Connect with us

E-Business

Qbot Emerges Most Prevalent Malware in First Half of 2023, Mobile Trojan SpinOk Makes its Debut

Published

on

Kindly share this post

Check Point® Software Technologies, a provider of cybersecurity solutions globally, has published its Global Threat Index for June 2023. Researchers found that the Trojan Qbot has been the most prevalent malware so far in 2023, ranking first in five out of the six months to date.

Meanwhile, mobile Trojan SpinOk made its way to the top of the malware list for the first time after being detected last month, and ransomware hit headlines following a zero-day vulnerability in file sharing software MOVEIt.

Qbot, which initially emerged in 2008 as a banking Trojan, has undergone consistent development, acquiring additional functionalities for the purpose of stealing passwords, emails, and credit card details.

It is commonly propagated through spam emails and employs various techniques such as anti-VM, anti-debugging, and anti-sandbox methods to impede analysis and avoid detection.

Presently, its primary role is to act as a loader for other malware and establish a presence within targeted organizations, serving as a stepping stone for ransomware group operators.

Meanwhile, researchers discovered a prolific mobile malware that has so far amassed 421 million downloads. Last month, for the first time, Trojanized Software Development Kit (SDK) SpinOk made its way to the top of the mobile malware families. Used by numerous popular apps for marketing purposes, this malicious software has infiltrated highly popular apps and games, some of which were available on the Google Play Store.

Capable of stealing sensitive information from devices and monitoring clipboard activities, SpinOk malware poses a serious threat to user privacy and security, underscoring the need for proactive measures to protect personal data and mobile devices. It also serves as a stark reminder of the devastating potential of software supply chain attacks.

Last month also saw the launch of a large-scale ransomware campaign that impacted organizations worldwide. In May 2023, Progress Software Corporation disclosed a vulnerability in MOVEit Transfer and MOVEit Cloud (CVE-2023-34362) that could allow unauthorized access to the environment.

Despite it being patched within 48 hours, cybercriminals associated with Russian-affiliated ransomware group Clop exploited the vulnerability and launched a supply chain attack against MOVEit users.

To date, 108 organizations – including seven US universities – have been listed publicly, following the incident, with hundreds and thousands of records obtained.

“The MOVEit exploit proves that 2023 is already becoming a significant year in ransomware. Prominent groups like Clop are not operating tactically to infect a single target, but instead, making their operations more efficient by exploiting software that is widely used in a corporate environment.

This approach means they can reach hundreds of victims in a single attack.” said Maya Horowitz, VP Research at Check Point Software. “This attack pattern emphasizes the importance for companies to implement a multi-layered cyber security strategy and to prioritize patching quickly when vulnerabilities are disclosed.”

CPR also revealed that “Web Servers Malicious URL Directory Traversal” was the most exploited vulnerability last month, impacting 51% of organizations globally, followed by “Apache Log4j Remote Code Execution” with 46% of organizations worldwide. “HTTP Headers Remote Code Execution” was the third most used vulnerability, with a global impact of 44%.

Top malware families

Globally, Qbot was the most prevalent malware last month with an impact of 7% worldwide organizations, followed by Formbook with a global impact of 4% and Emotet with a global impact of 3%.

In Nigeria, Qbot was the most prevalent malware last month with an impact of 19.72%, followed by Expiro with an impact of 15.49% and FormBook with an impact of 7.04%.

  1. Qbot – Qbot AKA Qakbot is a multipurpose malware that first appeared in 2008. It was designed to steal a user’s credentials, record keystrokes, steal cookies from browsers, spy on banking activities, and deploy additional malware. Often distributed via spam email, Qbot employs several anti-VM, anti-debugging, and anti-sandbox techniques to hinder analysis and evade detection.
  1. Expiro – Expiro is a polymorphic file infector first seen in 2010. It inserts its malicious code into executable files on the infected host. These files lead to new infections when they are run on other machines. Expiro steals user and system information from Windows, as well as FTP credentials.
  1. FormBook – FormBook is an Infostealer targeting the Windows OS and was first detected in 2016. It is marketed as Malware as a Service (MaaS) in underground hacking forums for its strong evasion techniques and relatively low price. FormBook harvests credentials from various web browsers, collects screenshots, monitors and logs keystrokes, and can download and execute files according to orders from its C&C.

