Connect with us

E-Business

Firm Reports a 48% Increase in Malicious Packages Threatening Software Supply Chains

Published

on

Kindly share this post

Kaspersky’s Global Research and Analysis Team (GReAT) experts at the 10th annual Cyber Security Weekend – META 2025 held recently, talked about supply chain attacks and reported that by the end of 2024 a total of 14,000 malicious packages were found in open-source projects, a 48% increase compared to the end of 2023. 42 million versions of open-source packages have been examined by Kaspersky throughout 2024 in search for vulnerabilities.

Open-source is software with source code that anyone can inspect, modify, and enhance. Popular open-source packages include GoMod, Maven, NuGet, npm, PyPI, and others.

These are tools that power countless applications and help developers easily find, install, and manage pre-built code libraries, making it simpler to build software by reusing code others have written. Attackers take advantage of the popularity of these and other packages.

In March 2025, the Lazarus Group was reported to have deployed several malicious npm packages, which were downloaded multiple times before removal. These packages contained malware to steal credentials, cryptocurrency wallet data, and deploy backdoors, targeting developers’ systems across Windows, macOS, and Linux.

The attack leveraged GitHub repositories for added legitimacy, highlighting the group’s sophisticated supply chain tactics. Kaspersky’s GReAT also found other npm packages related to this attack. Malicious npm packages could have been integrated into web development, cryptocurrency platforms, and enterprise software, risking widespread data theft and financial losses.

In 2024, a sophisticated backdoor was discovered in XZ Utils versions 5.6.0 and 5.6.1, a widely used compression library in Linux distributions. Inserted by a trusted contributor, the malicious code targeted SSH servers, enabling remote command execution and threatening countless systems globally.

Detected before widespread exploitation due to performance anomalies, the incident highlighted the dangers of supply chain attacks. XZ Utils is integral to operating systems, cloud servers, and IoT devices, making its compromise a threat to critical infrastructure and enterprise networks.

In 2024, Kaspersky’s GReAT discovered that attackers uploaded malicious Python packages like chatgpt-python and chatgpt-wrapper to PyPI, mimicking legitimate tools for interacting with ChatGPT APIs.

These packages, designed to steal credentials and deploy backdoors, capitalised on the popularity of AI development to trick developers into downloading them. These packages could have been used in AI development, chatbot integrations, and data analytics platforms, endangering sensitive AI workflows and user data.

“Open-source software is the backbone of many modern solutions, but its openness is being weaponised. The 50% rise in malicious packages by the end of 2024 shows attackers are actively embedding sophisticated backdoors and data stealers in popular packages, which millions rely on.

“Without rigorous vetting and real-time monitoring, a single compromised package can trigger a global breach. Organisations need to secure the supply chain before the next XZ Utils-level attack succeeds,” comments Dmitry Galov, Head of Research Center for Russia and CIS at Kaspersky’s Global Research and Analysis Team.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Nigerian Terra Industries Secures $11.8m for Expansion

Published

on

Kindly share this post

Terra Industries, a Nigerian defence technology startup, has raised $11.75 million to expand its development of defensive systems that protect critical facilities across Africa.

The fundraising round was led by Silicon Valley venture firm 8VC, which was founded by Palantir co-founder Joe Lonsdale.

Other investors in the round include Valour Equity Partners, Lux Capital, SV Angel, and Nova Global, as well as African-focused funds Tofino Capital, Kaleo Ventures, and DFS Lab.

Terra Industries, founded in Abuja by Nathan Nwachuku and Maxwell Maduka, provides multi-domain security solutions for both air and land. Its solutions are intended to detect and respond to threats including terrorism, sabotage, and armed attacks on infrastructure.

The company’s product portfolio includes surveillance drones, ground-based robotic systems, and fixed monitoring towers deployed around sensitive locations.

Co-founder and CEO Nathan Nwachuku said the company has now fully embraced its identity as a defence-focused startup, citing the growing urgency of security challenges across Africa.

He said safeguarding critical infrastructure from terrorist threats has become unavoidable.

Nwachuku argues that protecting Africa’s infrastructure requires a different approach, one that combines local manufacturing, end-to-end system control, and software capable of independently identifying and responding to threats over large areas.

The company aims to position itself as a defence prime, similar to the role played by firms such as Anduril Industries and Palantir in the United States.

Nwachuku also disclosed that the company had earlier raised $800,000 in pre-seed funding.

With the new funding, Terra plans to increase manufacturing capacity within Africa, establish additional defence production facilities, and expand its artificial intelligence and software teams.

