E-Business
Symantec Uncovers Plot to Attack the Internet of Things
Symantec has discovered Linux.Darlloz as a new worm engineered to attack the Internet of Things, so-called uniquely identifiable objects and their virtual representations in an Internet-like structure.
Experts have therefore warned companies and firms to take precaution because the virus is capable of attacking PCs, adding that it is targeted at the growing range of internet-connected small Linux-based devices such as home routers, set-top boxes and security cameras.
Symantec Corporation is an American computer security, backup and availability solutions Software Corporation who discovered Linux.Darlloz, and says that it “appears to be engineered to target the ‘Internet of things.'”
It exploits an old PHP vulnerability to propagate, although Symantec has not yet found it in the wild. “The attacker,” said Kaoru Hayashi in a company blog, “recently created the worm based on the Proof of Concept (PoC) code released in late Oct 2013.”
According the report by Infosecurity, this is not (yet) an actual threat to the Internet of Things. Hayashi note, “We have also verified that the attacker already hosts some variants for other architectures including ARM, PPC, MIPS and MIPSEL…. The attacker is apparently trying to maximize the infection opportunity by expanding coverage to any devices running on Linux. However, we have not confirmed attacks against non-PC devices yet.”
Davi Ottenheimer, president of flyingpenguin and EMC senior director of trust, picks up on this. “In other words, the only known attacks are on PCs,” he blogged yesterday.
“Other devices are just speculation. Given the Symantec report details, it seems quite clear the attacker is Not Targeting Hidden Devices.”
Nevertheless, Linux.Darlloz highlights the coming problems. It uses an old vulnerability long since patched; but ‘things’ are not easily updated.
“This particular threat is not a concern from an Internet of Things perspective,” PandaLabs’ technical director Luis Corrons told Infosecurity; “however it should be a heads up. We are talking about millions of devices that are usually untouched once installed: their default password is never changed, their operating system is never updated – which leads,” he added, “to millions of devices available to be hacked.
“Users,” he stressed, “have to be aware of this. Most, for example, don’t realize that IP cameras are really easy to hack; and the same goes for every device with network capabilities. People think that this happens in personal computers and could also happen every leap year in mobile devices, while the truth is that every network connected device is at risk: from our computer to our smart TV.”
David Harley, ESET senior research fellow, agrees that this is more of a warning for the future than a threat today. He notes that the attacker seems to be testing versions for other architectures, and comments, “the fact that someone is thinking about distinguishing between targets by architecture does suggest potential for much more targeted attacks in the future, with malware that discriminates not only by e_machine but by function, providing openings for other kinds of malicious activity.
Targeting devices that aren’t PCs and therefore probably don’t have an explicit malware detection mechanism would reduce the likelihood of early detection of device-specific malware. Payloads that would take advantage of device-specific functionality would require significant research and development,” he told Infosecurity, “but who, a few years ago, would have given much thought to the likelihood of malware targeting uranium enrichment centrifuges?”
The problem for the future, he says, is that things in the Internet of Things are not likely to attract much security software. “I guess we can only hope that the makers of such devices will devote more thought to building in sound security and update mechanisms for internet-connected devices. And maybe talking to security specialists about the potential intrusive or disruptive attacks against such devices in the design and planning stages.”
National Information Technology Development Agency (NITDA) and the National Identity Management Commission (NIMC) have announced a collaboration on National Public Key Infrastructure (PKI) and Digital Public Infrastructure (DPI) to enhance synergy between digital identity, payment ecosystems and secure seamless data exchange capabilities for Nigeria.
l-r: Kashifu Inuwa, Director General of NITDA, and Bisoye Coker-Odusote, Director General of NIMC, during the meeting at the NIMC headquarters in Abuja..
NITDA, which made the announcement on its X handle, said that the collaboration was to further strengthen Nigeria’s digital economy in line with President Bola Tinubu’s Renewed Hope Agenda,
During the meeting, Kashifu Inuwa, director general of NITDA, and Bisoye Coker-Odusote, director general of NIMC, with some management staff of both organisations, discussed various initiatives, which include building DPI stacks for a secured and seamless data exchange and forming partnerships to transform the national identity system.
This collaboration also aims to harness the potential of the innovative ecosystem and emphasise the use of public-key infrastructure (PKI) to drive digital transformation in Nigeria.
To ensure a smooth implementation, a 12-man committee was set up.
This committee will play a crucial role in kickstarting and harmonising the initiatives and is expected to deliver a comprehensive implementation report within the next 4 weeks.
Noble Ajuonu, head, Sydani Technologies Ltd., has urged the Federal Government to harmonise National Identification Number (NIN) and Bank Verification Number (BVN) to tackle crimes and insecurity in the country.
Ajuonu made the call at a media roundtable, organised by Sydani Group in Abuja.
The News Agency of Nigeria (NAN) reports that the roundtable focuses on driving sustainability through a comprehensive analysis of Nigeria’s key development areas.
