Connect with us

News

HP Wolf Security Report finds Surge in Daily QR “Scan Scams” Phishing on Mobile Devices

Published

on

Kindly share this post

HP Inc. has issued its latest quarterly HP Wolf Security Threat Insights Report, showing hackers are diversifying attack methods, including a surge in QR code phishing campaigns.

By isolating threats on PCs that have evaded detection tools, HP Wolf Security has specific[i] insight into the latest techniques being used by cybercriminals in the fast-changing cybercrime landscape.

To date, HP Wolf Security customers have clicked on over 25 billion email attachments, web pages, and downloaded files with no reported breaches. Further HP Wolf Security insights will be featured at the upcoming Amplify Partner Conference, March 28-30, McCormick Place Chicago.

From February 2022, Microsoft began blocking macros in Office files by default, making it harder for attackers to run malicious code. Data collected by the HP Threat Research team shows that from Q2 2022, attackers have been diversifying their techniques to find new ways to breach devices and steal data. Based on data from millions of endpoints running HP Wolf Security[ii], the research found:

– The rise of QR scan scams: Since October 2022, HP has seen almost daily QR code “scan scam” campaigns. These scams trick users into scanning QR codes from their PCs using their mobile devices – potentially to take advantage of weaker phishing protection and detection on such devices. QR codes direct users to malicious websites asking for credit and debit card details. Examples in Q4 included phishing campaigns masquerading as parcel delivery companies seeking payment.

– HP noted a 38% rise[iii] in malicious PDF attachments: Recent attacks use embedded images that link to encrypted malicious ZIP files, bypassing web gateway scanners. The PDF instructions contain a password that the user is tricked into entering to unpack a ZIP file, deploying QakBot or IcedID malware to gain unauthorized access to systems, which are used as beachheads to deploy ransomware.

– 42% of malware was delivered inside archive files like ZIP, RAR, and IMG: The popularity of archives has risen 20% since Q1 2022, as threat actors switch to scripts to run their payloads. This is compared to 38% of malware delivered through Office files such as Microsoft Word, Excel, and PowerPoint.

“We have seen malware distributors like Emotet try to work around Office’s stricter macro policy with complex social engineering tactics, which we believe are proving less effective. But when one door closes another opens – as shown by the rise in scan scams, malvertising, archives, and PDF malware,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.

“Users should look out for emails and websites that ask to scan QR codes and give up sensitive data, and PDF files linking to password-protected archives.”

In Q4, HP also found 24 popular software projects imitated in malvertising campaigns used to infect PCs with eight malware families – compared to just two similar campaigns in the previous year.

The attacks rely on users clicking on search engine advertisements, which lead to malicious websites that look almost identical to the real websites.

“While techniques evolve, threat actors still rely on social engineering to target users at the endpoint,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.

“Organizations should deploy strong isolation to contain the most common attack vectors like email, web browsing and downloads. Combine this with credential protection solutions that warn or prevent users from entering sensitive details onto suspicious sites to greatly reduce the attack surface and improve an organization’s security posture.”

HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users, capturing detailed traces of attempted infections.

HP’s application isolation technology mitigates threats that might slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

NELFUND Says UTME, NIN, BVN Mandatory for Student Loans

Published

on

Kindly share this post

Nigerian Education Loan Fund (NELFUND) has said that Nigerian students will need to present their Unified Tertiary Matriculation Examination registration number (UTME); National Identification Number (NIN); and Bank Verification Number (BVN) to access student loans.

NELFUND Says UTME, NIN, BVN Mandatory for Student Loans

Mr Akintunde Sawyerr, managing director of NELFUND, assured that the body would ensure that those he called ‘ghost students’ would not have access to the soon-to-be-launched scheme.

The MD noted that NELFUND has put processes in place to ensure that all applicants and beneficiaries are traceable to prevent the loan from turning into a sort of national cake.

“We are using technology to run the system. The process of application is online and we are limiting human contact as much as possible. Once you have a Bank Verification Number, BVN and National Identification Number, NIN, which are parts of the requirements, we will have access to your data and all your accounts. This will also help us to know if you are qualified or not,” he explained.

He explained further that those who are already in school can apply for the loan at any level of their study, but must be at the beginning of each session. They would also have to provide their admission and matriculation details in addition to BVN and NIN.

According to the NELFUND boss, about 1.2 million Nigerian students in tertiary institutions and government-recognized skill acquisition centres would be among the first batch of beneficiaries. The number may increase as time goes on.

The programme, he noted, will be funded with one per cent of the total annual collectable revenue by the Federal Inland Revenue Service (FIRS), which will amount to N194 billion if the agency meets its projection.

He explained that the loan would be paid in two segments. The first, he said, is the chargeable school fees which would be paid directly to the institutions while stipend would be paid into individual student’s account for day-to-day upkeep.

