Connect with us

E-Business

SophosLabs Research Warns “Designer Cyber Threats on the Rise”

Published

on

sophos kash.jpg
Kindly share this post

Sophos, a global leader in network and endpoint security, today revealed SophosLabs research that indicates a growing trend among cybercriminals to target and even filter out specific countries when designing ransomware and other malicious cyberattacks.

The research includes information from millions of endpoints worldwide and is analyzed by the team at SophosLabs.

To lure more victims with their attacks, cybercriminals are now crafting customized spam to carry threats using regional vernacular, brands and payment methods for better cultural compatibility, according to Sophos.

Ransomware cleverly disguised as authentic email notifications, complete with counterfeit local logos, is more believable, highly clickable and therefore more financially rewarding to the criminal.

To be as effective as possible, these scam emails now impersonate local postal companies, tax and law enforcement agencies and utility firms, including phony shipping notices, refunds, speeding tickets and electricity bills.

SophosLabs has seen a rise in spam where the grammar is more often properly written and perfectly punctuated.

“You have to look harder to spot fake emails from real ones,” said Chester Wisniewski, senior security advisor at Sophos. “Being aware of the tactics used in your region is becoming an important aspect of security.”

Researchers also saw historic trends of different ransomware strains that targeted specific locations. Versions of CryptoWall predominantly hit victims in the U.S., U.K., Canada, Australia, Germany and France, TorrentLocker attacked primarily the U.K., Italy, Australia and Spain and TeslaCrypt honed in on the U.K., U.S., Canada, Singapore and Thailand.

The analysis also shows Threat Exposure Rates[1] (TER) for countries during the first three months of 2016. Although Western economies are more highly targeted, they typically have a lower TER. Nations ranked with the lowest TER include France at 5.2 percent, Canada at 4.6 percent, Australia at 4.1 percent, the U.S. at 3 percent, and the U.K. at 2.8 percent..

The African countries were at an average level, Tanzania – 11.1 percent Kenya – 11.5 percent South Africa – 11.6 percent Egypt – 12.4 percent Angola – 15.7 percent Nigeria – 15.7 percent Tunisia – 16.4 percent Morocco – 16.6 percent Uganda – 24.9 percent Ghana – 25.5 percent Mozambique – 28.3 percent Algeria – 30.7 percent Zambia – 35.5 percent and Malawi – 39.4 percent.

Algeria at 30.7 percent, Bolivia at 20.3 percent, Pakistan at 19.9 percent, China at 18.5 percent and India at 16.9 percent are among countries with the highest percentage of endpoints exposed to a malware attack

“Even money laundering is localized to be more lucrative. Credit card processing can be risky for criminals, so they started using anonymous Internet payment methods to extort money from ransomware victims,” said Wisniewski. “We have seen cybercrooks using local online cash-equivalent cards and purchasing locations, such as prepaid Green Dot MoneyPak cards from Walgreens in the U.S. and Ukash, which is now paysafecard, from various retail outlets in the U.K.”

Tweet This: “Designer” cyber threats on the rise with localized logos, language and payment methods, according to Sophos.

The concept of filtering out specific countries has also emerged as a trend.

“Cybercriminals are programming attacks to avoid certain countries or keyboards with a particular language,” said Wisniewski. “This could be happening for many reasons. Maybe the crooks don’t want attacks anywhere near their launch point to better avoid detection. It could be national pride or perhaps there’s a conspiratorial undertone to create suspicion about a country by omitting it from an attack.”

Banking is an example of how cybercriminals are using location-based malware to be more prosperous. Sophos research reveals historically how Trojans and malware used to infiltrate banks and financial institutions converges on specific regions:

Brazilian banker Trojans and variants pinpoint Brazil
Dridex is predominant in the U.S. and Germany
Trustezeb is most prevalent in German speaking counties
Yebot is popular in Hong Kong and Japan
Zbot is wider spread, but mostly in the U.S., U.K., Canada, Germany, Australia, Italy, Spain and Japan

“There is an entire cottage industry of uniquely-crafted Trojans just targeting banks in Brazil,” said Wisniewski.

With cybercriminals having a deliberate hand in creating threats that look authentic and are specifically targeted, it is more difficult to recognize malicious spam.

