Connect with us

E-Financial

Lazarus, Hacking Group Targets Cryptocurrency Space- Kaspersky

Published

on

Kindly share this post

Kaspersky Lab, cybersecurity watchdogs yesterday issued a warning that the well-known hacking group known as Lazarus, which is allegedly sponsored by the North Korean government, is alive and well and still targeting the cryptocurrency industry.

 

According to the folks at Kaspersky Lab, the hacking group began a new operation in November 2018, using new methods to infiltrate the computer systems of businesses in the financial sector and gain access to sensitive data.

 

Research done by Kaspersky Lab shows the hackers customized PowerShell scripts that “communicate with malicious C2 servers and execute commands from the operator.”

 

The scripts, dubbed “macro-weaponized document[s],” look like WordPress files and other open-source projects. Once the malware has control over a company’s servers, it can “set sleep time (delay between C2 interactions), exit malware, collect basic host information, check malware status, show current malware configuration, update malware configuration, execute system shell command, [and] download [and] upload files.”

 

These weaponized documents are specifically designed to catch the attention of cryptocurrency professionals.

 

Kaspersky Lab believes that the hacking group is explicitly targeting Korean crypto exchanges based on the fact that the malware is delivered using a malicious “Korean Hangul Word Processor format” (HWP), which takes advantage of a known weakness in the PostScript software and is popular only among Korean users. That one of the weaponized documents was sent to a crypto exchange based in Korea is also telling.

 

The Lazarus group uses several methods to infect exchanges’ servers. According to Kaspersky Lab, research shows that the group is most likely “running an old vulnerable instance of Internet Information Services (IIS) 6.0 on Microsoft Windows Server 2003.” The group is also suspected of purchasing servers from a hosting company that it uses to “host macOS and Windows payloads.” The cybersecurity watchdog believes the group only puts malware on rented servers and uses servers that are already infected to run C2 scripts. These servers have been found from China to the European Union.

 

The research done by Kaspersky Lab further shows that the group has adopted better methods to avoid detection. Lazarus is separately developing malware for “32-bit and 64-bit Windows” so it has more choices concerning the platform its wishes to infiltrate and the type of compiled code it wishes to use. Kaspersky Lab concludes that the same developers are using these methods to infect Apple products, which is why the group built the macOS malware.

 

The report ends with a warning to the larger crypto and tech industry:

 

    “If you’re part of the booming cryptocurrency or technological startup industry, exercise extra caution when dealing with new third parties or installing software on your systems. It’s best to check new software with an antivirus…[a]nd never ‘Enable Content’ (macro scripting) in Microsoft Office documents received from new or untrusted sources.”

 

The Lazarus group is suspected of perpetrating some of the biggest hacks ever seen in the cryptocurrency industry.

 

The group allegedly committed the hack against Coincheck, in which approximately 500 million NEM tokens were stolen in January 2018. The group also allegedly infiltrated the Bithumb network and made off with $31.5 million worth of digital currency.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Financial

CitiTrust Heads to Appeal Court over Alleged Ponzi Scheme

Published

on

Kindly share this post

CitiTrust Financial Services Limited, the parent company of Osun-partly owned LivingTrust Mortgage Bank, has approached the Court of Appeal sitting in Lagos,  following the company’s conviction at the Federal High Court, Lagos, over alleged fraud and illegal financial operations.

CitiTrust Heads to Appeal Court over Alleged Ponzi Scheme

CitiTrust, is challenging the conviction and asset forfeiture order handed down by the Court in the case brought the Economic and Financial Crimes Commission (EFCC).

EFCC accused it of money laundering, illegal financial operations, and operating a Ponzi scheme.

Federal High Court, had ordered the forfeiture of the firm’s assets to the federal government of Nigeria, citing evidence of unlawful financial activities.

CitiTrust is fighting back according to the hearing notice No. CA/L/571/2025, issued on April 15, 2026, the appeal against the federal government, will be heard at the Court of Appeal complex in Tafawa Balewa Square, Lagos.

