Connect with us

E-Business

ChromeLoader Malware Campaign Punishes Pirating Users, HP warns

Published

on

Kindly share this post

HP Inc. yesterday issued its quarterly HP Wolf Security Threat Insights Report, showing threat actors are hijacking users’ Chrome browsers if they try to download popular movies or video games from pirating websites.

By isolating threats that have evaded detection tools on PCs, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals in the fast-changing cybercrime landscape. To date, HP Wolf Security customers have clicked on over 30 billion email attachments, web pages, and downloaded files with no reported breaches.

Based on data from millions of endpoints running HP Wolf Security, the researchers found:

  •  The Shampoo Chrome extension is hard to wash out: A campaign distributing the ChromeLoader malware tricks users into installing a malicious Chrome extension called Shampoo. It can redirect the victim’s search queries to malicious websites, or pages that will earn the criminal group money through ad campaigns. The malware is highly persistent, using Task Scheduler to re-launch itself every 50 minutes.  
  • Attackers bypass macro policies by using trusted domains: While macros from untrusted sources are now disabled, HP saw attackers bypass these controls by compromising a trusted Office 365 account, setting up a new company email, and distributing a malicious excel file that infects victims with the Formbook infostealer.
  • Firms must beware of what lurks beneath: OneNote documents can act as digital scrapbooks, so any file can be attached within. Attackers are taking advantage of this to embed malicious files behind fake “click here” icons. Clicking the fake icon opens the hidden file, executing malware to give attackers access to the users’ machine – this access can then be sold on to other cybercriminal groups and ransomware gangs.

Sophisticated groups like Qakbot and IcedID first embedded malware into OneNote files in January. With OneNote kits now available on cybercrime marketplaces and requiring little technical skill to use, their malware campaigns look set to continue over the coming months.

“To protect against the latest threats, we advise that users and businesses avoid downloading materials from untrusted sites, particularly pirating sites. Employees should be wary of suspicious internal documents and check with the sender before opening. Organizations should also configure email gateway and security tool policies to block OneNote files from unknown external sources,” explainsPatrick Schläpfer, Malware Analyst at the HP Wolf Security threat research team, HP Inc.

From malicious archive files to HTML smuggling, the report also shows cybercrime groups continue to diversify attack methods to bypass email gateways, as threat actors move away from Office formats. Key findings include:

  • Archives were the most popular malware delivery type (42%) for the fourth quarter running when examining threats stopped by HP Wolf Security in Q1.
  • There was a 37-percentage-point rise in HTML smuggling threats in Q1 versus Q4.
  • There was a 4-point rise in PDF threats in Q1 versus Q4.
  • There was a 6-point drop in Excel malware (19% to 13%) in Q1 versus Q4, as the format has become more difficult to run macros in.
  • 14% of email threats identified by HP Sure Click bypassed one or more email gateway scanner in Q1 2023.
  • The top threat vector in Q1 was email (80%) followed by browser downloads (13%).

“To protect against increasingly varied attacks, organizations must follow zero trust principles to isolate and contain risky activities such as opening email attachments, clicking on links, or browser downloads. This greatly reduces the attack surface along with the risk of a breach,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.

HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users. It also captures detailed traces of attempted infections. HP’s application isolation technology mitigates threats that might slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Africa Shows ‘Moderate’ Level of Cybersecurity Preparedness

Published

on

Kindly share this post

Anew report finds that Africa has a ‘moderate level’ of readiness in terms of security culture. KnowBe4, a provider of security awareness training and simulated phishing platforms, released its 2024 Security Culture Report for Africa.

The report delves deeply into the complex interplay between security practices and employee behaviours within businesses.

The research, based on surveys conducted across hundreds of businesses globally, provides a five-year comparative view, showing important changes impacting the cybersecurity landscape.

