Connect with us

E-Financial

Revealed: mPoS Devices at Risk from Hackers

Published

on

POS-Terminal.jpg
Kindly share this post

Researchers have found that most popular mobile point of sale (mPoS) devices which accept chip-and-pin cards contain several vulnerabilities,

Jon Butler, head of research at MWR InfoSecurity, and a researcher named Nils, studied six of the most popular mPoS, according to their presentation at the annual Black Hat security conference recently.

A patch has been available since April but hasn’t been widely applied, leaving many devices vulnerable.

They uncovered vulnerabilities in the device’s firmware update process.

Butler and Nils were able to look at the USB interface and gain access to the device’s command line to execute commands.

A stack-based buffer overflow bug in the EMV parsing library also opened up the devices to be fully compromised and under the attacker’s control.

They found hints that mPoS could also be compromised via a smartphone infected with malware.

These vulnerabilities, according to the researchers, would not allow attackers to clone the chip on EMV cards.

Attackers can take the available information and the captured PIN to create a cloned card that could be used where EMV is not as widely deployed, such as the United States.

The researchers successfully used a maliciously crafted EMV (chip and pin) card to install and run a Flappy Bird-like game on the device.

A real world version of this attack would likely involve the attacker using a rogue card to modify the mPoS to stealthily copy card details and PINs of every payment card it processes.

The attacker could later return with another card to extract the harvested information.

Chip cards should not be considered trusted, Butler said. Every card has not been freshly issued by a bank, he warned.

These mPoS devices have a small screen, a card reader, and an input pad to accept PINs.

Even though they may look entirely different, Butler said 75 percent of the devices actually are the same when considering the underlying software and tools available.

These devices generally run Linux, or a variant of, and communicate via Bluetooth with smartphones.

The platform vendor was cooperative when Butler and Nils reported the vulnerability and released the patch for the EMV library in April.

There was some delay in releasing the patch because the modified library had to be re-certified again.

“Legal standards actually make it difficult for manufacturers to release security patches in a timely manner. Some of the mobile device vendors have not yet released the firmware update containing the new EMV library”, Nils said.

Unlike many embedded devices, mPoS can potentially be updated easily, as the firmware can be pushed over Bluetooth by the mobile app.

“Even with the uncovered flaws, mPoS devices are potentially more secure than traditional PoS devices”, Butler said.

“They are simple enough that so long as implementation follows security best practices, there’s not much that can go wrong”, he said.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Financial

Zedvance appoints Prof. Olanrewaju as board chairman

Published

on

Kindly share this post

Zedvance Finance Limited has appointed Professor Pius ‘Deji’ Olanrewaju as Chairman of its Board of Directors, effective July 1, subject to the approval of the Central Bank of Nigeria (CBN).

Zedvance appoints Prof. Olanrewaju as board chairman

Professor Pius ‘Deji’ Olanrewaju

The company disclosed this in a statement, describing the appointment as a significant step in strengthening its corporate governance structure and positioning the organisation for its next phase of growth.

According to Zedvance, the appointment reflects its commitment to building a robust governance framework capable of driving innovation, sustainable growth and long-term value creation for stakeholders.

The company said Olanrewaju brings extensive boardroom experience, leadership credentials and expertise in governance, strategy and organisational transformation to the role.

It noted that the strengthened board structure would enhance oversight and support the company’s strategic growth ambitions.

Speaking on his appointment, Olanrewaju expressed appreciation for the confidence reposed in him.

“I am honoured to assume the role of Chairman of the Board of Zedvance Finance.

“The company has established a strong reputation as a trusted financial partner, leveraging innovation and technology to create meaningful impact.

“I look forward to working with the board and management to support the company’s strategic aspirations and deliver sustainable value for our stakeholders,” he said.

Olanrewaju is a legal scholar, banking expert and corporate leader with more than four decades of experience spanning banking, finance, academia and institutional governance.