The matter, listed before Court 1, will first address a motion by the appellants seeking leave to file their appeal out of time.

Oyetola Muyiwa Atoyebi (SAN), counsel to the appellants, in a motion dated September 23, 2025, argued that procedural delays necessitated the application.

He explained that although the Record of Appeal was transmitted on May 26, 2025, the defence could not file its Brief of Argument within the stipulated 45 days due to time constraints and competing professional obligations.

Atoyebi further noted that the appellants’ brief exceeds the 35-page limit prescribed under the Court of Appeal Rules, 2021, by three pages, requiring the court’s permission for its adoption.

The appellants are therefore seeking the leave of the court to file and serve their Brief of Argument out of time, an order extending the time for filing, and an order deeming the already filed brief as properly filed.

The EFCC had earlier secured a conviction against CitiTrust and its subsidiaries, CitiTrust Asset Management Limited and CitiTrust Holding Plc, over alleged fraudulent financial operations.

It would be recalled that in a ruling delivered by Justice Friday Nemakonam Ogazi of the Federal High Court, Lagos, the judge held that there was overwhelming evidence linking the firms to unlawful activities.

The court found that one of the entities was not duly registered with regulatory authorities, including the Central Bank of Nigeria (CBN) and the Securities and Exchange Commission (SEC), describing the operations as illegal despite corporate registration.

Relying on Section 12 of the Proceeds of Crime (Recovery and Management) Act, 2022, the court ruled that the EFCC had established, on a balance of probabilities, that the assets were proceeds of unlawful activity.

Justice Ogazi also invoked provisions of the Advance Fee Fraud and Other Fraud Related Offences Act and the Companies and Allied Matters Act (CAMA), holding that the corporate veil could be lifted where fraud is alleged.

“The law is that when issues of fraud arise, the corporate veil must be lifted. Statutory provisions cannot be used as a refuge to justify illegality,” the court held.

The court subsequently ordered the final forfeiture of CitiTrust-linked assets, forfeiture of shares held in LivingTrust Mortgage Bank Plc, compensation of investors from recovered funds, and transfer of any balance to the Federal Government.

The anti-graft agency had also declared some executive directors of the firm wanted, alleging that they are currently on the run.


Kindly share this post
Continue Reading

E-Financial

Court Suspends Enforcement of FCCPC’s Reform on Loan Apps

Published

on

Kindly share this post

Federal court in Lagos has suspended the enforcement of Nigeria’s most comprehensive framework for regulating digital lending apps.

Court Suspends Enforcement of FCCPC’s Reform on Loan Apps

On April 15, Justice Ambrose Lewis-Allagoa of the Federal High Court in Lagos granted an interim injunction blocking the enforcement of the Digital, Electronic, Online, or Non-Traditional Consumer Lending Regulations 2025, better known as the DEON Regulations.

The order followed an urgent ex parte application filed the previous day by the Wireless Application Service Providers Association of Nigeria (WASPA Nigeria), the industry body representing wireless application service providers operating mainly within the telecoms ecosystem.

The suit targets twelve specific provisions of the text, covering licensing, sanctions, compliance obligations and data-handling rules, according to court documentation published by Lawyard.

Until the next hearing on April 27, 2026, the regulator cannot impose sanctions, enforce compliance directives, or issue new instructions to WASPA members.

The judge also barred the Federal Competition and Consumer Protection Commission (FCCPC) from interfering with the ongoing commercial operations of association members.

The case pits two actors whose respective mandates the Nigerian legal framework has never clearly separated.

On one side stands the FCCPC — the federal agency established in 2018 to enforce consumer protection and competition — which gazetted the DEON Regulations on July 21, 2025, under sections 17, 18 and 163 of its founding Act.

In a press statement dated September 3, 2025, Tunji Bello, executive vice chairman, FCCPC,  justified the rules by citing “a long history of complaints” involving exploitative practices, data breaches, abusive debt recovery, and harassment.