Africa’s cybersecurity landscape in 2023 faced problems such as limited resources, inadequate cyber awareness, and economic restraints, according to the research; nevertheless, the continent’s cybersecurity preparation efforts are now improving.

According to the research, Kenya scored 76 points, Nigeria 75, and Ghana 74, are leading the way in cybersecurity preparation, demonstrating effective measures supported by their governments.

Furthermore, the report claims Ghana’s strong improvement in cybersecurity, as indicated by its rise in the Global Cybersecurity Index, indicates Africa’s dedication to cybersecurity preparedness.

The security culture score is a global metric used to assess businesses’ security approaches, according to Javvad Malik, Lead Security Awareness Advocate at KnowBe4.

Malik notes: “This score reflects how much importance different entities worldwide place on cybersecurity within their organisational culture.”

Anna Collard, SVP of content strategy and evangelist for KnowBe4 Africa, says: “This demonstrates the importance of strengthening cybersecurity readiness, given the critical development requirements.

“In its section on Africa, the report reveals that organisations evaluated across 20 African countries exhibit an average security culture score of 72, consistent with the previous year. This shows a moderate level of readiness in security culture.”

According to KnowBe4, there are notable differences among industries and countries, underlining the importance of tailored efforts to improve cybersecurity resilience.

“The banking sector in Kenya is a standout performer, boasting an impressive average score of 83, attributed to its steadfast commitment to maintaining mature security cultures supported by robust security operations,” says Collard.

“However, industries such as public services, construction, education, and hospitality show lower security culture scores. This shows the importance of developing specific approaches to enhance cybersecurity awareness and practices in these sectors.”

Malik adds: “In today’s interconnected world, where a mobile device in a remote area can access sensitive accounts, working in isolation on security is no longer effective.”

He continues: “Collaboration between governments and regulators is essential, not just for creating laws, but also for demonstrating practical ways to strengthen security culture. Organisations need to prioritise the human element of cybersecurity by focusing on continuous awareness and training efforts rather than relying solely on technological solutions.”


Kindly share this post
Continue Reading

E-Business

Konga and Starlink Partnership: A Blessing for Nigeria – Dr. A U Babatunde

Published

on

Kindly share this post

In recent years, partnerships between e-commerce platforms and tech companies have been instrumental in driving innovation and progress in various sectors. One such partnership that has garnered significant attention is the collaboration between Konga, Nigeria’s composite e-commerce group, and Starlink, the satellite internet service provided by SpaceX.

This groundbreaking partnership is poised to revolutionize internet accessibility in the country, bringing about a myriad of benefits for businesses, individuals, and the nation as a whole. For example, educational institutions, business and houses can access internet services anywhere in the country with their enterprise kit.

One of the biggest obstacles to widespread internet adoption in Nigeria has been the country’s vast and diverse geography, which has made it difficult and costly to establish traditional terrestrial infrastructure. Starlink’s satellite-based internet service offers a game-changing solution by beaming high-speed internet directly from space, effectively bypassing the need for extensive ground-based infrastructure. Partnering with Konga has made it easier than ever for Nigerians to access this cutting-edge technology. Those living in remote or underserved areas can now enjoy seamless internet connectivity, eliminating the digital divide that has long plagued the nation.

I am very excited about this partnership because it shows that American companies still have confidence in companies like Konga and in the Nigerian economy. Konga, the exclusive shop in shop ecommerce partner for Apple, Samsung, L’Oreal, and many more has continued to boost the domestic economy with the inflow of foreign direct investments from these global brands with the potential to catalyse economic growth. With this, a lot more deals, I hope, will flow in to ensure a robust and productive market for consumers.

According to a report by the World Bank, a 10% increase in broadband penetration can lead to a 1.38% increase in GDP growth in developing countries. This partnership between Konga and Starlink can open up new opportunities for entrepreneurs, enabling them scale their operations and compete on a level playing field with their international counterparts.

