August 2016

Wednesday, 31 August 2016

Digital Divide: Emerging Economy Cyber Alerts - August 31, 2016

Policy

their legislation today could be yours tomorrow

The Law Ministry and Intellectual Property Office of Singapore (IPOS) has released a consultation paper in an effort to collect feedback regarding proposed revisions to its copyright laws. A Ministry statement acknowledged, “Technological developments in the past decade have led to immense changes in how copyrighted works are created, distributed, accessed, and used…This review seeks to ensure our copyright regime continues to provide an environment that benefits both creators and users.” Although VPN usage is not currently illegal in Singapore, this legislation could change that.

Chinese policy and foreign companies have a history of not getting along, so China has decided to take a new approach: the government invited technology companies such as Microsoft, Intel, Cisco and IBM to join in the process of drafting cybersecurity standards that will impact their businesses. What remains to be seen is how actively these foreign entities will be allowed to contribute to the conversation.

Privacy, Surveillance and Censorship

government isn't always on your side

Award-winning human rights activist Ahmed Mansoor recently received a text from an unknown number reading, “New secrets about torture of Emiratis in state prisons” that included a link. Had he clicked on it, he would have become the United Arab Emirates’ latest victim of a Pegasus spyware attack and given the government access to his phone conversations, texts, emails, contacts and camera. In response, Apple has issued a patch for the zero-day vulnerability that left Mansoor’s iPhone open to attack.

Research and Initiatives

making your world a more cybersecure place

United Arab Emirates-based Smartworld plans to launch the Middle East’s first Cyber Security Center. Said Smartworld chairman Dr. Saeed Al Dhaheri, “Smartworld is proud to partner with The Kernal for this unique initiative, which will cater to the rapidly-rising demand for cyber security and local talent in this area. With this initiative we reaffirm our commitment to support the UAE leadership’s vision to excel in every sphere.” The UAE is one of the world’s most targeted countries for cyberattacks and, specifically, spear phishing.

Cyberattacks

the threats we all face

Russian intelligence is suspected of launching cyberattacks against American reporters at the New York Times and other news organizations and also against organizations affiliated with the United States Democratic Party. The U.S. Federal Bureau of Investigation (FBI) has thus far declined to comment.

Looking Back

a new glimpse at old alerts

Previously, we reported on Singapore’s policy, beginning May 2017, to prevent public employees from accessing the internet at work. Since then, the decision to cut off the internet has been labeled extreme, excessive and even regrettable. In its defense, the government admits it is simply unable to otherwise secure its sensitive data.

All images credit of BOLDG/Shutterstock.com.

Want more emerging economy cyber alerts? Read on!

Want emerging economy cyber alerts sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).

Have valuable insight to share from your part of the world? Write for us!

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Tuesday, 30 August 2016

SumTips: 8 Countries Where Journalism Threatens Personal Safety

[Image credit: BOLDG/Shutterstock]

In 2016, 27 journalists have lost their lives for and while exercising their right to freedom of expression – and the year is far from over. 8 countries worldwide have already seen multiple journalists die this year:

Syria – 8 journalists killed

Ibrahim Omar of Al Jazeera Mubashar was killed by an air raid in July. It is believed that Russian warplanes were responsible for the attack on the war reporter.

Freelance cameraman Khaled Eissa died in June, a week after being injured by an improvised explosive device (IED). The attack was seen as an assassination attempt on also-present anti-government journalist Hadi Abdullah, who survived, but suffered injuries of his own.

Sami Jawdat Rabah (Syrian Observatory for Human Rights), Samer Mohammed Aboud (Free Deir al-Zour Radio; Development Interaction Network), Mustafa Abdul Hassa (Shaam News Network) and Mohammed Eissa (Nateq Network) were murdered by Islamic State militants in June 2016. Their crime was “working with media and nongovernmental organizations.”

Osama Jumaa of Images Live was attacked by government fire in June while traveling to report on a civilian rescue. He was 20 years old.

Majid Dirani of the Darayya Media Center died in February while filming a government attack on Damascus. Dirani had cofounded the Darayya Media Center, an organization committed to reporting local news.

Yemen – 4 journalists killed

Mubarak al-Abadi was killed by artillery fire while reporting on government/rebel fighting in August. Al-Abadi had served as president of the Nabaa Media Foundation, an organization that trained journalists and supported media coverage of local events.

