E-Business
Infostealer Vidar Identified as Most Wanted Malware in January 2023
Check Point Software Technologies, a provider of cybersecurity solutions globally, has published its Global Threat Index for January 2023.
Last month saw infostealer Vidar return to the top ten list in seventh place after an increase in instances of brandjacking, and the launch of a major njRAT malware phishing campaign in the Middle East and North Africa.
In January, infostealer Vidar was seen spreading through fake domains claiming to be associated with remote desktop software company AnyDesk. The malware used URL jacking for various popular applications to redirect people to a single IP address claiming to be the official AnyDesk website.
Once downloaded, the malware masqueraded as a legitimate installer to steal sensitive information such as login credentials, passwords, cryptocurrency wallet data and banking details.
Researchers also identified a major campaign dubbed Earth Bogle delivering the njRAT malware to targets across the Middle East and North Africa. The attackers used phishing emails containing geopolitical themes, enticing users to open malicious attachments.
Once downloaded and opened, the Trojan can infect devices, allowing attackers to conduct numerous intrusive activities to steal sensitive information. njRAT came in at number ten on the top malware list, having dropped off after September 2022.
“Once again, we’re seeing malware groups use trusted brands to spread viruses, with the aim of stealing personal identifiable information. I cannot stress enough how important it is that people pay attention to the links they are clicking on to ensure they are legitimate URLs.
Look out for the security padlock, which indicates an up-to-date SSL certificate, and watch for any hidden typos that might suggest the website is malicious.” said Maya Horowitz, VP Research at Check Point Software.
CPR also revealed that “Web Server Exposed Git Repository Information Disclosure” remained the most exploited vulnerability last month, impacting 46% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 42% of organizations worldwide. “MVPower DVR Remote Code Execution” came in third with a global impact of 39%.
Top malware families
Qbot and Lokibot were the most prevalent malware last month with an impact of more than 6% on worldwide organizations respectively, followed by AgentTesla with a global impact of 5%.
In Nigeria, Qbot was the most widespread malware this month impacting 18.64% of organisations in the country, followed by Expiro with 10.17% and Nitol with 6.78%.
- Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials and keystrokes. Often distributed via spam email, Qbot employs several anti-VM, anti-debugging, and anti-sandbox techniques to hinder analysis and evade detection.
- XMRig – XMRig is open-source CPU mining software used to mine the Monero cryptocurrency. Threat actors often abuse this open-source software by integrating it into their malware to conduct illegal mining on victims¿ devices.
- Vidar – Vidar is an infostealer that targets Windows operating systems. First detected at the end of 2018, it is designed to steal passwords, credit card data and other sensitive information from various web browsers and digital wallets. Vidar is sold on various online forums and used as a malware dropper to download GandCrab ransomware as its secondary payload.
Top Attacked Industries Globally
Last month, Communications remained the most attacked industry in Africa, followed by Government/Military and then ISP/MSP.
- Communications
- Government/Military
- ISP/MSP
Top exploited vulnerabilities
Last month, “Web Server Exposed Git Repository Information Disclosure” was the most exploited vulnerability, impacting 46% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 42% of organizations worldwide. “MVPower DVR Remote Code Execution” came in third with a global impact of 39%.
- ↔ Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow an unintentional disclosure of account information.
- ↑ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
- ↑MVPower DVR Remote Code Execution – A remote code execution vulnerability exists in MVPower DVR devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request.
Top Mobile Malwares
Last month, Anubis remained the most prevalent mobile malware, followed by Hiddad and AhMyth.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.
- AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera, which usually used to steal sensitive information.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence.
ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.
Dexude, a leading edtech platform with operations in Nigeria, has announced that it has been awarded the prestigious Business Finland TEMPO funding.
Charles Emembolu, founder of Dexude,
This significant funding injection marks a pivotal moment in Dexude’s journey towards transforming education through its AI-powered, live-first, expert-led, and community-driven platform.
The Business Finland TEMPO funding is specifically designed to support startups and SMEs aiming for international growth by building their expertise and solutions into international success stories in innovative ways.
Dexude’s commitment to innovation, coupled with its vision to enable a billion learners worldwide, aligns perfectly with the objectives of the TEMPO funding.
Commenting on this milestone achievement, Charles Emembolu, founder of Dexude, remarked, “We are incredibly honored and excited to receive the Business Finland TEMPO funding. This funding is not only a validation of Dexude’s mission to reinvent education but also a testament to the hard work and dedication of our team. With this support, we are poised to accelerate our efforts in democratizing access to quality education and empowering learners across Nigeria and beyond.”
