Connect with us

E-Financial

Kaspersky Exposes How Hackers ‘Lazarus Group’ Terrorise Banks

Published

on

kasp.jpg
Kindly share this post

The results of its more-than-year-long investigation into the activity of ‘Lazarus’, a notorious hacking group allegedly responsible for the theft of 81 million dollars from the Central Bank of Bangladesh in 2016 has been disclosed by Kaspersky Lab.

During the forensic analysis of artefacts left by the group in South-East Asian and European banks, Kaspersky Lab has reached a deep understanding of what malicious tools the group uses and how it operates while attacking financial institutions, casinos, software developers for investment companies and crypto-currency businesses around the world.

This knowledge has helped to interrupt at least two other operations which had one goal – to steal a large amount of money from financial institutions.

In February 2016, a group of hackers (unidentified at that time) attempted to steal $851 million USD, and managed to transfer 81 million USD from the Central Bank of Bangladesh. This is considered to be one of the largest, most successful cyber heists ever.

Further investigation conducted by researchers from different IT security companies including Kaspersky Lab revealed a high chance that the attacks were conducted by Lazarus – a notorious cyber espionage and sabotage group responsible for a series of regular and devastating attacks, and known for attacking manufacturing companies, media and financial institutions in at least 18 countries around the world since 2009.

Although several months of silence followed the Bangladesh attack, the Lazarus group was still active. They had been preparing for a new operation to steal money from other banks and, by the time they were ready, they already had their foot in a financial institution in South East Asia. After being interrupted by Kaspersky Lab products and the following investigation, they were set back for another few months, and later decided to change their operation by moving to Europe. But here too, their attempts were interrupted by Kaspersky Lab’s security software detections, as well as the quick incident response, forensic analysis, and reverse engineering with support from company’s top researchers.

Lazarus Formula
Based on the results of the forensic analysis of these attacks, Kaspersky Lab researchers were able to reconstruct the modus operandi of the group.

Initial compromise: A single system inside a bank is breached either with remotely accessible vulnerable code (i.e. on a webserver) or through a watering hole attack through an exploit planted on a benign website. Once such a site is visited, the victim’s (bank employee) computer gets malware, which brings additional components.

Foothold established: Then the group migrates to other bank hosts and deploys persistent backdoors – the malware allows them to come and go whenever they want.

Internal reconnaissance: Subsequently the group spends days and weeks learning the network, and identifying valuable resources. One such resource may be a backup server, where authentication information is stored, a mail server or the whole domain controller with keys to every “door” in the company, as well as servers storing or processing records of financial transactions.

Deliver and steal: Finally, they deploy special malware capable of bypassing the internal security features of financial software and issuing rogue transactions on behalf of the bank.

Geography and Attribution
The attacks investigated by Kaspersky Lab researchers lasted for weeks. However, the attackers could operate under the radar for months.

For example, during the analysis of the incident in South-East Asia, experts discovered that hackers were able to compromise the bank network no less than seven months prior to the day when the bank’s security team requested incident response. In fact, the group had access to the network of that bank even before the day of the Bangladesh incident.

According to Kaspersky Lab records, from December 2015, malware samples relating to Lazarus group activity appeared in financial institutions, casinos software developers for investment companies and crypto-currency businesses in Korea, Bangladesh, India, Vietnam, Indonesia, Costa Rica, Malaysia, Poland, Iraq, Ethiopia, Kenya, Nigeria, Uruguay, Gabon, Thailand and several other countries.

The latest samples known to Kaspersky Lab were detected in March 2017, showing that attackers have no intention of stopping.

Even though attackers were careful enough to wipe their traces, at least one server they breached for another campaign contained a serious mistake with an important artefact being left behind. In preparation for operation, the server was configured as the command & control center for the malware.

The first connections made on the day of configuration were coming from a few VPN/proxy servers indicating a testing period for the C&C server. However, there was one short connection on that day which was coming from a very rare IP address range in North Korea.

