Connect with us

E-Financial

Hackers Demand $70m after Kaseya Ransomware Attack

Published

on

Kindly share this post

Hackers were on Monday demanding $70 million in bitcoin in exchange for data stolen during a “gargantuan” attack on a US IT company that has shuttered hundreds of Swedish supermarkets.

Hackers Demand $70m after Kaseya Ransomware Attack

AFP reported that researchers believe more than 1,000 companies could have been affected by the attack on Miami-based firm Kaseya, which provides IT services to some 40,000 businesses around the world.

The FBI warned Sunday that the scale of the “ransomware” attack — a form of digital hostage-taking where hackers encrypt victims’ data and then demand money for restored access — is so large that it may be “unable to respond to each victim individually”.

“It’s probably the biggest ransomware attack of all time,” said Ciaran Martin, cybersecurity professor at the University of Oxford.

“Because of the nature of the attack there’s still a lot of uncertainty over its impact,” he stressed.

But he added that because this was a “supply chain attack” — targeting a company serving thousands of firms, many of whom in turn provide IT support to smaller businesses such as car dealerships — the total number of victims was potentially huge.

Sweden’s Coop supermarket chain was among the indirect victims, with its cash registers paralysed since Friday when its IT subcontractor Visma Esscom was hit by the attack.

Most of Coop’s 800 stores were still closed Monday, spokesman Kevin Bell told AFP, with the few hundred that have reopened relying on alternative payment solutions such as customers paying using their smartphones.

Cybersecurity firm ESET said it had identified victims of the hack in at least 17 countries, from South Africa to Britain to Mexico. New Zealand’s education ministry said at least two schools there had been affected.

‘REvil hackers suspected’

A banner with the logo of bitcoin is seen during the crypto-currency conference Bitcoin 2021 Convention at the Mana Convention Center in Miami, Florida, on June 4, 2021. Marco BELLO / AFP

Experts believe the attack was probably carried out by REvil, a Russian-speaking hacking group known as a prolific perpetrator of ransomware attacks.

A post on Happy Blog, a site on the dark web previously associated with the group, claimed responsibility for the attack and said it had infected “more than a million systems” — which if true would make this attack “absolutely gargantuan in scale”, according to Martin.

The FBI believes that REvil, which also goes by the name Sodinokibi, was behind a ransomware attack last month on global meat-processing giant JBS. The Brazil-based company ended up paying $11 million in bitcoin to the hackers.

The hackers’ blog post said they would release a decryption tool online “so everyone will be able to recover from attack in less than an hour” — if they were handed $70 million in bitcoin.

The hackers have also been reaching out to individual victims and demanding smaller ransoms, Martin said.

“As far as I understand it, they’ve been issuing demands that are about $50,000 for smaller organisations, rising to $5 million for larger organisations,” he told AFP. “We don’t know who’s paid.”

Kaseya said Sunday it believed the damage had been restricted to a “very small number” of customers using its signature VSA software, which lets companies manage networks of computers and printers from a single point.

But cybersecurity firm Huntress Labs said in a Reddit forum that it was working with partners targeted in the attack, and that the software was manipulated “to encrypt more than 1,000 companies”.

Kaseya said it had “immediately shut down” its servers after detecting the attack on Friday and warned its VSA customers to do the same, “to prevent them from being compromised”.

The company has released a tool allowing its customers to find out whether their own computer systems have been compromised by the attack.

‘State-tolerated’ hacking’

In recent months numerous US companies, including the computer group SolarWinds and the Colonial oil pipeline, have been the victims of high-profile ransomware attacks, which the FBI blames on hackers based in Russia.

While Washington officials do not accuse the Russian government of direct involvement in such attacks, they say the country is harbouring hackers who should be arrested.

US President Joe Biden raised the threat in talks with Russian counterpart Vladimir Putin last month, and on Saturday ordered a full investigation into the Kaseya attack.

“Most experts would take the view that it’s highly unlikely that it’s state-directed,” Martin said of this latest cyber-assault. “It’s state-tolerated.”

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Financial

FBNQuest Merchant Bank Reports Strong Financial Performance and Strategic Growth Initiatives in 2023

Published

on

Kindly share this post

FBNQuest Merchant Bank, the investment banking and asset management subsidiary of FBN Holdings Plc, successfully held its 9th Annual General Meeting recently.

The gathering served as a platform to present the Bank’s Annual Report and Financial Statements for the financial year ended December 31, 2023.

Amid the prevailing economic challenges, the Bank reported a robust financial performance and outlined strategic growth initiatives aimed at delivering sustainable value to its shareholders.

Mallam Bello Maccido, Chairman of the Board of Directors, commended the Bank’s resilience in navigating through the complexities of the operating environment in 2023.

