Connect with us

Telecom

Kaspersky Detects over 100m Attacks on Smart Devices

Published

on

Kindly share this post

Kaspersky honeypots – networks of virtual copies of various internet connected devices and applications – have detected 105 million attacks on IoT devices coming from 276,000 unique IP addresses in the first six months of the year.

This figure is around nine times more than the number found in H1 2018, when only around 12 million attacks were spotted originating from 69,000 IP addresses. Capitalising on weak security of IoT products, cybercriminals are intensifying their attempts to create and monetise IoT botnets. This and other findings are a part of the ‘IoT: a malware story’ report on honeypot activity in H1 2019.

Cyberattacks on IoT devices are booming, as even though more and more people and organisations are purchasing ‘smart’ (network-connected and interactive) devices, such as routers or DVR security cameras, not everybody considers them worth protecting.

Cybercriminals, however, are seeing more and more financial opportunities in exploiting such gadgets. They use networks of infected smart devices to conduct DDoS attacks or as a proxy for other types of malicious actions. To learn more about how such attacks work and how to prevent them, Kaspersky experts set up honeypots – decoy devices used to attract the attention of cybercriminals and analyse their activities.

Based on data analysis collected from honeypots, attacks on IoT devices are usually not sophisticated, but stealth-like, as users might not even notice their devices are being exploited. The malware family behind 39% of attacks – Mirai – is capable of using exploits, meaning that these botnets can slip through old, unpatched vulnerabilities to the device and control it.

Another technique is password brute-forcing, which is the chosen method of the second most widespread malware family in the list – Nyadrop. Nyadrop was seen in 38.57% of attacks and often serves as a Mirai downloader.

This family has been trending as one of the most active threats for a couple of years now. The third most common botnet threatening smart devices – Gafgyt with 2.12% – also uses brute-forcing.

In addition, the researchers were able to locate the regions that became sources of infection most often in H1 2019. These are China, with 30% of all attacks taking place in this country, Brazil saw 19% and this is followed by Egypt (12%). A year ago, in H1 2018 the situation was different, with Brazil leading with 28%, China being second with 14% and Japan following with 11%.

“As people become more and more surrounded by smart devices, we are witnessing how IoT attacks are intensifying. Judging by the enlarged number of attacks and criminals’ persistency, we can say that IoT is a fruitful area for attackers that use even the most primitive methods, like guessing password and login combinations.

This is much easier than most people think: the most common combinations by far are usually “support/support”, followed by “admin/admin”, “default/default”. It’s quite easy to change the default password, so we urge everyone to take this simple step towards securing your smart devices” – said Dan Demeter, security researcher at Kaspersky.

To keep your devices safe, Kaspersky recommends users:

– Install updates for the firmware you use as soon as possible. Once a vulnerability is found, it can be fixed through patches within updates.

– Always change preinstalled passwords. Use complicated passwords that include both capital and lower-case letters, numbers and symbols if it’s possible.

– Reboot a device as soon as you think it’s acting strangely. It might help get rid of existing malware, but this doesn’t reduce the risk of getting another infection.

– Keep access to IoT devices restricted by a local VPN, allowing you to access them from your “home” network, instead of publicly exposing them on the internet.

Kaspersky recommends companies to take the following measures:

– Use threat data feeds (www.Kaspersky.co.za) to block network connections originating from malicious network addresses detected by security researchers.

– Make sure all devices software is up to date. Unpatched devices should be kept in a separate network inaccessible by unauthorised users.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

IFC Invests $45m to Green African Telecom Sites

Published

on

Kindly share this post

Clean and reliable power for telecom networks in Ethiopia, Liberia, and Sierra Leone will be expanded following a $45 million investment by the International Finance Corporation (IFC) in IPT PowerTech.

The investment targets countries where limited power supply continues to slow digital connectivity and broader economic participation, the institution stated earlier this week.

To enable this expansion, the IFC is providing a $45 million corporate financing package consisting of an A-loan of $27 million and $18 million in blended finance.

The blended portion is sourced from the Canada-IFC Blended Climate Finance Programme and the IDA20 Private Sector Window Blended Finance Facility.

The initiative marks the IFC’s first direct infrastructure engagement in Liberia in a decade and in Sierra Leone in six years.

It will help scale solar- and battery-based power systems that reduce reliance on diesel and support greener, more resilient telecom networks.

