Fidelity bank banner Bayelsa State banner
Global hunt for Nigerian cyber criminal

By News Express on 16/08/2017

Share on facebook Yahoo mail icon Gmail icon Share on Google+

Views: 978

•A cyber criminal at work.
•A cyber criminal at work.

A Nigerian working alone around Abuja has stirred a global hunt as he orchestrated numerous malware infection campaigns targeting more than 4,000 organisations globally over the past four months, a cyber security company claimed.

www.Securityweek.com quoting Check Point security researchers said the attacks targeted various companies in industries such as oil & gas, manufacturing, banking, and construction, in an attempt to steal data and commit fraud.

Many of the companies are leading international names and some have had their defenses breached by the attacks, the security researchers reveal.

According to Check Point, at least a dozen companies confirmed they have been infected during the campaign, including a marine and energy solutions company in Croatia, a transportation company in Abu Dhabi, a mining company in Egypt, a construction company in Dubai, an oil & gas firm in Kuwait, and a construction organization in Germany.

Despite the large scale campaign, behind it is not an expert gang of cybercriminals or a nation state actor, but “a relatively unskilled man in his mid-20s, operating from a location near the capital of Nigeria,” Check Point discovered.

Working on his own, the Nigerian  uses fraudulent emails seemingly coming from oil and gas giant Saudi Aramco, the world’s second largest daily oil producer. The phishing messages target financial departments within companies in an attempt to trick employees into revealing company bank details or into opening a malware-infected attachment.

The malware used in these attacks includes NetWire, a remote access Trojan that provides its operator with full control over infected machines, and Hawkeye, a software for logging key strokes (malware already associated with Nigerian cybercriminals). The attacks eventually resulted in a total of 14 successful infections. The cybercriminal ended up earning thousands of dollars in the process, the researchers said.

Despite showing a low level of cyber-skills, using crude and unsophisticated fraudulent emails, with almost no research or social engineering involved in creating them, the attacker was successful in his attempts.

The attacker used generic email titles, phrased as “Dear Sir/Ms,” sent the same email to numerous targets, “all in blind carbon copy, urging victims to send back banking details, perhaps for future scams.” He sent the emails from email addresses sale.cement_till_tw@yahoo.com, and cciticarinternational@yahoo.com.

The fraudster used old, generic and readily available online malware, as well as freeware to ‘scrape’ email addresses from corporate websites and used them as targets for his campaigns.

“The fact that the campaign was still effective, despite using only basic cyber-criminal techniques, highlights just how much of a problem these business email compromise (BEC) attacks have become,” Check Point said.

Since uncovering the campaign and establishing its origins, Check Point’s research team has notified law enforcement authorities in Nigeria and internationally and shared its findings with them.

Checkpoint said the Nigerian in his 20s operates social media accounts, where you he uses the motto: ‘get rich or die trying’.

His attack campaign uses fraudulent emails which appear to originate from oil and gas giant Saudi Aramco, the world’s second largest daily oil producer, targeting financial staff within companies to trick them into revealing company bank details, or open the email’s malware-infected attachment.

Last year, the FBI revealed that losses caused by BEC scams exceeded $3.1 billion. Victims are estimated to lose between $25,000 and $75,000 on average, per attack. However, it’s not only financial losses that victims should be concerned about, but also the fact that “the malware used by the criminal to infect organisations gives remote control over infected machines, and can perform keylogging functions. This enables harvesting of a variety of information from infected machines, such as details on the companies’ operations, assets and intellectual property.” Such details could be worth much more than the thousands of dollars obtained by fraud, Check Point says.

Another alarming aspect was that some of the targets are energy and infrastructure companies, which the unsophisticated cybercriminal was able to easily breach. Not only was the attacker able to compromise the networks of several large organisations, but he also managed to distribute his malware globally and remain under the radar for a long while.

