Connect with us

E-Business

Kaspersky Identifies New Stealthy Ransomware

Published

on

Kindly share this post

Kaspersky’s Global Emergency Response Team has identified a previously unseen ransomware strain in active use, deployed in an attack following the theft of employee credentials.

The ransomware, dubbed “Ymir”, employs advanced stealth and encryption methods. It also selectively targets files and attempts to evade detection.

Ymir ransomware introduces a unique combination of technical features and tactics that enhance its effectiveness.

Uncommon memory manipulation techniques for stealth. Threat actors leveraged an unconventional blend of memory management functions – malloc, memmove, and memcmp – to execute malicious code directly in the memory.

This approach deviates from the typical sequential execution flow seen in widespread ransomware types, enhancing its stealth capabilities. Furthermore, Ymir is flexible; by using the –path command, attackers can specify a directory where the ransomware should search for files.

If a file is on the whitelist, the ransomware will skip it and leave it unencrypted. This feature gives attackers more control over what is or isn’t encrypted.

Use of data-stealing malware. In the attack observed by Kaspersky experts, which took place on an organisation in Colombia, threat actors were observed using RustyStealer, a type of malware that steals information, to obtain corporate credentials from employees.

These were then utilised to gain access to the organisation’s systems and maintain control long enough to deploy ransomware. This type of attack is known as initial access brokerage, where attackers infiltrate systems and sustain access.

Typically, initial access brokers sell the access they gain on the dark web to other cybercriminals, but in this case, they appear to have continued the attack themselves by deploying ransomware.

“If the brokers are indeed the same actors who deployed the ransomware, this could signal a new trend, creating additional hijacking options without relying on traditional Ransomware-as-a-Service (RaaS) groups,” explains Cristian Souza, Incident Response Specialist at Kaspersky Global Emergency Response Team.

Advanced encryption algorithm. The ransomware employs ChaCha20, a modern stream cipher known for its speed and security, even outperforming Advanced Encryption Standard (AES).

Although the threat actor behind this attack has not shared any stolen data publicly or made further demands, researchers are closely monitoring it for any new activity. “We haven’t observed any new ransomware groups emerging in the underground market yet.

Typically, attackers use shadow forums or portals to leak information as a way to pressure victims into paying the ransom, which is not the case with Ymir. Given this, the question of which group is behind the ransomware remains open, and we suspect this may be a new campaign,” elaborates Souza.

Looking for a name for the new threat, Kaspersky experts considered a Saturnian moon called Ymir. It is an “irregular” moon that travels in the opposite direction of the planet’s rotation – a trait that intriguingly resembles the unconventional blend of memory management functions used in the new ransomware.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Chams Carves Out Subsidiary to Support Africa’s Digital Transformation

Published

on

Kindly share this post

Chams Holding Company Plc, (Chams Holdco), digital payments and verification firm, has created a new subsidiary which is expected to strengthen the push for Africa’s digital transformation.

Chams Carves Out Subsidiary to Support Africa’s Digital Transformation

The creation of the new subsidiary, ChamsCorp Plc, which took effect from February 1, was made known in a filing to the Nigerian Exchange Limited , according to an announcement.

Chams said that the new subsidiary, which is its 5th, will give a new dimension to its more than 40 years of work in building the digital ecosystem not only in Nigeria, but across the continent and the rest of the world.

The newly created company will focus on three major aspects, namely the manufacturing of digital devices and development of digital infrastructure and services; data center design, construction and operations, and the development and implementation of AI infrastructure and intelligent systems.

It will also contribute to its parent company’s digital ID, digital verification, and trust services offering.

“For nearly four decades, we’ve enabled trust in transactions and identity. Now, we go furthe”

Chams is expanding into AI, data centre infrastructure, and intelligent systems, building the backbone for Africa’s digital transformation,” the company wrote in a LinkedIn post.

“We are not just participating in the future. We are engineering it,” the message added.

According to the Chams announcement, a decision of its Board of Directors appointed members of the pioneer board of ChamsCorp Plc, with renowned banker Mohammed Bashir Yunusa designated as Chairman.

He is described as a well-known finance expert who specializes in deal structuring, corporate and retail finance, business strategy, digital transformation, and Islamic Finance and Banking.

With more than 10 years of experience in the financial services industry, Yunusa currently serves as head of Consumer and Digital Banking for Non-Interest Banking Retail at Sterling Bank Nigeria, and will also serve as a non-executive director on the board.

“Chamscorp is designed to take our most ambitious ideas to market at speed and scale. As Africa’s digital economy evolves, we are focused on delivering transformative solutions that empower governments, businesses, and citizens alike,” Femi Oyenuga, CEO, Chams, commented on the development.

Chams has over the years played a major role in contributing to Nigeria’s digital ID ecosystem development to facilitate access to financial services.

In 2023, the company Group Chairman publicly stated that in providing such digital services to the Nigerian government, it had incurred debts estimated at $100 million and were planning to change their business model as a result.


Kindly share this post
Continue Reading

E-Business

Nigeria, South Africa Drive Stablecoin Spending in Africa

Published

on

Kindly share this post

Africa has emerged as the global frontrunner in stablecoin adoption, with Nigeria and South Africa leading the charge with the fastest adoption rate, as transactions surge across the continent.

This is according to the Stablecoin Utility Report, compiled by YouGov on behalf of fintech firm BVNK.

The study, conducted in partnership with Coinbase and Artemis, surveyed over 4 600 early adopters and crypto-natives in 15 countries across five continents.

