E-Business
McAfee Reveals Threats Prone 5000 Versions of 21 Mobile App
Intel Security’s McAfee Labs Threats Report of June 2016, has revealed the dynamics of mobile app collusion, where cybercriminals manipulate two or more apps to orchestrate attacks capable of exfiltrating user data, inspecting files, sending fake SMS messages, loading additional apps without user consent, and sending user location information to control servers.
McAfee Labs has observed such behavior across more than 5,000 versions of 21 apps designed to provide useful user services such as mobile video streaming, health monitoring, and travel planning.
Unfortunately, the failure of users to regularly implement essential software updates to these 21 mobile apps raises the possibility that older versions could be commandeered for malicious activity, the report shows.
Widely considered a theoretical threat for many years, colluding mobile apps carry out harmful activity together by leveraging inter app communication capabilities common to mobile operating systems.
These operating systems incorporate many techniques to isolate apps in sandboxes, restrict their capabilities, and control which permissions they have at a fairly granular level. Unfortunately, mobile platforms also include fully documented ways for apps to communicate with each other across sandbox boundaries.
Working together, colluding apps can leverage these interapp communication capabilities for malicious purposes.
McAfee Labs has identified three types of threats that can result from mobile app collusion:
Information theft: An app with access to sensitive or confidential information willingly or unwillingly collaborates with one or more other apps to send information outside the boundaries of the device
Financial theft: An app sends information to another app that can execute financial transactions or make financial API calls to achieve similar objectives
Service misuse: One app controls a system service and receives information or commands from one or more other apps to orchestrate a variety of malicious activities.
Mobile app collusion requires at least one app with permission to access the restricted information or service, one app without that permission but with access outside the device, and the capability to communicate with each other.
Either app could be collaborating on purpose or unintentionally due to accidental data leakage or inclusion of a malicious library or software development kit. Such apps may use a shared space (files readable by all) to exchange information about granted privileges and to determine which one is optimally positioned to serve as an entry point for remote commands.
“Improved detection drives greater efforts at deception,” said Vincent Weafer, vice president of Intel Security’s McAfee Labs group. “It should not come as a surprise that adversaries have responded to mobile security efforts with new threats that attempt to hide in plain sight. Our goal is to make it increasingly harder for malicious apps to gain a foothold on our personal devices, developing smarter tools and techniques to detect colluding mobile apps.”
The McAfee Labs report discusses forward-looking research to create tools, initially used by threat researchers manually but eventually to be automated, to detect colluding mobile apps. Once identified, colluding apps may be blocked using mobile security technology.
The report suggests a variety of user approaches to minimize mobile app collusion, including downloading mobile apps only from trusted sources, avoiding apps with embedded advertising, not “jailbreaking” mobile devices, and most importantly, always keeping operating system and app software up-to-date.
Q1 2016 Threat Statistics
Ransomware: New ransomware samples rose 24% this quarter due to the continued entry of relatively low-skilled criminals into the ransomware cybercrime community. This trend is the result of widespread adoption of exploit kits to deploy the malware.
Mobile. New mobile malware samples grew 17% quarter over quarter in Q1 2016. Total mobile malware samples grew 23% quarter over quarter and 113% over the last four quarters.
Mac OS malware. Mac OS malware grew quickly in Q1, primarily due to an increase in VSearch adware. While the absolute number of Mac OS samples is still low, the total number of samples has increased 68% quarter over quarter and 559% over the last four quarters.
Macro Malware. Macro malware continues on the growth trajectory begun in 2015 with a 42% quarter over quarter increase in new macro malware samples.
The new breed of macro malware continues to attack corporate networks primarily through sophisticated spam campaigns that leverage information gathered through social engineering to appear legitimate.
Gamut botnet. The Gamut botnet became the most productive spam botnet in Q1, increasing its volume nearly 50%.
Prevalent spam campaigns offer get-rich-quick schemes and knockoff pharmaceutical supplies. Kelihos, the most prolific spamming botnet during Q4 2015 and a widespread malware distributor, slipped to fourth place.
McAfee Labs is the threat research division of Intel Corporation’s Intel Security Group, and one of the world’s leading sources for threat research, threat intelligence, and cybersecurity thought leadership.
The McAfee Labs team of researchers collects threat data from millions of sensors across key threat vectors—file, web, message, and network.
It then performs cross-vector threat correlation analysis and delivers real-time threat intelligence to tightly integrated McAfee endpoint, content, and network security products through its cloud-based McAfee Global Threat Intelligence service.
McAfee Labs also develops core threat detection technologies—such as application profiling, and graylist management—that are incorporated into the broadest security product portfolio in the industry.
McAfee Labs is now part of Intel Security. With its Security Connected strategy, innovative approach to hardware-enhanced security and unique McAfee Global Threat Intelligence, Intel Security is intensively focused on developing proactive, proven security solutions and services that protect systems, networks and mobile devices for business and personal use around the world.
