Connect with us

E-Business

Kaspersky Identifies Cyber Threats to SMEs in 2023

Published

on

Kindly share this post

The World Trade Organisation estimates that SMEs represent more than 90% of all businesses worldwide, and, according to Kaspersky,  a cyber security incident is one of the most challenging types of crises a small business could face.

Experts from Kaspersky analysed the weak points SMBs may have and outlined some major cyberthreats that entrepreneurs should be aware of and seek to address.

  1. Data leaks caused by employees

There are different ways a company’s data may be leaked – and, in certain cases, it might happen involuntarily. During the pandemic, many remote workers used corporate computers for entertainment purposes.

Kaspersky says the trend is here to stay, and while during 2020, 46% of employees had never worked remotely before, now two-thirds of them state they wouldn’t go back to the office, with the rest claiming to have a shorter office work week.

  1. DDoS attacks

Kaspersky notes that many DDoS attacks go unreported, because the payout amounts are often relatively small.

  1. Supply chain

Being attacked through a supply chain typically means a service or program that an organisation has been using for some time has been adapted to be malicious. These are attacks delivered through the company’s vendors or suppliers – the examples can include financial institutions, logistics partners, or even a food delivery service. And such actions may vary in its complexity or destructiveness.

  1. Malware – encryptors

More than a quarter of SMEs opt for pirated, or unlicensed software which could include malicious or unwanted files that may exploit corporate computers and networks. Kasprsky says the most common emerging malware threats are encryptors, which seek a company’s data, money, or even personal information of its owners.

  1. Social engineering

It’s well-established that as a result of the pandemic, many companies have moved much of their workflows online and increased use of new collaboration tools. In particular, Microsoft’s Office 365 suite has seen a lot more use; as a result, phishing now increasingly targets those user accounts. Scammers have been trying many different methods to get business users to enter their account access details on a website made to look like Microsoft’s sign-in page.

Kaspersky has uncovered many new ways that phishing scammers are using to try to fool potential victims, for example, some are mimicking loan or delivery services – sharing false websites or sending emails with fake accounting documents.

A recent survey by Kaspersky showed that 41% of SMEs have a crisis prevention plan and do care about cybersecurity. It also indicates that these companies understand how challenging IT security incident remediation can be and tends to indicate that they will be looking to implement reliable protective measures.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

CrediCorp Partners FintechNGR to Drive Consumer Credit Initiative

Published

on

Kindly share this post

Nigerian Consumer Credit Corporation (CrediCorp), has partnered Fintech Association of Nigeria (FinTechNGR) to drive consumer credit scheme initiative through a robust payment platform that would be provided by members of FinTechNGR.

Speaking at a Social Meet in Lagos, organised by FinTechNGR, with the theme: “Augmenting the Future, AI, Credit and Transformation of Nigerian Finance,” the Chairman, CrediCorp Board of Directors, Aderemi Abdul-Bojela, said members of FinTechNGR would have specific roles to play in the partnership, in the areas of providing robust platform for money transfer, technology evaluation, among others.

“Today, CrediCorp is engaging with members of FinTechNGR in a social interactive gathering to discuss collaboration and support for the growth of Consumer Credit Corporation in Nigeria. We want to interact to understand how technology will drive the crediCorp initiative in Nigeria and also to understand the role that members of FinTechNGR will play in all of these initiatives around CrediCorp,” Abdul-Bojela said.

Describing the partnership as a welcome development that will enhance savings culture among Nigerians, the Chief Operating Officer (COO) of FinTechNGR, Dr. Babatunde Obrimah, said: “FinTechNGR is an enabler of technology advancement in Nigeria. We bring the players together to drive technology innovation.

“Our role in the FinTechNGR-CrediCorp partnership is to ensure that our members support the growth of consumer credit in Nigeria, by providing the relevant payment platforms for all financial transactions among the banks who are the lenders, the customers who are the burrowers and the CrediCorp who is the guarantor.”

Speaking about the benefits for Nigerians, Obrimah said the Consumer Credit Corporation in Nigeria would enhance the country’s credit culture and enable Nigerians to save and plan well with their savings. “The initiative will address inflation, help in liquidity flow, build trust in customers’ borrowing, boost credit culture and enhance the culture of savings among Nigerians,” Obrimah said.