Houthi rebels shot and killed Ahmed al-Shaibani of Yaman News and Yemen TV in February. At the time, he had been reporting on an attack on a factory.

Hashim al-Hamran of Al-Masirah TV died from injuries incurred during a Saudi-coalition airstrike in January. After his death, Al-Masirah TV published the video footage al-Hamran had taken of a previous airstrike.

Freelance journalist Almigdad Mojalli also died at the hand of a Saudi-coalition airstrike in January. He had been reporting for Voice of America at the time.

Iraq – 2 journalists killed

Hassan al-Anbaki and Saif Talal, cameraman and correspondent for Al-Sharqiya, respectively, were stopped, shot and killed in January while driving. The journalists were returning from a trip to report on bombings in Muqdadiyah.

Mexico – 2 journalists killed

Elidio Ramos Zárate of El Sur was shot and killed in June. Prior to the attack, he had reported on teachers’ union protests, where his life had been threatened.

Marcos Hernández Bautista of Noticias, Voz e Imagen de Oaxaca was also shot and killed in June. Hernández was known for his reporting on social issues such as poverty, education and politics.

Afghanistan – 2 journalists killed

David Gilkey and Zabihullah Tamanna of National Public Radio were killed by a rocket propelled grenade in June. It was the journalists’ first day with the Afghan army.

Turkey – 2 journalists killed

Zaher al-Shurqat of Aleppo Today was shot and killed by the Islamic State in April. His death marked the fourth Syrian journalist killed by IS in Turkey since October 2015.

Rohat Aktaş of Azadiya Welat was confirmed dead in February. He was shot while reporting on and assisting those who had been wounded during fighting between Kurdish separatists and Turks.

Libya – 2 journalists killed

Abdelqadir Fassouk of Arraed Satellite TV was shot and killed in July while reporting on fighting between government forces and the Islamic State. Colleague Yasin Khattab reflected, “His motive was always (finding) the truth and nothing more.”

Freelance photojournalist Khaled al-Zintani was killed by sniper fire in June while reporting in Benghazi. The gunman is suspected of being part of an Islamist militia.

India – 2 journalists killed

Rajdev Ranjan of the Hindustan was shot and killed outside his office in May. Asha Devi, Ranjan’s widow, believes the murder was prompted by her husband’s critical reporting of a particular lawmaker.

Karun Misra of the Jansandesh Times was shot and killed by three gunmen in February. The gunmen had been hired by mining contractors looking for retribution for Misra’s reporting on illegal mining.

Be safe, surf secure and stay Rando!

Want more SumTips? Read on!

Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Wednesday, 24 August 2016

Digital Divide: Emerging Economy Cyber Alerts - August 24, 2016

Privacy, Surveillance and Censorship

government isn't always on your side

First Zimbabwe began drafting a repressive Computer Crime and Cyber Crime Bill; now, the Postal Telecommunications Regulatory Authority of Zimbabwe (Potraz) has suspended data promotions from mobile phone operators including Econet, NetOne and Telecel. The decision is seen as an attempt to further limit online dissent.

Research and Initiatives

making your world a more cybersecure place

India has appointed its first chief information security officer (CISO) in a step towards better combating cybercrime and regulating cybersecurity. Experts have recommended also creating a National Cyber Security Agency (NCSA) as a way to assess and respond to cyberthreats; its development has yet to be seen.

The Department of Science and Technology (DST) of South Africa has invested R60 million in national cyber infrastructure, including big data facilities for research and business. The DST stated that it “believes cooperation of South African universities and research councils on such strategic matters is important for the country’s future. The big data revolution involves a transition in which data becomes a new resource for economic development, and success or failure depends on the capacity to manage and manipulate massive volumes of data in order to extract information.”

A Kaspersky Lab survey found the Philippines to be ‘averagely at risk’ of cyberthreats. Of note, 49% of Filipinos keep unused apps on their smartphones: “It is a dire error to leave apps with old software stocked on your devices because these applications have outdated programmes which may become a widely open door that cybercriminals can exploit easily,” warned Kaspersky’s Anthony Chua.

Cyberattacks

the threat we all face

Operation Ghoul, which utilizes spear phishing emails to steal intellectual property and business intelligence, has attacked 130 Middle Eastern organizations; 70% of these are located in the United Arab Emirates. Reported Kaspersky Lab’s Mohammad Amin Hasbini, “Unlike state-sponsored actors, which choose targets carefully, this group and similar groups might attack any company. Even though they use rather simple malicious tools, they are very effective in their attacks.”

