallet.

Thus, the attackers were able to carry out the operation while the disabled crypto wallet was lying in the owner’s safe. The crypto wallet seemed to work as usual, but from the very beginning, the scammers had complete control over it.

“Hardware wallets have long been considered one of the safest ways to store cryptocurrency, but cybercriminals have found new ways to benefit by selling infected or fake devices to unsuspecting victims.

“Such attacks are totally preventable. Hence, we strongly advise users to only purchase hardware wallets from official and trusted sources to minimise the risk,” comments Stanislav Golovanov, Cyber Incidents Investigation Expert at Kaspersky.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Kaspersky Transforms Threat Intelligence Reporting into an Interactive Content Hub

Published

on

Kindly share this post

Easy interaction with exclusive Kaspersky reports, geo-filtering and actionable intelligence in a single click: expert insights on Advanced Persistent Threats (APT), Crimeware and Industrial Control Systems (ICS) threats are now available directly in Kaspersky Threat Intelligence Portal — with charts and visuals rendered inline.

In an era of increasingly sophisticated and frequent attacks, threat intelligence inevitably evolves into a business enabler that equips security teams with strategic advantage in their mission to back their company’s stability and growth.

Kaspersky, a recognised leader in threat intelligence, facilitates informed decision-making and proactive risk mitigation by introducing simplified access to actionable and relevant threat insights.

Kaspersky Threat Intelligence Reporting is a subscription-based service delivering over 200 in-depth analysis reports annually. These insights are compiled by Kaspersky’s Global Research and Analysis Team, Industrial Control Systems Cyber Emergency Response Team and Threat Research experts through the continuous tracking of more than 900 threat actors and campaigns.

Following the update, all reports previously representing a library of static PDF files (that is more than 2000 exclusive Kaspersky reports published to date) are now structured and can be examined directly in the Kaspersky Threat Intelligence Portal. For offline use, the standard PDF download format remains available as well.

The update also introduces deeper integration within each report, featuring direct links to indicators of compromise (IoCs), detection rules (including YARA), and MITRE ATT&CK® techniques. Users can now perform a single-click drill-down into specific threat actors, malware families and Common Vulnerabilities and Exposures (CVEs) across diverse geographies and industries.

Smart geo-filtering streamlines investigations by prioritising content explicitly mentioning a selected country, followed by broader regional intelligence, giving analysts a complete geographic view in a single query.

Enhanced Kaspersky Threat Intelligence Reporting supports the following use cases:

  • Customised content discovery: apply geo, industry and software filters to instantly retrieve a list of relevant reports.
  • Exclusive intelligence: access the most recent incident investigation reports, including those without public disclosure, to understand the nature of an attack and identify the actions required for mitigation.
  • Actionable intelligence extraction: extract and apply threat data from the reports and apply it across specific infrastructure to detect traces of compromise.
  • In-depth Threat Lookup and contextual analysis: investigate suspicious indicators identified within the network and quickly determine if a specific IoC is linked to a related threat report.

“Empowering cybersecurity teams in their mission-critical daily work to ensure business resilience in a complex threat landscape. This is the main driver behind our ongoing visual and functional improvement initiative.

While updating Kaspersky Threat Intelligence Portal, we focused on refining the customer experience by optimising processes of active investigation, proactive incident monitoring and detailed mitigation techniques,” comments Alexander Mazikin, Head of Threat Intelligence Product Line at Kaspersky.


Kindly share this post
Continue Reading

E-Business

Weebly Websites to Shut Down for Nigeria, 66 Other Countries from September

Published

on

Kindly share this post

Weebly, US-based free, beginner-friendly, drag-and-drop website builder and eCommerce service, will no longer be available for customers in 67 countries, including Nigeria, after September 2026, according to an email seen by Nigeria CommunicationsWeek.

Weebly Websites to Shut Down for Nigeria, 66 Other Countries from September

Weebly said it is “winding down” services in different nations “due to changes in regulation and to simplify our global operations”.

The firm released a timeline of gradual changes, to help existing users access their data before the site shuts down.

Starting June 29, customers of 67 countries were no longer able to publish any new pages.

September 27, 2026: Weebly websites will be unpublished.

Before this date, users should download site content and data. Follow these steps:

Go to Account Settings, click on My Data, and select Download My Data.

This will help you migrate your content to another website provider, or retain it.

Concerned about privacy? Ask Weebly to delete your data, through the Erase Data and Forget Me option under the My Data tab on your account page.

December 26, 2026: Last date of accessing Weebly account.

Until this date, you will have access to the account, although sites will be unpublished.

This period helps users move their site, domains, and data to another service.

Domain names can be moved to another registrar only after 60 days from the registration date.