Addressing the issue of risk and consumer trust, Abdul-Bojela said the CrediCorp has put measures in place to ensure that the banks that would be involved in lending, would be protected and guaranteed of the repayment of the loans within the CrediCorp ecosystem.

He said there would be an independent management that would ensure that the right technology is put in place to recover all monies.


Kindly share this post
Continue Reading

E-Business

NITDA to Integrate of Digital Literacy into School Curriculum

Published

on

Kindly share this post

Kashifu Abdullahi, director general of the National Information Technology Development Agency (NITDA), announced plans to integrate digital literacy into Nigeria’s education system, to achieve a 70% literacy rate by 2027 and 95% by 2030.

NITDA to Integrate of Digital Literacy into School Curriculum

Kashifu Abdullah, DG, NITDA

The NITDA’s DG made the announcement on Wednesday in Abuja during a media parley.

He stated that in order to include digital literacy in the curriculum at all educational levels, from kindergarten to university, the Agency was collaborating with the Federal Ministry of Education.

Abdullahi, said that this program would equip Nigerians with the digital know-how and abilities they need to succeed in the digital economy.

He emphasized that NITDA would also launch the “Digital Literacy for All Initiative” to educate Nigerians outside the formal education system and provide access to quality digital content.

Nigeria would train over two million young people in in-demand IT skills in order to become significant global outsourcing hub

NITDA is also collaborating with the Defence Headquarters and security agencies to develop digital solutions to address security concerns, including the use of drones, artificial intelligence, and other digital resources to combat banditry, abduction, and terrorism, he said.

 

According to him, the agency’s draft SRAP 2.0 plan aims to establish Nigeria as a digitally empowered nation, with a focus on innovation, national prosperity, and inclusivity.

The director general of NITDA added that, if successfully implemented, this strategy could propel Nigeria into a new phase of digital empowerment and leadership in the global digital economy.


Kindly share this post
Continue Reading

E-Business

Experts Highlight Trusted Relationships as Key Vector

Published

on

Kindly share this post

In 2023, more than 1/5 of cyberattacks persisted for over a month, the annual Kaspersky Incident Response 2023 report has revealed, with trusted relationships emerging as one of the main attack vectors in these prolonged cases.

The report draws on the results of Kaspersky’s cyberattack investigations throughout the year, gathered when supporting organisations sought incident response assistance or when hosting expert events for their internal incident response teams.

Primary reasons of organisations approaching Kaspersky Incident Response team with service requests were encrypted files (32.8% of requests), suspicious activities (31%), data leakage (20%), and also included non-authorised accesses (3%), service unavailability (3%) and money theft (1.6%).

Among initial attack vectors of the investigated incidents were exploiting public facing application (42.4%), compromised accounts and BruteForce attacks (28.8% in total), trusted relationships (6.78%), phishing (5%), insider’s activity (3.4%).

Kaspersky Incident Response 2023 report indicates that long-lasting cyberattacks that persist for more than a month constituted 21.85% of the total, increasing from 2022 by 5.55%.

One notable trend observed in these attacks was the exploitation of trusted relationships as a primary vector. Compromises leveraging trusted relationships have occurred previously, but in 2023 their frequency increased.

As this method of attack enables threat actors to infiltrate multiple victims through a single compromised organisation, investigative teams face several additional challenges. Firstly, initially targeted organisations don’t always recognise the importance of thorough investigations and may be reluctant to cooperate.

Secondly, attacks initiated through trusted relationships often require more time to progress from the initial intrusion to the final incursion phase. Therefore 50% of these attacks lasted more than a month. A similar proportion of attacks exceeding one month were exclusively registered within the insider and phishing vectors.

“Our latest findings underscore the critical role of trust in cyberattacks. In 2023 and for the first time in recent years, attacks through trusted relationships were among the three most used vectors. Half of these incidents were discovered only after a data leak had been found.

“By exploiting trusted relationships, threat actors can prolong attacks and infiltrate networks for extended periods, posing significant risks to organisations. It’s imperative for businesses to remain vigilant and prioritise security measures to safeguard against such sophisticated tactics,” comments Konstantin Sapronov, Head of Global Emergency Response Team at Kaspersky.

 


Kindly share this post
Continue Reading

Trending