According to researchers, that could mean several things:

The attackers connected from that IP address in North Korea.

It was someone else’s carefully planned false flag operation.

Someone in North Korea accidentally visited the command and control URL.

The Lazarus group heavily invests in new variants of their malware. For months they were trying to create a malicious toolset which would be invisible to security solutions, but every time they did this, Kaspersky Lab’s specialists managed to identify unique features in how they create their code, allowing Kaspersky Lab to keep tracking the new samples. Now, the attackers have gone relatively quiet, which probably means that they have paused to rework their arsenal.

“We’re sure they’ll come back soon. In all, attacks like the ones conducted by Lazarus group show that a minor misconfiguration may result in a major security breach, which can potentially cost a targeted business hundreds of millions of dollars in loss. We hope that chief executives from banks, casinos and investment companies around the world will become wary of the name Lazarus,” said Vitaly Kamluk, Head of Global Research and Analysis Team APAC at Kaspersky Lab.

The company is also releasing crucial Indicators of Compromise (IOC) and other data to help organisations search for traces of these attack groups in their corporate networks.

“We urge all organisations to carefully scan their networks for the presence of Lazarus malware samples and, if detected, to disinfect their systems and report the intrusion to law enforcement and incident response teams”, added Vitaly Kamluk.

 

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Financial

Access Bank’s Digital Innovation Earns Top Financial Inclusion Award

Published

on

Kindly share this post

Access Bank Plc has been awarded the prestigious Financial Inclusion Impact Award (Unified) at Nexus 2025, Qore’s flagship customer experience and financial infrastructure summit, in recognition of its groundbreaking digital innovations that have expanded financial access to millions across Africa.

The annual Nexus event, widely regarded as a leading platform for showcasing transformative financial technology on the continent, celebrated institutions driving measurable impact through digital transformation.

Access Bank stood out for its suite of innovative digital banking platforms that have successfully reached underserved communities, enabling financial participation for individuals and small businesses previously excluded from traditional banking services.

This latest accolade adds to Access Bank’s growing list of Nexus honors, having previously secured the Purpose Award in 2023 and the Best Commercial Bank in Technology Adoption Across Africa in 2024.

Speaking on the recognition, Ms. Chizoba Iheme, group head DSA and Beta Proposition, said, “We are truly honored to receive the Nexus Award for Financial Inclusion Impact (Unified). This recognition reinforces Access Bank’s long-standing commitment to breaking barriers and expanding financial access for individuals and businesses across Nigeria and beyond.

“At Access Bank, financial inclusion is more than a mandate, as it is a responsibility we proudly uphold as we continue to design innovative solutions that empower underserved communities. This award strengthens our resolve to keep driving sustainable impact and to ensure that no one is left behind in the financial ecosystem.”

Emeka Emetarom, chief executive officer of Qore, said, “At Qore, we are proud to power the infrastructure that enables real, scalable financial inclusion across Africa. Our partnership with Access Bank continues to demonstrate what is possible when bold vision, technology, and flawless execution come together.”

The recent event, hosted by Qore, brought together stakeholders across the financial services ecosystem, including commercial banks, microfinance banks, fintech companies, regulatory bodies, and government officials. Nexus 2025 provided a platform for industry leaders to discuss building the rails for Africa’s credit revolution and the critical role seamless digital banking must play in shaping this future.


Kindly share this post
Continue Reading

E-Financial

CBN’s New Cash Policy: A Welcome Liberalisation or a Risky Retreat?

Published

on

Kindly share this post

By Blaise Udunze

On December 2, 2025, the Central Bank of Nigeria (CBN) announced a policy that significantly departs from the cash-restriction measures Nigerians have faced lately. The apex bank abolished restrictions on cash deposits. Increased the weekly cash withdrawal limits to N500,000 for individuals and N5 million for corporates while substituting the earlier monthly limits of N5 million and N10 million respectively. These modifications, which will be effective from January 1, 2026, represent what the CBN describes as the necessity to “streamline provisions to reflect present-day realities.”

