SHUTMA ZA UJASUSI MTANDANO DHIDI YA UCHINA

KWA UFUPI: Australia, Marekani na Uingereza zimeitupia lawana nchi ya Uchina kuhusika na ujasusi mtandao katika mataifa yao na mataifa Rafiki – Shutma ambazo zime eleza uchina kuhusika na wizi wa taarifa za siri za kibiashara za serikali na makampuni ya Teknologia.

---------------------------

Niliwahi kueleza mara kadhaa mwelekeo mpya na hatari wa Uhalifu mtandao ambapo nilitahadharisha kuhusiana na vita mtandao (Cyber Warfare) pamoja na Ujasusi Mtandao (Cyber Espionage) ambavyo kwa sasa mataifa makubwa yanawekeza zaidi kwenye matumizi ya teknolojia kudhuru na kuingilia mataifa mengine kimtandao.

Kundi la APT-10 la uchina limeshutumiwa na Uingereza na Marekani kuingilia makampuni takriban 45 ya Teknolojia, Taarifa za wafanyakazi takriban laki moja za wanajeshi wa majini wa marekani pamoja na computer mbali mbali za shirika la NASA.

#Infosec #Cybersecurity - - - Australia has joined The US and UK to accuse China of attempts to steal data through #cyberattacks

— YUSUPH KILEO (@YUSUPHKILEO) December 21, 2018

Zhu Hua pamoja na Zhang Shilong, ambao ni raia wa Uchina wameshtakiwa na Marekani kuhusika na kufanya mashambulizi mtandao kwaniaba ya wizara ya ulinzi ya uchina (Chinese Ministry of State Security) – Naibu Mwanashria mkuu wa Marekani , Bwana  Rod Rosenstein alielezea shutma hizo.

U.S SENATORS URGE FTC TO INVESTIGATE SMART TV PRIVACY CONCERNS

IN BRIEF: Two US senators Edward Markey (D-MA) and Richard Blumenthal (D-CT) have sent a letter to the Federal Trade Commission (FTC) requesting the agency to investigate smart TV makers amid fears and evidence that companies might be using devices to collect data and track users without their knowledge.

----------------------------------------------------

The open letter comes while smart TV advancements have "ushered in a new era of innovation and interactivity," they must not come at the expense of consumer privacy. "Televisions have entered a new era, but that does not mean that users' sensitive information no longer deserves protection," the senators said. "The content consumers watch is private, and it should not be assumed that customers want companies to track and use information on their viewing habits."

They said that, any company that collects this type of information should have to "comprehensively and concisely detail who will have access to that data, how that data will be used and what steps will be taken to protect that information," and added that consumers should have the opportunity to consent to that sort of data collection.

Senators Edward Markey  and Richard Blumenthal

TO JUSTIFY THEIR ALARMING LETTER.

The two senators cited a recent New York Times report about Samba TV, a vendor of smart TVs. According to the report, while

NAMNA BORA YA KULINDA VIFAA VYA TEHAMA VYA WATOTO

KWA UFUPI: Kutokana na ukuaji wa teknolojia pamoja na muunganiko wa vitu vingi katika mtandao (IoT) vifaa vingi vya watoto vimekua mhanga mkubwa wa uhalifu mtandao – Hii imepelekea kuchukuliwa kwa hutua mbali mbali za kulinda watoto mitandaoni. Andiko hili lina angazia namna bora ya kulinda vifaa vya watoto vya TEHAMA.

-----------------------------------------

Kumekua na matukio kadhaa yaliyo husisha kuingiliwa kimtandao (kudukuliwa) kwa vifaa vinavyo tumiwa na watoto huku wahalifu mtandao wakiunda program tumishi zenye nia ovu ya kukusanya picha na sauti za watoto.

Mfano, kampuni ya V-Tech ambayo inatengeneza vifaa vya TEHAMA vya watoto Ilipata kudukuliwa na wahalifu mtandao ambapo taarifa nyingi za watoto zilijikuta mikononi mwa wahalifu mtandao.

Shirika la umoja wa mataifa linalo husiana na TEHAMA (ITU) limekua na kampeni maarufu ya Kuwalinda watoto mtandaoni – Child online protection (COP) ambayo imeongezewa nguvu na Kampeni nyingine ya wanausalama mtandao ijulikanayo kama siku ya usalama mtandao “Safer internet day” ambazo kwa pamoja zinatoa msaada ingawa kuna kila sababu kwaa wazazi nao kuchukua hatua kuwalinda watoto wao kimtandao.

