MyZA
News, Directory, Events and Other Stuff
In today’s fast-paced business environment, effective communication with customers is more critical than ever. One increasingly popular solution for maintaining high-quality customer interactions is outsourcing customer service functions, including telephone and call answering services, live chat support, and specialised industry-specific customer handling. 24/7 Telephone and Call Answering Services With the global market …
Check Point® Software Technologies Ltd. (https://www.CheckPoint.com/), a global leader in cybersecurity solutions, has released its Global Threat Index for October 2023, unveiling an alarming trend in cyber threats. The Remote Access Trojan (RAT) NJRat has dramatically risen from sixth to second place, with a particular focus on targeting government agencies and organizations in the Middle East and Africa. This escalation in cyber threats has been particularly severe in Africa, with Mauritius ranking 6th, Nigeria 11th, Morocco 15th, and Kenya 25th in terms of being targeted and attacked. South Africa follows, ranking 55th globally.
Download document: https://apo-opa.co/3MHq2pZ
In addition, the report highlights the expanding reach of the sophisticated RAT AgentTesla, driven by a new and complex mal-spam campaign using corrupted email attachments. The education sector continues to be the prime target, underscoring the ongoing vulnerability of this industry to cyber attacks.
Last month, AgentTesla was found being disseminated through archive files that contained a malicious Microsoft Compiled HTML Help (.CHM) extension. These files, disguised as typical order and shipment documents, were distributed via emails with .GZ or .zip attachments, tricking recipients into downloading the malware. Once installed, AgentTesla exhibits a range of harmful capabilities, including keylogging, capturing clipboard data, accessing file systems, and secretly transmitting stolen data to a Command and Control (C&C) server.
"We cannot overlook the sophisticated tactics used by hackers to distribute malware, such as impersonating trusted brands or using malicious email attachments,” said Rudi van Rooyen, Sales Engineer at Check Point Software. “As we enter the busy shopping season in November, it's crucial to stay alert. Cybercriminals are taking advantage of the increased online shopping activity, and no region, including Africa, is immune to these threats."
CPR also revealed that “Zyxel ZyWALL Command Injection (CVE-2023-28771)” was the most exploited vulnerability, impacting 42% of organizations globally, followed by “Command Injection Over HTTP” which impacts 42% of organizations worldwide. “Web Servers Malicious URL Directory Traversal” was the third most used vulnerability, with a global impact of 42%.
Top malware families and their impact in Africa
*The arrows relate to the change in rank compared to the previous month.
Formbook was the most prevalent malware last month with an impact of 3% worldwide organizations, followed by NJRat with a global impact of 2%, and Remcos with a global impact of 2%.
1. ↔ Formbook – Formbook is an Infostealer targeting the Windows OS and was first detected in 2016. It is marketed as Malware as a Service (MaaS) in underground hacking forums for its strong evasion techniques and relatively low price. FormBook harvests credentials from various web browsers, collects screenshots, monitors and logs keystrokes, and can download and execute files according to orders from its C&C. Its impact in Kenya and Nigeria is significant at 16.9% and 9.2% respectively, while impact in South Africa is lower at 3%.
2. ↑ NJRat – NJRat is a remote accesses Trojan, targeting mainly government agencies and organizations in the Middle East. The Trojan has first emerged in 2012 and has multiple capabilities: capturing keystrokes, accessing the victim's camera, stealing credentials stored in browsers, uploading and downloading files, performing process and file manipulations, and viewing the victim's desktop. NJRat infects victims via phishing attacks and drive-by downloads, and propagates through infected USB keys or networked drives, with the support of Command & Control server software. NJRat's impact in South Africa is just above 2% while Morrocco is at 8%.
3. ↓ Remcos – Remcos is a RAT that first appeared in the wild in 2016. Remcos distributes itself through malicious Microsoft Office documents, which are attached to SPAM emails, and is designed to bypass Microsoft Windows UAC security and execute malware with high-level privileges. While its presence globally is concerning, Remcos has not made a a significant appearance in Africa.
Top Attacked Industries in Africa
Last month Education/Research remained in first place as the most attacked industry globally, followed by Communications and Government/Military. However, in Africa the top industries that came under attack are:
1. Communications
2. ISP/MSP
3. Finance and Banking
4. Government and Military
Top exploited vulnerabilities
Last month, “Zyxel ZyWALL Command Injection (CVE-2023-28771)” was the most exploited vulnerability, impacting 42% of organizations globally, followed by “Command Injection Over HTTP” which impacts 42% of organizations worldwide. “Web Servers Malicious URL Directory Traversal” was the third most used vulnerability, with a global impact of 42%.
