Fox-IT, a Dutch security firm, on Friday, January 3, detected malicious activity on some of its clients’ networks, presuming, is following a common phenomenon that they had all previously visited yahoo.com.
Further investigation by InfoSecurity revealed malvertising on the Yahoo site – and it is possible that millions of users have been infected via Yahoo.
“Clients visiting yahoo.com received advertisements served by ads.yahoo.com,” blogged Joost Bijl, Fox-IT’s product manager for ProtACT, its security monitoring service. “Some of the advertisements are malicious. Those malicious advertisements are iframes hosted on [five separate domains].”
The iFrames, InfoSecurity highlighted, silently redirected the Yahoo visitors “to seemingly random subdomains” of several domains all served from a single IP address that appears to be hosted in the Netherlands.
Here the visitors were served with the Magnitude exploit kit which attempted to exploit several Java exploits. If any of the exploits were successful, the victim was infected with one of a range of trojans including Zeus, Andromeda, Dorkbot, Tinba, Necurs and click fraud malware.
InfoSecurity said that magnitude is proving an increasingly popular exploit kit among cybercriminals since the arrest of Paunch, the alleged author of the Blackhole EK.
“The investigation showed that the earliest signs of infection were at December 30, 2013. Other reports suggest it might have started even earlier”, continued Fox-IT. It updated its report, still on 3 January, with the comment, “It appears the traffic to the exploit kit has significantly decreased. It looks like Yahoo is taking steps to fix the problem.”
Fox-IT estimates that around 300,000 users visited the site every hour during the infection. “Given a typical infection rate of 9% this would result in around 27.000 infections every hour,” it suggests. A second Dutch company, SurfRight, provided additional information on its Hitman blog on Sunday. It confirmed December 30 as the start of the infections.
“Our systems detected the first threats associated with this malware campaign on Monday December 30th, 2013 (now 6 days ago). This means that a lot more users are infected than initially thought (4 days x 24 hours x 27,000 infections = 2.5 million infected computers),” it concluded.
At the time of writing this report, Yahoo has not published a formal statement on the issue. It has, however, released two brief statements to journalists. On Saturday it said, “We recently identified an ad designed to spread malware to some of our users. We immediately removed it and will continue to monitor and block any ads being used for this activity.”
On Sunday it added, “On Friday, January 3 on our European sites, we served some advertisements that did not meet our editorial guidelines, specifically they spread malware. We promptly removed these advertisements. Users in North America, Asia Pacific and Latin America were not served these advertisements and were not affected. Additionally, users using Macs and mobile devices were not affected.”
Jumia Partners Reckitt Benkiser, Nokia, Others to Enable Consumers Access Quality Products
Jumia has launched a Brand Festival campaign in partnership with top global brands such as Reckitt Benkiser, Unilever, Nokia, Intel, HP, Nexus, Hisense, Sharp, Samsung, Binatone, XIAOMI, ABSOLUT, Dettol, and Logitech.
The campaign which is scheduled to run from September 21st to 27th, will provide consumers access to top quality products directly from the manufacturers, eliminating all third parties, thereby reducing the cost of the products, which will enable consumers to save money.
Jumia Nigeria CEO, Massimiliano Spalazzi, said: “The aim of the campaign is to enable our consumers to save more money while getting the best quality products directly from the brand manufacturers. Consumers today are more conscious of the quality of the product they buy on Jumia, and at the same time want to save money while shopping.
In the wake of COVID-19, we have continued to strive to operate so that consumers can continue to stay at home, use e-commerce to shop, and stay safe in this trying time. We are proud to partner with Unilever, Nokia and other top brands as part of our commitment to provide customers easy access to quality products directly from the manufacturers at best prices.
Head of Key Accounts and e-Commerce at Reckitt Benckiser Nigeria Ltd, Afam Onwordi, stated that: “We have enjoyed a good and healthy relationship with Jumia in the last couple of years.
“As our fight in RB is making access to the highest quality hygiene, wellness and nourishment a right and NOT a privilege, we would therefore always seize the opportunity of every major event like this (Brand Festival) to reward our consumers with interesting offers and deals across our wide range of products.”
Senior Business Manager at HMD Global, Emmanuel Ossai, said: “For us at HMD Global, the home of Nokia phones, we are very excited to be supporting Jumia on this festival for authentic brands in Nigeria.
“We have a commitment to continuously deliver value and believe that this partnership will afford Nigerians more opportunities to enjoy the beauty of quality hardware and the secure Android experience that we offer across our range of Nokia smartphones.
“Interestingly, we have new exciting devices that will be unveiled to our Nigerian customers in the coming weeks and we cannot wait for you to have a feel of hardware magic carefully combined with software excellence. So, keep watching this space.”
TikTok Picks Oracle to Provide ‘Secure’ Cloud Tech
Enterprise software giant Oracle announced that it has been chosen to become TikTok’s “secure” cloud technology provider.
According to Oracle, this technical decision by TikTok was heavily influenced by Zoom’s recent success in moving a large portion of its video-conferencing capacity to the Oracle Public Cloud.
