NewsExpress advert FCMB banner Fidelity bank banner NewsExpress advert
Global hunt for Nigerian cyber criminal

By News Express on 16/08/2017

Share on facebook Yahoo mail icon Gmail icon Share on Google+

Views: 879

•A cyber criminal at work.
•A cyber criminal at work.

A Nigerian working alone around Abuja has stirred a global hunt as he orchestrated numerous malware infection campaigns targeting more than 4,000 organisations globally over the past four months, a cyber security company claimed.

www.Securityweek.com quoting Check Point security researchers said the attacks targeted various companies in industries such as oil & gas, manufacturing, banking, and construction, in an attempt to steal data and commit fraud.

Many of the companies are leading international names and some have had their defenses breached by the attacks, the security researchers reveal.

According to Check Point, at least a dozen companies confirmed they have been infected during the campaign, including a marine and energy solutions company in Croatia, a transportation company in Abu Dhabi, a mining company in Egypt, a construction company in Dubai, an oil & gas firm in Kuwait, and a construction organization in Germany.

Despite the large scale campaign, behind it is not an expert gang of cybercriminals or a nation state actor, but “a relatively unskilled man in his mid-20s, operating from a location near the capital of Nigeria,” Check Point discovered.

Working on his own, the Nigerian  uses fraudulent emails seemingly coming from oil and gas giant Saudi Aramco, the world’s second largest daily oil producer. The phishing messages target financial departments within companies in an attempt to trick employees into revealing company bank details or into opening a malware-infected attachment.

The malware used in these attacks includes NetWire, a remote access Trojan that provides its operator with full control over infected machines, and Hawkeye, a software for logging key strokes (malware already associated with Nigerian cybercriminals). The attacks eventually resulted in a total of 14 successful infections. The cybercriminal ended up earning thousands of dollars in the process, the researchers said.

Despite showing a low level of cyber-skills, using crude and unsophisticated fraudulent emails, with almost no research or social engineering involved in creating them, the attacker was successful in his attempts.

The attacker used generic email titles, phrased as “Dear Sir/Ms,” sent the same email to numerous targets, “all in blind carbon copy, urging victims to send back banking details, perhaps for future scams.” He sent the emails from email addresses sale.cement_till_tw@yahoo.com, and cciticarinternational@yahoo.com.

The fraudster used old, generic and readily available online malware, as well as freeware to ‘scrape’ email addresses from corporate websites and used them as targets for his campaigns.

“The fact that the campaign was still effective, despite using only basic cyber-criminal techniques, highlights just how much of a problem these business email compromise (BEC) attacks have become,” Check Point said.

Since uncovering the campaign and establishing its origins, Check Point’s research team has notified law enforcement authorities in Nigeria and internationally and shared its findings with them.

Checkpoint said the Nigerian in his 20s operates social media accounts, where you he uses the motto: ‘get rich or die trying’.

His attack campaign uses fraudulent emails which appear to originate from oil and gas giant Saudi Aramco, the world’s second largest daily oil producer, targeting financial staff within companies to trick them into revealing company bank details, or open the email’s malware-infected attachment.

Last year, the FBI revealed that losses caused by BEC scams exceeded $3.1 billion. Victims are estimated to lose between $25,000 and $75,000 on average, per attack. However, it’s not only financial losses that victims should be concerned about, but also the fact that “the malware used by the criminal to infect organisations gives remote control over infected machines, and can perform keylogging functions. This enables harvesting of a variety of information from infected machines, such as details on the companies’ operations, assets and intellectual property.” Such details could be worth much more than the thousands of dollars obtained by fraud, Check Point says.

Another alarming aspect was that some of the targets are energy and infrastructure companies, which the unsophisticated cybercriminal was able to easily breach. Not only was the attacker able to compromise the networks of several large organisations, but he also managed to distribute his malware globally and remain under the radar for a long while.

