Shell Energy Entrepreneurs banner Yudala banner
Global hunt for Nigerian cyber criminal

By News Express on 16/08/2017

Share on facebook Yahoo mail icon Gmail icon

Views: 743

•A cyber criminal at work.
•A cyber criminal at work.

A Nigerian working alone around Abuja has stirred a global hunt as he orchestrated numerous malware infection campaigns targeting more than 4,000 organisations globally over the past four months, a cyber security company claimed.

www.Securityweek.com quoting Check Point security researchers said the attacks targeted various companies in industries such as oil & gas, manufacturing, banking, and construction, in an attempt to steal data and commit fraud.

Many of the companies are leading international names and some have had their defenses breached by the attacks, the security researchers reveal.

According to Check Point, at least a dozen companies confirmed they have been infected during the campaign, including a marine and energy solutions company in Croatia, a transportation company in Abu Dhabi, a mining company in Egypt, a construction company in Dubai, an oil & gas firm in Kuwait, and a construction organization in Germany.

Despite the large scale campaign, behind it is not an expert gang of cybercriminals or a nation state actor, but “a relatively unskilled man in his mid-20s, operating from a location near the capital of Nigeria,” Check Point discovered.

Working on his own, the Nigerian  uses fraudulent emails seemingly coming from oil and gas giant Saudi Aramco, the world’s second largest daily oil producer. The phishing messages target financial departments within companies in an attempt to trick employees into revealing company bank details or into opening a malware-infected attachment.

The malware used in these attacks includes NetWire, a remote access Trojan that provides its operator with full control over infected machines, and Hawkeye, a software for logging key strokes (malware already associated with Nigerian cybercriminals). The attacks eventually resulted in a total of 14 successful infections. The cybercriminal ended up earning thousands of dollars in the process, the researchers said.

Despite showing a low level of cyber-skills, using crude and unsophisticated fraudulent emails, with almost no research or social engineering involved in creating them, the attacker was successful in his attempts.

The attacker used generic email titles, phrased as “Dear Sir/Ms,” sent the same email to numerous targets, “all in blind carbon copy, urging victims to send back banking details, perhaps for future scams.” He sent the emails from email addresses sale.cement_till_tw@yahoo.com, and cciticarinternational@yahoo.com.

The fraudster used old, generic and readily available online malware, as well as freeware to ‘scrape’ email addresses from corporate websites and used them as targets for his campaigns.

“The fact that the campaign was still effective, despite using only basic cyber-criminal techniques, highlights just how much of a problem these business email compromise (BEC) attacks have become,” Check Point said.

Since uncovering the campaign and establishing its origins, Check Point’s research team has notified law enforcement authorities in Nigeria and internationally and shared its findings with them.

Checkpoint said the Nigerian in his 20s operates social media accounts, where you he uses the motto: ‘get rich or die trying’.

His attack campaign uses fraudulent emails which appear to originate from oil and gas giant Saudi Aramco, the world’s second largest daily oil producer, targeting financial staff within companies to trick them into revealing company bank details, or open the email’s malware-infected attachment.

Last year, the FBI revealed that losses caused by BEC scams exceeded $3.1 billion. Victims are estimated to lose between $25,000 and $75,000 on average, per attack. However, it’s not only financial losses that victims should be concerned about, but also the fact that “the malware used by the criminal to infect organisations gives remote control over infected machines, and can perform keylogging functions. This enables harvesting of a variety of information from infected machines, such as details on the companies’ operations, assets and intellectual property.” Such details could be worth much more than the thousands of dollars obtained by fraud, Check Point says.

Another alarming aspect was that some of the targets are energy and infrastructure companies, which the unsophisticated cybercriminal was able to easily breach. Not only was the attacker able to compromise the networks of several large organisations, but he also managed to distribute his malware globally and remain under the radar for a long while.

“This highlights the need for all organisations to improve their security to protect against phishing and business email compromise scams, and to educate their employees to be cautious about opening emails, even from companies or individuals that they recognise,” Check Point said. (NAN)


 

Source News Express

Posted 16/08/2017 1:13:42 PM

 

Share on facebook Yahoo mail icon Gmail icon


 

CLASSIFIED ADS

Loss Off Your Belly Fats, Upper Arm Fat and Body Fats In 2weeks Time.. Click HERE To Start Now!