E-Business
Zequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector
Mr Adeoye Oludamilola, managing director, Zequence Digital, a digital agency, has said strong enforcement of Intellectual Property (IP) laws , protection of Nigeria’s software industry against piracy will encourage innovation and investment.
Adeoye told reporters lately in Lagos that software piracy and the unauthorised use of proprietary technology are widespread in the country.
According to report Intellectual Property (IP) laws in software refers to the legal rights that protect the creations of the mind used in software development.
These rights, which include copyrights, patents, trade secrets, and trademarks, grant developers exclusive control over their software and related assets, preventing unauthorised use or reproduction.
Adeoye said that many startups do not protect their innovations, due to a lack of knowledge and the cumbersome legal processes involved.
“IP registration and litigation are expensive and time-consuming, which further discourages developers from protecting their work,” Adeoye said.
He added that the lack of awareness among developers about their IP rights contributed to the problem.
To address these challenges, Adeoye stressed the need for the formation of an IP Protection Consortium, comprising tech firms, legal experts, and regulators, to advocate for stronger IP enforcement.
He also suggested collaborating with legal tech startups to create simplified platforms for fast-tracked IP registration.
The managing director further called for joint initiatives between legal bodies and tech communities to launch IP rights education campaigns.
This, he said, would equip developers with the knowledge they needed to protect their innovations and grow their businesses.
Adeoye emphasised the need for the government and stakeholders to create an ecosystem for development and inclusivity by proactively engaging with regulators.
According to him, this will help ensure that policies are created with the input of concerned agencies and industry experts.
PalmPay, a leading fintech platform and full-stack digital neobank for emerging markets, has partnered with Nigeria’s biggest Health Insurance Company, AXA Mansard Health a member of the globally trusted AXA Group, to provide millions of Nigerians with affordable, accessible digital health insurance.
This strategic partnership enables PalmPay users to seamlessly access a range of health insurance packages from AXA Mansard directly within the PalmPay app. With plans starting as low as N500 per month, users can now choose from flexible insurance options tailored to fit their everyday needs.
The plans are designed to meet a wide range of needs; for example, the AXA Digital Health plan offers access to telemedicine consultations with doctors, N5,000 worth of medications, and up to N40,000 in surgical coverage. Users can also opt for the AXA Mansard MicroHealth plan at N1,000 per month, which provides unlimited diagnostic tests and funeral benefits. Additionally, the AXA Mansard Accident plan, available for N500 monthly, offers comprehensive death cover for both accidental and non-accidental cases.
Speaking on the partnership, Habib Kowontan, Head of Wealth Product at PalmPay, said: “Insurance is a key pillar of financial security, yet millions of Nigerians remain underserved. Our partnership with AXA Mansard Health breaks down long-standing barriers by placing reliable and affordable insurance solutions right at our users’ fingertips.”
In her remarks, Jumoke Odunlami, Chief Distribution Officer, AXA Mansard Insurance said that the partnership with Palmpay presents the AXA with another opportunity to improve health and productivity of Nigerians. “Through partnerships like this, we are covering over 1.8 million Nigerians and ensuring that healthcare is accessible, available and affordable.
“So we are excited about joining forces with a brand like Palmpay to compliment the range of financial possibilities they offer their customers with health plans. It fits well with our mission and our purpose of acting for human progress by protecting what matters, and we are looking forward to doing even more with Palmpay”, she explained.
This partnership reflects PalmPay’s broader mission to create a more inclusive digital financial ecosystem, one that empowers users to not only manage their money efficiently, but also secure their future.
This partnership reflects PalmPay’s broader mission to create a more inclusive digital financial ecosystem, one that empowers users to not only manage their money efficiently, but also secure their future.
By Diana Tenebe, Chief Operating Officer, Foodstuff Store
Nigeria’s agricultural sector, a cornerstone of its economy, faces a critical crossroads. While employing a staggering 40% of the population and holding over 84 million hectares of arable land, the industry is hobbled by deep-seated challenges. Low productivity, a fragmented supply chain, poor infrastructure, and a lack of access to financial services are just a few of the hurdles that prevent the sector from reaching its full potential. Coupled with the unpredictable and severe shocks of climate change—from prolonged droughts to devastating floods—these issues threaten the food security of a rapidly growing population.
Diana Tenebe
To truly transform this vital sector, a new approach is needed, one that moves beyond traditional methods and embraces the power of technology. Artificial Intelligence (AI) is not just a futuristic buzzword; it is the imperative for Nigeria’s agricultural revolution. AI holds the key to unlocking higher yields, building resilience, and fostering an inclusive and sustainable food system that can feed a nation and drive economic growth.