1. ↑ Zyxel ZyWALL Command Injection (CVE-2023-28771) - A command injection vulnerability exists in Zyxel ZyWALL. Successful exploitation of this vulnerability would allow remote attackers to execute arbitrary OS commands in the affected system.
2. ↔ Command Injection Over HTTP (CVE-2021-43936, CVE-2022-24086) - A command Injection over HTTP vulnerability has been reported. A remote attacker can exploit this issue by sending a specially crafted request to the victim. Successful exploitation would allow an attacker to execute arbitrary code on the target machine.
3. ↓ Web Servers Malicious URL Directory Traversal (CVE-2010-4598,CVE-2011-2474,CVE-2014-0130,CVE-2014-0780,CVE-2015-0666,CVE-2015-4068,CVE-2015-7254,CVE-2016-4523,CVE-2016-8530,CVE-2017-11512,CVE-2018-3948,CVE-2018-3949,CVE-2019-18952,CVE-2020-5410,CVE-2020-8260) - There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URL for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
Top Mobile Malwares
Last month Anubis remained in first place as the most prevalent Mobile malware, followed by AhMyth and Hiddad.
1. Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
2. AhMyth - AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera, which is usually used to steal sensitive information.
3. Hiddad - Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.
Check Point's Global Threat Impact Index and its ThreatCloud Map are powered by Check Point's ThreatCloud (https://threatmap.CheckPoint.com/) intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research arm of Check Point Software Technologies.
The complete list of the top ten malware families in October can be found on the Check Point blog.
Distributed by APO Group on behalf of Check Point Software Technologies Ltd..
Media Contact:
Kerry Botha
Kerry Botha Communications
Mobile: +27 83 263 0644
press@kerrybotha.co.za
Follow Check Point via:
LinkedIn: https://apo-opa.co/3ubUlyG
X: https://apo-opa.co/3SEBgPG
Facebook: https://apo-opa.co/3QEdjFz
Blog: https://blog.checkpoint.com
YouTube: https://apo-opa.co/46dJB05
About Check Point Research:
Check Point Research provides leading cyber threat intelligence to Check Point Software customers and the greater intelligence community. The research team collects and analyzes global cyber-attack data stored on ThreatCloud to keep hackers at bay, while ensuring all Check Point products are updated with the latest protections. The research team consists of over 100 analysts and researchers cooperating with other security vendors, law enforcement and various CERTs.
About Check Point Software Technologies Ltd.:
Check Point Software Technologies Ltd. (www.CheckPoint.com) is a leading provider of cybersecurity solutions to corporate enterprises and governments globally. Check Point Infinity's portfolio of solutions protects enterprises and public organizations from 5th generation cyberattacks with an industry leading catch rate of malware, ransomware and other threats. Infinity comprises four core pillars delivering uncompromised security and threat prevention across enterprise environments: Check Point Harmony, for remote users; Check Point CloudGuard, to automatically secure clouds; and Check Point Quantum, to protect network perimeters and datacentres, all controlled by the industry's most comprehensive, intuitive unified security management; Check Point Horizon, a prevention-first security operations suite. Check Point protects over 100,000 organizations of all sizes.
Sony Electronics Releases the Alpha 9 III; The World’s First Full-Frame Image Sensor Camera with a Global Shutter System[i] Next Generation Alpha 9 III captures all decisive moments with up to 120 frames per second high-speed shooting, distortion-free and blackout-free images, flash sync at all shooting speeds and much, much more (SOUTH AFRICA, 14 NOVEMBER …
In a boost to South Africa's healthcare resilience, the first Phakamisa Sustainability and Innovation Summit has paved the way for more effective, efficient, and equitable delivery of high-quality healthcare across the country.
Hosted at the Embassy of Sweden, the first-of-its-kind summit focussed on prevention and early detection, capacity building and health equity, and optimising the use of innovation to build sustainable healthcare systems. The Summit delved into issues of growing concern, including noncommunicable diseases such as cancer, diabetes, and heart disease, which have increased dramatically in South Africa in recent decades. [1] Pre-eminent speakers came from across the healthcare ecosystem, including Deputy Minister of Health, Dr Sibongiseni Dhlomo, as well as representatives from businesses, patient groups, non-governmental organisations, and the United Nations.
To kick off the event, global pharmaceutical company AstraZeneca signed a partnership agreement with Rare Diseases South Africa, supporting the creation of a national registry for rare diseases and providing training and help for young patients and caregivers aged 18-30 affected by rare diseases. 1 in 15 South Africans is estimated to be affected by rare diseases, the collective name for more than 7,000 different conditions. The partnership will increase understanding of the burden of rare diseases in South Africa and improve equitable health care for those affected.
