New ransomware attacking organisational networks discovered
The Nigerian Communications Commission wishes to alert members of the public that a cybercrime group has perfected a new year scheme to deliver ransomware to targeted organizational networks.
The new ransomware uncovered by security experts has been categorized, by the Nigerian Computer Emergency Response Team’s (ngCERT) advisory released over the weekend, as high-risk and critical.
According to the ngCERT advisory, the criminal group is said to have been mailing out USB thumb drives to many organizations in the hope that recipients will plug them into their PCs and install the ransomware on their networks. While businesses are being targeted, criminals could soon begin sending infected USB drives to individuals.
Describing how the cybercrime group runs the ransomware, the ngCERT advisory says the USB drives contain so-called ‘BadUSB’ attacks. The BadUSB exploits the USB standards versatility and allows an attacker to reprogram a USB drive to emulate a keyboard to create keystrokes and commands on a computer. It then installs malware prior to the operating system booting or spoofing a network card to redirect traffic.
Numerous attack tools are also installed in the process that allows for exploitation of personal computers (PCs), lateral movement across a network, and installation of additional malware. The tools were used to deploy multiple ransomware strains, including BlackBatter and REvil.
According to ngCERT, the attack has been seen in the US where the USB drives were sent in the mail through the Postal Service and Parcel Service. One type contained a message impersonating the US Department of Health and Human Services and claimed to be a COVID-19 warning. Other malicious USBs were sent in the post with a gift card claiming to be from Amazon.
However, ngCERT has offered recommendations that will enable corporate and individual networks to mitigate the impact of this new cyber-attack and be protected from ransomware.
These recommendations include a call on individuals and organizations not to insert USB drives from unknown sources, even if they’re addressed to you or your organization. In addition, if the USB drive comes from a company or a person one is not familiar with and trusts, it is recommended that one contacts the source to confirm they actually sent the USB drive.
Finally, ngCERT has advised Information and Communication Technology as well as other Internet users to report any incident of system compromises to ngCERT via email@example.com, for technical assistance.
Add your voice
People reading currently
Appeal court upholds Senator Ademola Adeleke’s win in Osun
The Court of Appeal Abuja has overturned the ruling of the Osun State Governorship tribunal and has declared Senator Ademola Adeleke...
Lawmaker demands revamp of bank e-payment platforms
The members of the House of Representatives have demanded that the Central Bank of Nigeria (CBN) direct banks to revamp...
We’ve disbursed N20bn to alleviate cash crunch, CBN tells NLC
The Central Bank of Nigeria (CBN) met with the leadership of the Nigeria Labour Congress (NLC) in Abuja on Thursday,...
Apply for Amazon Accelerator programme for fintech founders
Application closes April 27, 2023 Today, Amazon Web Services’ Startup Loft Accelerator team announced the inaugural launch of its AWS...
Fully Funded Rotary Peace Fellowships for Masters students
Application Deadline: May 15, 2023 Each year, Rotary awards fully funded fellowships for dedicated leaders from around the world to...
Organ Trafficking: Court finds Ekweremadu, wife, doctor guilty
A six-week trial at the Old Bailey has led to a guilty verdict for former Deputy Senate President Ike Ekweremadu,...
Why bank regulator raised interest rate in Nigeria
The Monetary Policy Committee of the Central Bank of Nigeria (CBN) has decided to raise the benchmark interest rate by...
NGX, partners advise young Nigerians on investment
The Nigerian Exchange Limited (NGX) is continuing its mission to promote financial literacy among young Nigerians by celebrating the 2023...
FG cancels excise duty payment by telecom operators
The Federal Government has removed the 5% excise duty on the telecom sector of Nigeria’s Digital Economy, following recommendations of...
Top 10 most-streamed Amapiano tracks – Spotify
Spotify, an online music streaming service, recently released its top 10 most streamed Amapiano tracks. Jocelyne Muhutu-Remy, the Managing Director...