E-Business
Kaspersky Reveals In-depth Insights into Operation Triangulation
Kaspersky’s Global Research and Analysis Team (GReAT) revealed their investigation process into the notorious Operation Triangulation at the recent Security Analyst Summit.
The team showcased new details surrounding iOS vulnerabilities and exploits that underpin this assault, providing an analysis of the campaign that has targeted both the public and Kaspersky’s employees.
Earlier this year, Kaspersky uncovered an Advanced Persistent Threat (APT) campaign targeting iOS devices. Named ‘Operation Triangulation’, this campaign employs a sophisticated method of distributing zero-click exploits via iMessage, ultimately taking complete control over the device and its user data.
Kaspersky GReAT assessed that the primary goal may involve covert user surveillance, affecting even Kaspersky’s own staff. Due to the attack’s complexity and the closed nature of the iOS ecosystem, a dedicated cross-team taskforce spent a substantial amount of time and resources conducting a detailed technical analysis.
At the Security Analyst Summit, company experts unveiled previously undisclosed details of the attack chain that took advantage of five vulnerabilities, four of which were previously unknown zero-day vulnerabilities patched after Kaspersky researchers submitted them to Apple.
Company’s experts identified an initial entry point through a font processing library vulnerability.
The second, an extremely powerful and trivially exploitable vulnerability in the memory mapping code allowed access to the device’s physical memory. Additionally, attackers exploited two more vulnerabilities to bypass the latest Apple processor’s hardware security features.
Researchers also discovered that, aside from the capability to remotely infect Apple devices through iMessage without user interaction, the attackers also had a platform to carry out attacks via the Safari web browser. This prompted the discovery and fixing of a fifth vulnerability.
The Apple team has officially released security updates, addressing four zero-day vulnerabilities discovered by Kaspersky researchers (CVE-2023-32434, CVE-2023-32435, CVE-2023-38606, CVE-2023-41990). These vulnerabilities impacted a broad spectrum of Apple products, including iPhones, iPods, iPads, macOS devices, Apple TV, and Apple Watch.
“The hardware-based security features of devices with newer Apple chips significantly bolster their resilience against cyberattacks. But they are not invulnerable. Operation Triangulation serves as a reminder to exercise caution when handling iMessage attachments from unfamiliar sources.
“Drawing insights from the strategies employed in Operation Triangulation can offer valuable guidance. Additionally, finding a balance between system closedness and accessibility may contribute to an enhanced security posture,” comments Boris Larin, Principal Security Researcher at Kaspersky’s GReAT.
While Kaspersky’s victims include company’s top and middle management as well as researchers based in Russia, Europe and the Middle East, the company was not the only target of the attack.
Alongside the publication of the report and the development of a specialised triangle check utility, GReAT experts established an email address so any interested party could contribute to the investigation.
As a result, company researchers received confirmation of instances where individuals had fallen prey to Operation Triangulation and they provided those victims with guidance on enhancing their security.
“Securing systems from advanced cyberattacks is not an easy task, and it is even more complicated in closed systems such as iOS.
“That is why it is so important to implement multi-layered security measures to detect and prevent such attacks,” comments Igor Kuznetsov, Director at Kaspersky’s Global Research and Analysis Team.
Nigerian government, through the Office of the National Security Adviser (ONSA) and the National Information Technology Development Agency (NITDA), has announced a strategic collaboration to strengthen cybersecurity and clean up the nation’s cyberspace.
Recognizing that cybercrime knows no borders, Nigeria also reaffirmed its commitment to fostering stronger global partnerships within the cybersecurity ecosystem.
This announcement was made during a press conference before the inaugural National Cybersecurity Conference, which is scheduled to take place in Abuja from July 9th to 11th, 2025.
Sa’ad Abubakar, national cybersecurity coordinator from the Office of National Security Advisor, said fighting cybercrime must take the whole of society and the whole of the government approach.
According to him, “Apart from the deterrent approach whereby government agencies such as Economic and Financial Crimes Commission (EFCC) arrest individuals, take them to court and prosecute them, the youth can be nurtured into better citizens who can showcase their capacity in better ways and be useful to the country.”
Similarly, Kashifu Abdullahi, director-general, NITDA, also stressed the need for collaborative efforts in fighting cybercrimes.
According to him “Then, in addition to that, we also want to build a stronger global collaboration with the global cyber security ecosystem, because when you look at cybercrime in general, it doesn’t respect the borders.
“Someone can commit a crime from Ghana using a Nigerian ID in the US. So you can look at him physically in a different jurisdiction, pretending to be in another jurisdiction, committing the crime in another jurisdiction.
