E-Business
Gov Okowa Decries Low Turnout of Residents for NIN Enrolment
Senator Ifeanyi Okowa, executive governor of Delta State, has decried the low turnout of residents in the state for the National Identification Number (NIN) enrolment.
He also charged all residents in the state, to ensure that they enrol into the National Identity Database (NIDB) and receive their NIN, which is the only way they can effectively assert their identity in Nigeria.
The Governor made this call when he received the management of the National Identity Management Commission (NIMC), led by Engr. Aliyu Aziz, the DG/CEO at the Government House in Asaba on Monday.
While lamenting the poor enrolment figure for Delta state, which stood at around 600,000 persons as at the time of the visit, Gov. Okowa called for aggressive awareness creation and mobilization of the state residents towards ensuring they are visibly captured in the National Identity Management System.
He acknowledged the numerous benefits of the project for the state and the nation, which includes, but not limited to, assisting the state in planning for the socio-economic and health benefits of its citizens, identifying and verifying the workforce and easing of access to micro-credit facilities.
The Governor further pledged Delta state government’s readiness to support and collaborate with NIMC to ensure a wider coverage of the state, particularly the riverine areas.
“The Delta state government will work with the NIMC team to determine ways in which we can assist and help the Commission drive this laudable project here in the state and particularly reach those residing in the riverine areas, as their terrain requires special approach.” he said.
Earlier, the DG of NIMC highlighted the benefits of the NIMS and appealed to the state government to assist the Commission increase the number of enrolment centres in the state.
The NIMC DG also urged the Delta State Governor to partner the Commission by using the NIN and the NIN Verification Service (NVS) offered by NIMC, for civil servant verification, tax management, bursary management, among others.
E-Business
Cybercriminals Using “Joker: Folie à Deux” Release to Scam Fans
Kaspersky has uncovered cybercriminals exploiting the hype surrounding “Joker: Folie à Deux” ahead of its worldwide cinema premiere, for online phishing scams. Fans eager to watch the new movie online are at risk of being duped into giving away their sensitive data and money.
Kaspersky experts have identified phishing scams related to the new movie. The first example involves a fake offer to subscribe to watch the film for free.
On the fake website, users are asked to enter their credit card information to sign up, while the promised film is never accessible. The scammers gain access to the victim’s card details and can use them for fraudulent transactions or to sell on the dark web.
The second type of scam exploits the Joker movie brand to lure victims into fraudulent investment schemes, giveaways, or similar traps. Cybercriminals create phishing websites claiming to offer free access to the movie.
When users attempt to play the video, they are redirected to other pages – often promoting quick, easy money-making schemes, offering the chance to participate in a giveaway, or possibly other profits.
In the cases uncovered by Kaspersky, users are prompted to provide either personal information – so perpetrators can contact them with faux investment opportunities – or credit card details, for example, to pay for the delivery of the giveaway prize.
“As the premiere approaches, more people are looking for more ways to gain early access to the film and, as such, the risk of falling for such scams increases. We strongly recommend users carefully verify where they enter sensitive information and install reliable antivirus software that can warn against suspicious or malicious websites,” says Olga Svistunova, a security expert at Kaspersky.
To protect themselves from phishing-related risks, Joker movie fans should take precautions when navigating online content related to the premiere. Kaspersky experts recommend the following:
Be cautious. Beware of suspicious emails, messages, or websites offering exclusive deals or freebies. Always verify the source before sharing personal or financial information.
Safeguard personal data. Be mindful when providing sensitive information online, such as your address, phone number, or financial details, and only use secure platforms.
Verify website security. Ensure websites have secure connections by looking for “https://” in the URL and a padlock symbol in the address bar.
Use security solutions. Rely on trusted security solutions like award-winning Kaspersky Premium, that identifies malicious and phishing sites.
Trust reliable sources. Stick to official websites, authorised retailers, and reputable sources for any content to avoid scams.
E-Business
NDPC Extends Deadline for DCPMIS Registration, Warns Against Engaging Unregistered Data Processors
Dr. Vincent Olatunji, CEO/ National Commissioner of Nigeria Data Protection Commission has approved the extension of deadline for the registration of Data Controllers and Data Processors of Major Importance (DCPMIs).
The commission in a statement issued on Friday by Babatunde Bamigboye, Head, Legal, Enforcement & Regulations, said that the new deadline for registration without penalty is the 31st of October, 2024.
The statement reads, “In order to ensure accountability and in line with sections 24(3), 29(1)(a) and 44 of the Nigeria Data Protection Act, 2024 (NDP Act), DCPMIs shall only engage agents and contractors who are duly registered with the Commission (as at 15th October, 2024) for the processing of personal data”.
