E-Business
Check Point Identifies Most Wanted Malware in May 2022
Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies Ltd. a provider of cyber security solutions globally, has published its latest Global Threat Index for May 2022. Researchers report that Emotet, an advanced, self-propagating and modular Trojan, is still the most prevalent as a result of multiple widespread campaigns.
This month, Snake Keylogger has jumped into eighth place after a long absence from the index. Snake’s main functionality is to record users keystrokes and transmit collected data to threat actors.
Snake Keylogger is usually spread through emails that include docx or xlsx attachments with malicious macros, however this month researchers reported that SnakeKey Logger has been spread via PDF files.
This could be due in part to Microsoft blocking by default internet macros in Office, meaning cybercriminals have had to become more creative, exploring new file types such as PDFs. This rare way to spread malware is proving to be quite effective as some people perceive PDFs to be inherently safer than other file types.
Emotet, is impacting 8% of organizations worldwide, a slight increase from last month. This malware is an agile malware proving profitable due to its ability to remain undetected. Its persistence also makes it difficult to be removed once a device has been infected, making it the perfect tool in a cybercriminal’s arsenal. Originally a banking trojan, it is often distributed through phishing emails and has the ability to offer other malwares, enhancing its capacity to cause widespread damage.
“As evident with the recent Snake Keylogger campaigns, everything you do online puts you at risk of a cyberattack, and opening a PDF document is no exception,” said Maya Horowitz, VP Research at Check Point Software. “Viruses and malicious executable code can lurk in multimedia content and links, with the malware attack, in this case Snake Keylogger, ready to strike once a user opens the PDF.
“Therefore, just as you would question the legitimacy of a docx or xlsx email attachment, you must practice the same caution with PDFs too. In today’s landscape it has never been more important for organizations to have a robust email security solution that quarantines and inspects attachments, preventing any malicious files from entering the network in the first place.”
CPR also revealed that “Web Servers Malicious URL Directory Traversal” is the most commonly exploited vulnerability, impacting 46% of organizations worldwide, closely followed by “Apache Log4j Remote Code Execution” which has a global impact of 46%.
“Web Server Exposed Git Repository Information Disclosure” is in third place with a global impact of 45%. The Education & Research sector continues to be the most targeted industry by cybercriminals globally.
Top Malware Families
*The arrows relate to the change in rank compared to the previous month.
This month, Emotet is still the most popular malware with a global impact of 8%, followed by Formbook with an impact of 2% and AgentTesla impacting 2% of organizations worldwide.
This month in Nigeria, Ramnit is the most popular malware impacting 11.39% of organizations in the country, followed by Phorpiex at 7.59% and Formbook at 5.06%.
- ↔ Ramnit – Ramnit is a modular banking Trojan first discovered in 2010. Ramnit steals web session information, giving its operators the ability to steal account credentials for all services used by the victim, including bank accounts, and corporate and social networks accounts. The Trojan uses both hardcoded domains as well as domains generated by a DGA (Domain Generation Algorithm) to contact the C&C server and download additional modules.
- ↔ Phorpiex – Phorpiex is a botnet (aka Trik) that has been active since 2010 and at its peak controlled more than a million infected hosts. It is known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
- ↔ Formbook – FormBook is an Infostealer targeting the Windows OS and was first detected in 2016. It is marketed as Malware as a Service (MaaS) in underground hacking forums for its strong evasion techniques and relatively low price. FormBook harvests credentials from various web browsers, collects screenshots, monitors and logs keystrokes, and can download and execute files according to orders from its C&C.
The complete list of the top ten malware families in May can be found on the Check Point blog.
Top Attacked Industries Globally
In Africa, this month Communications is the most attacked industry, followed by Government/Military and Retail/Wholesale
- Communications
- Government & Military
- Retail/Wholesale
Top Exploited Vulnerabilities
This month, “Web Servers Malicious URL Directory Traversal” is the most commonly exploited vulnerability, impacting 46% of organizations worldwide, closely followed by “Apache Log4j Remote Code Execution” which has a global impact of 46%. “Web Server Exposed Git Repository Information Disclosure” is in third place with a global impact of 45%.