In addition, AstraZeneca also announced an expansion of its existing collaboration with Medsol AI Solutions, which deploys state-of-the-art Wi-Fi ultrasound probes to detect lesions at high risk of breast cancer in seconds. The AI (Artificial Intelligence) rapid detection app has already been rolled out in rural Melusi and Daspoort Poli Clinics in Tshwane to help with early disease detection. It will now be expanded to breast cancer screening programs at Tintswalo Breast Health Clinic, Groote Schuur Hospital Breast Clinic and Quadcare Clinic in Alexandra.
Pelin Incesu, Area Vice President, Middle East and Africa, AstraZeneca, stated, "In partnership with the government and other stakeholders, AstraZeneca is working tirelessly to strengthen South Africa's healthcare system by focusing on providing equitable access to care and medicines and exploring innovative technology that can detect disease at an earlier stage, improving patient outcomes. The Phakamisa Sustainability and Innovation Summit provides a platform to collectively explore new ways to prevent emerging threats to health like non-communicable diseases, to diagnose patients earlier and quicker, and to ensure all healthcare practitioners have the skills to deliver top-quality care to patients, no matter who they are or where they live.”
Dr Sibongiseni Dhlomo, Deputy Minister of Health, Republic of South Africa, said, “We are committed to delivering quality healthcare services for all South Africans, and that means working with partners across the public, private and third sector to ensure our health system is sustainable and resilient, able to meet current and future challenges. With non-communicable diseases rising, prevention, early detection, and capacity building are at the forefront of these efforts.”
Kelly Du Plessis, Rare Disease South Africa added, “These agreements are the next step in our mission to create a better tomorrow for the millions of South Africans who have been or will be, diagnosed with a rare disease or congenital disorder in their lifetime. The Phakamisa Sustainability and Innovation Summit is a fitting occasion to announce these partnerships, as improving care for those with rare diseases will help to strengthen our entire health system.”
[1] Republic of South Africa, Department of Statistics: https://apo-opa.co/47kDNCI. (Accessed November 2023)
Distributed by APO Group on behalf of AstraZeneca.
For media enquiries, please contact mediamea@astrazeneca.com
About Phakamisa:
Phakamisa is AstraZeneca's access to healthcare initiative in South Africa. Now in its 11th year, Phakamisa, which means “upliftment”, brings together different organisations and is helping to reduce the burden of non-communicable disease including breast cancer, prostate cancer, and lung cancer. The programme has reached over 1.63 million people through outreach activities led by community healthcare workers with over 19 700 women identified with breast issues (https://www.MyPhakamisa.com/).
About AstraZeneca:
AstraZeneca (LSE/STO/Nasdaq: AZN) is a global, science-led biopharmaceutical company that focuses on the discovery, development, and commercialisation of prescription medicines in Oncology, Rare Diseases, and BioPharmaceuticals, including Cardiovascular, Renal & Metabolism, and Respiratory & Immunology. Based in Cambridge, UK, AstraZeneca operates in over 100 countries, and its innovative medicines are used by millions of patients worldwide. Please visit Astrazeneca.com and follow the Company on Twitter (https://apo-opa.co/3QOeunc).
