Connect with us

E-Business

Malware Variety Grows by 13.7% in 2019 Due to Web Skimmers

Published

on

Kindly share this post

In 2019, the number of unique malicious objects detected by Kaspersky’s web antivirus solution rose by an eighth, compared to last year — reaching 24,610,126.

This growth was mainly influenced by a 187% rise in web skimmer files. Other threats, such as backdoors and banking Trojans detected in-lab, also grew, while the presence of miners dropped by more than a half.

These trends have demonstrated a shift in the type of threats used by attackers on the web who search for more effective ways to target users, according to the Kaspersky Security Bulletin: Statistics of the Year report.

In 2018, unique malicious objects (including scripts, exploits and executable files) detected by Kaspersky’s web antivirus solution totaled 21,643,946, rising to 24,610,126 this year.

The growth accounts for an increase in the number and variety of HTML pages and scripts with hidden data loading – usually used by unscrupulous advertisers.

Yet, most notably, the growth was also partially caused by online skimmers (sometimes referred to as sniffers) – where scripts are embedded by attackers in online stores and used to steal users’ credit card data from websites.

The growth of online skimmers’ unique files (scripts and HTML) detected by Kaspersky web antivirus equaled 187%, reaching 510,000. At the same time the number of threats detected by web antivirus have risen five-fold (by 523%), totaling 2,660,000 in 2019.

“Web skimmers also entered the top 20 malicious objects detected online, taking 10th place in the overall ranking. The share of new Backdoors and banking Trojan files, among all types of threats detected in-lab, also grew by 134% and 61% to reach 7,644,402 and 739,551 respectively.

Nevertheless, the number of unique malicious URLs detected by Kaspersky web antivirus halved in comparison to 2018 (50.5%) – from 554,159,621 to 273,782,113. This shift was largely caused by significant decrease of hidden web miners, even though several detections related to them (including Trojan.Script.Miner.gen, Trojan.BAT.Miner.gen, Trojan.JS.Miner.m), can still be seen in the top 20 web malware threats.

The presence of programs that secretly generate cryptocurrency on users’ computers (called ‘local’ miners) has also been steadily declining over the year: the number of users’ computers affected by attempts to install miners dropped by 59%, from 5,638,828 to 2,259,038.

85% of web threats were detected as malicious URL – this detection name is used to identify links from Kaspersky’s black list. It includes links to web pages containing redirects to exploits, sites with exploits and other malicious programs, botnet command and control centers, extortion websites, and others.

“The volume of online attacks has been growing for years, but in 2019 we saw a clear shift from certain types of attacks that are becoming ineffective, to the ones focused on gaining clear profit from users. This is partly due to users becoming more aware of the threats and how to avoid them, and organisations steadily becoming more responsible.

A good example is miners, which have lost their popularity due to lower profitability and cryptocurrencies’ fight against covert mining.

“This year we also witnessed growth in zero-day exploits, showing products remain vulnerable and are used by attackers for sophisticated attacks, and this trend is likely to continue in the future,” says Vyacheslav Zakorzhevsky, Head of Anti-Malware Research at Kaspersky.

The number of new malicious files processed by Kaspersky’s in-lab detection technologies amounted to 342,102 – which is 1.05% less than the previous year.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Microsoft Servers Hacked by Chinese Groups

Published

on

Kindly share this post

Chinese “threat actors” have hacked Microsoft’s SharePoint document software servers and targeted the data of the businesses using it, the firm has said.

Microsoft Servers Hacked by Chinese Groups

 

China state-backed Linen Typhoon and Violet Typhoon as well as China-based Storm-2603 were said to have “exploited vulnerabilities” in on-premises SharePoint servers, the kind used by firms, but not in its cloud-based service.

The US tech giant has released security updates in response and has advised all on-premises SharePoint server customers to install them.

“Investigations into other actors also using these exploits are still ongoing,” Microsoft said in a statement.

The firm said it had “high confidence” the hackers would continue to target systems which have not installed its security updates.

It added that it would update its website blog with more information as its investigation continues.

Microsoft said it had observed attacks in which hackers had sent a request to a SharePoint server “enabling the theft of the key material by threat actors”.