- ↑ Web Servers Malicious URL Directory Traversal (CVE-2010-4598, CVE-2011-2474, CVE-2014-0130, CVE-2014-0780, CVE-2015-0666, CVE-2015-4068, CVE-2015-7254, CVE-2016-4523, CVE-2016-8530, CVE-2017-11512, CVE-2018-3948, CVE-2018-3949, CVE-2019-18952, CVE-2020-5410, CVE-2020-8260)- There exists a directory traversal vulnerability on different web servers.
The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
- ↔ Apache Log4j Remote Code Execution (CVE-2021-44228)- A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
3.↓ Web Server Exposed Git Repository Information Disclosure- An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow an unintentional disclosure of account information.
Top Mobile Malwares
This month AlienBot is the most prevalent Mobile malware, followed by FluBot and xHelper.
- AlienBot – AlienBot malware family is a Malware-as-a-Service (MaaS) for Android devices that allows a remote attacker, as a first step, to inject malicious code into legitimate financial applications. The attacker obtains access to victims’ accounts, and eventually completely controls their device.
- FluBot – FluBot is an Android malware distributed via phishing SMS messages (Smishing), most often impersonating logistics delivery brands. Once the user clicks the link inside the message, they are redirected to the download of a fake application containing FluBot. Once installed the malware has various capabilities to harvest credentials and support the Smishing operation itself, including uploading of the contacts list as well as sending SMS messages to other phone numbers.
- xHelper – A malicious application seen in the wild since March 2019, used for downloading other malicious apps and display advertisements. The application is capable of hiding itself from the user and reinstalling itself in the case that it was uninstalled.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles.
The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.
The National Information Technology Development Agency (NITDA) and Illmi Children’s Fund (ICF) have trained 100 schoolgirls in digital and Information and Communication Technology skills training.
Mrs. Maryam Augie-Abdulmumin, ICF Executive Director, confirmed this in a statement on Thursday in Lagos.
The graduation followed the training of the schoolgirls in ICF and NITDA’s DIGITGALS 2.0 programme, a collaborative initiative aimed to equip adolescent girls in Abuja with critical digital and ICT skills.
Augie-Abdukmumin said the DIGITGALS 2.0 centred around essential digital literacy, programming fundamentals, digital marketing and communication skills, and cybersecurity awareness.
She added that the girls were equipped with the confidence to compete and excel in a globalised digital economy. The graduation was in commemoration of the 2024 International Girls in ICT Day celebration on April 25.
DIGITGALS 2.0 is in its second phase and empowered 100 senior secondary school girls selected from five government schools in the Federal Capital Territory.
The girls aged between 15 and 18 years were equipped with the knowledge and tools needed to thrive in the digital world and address the growing demand for ICT skills in the 21st century.
Augie-Abdulmumin reiterated the importance of bridging the digital gap in the country starting with the girl-child.
“This graduation ceremony on International Day of Girls in ICT is a powerful symbol of our commitment to closing the digital gender gap.
This programme made possible through our partnership with NITDA, and signifies a crucial step towards bridging the digital gender gap.
It also fostering a future where women are active leaders in the tech industry. This is also an opportunity for these girls to take charge of their own future,”.
Mr Kashifu Abdullahi, the Director-General of NITDA, commended the collaborative efforts of ICF in making the DIGITGALS 2.0 a reality.
According to him, building a diverse and inclusive digital workforce is critical for Nigeria’s success.
“We are proud to collaborate with ICF on DIGITGALS 2.0 to empower these young women to become active participants in the tech industry. This programme showcases the importance of collaborative efforts in bridging the digital gender gap.
These girls have been equipped with essential digital skills, and ICF and NITDA are confident they will become active contributors to Nigeria’s thriving tech landscape,”.
ICF is a non-profit organisation dedicated to improving the lives of children, from underprivileged backgrounds, through education, healthcare, technology and entrepreneurship initiatives.
NITDA is a public service institution established in 2007. It functions as the ICT policy implementing arm of Nigeria’s Federal Ministry of Communication and Digital Economy.
By Reuben Kalu.
In the vast expanse of the digital realm, Google looms large, an omnipresent force shaping the way we navigate, search, and conduct business online.