Telkom, a leading technology company in South Africa, is proud to announce the launch of the Telkom Transformation and Innovation Awards, set to take place on the 14th of November 2023. This ground-breaking event marks the beginning of an annual celebration, recognising Telkom’s pivotal role in supporting technology-driven start-ups within the South African ecosystem. The …
Cyber risks could derail the adoption of the Production Possibility Frontier Plenty of literature has been written about the challenges facing the South African economy and the fact that there are no immediate solutions to fast-track economic growth. The biggest challenges facing the South African economy are the Energy Crisis and the Logistics Crisis, a …
In today’s fast-paced business world, managing and streamlining document processes is a top priority for organisations of all sizes. With the advent of technology, traditional paper-based document management is becoming obsolete, making way for more efficient and secure solutions. Document Management Systems and Document Management Software have revolutionised the way businesses handle their documents, and …
This was the question on everybody’s mind at the AI Expo Africa 2023. The panel of experts included Bridget Chipungu from Center for AI Research, Hina Patel from Accenture, Celina Lee from Zindi, and Nicoli Koorbanally from Mlab. The discussion started with Bridget Chipungu giving an overview of the current state of women in AI. …
The integration of Drone and AI technologies has emerged as a transformative force, reshaping industries and fostering a future marked by enhanced safety measures and sustainable practices. This synergistic alliance offers a myriad of applications across diverse sectors, contributing to a technologically advanced and environmentally conscious landscape. One notable area where this collaboration excels is …
By Brendan Grady, General Manager, Analytics Business Unit, Qlik With the rapid rise in artificial intelligence (AI) and generative AI, enterprises who initially experimented with select AI use cases are now reimagining company-wide processes and strategies for how the business fundamentally operates. McKinsey estimates that in the enterprise, AI adoption has more than doubled since …
You’ve probably asked Siri, Alexa, or Google Assistant a question at least once. With voice search gaining popularity, it’s crucial that your website is optimised for this trend. But how can you make sure you’re getting the most out of this technology? How do you even start to structure your content or choose the right …
You’ve probably noticed that little padlock icon next to a website’s URL and wondered what it’s all about. It’s more than just an icon, it’s a sign of security – the result of something called SSL certificates and HTTPS. But what are they exactly? And why do they matter for SEO? Well, as you navigate …
Member of the Boomtown Brand Design team, graphic designer Michelle Conway-Cleaves, has designed her third Brands & Branding South Africa in a row – the hat-trick began with Brands & Branding 2021, continued with Brands & Branding 2022 and now, with the publication of Brands & Branding 2023, comes full circle. Boomtown typically briefs two …
Are you looking for ways to maximise the visual impact of your Google Display Ads in 2023? You’re in luck! This article outlines the latest innovations in ad placement, dynamic ads, responsive ads, video ads, interactivity, shopping ads, app ads, bidding strategies, and reporting & analysis. Get ready to take your Google Display Ads to …
Are you looking to scale business growth and stay ahead of the competition in 2023? Strategic digital marketing outsourcing could be the answer. By leveraging the expertise of professionals, you can increase efficiency, reduce costs, and analyse data like never before. Discover the benefits of outsourcing, how to assess providers, and potential pitfalls to look …
Are you looking to take your Google Ads audits to the next level? You’re in the right place! With precision and performance in mind, this article will help you master Google Ads audits in 2023. We’ll cover the benefits of auditing, the auditing process, analysing performance, structuring accounts, keyword strategies, ad copy optimisation, tracking & …
Organisations Recognise the Need to Blend Traditional and Generative AI and Incorporate Solutions that Enable Data Fabrics to Maximise AI’s Overall Impact Philadelphia, October 19, 2023 – Recent research by Qlik® shows that enterprises are planning significant investments in technologies that enhance data fabrics to enable generative AI success, and are looking to a hybrid …
Barcelona, Spain [October 18, 2023] Vertiv (NYSE: VRT), a global provider of critical digital infrastructure and continuity solutions, took centre stage at Canalys Forums 2023 as a Gold Sponsor and presenter, drawing insights from international experts on key trends like Artificial Intelligence (AI). Canalys Forums is a cutting-edge technology event that brings together industry leaders, …
Fintech players are expected to move quickly to harness the power of generative artificial intelligence (GAI) to improve their service offerings and remain competitive. But is the fintech sector fully aware of the risks that need to be managed at this turning point? The potential benefits of GAI for fintech firms are compelling. By relying …
Sony Unveils INZONE Buds – Truly Wireless Gaming Earbuds with the Industry’s Longest Battery Life[i], Advised by Fnatic INZONE Buds join the acclaimed INZONE range as its first truly wireless gaming earbuds, bringing the industry’s longest 12-hour battery life1 with less than 30ms low latency. Also introducing the lightweight INZONE H5 wireless headset and a …
JOHANNESBURG – October 13, 2023 – Closing the gap between data integration and business intelligence is key in allowing your business to make effective use of data and translate it into action. And trust in your data is vital, as outlined by global professional services network PwC, which says organisations that don’t trust their information …
At this year’s Eskom Expo International Science Fair, young scientists have reaped the benefits of their hard work and ingenuity, receiving full- and partial bursaries, cash prizes, laptops, tablet computers, and opportunities for work-based exposure during their school holidays. The fair was held at the Birchwood Hotel and OR Tambo Conference Centre in Boksburg from …
Cape Town / 1 October 2023 : – In a world where marketing is often seen as a mundane endeavor, Pulling Rabbits is here to change the game. Founded in 2023 amid the vibrant creative and cultural AI explosion in this innovative startup is anything but ordinary. Pulling Rabbits isn’t your typical marketing agency; it’s …
The allure of the tech industry, with its promise of innovation and dynamic growth, has many aspiring professionals keen to carve out a niche in software development. However, the path to securing a coveted role in a software development company can often seem labyrinthine, especially for newcomers. With the right strategies, though, this journey can …