Top Attacked Industries Globally

Last month, Communications remained in first place as the most exploited industry globally, followed by Utilities and Transportation.

  1. Communication
  2. Utilities
  3. Transportation

Top exploited vulnerabilities

Last month, “Web Servers Malicious URL Directory Traversal” was the most exploited vulnerability, impacting 51% of organizations globally, followed by “Apache Log4j Remote Code Execution” with 46% of organizations worldwide. “HTTP Headers Remote Code Execution” was the third most used vulnerability, with a global impact of 44%.

  1. ↔ Web Servers Malicious URL Directory Traversal – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
  1. ↔ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
  1. ↔ HTTP Headers Remote Code Execution (CVE-2020-10826, CVE-2020-10827, CVE-2020-10828, CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.

Top Mobile Malwares

Last month SpinOk rose to first place in the most prevalent Mobile malware, followed by Anubis and AhMyth.

  1. SpinOk – SpinOk is an Android software module that operates as spyware. It collects information about files stored on devices and is capable of transferring them to malicious threat actors. The malicious module was found present in more than 100 Android apps and downloaded more than 421,000,000 times until May 23.
  1. Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
  1. AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera, which usually used to steal sensitive information.

Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Maad Raises $3.2m Seed Funding to Transform Francophone Africa’s Retail Market

Published

on

Kindly share this post

Maad, Francophone Africa’s fastest-growing tech & logistics platform for informal retailers, today announced the successful completion of its $3.2 million seed funding round (debt & equity).

The round was led by Ventures Platform, with participation from Seedstars International Ventures, Reflect Ventures, OuiCapital, Launch Africa, Voltron Capital & Alumni Ventures. Proparco and local banks participated in the debt financing.

Maad is a tech & logistics platform that directly connects suppliers and small retailers of Fast Moving Consumer Goods (FMCG). Their tech-driven solution allows retailers to order products from a one-stop shop, with reliable delivery, competitive prices while benefiting from working capital loans.

Maad leverages this distribution infrastructure to offer additional high-value services to brands: data, software, and services for advertising, distribution, and market understanding.

Maad is on a mission to transform the retail landscape in Francophone Africa, where 80% to 95% of consumption still takes place in informal mom-and-pop shops. “Among startups operating in this space, Maad benefits from a clear first-mover advantage in Sub-Saharan Francophone Africa.

 

“We often say this is a blue ocean. As the fastest-growing player in the region, we are well-positioned to maintain our leadership and continue driving transformation in this underserved market,” said Sidy Niang, Co-founder & CEO of Maad.

The company currently operates in Senegal and has already achieved significant milestones, including partnering with more than 80 suppliers, offering a catalog of over 1,000 SKUs of household brands, and reaching a monthly GMV of $3 million, while operating near breakeven. Maad plans to use the funds to further expand across & dominate the Senegalese market, introduce financial services such as Buy Now, Pay Later through a digital wallet, and launch in a second country in Francophone Africa.

Maad’s founding team brings a wealth of experience and expertise to the table. Jessica Long, Co-founder & COO, focused on Operations Excellence & Technology, was the 15th employee at Airbnb and has been living in Senegal for over 7 years, designing digital distribution systems nationwide.

Sidy Niang, is focused on Growth, Hiring & Fundraising, has over 4 years of experience in private equity and infrastructure investments with the IFC (International Finance Corporation) and previously co-founded a food delivery company.