Looking Back

a new glimpse at old alerts

A letter from 40+ business groups requesting the Chinese government to revise its drafted cyber rules has been answered: the Chinese Foreign Ministry has insisted that any pending legislation would not be used to “carry out differential treatment and will not create obstacles and barriers for international trade and foreign businesses investing in China.” Moreover, data transfers beyond China’s borders will continue to be allowed and will require a security evaluation.

All images credit of BOLDG/Shutterstock.com.

Want more emerging economy cyber alerts? Read on!

Want emerging economy cyber alerts sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).

Have valuable insight to share from your part of the world? Write for us!

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Tuesday, 23 August 2016

SumTips: 6 Ways Free Speech Shaped the 2016 Brazil Olympics

As the Olympic Summer Games began, a court ruling decided that it would be illegal for the International Olympic Committee or the Brazilian government to remove political protesters from the event. In defense of the decision, Eloisa Machado de Almeida of the Getulio Vargas Foundation argued, “You can’t use ‘keeping harmony’ inside the Olympic venues as a pretext for censorship in Brazil.” Be thankful for this decision, as the protests—political and otherwise—to emerge from this year’s Games have created waves that are far from over:

Marathon silver medalist Feyisa Lilesa finished his 26.2 mile race and accepted his medal with crossed arms over his head, an Oromo gesture used to protest the Ethiopian government. Lilesa has accepted that punishment is likely if he returns to Ethiopia: “The Ethiopian government is killing my people, so I stand with all protests anywhere, as Oromo is my tribe. My relatives are in prison and if they talk about democratic rights they are killed.”

When a penalty cost Mongolian wrestler Ganzorigiin Mandakhnaran the bronze medal, his coaches caused a scene of their own. Upon realizing the turn of events, a trip to the mat to congratulate Mandakhnaran quickly turned into one coach taking off his shirt and the other stripping down to only his underwear; the crowd shouted, “Mongolia!” as the coaches were escorted away.

Iranian activist Darya Safai attended a men’s Iran-Egypt volleyball match with a statement on the fact that she would be prohibited from attending such an event in her home country. Safai held a sign that read: “Let Iranian women enter their stadiums.” Her refusal to leave was enough to diffuse security’s attempt to remove her.

As soon as New Zealand’s Emma Twigg secured her spot in the women’s singles scull, she used her newfound platform to speak out: “After the race I put my hand up and protested, because I simply don’t believe we should be racing in an Olympic Games conditions like that. It was very tricky, today it was more about surviving and not falling out, which is a shame when you come to the Olympics and your first heat is about staying in the boat as opposed to putting it all on the line.” The conditions were enough to toss Serbians Milos Vasic and Nenad Benik into bacteria-infested waters.

American Black Lives Matter activists traveled to Rio de Janeiro to protest alongside Brazilians. “The most important thing that we can do is build together and mobilize our people to spread the word,” said Boston’s Daunasia Yancey. According to Human Rights Watch, ¾ of the 8,000 individuals killed by police in the state of Rio de Janeiro in the past decade have been black males.

As early as June, Brazilian police and firefighters stood at the Rio de Janeiro airport with a simple message: “WELCOME TO HELL: Police and firefighters don’t get paid, whoever comes to Rio de Janeiro will not be safe.”

The 2016 Summer Olympics may be over, but the spirit of protest they have inspired will live on. Speak your mind, surf secure and stay Rando!

Want more SumTips? Read on!

Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Tuesday, 16 August 2016

Digital Divide: Emerging Economy Cyber Alerts - August 16, 2016

Policy

their legislation today could be yours tomorrow

Zimbabwe is in the process of drafting a Computer Crime and Cyber Crime Bill aimed at limiting unwanted social media use: “According to the draft, any person staying either in Zimbabwe or overseas can be found [guilty] of intentionally generating, possessing and distributing an electronic communication with the intent to coerce, intimidate, harass, threaten, bully or cause emotional distress to another person.” The legislation would threaten jail sentences of up to five years.

Pakistan’s National Assembly has approved the Prevention of Electronic Crimes Bill 2015, which the government sees as much-needed protection from terrorist threats, but others view as a threat to freedom of speech itself: “The overly broad language used in the bill ensures that innocent and ignorant Pakistani citizens, unaware of the ramifications of what the bill entails, can be ensnared and find themselves subject to very harsh penalties,” said Nighat Daad, founder of Digital Rights Foundation.