Ajuonu said that Nigeria could overcome its security challenges and pave the way for a safer, more secure future for all Nigerians by embracing technology and implementing practical solutions,
“We need to harmonise data, prioritise seamless integration of databases like NIN, BVN, and security agency records, establish clear protocols for data sharing and access, with robust safeguards against misuse,’’ expert said.
According to him, the unified data pool will empower intelligence gathering and targeted operations.
He also called for investments in smart surveillance, intelligent video analytics software, training of personnel in data analysis, interpretation of data in real-time to combat crimes.
“There is need to implement a legal framework for call interception in criminal investigations, with strict oversight to prevent abuse, encourage community cohesion, training of tech savvy security personnel with tech-enabled tools.’’
Ajuonu also urged the government to address infrastructure deficit in technology, saying that technology was all encompassing to address insecurity.
“According to the National Identity Management Commission (NIMC), as of December 2023, only 104.2 million Nigerians had been enrolled for the National Identity Number (NIN).’’
Ajuonu added that over 122.2 million citizens left uncaptured for NIN were people in rural areas where enrolment centres, digital services were limited.
“Most crimes are being perpetuated from rural communities and this lack of comprehensive identification creates a gap where elements not captured in the national database can constitute public nuisance, crimes.
“There is the inadequacy in the integration of NIN, BVN and Voters Identification Number (VIN).
“Advanced call interception and analysis tools, used successfully in other countries, could provide invaluable insights into criminal networks and operations but infrastructure is lacking,’’ he said.
Also, Mr Godfrey Petgrave, the Agricultural Expert, Sydani Group, called for empowerment of smallholder farmers with access to finance and training to enhance productivity.
According to Petgrave, Nigeria requires policy reform and institutional strengthening to improve agricultural practices and embrace digital agriculture solutions to address food insecurity.
Mr Akolade Jimoh, another expert of the group on health, advocated for expanded community-based health insurance programmes for rural and underserved areas.
Jimoh added that the country needed to encourage Public Private Partnership to revolutionise products design and quality improvement on health services.
Konga, Nigeria’s leading composite e-commerce group, is thrilled to announce the launch of amazing deals at its Infinix Brand Week. Infinix, a leading global smartphone brand known for its innovative products and cutting-edge technology promises exclusive discounts and special offers on select smartphones, marking an exciting milestone in the realm of online shopping.
Shoppers can expect nothing short of extraordinary deals on a wide range of Infinix products, all available exclusively on the Konga online platform. With discounts of up to 30% off, this partnership between Konga and Infinix aims to redefine the shopping experience for tech enthusiasts across Nigeria.
Konga Brand Week has become synonymous with excitement and unbeatable deals, and this year’s edition is no exception. In addition to exclusive discounts on Infinix smartphones, shoppers can explore a diverse array of products across various categories, including electronics, fashion, home essentials, and more.
“At Konga, we are dedicated to providing our customers with the best shopping experience possible,” said Rita Ohaedoghasi, VP Marketing at Konga. “The Infinix Week during Konga Brand Week allows us to continue delivering on that promise by offering incredible discounts and special offers on some of the most sought-after smartphones in the market.”
To stay updated on the latest developments and exclusive deals during Konga Brand Week, shoppers are encouraged to connect with Konga across all platforms, including social media and the Konga website. Don’t miss out on this opportunity to score big savings and elevate your tech game with Infinix and Konga.
NELFUND Says UTME, NIN, BVN Mandatory for Student Loans
Sun International Finalizes $14.4M Exit from Nigeria, Sells Interests to RFC
Sam Darwish, US-Nigerian Businessman Suffers $6m Loss as IHS Shares Plunge
NITDA, NIMC Partner for Seamless Data Exchange Capabilities
FG Plans EO to Criminalise Fiber Cable Damage Costing Telcos Billions
See Full List of Fake Loan Apps Blacklisted By CBN
FIRS Files Tax Evasion Charges against Binance
IFC Invests in New 4DX Ventures Fund to Support Tech Startups in Africa
AXA Mansard Empowers Female SMEs with Financial, Digital Skills
Moniepoint Study Reveals How Strong Cultural Bonds, High Levels of Trust Drives Nigerian Family Businesses
News3 days agoQNET Raises Alarm over Fraudulent Use of Foundation’s Name in Nigeria
News3 days agoSoftTalk Messenger Introduces Chat and Make Calls without Sharing your Phone Number
Telecom3 days agoStarlink Users in SA to be Cut Off April 30
Telecom3 days agoNCC Advises Subscribers to Opt for Strong Passwords to Beat Hackers
Broadcasting3 days agoCanal+ Offer for MultiChoice Gains Shareholders’ Support
E-Financial3 days agoFidelity Bank Reports N124.3Bn Pre-Tax Profit for 2023
Telecom3 days ago9mobile Clinches 2 Trophies at the Prestigious SABRE Awards 2024
Telecom2 days agoImperative of Upholding Nigeria’s Telecoms Lifeline