RISING SHIELD AGAINST RANSOMWARE ATTACKS

IN BRIEF: Both Atlanta’s network and Roseburg schools suffered with Ransomware attacks recently. These are two examples among many ransomware attacks facing organisations across the globe. This writing will provide three basics advise on how individual and organisations can fight against ransomware attacks.

--------------------------------------------

Early this year 2018, Secureworks published a report titled “SamSam Ransomware Campaigns,” which noted that the recent attacks involving SamSam have been opportunistic, lucrative and impacted a wide range of organizations.

On March 22 this year (2018), The city of Atlanta (GA) employees were ordered to turn off their computers to stop a virus from spreading through the network and encrypting data. A cybercriminal group demanded that the city pay it about $51,000 in bitcoins — a crypto currency that allows for anonymous transactions online.

Federal agents advise the city not to pay ransomware because paying will not be an assurance of the solution to the city’s problem – The city then refuses to pay ransom to cybercriminals.

MAABARA YA UCHUNGUZI WA MAKOSA YA DIGITALI

KWA UFUPI: Andiko hili litaangazia walau kwa mukhtasari mambo muhimu ya kuzingatia wakati wa kuanzisha/ Kujenga maabara ya uchunguzi wa makossa ya digitali itakayo weza kufanikisha uchunguzi wa makossa hayo.

-------------------------------------------

Maabara ya uchunguzi wa makossa ya digitali situ inahitajika katika ngazi ya kitaifa bali pia makampuni yanaweza kuwa nayo ili kuweza kutafuta majibu ya uhalifu mtandao unaoweza kujitokeza.

Mataifa mengi yamejielekeza kwenye kujenga na kuongezea nguvu/uwezo  maabara maalum za uchunguzi ma makossa ya digitali – Nilipata kuzungumzia kwenye andiko linalosomeka “EGYPT LAUNCHES NEWDIGITAL FORENSICS LAB”  hatua ya Nchi ya misri kuzindua maabara ya kisasa ya uchunguzi wa makossa ya digitali.

FACEBOOK REMOVES MALICIOUS ACCOUNTS

IN BRIEF: Facebook Inc has removed several malicious accounts and pages that advertised and sold social security numbers, addresses, phone numbers, and alleged credit card numbers of dozens of people and it will continue to do it if so needed.

----------------------------------------

Facebook spokesman assured to remove Posts containing information like social security numbers or credit card information on Facebook when Facebook becomes aware of it.

Facebook has also deleted almost 120 private discussion groups of more than 300,000 members, after being alerted by a report from journalist Brian Krebs that the groups flagrantly promoted a host of illicit activities, including spamming, wire fraud, account takeovers, and phony tax refunds.

The biggest collection of groups banned were those promoting the sale and use of stolen credit and debit card accounts, and the next largest collection of groups included those facilitating takeovers for online accounts such Amazon, Google, Netflix, and PayPal.

A Google search still pulls up a few public Facebook posts that offer to sell personal details including credit card numbers.

KENYA: WAKUU WA TEHAMA WAKUTANA

KWA UFUPI: Wakuu wa vitengo vya TEHAMA wamekutana kujadili changamoto na namna nzuri ya kuzitatua changamoto hizo katika vikao vilivyo kamilika Nchini Kenya.

-------------------------------

Watunga sera na sheria mbali mbali wamekua wakifanya maamuzi ya TEHAMA bila kushirikisha wadau wa TEHAMA – Hii imekua moja ya changamoto inayo leta mkinzano wa utendaji wenye manufaa kwa wana TEHAMA maeneo mengi barani Afrika.

Mjadala ulioangazia umuhimu wa udhibiti na uangalizi wa watendaji katika sekta ya TEHAMA umeonekana kua mzuri ila umegubikwa na changamoto kadhaa kutokana na ushirikishwaji mdogo wa wadau ili kuweza kuleta mabadiliko kwenye sekta husika.

Mjadala huu umejadiliwa kufuatia kuwepo kwa sera mpya nchini Kenya itakayo rasimisha Wana TEHAMA na kuwataka watambulike kabla ya kuweza kuhudumu maeneo mbali mbali. Hili litafanana na tulicho nacho nchini Tanzania kwa wanasheria pamoja na wataalam wa maeneo mengine kadhaa.

MOROCCO TO HOST CYFY AFRICA 2018

IN BREAF: Morocco will be hosting this year CyFy Africa where experts and practitioners from around the globe expected to discuss the future the technology holds for the Continent. CyFy Africa comes at a time when the world’s attention is centered on Africa’s rise towards becoming the next digital superpower.