Mr. Sawyerr stated that the amount individual applicants will access will vary because of the course of study, school fees payable and geographical location of the institutions among others.

On the method of payback, he said, “You don’t start paying back the loan until two years after your National Youth Service Corps, NYSC Scheme and that is, if you have secured a job or business. A beneficiary can defer repayment if he has not secured a job, but if after due diligence, he defaulted, then he becomes a criminal and we will work with every agency that can help us get the money back, for example, EFCC, ICPC etc.”

 


Kindly share this post
Continue Reading

News

Sun International Finalizes $14.4M Exit from Nigeria, Sells Interests to RFC

Published

on

Kindly share this post

Sun International Limited, run by Anthony Leeming, South African entrepreneur, has agreed to sell its Nigerian interests to Rutam Finance Company Limited (RFC) for roughly $14.4 million.

Sun International Finalizes $14.4M Exit from Nigeria, Sells Interests to RFC

The move is part of Sun International’s strategy to consolidate operations and focus on key markets. Sun International joined the Nigerian market in 2009, but has struggled in recent years due to a challenging operating climate.

This divestiture is consistent with the company’s strategic objectives and represents a shift in portfolio management.

Sun International, will sell a 43.3 percent ownership investment in Tourist Company of Nigeria PLC (TCN), which manages Lagos’ Federal Palace Hotel, to RFC for $1.875 million.

In addition, the group would pay off its whole $12.675 million credit to RFC, effectively exiting the Nigerian market. The corporation also intends to sell its remaining 6% ownership in TCN in due course.

The transaction, subject to customary closing conditions including as regulatory approvals, is estimated to create a cash inflow of about $14.41 million for Sun International.

These funds will be utilized to reduce debt.

Following the completion of the acquisition, TCN will no longer be included in Sun International’s financial statements.

This will reduce group debt by about $41.82 million, excluding IFRS 16 lease liabilities.

The closing is scheduled for no later than May 28, 2024, provided that all usual closing conditions are met. The Nigerian Competition Authority, the Securities and Exchange Commission, and the Nigerian Stock Exchange have all provided key clearances.

Sun International, founded in 1968 by the late Sol Kerzner, has grown into a renowned gaming and resort company under Leeming’s leadership.

In fiscal 2023, the company’s revenue increased by 7% to $646.14 million, while headline earnings increased by 86 percent to $55.35 million.

This demonstrates Sun International’s resiliency and strategic direction. Sun International’s pullout from Nigeria demonstrates the company’s dedication to streamlining its portfolio and pursuing growth possibilities in key areas.

With a rich history and a focus on the future, this transaction demonstrates the company’s commitment to create wealth for shareholders and stakeholders while also strengthening its position in the gaming and hospitality industries.

 

 


Kindly share this post
Continue Reading

News

Sam Darwish, US-Nigerian Businessman Suffers $6m Loss as IHS Shares Plunge

Published

on

Kindly share this post

Sam Darwish, a US-Nigerian telecom entrepreneur, has experienced a huge financial setback in his holding in IHS Holdings following a recent drop in the shares of the top telecom infrastructure company on the New York Stock Exchange (NYSE).

Sam Darwish, US-Nigerian Businessman Suffers $6m Loss as IHS Shares Plunge

Sam Darwish

According to data, Sam Darwish’s investment in IHS Holdings has lost $6 million in market value during the last 13 days. This drop reflects increasing selling pressure among NYSE investors.

From March 12 to 30, Darwish’s investment in IHS Holdings increased from $35.17 million to $49.27 million, resulting in a $14 million gain.

Darwish founded IHS Holdings in 2001, and it has since grown to become the largest telecom infrastructure business in Africa, Europe, Latin America, and the Middle East.

It is renowned for its huge tower count and is the world’s third-largest independent international tower firm.

In the last 13 days, IHS Holdings shares on the NYSE have dropped by 11.72 percent, from $3.67 on April 3 to $3.24 at the time of writing.

As a result, the company’s market capitalization has dropped below $1.1 billion, causing significant losses for stockholders.

As chairman and CEO of IHS Holdings, Sam Darwish holds a critical position in African telecom.

With a strong 4.17 percent ownership holding, equivalent to 13,958,158 ordinary shares, he is a key participant in the global telecom infrastructure business.

The recent double-digit loss in IHS Holdings shares has resulted in a $6 million decrease in the market value of Darwish’s shareholding in the top telecom infrastructure company. His shareholding has decreased from $51.23 million on April 3 to $45.22 million.

Despite this defeat, Darwish remains an important figure in the worldwide telecom business.

IHS Holdings’ extensive tower network and smart acquisitions have secured its position as a major participant in the global telecom infrastructure sector.

 


Kindly share this post
Continue Reading

Trending