From its humble beginnings as a search engine to its current status as a multifaceted tech behemoth, Google has entrenched itself deeply into the fabric of the internet.
Its influence is undeniable, its reach unparalleled, and its ubiquity seemingly inescapable. But can you truly run an online business without Google?
The answer, in today’s digital landscape, is a resounding no. You have no choice.
Google’s dominance extends across multiple facets of the online world, making it virtually impossible for businesses to thrive without engaging with its ecosystem.
From search engine optimization (SEO) to online advertising, email services to analytics, Google’s suite of products and services permeates every aspect of the online business landscape.
Attempting to operate without Google is akin to swimming against a relentless tide, fighting an uphill battle fraught with obstacles and limitations.
At the heart of Google’s influence lies its search engine, the gateway through which billions of internet users navigate the vast expanse of online content. .
Google’s search algorithms wield immense power, determining which websites rank prominently in search results and which languish in obscurity.
For businesses seeking to attract organic traffic and expand their online presence, optimizing for Google’s search algorithms is not merely advisable—it’s imperative.
But Google’s influence extends far beyond search. Consider Google Ads, the company’s advertising platform that enables businesses to reach targeted audiences through paid search, display, and video advertising.
With billions of searches conducted on Google each day, Google Ads provides unparalleled reach and visibility, allowing businesses to target potential customers with pinpoint accuracy.
Attempting to compete in the online advertising arena without leveraging Google Ads is akin to entering a battle unarmed—a futile endeavor destined for failure.
Moreover, Google’s suite of productivity tools, including Gmail, Google Drive, and Google Workspace, has become indispensable for businesses seeking to streamline their operations and enhance collaboration.
With seamless integration across devices and platforms, Google’s productivity tools offer unparalleled convenience and efficiency, empowering businesses to work smarter, not harder.
Attempting to eschew Google’s productivity suite in favor of alternative solutions is not only impractical but also unwise, depriving businesses of the tools they need to succeed in today’s fast-paced digital landscape.
Furthermore, Google Analytics stands as the gold standard for web analytics, providing businesses with invaluable insights into their online performance and audience behavior.
From tracking website traffic and user engagement to analyzing conversion metrics and customer demographics, Google Analytics offers a comprehensive toolkit for optimizing online marketing strategies and driving business growth.
Attempting to gauge online performance without leveraging Google Analytics is akin to flying blind, devoid of the critical data needed to make informed decisions and drive meaningful results.
But perhaps the most formidable aspect of Google’s influence lies in its role as a gatekeeper of information and access.
With billions of users relying on Google’s platforms and services each day, the company wields immense control over the flow of online traffic and the dissemination of information.
For businesses seeking to connect with customers and expand their reach, Google’s dominance presents both a tremendous opportunity and a formidable challenge.
Attempting to circumvent Google’s influence and establish an online presence independent of its ecosystem is a Herculean task, fraught with uncertainty and risk.
In essence, attempting to run an online business without engaging with Google is akin to swimming against a relentless tide, fighting an uphill battle fraught with obstacles and limitations.
While alternative platforms and solutions exist, none possess the ubiquity, reach, and influence of Google’s ecosystem.
To thrive in today’s digital landscape, businesses must embrace Google’s dominance and leverage its suite of products and services to their advantage. You have no choice.
In conclusion, Google’s pervasive influence permeates every aspect of the online business landscape, making it virtually impossible to escape its grasp.
From search engine optimization to online advertising, productivity tools to web analytics, Google’s ecosystem encompasses a vast array of products and services that have become indispensable for businesses seeking to succeed in the digital age.
While alternative solutions may exist, none possess the ubiquity, reach, and influence of Google’s ecosystem.
To thrive in today’s digital landscape, businesses must embrace Google’s dominance and leverage its suite of products and services to their advantage.
You have no choice.
E-Business
Hydrogen Hosts Catalyst Workshop, Highlights Resilient Business Models for Fintech Startups
As part of its mission to empower African businesses with tools needed to thrive, garner admiration, and foster global acclaim, leading payment solution company, Hydrogen Payment Services Company Limited (Hydrogen), recently partnered with the Co Creation Hub (CcHub), to host the latest edition of the Catalyst workshop in Lagos.