----------------------------------------

Cyber Security and Global Stability, Data Security ,Securing the Future of Africa’s Mobile Market, A Normative Framework for African Cyberspace: Lessons from the AU Convention on Cybersecurity and Personal Data Protection (AUCC) are among the key agenda that will be discussed during this year event.

Other agenda are Human Rights in the Digital Age, The Future of Entertainment, Online youth investment: Successes, opportunities and challenges and Internet Capacity‐Building for Development 

I expect to join other cybersecurity expert and practitioners to address delegates during CyFy Africa 2018 event.

-----------------------------

NEWS UPDATES: The JUTA Cyber Crime and Cyber Security Bill Pocket Book will be launched during the Lex-Informatica Annual SA Cyber Law & ICT conference 2018 in Johannesburg south Africa – The theme of the event is “Cyber Law in ICT Review”.

I’ll be joining other experts to discuss and enlightening delegates on keys issues people are facing in the world through topics like Cyber Crime, Cyber Security, Digital Forensics, Data Breach, Data Protection, Social Media Law, POPIA to mention a few.

-----------------------------

TASKRABBIT YAKIRI KUDUKULIWA

KWA UFUPI: TaskRabbit imekua muhanga wa uhalifu mtandao – IKEA, Imethibitisha. Hii ni katika muendelezo wa Programu tumishi (Applications) na huduma zingine za kimtandao kuingiliwa na wahalifu mtandao ambapo taarifa za watu zimejikuta katika mikono isiyo salama.

---------------------------------

TaskRabbit iliyo anzishwa mwaka 2008 na Bi. Leah Busque iliyokua na madhumuni ya kutoa ajira zisizo rasmi kwa watu ambapo ilinunuliwa na IKEA mwaka 2017. Imekua ikitoa huduma zake kwa kujitegemea ndani ya mjumuiko wa makampuni ya nayo milikiwa na IKEA.

Program tumishi hiyo imekua ikitumiwa Zaidi na Raia wa Uingereza na maeneo mengine kujitafutia ajira zizizo rasmi kama kazi za ndani, kazi za bustani na nyinginezo ambapo wateja wa program tumishi hiyo na huduma za kimtandao zinazo shabiana na program tumishi hiyo imekua ikikusanya taarifa za watafuta ajira na wanao tafuta wakuwafanyia kazi hizo.

Mjadala wa wanausalama mtandao umeeleza taarifa binafsi nyingi za wateja zimekua zikikusanywa na sasa zimeingia mikononi mwa wahalifu mtandao. Prorgram tumishi pamoja na tovuti zimefungwa kwa muda kufuatia tukio hili.

EGYPT LAUNCHES NEW DIGITAL FORENSICS LAB

IN BRIEF: The Government of Egypt has announced that it is setting up a specialized digital forensic lab for Intellectual Property as part of its enforcement schemes of combating software piracy.

---------------------------------------

The new lab, the first of its kind in the MENA region, is mainly designed to resolve business software and internet-based piracy cases. It authentically recovers data from digital devices and unearths new fraud techniques.

#Infosec During the concluded Intelligence strategies & crime prevention for law enforcers meeting held in #SouthAfrica - Among others, I emphasized on search warrant, Chain of custody, to document everything during #forensics investigation & Proper handling of #Digital evidences pic.twitter.com/TFUt2HvDA8

— YUSUPH KILEO (@YUSUPHKILEO) March 9, 2018

The latest measures applied aim to enhance the investigative capabilities and ease the digital forensic evidence acquisition, analysis, and reporting.

URUSI YAKANA KUISHAMBULIA KIMTANDAO UJERUMANI

KWA UFUPI: Mifumo ya kimtandao katika baadhi ya wizara za serikali ya Ujerumani ilikumbwa na udukuzi uliopelekea kuibiwa kwa taarifa kadhaa huku baadhi ya vyombo vya habari vimeishutumu Urusi dhidi ya shambulizi hilo la kimtandao. Nae waziri wa Ujerumani wa maswala ya uchumi akieleza hawana uhakika kua Urusi imehusika na shambulizi hilo. Aidha, Urusi  imekana kuhusika na shambulizi hilo.

------------------------------------------

Mataifa makubwa yenye uwezo wa kimtandao yamekua yakishutumiana panapo tokea mashambulizi mtandao kwenye mataifa hayo. Urusi, Uchina na Korea ya Kaskazini wamekua wakishtumiwa Zaidi na mataifa ya Ulaya na marekani.

