Connect with us

E-Business

Cybersecurity Firm Uncovers CrystalX RAT which Steals Data, Mocks its Victims

Published

on

Kindly share this post

Kaspersky Global Research & Analysis Team (GReAT) has uncovered an active malicious campaign distributing a previously undocumented RAT with a very broad feature set. Beyond the standard remote access trojan functionality, it combines stealer, keylogger, clipper, and spyware capabilities.

Cybercriminals are selling it to third parties as MaaS (malware-as-a-service) promoting it on YouTube and Telegram, increasing the likelihood of its use across a wider range of actors, including less-skilled operators.

Due to its stealer functionality, the malware can collect a wide range of data about its victim: it gathers system information, extracts credentials for Steam, Discord and Telegram, and also harvests data from web browsers. It also poses a threat to cryptocurrency users, as it includes a browser-based clipper that replaces crypto wallet addresses.

Beyond data theft, CrystalX RAT is capable of full-scale surveillance, with the ability to take screenshots, record audio from the microphone, and capture video from both the webcam and the victim’s screen.

Particularly notable is the CrystalX RAT “playful” Prankware feature set, which is actively promoted by the developers. These capabilities allow operators to visibly interfere with the victim’s system by shaking the mouse cursor, setting wallpapers on the victim’s screen, changing screen orientation, hiding desktop icons, forcing system shut downs, and even delivering real-time pop-up notifications and messages to the victim.

While seemingly trivial, these features introduce a disruptive and psychological dimension to the attack, making the attack both visible and distressing for the victim.

Kaspersky reports attacks targeting users in Russia, but the trojan has the potential to spread to other countries due to its sales and distribution model.

“Such a diverse feature set effectively enables a 360-degree compromise of the victim and a complete loss of privacy. Beyond gaining access to account credentials, the stolen data could potentially be used for blackmail.

“At the moment, the initial infection vector is not precisely known, but it is already affecting dozens of victims. Our telemetry is already detecting new versions of the implants, indicating that this malware is still actively developed and maintained.

“We expect the number of victims to grow significantly and its geographic spread to expand in the near future,” says Leonid Bezvershenko, senior security researcher at Kaspersky GReAT.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

E-Business

Kaspersky Transforms Threat Intelligence Reporting into an Interactive Content Hub

Published

on

Kindly share this post

Easy interaction with exclusive Kaspersky reports, geo-filtering and actionable intelligence in a single click: expert insights on Advanced Persistent Threats (APT), Crimeware and Industrial Control Systems (ICS) threats are now available directly in Kaspersky Threat Intelligence Portal — with charts and visuals rendered inline.

In an era of increasingly sophisticated and frequent attacks, threat intelligence inevitably evolves into a business enabler that equips security teams with strategic advantage in their mission to back their company’s stability and growth.

Kaspersky, a recognised leader in threat intelligence, facilitates informed decision-making and proactive risk mitigation by introducing simplified access to actionable and relevant threat insights.

Kaspersky Threat Intelligence Reporting is a subscription-based service delivering over 200 in-depth analysis reports annually. These insights are compiled by Kaspersky’s Global Research and Analysis Team, Industrial Control Systems Cyber Emergency Response Team and Threat Research experts through the continuous tracking of more than 900 threat actors and campaigns.

Following the update, all reports previously representing a library of static PDF files (that is more than 2000 exclusive Kaspersky reports published to date) are now structured and can be examined directly in the Kaspersky Threat Intelligence Portal. For offline use, the standard PDF download format remains available as well.

The update also introduces deeper integration within each report, featuring direct links to indicators of compromise (IoCs), detection rules (including YARA), and MITRE ATT&CK® techniques. Users can now perform a single-click drill-down into specific threat actors, malware families and Common Vulnerabilities and Exposures (CVEs) across diverse geographies and industries.

Smart geo-filtering streamlines investigations by prioritising content explicitly mentioning a selected country, followed by broader regional intelligence, giving analysts a complete geographic view in a single query.

Enhanced Kaspersky Threat Intelligence Reporting supports the following use cases:

  • Customised content discovery: apply geo, industry and software filters to instantly retrieve a list of relevant reports.
  • Exclusive intelligence: access the most recent incident investigation reports, including those without public disclosure, to understand the nature of an attack and identify the actions required for mitigation.
  • Actionable intelligence extraction: extract and apply threat data from the reports and apply it across specific infrastructure to detect traces of compromise.
  • In-depth Threat Lookup and contextual analysis: investigate suspicious indicators identified within the network and quickly determine if a specific IoC is linked to a related threat report.

“Empowering cybersecurity teams in their mission-critical daily work to ensure business resilience in a complex threat landscape. This is the main driver behind our ongoing visual and functional improvement initiative.

While updating Kaspersky Threat Intelligence Portal, we focused on refining the customer experience by optimising processes of active investigation, proactive incident monitoring and detailed mitigation techniques,” comments Alexander Mazikin, Head of Threat Intelligence Product Line at Kaspersky.


Kindly share this post
Continue Reading

E-Business

Weebly Websites to Shut Down for Nigeria, 66 Other Countries from September

Published

on

Kindly share this post

Weebly, US-based free, beginner-friendly, drag-and-drop website builder and eCommerce service, will no longer be available for customers in 67 countries, including Nigeria, after September 2026, according to an email seen by Nigeria CommunicationsWeek.

Weebly Websites to Shut Down for Nigeria, 66 Other Countries from September

Weebly said it is “winding down” services in different nations “due to changes in regulation and to simplify our global operations”.

