Fidelity bank banner UBA banner
Global hunt for Nigerian cyber criminal

By News Express on 16/08/2017

Share on facebook Yahoo mail icon Gmail icon Share on Google+

Views: 1,078

•A cyber criminal at work.
•A cyber criminal at work.

A Nigerian working alone around Abuja has stirred a global hunt as he orchestrated numerous malware infection campaigns targeting more than 4,000 organisations globally over the past four months, a cyber security company claimed.

www.Securityweek.com quoting Check Point security researchers said the attacks targeted various companies in industries such as oil & gas, manufacturing, banking, and construction, in an attempt to steal data and commit fraud.

Many of the companies are leading international names and some have had their defenses breached by the attacks, the security researchers reveal.

According to Check Point, at least a dozen companies confirmed they have been infected during the campaign, including a marine and energy solutions company in Croatia, a transportation company in Abu Dhabi, a mining company in Egypt, a construction company in Dubai, an oil & gas firm in Kuwait, and a construction organization in Germany.

Despite the large scale campaign, behind it is not an expert gang of cybercriminals or a nation state actor, but “a relatively unskilled man in his mid-20s, operating from a location near the capital of Nigeria,” Check Point discovered.

Working on his own, the Nigerian  uses fraudulent emails seemingly coming from oil and gas giant Saudi Aramco, the world’s second largest daily oil producer. The phishing messages target financial departments within companies in an attempt to trick employees into revealing company bank details or into opening a malware-infected attachment.

The malware used in these attacks includes NetWire, a remote access Trojan that provides its operator with full control over infected machines, and Hawkeye, a software for logging key strokes (malware already associated with Nigerian cybercriminals). The attacks eventually resulted in a total of 14 successful infections. The cybercriminal ended up earning thousands of dollars in the process, the researchers said.

Despite showing a low level of cyber-skills, using crude and unsophisticated fraudulent emails, with almost no research or social engineering involved in creating them, the attacker was successful in his attempts.

The attacker used generic email titles, phrased as “Dear Sir/Ms,” sent the same email to numerous targets, “all in blind carbon copy, urging victims to send back banking details, perhaps for future scams.” He sent the emails from email addresses sale.cement_till_tw@yahoo.com, and cciticarinternational@yahoo.com.

The fraudster used old, generic and readily available online malware, as well as freeware to ‘scrape’ email addresses from corporate websites and used them as targets for his campaigns.

“The fact that the campaign was still effective, despite using only basic cyber-criminal techniques, highlights just how much of a problem these business email compromise (BEC) attacks have become,” Check Point said.

Since uncovering the campaign and establishing its origins, Check Point’s research team has notified law enforcement authorities in Nigeria and internationally and shared its findings with them.

Checkpoint said the Nigerian in his 20s operates social media accounts, where you he uses the motto: ‘get rich or die trying’.

His attack campaign uses fraudulent emails which appear to originate from oil and gas giant Saudi Aramco, the world’s second largest daily oil producer, targeting financial staff within companies to trick them into revealing company bank details, or open the email’s malware-infected attachment.

Last year, the FBI revealed that losses caused by BEC scams exceeded $3.1 billion. Victims are estimated to lose between $25,000 and $75,000 on average, per attack. However, it’s not only financial losses that victims should be concerned about, but also the fact that “the malware used by the criminal to infect organisations gives remote control over infected machines, and can perform keylogging functions. This enables harvesting of a variety of information from infected machines, such as details on the companies’ operations, assets and intellectual property.” Such details could be worth much more than the thousands of dollars obtained by fraud, Check Point says.

Another alarming aspect was that some of the targets are energy and infrastructure companies, which the unsophisticated cybercriminal was able to easily breach. Not only was the attacker able to compromise the networks of several large organisations, but he also managed to distribute his malware globally and remain under the radar for a long while.