L-r; Kelvin Chikezie, co-founder of Dexude; Kashifu Inuwa Abdullahi, Director-General/CEO of the National Information Technology Development Agency (NITDA); and Charles Emembolu, founder of Dexude
Kelvin Chikezie, co-founder of Dexude, added, “Securing the Business Finland TEMPO funding is a significant milestone for Dexude. It underscores our commitment to leveraging technology and innovation to revolutionize the way people learn and grow. We are grateful to Business Finland for believing in our vision, and we are excited to embark on this next chapter of Dexude’s journey.”
Dexude is on a mission to redefine education by providing learners with access to influential experts and thought leaders, live interactions, and a vibrant community-driven learning experience.
Through its platform, Dexude aims to break down barriers to learning and empower individuals to pursue their passions and unlock their full potential.
SOPHiA GENETICS, a cloud-native software company in the healthcare space and a leader in data-driven medicine, has announced that Nigeria-based Syndicate Bio has signed on to implement MSK-ACCESS® powered with SOPHiA DDM™.
Syndicate Bio is the first lab in Africa to adopt the MSK-ACCESS® assay via the SOPHiA DDM™ Platform, and the first company to make comprehensive genomic profiling and liquid biopsy widely available to patients throughout the entire continent.
The implementation of this new technology will further existing work from SOPHiA GENETICS, Memorial Sloan Kettering Cancer Center (MSK), and Syndicate Bio to advance health equity on a global scale.
There are roughly 1 million new cancer patients each year in Africa and currently, comprehensive genomic profiling and liquid biopsy testing options are not widely available.
This means that patients are forced to forego this testing or travel out of continent for these testing options. Syndicate Bio’s implementation of this new offering will provide cutting-edge liquid biopsy testing to many of these patients and will help progress the company’s goal of advancing genomics and precision medicine in an area of the world that has been historically underserved in these areas.
“Partnering with SOPHiA Genetics to bring MSK-ACCESS® powered with SOPHiA DDM™ to our lab is a monumental step in accelerating the cancer treatment and research landscape across Africa, beginning in Nigeria. Next-generation sequencing technologies in oncology and liquid biopsy, which this collaboration enables, hold the potential for creating a leapfrogging opportunity in the oncology treatment and research landscape in Africa,” said Abasi Ene-Obong, PhD., Founder, Syndicate Bio.
“Through this collaboration, we aim to enable the widespread application of precision medicine in oncology across Africa, and thus contributing to the improvement of patient outcomes across the African continent.
“We believe our scientific expertise, combined with AI-enabled technologies and data-driven solutions enabled by SOPHiA GENETICS, presents a unique opportunity to fundamentally transform the journey of cancer patients through non-invasive cancer analysis, predictive genetic testing, and effective precision medicine.”
Syndicate Bio is driving genomics and precision medicine initiatives across the world’s most diverse regions through large-scale partnerships with governments, industry, and other stakeholders. Through its work, Syndicate Bio is making local impact while accelerating drug discovery and development.
By focusing on Africa, Syndicate Bio is poised to make a significant impact, starting with Nigeria, by introducing its pioneering clinical oncology offerings in an underserved region.
Through this endeavor, Syndicate Bio aims to improve cancer diagnosis and treatment for African patients. This initiative not only facilitates local next-generation sequencing (NGS) testing and liquid biopsy testing but also extends access to clinical trial participation, empowering patients and healthcare providers alike.
MSK-ACCESS® powered with SOPHiA DDM™ is a decentralized version of a highly validated ctDNA test developed by MSK that involves the deep sequencing of 146 key cancer-associated genes, and will augment Syndicate Bio’s tumor profiling capabilities, allowing them to utilize a small blood sample to generate a comprehensive report in an efficient and expedited time frame.
The use of liquid biopsy is less invasive than traditional biopsy, and can help simplify patient monitoring, whilst driving the uptake of precision medicine.
The offering combines the sophisticated analytics, state-of-the-art algorithms, and decentralized, cloud-based offerings of the SOPHiA DDM™ Platform, with the scientific and clinical expertise of MSK in cancer genomics to provide a best-in-class liquid biopsy solution.
“In our mission to democratize data-driven medicine, our decentralized global network and unique set of partnerships enable us to help reach underserved populations, just as those that are served by Syndicate Bio,” said Philippe Menu, MD, PhD., Chief Medical Officer, SOPHiA GENETICS.