Privacy, Surveillance and Censorship

government isn't always on your side

Nigerian blogger Abubakar Sidiq Usman was recently arrested by the Economic and Financial Crimes Commission (EFCC) for “offenses bordering on cyber-stalking”. Others view the act—the third such arrest since Nigeria’s Cyber Crime Act came into being in 2015—as a clear abuse of power.

Research and Initiatives

making your world a more cybersecure place

CyberSecurity Malaysia hosted a 10-day cybersecurity training for participants from Azerbaijan, Egypt, Indonesia, Jordan, Laos, Morocco, Nigeria, Oman, Pakistan and the Philippines. The training aimed to reinforce the Malaysian government’s efforts to promote technical cooperation and support self-reliance among developing countries and strengthen regional and sub-regional cooperation.

United States-based Netflix has transitioned from only using HTTPS encryption to protect user information to using HTTPS to also protect video streams. The online movie and TV show streaming service has more than 83 million users, representing all countries worldwide except China, North Korea, Syria and the territory of Crimea.

Nigeria has taken a new approach to cybercrime by setting up cybersecurity emergency response teams and a Cybercrime Advisory Council. Said Minister of Communications Adebayo Shittu, “In view of the critical nature of the economy and government activities, it is obvious that protection from different types of cyber and terrorist attacks is required. Our cyberspace is being exploited to aid radicalism and violent extremism and government have realised that those tasked with the responsibility to protect our cyberspace can no longer function within a framework of the past.”

46 business groups from Asia, Australia, Europe, Mexico and the United States have asked Chinese Premier Li Keqiang to revise drafted cyber rules that would allow for invasive government security reviews and would implement burdensome data residency requirements. “The current drafts, if implemented, would weaken security and separate China from the global digital economy,” read the groups’ letter.

Cyberattacks

the threats we all face

A Filipino bank was fined $21 million USD for its involvement in cybercriminal activity that took $81 million USD from Bangladesh’s central US Federal Reserve bank account and redirected it into Filipino casinos. The incident raises concern about both banking loopholes in the Philippines and a rise in bank cyberattacks in Bangladesh.

Looking Back

a new glimpse at old alerts

The Brazil Olympics were predicted to be a hotbed of cybercrime activity, which is already becoming a reality. August 5th's opening ceremonies coincided with distributed denial of service (DDoS) attacks from hacktivists Anonymous Brasil that took down 5 websites, including www.brasil2016.gov.br and www.rio2016.com. All eyes should be on Rio de Janeiro as these Games continue.

All images credit of BOLDG/Shutterstock.com.

Want more emerging economy cyber alerts? Read on!

Want emerging economy cyber alerts sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).

Monday, 15 August 2016

SumTips: 3 Cybersecurity Bills You Should Protest Now (and How)

Pakistan, Zimbabwe and Russia have been making headlines lately, and the news isn’t good. These three countries have all passed or are in the process of drafting legislation that will only threaten free speech and privacy online. Below are three recent pieces of cyber legislation along with contact information should you choose to express your concerns.

Pakistan – Prevention of Electronic Crimes Bill (PECB)
Pakistan’s National Assembly recently approved a Prevention of Electronic Crimes Bill (PECB), which has been criticized for poorly protecting sensitive data, using vague language that ultimately infringes upon free speech and instilling harsh penalties. Although passed, the legislation has yet to be implemented.
Contact the National Assembly of Pakistan - assembly@na.gov.pk

Zimbabwe – Computer Crime and Cyber Crime Bill
Zimbabwe is in the process of drafting a Computer Crime and Cyber Crime Bill aimed at limiting unwanted social media use, including that used “to instigate violence, banditry, sabotage and general instability”. Furthermore, the legislation would allow police to intercept private communications and search and seize devices. The government is also at work on an Electronic Transaction and Electronic Commerce Bill and a Data Protection Bill.
Contact Zimbabwe's Ministry of Information Communication Technology - info@ictministry.gov.zw

Russia – “Yarovaya” Surveillance Law
Russia’s “Yarovaya” surveillance law mandates data retention, enables government backdoors into encrypted communications and even requires citizens to report their suspicions regarding terrorist acts or face a penalty of jail time.
Contact Russian President Vladimir Putin (http://en.letters.kremlin.ru/), but be aware: “Personal data of those sending letters by email is stored and processed in accordance with the provisions of Russia’s law on personal data.”