Home computer users are often a target of these attacks and should protect their systems from sophisticated malware threats. Free enterprise-grade security software that can detect threats and protect both Mac and PC for the home user is available from Sophos Home.

This research and analysis is from SophosLabs, a network of security experts across the world who detect and track all types of Internet breaches 24/7/365 worldwide, including computer viruses, advanced malware and Trojans, spam, web threats, hack attacks and more.

SophosLabs receives and investigates millions of emails, URLs, files and other data points daily and leverages its extensive expertise within the group to develop new definitions that detect entire classes of threats and new variants.

With facilities strategically located in Australia, Hungary, U.K. and Canada, SophosLabs experts also monitor and determine threat trends and maintain malware, spam and web threat dashboards in real time.

More than 100 million users in 150 countries rely on Sophos’ complete security solutions as the best protection against complex threats and data loss.

Simple to deploy, manage, and use, Sophos’ award-winning encryption, endpoint security, web, email, mobile and network security solutions are backed by SophosLabs – a global network of threat intelligence centers.

Sophos is headquartered in Oxford, U.K., and is publicly traded on the London Stock Exchange under the symbol “SOPH.” More information is available at www.sophos.com.

 
#

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Firm Shares Tips for Safer Remote Working

Published

on

Kindly share this post

It is holiday season in many parts of the world. These days though, going on holiday does not always mean turning your back on office life – hybrid work cuts both ways.

Today’s widespread connectivity—available at airports, train stations, restaurants, hotels, and most indoor public spaces—makes staying connected easier than ever, with free Wi-Fi in many locations and reliable 4G or 5G coverage elsewhere, helping to facilitate a seamless blend of work and leisure even while on holiday.

This increase in connectivity among travellers has not gone unnoticed by cyber criminals. Kaspersky experts analysed nearly 25,000 free Wi-Fi spots in Paris ahead of the Summer Olympic Games and Paralympic Games. The analysis revealed that almost 25% of these networks had weak or no encryption, making users vulnerable to personal and banking data theft.

Travellers often have their guard down. The unfamiliar surroundings of a new location or a different language can throw up a useful smokescreen for a cyberattack, meaning additional care needs to be taken when logging on. Fortunately, a few smart tools and habits can help you stay protected while enjoying the flexibility of remote work.

Use a VPN for secure connections

A VPN is one of the most effective ways to safeguard users’ online activity, especially when working from unfamiliar locations. By encrypting Internet traffic, a VPN ensures that hackers can’t intercept sensitive data like login credentials or financial details. This is particularly important when accessing work emails or company files on public Wi-Fi, where cybercriminals often lurk.

Switch to an eSIM for reliable, secure mobile data

Another useful digital tool that provides a seamless way to stay connected using local mobile networks with no physical SIM card required is the eSIM. This is a game-changer for international travellers who want to avoid sky-high roaming charges or the hassle of hunting down temporary SIM cards in foreign countries.

With an eSIM, a user can download a local data plan before you even arrive at your destination, ensuring instant connectivity the moment you land. This eliminates the need to rely on unsecured Wi-Fi hotspots, significantly reducing your exposure to cyber threats.

Plus, many eSIM providers allow you to manage multiple profiles on a single device, making it easy to switch between work and personal data plans without juggling multiple phones.

Services like Kaspersky eSIM Store enables users to purchase and activate data plans in advance, track usage and top up as needed, all from a single app.

Enable two-factor authentication (2FA)

When travelling, people often leave devices unattended. To protect against unwanted people logging in, travellers should ensure two-factor authentication (2FA) is enabled on all critical accounts and that passwords are used on all devices.

Final tips for a secure workation

Even with a VPN, eSIM and 2FA in place, your devices still need strong defenses against malware, phishing scams and ransomware. Cybercriminals often target remote workers who may let their guard down while travelling, making real-time protection essential.

Modern antivirus software does more than just scan for viruses, it actively blocks malicious downloads, warns you about phishing attempts and even secures your passwords and financial data.

For the most robust security, consider a solution like Kaspersky Premium, which combines antivirus protection, a VPN and password management into a single, easy-to-use package.

By combining a VPN, eSIM and strong antivirus, you can work from anywhere with confidence, whether you’re sending emails from a poolside or joining a video call from a festival tent.