CBN’s New Cash Policy: A Welcome Liberalisation or a Risky Retreat?

CBN

Authorized by the Director of Financial Policy & Regulation, Dr. Rita I. Sike, the policy overhaul aims to lower cash-management expenses, improve security, and lessen money-laundering threats related to Nigeria’s significant dependence on physical cash. Daily ATM withdrawal limits stay fixed at N100,000 and count toward the total cap. Withdrawals exceeding the limits incur charges of three percent for individuals and five percent for companies, with the revenues divided: 40 percent to the CBN and 60 percent to the banks.

This update comes three years following the disputed 2022-2023 cash redesign crisis at a time characterized by extreme cash deficits, extended lines at banks, and devastating impacts on the informal economy. Consequently, the newest order generates responses: praise from individuals who consider it delayed aid, disapproval from those perceiving it as a bewildering backtrack, and concern from those apprehensive about potential enduring hazards.

Experts Applaud a More Realistic Modification

For economists, in a publication by Nairametrics showed that the action taken by the CBN signifies much-needed practicality. Dr. Salisu Ahmed, an economist based in Abuja, refers to the updated limits as “a step,” praising the CBN for gaining a clearer insight into “cash management practices in a predominantly informal economy.”

He stated that the changes will alleviate the difficulties faced by families and small enterprises due to restrictions. Rigid withdrawal caps had limited transactions, made small-scale commerce more difficult, and caused numerous businesses to experience cash-flow problems. “This adjustment signifies a response from the CBN recognizing the challenges Nigerians face daily and easing rules that previously hindered commerce and individual management,” he clarified.

Banking analyst, David Omale, echoes this view, seeing the CBN’s action as a sign of responsiveness. He points out that higher limits could “enhance liquidity for firms facing challenges from inflation, supply-chain issues and unpredictable cash flows.”

In an economy in which over 60 percent of trade is informal and where the adoption of digital payments varies across different socio-economic groups, experts suggest the updated limits correspond more accurately to real-world conditions. These limits offer businesses flexibility to reinstate transactional liberty and may help recover public confidence diminished by previous cash shortages.

Critics Caution About Continuing Disparities and New Threats

However, the praise is not universally shared. Numerous specialists and industry participants contend that the modifications, although appreciated, are inadequate or might even be detrimental.

Financial strategist Nnenna Okafor contends that the updated limits are insufficient for traders and micro-businesses that depend largely on cash to sustain their operations amid challenges. Due to increasing product prices, logistical difficulties, and unreliable digital banking services in regions, she asserts that numerous Nigerians will still need more liquidity than the new thresholds to stay viable.

Within PoS operators’ players, in Nigeria’s payment system, the response is notably divided.

PoS Operators Split

Certain PoS agents appreciate the modifications, anticipating that they will:

–       Reduce friction with banks over “flagged” transactions

–       Facilitate processes for clients requiring withdrawals

–       Rebuild trust after months of cash shortages

Others convey concern. A PoS operator in Lagos cautions that greater cash availability could hinder the adoption of payments. “While easier access to cash can address problems, it may also decrease dependence on PoS terminals and other digital payment solutions that provide long-term security and efficiency,” she remarked.

She argues that if the CBN does not combine the policy with targeted incentives to encourage payment uptake, Nigeria runs the risk of regressing into deep-rooted reliance on cash.

Another operator in Abuja points out a different issue that has to do with unstable cash supply at numerous commercial banks. He insists that simply boosting withdrawal limits does not automatically fix supply shortages. “If banks cannot consistently provide cash, raising limits fails to solve the issue,” he stated.

Other operators also caution that the new setting might push fintech firms out of the market, which possibly allows monopolies to form since only big payment firms can endure the transition back to increased cash usage.

Experts in Security Alert to Increasing Threats, from Crime

Apart from operational issues, security experts have expressed concerns about the dangers linked to greater cash flow.

