E-Business
HP Q3 Wolf Security Report Shows What is Helping Threat Actors Hoodwink Detection Tools
HP Inc. issued its third quarter HP Wolf Security Threat Insights Report, finding that archive file formats – such as ZIP and RAR files – were the most common file type for delivering malware, surpassing Office files for the first time in three years.
This report provides an analysis of real-world cyberattacks, helping organizations to keep up with the latest techniques cybercriminals use to evade detection and breach users in the fast-changing cybercrime landscape.
Based on data from millions of endpoints running HP Wolf Security, the research found 44% of malware was delivered inside archive files – an 11% rise on the previous quarter – compared to 32% delivered through Office files such as Microsoft Word, Excel, and PowerPoint.
The report identified several campaigns that were combining the use of archive files with new HTML smuggling techniques – where cybercriminals embed malicious archive files into HTML files to bypass email gateways – to then launch attacks.
For example, recent QakBot and IceID campaigns used HTML files to direct users to fake online document viewers that were masquerading as Adobe. Users were then instructed to open a ZIP file and enter a password to unpack the files, which then deployed malware onto their PCs.
As the malware within the original HTML file is encoded and encrypted, detection by email gateway or other security tools is very difficult.
Instead, the attacker relies on social engineering, creating a convincing and well-designed web page to fool people into initiating the attack by opening the malicious ZIP file. In October, the same attackers were also found using fake Google Drive pages in an ongoing effort to trick users into opening malicious ZIP files.
“Archives are easy to encrypt, helping threat actors to conceal malware and evade web proxies, sandboxes, or email scanners. This makes attacks difficult to detect, especially when combined with HTML smuggling techniques.
“What was interesting with the QakBot and IceID campaigns was the effort put in to creating the fake pages – these campaigns were more convincing than what we’ve seen before, making it hard for people to know what files they can and can’t trust,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
HP also identified a complex campaign using a modular infection chain, which could potentially enable attackers to change the payload – such as spyware, ransomware, keylogger – mid-campaign, or to introduce new features, like geo-fencing.
This could enable an attacker to change tactics depending on the target they have breached. By not including malware directly in the attachment sent to the target, it is also harder for email gateways to detect this type of attack.
“As shown, attackers are constantly switching up techniques, making it very difficult for detection tools to spot,” comments Dr Ian Pratt, Global Head of Security for Personal Systems, HP Inc. “By following the Zero Trust principle of fine-grained isolation, organizations can use micro-virtualization to make sure potentially malicious tasks – like clicking on links or opening malicious attachments – are executed in a disposable virtual machine separated from the underlying systems.
“This process is completely invisible to the user, and traps any malware hidden within, making sure attackers have no access to sensitive data and preventing them from gaining access and moving laterally.”
HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users, capturing detailed traces of attempted infections.
HP’s application isolation technology mitigates threats that can slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.
By isolating threats on PCs that have evaded detection tools, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals. To date, HP customers have clicked on over 18 billion email attachments, web pages, and downloaded files with no reported breaches.
E-Business
NITDA, NIMC Partner for Seamless Data Exchange Capabilities
National Information Technology Development Agency (NITDA) and the National Identity Management Commission (NIMC) have announced a collaboration on National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI) to enhance synergy between digital identity, payment ecosystems and secure seamless data exchange capabilities for Nigeria.
NITDA, which made the announcement on its X handle, said that the collaboration was to further strengthen Nigeria’s digital economy in line with President Bola Tinubu’s Renewed Hope Agenda,
During the meeting, Kashifu Inuwa, director general of NITDA, and Bisoye Coker-Odusote, director general of NIMC, with some management staff of both organisations, discussed various initiatives, which include building DPI stacks for a secured and seamless data exchange and forming partnerships to transform the national identity system.
This collaboration also aims to harness the potential of the innovative ecosystem and emphasise the use of public-key infrastructure (PKI) to drive digital transformation in Nigeria.
To ensure a smooth implementation, a 12-man committee was set up.
This committee will play a crucial role in kickstarting and harmonising the initiatives and is expected to deliver a comprehensive implementation report within the next 4 weeks.
E-Business
Expert Urges FG to Harmonise NIN, BVN to Tackle Crimes
Noble Ajuonu, head, Sydani Technologies Ltd., has urged the Federal Government to harmonise National Identification Number (NIN) and Bank Verification Number (BVN) to tackle crimes and insecurity in the country.
Ajuonu made the call at a media roundtable, organised by Sydani Group in Abuja.
