Connect with us

E-Financial

Lazarus, Hacking Group Targets Cryptocurrency Space- Kaspersky

Published

on

Kindly share this post

Kaspersky Lab, cybersecurity watchdogs yesterday issued a warning that the well-known hacking group known as Lazarus, which is allegedly sponsored by the North Korean government, is alive and well and still targeting the cryptocurrency industry.

 

According to the folks at Kaspersky Lab, the hacking group began a new operation in November 2018, using new methods to infiltrate the computer systems of businesses in the financial sector and gain access to sensitive data.

 

Research done by Kaspersky Lab shows the hackers customized PowerShell scripts that “communicate with malicious C2 servers and execute commands from the operator.”

 

The scripts, dubbed “macro-weaponized document[s],” look like WordPress files and other open-source projects. Once the malware has control over a company’s servers, it can “set sleep time (delay between C2 interactions), exit malware, collect basic host information, check malware status, show current malware configuration, update malware configuration, execute system shell command, [and] download [and] upload files.”

 

These weaponized documents are specifically designed to catch the attention of cryptocurrency professionals.

 

Kaspersky Lab believes that the hacking group is explicitly targeting Korean crypto exchanges based on the fact that the malware is delivered using a malicious “Korean Hangul Word Processor format” (HWP), which takes advantage of a known weakness in the PostScript software and is popular only among Korean users. That one of the weaponized documents was sent to a crypto exchange based in Korea is also telling.

 

The Lazarus group uses several methods to infect exchanges’ servers. According to Kaspersky Lab, research shows that the group is most likely “running an old vulnerable instance of Internet Information Services (IIS) 6.0 on Microsoft Windows Server 2003.” The group is also suspected of purchasing servers from a hosting company that it uses to “host macOS and Windows payloads.” The cybersecurity watchdog believes the group only puts malware on rented servers and uses servers that are already infected to run C2 scripts. These servers have been found from China to the European Union.

 

The research done by Kaspersky Lab further shows that the group has adopted better methods to avoid detection. Lazarus is separately developing malware for “32-bit and 64-bit Windows” so it has more choices concerning the platform its wishes to infiltrate and the type of compiled code it wishes to use. Kaspersky Lab concludes that the same developers are using these methods to infect Apple products, which is why the group built the macOS malware.

 

The report ends with a warning to the larger crypto and tech industry:

 

    “If you’re part of the booming cryptocurrency or technological startup industry, exercise extra caution when dealing with new third parties or installing software on your systems. It’s best to check new software with an antivirus…[a]nd never ‘Enable Content’ (macro scripting) in Microsoft Office documents received from new or untrusted sources.”

 

The Lazarus group is suspected of perpetrating some of the biggest hacks ever seen in the cryptocurrency industry.

 

The group allegedly committed the hack against Coincheck, in which approximately 500 million NEM tokens were stolen in January 2018. The group also allegedly infiltrated the Bithumb network and made off with $31.5 million worth of digital currency.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Financial

SEC Partners Police in Nationwide Crackdown on Ponzi Schemes, Crypto Frauds

Published

on

Kindly share this post

Securities and Exchange Commission (SEC) and the Nigeria Police Force have forged an alliance against illegal scheme operators, investment frauds, and cryptocurrency frauds in a bid to protect the hard-earned savings and the financial dreams of the Nigerian people.

SEC Partners Police in Nationwide Crackdown on Ponzi Schemes, Crypto Frauds

Dr Emomotimi Agama, director-general of the SEC, stated this during a meeting with Kayode Egbetokun, Inspector General of Police, held in Abuja.

Agama said the SEC, as the sentinel at the gate of Nigeria’s formal capital markets, had the mandate to protect investors, maintain fair, efficient, and transparent markets, and promote the growth of a vibrant economy built on trust, which is done by setting rules, licensing operators and market surveillance.

He, however, stated that the Commission faced adversaries who operate in the shadows, outside regulated gates by exploiting the trust of people and promising miraculous returns such as 200 per cent in 30 days.

“Currently, there is a gap, a seam between identification and enforcement that these scammers exploit. Today, we aim to close that gap permanently. Therefore, we propose a robust, institutionalised collaboration with the following pillars: Joint Intelligence and Operations Task Force: Capacity Building and Knowledge Transfer; Streamlined Processes for Enforcement and National Public Awareness Campaign,” he stated.

The SEC DG advocated, “the establishment of a dedicated SEC-NPF team that combines market intelligence, forensic accounting, and understanding of complex financial schemes with investigative and intelligence-gathering capabilities. This team will be the rapid-response unit to new frauds.”

Agama also sought the permission of the IGP to go into a Memorandum of Understanding with the Cyber Security Unit of the Police Force in a bid to ensure that cyberspace is safe for all Nigerians

In his response, the IGP Kayode Egbetokun assured the SEC team that the Nigerian police Force is ready to collaborate with the Commission, strengthen partnership in all the ways possible, and ensure that the Commission achieves its aims.

He said, “Your role in the Securities and Exchange Commission is very crucial to the Nigerian Economy, and with our supervision and support from the government, we will ensure economic recovery and growth. If the police unit in SEC is strengthened, it is going to make such an impact on your enforcement drive. What you said speaks so much to your determination to ensure effective drive in the Capital market, and when we can achieve effective enforcement, it comes with so many benefits.

Egbetokun also congratulated the Commission on the recent achievement of the N100 trillion market capitalisation mark, adding that it will aid economic growth and development.


Kindly share this post
Continue Reading

E-Financial

Paystack Expands Beyond Payments into Banking

Published

on

Kindly share this post

Nigerian fintech giant, Paystack has taken its boldest step yet beyond payments, acquiring Ladder Microfinance Bank. The fintech giant has quickly rebranded its new acquisition as Paystack Microfinance Bank (MFB) in a strategic shift that could reshape how African businesses access credit, deposits, and embedded financial services.