“Small retailers are central to neighborhood life and to Senegal’s economy. Maad builds scalable digital technology and core logistics infrastructure so that these retailers can make everyday-need products consistently available to people who make less than $5 a day,” added Jessica Long.

She continues, “Maad’s strength lies in its technology. We have built a fully in-house ERP, for order, delivery & warehouse management that fits perfectly with our operations, allowing us to operate more efficiently at every single step of the logistics chain. We also collect data points on product & retailers, which we process and use to make insights available to suppliers so that they can make better decisions”

“Maad’s innovative approach to digitizing the informal retail sector in Francophone Africa has the potential to create a significant impact on the lives of small business owners and consumers,” said Dotun Oloworopoku, Managing Partner at Ventures Platform. “We are thrilled to lead this investment round and support the Maad team as they work towards building a more efficient and inclusive retail ecosystem in the region.”

Charlie Graham-Brown, Seedstars International Ventures Partner shared, “What sets Maad apart is their ability to navigate the complexities of the informal retail sector while maintaining a sustainable business model.

“Their focus on profitability and efficient use of capital, combined with their first-mover advantage in a largely untapped market, makes them an attractive investment opportunity. We believe that Maad has the potential to drive significant economic impact and create lasting positive change in the lives of retailers and consumers across the region.”

Maad’s unique positioning, sustainable business model, and ability to secure funding during a challenging climate for B2B e-commerce startups demonstrate the company’s potential to drive significant transformation across Sub-Saharan Francophone Africa’s retail landscape.


Kindly share this post
Continue Reading

E-Business

The Future of Enterprise AI isn’t about More Data – It’s About The Right Data

Published

on

Kindly share this post

Artificial intelligence promises to transform every aspect of business operations, yet a lot of companies lack clarity on how to get from pilot to full production and value realisation. In today’s digital landscape they struggle with islands of data spread across various systems, leading many workers to not trust the data used to train AI systems and experience difficulty to get what they want out of them.

According to Salesforce research, only 28% of applications are connected, and over 80% of business leaders struggle with data fragmentation and data silos.

While three-quarters of workers surveyed in the recent “Your Data, Your AI” survey from Salesforce believe accurate, complete, and secure data is critical to building trust in AI, more than half do not trust the data used to train AI systems today. And nearly 60% of AI users worldwide find it difficult to get what they want out of AI, the report found.

The future of enterprise AI isn’t about more data – it’s about the right data. When AI is grounded in a company’s own data, it delivers more useful results and ultimately drives greater trust and adoption.

Only by consolidating their data will companies be able to fully understand the complete customer journey. A trusted data foundation and integrating AI into workflows across the enterprise are key ingredients needed for AI success.

Deploying these together, companies can unlock enterprise deployments at scale and drive measurable outcomes from AI automation, personalisation, and performance optimisation, including higher sales productivity, faster customer service resolutions, higher-conversion marketing campaigns.

Building a trusted data foundation

For AI to live up to the hype, large language models (LLMs) must be grounded in trusted enterprise data. However, with data trapped in disconnected silos, wholesale digital transformation and value realisation remains elusive. Prospects are worse when the data being used to ground AI models is incomplete, incorrect, or irrelevant — leading to inconsistent, incorrect results.

Unlocking the power of trapped data enables better analysis, decision-making, and AI automation, grounding customer and business data and metadata — a common language that integrates all applications — in ways that deliver trusted, outcome-oriented results without expensive model training.

Take, for example, real-time data that a prospective customer has just visited a company’s website. Previously, sales reps would have had no way of knowing this without manually pulling data into a custom report. Real-time data brings actionable insights, allowing for immediate customer engagement, resulting in higher conversion rates, revenue growth, and customer satisfaction.

Trust is a key component of successful enterprise AI deployments. By unifying and cleansing their data, companies can ensure that AI models operate on the most accurate information.