“This highlights the need for all organisations to improve their security to protect against phishing and business email compromise scams, and to educate their employees to be cautious about opening emails, even from companies or individuals that they recognise,” Check Point said. (NAN)


 

Source News Express

Posted 16/08/2017 1:13:42 PM

 

Share on facebook Yahoo mail icon Gmail icon Share on Google+


 

CLASSIFIED ADS

REVEALED: 3 natural ways to get stronger erections, last 25minutes on bed, and increase manhood size without using drugs. Also, Natural Prostrate Enlargement Remedy.. Get In HERE...

 

You may also like...
Customs in Sokoto generates N123m in Aug

Mastercard extends deadline for applications for fintech and...

Stakeholders oppose amendment to NIMASA Act seeking 1pct...

Asari Dokubo, Uwazuruike join forces to actualise Biafra...

Weatherman predicts cloudy Saturday, thunderstorms

PDP member killed during PVC exercise in Lagos...

“MONEY’S NOT THE PROBLEM”: Obi splashes the cash,...

300 girls bag UNICEF scholarship in Gombe

Emir Sanusi to speak at AUN Graduation on...

Police arrest 46 suspected cultists in Lagos

Amnesty boss makes case for repentant militants •Tasks...

WHO develops guide to early cancer detection

 

Latest News BREAKING NEWS: Senate calls for Buhari’s impeachment APC shifts congresses, National Convention Big Brother Naija sponsor, Payporte, in N23m debt mess, begs court to dismiss winding up suit Democracy under threat: Southern, Middle Belt leaders IGP Ibrahim Idris disrespecting me and the Senate — Saraki Shell profits jump as oil prices soar Troops nab militias in Nasarawa, recover arms Abnormal herdsmen behind Benue killings — Presidency Umahi orders arrest of policeman over alleged killing of Okada rider INVESTIGATION: Former DG NEMA, Sidi Ali, maintained 20 bank accounts — Reps Revenue discrepancies: FAAC meeting fails to hold again 2019: Senator Abe joins Rivers guber race

 

Most Read Nigerian female sex addict opens up, says ‘I like it with both men and women’ (340,152 views) NUDE PHOTO OF OMOTOLA JALADE-EKEINDE surfaces online (335,253 views) Shameless Genevieve Nnaji exposes breasts in public (268,211 views) Finally named: The full list of friends of Nigerian female sex addict who prowled Facebook (220,559 views) Igbo scholar disgraces Femi Fani-Kayode •Demolishes claims on Igbo/Yoruba history with facts and figures (202,352 views) OLUMBA OLUMBA OBU (the one who called himself God) IS DEAD (198,444 views) Breaking News: POPULAR REVEREND CONVERTS TO ISLAM in Kaduna (Nigeria) (173,170 views) OBJ’s son reported dead in Lagos plane crash •Names of more victims emerge (155,527 views) THE FINAL DISGRACE: Igbo scholar unleashes more facts about Igbo/Yoruba history, finishes off Femi Fani-Kayode with second article (147,331 views) My wasted years in Olumba Olumba Obu’s Evil Brotherhood (139,327 views) Lagos plane crash: Journalist releases victims’ names (137,121 views) Gunmen kill ASP, 2 other police officers in vain bid to kidnap Rivers PDP chieftain (129,789 views)

 

Categories Advertorials (3) African Press Organisation (81) Art & Literature (36) Business & Economy (3,077) Business Verdict (40) Columnists (839) Complaints & Requests (94) Enterprise & Opportunities (207) Entertainment (485) Features (570) Global Business Monitor (267) International (1,929) Interview (149) Live Commentary (28) Love Matters (116) News (34,771) Opinion (917) Pidgin (10) Politics (4,823) Religion (724) Sports (1,487) Stock Watch (28) AMA & Al Jazeera Global Update

 

Firstmobile banner

 

 

NEWS EXPRESS TV

Boko Haram commanders surrender

 

APO Group Partner

 

 

CLASSIFIED ADS

REVEALED: 3 natural ways to get stronger erections, last 25minutes on bed, and increase manhood size without using drugs. Also, Natural Prostrate Enlargement Remedy.. Get In HERE...

GOCOP Accredited Member

GOCOP Accredited member

 

 

Africa Media Agency and Al Jazeera

Advertisement