Connect with us

E-Business

Firm Unveils Banking Trojan’s Sneaky Evolution and Cryptocurrency Threats

Published

on

Kindly share this post

Kaspersky experts have analysed a recent campaign by Zanubis, a banking Trojan distinguished by its adeptness at assuming the guise of legitimate applications.

The investigation also sheds light on the recently discovered AsymCrypt cryptor/loader and the evolving Lumma stealer, underscoring the increasing need for enhanced digital security.

Zanubis, an Android banking trojan, surfaced in August 2022, targeting financial and crypto users in Peru. Impersonating legitimate Peruvian Android apps, it tricks users into granting Accessibility permissions, surrendering control.

In April 2023, Zanubis evolved, posing as the official app for the Peruvian governmental organisation SUNAT (Superintendencia Nacional de Aduanas y de Administración Tributaria), showcasing increased sophistication.

Zanubis is obfuscated with the help of Obfuscapk, a popular obfuscator for Android APK files. Once it gets permission to access the device, it tricks a victim by loading a real SUNAT website using WebView, making it seem legitimate.

To communicate with its controlling server, it uses WebSockets and a library called Socket.IO. This allows it to adapt and stay connected even if there are issues. Unlike other malware, Zanubis doesn’t have a fixed list of target apps.

Instead, it can be programmed remotely to steal data when specific apps are running. This malware even creates a second connection, which could give the bad actors full control over your device. And the worst part is, it can disable your device by pretending to be an Android update.

Another recent discovery made by Kaspersky is AsymCrypt cryptor/loader, which targets crypto wallets and is being sold on underground forums. As the investigation showed, it is an evolved DoubleFinger loader version, acting as a “front” to a TOR network service.

Buyers customise injection methods, target processes, startup persistence, and stub types for malicious DLLs, concealing the payload in an encrypted blob within a .png image uploaded to an image hosting site. Execution decrypts the image, activating the payload in memory.

Kaspersky’s tracking of cyber threats has also led to the Lumma stealer, an evolving malware lineage. Originally known as Arkei, the rebranded Lumma retains 46% of its former attributes. Disguised as a .docx to .pdf converter, its deceptive distribution triggers the malicious payload when uploaded files return with a double extension .pdf.exe.

Over time, the main functionality of all the variants has remained the same: stealing cached files, configuration files and logs from crypto wallets.

It can do this by acting as a browser plugin, but it also supports the standalone Binance application. Lumma’s evolution includes acquiring system process lists, changing communication URLs, and advancing encryption techniques.

“Cybercriminals are relentless in their pursuit of monetary gain, venturing into the world of cryptocurrencies and even impersonating government institutions to achieve their objectives.

“The ever-evolving landscape of malware, exemplified by the multifaceted Lumma stealer and the ambitions of Zanubis as a full-fledged banking Trojan, underscores the dynamic nature of these threats.

“Adapting to this constant transformation in malicious code and cybercriminal tactics poses an ongoing challenge for defense teams. To safeguard against these evolving dangers, organisations must remain vigilant and well-informed.

“Intelligence reports play a pivotal role in keeping abreast of the latest malicious tools and attacker techniques, empowering us to stay one step ahead in the ongoing battle for digital security,” comments Tatyana Shishkova, a lead security researcher (GReAT) at Kaspersky.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Published

on

Kindly share this post

Konga, Nigeria’s leading composite e-commerce platform, has launched its inaugural 2026 shopping campaign, Konga Jara, offering 25 per cent discount on Starlink internet kits alongside free nationwide delivery.

Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Konga

The campaign, drawing from the Nigerian concept of “jara” — the extra value traders add to purchases — aims to deliver exceptional deals across categories, helping shoppers turn new year aspirations into reality through affordable technology and value-driven shopping.

To qualify for the Starlink discount, customers must purchase kits on Konga.com, activate them at starlink.com/activate, and email activation details to [email protected] for verification against Starlink’s records. Discounts are subject to terms and conditions.

Konga said spotlighting Starlink underscores reliable internet’s role in Nigeria’s digital economy, supporting work, learning, entrepreneurship and communication for households and businesses.