Abas Ogendengbe, a security expert at Anold Consulting Ltd., warns that increased access to amounts without strict controls “opens up risks for theft, fraud and money laundering.” He contends that without improvements in surveillance transaction tracking and reporting frameworks by banks, criminal groups might take advantage of the restrictions.

Nigeria continues to confront:

–       High rates of petty theft

–       Organised criminal cash-for-goods networks

–       Ransom-based criminality

–       Fraudulent cash-flow manipulation

He contends that a policy boosting the amount of currency in circulation should consequently be accompanied by enhanced institutional protections, rather than diminished ones.

Advantages of the New Policy: Relief, Liquidity, and Business Freedom

 Although it has faced criticism, the CBN’s decision carries benefits:

1. Increased Liquidity for the Informal Sector

Small-scale merchants, farm producers, haulers, craftsmen, and market participants relying significantly on cash will experience ease in transferring money, purchasing stock, and expanding their businesses.

2. Reduced Transaction Friction

Companies that once faced limiting restrictions now recover agility, enhancing business continuity and lowering administrative challenges.

3. Restoration of Public Trust

After the trauma of the cash scarcity era, easing restrictions may slowly rebuild confidence in the banking system and encourage more people to save and transact through formal channels.

4. Policy Simplicity

The updated limits, while still restricted, are more straightforward and less administrative compared to the special-authorization system.

The Disadvantages: Policy Volatility, Inflationary Risks, and Stunted Digitalisation

Nonetheless, the policy change is also accompanied by drawbacks:

1. Weakening of Monetary Policy Credibility

Regular significant reversals indicate instability and undermine confidence. A central bank needs to be consistent and foreseeable; Nigeria’s policy environment has shifted in the contrary.

2. Potential for More Money Laundering

Unlimited cash deposits and increased withdrawal limits are inconsistent with standards for preventing illegal financial transactions.

3. Undermining Digital Payment Growth

The increase in fintech was expedited amidst cash availability. A return to reliance on cash might hinder innovation. Dampen the use of safer trackable digital methods.

4. Increased Risk of Robbery and Cash-Based Crime

An increased amount of cash in use results in tangible currency to be stolen additional opportunities for criminals and amplified operational difficulties for the police.

5. Higher Costs of Cash Management

The processes of currency production, circulation, and safeguarding place financial strains on the banking sector and the CBN.

Policy Details and Operational Complexities

The CBN’s circular offers instructions for operations:

–       Excess withdrawal charges:

3 percent for individuals

5 percent for corporates

–       Revenue sharing:

40 percent to CBN, 60 percent to banks

–       Withdrawals from ATMs and PoS terminals contribute to the limit, highlighting the importance for customers to monitor where their withdrawals originate.

–       ATMs can now be loaded with all denominations, although third-party cheque cashing is still limited to N100,000.

–       Exemptions are maintained for government revenue accounts, microfinance banks, and primary mortgage banks.

–       The removal of exemptions for embassies and donor agencies is a move that some parties consider diplomatically risky.

The CBN frames this policy change as a balance, boosting liquidity while still maintaining the nation’s goal of a cashless economy. Nevertheless, its effectiveness depends on the ability of the government and financial institutions to encourage payments while addressing the security challenges posed by greater cash circulation.

A Relief Today, a Question Mark Tomorrow

The CBN’s updated cash-policy structure provides support for families, small enterprises, and the informal sector. It addresses some of the severe effects of previous policies and shows a readiness, though delayed, to adjust to practical realities.

However, the enduring consequences are complex. The policy creates openings, as money laundering hampers progress in payments, increases security threats, and shows a regulatory environment grappling with achieving stability and trustworthiness.

Nigeria is at an intersection. While cash can relieve hardships, it cannot shape the future economic landscape. The current task is to apply this policy without hindering progress, undermining financial integrity, or jeopardizing monetary stability.

The question of whether this constitutes a liberalisation or an expensive withdrawal will in the end hinge on a single element, the CBN’s ability to pair increased liquidity with stronger oversight, steadfast policy direction, and sustained digital-payment incentives.