The discourse addressed the potential risks and opportunities for startups and saw experts advise participants on the need to develop resilient business models that would scale across different economic climes.
Moderated by Miracle Ezechi, Digital Marketing Manager, Hydrogen, the panel session addressed dominant issues about the theme: ‘Adapting Fintech Business Models to Economic Climes: Flexibility, Agility and Customer-centricity’.
Mr. Emeka Awagu, Chief Technology Officer, Hydrogen, who spoke as a panellist, addressed the issue of customer-centricity, which according to him, is key to Fintech growth.
He advised startups to listen to customer demands and understand their needs in order to develop the right solutions that will lead to long term market viability.
“Innovation is key for startup growth. However, understanding customers’ needs and change in behaviour will help any startup to innovate better.
“Startups must be flexible and agile to develop solutions with high interoperability and processing speed, and they must be ready to learn from startups that have failed,” Awagu said.
With an estimated 61.07 percent of startups failing, the participants stressed the need for prudence.
“Statistically, a staggering number of startups fail, often due to financial mismanagement. Hence, founders must prioritise understanding and maintaining a healthy the Cost-to-Earnings ratio.
“It is not just a number, but a pivotal indicator of a company’s financial health as well as being a key attractiveness determinant for investors,” Awagu added.
On his part, Ina Alogwu, the Group Director, Digital Transformation, ARM HOLDCO, who also spoke as a panellist at the session, stressed the need for startups to develop sustainable products and solutions that will help them remain competitive in an environment that is faced with harsh economic realities.
“Many startup businesses fail within their first five years, however upcoming startups should not be discouraged, rather develop a culture that will encourage them to understand the reasons for failure and learn from mistakes.
“Startups should not be too rigid with their solutions and should be ready to accept changes that will drive innovation,” Alogwu stated.
Hydrogen will be deepening its economic impact series with a webinar planned for Thursday, April 25, even as businesses across Africa continue to face an array of challenges, ranging from inflation and currency fluctuations to rising operating costs.
Themed ‘Navigating Economic Challenges: Strategies for Sustainable Growth,’ the webinar will delve into key areas critical for businesses to not only survive but thrive in the face of economic adversity. Register using this link – https://bit.ly/Hydrogenwebinar.
Esteemed panellists for this event include Taofik Odukoya, CEO, Vanguard Pharmacy, and Okechukwu Odimgbe, Chief Financial Officer, Hydrogen. The session will be moderated by Nnenna Sam-Obioha, Ecosystem Orchestrator, Hydrogen.
NITDA, ICF Train 100 Schoolgirls in ICT Skills
Airtel Nigeria Leads Telecom Market Surge
CIBN says Recapitalization will Empower Banks to Lend more to Economy
New Report Reveals 20% of Nigerians Use Bitcoin to Transact Daily
President Tinubu Appoints Jim Ovia as Student Loan Fund Chairman
See Full List of Fake Loan Apps Blacklisted By CBN
CBN Sacks another 50 Staff, 117 Disengaged in 20 Days
New CAMON Device Set to Redefine Mobile Content Creation
AfDB, AGF Partner on Female Entrepreneurs’ Access to Finance
Detained Binance executive drags EFCC, NSA to court
News3 days agoNigerian Banks Lost over N8Bn to Internet Fraudsters in 2022- EFCC
Telecom3 days agoSecure Identity Alliance: OSIA Becomes Official ITU Standard
Telecom2 days agoQualcomm Shortlists Startups for Qualcomm Make in Africa 2024 and Awards 2023 Wireless Reach Social Impact Fund
News2 days ago9mobile Partners Microsoft to Host Impactful Training Session for Journalists
News2 days ago60 Hearty Cheers to Chioma Ekeh, Africa’s Leading Unusual Female Tech
Telecom2 days agoALTON, ATCON Urge FG to Address Telecoms Industry Challenges
News2 days agoAcademic Technologists Propose N350,000 Minimum Wage
E-Business3 days agoDexude Secures Funding to Revolutionize Education in Nigeria, Beyond