The most immediate impact of AI is in the area of precision farming. By integrating AI with technologies like Internet of Things (IoT) sensors, drones, and satellite imagery, farmers can gain an unprecedented understanding of their land. AI-powered systems can analyse real-time data on soil moisture, nutrient levels, and plant health, providing actionable insights for targeted interventions. For instance, smart irrigation systems can optimize water usage, a critical resource in a country facing increasing water scarcity. AI-enabled drones can survey vast farmlands in minutes, identifying early signs of pests or disease and allowing for precise application of pesticides, reducing chemical use and cost. Early trials of these technologies in Nigeria have already demonstrated significant gains, with some reports showing a remarkable 60-70% increase in crop yields.
Climate adaptation is another area where AI’s role is indispensable. Nigeria’s farmers are on the front lines of climate change, enduring erratic rainfall and extreme weather events. AI can provide a shield against this volatility. By analyzing historical weather data and real-time forecasts, AI models can offer accurate, localized predictions. This allows farmers to proactively adjust their planting schedules, select climate-resilient crop varieties, and plan for potential risks, effectively mitigating the devastating impact of droughts and floods.
The economic benefits extend far beyond the farm gate. A significant portion of Nigeria’s agricultural produce is lost due to an inefficient and fragmented supply chain. AI can streamline logistics, optimize transportation routes, and enhance inventory management. By reducing spoilage and waste, AI ensures that more of what is harvested reaches the market, thereby boosting the incomes of farmers and providing a more stable supply of food for consumers. The success of Nigerian agritech companies like Crop2Cash, which has reportedly helped over 500,000 farmers increase their income by up to 70%, demonstrates the tangible economic impact of these technologies.
AI is a powerful tool for promoting financial inclusion and education. Millions of smallholder farmers, who form the backbone of Nigerian agriculture, are often excluded from formal financial systems due to a lack of collateral and credit history. AI-driven fintech solutions can bridge this gap by assessing creditworthiness using alternative data, making it easier for farmers to access the loans and insurance they need to scale their operations. AI-powered mobile apps and chatbots can also serve as virtual extension agents, providing personalized advice on best farming practices, pest control, and crop management, democratizing knowledge and empowering farmers to make better decisions.
Despite this immense potential, the journey towards widespread AI adoption is not without its hurdles. High upfront costs for AI-enabled equipment, a general lack of understanding and experience with these tools, and a preference for traditional methods are all significant barriers. Furthermore, infrastructural gaps, including poor roads and inadequate storage facilities, hinder the seamless implementation of these technologies. Data availability and computational capacity are also key challenges that need to be addressed.
However, the Nigerian government and a burgeoning ecosystem of agritech startups are already paving the way forward. The government’s vision is articulated in initiatives like the National AI Strategy, which aims to establish AI research centers and support R&D. Programs such as the Nigeria Artificial Intelligence Research Scheme (NAIRS) and the NITDA AI Developers Group are building the necessary skills among entrepreneurs and farmers. Strategic partnerships between government bodies, financial institutions, and innovative startups are creating localized solutions that are tailored to the unique conditions of Nigerian agriculture.
Ultimately, AI is not a luxury but an imperative for Nigeria to unlock its agricultural potential. Its successful integration will transform the role of the farmer from a manual laborer to a strategic planner and overseer of a smart, efficient, and sustainable food system.
By investing in infrastructure, fostering strategic partnerships, and prioritizing education and capacity building, Nigeria can harness the power of AI to feed its people, drive economic prosperity, and secure its place as a leader in the African agricultural revolution.
Zinox Chairman Leo Stan Ekeh Donates State-of-the-Art Tech Experience Centre to Federal University Birnin Kebbi
NIMC Sets 48-hour Deadline for Diaspora Partners to Activate New Licences
Airtel Money Africa Partners pawaPay for Seamless International Remittances Across Africa
NBS Reports ₦6.72 Trillion VAT Haul as Tax Reforms Pay Off
Rubrik Joins Forces with Sophos to Reinvent M365 Recovery
News2 days agoGoogle Hit by AI-driven Cyber Attack
General News2 days agoKuwait Busts Nigerian Cybercrime Ring Targeting Telecom Tower, Banks
News2 days agoFIRS Rolls out e-invoicing System for Large Corporate Taxpayers
E-Business2 days agoZequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector
Telecom2 days agoMTN Nigeria’s Mega Billion Promo Turns Airtime into Fortune for Thousands Amid Economic Strain
Telecom2 days agoT2 Commits to Innovation, Resilience as Customer-centric Ethos Form New Focus
Telecom2 days agoI see Crisis, Resignations @ MTN, Airtel, Others – Primate Ayodele
E-Business2 days agoPalmPay Partners AXA Mansard Health to Make Digital Insurance Accessible, Affordable