Connect with us

General News

Firm Explores the Evolution of AI-powered Ransomware with Password-gated Capabilities

Published

on

Kindly share this post

Kaspersky experts have revealed the inner workings of FunkSec — a ransomware group that illustrates the future of mass cybercrime: AI-powered, multifunctional, highly adaptive and operating on volume with ransoms as low as $10,000 to maximise profits.

Kaspersky’s Global Research and Analysis Team (GReAT) constantly monitors the ransomware threat landscape, where attacks continue to rise. According to the company’s latest State of Ransomware report, the share of users affected by ransomware attacks worldwide increased to 0.44% from 2023 to 2024, up by 0.02 percentage points.

While this percentage may appear modest compared to other cyber threats, it reflects the fact that attackers typically prioritise high-value targets rather than mass distribution, making each incident potentially devastating. Within this evolving landscape, FunkSec has emerged as a particularly concerning threat.

Active for less than a year since its emergence in late 2024, FunkSec has quickly surpassed many established actors by targeting government, technology, finance and education sectors. What sets FunkSec apart is its sophisticated technical architecture and AI-assisted development.

The group packages full-scale encryption and aggressive data exfiltration into a single Rust-based executable, capable of disabling over 50 processes on victim machines and equipped with self-cleanup features to evade defenses.

Advertisement

Beyond its core ransomware functionality, FunkSec has expanded its toolkit to include a password generator and a basic DDoS tool — both showing clear signs of code synthesis using large language models (LLMs).

FunkSec’s approach reflects the evolving landscape of mass cybercrime, combining advanced tools and tactics. Kaspersky’s GReAT experts highlight the key features that define their operations:

Password-Controlled functionality

GReAT experts discovered that FunkSec ransomware features a unique password-based mechanism that controls its operation modes. Without a password, the malware performs basic file encryption, while providing a password activates a more aggressive data exfiltration process in addition to encryption to steal sensitive data.

FunkSec packs full-scale encryption, local exfiltration and self-cleanup into a single Rust binary—without a side-loader or a companion script. That level of consolidation is uncommon and gives affiliates a plug-and-play tool they can deploy almost anywhere.

Advertisement

Use of AI in development

Code analysis shows that FunkSec is actively using generative artificial intelligence to create its tools. Many parts of the code seem to be automatically generated rather than manually written. Signs of this generic placeholder comments (such as “placeholder for actual check”) and technical inconsistencies, like commands for different operating systems that don’t align properly. Additionally, the presence of declared but unused functions—such as modules included upfront but never utilised — reflects how large language models combine multiple code snippets without pruning redundant elements.

“More and more, we see cybercriminals leveraging AI to develop malicious tools. Generative AI lowers barriers and accelerates malware creation, enabling cybercriminals to adapt their tactics faster.

By reducing the entry threshold, AI allows even less experienced attackers to quickly develop sophisticated malware at scale,” comments Marc Rivero, Lead Security Researcher at Kaspersky’s GReAT.

High-volume, low-ransom strategy

Advertisement

FunkSec demands unusually low ransom payments, sometimes as little as $10,000, and pairs this with the sale of stolen data at discounted prices to third parties. This strategy appears designed to enable a high volume of attacks, helping the group quickly establish its reputation within the cybercriminal underground. Unlike traditional ransomware groups that seek million-dollar ransoms, FunkSec employs a high-frequency, low-cost model — further underscoring its use of AI to streamline and scale operations.

Expands beyond ransomware

FunkSec has expanded its capabilities beyond the ransomware binary. Its dark leak site (DLS) hosts additional tools, including a Python-based password generator designed to support brute-force and password-spraying attacks, as well as a basic DDoS tool.

Advanced evasion

FunkSec employs advanced evasion techniques to avoid detection and complicate forensic analysis. The ransomware is capable of stopping over 50 processes and services to ensure thorough encryption of targeted files. Additionally, it includes a fallback mechanism to execute certain commands even if the user launching FunkSec lacks sufficient privileges.