Make your voice heard, surf secure and stay Rando!

Want more SumTips? Read on!

Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Tuesday, 9 August 2016

Digital Divide: Emerging Economy Cyber Alerts - August 9, 2016

Policy

their legislation today could be yours tomorrow

An Israeli bill to establish the National Cyber Authority as a cybersecurity umbrella organization is expected to be signed into law. The decision to create such a group stemmed from the realization that “There was no single body that had the exclusive ability to deal with the challenge [of cyberattacks] and commit itself to true cooperation between the different groups,” reported a legislative statement. Regardless, others have expressed concern that a civilian governmental body will be in charge of both civilian and military entities.

Hoping to avoid the pushback that followed the first draft of the National Encryption Policy, India has started working on a new draft that involves input from the Cellular Operators Association of India (COAI), the Association of Unified Telecom Service Providers of India (AUSPI) and the Internet Service Providers Association of India (ISPAI). Telecom Minister Ravi Shankar Prasad has promised, “There is no intention by the government to implement an encryption policy breaching right to privacy of public.”

Research and Initiatives

making your world a more cybersecure place

YouTube recently announced that 97% of its traffic is now encrypted with HTTPS and also that the United States-based video-sharing platform will continue to strive towards 100% encryption. YouTube’s announcement concluded with a word to the wise, “In the real world, we know that any non-secure HTTP traffic could be vulnerable to attackers. All websites and apps should be protected with HTTPS—if you’re a developer that hasn’t yet migrated, get started today.”

Singapore and the United States have signed a cybersecurity Memorandum of Understanding (MOU). Looking ahead, cooperation between the two countries will include information and best practice sharing; cyber-incident response coordination; joint cybersecurity exercises; cyber-capacity building collaboration; and cybersecurity awareness building activities.

Kenya, the African country with the highest vulnerability to cyber attacks, announced a decision to strengthen its efforts to prevent cyberattacks at a recent national cyber security conference: “The increased use and dependence on information technology has exposed the country and its citizens to premeditated security threats. We are on the lookout for adversaries who might exploit our networks to cause harm,” explained Cabinet Secretary for Defense Raychelle Omamo.

Cyberattacks

the threats we all face

Interpol and the Nigerian Economic and Financial Crime Commission have arrested a Nigerian national whose crime network is believed to have stolen $60 million USD via email scams and fraud. Responded Noboru Nakatani of Interpol, “Arrests like this are made possible by partnerships between members of the security community that come together with the common goal of making the Internet a safer place. [Business email compromise] scams are particularly difficult to combat due to their complexity, which is why public-private sector cooperation is essential.”

Panda Banker, a Zeus Trojan variant, has spread from banks in Europe and North America to Brazil. 10 Brazilian bank brands and multiple payment platforms have been targeted in attacks that only highlight an increase in collaboration between cybercriminals in Brazil and elsewhere.

Looking Back

a new glimpse at old cyber alerts

Despite previous reports to the contrary, VPN usage in the United Arab Emirates remains legal when used for economic and commercial purposes. When used for crime or fraud, however, VPN usage in the UAE will be punishable by imprisonment and/or fines of up to $545,000 USD.

All images credit of BOLDG/Shutterstock.com.

Want more emerging economy cyber alerts? Read on!

Want emerging economy cyber alerts sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).

Monday, 8 August 2016

SumTips: 7 Ways to Ensure a Cybersecure August Holiday

[Source: maxuser/Shutterstock.com]

It’s August, which for many means vacation time. Before you head off to a sandy beach or a cobblestone-strewn city, be sure to protect yourself from cybercriminals:

1.    Do not post your travel plans on Facebook, Twitter, Instagram or any other social media site. Doing so risks providing criminals with an opportunity to access devices left behind or invite themselves along on your adventures.

2.    Avoid links and attachments to travel and hotel coupons, as well as local travel websites. The offers may seem enticing, but too often viruses and malware are lurking beneath the surface.

3.    Don’t install mobile tour apps. Any apps beyond those offered in an official online store pose a security threat and leave your device accessible to hackers.

4.    Let your credit card companies know you are travelling. Give yourself a second set of eyes to watch for unexpected activity.

5.    Keep your device with you. Ideally, your smartphone should never leave your sight. However, if a dip in the pool makes such things impossible, store your device someplace secure, such as a hotel room safe.