The firm released a timeline of gradual changes, to help existing users access their data before the site shuts down.

Starting June 29, customers of 67 countries were no longer able to publish any new pages.

September 27, 2026: Weebly websites will be unpublished.

Before this date, users should download site content and data. Follow these steps:

Go to Account Settings, click on My Data, and select Download My Data.

This will help you migrate your content to another website provider, or retain it.

Concerned about privacy? Ask Weebly to delete your data, through the Erase Data and Forget Me option under the My Data tab on your account page.

December 26, 2026: Last date of accessing Weebly account.

Until this date, you will have access to the account, although sites will be unpublished.

This period helps users move their site, domains, and data to another service.

Domain names can be moved to another registrar only after 60 days from the registration date.

According to the Weebly website, users must make sure that they do not make changes to your registrant contact information (email, phone number, first/last name), as this will lead to a 60-day registrar lock and prevent you from transferring your domain name.

Note that domain name transfers work differently for country-specific domains; users must contact Weebly’s support team for assistance.

How to unlock, transfer domain name

From your Weebly Dashboard, go to websites, and click on Domains, then select Manage Domain.

Disable registrar lock, get EPP authorisation code, and copy the full code.

Disabling registrar lock will also disable privacy protection. It is important to set privacy protection once again with the new registrar.

Follow the instructions for the newly chosen registrar as the rest of the transfer process will be managed by them

Why is Weebly winding down?

While the firm attributed it to “a change in regulation,” online users have argued that Square, which acquired Weebly in 2018, is pushing its platform ‘Square Online’.

Square is originally a US-based payment processor, and the firm says it has since evolved into the “largest business tech platform”.

It calls Square Online a “free online store” but clarifies that those who do not sell online can also use it to build their websites.

In an earlier support update for the Weebly Website Builder, Square Online was consistently referred to as a better alternative, although at the time, it was said that Square “has no plans to discontinue the Weebly website builder”.

Which countries will Weebly no longer be available in?  Albania, Algeria, Andorra, Armenia, Aruba, Azerbaijan, Bahamas, Bahrain, Bangladesh, Barbadoa, Belarus, Benin and Bosnia and Herzegovina.

Others are: Cambodia, Cameroon, Chile, Colombia, Congo, Costa Rica, and Côte d’Ivoire.

Also affected are: Ecuador, Egypt, Ethiopia, French Polynesia,    Gabon, Georgia, Ghana, Guinea, Iceland, Jordan, Kazakhstan, Kenya, Laos, Malaysia, Mauritius, Moldova, Montenegro, Morocco, Nepal and New Caledonia.

The rest are: Nigeria, Oman, Pakistan, Palau, Paraguay, Peru, Russia, Saudi Arabia, Senegal, Serbia, Sierra Leone, Singapore, South Korea, Suriname, Taiwan, Tajikistan, Tanzania, Thailand, Turkey, Uganda, Ukraine, United Arab Emirates, Uruguay, Uzbekistan, Vietnam, Zambia and Zimbabwe.

 

 


Kindly share this post
Continue Reading

E-Business

NOTAP to Commercialise University Research, Expands Patent Drive

Published

on

Kindly share this post

National Office for Technology Acquisition and Transfer (NOTAP), has commenced the process of patenting and commercialisation of research works by universities and other research institutions in the country.

NOTAP to Commercialise University Research, Expands Patent Drive

Dr. Obiageli Amadiobi, director general of NOTAP

Dr. Obiageli Amadiobi, director general of NOTAP, stated this in Abuja, during an interaction with journalists on her achievements since assuming office.

Speaking on the theme, “Strengthening Indigenous Capacity: NOTAP’s Drive for Technology Transfer, Local Content Development, and Innovative activities,” Amadiobi said the agency had involved both the academia and industry so that researchers can work on topics brought forward for commercialisation purpose.

“My minister is very intentional about this– very intentional about commercialisation of research results, which we have already submitted to him. They are meaningful researches, which we need to commercialise.

“We have established 69 intellectual property technology transfer offices in 69 universities that we are still counting. We have informed the vice chancellors of Nigerian universities to set up such offices and we will come and educate them on intellectual property and technology transfers.

“As we are doing this, we are also taking record of all the researchers of these universities and research centres and documenting them in a compendium.

“So, we have compendiums from the universities to us and we put them in a database. If you will recall, recently, the ministry, our supervising ministry, which is the Federal Ministry of Innovation, Science, and Technology, launched a programme titled Energise Commercialisation. This entirely was for commercialisation of all R&Ds,” she said.

On research Institutions carrying out research on areas of industry needs, she said, “NOTAP is bridging the gap between research and development with industry needs, “it is on our programme called the NITDF, NOTAP Industry Technology Transfer Fellowship. By this programme, we engage the universities and the industries, in what we call the triple helix. We liaise with the universities and the industries to sponsor, the industries will sponsor a Ph.D candidate in a Nigerian university to conduct relevant researches.

“They will provide the topics that they want researches for and such students will research on that with the assistance of the industries, because they wear the shoes, so they know where it pinches them. But usually, there are Ph.D candidates already established. This year alone, we certified about 15 of them to enter into this programme and they have gone into the various universities.

“And we are still looking for people to update some of the projects; the research topics we already have. But we are not getting enough persons to do the researches. So, we are going to do further advertisement to see if other candidates will come up.


Kindly share this post
Continue Reading

Trending