Mr Onochie Melvin, Head of Commercial Planning at Konga, said: “We listened carefully to what Nigerians said they needed to truly kickstart 2026 on the right footing. Reliable internet connectivity emerged as the foundation upon which other aspirations depend.”

He added: “Students need it for online learning, entrepreneurs need it to scale digital businesses, and professionals rely on it for remote work. This Starlink offer is not just about selling products; it is about removing barriers that prevent Nigerians from fully participating in the digital economy.”

Beyond connectivity, Konga Jara provides genuine products from original equipment manufacturers (OEMs) with transparent pricing, warranties and authenticity guarantees.

As a composite e-commerce ecosystem, Konga integrates shopping, payments and logistics for seamless nationwide access, with exclusive deals shared via its social media channels throughout the campaign.

Shoppers can explore offers at www.konga.com and follow Konga’s official pages for updates across the Konga Group.


Kindly share this post
Continue Reading

E-Business

Firm Identifies Global Scam Activity Linked to the Release of Avatar 3

Published

on

Kindly share this post

The premiere of Avatar 3 has taken place in several countries and has been accompanied by a noticeable increase in online interest. Amid the heightened attention surrounding the release, Kaspersky experts identified an increase in cyber-scam campaigns that exploit the movie’s launch and users’ desire to watch it online. The fraudulent websites target users across multiple regions, indicating attempts by attackers to reach a global audience.

The scam operates as follows: cybercriminals create suspicious websites that offer online access to the Avatar 3 movie. Attackers place particular emphasis on localisation, publishing the sites in multiple languages to attract users from different countries. However, the translations are often poorly executed and contain grammatical errors and inconsistencies, which may serve as indicators of fraudulent activity.

When users attempt to start the video, they are presented with a fake media player and prompted to register in order to obtain “full” or “unlimited” access to the film. As part of the registration process, users are asked to provide personal information, including an email address and mobile phone number.

At later stages, scammers may request additional data, including payment details, under the guise of activating a “free trial.” This creates risks of credential compromise, particularly if users reuse passwords across multiple services, and may also lead to financial losses.

“Cybercriminals consistently exploit major movie premieres to capture users’ attention and increase the effectiveness of their schemes. We advise accessing films only through official platforms and exercising caution when encountering websites that request personal or payment information. It is also important to use reliable security solutions to protect all devices, including mobiles,” comments Olga Altukhova, Senior web content analyst at Kaspersky.

 


Kindly share this post
Continue Reading

E-Business

Galaxy Backbone Celebrates the Federal Government’s Paperless Civil Service Milestone

Published

on

Kindly share this post

Galaxy Backbone (GBB) aligns with and celebrates the successful announcement by the Office of the Head of the Civil Service of the Federation on the achievement of a Paperless Civil Service, a significant milestone in Nigeria’s public sector reform and digital transformation agenda.

The milestone was formally highlighted at a press briefing led by the Head of the Civil Service of the Federation, Mrs. Didi Esther Walson-Jack, who commended Galaxy Backbone for its sustained support and contribution throughout the implementation of the programme.

GBB has played a critical role in enabling this transition by providing secure, scalable, and shared digital infrastructure that supports the digitisation of government processes across Ministries, Departments and Agencies (MDAs). Through the 1Government Cloud, MDAs have been empowered to migrate from paper-based workflows to digital platforms, improving efficiency, collaboration, data security, and service delivery across the Federal Civil Service.

In addition, GovMail, GBB’s secure government email platform, has strengthened official communication, enhanced records management, and reinforced cybersecurity standards—key pillars in sustaining a paperless operating environment.

Galaxy Backbone acknowledges the collective efforts of the Office of the Head of the Civil Service of the Federation, Permanent Secretaries, Directors of ICT, consultants, partners, and dedicated public servants whose commitment and collaboration ensured the smooth delivery of this initiative.

The Managing Director/Chief Executive Officer of Galaxy Backbone, Prof. Ibrahim Adeyanju, was represented at the press briefing by Akintayo Bamisaye, Acting Group Head, Research, Digital Innovation and Skills Department (RDIS).

GBB describes the achievement as a strong close to 2025 and reaffirms its commitment to supporting the Federal Government in building a modern, efficient, and digitally enabled public service.


Kindly share this post
Continue Reading

Trending