According to the Weebly website, users must make sure that they do not make changes to your registrant contact information (email, phone number, first/last name), as this will lead to a 60-day registrar lock and prevent you from transferring your domain name.

Note that domain name transfers work differently for country-specific domains; users must contact Weebly’s support team for assistance.

How to unlock, transfer domain name

From your Weebly Dashboard, go to websites, and click on Domains, then select Manage Domain.

Disable registrar lock, get EPP authorisation code, and copy the full code.

Disabling registrar lock will also disable privacy protection. It is important to set privacy protection once again with the new registrar.

Follow the instructions for the newly chosen registrar as the rest of the transfer process will be managed by them

Why is Weebly winding down?

While the firm attributed it to “a change in regulation,” online users have argued that Square, which acquired Weebly in 2018, is pushing its platform ‘Square Online’.

Square is originally a US-based payment processor, and the firm says it has since evolved into the “largest business tech platform”.

It calls Square Online a “free online store” but clarifies that those who do not sell online can also use it to build their websites.

In an earlier support update for the Weebly Website Builder, Square Online was consistently referred to as a better alternative, although at the time, it was said that Square “has no plans to discontinue the Weebly website builder”.

Which countries will Weebly no longer be available in?  Albania, Algeria, Andorra, Armenia, Aruba, Azerbaijan, Bahamas, Bahrain, Bangladesh, Barbadoa, Belarus, Benin and Bosnia and Herzegovina.

Others are: Cambodia, Cameroon, Chile, Colombia, Congo, Costa Rica, and Côte d’Ivoire.

Also affected are: Ecuador, Egypt, Ethiopia, French Polynesia,    Gabon, Georgia, Ghana, Guinea, Iceland, Jordan, Kazakhstan, Kenya, Laos, Malaysia, Mauritius, Moldova, Montenegro, Morocco, Nepal and New Caledonia.

The rest are: Nigeria, Oman, Pakistan, Palau, Paraguay, Peru, Russia, Saudi Arabia, Senegal, Serbia, Sierra Leone, Singapore, South Korea, Suriname, Taiwan, Tajikistan, Tanzania, Thailand, Turkey, Uganda, Ukraine, United Arab Emirates, Uruguay, Uzbekistan, Vietnam, Zambia and Zimbabwe.

 

 


Kindly share this post
Continue Reading

E-Business

NOTAP to Commercialise University Research, Expands Patent Drive

Published

on

Kindly share this post

National Office for Technology Acquisition and Transfer (NOTAP), has commenced the process of patenting and commercialisation of research works by universities and other research institutions in the country.

NOTAP to Commercialise University Research, Expands Patent Drive

Dr. Obiageli Amadiobi, director general of NOTAP

Dr. Obiageli Amadiobi, director general of NOTAP, stated this in Abuja, during an interaction with journalists on her achievements since assuming office.

Speaking on the theme, “Strengthening Indigenous Capacity: NOTAP’s Drive for Technology Transfer, Local Content Development, and Innovative activities,” Amadiobi said the agency had involved both the academia and industry so that researchers can work on topics brought forward for commercialisation purpose.

“My minister is very intentional about this– very intentional about commercialisation of research results, which we have already submitted to him. They are meaningful researches, which we need to commercialise.

“We have established 69 intellectual property technology transfer offices in 69 universities that we are still counting. We have informed the vice chancellors of Nigerian universities to set up such offices and we will come and educate them on intellectual property and technology transfers.

“As we are doing this, we are also taking record of all the researchers of these universities and research centres and documenting them in a compendium.

“So, we have compendiums from the universities to us and we put them in a database. If you will recall, recently, the ministry, our supervising ministry, which is the Federal Ministry of Innovation, Science, and Technology, launched a programme titled Energise Commercialisation. This entirely was for commercialisation of all R&Ds,” she said.

On research Institutions carrying out research on areas of industry needs, she said, “NOTAP is bridging the gap between research and development with industry needs, “it is on our programme called the NITDF, NOTAP Industry Technology Transfer Fellowship. By this programme, we engage the universities and the industries, in what we call the triple helix. We liaise with the universities and the industries to sponsor, the industries will sponsor a Ph.D candidate in a Nigerian university to conduct relevant researches.

“They will provide the topics that they want researches for and such students will research on that with the assistance of the industries, because they wear the shoes, so they know where it pinches them. But usually, there are Ph.D candidates already established. This year alone, we certified about 15 of them to enter into this programme and they have gone into the various universities.

“And we are still looking for people to update some of the projects; the research topics we already have. But we are not getting enough persons to do the researches. So, we are going to do further advertisement to see if other candidates will come up.


Kindly share this post
Continue Reading

Trending