“This highlights the need for all organisations to improve their security to protect against phishing and business email compromise scams, and to educate their employees to be cautious about opening emails, even from companies or individuals that they recognise,” Check Point said. (NAN)


 

Source News Express

Posted 16/08/2017 1:13:42 PM

 

Share on facebook Yahoo mail icon Gmail icon Share on Google+


 

CLASSIFIED ADS

 

You may also like...
Bayelsa Polls: Alaibe accused of dropping Obasanjo, Buhari’s...

2 suspected kidnappers arrested at ABU

Russia didn’t help Trump win US presidential election...

Confusion mars Anambra PDP ward congress

Lagos remains home to all tribes, nationalities —...

2 million Nigerian embrace UNICEF’s social media platform...

Businesses you can start in Nigeria with little...

BPE makes case for concessioning of 380,000 hectares...

Three lawmakers charged with treason over stoning Ugandan...

Lagos bans open procession, fireworks during Yuletide

Islam a safeguard against Ebola, says JNI

China overloading poor nations with debt: Top US...

 

Latest News School principal flogs corps member in front of students Those who feel they have another country free to go — Buhari Boko Haram: Chibok girls release secret diaries 2019: My nomination as Atiku’s running mate an act of God — Peter Obi Death toll in Kaduna violence hits 78 Confusion over Nnamdi Kanu’s whereabouts •He is not in Jerusalem, says Israeli Government DSS breaks silence on Nnamdi Kanu’s escape Ekweremadu set to dump PDP for APC Christian lawyers, others allege genocide in Plateau Ogun guber crisis: Amosun accuses Tinubu, Osoba, Oshiomhole of fraud Buhari gives APC marching orders to take over Kwara from Saraki Spokesman kicks as APC releases song entitled ‘Atiku is a thief’

 

Most Read NUDE PHOTO OF OMOTOLA JALADE-EKEINDE surfaces online (409,148 views) Nigerian female sex addict opens up, says ‘I like it with both men and women’ (383,690 views) Shameless Genevieve Nnaji exposes breasts in public (316,110 views) Finally named: The full list of friends of Nigerian female sex addict who prowled Facebook (259,692 views) OLUMBA OLUMBA OBU (the one who called himself God) IS DEAD (238,519 views) Igbo scholar disgraces Femi Fani-Kayode •Demolishes claims on Igbo/Yoruba history with facts and figures (225,022 views) Breaking News: POPULAR REVEREND CONVERTS TO ISLAM in Kaduna (Nigeria) (204,923 views) OBJ’s son reported dead in Lagos plane crash •Names of more victims emerge (186,357 views) My wasted years in Olumba Olumba Obu’s Evil Brotherhood (171,233 views) THE FINAL DISGRACE: Igbo scholar unleashes more facts about Igbo/Yoruba history, finishes off Femi Fani-Kayode with second article (166,410 views) Lagos plane crash: Journalist releases victims’ names (162,095 views) Gunmen kill ASP, 2 other police officers in vain bid to kidnap Rivers PDP chieftain (149,776 views)

 

Categories Advertorials (3) African Press Organisation (81) Art & Literature (70) Business & Economy (3,703) Business Verdict (52) Columnists (949) Complaints & Requests (94) Enterprise & Opportunities (207) Entertainment (561) Features (660) Global Business Monitor (305) International (2,568) Interview (165) Live Commentary (28) Love Matters (145) News (39,849) Opinion (1,127) Pidgin (13) Politics (7,364) Religion (885) Sports (1,740) Stock Watch (35) AMA & Al Jazeera Global Update

 

NLNG Prize for Literature 2018

Zenith Zero Balance

CBN banner

Firstmobile banner

 

 

 

NEWS EXPRESS TV

LIBYA vs NIGERIA 2-3 Goals Highlights

 

APO Group Partner

 

 

CLASSIFIED ADS

GOCOP Accredited Member

GOCOP Accredited member

 

 

Africa Media Agency and Al Jazeera

Advertisement