News

Cyberattacks: NITDA cautions against hacking group masquerading as USAID

1 Mins read

The National Information Technology Development Agency (NITDA) has urged Nigerians to beware of a widespread malicious email campaign undertaken by a hacking group, Nobelium.

NITDA warned that the group is masquerading as the US Agency for International Development (USAID).

Mrs Hadiza Umar, NITDA Cooperate Affairs and External Relations’ Head, gave the warning in a statement she issued late on Sunday in Abuja.

Umar said the malicious group, uncovered by Microsoft company, had been discovered to leverage the legitimate mass-mailing service, to masquerade as USAID and distribute malicious Uniform Resource Locator (URLs) to a wide variety of organisations.

According to her, the group targets government organisations, Non-Government Organisations, think-tanks, the military, IT service providers, health, technology and telecommunications providers.

“Their antics involve the use of emails claiming to be an alert from USAID about new documents published by former President Donald Trump about election fraud.

“Once users click the link in the email, the URL would direct them to the legitimate Constant Contact Service and then redirect to Nobelium-controlled infrastructure through a URL that delivers a malicious International Organisation for Standardisation (ISO) file.

“This in turn enables the criminals to execute further malicious objectives, such as lateral movement, data exfiltration and delivery of additional malware,” she said.

The official further advised Nigerians to be wary of such criminals masquerading as USAID and turn on cloud-delivered protection in Microsoft Defender Antivirus or the equivalent to cover rapidly evolving attacker tools and techniques for mitigation.

She further said people should run Endpoint Detection and Response (EDR) in block mode to enable antivirus to block malicious artifacts because the EDR in block mode works behind the scenes to remediate malicious artifacts that were detected post-breach.

“Enable network protection to prevent applications or users from accessing malicious domains and other malicious content on the Internet.

“Enable investigation and remediation in full automated mode to allow antivirus take immediate action on alerts to resolve breaches.

“Use device discovery to increase your visibility into your network by finding unmanaged devices on your network and onboarding them

“Enable Multi-Factor Authentication (MFA) to mitigate compromised credentials and block all office applications from creating child processes,” she advised.

Umar said the mitigations should be applied by users and administrators.

She also said Nigerians could report an incident by contacting NITDA’S Computer Emergency Readiness and Response Team via email support@cerrt.ng or telephone +2348178774580.

   

About author
Time Nigeria is a general interest Magazine with its headquarters in Abuja, the nation’s Capital.
Articles
Related posts
Cover StoryEnergyNewsPower and Energy

National Grid Collapses Again

1 Mins read
Again, Nigerians have been plunged into a round of darkness on Tuesday following the collapse of the National grid. According to reports,…
Cover StoryNews

Prolong Detention of Seun Odunlami: Dele Atunbi Rejuvenation Campaign Council Lauds NUJ Decision On GTB

2 Mins read
  . . .Calls For Review of Cybercrime Act of 2024 The Rejuvenation Campaign Council, the campaign organisation of Mr Dele Atunbi…
All The NewsArts and CultureCover StoryNewsTourism

Nigeria Needs to Address Shortcomings in Museum Sector – Falola

2 Mins read
“It is counterproductive for the West to push for the repatriation of our cultural artifacts while we are not investing in the…
Stay on the loop!

Subscribe to our latest news.

Leave a Reply

WP2Social Auto Publish Powered By : XYZScripts.com