It shows people are turning to stablecoins to move money more quickly, securely and affordably – and how this shift in behaviour is becoming a worldwide trend beyond its roots in the Global South.

Stablecoin adoption is accelerating particularly rapidly across Africa in 2026, driven by currency volatility, high inflation and the need for cheaper, faster cross-border payments, it finds.

The Stablecoin Utility Report shows that 79% of African respondents hold stablecoins − the highest ownership rate globally − while 76% say they intend to acquire them in the near future.

Nigeria and SA lead the continent in everyday stablecoin spending, highlighting a shift from holding digital dollars as a store of value, to actively using them for commerce.

The appetite to be paid in stablecoins is even stronger: 95% expressed interest in receiving income via dollar-pegged digital assets, whether for salaries, freelance work or cross-border services, according to the study.

Anthony Yim, co-founder and CEO of crypto research firm Artemis, explains: “We’re experiencing a significant behavioural shift in the way people are using stablecoins.

“Crypto natives and early adopters are fully on board with stablecoins, using them to pay and be paid. This is driving mainstream, global adoption – stablecoin supply has increased 500% over the past five years. Alongside the passage of multiple legislation initiatives in numerous countries, it’s clear we’re experiencing a tipping point.”

From hedge to household spending

Unlike in some developed markets where stablecoins are viewed primarily as a payments upgrade, African users are deploying them as practical financial tools. Key use cases include hedging against inflation, facilitating remittances and funding day-to-day purchases.

The report finds that 92% of African respondents say the condition of their national economy directly affects their stablecoin usage − a reflection of currency volatility, capital controls and high remittance costs across several markets.

Africa also recorded the highest likelihood globally (89%) of users adopting stablecoin-linked debit cards, signalling demand for tighter integration between digital assets and traditional payments.

Infrastructure, not ideology

Taken together, the findings reinforce a broader thesis: stablecoins are evolving beyond a payment method into payments infrastructure, states the report.

For individuals, this means receiving income faster and at lower cost. For businesses, it enables borderless treasury operations and supplier payments. For financial platforms, it opens opportunities to embed stablecoin wallets, debit cards and cross-border settlement into core offerings.

This demand for institutional-grade integration is evident globally, with 77% of survey respondents saying they would open a stablecoin wallet if offered by their primary bank or fintech provider.

As adoption deepens in Africa and regulatory frameworks mature in developed markets, the data suggests stablecoins are no longer a niche crypto product − but a structural layer in the future of global money movement, notes BVNK.


Kindly share this post
Continue Reading

E-Business

Kaspersky Reports 15% Growth in Malicious email Attacks in 2025

Published

on

Kindly share this post

According to Kaspersky telemetry, almost every second email – 44.99% of global traffic – was spam in 2025. Spam consists not only of unsolicited emails, but can also include various email threats such as scam, phishing and malware.

In 2025, individuals and corporate users encountered over 144 million malicious and potentially unwanted email attachments, representing a 15% increase compared to the previous year figures.

In 2025, APAC had the largest share of email antivirus detections: it reached 30%, followed by Europe with 21%. Next came Latin America (16%) and the Middle East (15%), Russia and CIS (12%) and Africa (6%). As for individual countries, China had the highest rate of malicious and potentially unwanted email attachments, with the share of email antivirus detections of 14%. Russia ranked second (11%), followed by Mexico (8%), Spain (8%) and Turkey (5%).

Email antivirus detections peaked moderately in June, July and November.

Key trends in email spam and phishing

Kaspersky’s annual analysis has also identified several persistent trends in the email spam and phishing threat landscape that are expected to continue into 2026:

  • Combination of various communication channels. Attackers lure email users into switching to messengers or calling fraudulent phone numbers. For instance, scam investment mailings may redirect victims to fake websites, where they are asked to provide their contact information, and then cybercriminals will follow up with a phone call.
  • Usage of diverse evasion techniques in phishing and malicious emails. Threat actors frequently try to disguise phishing URLs, for example, with the help of link protection services and QR codes. These QR codes are often embedded directly in email bodies or within PDF attachments, which not only conceals phishing links but also encourages users to scan them on mobile devices, potentially exploiting weaker security measures than corporate PCs.
  • Mailings exploiting diverse legitimate platforms. For example, Kaspersky experts discovered a fraudulent tactic that abuses OpenAI’s organisation creation and team invitation features to send spam emails from legitimate OpenAI addresses, potentially tricking users into clicking scam links or dialing fraudulent phone numbers. Additionally, a calendar-based phishing scheme, which originated in the late 2010s, resurfaced last year with a focus on corporate users.
  • Refining tactics in business email compromise (BEC) attacks. In 2025 attackers attempted to become even more persuasive by incorporating fake forwarded emails into their correspondence. These emails lacked thread-index headers or other headers, making it difficult to verify their legitimacy within an email conversation. 

“Email phishing shouldn’t be underestimated. Our report reveals that one in ten business attacks starts with phishing, with a significant proportion being Advanced Persistent Threats (APTs). In 2025, we saw an increase in the sophistication of targeted email attacks. Even the smallest details are meticulously crafted in these malicious campaigns, including the composition of sender addresses and the tailoring of content to real corporate events and processes.

“The commodification of generative AI has significantly amplified this threat, enabling attackers to craft convincing, personalised phishing messages at scale with minimal effort, automatically adapting tone, language and context to specific targets,” comments Roman Dedenok, anti-spam expert at Kaspersky.

 


Kindly share this post
Continue Reading

Trending