A Nigerian allegedly working alone around Abuja has stirred a global hunt as he orchestrated numerous malware infection campaigns targeting more than 4,000 organisations globally over the past four months, a cyber-security company claimed.
www.Securityweek.com quoting Check Point security researchers said the attacks targeted various companies in industries such as oil & gas, manufacturing, banking, and construction, in an attempt to steal data and commit fraud.
Many of the companies are leading international names and some have had their defences breached by the attacks, the security researchers reveal.
According to Check Point, at least a dozen companies confirmed they have been infected during the campaign, including a marine and energy solutions company in Croatia, a transportation company in Abu Dhabi, a mining company in Egypt, a construction company in Dubai, an oil & gas firm in Kuwait, and a construction organization in Germany.
Despite the large scale campaign, behind it is not an expert gang of cybercriminals or a nation state actor, but “a relatively unskilled man in his mid-20s, operating from a location near the capital of Nigeria,” Check Point discovered.
Working on his own, the Nigerian uses fraudulent emails seemingly coming from oil and gas giant Saudi Aramco, the world’s second largest daily oil producer.
The phishing messages target financial departments within companies in an attempt to trick employees into revealing company bank details or into opening a malware-infected attachment.
The malware used in these attacks includes NetWire, a remote access Trojan that provides its operator with full control over infected machines, and Hawkeye, a software for logging key strokes (malware already associated with Nigerian cybercriminals).
The attacks eventually resulted in a total of 14 successful infections. The cybercriminal ended up earning thousands of dollars in the process, the researchers said.
Despite showing a low level of cyber-skills, using crude and unsophisticated fraudulent emails, with almost no research or social engineering involved in creating them, the attacker was successful in his attempts.
The attacker used generic email titles, phrased as “Dear Sir/Ms,” sent the same email to numerous targets, “all in blind carbon copy, urging victims to send back banking details, perhaps for future scams.”
He sent the emails from email addresses sale.cement_till_tw@yahoo.com, and cciticarinternational@yahoo.com. The fraudster used old, generic and readily available online malware, as well as freeware to ‘scrape’ email addresses from corporate websites and used them as targets for his campaigns.
“The fact that the campaign was still effective, despite using only basic cyber-criminal techniques, highlights just how much of a problem these business email compromise (BEC) attacks have become,” Check Point said.
Since uncovering the campaign and establishing its origins, Check Point’s research team has notified law enforcement authorities in Nigeria and internationally and shared its findings with them.
Checkpoint said the Nigerian in his 20s operates social media accounts, where you he uses the motto: ‘get rich or die trying’.
His attack campaign uses fraudulent emails which appear to originate from oil and gas giant Saudi Aramco, the world’s second largest daily oil producer, targeting financial staff within companies to trick them into revealing company bank details, or open the email’s malware-infected attachment. Last year, the FBI revealed that losses caused by BEC scams exceeded $3.1 billion.
Victims are estimated to lose between $25,000 and $75,000 on average, per attack. However, it’s not only financial losses that victims should be concerned about, but also the fact that “the malware used by the criminal to infect organizations gives remote control over infected machines, and can perform keylogging functions.
This enables harvesting of a variety of information from infected machines, such as details on the companies’ operations, assets and intellectual property.” Such details could be worth much more than the thousands of dollars obtained by fraud, Check Point said.
Another alarming aspect was that some of the targets are energy and infrastructure companies, which the unsophisticated cyber-criminal was able to easily breach.
Not only was the attacker able to compromise the networks of several large organizations, but he also managed to distribute his malware globally and remain under the radar for a long while.
“This highlights the need for all organizations to improve their security to protect against phishing and business email compromise scams, and to educate their employees to be cautious about opening emails, even from companies or individuals that they recognize,” Check Point said.