Furthermore, reliable internet access can facilitate academic research and collaboration. This would encourage innovation domestically and allow Nigerian academics and institutions to participate in the global knowledge economy. So, integrating ICT into education will improve learning outcomes, promote digital literacy, and enhance teacher training. By bridging the digital divide, Konga, through Starlink, empowers Nigerian students and educators, equipping them with the skills and knowledge required to thrive in the 21st century.

Beyond the economic and educational benefits, the Konga-Starlink partnership has the tendency to foster social inclusion and empower communities across Nigeria. With access to high-speed internet, individuals can stay connected with loved ones, access online services, and participate in the digital economy, regardless of location. By bringing affordable and reliable internet to areas with limited access, the Konga-Starlink partnership can help bridge the digital divide and ensure that no Nigerian is left behind in the digital revolution.

The healthcare industry in Nigeria stands to benefit greatly from the collaboration between Konga and Starlink. In places where access to specialized medical treatment is limited, healthcare practitioners can use telemedicine systems to facilitate remote consultations, diagnosis, and even surgery, provided they have dependable internet connectivity. In underserved areas especially, telemedicine has promise for increasing access to healthcare services, cutting costs, and improving care quality.

The partnership between Konga and Starlink represents a significant step forward in bridging the digital divide in Nigeria. By leveraging SpaceX’s innovative satellite-based internet service and offering it at an affordable price point, this collaboration has the potential to transform various sectors. As Nigeria continues to embrace the opportunities this partnership presents, the future looks promising for technological advancement, societal development, and global competitiveness.


Kindly share this post
Continue Reading

E-Business

Flexify Solutions Launches CyberAgric App to Revolutionize Agricultural Sector in Nigeria

Published

on

Kindly share this post

Flexify Solutions, a leading tech-based firm in Oyo State, has introduced “CyberAgric,” an innovative solution designed to drive food production in Nigeria.

Flexify Solutions Launches CyberAgric App to Revolutionize Agricultural Sector in Nigeria

This is in recognition of the crucial role of modern agricultural practices in ensuring food security.

Food security is a top priority for every nation, and Nigeria is no exception.

CyberAgric is a cutting-edge mobile application that leverages artificial intelligence (AI) to support Nigerian farmers, particularly those involved in cash crop cultivation such as cassava and maize.

The app’s groundbreaking features include early disease detection, with the capability to identify diseases like Cassava Brown Streak Disease (CBSD) in cassava leaves within the first two weeks of infection.

By utilizing smartphone cameras, farmers can capture images of their crops and receive real-time analysis and recommendations, empowering them to take proactive measures to protect their crops and ensure optimal yields.

Moreover, CyberAgric is designed to function offline, ensuring accessibility for farmers in remote areas with limited internet connectivity.

Speaking on the significance of CyberAgric, Johnson Oyeniyi, CEO of Flexify Solutions, emphasized the app’s accessibility and educational value. “Our goal with CyberAgric is to ensure that every Nigerian farmer, regardless of their location or internet access, can benefit from advanced agricultural technology,” said Oyeniyi.

“Beyond disease detection, the app serves as an educational platform, providing farmers with the latest agricultural best practices and expert resources.”

Flexify Solutions collaborated closely with Cybermate Technologies to tailor CyberAgric to the specific needs of Nigerian farmers.

The app initially focuses on cassava and maize cultivation, addressing the critical challenges faced by farmers in these sectors.

Through advanced AI-driven disease detection capabilities, CyberAgric aims to mitigate the impact of crop diseases and enhance food security in Nigeria.

Flexify Solutions Ltd is a global company specializing in disruptive digital solutions. With a strong focus on innovation, Flexify Solutions excels in crafting AI solutions optimized for mobile platforms and driving transformative change across industries.

With a proven track record in mobile app development, Flexify Solutions seamlessly integrates cutting-edge AI technologies to create intelligent solutions that resonate with users and drive success.

 


Kindly share this post
Continue Reading

Trending