Only then can Nigeria avoid sliding backward and instead build a financial system that truly reflects the realities of its people, its economy, and its future.

Blaise, a journalist and PR professional, writes from Lagos, can be reached via: [email protected]


Kindly share this post
Continue Reading

E-Financial

Senate Considers Bill to Empower CBN to Regulate Fintech

Published

on

Kindly share this post

Senate on Thursday began debate on a bill seeking to amend the Banks and Other Financial Institutions Act (BOFIA) 2020 to empower the Central Bank of Nigeria (CBN) to designate and supervise systemically important non-bank financial institutions, particularly major fintech operators whose activities now constitute critical national infrastructure.

Senate Considers Bill to Empower CBN to Regulate Fintech

Leading the debate, Tokunbo Abiru, sponsor of the bill and chairman of the Senate Committee on Banking, Insurance and Other Financial Institutions, said the amendment had become urgent due to the rapid transformation of Nigeria’s financial ecosystem and the emergence of large technology-enabled service providers operating at a scale previously unseen in the country.

Abiru noted that fintechs such as mobile money operators, payment service banks, wallet providers, digital lenders and switching companies now serve tens of millions of Nigerians, process huge daily transaction volumes and hold vast pools of sensitive financial data, yet operate within a regulatory framework that has not fully evolved to match their systemic importance.

“The reality today is that a non-bank institution, because of its market dominance, data concentration, customer reach or technological capacity, may pose risks equal to or even greater than those posed by a traditional bank,” Abiru said.

“We are therefore confronted with a regulatory gap that leaves critical parts of the financial system operating outside the highest tier of statutory oversight. This bill seeks to correct that mischief.”

He warned that without modernising BOFIA, the country risked exposing itself to data insecurity, foreign control of sensitive financial infrastructure and vulnerabilities that could undermine national security.

The senator stressed that many fintechs operate across foreign-owned networks, store customer data offshore, or use cloud systems outside regulatory reach, raising concerns around data sovereignty.

“Today, we cannot say with certainty where all the financial and behavioural data processed by some of these institutions is stored, who has access to it, or which foreign jurisdictions may lay claim to it,” he said.

Abiru recalled the temporary CBN restriction on fintech onboarding in April 2024, following issues around KYC compliance, money-laundering red flags and suspicious transactions, a development that, he said, demonstrated the limitations of existing regulatory tools.

The amendment bill proposes five key objectives, including establishing a statutory framework for designating systemically important institutions, creating a national registry of fintechs, empowering the CBN to impose enhanced supervisory requirements, strengthening data sovereignty, and improving consumer protection.

He dismissed suggestions that a new regulatory agency should be created for fintech oversight, arguing that such duplication would fragment regulation and undermine efficiency.

“Fintech regulation is deeply intertwined with monetary policy, payments oversight, prudential supervision, and systemic-risk monitoring, functions that already reside naturally within the Central Bank,” he said.

“International best practice overwhelmingly favours integrating fintech oversight within existing regulators, not creating new bureaucracies.”

Abiru urged the Senate to support the bill, which carries no financial implications under Senate rules.

Contributing to the debate, Adams Oshiomhole, former president of the Nigerian Labour Congress (NLC), shared the experience of how his accounts were once hacked, disclosing that the hackers accessed him through one of the Fintech banks.

Oshiomhole also said the identities of most of the key owners of online operators were not known and might not be held accountable for infractions since there was no law binding them to any commitments.

“I know the directors of our regular banks, but I can’t say the same of these Fintech banks.

“I don’t know the directors of MoniePoint, Opay and all others”, he added.

Oshiomhole further argued that when properly regulated through an enabling law, the operations of online financial institutions would better serve the interest of Nigerians.

Senators unanimously passed the bill for second reading and referred it to its Committee on Banking, Insurance and Other Financial Institutions for more legislative work.


Kindly share this post
Continue Reading

Trending