On the other side, WASPA Nigeria contests the very legitimacy of the FCCPC’s intervention, arguing that services tied to telecoms — airtime credit, data loans, mobile-financing products — fall exclusively under the Nigerian Communications Commission (NCC), the telecoms regulator created by the Nigerian Communications Act of 2003.

In the affidavit deposed by Ayo Stuffman, the association contends that the FCCPC is acting ultra vires and creating a regulatory regime parallel to the NCC’s.

A jurisdictional war that stretches far beyond a procedural dispute

The conflict is not limited to a question of legal boundaries. It strikes at the commercial core of the market: who collects the licensing fees, who sets the operational conditions, who governs the financial products embedded in telecom networks.

Nigeria’s consumer credit stock reached 3.82 trillion naira at the end of December 2024, up 21.27% on September, according to Central Bank of Nigeria (CBN) data relayed by The Cable and AFP.

In the fourth quarter of 2024 alone, personal loans disbursed amounted to approximately 470 billion naira.

A growing share flows through mobile applications and telecom-embedded lending products — including MTN’s MoMo Airtime Lending, operated by the country’s largest telecom operator.

If the court validates WASPA’s position, these products fall outside the FCCPC’s scope and come under the sole authority of the NCC, a regulator historically less active on consumer protection issues.

Available data on demand illustrate the social stakes. Between 2021 and 2023, the FCCPC recorded more than 11,000 consumer complaints for harassment, data abuse and unethical debt recovery practices, according to the agency.

The number of lending applications approved by the FCCPC rose from 269 in September 2024 to 408 in March 2025, while 47 apps were delisted and 88 were placed on the watchlist, according to data compiled by AFP and OneSafe.

The DEON Regulations were meant to introduce interest-rate caps, precontractual disclosure obligations, continuous supervision of recovery practices and fines of up to 100 million naira per violation, according to Legit.ng. The compliance deadline was set for January 5, 2026, and the FCCPC had issued written compliance notices to operators with an April 16 deadline, according to WASPA’s affidavit.

It is precisely this enforcement pressure that triggered the legal challenge.

 

 


Kindly share this post
Continue Reading

E-Financial

FG Rules Out Borrowing from IMF’s $50Bn Support Fund

Published

on

Kindly share this post

Federal government has said that Nigeria has no plans to seek a loan from the International Monetary Fund’s proposed $50 billion support package for economies hit by the Middle East crisis.

FG Rules Out Borrowing from IMF’s $50Bn Support Fund

Wale Edun, minister of Finance, who stated this, said that Nigeria’s current reliance on domestic economic reforms and fund mobilisation was working.

Edun gave these insights during the African Finance Ministers’ briefing, on Thursday, at the ongoing IMF/World Bank annual meetings, in Washington, DC.

He noted that for over two years, Nigeria’s investment in economic reforms have begun to yield results, restoring policy credibility and strengthening the country’s resilience against global economic shocks.

Edun told the global west and the rest of the world that Nigeria now prioritises market-based adjustments, avoiding administrative controls, particularly in foreign exchange and petroleum pricing mechanisms.

His assertion follows the disclosure by the IMF that a possible $50 billion support to cushion vulnerable economies against the crisis in the Middle East, was on the pipeline.

Despite clarifying Nigeria’s lack of interest in borrowing, Edun, urged the IMF to ensure faster financial assistance for African countries who will need help from the $50 billion global support package.

“Nigeria has no plans at the moment to approach the IMF or any other such body,” Edun said, emphasising that Nigeria’s reliance on market mechanisms had led to smoother economic adjustments, reduced disruptions and is sustaining the country’s macroeconomic trajectory.

“The IMF talked about $50 billion and we all know that the funding will largely go to Africa, because those are the most vulnerable countries. And the reality is that what we’re asking for in this instance, is that the funds and the support be released quickly and at scale.

 


Kindly share this post
Continue Reading

Trending