He stated, “2023 was a year filled with unprecedented challenges that tested our resilience. Given the evolving economic landscape which was characterized by shifting government policies and volatile market dynamics, FBNQuest Merchant Bank stood resilient. Our ability to navigate through these challenges underscores our adaptability and unwavering commitment to excellence.”

The Bank reported a strong financial performance for the year 2023, with gross earnings improving by 43.1% year-on-year to N35.5 billion. Profit Before Tax (PBT) of N4.09 billion was recorded, representing a 36% increase year-on-year while PBT for the FBNQuest Merchant Bank Group was N9.98 billion, reflecting an increase of 91.5% year-on-year.

Mallam Maccido added “The asset management business achieved remarkable milestones, hitting above N600 billion in Assets under Management at the end of December 2023.

“The equities business also posted growth in PBT by 182% year-on-year.” In line with its commitment to providing robust and sustainable returns to shareholders, the Bank declared an interim dividend of N1.01 billion.

The Bank’s Board continues to ensure that its governance structures conform with international best practices and regulatory guidelines. At the meeting, shareholders approved the appointment of Mr. Afolabi Olorode as Acting Managing Director, noting that the approval of the Central Bank of Nigeria had been obtained for his appointment.

The retirement of Mr. Kayode Akinkugbe as Managing Director and Mr. Taiwo Okeowo as Deputy Managing Director was also acknowledged, both individuals having served the Bank meritoriously for eight years each.

Looking ahead to 2024, Mallam Bello Maccido expressed optimism about the improved outlook and opportunities for the Bank’s various lines of business.

He stated, “We are dedicated to accelerating revenue growth purposefully and responsibly. The Bank remains committed to delivering value to its stakeholders and driving growth in the years ahead. Its solid financial performance and strategic growth initiatives position it for continued success in the dynamic economic landscape.”

 


Kindly share this post
Continue Reading

E-Financial

OPay clarifies New CBN directive, Reassures Customers

Published

on

Kindly share this post

OPay remains committed to working closely with the Central Bank of Nigeria (CBN) and other regulatory bodies to fight money laundering, fraud, terrorism financing, and other illegal financial activities.

OPay

As a regulatory-compliant institution, OPay follows the rules set by the CBN and other regulators to ensure the financial system’s integrity. To achieve this, we have closed non-compliant accounts, implemented strict security measures, and educated customers to help combat fraud.

To support government efforts to clean up the financial industry, Opay and other Fintechs companies have temporarily paused onboarding new customers and creating new wallets. This action reflects our commitment to a secure financial environment and fighting against illicit activities.

Please note that existing accounts and wallets remain unaffected by the CBN’s directive. We want to assure our customers that their funds are secure, their data is protected and this is a temporary measure.

Customer satisfaction is our top priority, and we are committed to promoting financial inclusion and economic growth as key players in Nigeria’s financial ecosystem


Kindly share this post
Continue Reading

E-Financial

CAC Says Operating PoS without Registration is Criminal Offence

Published

on

Kindly share this post

Corporate Affairs Commission (CAC) has said that all financial technology operators (Fintechs) must register with the commission before July 7, 2024, noting that operating without registration is a crime according to the provisions of the law.

CAC Says Operating PoS without Registration is Criminal Offence

Hussaini Magaji (SAN), registrar general of the Commissio, stated this at the inauguration for the centre for bulk registration of Point of Sale (PoS) operators on Wednesday.

Magaji said, “It is the requirement of the law and the guidelines which Fintechs mandate PoS operators while obtaining their machines as outlined by the CBN to register with the CAC. Therefore, operating a PoS without registering with the CAC is a crime in Nigeria and the operator ought to be jailed.

“CAC on our part are enforcing the provisions of the law which mandates every legitimate business to register with the commission either as individual, business or merchant, and the PoS operators must register, and what we are doing now is to enforce parts of the provisions of the Companies and Alllied Matters Act (CAMA).”

Speaking further, he said, “CAC was asked to penalise PoS operators who are operating without registration with a N200 form. But because of the president’s position on encouraging small businesses, we agreed that no one should be penalized, which is why we have put a time limit on a date because we have had this sensitisation since December, and by July 7, 2024, we hope to close.”

Magaji added that the registration of all POS merchants and agents across the country would go a long way in reducing crime in the country.

He said, “We have a situation where ransom is paid with POS terminals, so with the registration, we will bring out the people whose machines were used to perpetrate the crime, because the CAC will capture all your information.”

He further noted that the registration centre would be open for 24 hours for Fintechs that might want to register manually, adding that the CAC had already created a structure for the Fintechs on the commission’s portal for ease of registration, where the certificate would be automatically generated and sent to their platform. CAC Opens Centre for Registration of PoS Operators

 

 

 

 

 

 


Kindly share this post
Continue Reading

Trending