Check Point
- Dangote Donates 80,000 Bags of Rice to Lagos Residents
- AI Companies Lead Unicorn Club as 20 Joins with Combined Valuation of $35bn
- JUST IN: CBN Hike Interest Rate to 24.75 %
- About $900bn Telecoms Market Revenue Opportunity Ready for Telecoms Operators Investing in Cloud & API Services in 2024
- MTN Exiting Two African Countries to Focus on Huge Revenue Markets
- EU Launches Probe into Meta, Apple and Alphabet Under Sweeping New Tech Law
- Tecno Unveils CAMON 30 Premier 5G at Mobile World Congress
- Apple Earned $3,074 Pear Second in 2023, Highest Net Profit in GAFAM Group
- Digital Devices Ownership Drop Massively in 2023 with Tablets, Gaming Consoles, and VR Witnessing Worst Impact
- Experts Link Smart Headphones Use to Sudden Eyebrow Growth, Sight Infrared Light Effect
- How Cigarette Smoke is Silently Killing Your Smartphone
- Celebrate Festive Season Time-tested HUAWEI Technology Gadget
- Sad News for Smartphone Market with Big Brands Shipment Dropping in Huge Figures
- MTN Media Innovation Programme (MTN MIP-3) Opens for Applications
- RETALIATION: China Bans Intel and AMD Chips from Government Kit
- Officer in Custody of Escapee Binance Executive Nadeem Anjarwalla Arrested by NSA
- Nigeria Files Tax Evasion Charges Against Binance
- Schneider Electric Collaborates with NVIDIA on Designs for AI Data Centres
- NDPC to Partner Ondo to Upskill Youths, Create Jobs in Data Protection
- Dangote Invests N15bn on Food Intervention Programme Across Nigeria
- Nigerian GenZ Entrepreneur, Kenneth Uche Makes List of UK University £100,000 Research Award
- IWD: Nigeria to Get National Digital Gender Inclusion Strategy Plan Soon
- Nigeria Needs Strong Policy Implementing Institutions to Enjoy Technology Impact, Says Inuwa
- Africa Fintech Summit 2024 to Hold on Sideline of World Bank/IMF Spring Meetings
- Global Startup Awards for Africa Opens Portal Entries
- MarkHack 3.0 Opens Portal for Application, Promise $10,000 Equity Investment
- SRAP 2.0 to Address Digital Literacy and Talents Hunt in Nigeria, Says NITDA
- Nigeria Govt Plans $617.7m Investment in Digital and Creative Enterprises Programme in 36 States
- Electronic Waste Rising Five Times Faster than Documented e-Waste Recycling, Says ITU
- NDPC Investigates XpressVerify Alleged Privacy Breach at NIMC
- Consider Using Dollar as Collateral to Secure Naira Loan, ICSL CEO Tells Investors
- National Privacy and Digital Awareness Campaign Design to Safeguard Personal Data & Create Jobs, Says NDPC
- About Six Technology Development Zones to Open Soon Across Nigeria as NITDA, eVillage Finalise MoU
- Mobile Phones Lead Internet Traffic by 58% Drops 4% Less than in 2022
- Telecos Revenue from Business SMS to Grow Just by 5% in 2024, as SMS Pricing Becomes Unsustainable
- NCC Unveils Plans to Mitigate Future West Africa Submarine Cable Mishap
- Vertiv Launches High-Density Power and Cooling infrastructure Expertise to Boost NVIDIA Partner Network
- JUST IN: Metaverse Set to End Era of Searching Internet for Infor
- ASSA ABLOY, Global Infrastructure Company Rebrands Adopts ALCEA Brand Identity
- Roaming Subscribers to Reach 1.25 Billion Globally in 2024, Surpassing Pre-pandemic Levels
- Telecoms Operators Restore Voice, Data Services After Major Undersea Cable Cut
- First Nigeria Fintech Marketing Report Exposes How to Acquire, Retain Customers & Achieve Long-Term Growth
- Hyperspace Technologies Set to Grab Huge Chunk of Nigeria’s Digital Assets Market with Unveiling of Three Products
- Interswitch Set to Fill Gaps of Underserved Rural Nigeria with Mobile Virtual Network Operator License
- Nigeria’s Fintech PalmPay Launches Two New Products, Set to Revive Savings Culture
- Bitcoin Hits Fresh Record Above $71,000
- FINALLY: Binance Ends All Naira Services, Asks Users to Converts Assets into Crypto
- Africa’s Fintech Sector to be Worth $65bn by 2030, Youthful Population Tipped as Drivers