The News Agency of Nigeria (NAN) reports that the roundtable focuses on driving sustainability through a comprehensive analysis of Nigeria’s key development areas.
Ajuonu said that Nigeria could overcome its security challenges and pave the way for a safer, more secure future for all Nigerians by embracing technology and implementing practical solutions,
“We need to harmonise data, prioritise seamless integration of databases like NIN, BVN, and security agency records, establish clear protocols for data sharing and access, with robust safeguards against misuse,’’ expert said.
According to him, the unified data pool will empower intelligence gathering and targeted operations.
He also called for investments in smart surveillance, intelligent video analytics software, training of personnel in data analysis, interpretation of data in real-time to combat crimes.
“There is need to implement a legal framework for call interception in criminal investigations, with strict oversight to prevent abuse, encourage community cohesion, training of tech savvy security personnel with tech-enabled tools.’’
Ajuonu also urged the government to address infrastructure deficit in technology, saying that technology was all encompassing to address insecurity.
“According to the National Identity Management Commission (NIMC), as of December 2023, only 104.2 million Nigerians had been enrolled for the National Identity Number (NIN).’’
Ajuonu added that over 122.2 million citizens left uncaptured for NIN were people in rural areas where enrolment centres, digital services were limited.
“Most crimes are being perpetuated from rural communities and this lack of comprehensive identification creates a gap where elements not captured in the national database can constitute public nuisance, crimes.
“There is the inadequacy in the integration of NIN, BVN and Voters Identification Number (VIN).
“Advanced call interception and analysis tools, used successfully in other countries, could provide invaluable insights into criminal networks and operations but infrastructure is lacking,’’ he said.
Also, Mr Godfrey Petgrave, the Agricultural Expert, Sydani Group, called for empowerment of smallholder farmers with access to finance and training to enhance productivity.
According to Petgrave, Nigeria requires policy reform and institutional strengthening to improve agricultural practices and embrace digital agriculture solutions to address food insecurity.
Mr Akolade Jimoh, another expert of the group on health, advocated for expanded community-based health insurance programmes for rural and underserved areas.
Jimoh added that the country needed to encourage Public Private Partnership to revolutionise products design and quality improvement on health services.
E-Business
Konga launches Infinix Brand Week with Incredible Deals
Konga, Nigeria’s leading composite e-commerce group, is thrilled to announce the launch of amazing deals at its Infinix Brand Week. Infinix, a leading global smartphone brand known for its innovative products and cutting-edge technology promises exclusive discounts and special offers on select smartphones, marking an exciting milestone in the realm of online shopping.
Shoppers can expect nothing short of extraordinary deals on a wide range of Infinix products, all available exclusively on the Konga online platform. With discounts of up to 30% off, this partnership between Konga and Infinix aims to redefine the shopping experience for tech enthusiasts across Nigeria.
Konga Brand Week has become synonymous with excitement and unbeatable deals, and this year’s edition is no exception. In addition to exclusive discounts on Infinix smartphones, shoppers can explore a diverse array of products across various categories, including electronics, fashion, home essentials, and more.
“At Konga, we are dedicated to providing our customers with the best shopping experience possible,” said Rita Ohaedoghasi, VP Marketing at Konga. “The Infinix Week during Konga Brand Week allows us to continue delivering on that promise by offering incredible discounts and special offers on some of the most sought-after smartphones in the market.”
To stay updated on the latest developments and exclusive deals during Konga Brand Week, shoppers are encouraged to connect with Konga across all platforms, including social media and the Konga website. Don’t miss out on this opportunity to score big savings and elevate your tech game with Infinix and Konga.
- Telecom2 days ago
Imperative of Upholding Nigeria’s Telecoms Lifeline
- News2 days ago
Kaspersky Warns of Data Stealers Hunting for User Credentials
- Telecom2 days ago
What You Need to Know About Multifactor Authentication Fatigue Attacks and How they can be Prevented
- E-Financial2 days ago
Hydrogen, CCHub Partner to Encourage Fintech Startup Success
- Telecom2 days ago
Samsung Returns to Top of The Smartphone Market – Industry tracker
- E-Financial2 days ago
CBN Cuts Banks’ Loan-to-Deposit Ratio to 50 Percent
- Telecom1 day ago
FG Plans EO to Criminalise Fiber Cable Damage Costing Telcos Billions
- E-Financial2 days ago
Access Bank Unveils DiamondXtra Season 16, Dangles N200m, 3 SUVs