Advertisement

 

Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

General News

FG Secures Fresh $208.3m World Bank Loan for Cash Transfer

Published

on

Kindly share this post

Federal government has secured a fresh $208.3 million financing from the World Bank to strengthen Nigeria’s cash transfer programme targeted at poor and vulnerable households as the country continues to grapple with the economic impact of ongoing reforms.

FG Secures Fresh $208.3m World Bank Loan for Cash Transfer

President Bola Tinubu’

The new facility is expected to bolster the government’s social protection initiative by providing direct cash support to millions of low-income Nigerians affected by rising living costs following the removal of petrol subsidy and the liberalisation of the foreign exchange market.

The funding forms part of the World Bank-backed social safety net programme aimed at cushioning the impact of economic reforms while improving the country’s social protection system.

It is also expected to support efforts to enhance the National Social Register, strengthen payment systems and ensure that financial assistance reaches eligible beneficiaries more efficiently.

The latest financing adds to a growing list of World Bank-supported projects approved under President Bola Tinubu’s administration.

Since the administration assumed office in May 2023, Nigeria has secured more than $11.4 billion in World Bank loan approvals across key sectors, including power, agriculture, healthcare, education, digital infrastructure, financial inclusion and social protection.

Advertisement

However, only part of the approved funding has been disbursed, with several projects still at various stages of implementation.

Government officials have maintained that expanding the cash transfer programme is essential to protecting vulnerable Nigerians from the short-term effects of economic reforms while laying the foundation for long-term economic stability.

However, the fresh borrowing has renewed concerns among economists and policy analysts over Nigeria’s rising debt burden and increasing dependence on external financing.

Critics have called for greater transparency in the utilisation of borrowed funds and improved monitoring of social intervention programmes to ensure that the intended beneficiaries receive the support.

According to data from the Debt Management Office (DMO), Nigeria’s total public debt stood at approximately ₦159.28 trillion as of December 31, 2025, with multilateral lenders, particularly the World Bank, accounting for a significant portion of the country’s external debt portfolio.

Advertisement

Despite the concerns, analysts note that World Bank loans are generally concessional, offering lower interest rates and longer repayment periods than commercial loans.

They argue that the ultimate value of the new financing will depend on effective implementation, accountability and the successful delivery of cash support to vulnerable households across the country.

Kindly share this post
Continue Reading

General News

SERAP Sues INEC over Alleged N800Bn 2027 Tinubu Campaign Fund

Published

on

Kindly share this post

Socio-Economic Rights and Accountability Project (SERAP) has filed a legal action against the Independent National Electoral Commission (INEC) for allegedly failing to investigate claims that governors under the All Progressives Congress (APC) diverted N800 billion from public funds to finance President Bola Tinubu’s re-election bid.

SERAP Sues INEC over Alleged N800Bn 2027 Tinubu Campaign Fund

The lawsuit, marked FHC/ABJ/CS/1426/2026, was filed last week before the Federal High Court in Abuja.

SERAP is asking the court to issue an order of mandamus directing INEC to investigate the allegations and compel the commission to obtain full disclosure from the APC and the governors on the alleged campaign fund, including the identities of donors and the lawful sources of the funds.Campaigns & Elections.

The organisation is also seeking an order directing INEC to commence a formal review into compliance with Section 91 of the Electoral Act by political parties and candidates, particularly regarding the sources and scale of campaign financing in the current political cycle.

According to SERAP, the allegations raise serious concerns about political finance transparency, electoral integrity and Nigerians’ constitutional right to participate freely in governance.

Advertisement

In the suit filed on its behalf by lawyers Kolawole Oluwadare and Kehinde Oyewumi, the organisation argued that the reported diversion of public funds for political purposes poses a significant threat to the credibility of the 2027 general elections.

It maintained that opaque political financing remains a major gateway for corruption and undermines public confidence in democratic institutions.

“The abuse of state resources for electoral advantage undermines democratic integrity and public trust. Fairness, transparency, and accountability in political or campaign finance are essential safeguards against corruption, state capture, and undue influence in democratic processes,” SERAP stated.

The organisation argued that Section 91 of the Electoral Act empowers INEC to regulate political donations, require disclosure of campaign contributions and enforce sanctions where donation limits are exceeded.