By improving the quality and stability of power to telecom towers, the initiative will strengthen mobile coverage and ensure that households, schools, health centres, and small businesses can depend on consistent digital services, said the IFC.

The funding supports the modernisation, operation, and maintenance of 2 235 telecom sites across the three nations. More than 90% of these are located in off-grid or weak-grid locations.

With new solar and battery systems powering these sites, mobile networks will experience fewer outages and improved service quality.

Optimising the energy mix is estimated to reduce power costs for operators by up to 30% in Liberia, 26% in Sierra Leone, and 52% in Ethiopia.

This transition is also expected to cut emissions by more than 10 624 tonnes of carbon dioxide annually. Furthermore, the partnership will promote gender inclusion by expanding opportunities for women in technical, operational, and leadership roles within the sector, says the IFC.

This agreement reflects a shared vision for a greener telecom industry and empowers the company to scale its innovative energy platforms, according to Nabil Haddad, CEO of IPT PowerTech Group.

Reliable and affordable power for telecom networks is a cornerstone of Africa’s digital transformation, said Nathalie Kouassi-Akon, IFC regional director for West Africa and the Gulf of Guinea.

Through this partnership, the institution is supporting a scalable, private sector-led solution that enables mobile operators to reach underserved and fragile communities more sustainably, added Kouassi-Akon.

The project advances the World Bank Group and African Development Bank’s Mission 300 initiative, which aims to provide electricity to 300 million Africans by 2030.


Kindly share this post
Continue Reading

Telecom

Expedier Launches Platform to Ease Cross-Border Payments for African Firms

Published

on

Kindly share this post

Expedier has unveiled “Expedier for Business,” an online pro-banking platform to simplify global payments, multi-currency transactions, and financial operations for expanding companies.

Expedier Launches Platform to Ease Cross-Border Payments for African Firms

Kingsley Madu

The tool centralizes payments, invoicing, payroll, and treasury into one secure dashboard, tackling challenges like fragmented systems and poor visibility that hinder international scaling.

Kingsley Madu, Co-Founder and CEO of Expedier, said: “African businesses are increasingly global… Expedier for Business was built to simplify how companies manage money across borders while maintaining visibility, control, and compliance.”

Key features include customizable dashboards for payments, invoices, and workflows; support for USD, CAD, GBP, EUR, and more; virtual cards; automated payroll/invoicing; currency swaps; and real-time tracking.

Security measures cover two-factor authentication, KYC/KYB verification, and team access controls.

As cross-border trade and remote work boom in Africa, the platform aids firms dealing with international suppliers, teams, and customers. It is now available for organizations scaling globally.


Kindly share this post
Continue Reading

Telecom

NCC Launches Platform for Secure Mobile Numbers, Anti-Fraud

Published

on

Kindly share this post

Nigerian Communications Commission (NCC) has launched the Telecoms Identity Risk Management System (TIRMS) to enhance digital security and fight telecom fraud.

NCC Launches Platform for Secure Mobile Numbers, Anti-Fraud

NCC

Dr Aminu Maida, Executive Vice Chairman,  represented by Executive Commissioner Rimini Makama at an Abuja stakeholders’ forum, stressed mobile numbers (MSISDNs) as vital for banking, authentication, and services—but vulnerable to misuse via recycled, churned, or barred SIMs.

“The TIRMS Platform is a secure, regulatory-backed, cross-sectoral solution… to provide a uniform approach for managing risks relating to the integrity and utilisation of registered MSISDNs,” Maida said.

Objectives include better MSISDN access for accountability, fraud checks on dormant/suspicious numbers before service access, and proactive verification across sectors.

Proposed rules mandate 14-day churn notices, seven-day data submission to TIRMS, and blocking of fraudulent lines. Success hinges on telecoms, banks, security agencies, and others.

Maida highlighted NCC’s collaborative rulemaking for a “One Government” approach.

Cybersecurity Director Olatokunbo Oyeleye called digital trust an “operating licence” for growth: “Every mobile number in Nigeria [must] be trusted… TIRMS will safeguard users, reduce fraud, and reinforce confidence in our digital economy.”

TIRMS bridges gaps with CBN, NIMC, CAC, SEC, and PENCOM, aiming to cut fraud and boost trust.


Kindly share this post
Continue Reading

Trending