“By implementing this solution, Syndicate Bio will make a measurable impact throughout Africa, while also helping to generate an unparalleled and comprehensive dataset and provide invaluable insights and knowledge to shape the future of global healthcare.”
In late 2023, SOPHiA GENETICS and MSK announced they are working in partnership with AstraZeneca to bring the world-class MSK-ACCESS® powered with SOPHiA DDM™ testing solution to countries and regions around the globe, including underserved areas where access to testing remains scarce.
Mallam Kashifu Abdullahi, director-general, National Information Technology Development Agency (NITDA), has reaffirmed the importance of collaboration in advancing Nigeria’s digital transformation agenda.
L-R: Mallam Kashifu Abdullahi, director-general, National Information Technology Development Agency, with Brig. Gen., Abdulrahman Idris, team lead of the Senior Executive Course 46 2024, National Institute for Policy and Strategic Studies, Kuru, Jos during a strategic tour visit to the agency headquarters in Abuja.
Abdullahi disclosed this during a strategic engagement with participants of the 2024 Senior Executive Course 46 from the National Institute for Policy and Strategic Studies (NIPSS), a delegation led by Brigadier General Abdulrahman Idris.
Abdullahi emphasised that no organisation can achieve its goals in isolation, stressing the need for collaborative efforts to harness ideas, experiences and insights for national development. He highlighted the potential of collaboration between NITDA and NIPSS to leverage technology and digital innovation for driving economic growth, creating job opportunities and attracting foreign direct investment (FDI).
“At NITDA, we have re-imagined our social contract with Nigerians, focusing on improving service delivery and fostering the swift growth of the ICT sector,” said Abdullahi. He emphasised the agency’s commitment to serving Nigerians and outlined the strategic direction outlined in NITDA’s Strategic Roadmap and Action Plan (SRAP 2024-2027) 2.0. The SRAP is structured around eight pillars aimed at fostering digital literacy, building a robust technology research ecosystem, strengthening policy implementation, promoting inclusive access to digital infrastructure, enhancing cybersecurity, nurturing innovation and entrepreneurship, forging partnerships and cultivating a vibrant organisational culture.
The brigadier-general provided insights into NIPSS’s role as Nigeria’s foremost policy think-tank, tasked with developing top-class technocrats to drive national development initiatives. He highlighted NIPSS’s contributions to policy formulation and implementation over the years, emphasising the institution’s mandate to address issues of national interest, particularly in the digital economy sector.
The collaboration between NITDA and NIPSS underscores the importance of synergistic efforts in harnessing technology and innovation for national development. By leveraging each other’s expertise and resources, both organisations aim to drive economic growth, foster job creation, and position Nigeria as a leading player in the global digital economy.
Through strategic partnerships and collaborative initiatives, NITDA and NIPSS are poised to chart a path towards sustainable development, leveraging digital innovation as a catalyst for socioeconomic transformation and inclusive growth.
Dexude Secures Funding to Revolutionize Education in Nigeria, Beyond
FG Recovers N57Bn Debt from 10 MDAs
Nigerian Banks Lost over N8Bn to Internet Fraudsters in 2022- EFCC
Secure Identity Alliance: OSIA Becomes Official ITU Standard
SOPHiA GENETICS Announces Syndicate Bio as First Liquid Biopsy Customer in Africa
See Full List of Fake Loan Apps Blacklisted By CBN
AXA Mansard Empowers Female SMEs with Financial, Digital Skills
IFC Invests in New 4DX Ventures Fund to Support Tech Startups in Africa
FIRS Files Tax Evasion Charges against Binance
CBN Sacks another 50 Staff, 117 Disengaged in 20 Days
Telecom3 days agoTelcos Record N27Bn Loss from Damaged Fibre Cables
News3 days agoFG to Secure Fresh $2.25Bn World Bank Loan
Telecom3 days agoNCAIR Relaunch: Pantami, Tijani Fight for Credit
News3 days agoWema Bank Launches 5th Edition of Youth-Focused Hackathon, “Hackaholics”
Telecom3 days agoABoICT Lecture 2024 to Focus on Artificial Intelligence (AI) In A Digital Economy
News3 days agoAMCON Moves Against Firm’s MD, Directors over N42b Debt
E-Financial3 days agoDimon, JP Morgan CEO Describes Bitcoin as Fraud, Ponzi Scheme
News2 days agoNERC Cedes Regulatory Oversight of Enugu Electricity Market to State Government Agency