“So without that kind of synergy and working together, it will be difficult to address these challenges. The third one is challenge. The third one is getting an alternative to cybercrime for our kids in Nigeria. We have this as a major challenge.”
Inuwa further highlighted the upcoming conference’s importance, noting that it would tackle key issues through workshops, discussions on emerging threats, cross-border cybersecurity collaboration strategies, and training programmes.
He also announced that the National Cybersecurity Conference 2025 would feature the Cybersecurity Excellence Awards, recognising top contributions in the field.
The DG extended an invitation to global partners to collaborate with Nigeria in building a safer digital future.
The press conference was attended by notable figures, including Ahmad Sa’ad Abubakar, National Coordinator of, the National Cybersecurity Coordination Centre (NCCC); Hanniel Jafar, Representative of the President, of Cyber Security Experts Association of Nigeria (CSEAN); Ankit Shukla, Managing Director, QNA Marketing Management LLC and members of the press and other stakeholders.
XIAN Telecom has acquired an 8% stake in pan-African e-commerce company Jumia Technologies, citing the platform’s fintech and logistics strengths as key drivers of its backing.
This marks the first major telecom investment in Jumia since MTN Group’s exit in 2020.
AXIAN, a fast-growing telecom and digital services provider with operations across Africa, disclosed the purchase in a Schedule 13D filing with the U.S. Securities and Exchange Commission.
While the financial terms were not disclosed, AXIAN Telecom CEO, Hassan Jaber, described the move as a strategic alignment with Jumia’s growth trajectory and digital ecosystem.
“Jumia’s achievements in digital retail and fintech, particularly through JumiaPay and its logistics network, make it a very attractive investment for us. We believe in Jumia’s potential to promote financial and economic inclusion, which aligns with our core values,” said Jaber.
Once dubbed the “Amazon of Africa,” Jumia became the first African-founded tech company to list on the New York Stock Exchange in 2019.
But years of underperformance, leadership changes, and competitive pressures dented investor confidence.
In October 2020, South Africa’s MTN Group offloaded its 18.9% stake for $138 million, well below the $698 million value it once held post-IPO.
Since then, Jumia has undergone a significant transformation. Under CEO Francis Dufay, appointed in 2022, the company exited low-performing markets like South Africa and Tunisia, cut costs, and doubled down on core markets – Nigeria, Kenya, Egypt, and Morocco.
The firm is now focused on high-growth verticals, including everyday essentials and digital financial services.
Jumia’s regional CEO for East Africa, Vinod Goel, recently revealed plans to scale up international brand offerings and open its logistics network to third-party businesses.
Jaber underscored that AXIAN Telecom’s investment signals renewed confidence in Jumia’s long-term potential.
The telecom firm’s CEO said the company views Jumia as a key player in advancing Africa’s digital economy, aligning with AXIAN’s mission through its fintech and digital infrastructure brands such as Yas and Mixx by Yas.
Abisoye Coker-Odusote, director general, National Identity management commission (NIMC) has said that the commission is set to register 95 percent of Nigerians into the National Identity Database before December 2025.
Abisoye Coker-Odusote,, DG, NIMC
She made this statement at a press briefing to highlight the commissions goal aligns with President Bola Tinubu’s Renewed Hope Agenda, particularly on digital governance and inclusive development.
The mass enrollment drive will be powered by a combination of improved infrastructure, expanded registration centres, and robust public sensitization campaigns.
As of May 2025, NIMC reports over 120 million Nigerians have been enrolled, and about 100 million more would be captured by December.
Telcos Threaten to Disconnect Banks over Misinformation on New USSD Charges
MTN Nigeria Plans N900Bn in Service Upgrade
NDIC Calls for Inputs to IADI Core Principles for Effective Deposit Insurance
Netflix Hikes Subscription Fees Again in Nigeria over “Market Conditions”
DSO: STBMAN Accuses NBC of Contempt, Seeks Presidential Intervention
E-Business2 days agoNIMC Plans to Register 95 Percent Nigerians by December
News2 days agoJAMB Waxes Worriedly over Rising Digital Exam Fraud
Telecom2 days ago9mobile Nigeria Inks Agreement to Roam with MTN
Telecom2 days agoIHS Nigeria Moves to Enhance G4S Secure Solutions Site Patrols and Increase Operational Efficiency with Patrol Vehicles
E-Business1 day agoAXIAN Telecom Invests in Jumia Post-MTN Era
Telecom2 days agoBanks, Telcos to Start Deducting USSD Charges from Airtime Today
- E-Financial1 day ago
UBA Compiles with NCC, to Deduct USSD from Customers’ Accounts
E-Financial2 days agoFitch Upgrades Fidelity Bank’s National Rating to ‘A+(nga)’, Affirms Long-Term IDR at ‘B’