Connect with us

E-Business

Cybersecurity Experts Say Data-Stealing Malware Infections Increased Sevenfold since 2020

Published

on

Kindly share this post

Nearly 10 million devices fell victim to data-stealing malware in 2023, Kaspersky Digital Footprint Intelligence has revealed, drawing from insights gathered from infostealer malware log files traded on underground markets.

With cybercriminals pilfering an average of 50.9 login credentials per infected device, the threat posed by data-stealers is growing for both consumers and businesses. In light of this growing threat, Kaspersky has launched a dedicated web page to raise awareness of the issue and provide strategies for mitigating associated risks.

The .com domain leads in compromised accounts with nearly 326 million logins and passwords for websites on this domain were compromised by infostealers in 2023.

It is followed by domain zones associated with Brazil (.br, 28,8 million), India (.in, 8,2 million), Colombia (.co), and Vietnam (.vn). In the .za domain, associated with South Africa, compromised accounts reached 1,070,000 in 2023, followed by .ke (Kenya – 970 000) and .ng (Nigeria – 920 000).

About 10,000,000 personal and corporate devices were compromised with data-stealing malware in 2023, amounting to a 643% increase over the past three years, Kaspersky Digital Footprint Intelligence data shows.

The data on infected devices stems from the dynamics of infostealer malware log-files actively traded in the underground markets and monitored by Kaspersky to help companies ensure the security of their clients and employees.

Even though the number of log-files – and therefore infections – in 2023 has only experienced a marginal decline of 9% compared to 2022, it doesn’t imply that cybercriminal demand for logins and passwords has stagnated.

It is possible that some credentials compromised in 2023 could be leaked to the dark web at some point during the current year.

Therefore, the actual number of infections is likely to be even higher than 10 million. According to Kaspersky’s assessment of infostealer log-file dynamics, the number of infections that occurred in 2023 is projected to reach roughly 16,000,000.

Cybercriminals steal an average of 50.9 login credentials per infected device. Threat actors either utilise these credentials for their own malicious purposes, including perpetrating cyberattacks, or sell or distribute them freely on dark web forums and shadow Telegram channels.

These credentials may encompass logins for social media, online banking services, crypto wallets, and various corporate online services, such as email and internal systems. According to Kaspersky’s data, 443,000 websites worldwide have experienced compromised credentials in the past 5 years.

“The dark-web value of log files with login credentials varies depending on the data’s appeal and the way it’s sold there. Credentials may be sold through a subscription service with regular uploads, a so called “aggregator” for specific requests, or via a “shop” selling recently acquired login credentials exclusively to selected buyers. Prices typically begin at $10 per log file in these shops.

This highlights how crucial it is both for individuals and companies – especially those handling large online user communities – to stay alert. Leaked credentials carry a major threat, enabling cybercriminals to execute various attacks such as unauthorised access for theft, social engineering, or impersonation”, says Sergey Shcherbel, expert at Kaspersky Digital Footprint Intelligence.

To guard against data-stealing malware, individuals are advised to use a comprehensive security solution for any device. This will help prevent infections and alert them to dangers, such as suspicious sites or phishing emails that can be an initial vector for infection.

Moreover, companies can help their users, employees and partners protect themselves from the threat this way. They can proactively monitor leaks and prompt users to change leaked passwords immediately.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

NITDA to Integrate of Digital Literacy into School Curriculum

Published

on

Kindly share this post

Kashifu Abdullahi, director general of the National Information Technology Development Agency (NITDA), announced plans to integrate digital literacy into Nigeria’s education system, to achieve a 70% literacy rate by 2027 and 95% by 2030.

NITDA to Integrate of Digital Literacy into School Curriculum

Kashifu Abdullah, DG, NITDA

The NITDA’s DG made the announcement on Wednesday in Abuja during a media parley.

He stated that in order to include digital literacy in the curriculum at all educational levels, from kindergarten to university, the Agency was collaborating with the Federal Ministry of Education.

Abdullahi, said that this program would equip Nigerians with the digital know-how and abilities they need to succeed in the digital economy.

He emphasized that NITDA would also launch the “Digital Literacy for All Initiative” to educate Nigerians outside the formal education system and provide access to quality digital content.

Nigeria would train over two million young people in in-demand IT skills in order to become significant global outsourcing hub

NITDA is also collaborating with the Defence Headquarters and security agencies to develop digital solutions to address security concerns, including the use of drones, artificial intelligence, and other digital resources to combat banditry, abduction, and terrorism, he said.

 

According to him, the agency’s draft SRAP 2.0 plan aims to establish Nigeria as a digitally empowered nation, with a focus on innovation, national prosperity, and inclusivity.

The director general of NITDA added that, if successfully implemented, this strategy could propel Nigeria into a new phase of digital empowerment and leadership in the global digital economy.


Kindly share this post
Continue Reading

E-Business

Experts Highlight Trusted Relationships as Key Vector

Published

on

Kindly share this post

In 2023, more than 1/5 of cyberattacks persisted for over a month, the annual Kaspersky Incident Response 2023 report has revealed, with trusted relationships emerging as one of the main attack vectors in these prolonged cases.

The report draws on the results of Kaspersky’s cyberattack investigations throughout the year, gathered when supporting organisations sought incident response assistance or when hosting expert events for their internal incident response teams.