For ease of reference, section 29(1)(a) of the NDP Act provides: “Where a data controller engages the services of a data processor, or a data processor engages the services of another data processor, the data controller or data processor engaging another shall ensure that the engaged data processor —
(a) complies with the principles and obligations set out in this Act as applicable to the data controller;
“Furthermore, Section 65 of the NDP Act defines a data processor “as an individual, private entity, public authority, or any other body, who processes personal data on behalf of or at the direction of a data controller or another data processor.”
The Commission enjoins data controllers and data processors of major importance to immediately ensure that those who process personal data on their behalf fulfill the obligation to register as required by law. Engaging an agent or contractor who does not comply with the principles and obligations (set out in the NDP Act) that are applicable to the data controller is a contravention of the NDP Act.
E-Business
Kaspersky Reveals Half of Dark Web Exploit Listings Target Zero-day Vulnerabilities
Between January 2023 and September 2024, Kaspersky Digital Footprint Intelligence experts identified 547 listings to buy and sell exploits targeting software vulnerabilities.
These advertisements are posted on various dark web forums and shadow Telegram channels, with half involving zero-day and one-day vulnerabilities.
However, it is difficult to confirm whether these exploits are functional, as the dark market is rife with scams. Additionally, Kaspersky found that, on average, the cost of exploits for remote code execution vulnerabilities amounted to $100,000.
Exploits are tools used by cybercriminals to take advantage of vulnerabilities in various software programs, like those from Microsoft, to commit illegal activities, such as gaining unauthorised access or stealing data.
More than half of the dark web posts (51%) offered or sought to purchase exploits for zero-day or one-day vulnerabilities. Zero-day exploits target undiscovered vulnerabilities that software vendors have not identified and patched yet, while one-day exploits focus on systems that do not have the patch installed.
“Exploits can target any program, but the most desirable and expensive ones often focus on enterprise-level software. These tools enable cybercriminals to carry out attacks, which equate to substantial gains for them, such as stealing corporate information or spying on an organisation undetected.
However, some exploit offers on the dark web may be fake or incomplete, meaning they don’t function as advertised. Additionally, a significant portion of transactions are likely to occur in private.
These two factors complicate the assessment of the actual market volume for functional exploits,” explains Anna Pavlovskaya, Senior Analyst at Kaspersky Digital Footprint Intelligence.
The dark web market offers a wide array of different types of exploits. Two of the most widespread are those for RCE (Remote Code Execution) and LPE (Local Privilege Escalation) vulnerabilities.
According to an analysis of over 20 listings, the average price for RCE exploits is around $100,000, while LPE exploits typically cost about $60,000. RCE vulnerabilities are considered more dangerous, as they allow attackers to take control of a system or its components, or confidential data.
Dark web listings for buying and selling exploits, 2023-2024, where some offers can be repetitive. Source: Kaspersky Digital Footprint Intelligence
This year, the peak level in exploit sales and purchases occurred in May, with 50 relevant posts, compared to an average of about 26 per month in the period surrounding the surge. “Peaks in the exploit market’s activity are unpredictable and hard to link to specific events.
“Interestingly, in May, the dark web witnessed the sale of one of the most expensive exploits during the analysed period – allegedly, for a Microsoft Outlook zero-day vulnerability priced at nearly two million US dollars,” elaborates Anna Pavlovskaya.
“Overall, the exploit market remains stable; while activity fluctuates, the threat is always present. This highlights the need for cybersecurity hygiene practices, such as the regular patching and monitoring of digital assets on the dark web.”
- E-Business2 days ago
Cybercriminals Using “Joker: Folie à Deux” Release to Scam Fans
- Telecom2 days ago
Elon Musk’s X Slammed with $418,000 Fine in Australia for Failing to Provide Child Protection Data
- Telecom2 days ago
MTN Nigeria Expands Digital Offerings with Audiomack+ Music Subscription
- News2 days ago
New Cloud Service to Minimise Banks’ Exposure To Risks
- Telecom2 days ago
Nigerian Journalists Recount Experiences @QNET’s 2024 V-Convention
- E-Business2 days ago
NDPC Extends Deadline for DCPMIS Registration, Warns Against Engaging Unregistered Data Processors
- Telecom11 hours ago
Kellyrae Emerges Big Brother Naija Season 9 Winner
- E-Financial11 hours ago
Polaris Bank partners UI, NCF on environmental conservation, tree planting