6.    Minimize ATM and Point-of-Service transactions, especially with machines that appear to have been tampered with or disfigured.

7.    Avoid free, insecure public Wi-Fi. Hackers know to look for personal information wherever there is unprotected Wi-Fi (hotels, coffee shops and train stations). If you do use password-protected public Wi-Fi, be sure to login to your SumRando VPN as well.

Happy travels, surf secure and stay Rando!

Want more SumTips? Read on!

Want SumTips sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).

SumRando Cybersecurity is a Mauritius-based VPN, Web Proxy and Secure Messenger provider. Surf secure and stay Rando!

Thursday, 4 August 2016

Digital Divide: Emerging Economy Cyber Alerts - August 4, 2016

Policy

their legislation today could be yours tomorrow

Russia has followed up a surveillance bill requesting encryption keys from companies such as Facebook and Google with an even more drastic measure: developing the capability to collect backdoor keys regardless of company compliance. Although the exact procedure used remains unknown, the website of Russia’s Federal Security Service (FSB) promises that it is “a method necessary for decoding all received, sent, delivered, and chat conversations between users on messaging networks.” The response from affected companies has thus far been one of continued silence.

Privacy, Surveillance and Censorship

government isn't always on your side

The United Arab Emirates has banned any and all use of VPNs and web proxies in the country. Previously, VPN and proxy use was only punishable when employed for illegal purposes. Offenders under the new regulations face imprisonment and fines of up to $545,000 USD.

Turkey's practice of intercepting encrypted ByLock messages enabled the government to identify 40,000 followers of Fethullah Gulen, leader of July 15th's failed coup attempt, and is thought to have contributed to the rapid arrest of 18,000 individuals shortly thereafter.

iOS researcher Jonathan Zdziarski of the United States recently discovered a flaw in messaging service WhatsApp’s security: “Sorry, folks, while experts are saying the encryption checks out in WhatsApp, it looks like the latest version of the app tested leaves forensic trace of all of your chats, even after you’ve deleted, cleared, or archived them.” Zdziarski’s revelation confirms that even deleted WhatsApp chat logs could be accessed by law enforcement or those with access to a user’s device.

Researchers at the United States’ Michigan State University created a prosthetic replica of a fingertip in an effort to support a government attempt to unlock a murder victim’s fingerprint-protected smartphone. Amidst growing privacy concerns, Professor Anil Jain defended his contribution: “We are not in the attack business. The 3D printing technique we developed is meant for calibrating fingerprint sensors, not nefariously unlocking someone’s phone without their knowledge…We are doing our social duty to assist in a criminal investigation.”

Research and Initiatives

making your world a more cybersecure place

United States government officials are training 100 Nigerian investigators, prosecutors, judges, legislators and policy makers on the implementation of Nigeria’s cybercrime law. Said U.S. Charge d’Affaires Maria Brewer, “I commend Nigeria for accomplishing the first and most important of these steps by passing the Cybercrime Act of 2015, which incorporated recommendations from the U.S. and the UK.” The Act has previously been criticized for its infringement upon freedom of expression and privacy.

Cyberattacks

the threats we all face

Saudi Arabia has the highest number of fixed broadband Internet subscribers in the Arab world, but is also the Middle East’s number one recipient of cyberattacks, with over 160,000 per day in 2015. The government has been criticized for taking an ad hoc approach to cybersecurity and not yet implementing 2013’s National Information Security Strategy.

South Korea believes North Korea’s spy agency has hacked an online shopping site in a breach that compromised the personal records of approximately 10 million shoppers. The attack was followed with a demand for money via bitcoin, but the request was refused. Days later, South Korea also accused North Korea of hacking into the emails of foreign, defense and unification ministry officials.

Iranian hackers known as Rocket Kitten have compromised a dozen Iranian Telegram messaging accounts and 15 million user phone numbers. The end-to-end encrypted service uses SMS messages to activate new devices, which are interceptable by phone companies and hackers. Researchers warn that similar attacks could occur wherever governments and cellphone companies are intertwined.

All images credit of BOLDG/Shutterstock.com.

Want more emerging economy cyber alerts? Read on!

Digital Divide: Emerging Economy Cyber Alerts - July 14, 2016

Want emerging economy cyber alerts sent to your inbox? Sign up for our weekly newsletter ("Security Tips and News" at bottom of page).