Let us build the most comprehensive online database of worthy and credible Nigerians from all walks of life. It is worth doing!

 

You may also like...
Boko Haram attacks Air Force helicopter

Court grants DSS’ prayer to detain 400 Boko...

CSNAC to CCB: Give us update on your...

77 Boko Haram terrorists throw in the towel,...

Go and die, Governor El-Rufai tells disappointed office...

No restriction of movement as sanitation exercise holds...

More Niger Delta militants ready to surrender weapons...

Presidential committee to destroy 5,000 illicit weapons in...

Militants disown Reformed Niger Delta Avengers, allege attempt...

Arewa youths' anti-Igbo agenda: Act now to avoid...

Global leaders, partners budget $1.2bn to fight polio...

No more police roadblocks in Bayelsa

 

Latest News Access Bank slammed with N200m suit over unlawful account freeze Herdsmen launch another attack in Adamawa, leave 3 dead 2019: Daura youths to purchase nomination forms for Buhari, Masari Ekiti promotes 18 Vice Principals Handshake across the Niger: Ohanaeze lambasts Presidential Spokesman Femi Adeshina Kaduna teachers’ recruitment: 27,639 shortlisted for oral interview Court affirms SERAP’s right to stop ‘double pay’ for ex-governors, seek recovery of over N40bn Fire razes 50 shops, 30 containers of fish in Kano MOSOP rejects call for an Ogoni General Assembly Trump floats ‘nuclear option’ to end shutdown Ugwuanyi commissions state-constructed 103 Battalion Army Barracks road 14 foreigners killed as gunmen storm Afghan hotel

 

Most Read Nigerian female sex addict opens up, says ‘I like it with both men and women’ (316,137 views) NUDE PHOTO OF OMOTOLA JALADE-EKEINDE surfaces online (306,524 views) Shameless Genevieve Nnaji exposes breasts in public (245,487 views) Finally named: The full list of friends of Nigerian female sex addict who prowled Facebook (201,754 views) Igbo scholar disgraces Femi Fani-Kayode •Demolishes claims on Igbo/Yoruba history with facts and figures (190,359 views) OLUMBA OLUMBA OBU (the one who called himself God) IS DEAD (179,781 views) Breaking News: POPULAR REVEREND CONVERTS TO ISLAM in Kaduna (Nigeria) (155,911 views) OBJ’s son reported dead in Lagos plane crash •Names of more victims emerge (140,246 views) THE FINAL DISGRACE: Igbo scholar unleashes more facts about Igbo/Yoruba history, finishes off Femi Fani-Kayode with second article (136,270 views) Lagos plane crash: Journalist releases victims’ names (124,739 views) My wasted years in Olumba Olumba Obu’s Evil Brotherhood (122,071 views) Gunmen kill ASP, 2 other police officers in vain bid to kidnap Rivers PDP chieftain (119,122 views)

 

Categories Advertorials (3) African Press Organisation (81) Art & Literature (33) Business (2,854) Business Verdict (32) Columnists (792) Complaints & Requests (94) Enterprise & Opportunities (200) Entertainment (431) Features (541) Global Business Monitor (222) International (1,751) Interviews (139) Live Commentary (28) Love Matters (100) News (32,066) Opinion (868) Pidgin (10) Politics (4,364) Religion (667) Sports (1,408) Stock Watch (26) AMA & Al Jazeera Global Update

 

CBN Banner advert

CBN Words on marble

 

 

Football president George Weah puts Liberian army to the test

 

APO Group Partner

 

CLASSIFIED ADS

Let us build the most comprehensive online database of worthy and credible Nigerians from all walks of life. It is worth doing!

Loss Off Your Belly Fats, Upper Arm Fat and Body Fats In 2weeks Time.. Click HERE To Start Now!

GOCOP Accredited Member

GOCOP Accredited member

 

 

Africa Media Agency and Al Jazeera

Advertisement



 

 

CLASSIFIED ADS

Let us build the most comprehensive online database of worthy and credible Nigerians from all walks of life. It is worth doing!

Loss Off Your Belly Fats, Upper Arm Fat and Body Fats In 2weeks Time.. Click HERE To Start Now!