At Salesforce, we have engineered trust into every Salesforce application through our Einstein Trust Layer, a core part of the Einstein 1 Platform. The Einstein Trust Layer includes data masking to ensure data privacy protection, a zero-retention architecture to ensure data is never learned by AI models or stored outside Salesforce, an LLM audit trail, and keeps humans at the helm of every AI interaction. We have also built-in a feedback loop that continuously improves model accuracy and relevance, and this feedback data is automatically logged in Data Cloud.

Integrating AI into the flow of work

The need to deliver AI in the flow of where companies’ sales, service, marketing, commerce, developer, and other employees work explains why they’re leaning into conversational assistants, for their employees to interact with any data or workflow across their enterprise.

With specific customer data, employees can generate useful responses which are automatically grounded in all of their organisation’s trusted data and metadata. From generating customer campaigns, to answering service questions, everything is personalised, based on consolidated data – all securely within the confines of their company’s data and business processes.

The powerful combination of data and CRM makes these personalised customer experiences possible. For today’s consumer, milliseconds matter. The cost of not keeping up with them could be lost sales opportunities, poor social media reviews, or a disconnect in healthcare delivery.

While generative AI is still in its early stages for most companies, the potential for true enterprise transformation is immense. Those that can put in a foundation of data and trust, and offer AI in the flow of where their employees work, will be able to shift from pilot to production and realise tremendous value, employee satisfaction, customer loyalty, and business growth.


Kindly share this post
Continue Reading

E-Business

NITDA Signs MoU with Cisco on Irrigation of 500,000 Farmlands with Tech Solutions

Published

on

Kindly share this post

The National Information Technology Development Agency (NITDA) yesterday, signed a Memorandum of Understanding (MoU) with Cisco International for the adoption of smart solutions to address socio-economic challenges in the country.

The director-general of NITDA, Kashifu Inuwa Abdullahi said the MoU would facilitate the adoption of digital technology/solutions for the irrigation of 500,000 farmlands in line with President Bola Tinubu’s directive to boost food security in the country.

The MoU was signed at the headquarters of NITDA in Abuja by the director general of NITDA, Kashifu Abdullahi, and the chief executive officer/country director of CISCO, Clayton Naidoo.

Speaking at the event, the NITDA boss said the MoU would accelerate the process of delivering digital services to Nigerians through smart agriculture, education, health, and other social services.

Abdullahi said President Bola Tinubu’s Renewed Hope Agenda was anchored on delivering digital services through technological solutions, especially Artificial Intelligence (AI) Internet of Things (IoT), and drones amongst others to solve Nigeria’s critical problems.

According to him, NITDA is partnering with Cisco to boost agricultural productivity and food security as directed by the President, adding that the adoption of the technologies would be extended to unserved and underserved areas of the country.

Abdullahi who took the Cisco team around some designated farms in Abuja, said Cisco would be working with a firm in Maiduguri, Borno state, to develop a learning Centre for Nigerians on the use of Artificial Intelligence, (AI) Internet of Things (IoT) and other technology solutions to improve businesses.

“The MoU we signed today is aimed at accelerating the adoption of technology solutions as well as digital services to enhance agriculture productivity and improve health care services, and security, among others.

“This is the vision of Mr President as encapsulated in the Renewed Hope Agenda. Our Minister, Dr Bosun Tijani has developed five pillars for the realisation of the vision. And here in NITDA, we have 7 pillars for our strategic plans. All this is geared towards economic transformation and accelerated development”, Abdullahi said.

The country director of CISCO, Naidoo said Nigeria would benefit from the MoU as it would improve agricultural production, create job opportunities, and empower the citizens financially.

He said Cisco has been involved with various governments in Africa and America to create innovation hubs, stressing that in Nigeria technology experience centres would be created to boost security services and business units.

Naidoo said his organisation would create inclusive modules that would empower local communities in Nigeria and make them benefit from various job opportunities in the digital services sector and other related sectors.


Kindly share this post
Continue Reading

Trending