Tech

Cyber-criminals exploiting World Cup Fever

A software technology company has identified a phishing campaign linked to the start of the FIFA World Cup where cyber-criminals attempt to lure would-be victims into downloading a schedule of fixtures and a result tracker

Published

6 years ago

June 27, 2018

Africa News Watch

When opened, the attachment uses a malware variant called ‘DownloaderGuide,’ a known downloader of potentially unwanted programs (PUPs) that is most commonly used as an installer for applications such as toolbars, adware or system optimizers. Check Point researchers have found that in total the campaign includes different executable files, all of which were sent in emails using the subject: “World_Cup_2018_Schedule_and_Scoresheet_CB-DL-Manager.”

The campaign was first identified on May 30, 2018, peaking on June 5, however during the past week it has gained new momentum with new instances emerging as the competition starts.

“Events that attract huge amounts of popular interest are seen by cyber-criminals as a golden opportunity to launch new campaigns,” said Check Point’s Threat Intelligence Group Manager, Maya Horowitz. “With so much anticipation and hype around the World Cup, cyber-criminals are banking on employees being less vigilant in opening unsolicited emails and attachments. As such, it is critical that organizations take steps to remind their employees of security best practices to help prevent these attacks being successful.

“In addition to this, organisations should also take steps to ensure that phishing campaigns don’t reach inboxes in the first place. This should include employing a multi-layered cybersecurity strategy that protects against both established malware families’ cyber-attacks and brand new threats and prevents it from spreading across the network in the result of the initial campaign being successful.”

With Check Point anticipating a further range of online scams and phishing attacks during the month-long tournament, it has also issued the following guidance for individuals to protect themselves from cyber threats during the 2018 FIFA World Cup:

1. Keep software updated – Ensure that your PC or device’s operating system, security software, apps and web browsers are all updated with the latest versions as this will form an effective defense against malware, viruses and other online threats.

2. Beware of fake websites – At previous large public events, cyber-criminals have created fake websites and domains, covering everything from merchandising to news and live streaming, which appear to be official but can be used to deliver malware to, or capture sensitive information from unsuspecting visitors.

3. Beware of emails from unknown senders – Cyber-criminals will likely send a variety of phishing emails during the tournament, offering a range of free offers or entries into draws for match tickets. This could be in the form of hyperlinks or attachments that will either download malware onto machines or attempt to steal your personal data. It is best to avoid opening emails or attachments from an unrecognized sender.

4. Beware of public Wi-Fi hotspots – With matches taking place throughout the day, many will be tempted to use public Wi-Fi hotspots to watch games on mobile devices. However, insecure hotspots are easy targets for hackers to compromise and intercept personal data such as emails and passwords, or plant malware on mobile devices.

Click to comment

Tech

Kenya’s auto-tech startup BuuPass expands system to new operators

Published

23 hours ago

October 14, 2024

Isaac Dachen

Kenyan auto-tech startup, BuuPass, has announced the expansion of its Bus Management System (BMS) to new operators in a bid to further enhance transparency and operational efficiency for bus companies in the country.

Founded in 2016 by the duo of Sonia Kabra and Wyclife Omondi, BuuPass has grown from a B2B2C mobility marketplace to become a leader in digital ticketing and transportation management solutions that enables users to search, compare, and book travel tickets via web, app, or USSD, while its SaaS platform helps bus operators manage their operations, inventory, and sales.

“What we are witnessing is nothing short of a digital renaissance in bus operations. Our Bus Management Service isn’t just a tool—it’s the future of this industry,” said Kabra, who doubles as the CEO of the company.

“So far, BuuPass has sold over 16 million travel tickets and generated over US$100 million in total value of goods sold, while it has also taken part in the Google for Startups Accelerator Africa and been backed by the Google for Startups Black Founders Fund. It also acquired counterpart QuickPass earlier this year.

“The BuuPass BMS is designed to address the most pressing challenges faced by bus operators. At its core, the system enhances transparency and control by providing real-time visibility into all aspects of operations, from ticket sales to route performance.

“Among the newly enrolled operators are Abuya, Abandu, Shoreline, and Bin Ibrahim, serving crucial routes such as Nairobi-Garissa, Nairobi-Moyale, Nairobi-Busia, Mombasa-Busia, and Mombasa-Kitui.

“To ensure smooth integration, BuuPass provides these operators with scanning devices, computers, and digital printers, along with comprehensive training for their staff on system usage,” she said.

Tech

Tanzanian fintech Nala secures $40m funding to boost expansion

Published

2 days ago

October 13, 2024

Isaac Dachen

Tanzanian payments platform, Nala, has announced securing $40 million in Series A funding from several global investment firms such as San Francisco-based VC firm, Acrew Capital, DST Global and Amplo, as well as other angel investors, which it says will be used for its global expansion and to strengthen its payment systems across Africa.

The startup which has its headquarters in Kenya, is a fintech that enables seamless money transfers from the UK, US, and the EU to Kenya, Uganda, Tanzania, Rwanda, and Ghana.

Nala’s founder and CEO, Benjamin Fernandes, who announced the new funding in a statement, said it is coming on the heels of a $10 million seed round in 2022 and will further improve the reliability of its African payment systems by establishing its own payment infrastructure.

Fernandes highlighted how the new capital would fast-track the company’s global expansion efforts, focusing on its Nala Money App and its business-to-business (B2B) payment platform, Rafiki API.

“This funding allows us to go beyond remittances and scale beyond Africa, building a comprehensive payments ecosystem. We’re reinvesting to enhance our infrastructure, ensuring affordable, reliable payments for everyone,” Fernandes said.

“With our own payment rails and the growth of our B2B platform Rafiki, we’re not just talking about change – we’re building it. We have bold, ambitious plans, so stay tuned for the next couple of years.

“For the first time, we are profitable and cash flow positive. Our transaction volume has surged 34 times over the last 20 months,” he added.

He noted that the company has expanded from a seven-member team to nearly 100 employees, and is serving nearly 500,000 customers globally.