He holds degrees in Law, Arts and Social Sciences, including a Bachelor of Laws (LL.B), Bachelor of Laws (B.L.), Bachelor of Arts (B.A.), Master of Science (M.Sc.), Master of Laws (LL.M.) and a Doctor of Philosophy (Ph.D.).

He is a Fellow of the Chartered Institute of Bankers of Nigeria (FCIB), Fellow of the Institute of Capital Market Registrars (FIMA), Fellow of the Institute of Management and Administrative Technology (FCMR), and Fellow of the Enterprise Risk Management Professionals (FERP).

Olanrewaju is also a member of several professional bodies and served as the immediate past President and Chairman of the Council of the Chartered Institute of Bankers of Nigeria (CIBN).

During his more than 35 years of service to the institute, he held several strategic positions, including Chairman of its Capacity Building and Certification Committee.

He is currently a Professor of Banking Law at Babcock University, where he previously served as Provost and Dean of the School of Law and Security Studies.

He has authored and co-authored several academic publications and serves on the boards of a number of organisations, including Babcock University Microfinance Bank.

The company expressed confidence that his experience in strategic leadership, corporate governance and financial services oversight would support its long-term growth and institutional development.


Kindly share this post
Continue Reading

E-Financial

FG Denies N8 Trillion ‘Shadow Budget’, Says IMF Quoted out of Context

Published

on

Kindly share this post

Taiwo Oyedele, minister of Finance and Coordinating minister of the Economy, has said there are no secret expenditures or shadow budgets as insinuated.

FG Denies N8 Trillion ‘Shadow Budget’, Says IMF Quoted out of Context

Taiwo Oyedele, minister of Finance and Coordinating minister of the Economy

This followed comments by the International Monetary Fund (IMF) that discrepancies amounting to about two per cent of Nigeria’s Gross Domestic Product (GDP) exist between reported and actual budget deficits.

In a statement on Sunday, Oyedele said claims that the Federal Government spent over N8 trillion outside the approved budget misrepresented both the IMF’s position and Nigeria’s fiscal framework.

The minister stressed that the federal government does not operate a “shadow budget” or spend public funds outside constitutional and statutory provisions.

“The Federal Government has noted recent public commentary alleging that approximately two per cent of GDP amounting to over N8 trillion was spent outside the approved budget based on references to the IMF Representative in Nigeria and the Fund’s 2026 Article IV Consultation Report. These claims are incorrect and risk misleading the public regarding the government’s financial management,” he said.

According to him, “For the avoidance of doubt, the Federal Government does not operate a ‘shadow budget’ or expend public funds outside the constitutional and statutory framework established for public finance.”

Oyedele explained that under Sections 80 to 83 and 162 of the 1999 Constitution (as amended), public funds can only be withdrawn and spent in accordance with the Constitution and laws enacted by the National Assembly.

He noted that government spending is undertaken through duly enacted Appropriation Acts, Supplementary Appropriation Acts and other statutory authorities approved by the National Assembly, while multi-year capital projects are implemented under existing laws that permit capital rollovers.

“It is inaccurate to suggest that trillions of naira have been secretly spent outside legislative approval. Such allegations should have identified the specific projects purportedly executed without appropriation or legal authority and present credible evidence in support of the claim,” the minister stated.

Oyedele further clarified that several categories of government expenditure, including statutory transfers, first-line charges, debt service obligations, interventions for national security and infrastructure, and allocations to agencies established by law, are authorised under various Acts of the National Assembly.

“These expenditures are neither secret nor illegal. They are established by law, disclosed in various fiscal reports, and subject to applicable oversight, audit and accountability mechanisms,” he said.

The minister added that differences between Nigeria’s budget presentation and international fiscal reporting standards should not be interpreted as evidence of unlawful spending.

He also rejected suggestions that the reported amount translated into a higher fiscal deficit. “It is equally incorrect to suggest that the reported amount represents an increase in budget deficit.