Oracle’s announcement comes after TikTok parent ByteDance last week said it will not be selling the video-sharing app’s US operations to software giant Microsoft.
This after US president Donald Trump signed an executive order on 6 August, blocking all transactions with ByteDance in an effort to address “national emergency” issues.
On 14 August, the US president issued an order that gave ByteDance 90 days to divest the US operations of TikTok.
Since then, US companies such as Microsoft and Oracle have been lining up as potential buyers for the popular short video app.
As the trade war between the US and China rages on, the US government has accelerated its efforts to purge Chinese apps and technology companies that it deems untrustworthy.
Trump and his administration raised national security issues, alleging the Chinese-owned company will share sensitive user data with the Chinese government.
“TikTok picked Oracle’s new Generation 2 Cloud infrastructure because it’s much faster, more reliable, and more secure than the first generation technology currently offered by all the other major cloud providers,” says Oracle chief technology officer Larry Ellison.
“In the 2020 Industry CloudPath survey that IDC recently released where it surveyed 935 infrastructure-as-a-service (IaaS) customers on their satisfaction with the top IaaS vendors including Oracle, Amazon Web Services, Microsoft, IBM and Google Cloud…Oracle IaaS received the highest satisfaction score.”
“As a part of this agreement, TikTok will run on the Oracle Cloud and Oracle will become a minority investor in TikTok Global,” says Oracle CEO Safra Catz.
“Oracle will quickly deploy, rapidly scale and operate TikTok systems in the Oracle Cloud. We are 100% confident in our ability to deliver a highly secure environment to TikTok and ensure data privacy to TikTok’s American users, and users throughout the world.
“This greatly improved security and guaranteed privacy will enable the continued rapid growth of the TikTok user community to benefit all stakeholders.”
Inq. Acquires Vodacom’s Business in Nigeria, Others
inq. Holdings Limited, artificial intelligence service provider, has acquired Vodacom Business Africa’s operations in Nigeria, Zambia and Cote d’Ivoire.
It plans further acquisition in Cameroon subject to regulatory approvals.
Mr. Valentine Chime, managing director, inq. Holdings Limited, said the 100 per cent acquisition of the Vodacom Business Africa’s operations in the three countries was in pursuit of the company’s dream of building pan-African network that will help in creating better future through digital solutions.
Domiciled in Mauritius, inq. Holdings Limited is a subsidiary of Convergence Partners Communications Infrastructure Fund, a fund dedicated solely to communications infrastructure and related services and technologies across Sub-Saharan Africa (SSA).
Formerly known as Synergy Communications, the latest acquisition has grown inq.’s regional footprint with operations in 12 cities in seven countries across Africa. It has existing operations in Botswana, Malawi and South Africa with an additional investment in Mozambique.
“Under the inq. banner the company will embark on the next phase of building a unified Pan-African cloud and digital service provider, bringing to market a very relevant suite of next generation technology solutions in the fields of Edge AI, SD-WAN/NFV and Cloud,”Chime said.
According to him, with operations in major African cities of Lagos, Abuja, Port Harcourt, Kano, Gaborone, Lusaka, Ndola, Blantyre, Lilongwe, Mzuzu, Abidjan and Johannesburg, the inq. team prides itself on global best practice methodologies customised to local customs in each of the 16 cities, covering different sectors including banking, oil and gas, fast moving consumer goods, mining, health, real estate, information technologies, public sector and logistics.
“Covid-19 has accelerated digital transformation, and inq. is perfectly positioned to deliver intelligent connectivity through seamless delivery of cloud and digital services and technologies to our clients. We are about simpler, seamless solutions,” Chime said.
NCC Arrests Man for Hacking into DSTV System
CBN Disburses N3.5tr COVID-19 Intervention Cash
Yobe Gov Approves Employment of Staff @ State Owned Broadcasting Stations
Labour Plans Protest over Increase in Fuel Price, Electricity Tariff Hike Monday
Nigerian Students Qualify for Huawei Global ICT Competition
New Regulatory Agency Coming for Nigeria Postal Sector
Pantami Excited as ICT’s Contribution to Nigeria’s GDP Increases to 17.83%
Chinese Phones with Built-in Malware Sold in Africa
MTN, Unacast Partner to Mitigate Spread of COVID-19 through Turbine Location Processing Engine
9PSB gets Approval from CBN with *990# to Commence Operations in Nigeria
- Telecom2 days ago
Huawei’s Investment in Nigeria Reaches $76m
- E-Financial2 days ago
CBN Investigates 55 Companies over Forex Infractions
- Broadcasting2 days ago
OurTv Secures LaLiga Broadcasting Rights for Nigeria
- Broadcasting2 days ago
Extreme E Partners StarTimes to Broadcast Series across Africa
- Broadcasting2 days ago
NCC, AVCNU Set Agenda for Model IP Policy for Nigerian Universities
- E-Business2 days ago
Mega Deals as Konga Freedom Sales Goes Live Today
- E-Business2 days ago
ICANN Launches Pandemic Internet Access Reimbursement Program Pilot
- E-Financial1 day ago
Banks Fingered in $2trn Dirty Money Scam