Charles Carmakal, chief technology officer at Mandiant Consulting firm, a division of Google Cloud, told reporter, it was “aware of several victims in several different sectors across a number of global geographies”.

Carmakal said it appeared that governments and businesses that use SharePoint on their sites were the primary target.

A number of adversaries who stole material encoded by cryptography were then able to regain ongoing access to the victims’ SharePoint data, he said.

“This was exploited in a very broad way, very opportunistically before a patch was made available. That’s why this is significant,” Carmakal said.

Carmakal said the “China-nexus actor” was deploying techniques similar to previous campaigns associated with Beijing.

Microsoft said Linen Typhoon had “focused on stealing intellectual property, primarily targeting organizations related to government, defence, strategic planning, and human rights” for 13 years.

It added that Violet Typhoon had been “dedicated to espionage”, primarily targeting former government and military staff, non-governmental organizations, think tanks, higher education, the media, the financial sector and the health sector in the US, Europe, and East Asia.

Meanwhile, Storm-2603 was “assessed with medium confidence to be a China-based threat actor”.

 

 

 


Kindly share this post
Continue Reading

E-Business

NIMC Warns Nigerians of Fake NIN Website

Published

on

Kindly share this post

National Identity Management Commission (NIMC) has issued a public warning that it is not associated with NINcard.com.

NIMC Warns Nigerians of Fake NIN Website

According to the commission, the website has been circulating online to offer services for Nigerians seeking National Identification Number (NIN) services.

NIMC, in a post on its official X account on Wednesday, said, “NINcard.com is not in anyway affiliated to NIMC. Stay vigilant!”

The warning was accompanied by screenshots of fake payment receipts and OTP request pages from the website, both of which were boldly stamped “FAKE” by NIMC to alert the public.


Kindly share this post
Continue Reading

E-Business

NITDA, API Partner Against Harmful Online Content

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA), in partnership with the Advocacy for Policy and Innovation (API), has convened a one-day workshop in Abuja to advance dialogue on the draft Online Harm Protection (OHP) Bill to confront harmful online content.

NITDA, API Partner Against Harmful Online Content

The bill, a rights-based, locally rooted, and multi-stakeholder initiative, is aimed at addressing the challenges of the digital age.

The event, which held yesterday, brought together government officials, civil society, academics, digital platforms, and legal experts to shape a policy framework designed to combat online ills such as cyberbullying, disinformation, hate speech, digital exploitation, and gender-based violence, while safeguarding democratic freedoms and digital inclusion.

In his keynote remarks, Kashifu Inuwa, director general, NITDA urged a paradigm shift in the way society engages with digital technologies.

“For almost two decades, we have viewed digital technology through a consumer lens. But these technologies are not just products and services. They are transforming how we live, work, and interact. They shape our politics, our society, and our democracy,” he said.

Warning against unaccountable digital power in the hands of private corporations, the DG likened the digital journey to the tale of Alice in Wonderland, where initial fascination with innovation has given way to deeper concerns about privacy, autonomy, and manipulation by big tech platforms.

“We thought we were using Google, but now we realise Google is using us. Social media, once a tool of expression, has become a tool of surveillance and influence,” Inuwa noted.

He, therefore, emphasised the urgency of developing a democratic and accountable framework.  He explained that following the 2021 Twitter ban, NITDA facilitated dialogue between the government and platform operators, leading to a Code of Practice that stressed Nigeria’s sovereignty and legal standards.

According to him, the same process birthed the multi-stakeholder steering committee and the OHP White Paper in December 2024, laying the foundation for the current legislative push.

Earlier in her opening remarks,  Victoria Manya, co-founder, API, observed the moral and civic necessity of the bill.

Her words: “The internet did not break society, it merely revealed its unfiltered version. Every day, Nigerians are exposed to harassment, disinformation, exploitation, and even algorithmic violence. The OHP Bill is not a war on the Internet. It is a peace offering to its users, a social contract for a digital future that is safe, inclusive, and democratic.

“We cannot answer the question of algorithmic power with unchecked state control. We must answer it with shared, rights-based governance. This bill must not be written for the people, but with them.”


Kindly share this post
Continue Reading

Trending