News

NCC Warns Of Blackbyte Ransomware That Abuses Legit Driver To Disable Security Products

Published

2 years ago

October 8, 2022

Editor

The Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has flagged a high-impact threat to Windows operating system, the Blackbyte Ransomware, which has the capacity to bypass protections by disabling more than 1,000 drivers used by various security solutions.

The NCC-CSIRT said the BlackByte ransomware gang, which is using a new technique that researchers called, “Bring Your Own Vulnerable Driver,” is exploiting the security issue that allowed it to disable drivers that prevent multiple Endpoint Detection and Response (EDR) and antivirus products like Avast, Sandboxie, Windows DbgHelp Library, and Comodo Internet Security, from operating normally.

Recent attacks attributed to this group involved a version of the MSI Afterburner RTCore64.sys driver, which is vulnerable to a privilege escalation and code execution flaw tracked as CVE-2019-16098.

The “Bring Your Own Vulnerable Driver” (BYOVD) method is effective because the vulnerable drivers are signed with a valid certificate and run with high privileges on the system.

Two notable recent examples of BYOVD attacks include Lazarus, abusing a buggy Dell driver and unknown hackers abusing an anti-cheat driver/module for the Genshin Impact game.

The NCC-CSIRT advisory recommended that system administrators protect against BlackByte’s new security bypassing trick by adding the particular MSI driver to an active blocklist, monitoring all driver installation events, and scrutinising them frequently to find any rogue injections that do not have a hardware match.

The CSIRT is the telecom sector’s cyber security incidence centre set up by the NCC to focus on incidents in the telecom sector and as they may affect telecom consumers and citizens at large.

The CSIRT also works collaboratively with the Nigeria Computer Emergency Response Team (ngCERT), established by the Federal Government to reduce the volume of future computer risk incidents by preparing, protecting, and securing Nigerian cyberspace to forestall attacks, and problems or related events.

News

JUST IN: Ladoja Withdraws Suit Against Olubadan-in-Council

Published

2 mins ago

May 7, 2024

Editor

The Otun Olubadan of Ibadanland, High Chief Rasidi Ladoja, on Tuesday, finally withdrew the suit filed against members of Olubadan-in-Council.

High Chief Ladoja instituted a suit against the members of the Council over the beaded crown worn before the demise of the late 42nd Olubadan of Ibadanland, Oba Lekan Balogun.

The coast is now clear for the enthronement of the Olubadan-designate, Oba Owolabi Olakulehin, as the 43rd Olubadan of Ibadanland.

One of his aides, Adeola Oloko, told The PUNCH on Tuesday.

News

NYSC Urges Corps Members To Sustain Spirit Of Patriotism

Published

19 mins ago

May 7, 2024

Editor

Mrs Rifkatu Yakubu, NYSC Coordinator in Bauchi state delivering her speech during the closing ceremony of the 2024 Batch 'A' stream II orientation course

The National Youth Service Corps (NYSC) has called on corps members across the country to sustain the spirit of patriotism, hard work and resilience through their service year and beyond.

The Bauchi state Coordinator of the scheme, Mrs Rifkatu Yakubu made the call on Tuesday during the closing ceremony for the 2024 Batch ‘A’ stream II orientation course at the permanent orientation camp in Wailo, Ganjuwa Local Government Area of the state.

She said this would enable them to strive to meet the expectations of Nigerians by contributing towards the progress and development of their fatherland.

“I wish to commend your patriotic zeal as demonstrated by your participation in camp activities and exhibition of high level of discipline.

“Your letters of posting to Places of Primary Assignment will be handed to you soon after this ceremony. In this regard, I would like to remind you of your oath of allegiance in which you pledged to accept posting in good faith.

“I enjoin you to perform your duties with diligence and be guided by the provisions of the NYSC Act and Bye-laws as well as workplace rules and regulations.

“In keeping with the objectives of the Scheme, you are expected to integrate into your host communities while also appreciating and respecting their cultures,” she said.

According to her, the scheme is liaising with financial institutions and other stakeholders with a view to providing start-up loans to enable the corps members actualise their business dreams.

She assured that the management would continue to explore avenues to optimise the impact of the NYSC ‘s programmes.

It could be recalled that 2,172 corps members were posted to the state for the 2024 Batch ‘A’ stream II service year.

News

JUST IN: APC Woos 27 Pro-Wike Lawmakers To Impeach Fubara

Published

54 mins ago

May 7, 2024

Editor

The leadership of the All Progressives Congress in Rivers State has called on the 27 members of the State House of Assembly loyal to the Minister of the Federal Capital Territory, Nyesom Wike, to immediately commence an impeachment process against Governor Siminlayi Fubara.

The State APC Caretaker Committee Chairman, Tony Okocha, made the call at a news briefing in Port Harcourt on Tuesday.

He said the Governor has continued to disrespect President Bola Tinubu by refusing to implement all the eight-point peace agreement reached in Abuja on the political crisis in the state, to which he appended his signature.

He further stated, “A state as crucial and all-important as Rivers State churned out a dunderhead. We cannot accept that. Our charge to the Assembly is to immediately commence an impeachment process against the Governor.

“And if they don’t do that there is what they call party discipline. We shall invoke the relevant section of the constitution.”

Details later…