Kenyan sites at risk

SECURITY

|
Image: By BiztechAfrica
Kenyan sites at risk

By Semaj Itosno, Nairobi, Kenya

Use of free software without customization is exposing Kenyan websites to hackers.

A new report by Serianu, an IT security consulting firm, has revealed that more than 80% of local websites are built on open source software such as Wordpress, Joomla, Apache and MySQL whose security codes are available online for free.

According to William Makatiani, the managing director at Serianu Ltd, Government websites and banking institutions remain the most vulnerable targets since most of their website are developed externally but they rarely do a check on their security settings or update them.

“During our research, we came across a credit card shop that was selling credit card data issued by banks located in Kenya,” said Makatiani.

The study was done between the months of January and April this year and lists bank accounts, credit and debit card details as the most looked for data by cyber criminals.

Online fraud has been growing steadily in Kenya and commercial banks are estimated to lose Sh3 billion to cyber criminals annually.

Makatiani said unlike other proprietary software whose codes are only available to the vendor and the client, open source software source code is available to the general public for use and/or modification from its original design free of charge.

This provides an opportunity for cyber criminals to send software that has the ability to access computers and steal vital information such as business strategies or business plans, or confidential information from banks, insurance and telecommunication firms. 



Share the News

Get Daily Newsletter

comments powered by Disqus

MORE SECURITY NEWS

Safe Deposit: Defeating cyber-attacks against banks

With online heists once again hitting the headlines, how should banks and their customers protect themselves against similar attacks?  Read More

Large organisations gear up to address aggressive cyber-security business disruption attacks

Although the frequency of a cyber-security attack on a large scale is low, by 2018, 40 per cent of large organisations will have formal plans to address aggressive cyber-security business disruption attacks, up from none this year, says Gartner. Read More

Identity and access management trends for 2015

CA Technologies has identified five key trends for security and identity and access management (IAM) that will impact organisations and security professionals in 2015 as they compete in the application economy.  Read More

Leading newspaper site hacked

Botswana is seeing unprecedented cases of internet hacking with one of the latest attacks targeting one of the country’s leading private newspapers, Mmegi. Read More

Senegal hit by wave of cyber attacks

Senegal has been hit by a wave of hackings in the past two weeks, two of which hit the popular news website Seneweb.com and ADIE. Read More

Cyber attacks may get more virulent, Cisco, Kaspersky warn

Cyber attackers are using more subtle methods to infiltrate corporate networks with the aim of stealing vital information or simply causing mayhem. This is according Kaspersky Lab and Cisco, who say IT security experts should up their game in educating users how to ward off potential attackers. Read More

SIM box task team steps up successes with help from ICT firm

Ghana’s efforts to crack down on SIM boxing fraud have been given a boost by the efforts of Subah Infosolutions Ghana Limited, which now partners with the authorities in the fight against this crime. Read More

Software vulnerability led to Ghana govt site hack

A software vulnerability and failure to update software led to the hacking of some websites on the government of Ghana’s official portal. Read More

CBN issues directive on two factor authentication for internal banking processes

The Central Bank of Nigeria has issued a directive requiring all deposit money banks (DMBs) to implement two factor authentication for internal processes this year. Read More

SA: 57% could not recover money stolen in online fraud

A recent survey conducted by Kaspersky Lab and B2B International found that more than half of those respondents in South Africa who lost money in fraudulent online transactions did not get all – or sometimes any – of their funds back. Read More

PRESS OFFICES

Sage ERP AfricaSAP AfricaSage Pastel AccountingTrust PayVMWareSamsung ElectronicsMitsumi DistributionPhoenix DistributionMTN BusinessSchneider ElectricMultichoiceMicrosoft 4Afrika

FEATURED STORY

Malawi Govt denies clinging to ‘Cashgate’ softwareMalawi Govt denies clinging to ‘Cashgate’ software

The Malawi Government will not exclude the software brand that has been in use for the country’s Integrated Financial Management System (IFMIS), but it has rejected reports implying that it is ‘clinging’ to the old system.

IN DEPTH

Kenya’s digital TV battle hots up Kenya’s digital TV battle hots up

Kenya’s journey to Digital TV broadcasting took a new turn this week, when the Communication Authority of Kenya (CAK) accused three local media firms of intent to disrupt the process.

COMPANY NEWS

MTN demonstrates the benefits of its video on demand offering

MTN showcased the benefits of FrontRow when it streamed high bandwidth video content onto multiple mobile devices using its video on demand (VOD) offering.

VMware appoints Bask Iyer as chief information officer

VMware has announced the appointment of Bask Iyer to the role of senior vice president and chief information officer (CIO) of VMware.