A fiscal deficit is determined by the relationship between total government revenues and total government expenditures.

“Whether a capital project is financed through annual appropriations, supplementary appropriations, statutory transfers, approved intervention mechanisms, or other lawful financing arrangements does not, by itself, increase the fiscal deficit,” he explained.

According to Oyedele, the IMF’s observations relate mainly to “the comprehensiveness, timing and presentation of fiscal reporting rather than the legality of expenditure.”

He noted that the Tinubu administration was already taking steps to harmonise Nigeria’s budgeting process, recalling that President Bola Tinubu had requested the National Assembly during the presentation of the 2026 Appropriation Bill to end the practice of multiple and overlapping budgets in favour of a single, unified budget framework.

The minister maintained that the administration remained committed to prudent fiscal management, transparency and accountability, adding that reforms in revenue administration, treasury management, budget credibility and digitalisation of government financial processes had received recognition from the IMF, other multilateral institutions, international credit rating agencies and investors.

“Public debate is both welcome and essential in a democratic society. However, it should be based on facts and an accurate understanding of Nigeria’s constitutional and fiscal framework. Mischaracterising technical observations as evidence of unlawful expenditure neither advances informed public discourse nor strengthens democratic accountability,” Oyedele added.a

He reaffirmed the Federal Government’s commitment to transparency in the management of public resources and pledged continued collaboration with the National Assembly, oversight institutions, development partners and Nigerians to strengthen fiscal governance in line with international best practices.

 

 

 

 


Kindly share this post
Continue Reading

E-Financial

Tokenization, Blockchain Technology will Transform Financial Institutions – IMF

Published

on

Kindly share this post

International Monetary Fund (IMF) has projected that tokenization and blockchain technology will fundamentally transform global financial market infrastructure (FMI), but insisted that regulated financial institutions will remain indispensable despite increasing automation of financial transactions.

Tokenization, Blockchain Technology will Transform Financial Institutions – IMF

The position is contained in a new IMF working paper titled “The Evolution of Financial Market Infrastructures in a Tokenized Economy: Exploring Blockchain Implementation Options for Issuance, Central Clearing, Settlement, and Reporting,” prepared by Yaiza Cabedo, Tommaso Mancini-Griffoli, Fabian Schär and Nicolas Zhang.

According to the report, tokenization represents the most significant technological advancement in financial market infrastructure since the transition from paper-based securities to electronic records, with the potential to streamline trading, settlement and post-trade operations across global financial markets.

However, the IMF cautioned that while blockchain technology and smart contracts can automate several operational processes, they cannot replace the governance, legal accountability and risk management functions performed by regulated financial institutions.

“Tokenization has the potential to reshape Financial Market Infrastructures more profoundly than any technological shift since securities dematerialization,” the report stated.

The IMF explained that distributed ledger technology (DLT) and programmable smart contracts can automate critical market activities, including record-keeping, transaction reconciliation, delivery-versus-payment settlements and collateral management, thereby reducing operational costs, settlement risks and processing delays.

While acknowledging the efficiency gains associated with tokenization, the IMF warned that the technology introduces new risks that policymakers and regulators must address.

Among the challenges identified are vulnerabilities in smart contracts, governance concentration within blockchain networks, reliance on external data providers known as “oracles,” privacy concerns, cybersecurity threats and fragmentation across different blockchain ecosystems.

Financial technology experts say the IMF’s position reflects growing consensus among regulators that blockchain should be viewed as an enabler rather than a replacement for traditional financial institutions.

Tokenization is the process of converting sensitive information or physical assets into secure, randomized digital identifiers called tokens.

On the other hand, Blockchain is a decentralized, distributed digital ledger that securely stores data across a network of computers.

Instead of relying on a central authority like a bank, network participants use consensus mechanisms to verify transactions.

Data is grouped into cryptographically secured “blocks” and chronologically linked into an unalterable chain


Kindly share this post
Continue Reading

Trending