---------------------

TAARIFA: Tume ya TEHAMA ya nchini Tanzania imekaa kikao chake cha kwanza mahsusi kujadili maswala ya usalama mtandao Nchini ambapo mengi yalipata kuangaziwa na lengo kuu limekua ni kuhakiki tunapata taifa salama kimtandao.

---------------------

Ujerumani Hivi karibuni imekumbwa na shambulizi mtandao katika wizara zake mbili hadi sasa ambao umepelekea taarifa kadhaa za wizara hizo kupotelea mikononi mwa wahalifu mtandao.

INVESTIGATION ON WINTER OLYMPICS CYBER-ATTACK HAS BEGUN

IN BRIEF: Following the cyber-attack on Winter Olympics, security teams and experts from South Korea's defence ministry, plus four other ministries, formed part of a taskforce investigating the shutdown.

----------------------------

The official Winter Olympics website was taken down after being hit by a cyber-attack (Denial Of Service attack, DOS), officials have confirmed.

The site was affected just before the beginning of the opening ceremony in Pyeongchang, South Korea.

Internal internet and Wi-Fi systems crashed at about 7:15 pm (1015 GMT) on Friday, though operations were restored about 12 hours later - Games organisers said.

However, a spokesman said that the International Olympic Committee would not be commenting on who might have been behind the incident.

ANGALIZO KWA MABENKI DHIDI YA UHALIFU WA ATM JACKPOTING

KWA UFUPI: ATM jackpotting imgonga Hodi Nchini Marekani ambapo imesababisha upotevu mkubwa wa fedha zinazo kadiriwa kuzidi kiasi cha Dola milioni moja hadi sasa.

----------

Kumekua na aina nyingi za uhalifu mtandao unaolenga mashine za ATM ambao umekua ukiathiri mabenki mengi maeneo mengi duniani.

Mataifa ya Afrika yamesha kumbwa na changamoto za uhalifu katika mashine za ATM kama vile “card skimming” ambapo wahalifu mtandao mara kadhaa wamekua wakiripotiwa kughushi kadi za ATM zilizopelekea upotevu wa fedha kupitia mashine za ATM.

“LEBANON IS BEHIND DATA-STEALING SPYWARE“ - EFF UNCOVERED

A security bug that has infected thousands of smartphones has been uncovered by campaign group the Electronic Frontier Foundation (EFF).

Working with mobile security firm Lookout, researchers discovered that malware in fake messaging designed to look like WhatsApp and Signal had stolen gigabytes of data.

Targets included military personnel, activists, journalists and lawyers.

Researchers say they traced the malware to a Lebanese government building.

The threat, dubbed Dark Caracal by the researchers, looks as if it could come from a nation state and appears to use shared infrastructure linked to other nation-state hackers, the report said.

APPLE YAKIRI KUATHIRIWA NA “MELTDOWN" PAMOJA NA "SPECTRE”

Ugunduzi wa mapungufu makubwa mawili yaliyopewa jina la “Meltdown na Spectre” yaliyoathiri Kifaa cha Kopyuta kinachojulikana kwa jina la“Chip”  ambapo athari zake ni kupelekea wizi wa taarifa kwa watumiaji mtandao umeendelea kuchukua sura mpya baada ya kampuni ya Apple kukiri kua bidhaa zake ikiwemo Komputa za Mac, iPhone na iPads kuathiriwa pia.

Hadi wakati huu ma bilioni ya kompyuta, Simu za mkononi “smartphones” na Tabiti “Tablets” zimeathirika na mapungufu haya ambapo kuna hatari ya taarifa za mabilioni ya watu kuweza kuishia mikononi mwa wahalifu mtandao endapo hatua stahiki kutochukuliwa kwa wakati.

A set of security #Vulnerabilities known as #Meltdown& #Spectre that affect modern computer processors has been discovered - Exploitation of these vulnerabilities could allow an attacker to obtain access to sensitive information. We Call Upon users to Apply appropriate patches.

— YUSUPH KILEO (@YUSUPHKILEO) January 5, 2018

Tayari hatua mbali mbali zimeweza kuchukuliwa kuzuia maafa makubwa kujitokeza kutokana na mapungufu yaliyo gunduliwa ikiwa ni pamoja na kusambaza viraka “Patches” ili kuziba mianya ya mapungufu yaliyo gundulika.