While software offices are planned for San Francisco and London, the company said manufacturing operations will remain on the continent.

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Warns Telecom Threats from 2025 will Carry into 2026 as New Technology Adds New Risk

Published

on

Kindly share this post

Kaspersky Security Bulletin reviews what shaped telecom cybersecurity in 2025 and what is likely to persist in 2026. Advanced Persistent Threat (APT) activity, supply-chain compromise, DDoS disruption and SIM-enabled fraud continued to pressure operators in 2025, while newer technology deployments introduce additional operational risk.

In 2025, telecom operators faced four broad threat categories. Targeted intrusions (APTs) continued to focus on gaining stealthy access to operator environments for long-term espionage and leverage through privileged network positioning.

Supply chain vulnerabilities remained an entry point: telecom ecosystems rely on many vendors, contractors and tightly integrated platforms, so weaknesses in widely used software and services can provide a path into operator networks. Finally, DDoS remained a practical availability and capacity problem.

Kaspersky Security Network showed that last year, between November 2024 and October 2025, 12,79% of users in the telecommunications sector encountered web threats and 20,76% faced on-device threats. 9,86% of telecom organisations worldwide experienced ransomware.

At the same time, the telecommunications sector is moving from rapid technological development to broad implementation — and the report argues that this shift creates new opportunities and new operational risks for 2026.

Kaspersky highlights three areas where technology transitions could introduce disruption if rolled out unevenly or without strong controls: AI-assisted network management, where automation can amplify configuration errors or act on misleading data; post-quantum cryptography transitions, where rushed deployment of hybrid and post-quantum approaches could cause interoperability and performance issues across IT, management and interconnect environments; and 5G-to-satellite integration (NTN), where expanding service footprints and partner dependencies introduce new integration points and potential failure modes.

“The threats that dominated 2025 — APT campaigns, supply chain attacks, DDoS floods — aren’t going away. But now they intersect with operational risks from AI automation, quantum-ready cryptography, and satellite integration.

Telecom operators need visibility across both dimensions: maintaining strong defences against known threats while building security into these new technologies from day one. The key is continuous threat intelligence that spans from endpoint to edge to orbit,” said Leonid Bezvershenko, senior security researcher at Kaspersky Global Research & Analysis Team.

 


Kindly share this post
Continue Reading

E-Business

Study Reveals 88.5% of Phishing Attacks Focus on Stealing Account Credentials

Published

on

Kindly share this post

Kaspersky analysed phishing and scam campaigns observed from January through September 2025 and found that 88.5% of attacks globally sought credentials for various online accounts.

Another 9.5% targeted personal data such as names, addresses, and dates of birth, while 2% focused on bank card details.

According to data from Kaspersky, over 38 million phishing links were clicked in Africa in the previous year (from November 2024 to October 2025) – all of which were detected and blocked by Kaspersky solutions.

Not everyone uses protective solutions on their devices however, and phishing remains one of the most prevalent cyber threats, with attackers luring users to fake websites where they unwittingly surrender their login credentials, personal information, or bank card details.

Kaspersky research shows that most phishing pages transmit stolen information via email, Telegram bots, or attacker-controlled panels, before it enters underground resale channels.

Data stolen through phishing is rarely used only once: credentials from multiple campaigns are consolidated into data dumps and sold on dark web markets, in some cases for as little as $50. Buyers sort and verify the data to check whether accounts remain active and reusable across different services.

According to Kaspersky Digital Footprint Intelligence, average 2025 prices ranged from $0.90 for global Internet portals to $105 for crypto platforms and $350 for online banking access. Personal documents such as passports or ID cards sold for about $15 on average, with pricing influenced by account age, balance, linked payment methods, and security settings.

As datasets are enriched and combined, attackers can build detailed digital profiles that may later support targeted attacks on executives, finance staff, IT-administrators or individuals with valuable assets or personal documents.

“Our analysis shows that credentials account for nearly 90% of phishing attempts. Once collected, logins, passwords, phone numbers, and personal details are aggregated, checked, and resold, sometimes years after the initial theft.

Combined with new information, even old credentials can enable account takeovers and targeted attacks against both individuals and organisations.

By leveraging open-source intelligence and old breach data, attackers can craft highly personalised scams, turning one-time victims into long-term targets for identity theft, blackmail, or financial fraud,” said Olga Altukhova, senior web content analyst at Kaspersky.


Kindly share this post
Continue Reading

Trending