Primary reasons of organisations approaching Kaspersky Incident Response team with service requests were encrypted files (32.8% of requests), suspicious activities (31%), data leakage (20%), and also included non-authorised accesses (3%), service unavailability (3%) and money theft (1.6%).

Among initial attack vectors of the investigated incidents were exploiting public facing application (42.4%), compromised accounts and BruteForce attacks (28.8% in total), trusted relationships (6.78%), phishing (5%), insider’s activity (3.4%).

Kaspersky Incident Response 2023 report indicates that long-lasting cyberattacks that persist for more than a month constituted 21.85% of the total, increasing from 2022 by 5.55%.

One notable trend observed in these attacks was the exploitation of trusted relationships as a primary vector. Compromises leveraging trusted relationships have occurred previously, but in 2023 their frequency increased.

As this method of attack enables threat actors to infiltrate multiple victims through a single compromised organisation, investigative teams face several additional challenges. Firstly, initially targeted organisations don’t always recognise the importance of thorough investigations and may be reluctant to cooperate.

Secondly, attacks initiated through trusted relationships often require more time to progress from the initial intrusion to the final incursion phase. Therefore 50% of these attacks lasted more than a month. A similar proportion of attacks exceeding one month were exclusively registered within the insider and phishing vectors.

“Our latest findings underscore the critical role of trust in cyberattacks. In 2023 and for the first time in recent years, attacks through trusted relationships were among the three most used vectors. Half of these incidents were discovered only after a data leak had been found.

“By exploiting trusted relationships, threat actors can prolong attacks and infiltrate networks for extended periods, posing significant risks to organisations. It’s imperative for businesses to remain vigilant and prioritise security measures to safeguard against such sophisticated tactics,” comments Konstantin Sapronov, Head of Global Emergency Response Team at Kaspersky.

 


Kindly share this post
Continue Reading

E-Business

OmniRetail Emerges First in Financial Times’ Ranking of Africa’s Fastest-Growing Companies

Published

on

Kindly share this post

Omniretail, a B2B enablement platform focusing on digital infrastructure in Sub-Saharan Africa, is proud to announce it has secured the top position in the Financial Times (FT) ranking of Africa’s Fastest-Growing Companies for 2024.

The ranking, now in its third year, continues to highlight the dynamism and growth of companies in sectors including fintech, renewable energy, healthcare, e-commerce, and agriculture.

The FT presents Africa’s Fastest Growing Companies list comprising innovative, modern, companies growing at scale, that are the driving force of the international economy in the 21st century.

The Financial Times partners with Statista, to produce similar rankings for companies in Europe, Asia, and America. The inclusion of OmniRetail as part of this prestigious list is a testament to its success and exceptional performance.

Similar to the ranking for other markets, the Africa list places companies by their compound annual growth rate (CAGR) in revenue between 2019 and 2022. OmniRetail has grown by 772.39% over these 3 years, making it Africa’s fastest-growing company in 2024.

Launched in 2019, OmniBiz is the flagship product of OmniRetail, a distribution platform that digitises the supply chain from distributors to retailers by embracing a retailer-first, asset-light approach.

OmniBiz enables retailers to place orders directly from manufacturers. These orders are fulfilled by partner distributors, who specialise in warehousing, while transportation responsibilities are delegated to third-party logistics providers, ensuring delivery to retailers within 24 hours.

OmniRetail is building a collaborative platform that includes other innovative tools like OmniPay and Mplify, which equips retailers with essential resources and tools to procure products, build and access credit, and optimise their business for higher profitability and scale. With over 140,000 small retailers and over 200 brands onboarded, OmniRetail aims to redefine the retail industry in Africa.

Deepankar Rustagi, CEO of OmniRetail, said, “We’re proud to enter the FT Africa’s fastest-growing list for the first time and even more so to be at the top of the list.

This is a tribute to the hard work and perseverance of everyone at OmniRetail. Africa deserves a robust digital infrastructure layered on top of the existing informal retail sector, and we’re proud of the progress we’ve made so far.

We are equally proud of our work towards empowering and supporting more retailers previously excluded by the financial ecosystem and those experiencing cash flow issues to enhance their supply chain processes.

Through OmniRetail, we help retailers grow through our integrated digital infrastructure providing access to essential goods and capital. We will continue to improve infrastructure for efficient product distribution, envisioning more product variety and efficient distribution to even more remote areas.

As a company, we are on a journey to completely eliminate the inefficiencies of traditional trade by digitising the key stakeholders across the value chain”.

OmniRetail’s business model revolves around the OmniBiz platform, which digitises the supply chain, while OmniPay processes over $50 million in transactions.

This emphasises high-margin product categories and offers structured rebates and incentives.  To optimise delivery van loads, OmniRetail uses an algorithm and operates with a robust model that includes decentralised warehousing.

At least 78% of OmniRetail’s retailers and distributors are women, reflecting robust financial inclusion by providing access to banking services, working capital, and genuine digitisation.

The company works with more than 4800 distributor partners and 1100 committed vehicles and compensates partners based on delivered value. OmniRetail recently achieved profitability, boasting gross margins of 9% and net contribution margins of 5% as of January 2024, with a registered retailer base of 144,000.


Kindly share this post
Continue Reading

Trending