 


Kindly share this post
Continue Reading

E-Business

Zequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector

Published

on

Kindly share this post

Mr Adeoye Oludamilola, managing director, Zequence Digital, a digital agency,  has said strong enforcement of Intellectual Property (IP) laws , protection of Nigeria’s software industry against piracy will encourage innovation and investment.

Zequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector

Adeoye told reporters lately in Lagos that software piracy and the unauthorised use of proprietary technology are widespread in the country.

According to report Intellectual Property (IP) laws in software refers to the legal rights that protect the creations of the mind used in software development.

These rights, which include copyrights, patents, trade secrets, and trademarks, grant developers exclusive control over their software and related assets, preventing unauthorised use or reproduction.

Adeoye said that many startups do not protect their innovations, due to a lack of knowledge and the cumbersome legal processes involved.

“IP registration and litigation are expensive and time-consuming, which further discourages developers from protecting their work,” Adeoye said.

He added that the lack of awareness among developers about their IP rights contributed to the problem.

To address these challenges, Adeoye stressed the need for the formation of an IP Protection Consortium, comprising tech firms, legal experts, and regulators, to advocate for stronger IP enforcement.

He also suggested collaborating with legal tech startups to create simplified platforms for fast-tracked IP registration.

The managing director further called for joint initiatives between legal bodies and tech communities to launch IP rights education campaigns.

This, he said, would equip developers with the knowledge they needed to protect their innovations and grow their businesses.

Adeoye emphasised the need for the government and stakeholders to create an ecosystem for development and inclusivity by proactively engaging with regulators.

According to him, this will help ensure that policies are created with the input of concerned agencies and industry experts.

 

 


Kindly share this post
Continue Reading

E-Business

PalmPay Partners AXA Mansard Health to Make Digital Insurance Accessible, Affordable

Published

on

L-r: Oluwatoyin Alao, Head, Emerging Customers & Project Management, AXA Mansard Insurance Plc; Tope Adeniyi, CEO AXA Mansard Health Limited; Habib Kowontan, Head of Wealth Product, PalmPay; Jumoke Odunlami, Chief Distribution Officer, AXA Mansard Insurance Plc; Olorunfemi Hanson, Head of Marketing & Communications, PalmPay.
Kindly share this post

PalmPay, a leading fintech platform and full-stack digital neobank for emerging markets, has partnered with Nigeria’s biggest Health Insurance Company, AXA Mansard Health a member of the globally trusted AXA Group, to provide millions of Nigerians with affordable, accessible digital health insurance.

This strategic partnership enables PalmPay users to seamlessly access a range of health insurance packages from AXA Mansard directly within the PalmPay app. With plans starting as low as N500 per month, users can now choose from flexible insurance options tailored to fit their everyday needs.

The plans are designed to meet a wide range of needs; for example, the AXA Digital Health plan offers access to telemedicine consultations with doctors, N5,000 worth of medications, and up to N40,000 in surgical coverage. Users can also opt for the AXA Mansard MicroHealth plan at N1,000 per month, which provides unlimited diagnostic tests and funeral benefits. Additionally, the AXA Mansard Accident plan, available for N500 monthly, offers comprehensive death cover for both accidental and non-accidental cases.

Speaking on the partnership, Habib Kowontan, Head of Wealth Product at PalmPay, said: “Insurance is a key pillar of financial security, yet millions of Nigerians remain underserved. Our partnership with AXA Mansard Health breaks down long-standing barriers by placing reliable and affordable insurance solutions right at our users’ fingertips.”

In her remarks, Jumoke Odunlami, Chief Distribution Officer, AXA Mansard Insurance said that the partnership with Palmpay presents the AXA with another opportunity to improve health and productivity of Nigerians. “Through partnerships like this, we are covering over 1.8 million Nigerians and ensuring that healthcare is accessible, available and affordable.

“So we are excited about joining forces with a brand like Palmpay to compliment the range of financial possibilities they offer their customers with health plans. It fits well with our mission and our purpose of acting for human progress by protecting what matters, and we are looking forward to doing even more with Palmpay”, she explained.

This partnership reflects PalmPay’s broader mission to create a more inclusive digital financial ecosystem, one that empowers users to not only manage their money efficiently, but also secure their future.

This partnership reflects PalmPay’s broader mission to create a more inclusive digital financial ecosystem, one that empowers users to not only manage their money efficiently, but also secure their future.


Kindly share this post
Continue Reading

Trending