After nearly a decade building the backbone of online payments in Nigeria, the deal gives Paystack regulatory cover to hold deposits, lend directly to businesses and offer banking-as-a-service products.

More importantly, Paystack’s chief operating officer, Amandine Lobelle, highlighted that it allows the company to exert greater control over the trillions of naira that already flow through its platform every month, turning transaction data into a powerful engine for credit and treasury products.

“After 10 years of building payment infrastructure and going deep, we realised that businesses needed more than just getting paid to grow. We wanted to leverage the expertise that we have built over the last decade to continue to address some of the pain points that businesses have,” said Lobelle.

Paystack MFB will operate as a sister company to its payments business, initially focusing on working capital loans, merchant cash advances, overdrafts and term loans for small and medium-sized enterprises.

By using real-time payment data to underwrite loans, Paystack believes it can offer faster approvals and more accurate risk pricing than traditional lenders, directly tackling Nigeria’s estimated $32 billion small business financing gap.

For Paystack, founded in 2016 and acquired by Stripe in 2020, the move marks a strategic evolution from being just a payments processor to becoming a core part of the financial operating system for African businesses.

Today, Paystack supports more than 300,000 businesses across Nigeria, Ghana, and South Africa and has become one of Africa’s most trusted fintech infrastructure providers.

The banking licence is a game-changer as payments, once Paystack’s main growth engine, are increasingly commoditised across Africa. Lending, deposits and treasury services offer deeper margins, stickier relationships and long-term sustainability.

By layering banking services on top of payments, Paystack is betting that infrastructure depth will outperform flashy consumer scale.

However, the move also throws the Nigerian-born fintech giant into fierce competition with digital -first lenders and neobanks such as Moniepoint, Kuda, OPay and PalmPay, which already operate at massive scale. Still, Paystack’s strength lies in its merchant-first focus and developer-friendly APIs.

 


Kindly share this post
Continue Reading

E-Financial

FG Halts Tax Guidelines Amid Uncertainty Over Final Laws – Oyedele

Published

on

Kindly share this post

Federal Government has suspended the issuance of implementation guidelines for the new tax laws due to lingering doubts about their final version, Taiwo Oyedele, Chairman of the Presidential Tax Reform Committee, disclosed on Wednesday.

Speaking in Lagos after delivering a keynote address on the 2026 Economic Outlook, organised by the Institute of Chartered Accountants of Nigeria (ICAN) under the theme ‘ICAN@60: Accountability as the Bedrock for National Development,’ Oyedele said he directed the Nigeria Revenue Service (NRS) and Joint Revenue Board (JRB) to hold off on guidelines.

He explained that his team purchased a printed copy from the government printer to verify authenticity, only to learn the National Assembly had seized all copies pending completion of its review. “The Acts Authentication Act says whatever the government printer publishes is the evidence of the law. But lawmakers said it’s not what they passed,” Oyedele stated.

Efforts by Nigeria CommunicationsWeek to reach Senate spokesman, Senator Yemi Adaramodu (APC, Ekiti South), and House of Representatives spokesman, Akin Rotimi, yielded no response, as calls went unanswered and messages unread.

Oyedele acknowledged legislative review as standard but stressed the access restriction reintroduces uncertainty. He instructed his staff to persistently follow up in person at the printer.

Oyedele dismissed allegations of significant alterations to the gazetted versions of the National Revenue Service (Establishment) Act, Joint Revenue Board of Nigeria (Establishment) Act, Nigeria Tax Administration Act, and Nigeria Tax Act, which took effect January 1.

He insisted minor discrepancies do not impact key elements like tax rates, burdens, or filing deadlines. In December, Rep. Abdussamad Dasuki (PDP, Sokoto) raised a privilege matter at the House plenary, highlighting differences between passed versions and gazetted copies after comparing them with Votes and Proceedings.

The House formed a seven-man probe committee, which reported by December 25. On January 3, the National Assembly released Certified True Copies (CTCs) affirming the original passed texts and rejecting the controversial gazettes.

Oyedele decried opposition to reforms, including paid protests and misinformation. “We’ve seen people paid N30 million to protest; the deal broke during sharing, and some spoke to media,” he revealed.

He cited a November 2025 incident where fake news triggered panic sales, wiping N4.6 trillion off the stock market despite exemptions for turnover up to N150 million annually. “That fake news led to real losses, even for pensioners via PFAs,” he warned.

Linking to the event theme, Oyedele called accountability the bridge from reforms to results, urging trust-building, knowledge-seeking, and execution focus.

Panelists advocated coordinated efforts. LCCI Director-General Dr. Chinyere Almona called for inter-agency engagement, technology, and centralised monitoring to resolve policy conflicts.

MAN Director-General Segun Ajayi-Kadir sought inclusive growth without hurting competitiveness, noting manufacturing’s sub-10% GDP share, sector challenges, and N2 trillion in unsold inventory.

Session chair Mohammed Hayatudeen described 2026 as a pivotal year post-2023/2024 turbulence, with stabilised inflation, exchange rates, and reserves, but persistent high poverty. He questioned if tax policy ambition matches administrative capacity.

ICAN President Mallam Haruna Nma Yahaya welcomed guests, emphasising accountability for economic stability amid fragile recovery. He highlighted 2025 gains: GDP growth over 4% in Q2, inflation easing to mid-14s, forex reserves at multi-year highs, trade surpluses, and PMI at 57.6.

Yet, he cautioned fragility without discipline. “Accountability is an economic imperative,” Yahaya said, citing global evidence on strong institutions, and urged practical solutions for governance.


Kindly share this post
Continue Reading

Trending