Tech

Cyber-criminals exploiting World Cup Fever

A software technology company has identified a phishing campaign linked to the start of the FIFA World Cup where cyber-criminals attempt to lure would-be victims into downloading a schedule of fixtures and a result tracker

Published

6 years ago

June 27, 2018

Africa News Watch

When opened, the attachment uses a malware variant called ‘DownloaderGuide,’ a known downloader of potentially unwanted programs (PUPs) that is most commonly used as an installer for applications such as toolbars, adware or system optimizers. Check Point researchers have found that in total the campaign includes different executable files, all of which were sent in emails using the subject: “World_Cup_2018_Schedule_and_Scoresheet_CB-DL-Manager.”

The campaign was first identified on May 30, 2018, peaking on June 5, however during the past week it has gained new momentum with new instances emerging as the competition starts.

“Events that attract huge amounts of popular interest are seen by cyber-criminals as a golden opportunity to launch new campaigns,” said Check Point’s Threat Intelligence Group Manager, Maya Horowitz. “With so much anticipation and hype around the World Cup, cyber-criminals are banking on employees being less vigilant in opening unsolicited emails and attachments. As such, it is critical that organizations take steps to remind their employees of security best practices to help prevent these attacks being successful.

“In addition to this, organisations should also take steps to ensure that phishing campaigns don’t reach inboxes in the first place. This should include employing a multi-layered cybersecurity strategy that protects against both established malware families’ cyber-attacks and brand new threats and prevents it from spreading across the network in the result of the initial campaign being successful.”

With Check Point anticipating a further range of online scams and phishing attacks during the month-long tournament, it has also issued the following guidance for individuals to protect themselves from cyber threats during the 2018 FIFA World Cup:

1. Keep software updated – Ensure that your PC or device’s operating system, security software, apps and web browsers are all updated with the latest versions as this will form an effective defense against malware, viruses and other online threats.

2. Beware of fake websites – At previous large public events, cyber-criminals have created fake websites and domains, covering everything from merchandising to news and live streaming, which appear to be official but can be used to deliver malware to, or capture sensitive information from unsuspecting visitors.

3. Beware of emails from unknown senders – Cyber-criminals will likely send a variety of phishing emails during the tournament, offering a range of free offers or entries into draws for match tickets. This could be in the form of hyperlinks or attachments that will either download malware onto machines or attempt to steal your personal data. It is best to avoid opening emails or attachments from an unrecognized sender.

4. Beware of public Wi-Fi hotspots – With matches taking place throughout the day, many will be tempted to use public Wi-Fi hotspots to watch games on mobile devices. However, insecure hotspots are easy targets for hackers to compromise and intercept personal data such as emails and passwords, or plant malware on mobile devices.

Click to comment

Tech

Kenya’s ticketing startup BuuPass partners Flexpay for flexible travel payments

Published

2 days ago

December 19, 2024

Isaac Dachen

Kenyan digital ticketing startup, BuuPass, has entered into a partnership with goal-based savings platform, Flexpay, to offer customers flexible payment plans ahead of holiday travels as well as simplify travel planning and ease the financial burden of holiday travel for Kenyans.

Co-founder and CEO at Buupass, Sonia Kabra, who unveiled the package at a press conference, said the collaboration between the two platforms will allow travellers to save for their journeys in manageable, interest-free installments over four to 12 weeks.

“Travelers can select their travel dates, book tickets, and pay a small deposit upfront, with the remaining balance spread across weekly or monthly payments,” she said.

“This approach offers a stress-free way for families and large groups to secure their tickets early, helping them avoid last-minute price hikes as fares are locked in.

“By partnering with Flexpay, we’re giving travelers the flexibility to budget for their trips in advance. This initiative aligns with our mission to make travel accessible to everyone, providing a solution that meets customers where they are financially,” said Kabra.

Also speaking at the event, Richard Machomba, CEO and founder of Flexpay, said:

“Flexpay’s mission is to empower individuals by providing accessible financial solutions that make it easier for them to achieve their financial goals.

“By partnering with BuuPass, we’re making travel more accessible and stress-free for Kenyans, especially during the holiday season when expenses can be overwhelming,” Machomba added.

Founded in 2016 by Kabra and Wyclife Omondi, BuuPass is a B2B2C mobility marketplace that enables users to search, compare, and book travel tickets via web, app, or USSD, while its SaaS platform helps bus operators manage their operations, inventory, and sales.

FlexPay, on the other hand, is an online and offline payment gateway that allows merchants to offer interest-free targeted savings to their customers in Africa.

Tech

DR Congo sues tech giant Apple over illegal mineral exploitation

Published

3 days ago

December 18, 2024

Isaac Dachen

The Democratic Republic of Congo (DRC), has filed a criminal case against the European subsidiaries of tech giant, Apple, accusing them of illegal mineral exploitation and allegedly using “blood minerals” in its supply chain.

In the suit filed on Tuesday, the DRC alleges that Apple has bought contraband supplies from the country’s conflict-ladden east and Rwanda, zones in which it allege the materials are mined illegally and then integrated into global supply chains before ending up in tech devices.

The DRC suit specifically mentioned Apple subsidiaries in France and Belgium, accusing the tech giant of using conflict minerals in its supply chain.

The DRC is a major source of tin, tantalum, and tungsten which are used in electronic devices, with some mines controlled by armed groups responsible for human rights violations.

International lawyers representing the African country’s government have accused Apple’s local subsidiaries of taking these minerals from conflict areas and laundering them through international supply chains, with one lawyer telling journalists that Belgium had a moral duty to act given its history of exploiting the country’s resources under colonial rule.

However, in its response, Apple claims it conducts supplier audits and does not directly source primary minerals.

https://www.thenews.com.pk/print/1262670-dr-congo-sues-apple-over-alleged-illegal-mineral-exploitation