“This highlights the need for all organisations to improve their security to protect against phishing and business email compromise scams, and to educate their employees to be cautious about opening emails, even from companies or individuals that they recognise,” Check Point said. (NAN)


 

Source News Express

Posted 16/08/2017 1:13:42 PM

 

Share on facebook Yahoo mail icon Gmail icon Share on Google+


 

CLASSIFIED ADS

REVEALED: 3 natural ways to get stronger erections, last 25 minutes on bed, and increase manhood size without using drugs. Also, Natural Prostrate Enlargement Remedy.. Get In HERE...

 

You may also like...
BREAKING NEWS: Fire guts Oba of Lagos’ palace...

Fuel importation to continue despite revival of refineries...

Group asks FG to declare State of Emergency...

Okonjo-Iweala forecasts economic growth in 2013

Man survives after being hit by train in...

FIRST IN HISTORY: All 25,000 candidates fail university...

Rivers Rerun: INEC releases details of how PDP...

Why Nigerian security forces and law enforcement are...

Go all out against Boko Haram now, Int’l...

Fayose faults INEC chairman on electoral violence, blames...

Military unleashes special brigade on Boko Haram

Omisore picks SDP guber form as party opens...

 

Latest News 2019: Atiku shuts down Yola APC a dying party swimming in corruption — Secondus •Promises Tsunami in the weeks ahead It’s payback time for Turaki’s loyalty, says Bauchi State PDP 431 Pharmaceutical shops sealed in Imo How ex-IGP Ibrahim Coomassie ordered my arrest, imprisonment in Kirikiri Prison – Shehu Sani Fire guts main market in Jos, razes 217 shops Ekiti Election: Oshiomhole exceeded expectations in his first national assignment as APC Chairman — Senator Alimikhena Adegboruwa weighs options as Joe Igbokwe eats the humble pie Kano has over 3 million out of school children – Ganduje UK to assist INEC deliver credible, free and fair polls in 2019 We have not suspended issuance of cards — NIMC Police to support Eko Disco on debt recovery

 

Most Read NUDE PHOTO OF OMOTOLA JALADE-EKEINDE surfaces online (363,412 views) Nigerian female sex addict opens up, says ‘I like it with both men and women’ (359,131 views) Shameless Genevieve Nnaji exposes breasts in public (287,537 views) Finally named: The full list of friends of Nigerian female sex addict who prowled Facebook (235,953 views) OLUMBA OLUMBA OBU (the one who called himself God) IS DEAD (215,260 views) Igbo scholar disgraces Femi Fani-Kayode •Demolishes claims on Igbo/Yoruba history with facts and figures (212,947 views) Breaking News: POPULAR REVEREND CONVERTS TO ISLAM in Kaduna (Nigeria) (187,040 views) OBJ’s son reported dead in Lagos plane crash •Names of more victims emerge (168,988 views) THE FINAL DISGRACE: Igbo scholar unleashes more facts about Igbo/Yoruba history, finishes off Femi Fani-Kayode with second article (156,568 views) My wasted years in Olumba Olumba Obu’s Evil Brotherhood (153,281 views) Lagos plane crash: Journalist releases victims’ names (148,057 views) Gunmen kill ASP, 2 other police officers in vain bid to kidnap Rivers PDP chieftain (139,174 views)

 

Categories Advertorials (3) African Press Organisation (81) Art & Literature (52) Business & Economy (3,364) Business Verdict (48) Columnists (890) Complaints & Requests (94) Enterprise & Opportunities (207) Entertainment (516) Features (616) Global Business Monitor (286) International (2,156) Interview (158) Live Commentary (28) Love Matters (127) News (37,333) Opinion (1,024) Pidgin (10) Politics (5,638) Religion (788) Sports (1,612) Stock Watch (33) AMA & Al Jazeera Global Update

 

CBN banner

Firstmobile banner

 

 

NEWS EXPRESS TV

Nigerian detainees send SOS from Osama prison

 

APO Group Partner

 

 

CLASSIFIED ADS

GOCOP Accredited Member

GOCOP Accredited member

 

 

Africa Media Agency and Al Jazeera

Advertisement