It noted that political parties found to have exceeded donation limits are liable to a fine of up to N10m and forfeiture of excess funds, while individuals who exceed the legal threshold face fines amounting to five times the excess contribution.

Advertisement

SERAP further contended that the commission has constitutional and statutory obligations to ensure transparency in political financing and prevent the misuse of public resources for electoral advantage.

According to the group, allegations involving large-scale public funds and opaque financial arrangements fall squarely within INEC’s investigative and monitoring responsibilities under the Constitution and the Electoral Act.

The suit also cited Sections 13, 14(2)(c) and 15(5) of the 1999 Constitution (as amended), arguing that they impose obligations on public institutions, including INEC, to safeguard democratic participation, prevent corruption and uphold constitutional principles.

SERAP further relied on international legal instruments, including the African Charter on Human and Peoples’ Rights, the International Covenant on Civil and Political Rights and the United Nations Convention against Corruption, which it said require transparency in political financing and accountability in the management of public resources.

The organisation argued that any diversion of public funds for campaign purposes would amount to a violation of both domestic and international legal obligations and would undermine the principle of a level playing field in elections.

Advertisement

No date has been fixed for the hearing of the suit.

Kindly share this post
Continue Reading

General News

Hydrogen Employees Lead Blood Donation Drive to Support Lagos Communities

Published

on

Kindly share this post

Hydrogen Payment Services Company Limited has reinforced its commitment to community impact through an employee-led blood donation drive in partnership with the Lagos State Blood Transfusion Service (LSBTS) and Gbagada General Hospital.

Held recently, the initiative extended this year’s World Blood Donor Day campaign, themed “One Drop of Humanity. Give Blood. Save Lives.” It brought together Hydrogen employees in a collective effort to strengthen blood reserves for patients across Lagos State.

The drive recorded strong participation, with employees voluntarily donating blood to support critical healthcare needs, including emergency care, surgical procedures, maternal health, sickle cell treatment, and assistance for accident victims. The contributions will help bolster the state’s blood bank and improve access to life-saving interventions.

Medical teams from LSBTS and Gbagada General Hospital supervised the exercise and engaged participants on the importance of regular voluntary blood donation. They also addressed common misconceptions, reinforcing the role of consistent donors in maintaining a safe and adequate blood supply.

Dr. Folashade Tawak, Senior Medical Practitioner with the Lagos State Government, commended the initiative.

Advertisement

“Voluntary blood donation remains one of the most impactful ways individuals can contribute to saving lives. We commend Hydrogen for driving this initiative and encouraging active employee participation. Efforts like this are critical to sustaining the blood reserves needed for patients in urgent need,” she said.

Fiyinfoluwa Olorunsola, Acting Chief Executive Officer of Hydrogen, said the initiative reflects the company’s broader purpose.

“At Hydrogen, our responsibility goes beyond building payment infrastructure. We are committed to making a meaningful difference in the communities we serve. This drive brings our people together around a cause that directly saves lives, and I am proud of the culture we are building, defined by purpose, compassion, and service,” she noted.

Also speaking, Obinna Ojekwe, Head of Marketing and Communications, highlighted the personal impact of the initiative: “While we enable the seamless movement of value every day, this initiative allowed us to give something more personal. Knowing that a simple act can save lives makes this deeply meaningful, and it reflects the kind of organisation we are proud to be part of.”

The blood donation drive underscores Hydrogen’s commitment to creating value beyond financial transactions by empowering its employees to contribute meaningfully to society. It forms part of the company’s broader 2026 employee volunteering and CSR programme, with additional community-focused initiatives planned throughout the year.

Advertisement

Hydrogen Payment Services Company Limited Hydrogen Payment Services Company Limited (Hydrogen) is Africa’s institutional payments infrastructure partner, enabling financial institutions and large organisations to process, move, and settle payments at scale with trust and operational integrity.

Through resilient, Africa-focused infrastructure, Hydrogen helps institutions manage payment complexity, improve efficiency, and deliver reliable services across the continent.

Kindly share this post
Continue Reading

Trending