Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.

Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire 24.com network.

Facebook Sign-In

Hi News addict,

Join the News24 Community to be involved in breaking the news.

Log in with Facebook to comment and personalise news, weather and listings.


Malvertising stalks World Cup mobile apps

26 June 2014, 07:35Duncan Alfreds, Fin24

Cape Town - As the 2014 FIFA World Cup heads into second round, cyber criminals are upping the ante with "malvertising" - malware that is injected into mobile applications.

The global showcase has been the ideal venue for hackers to test their skills as people rush to download apps related to soccer, the teams and players.

"It is very difficult for normal people to distinguish between malware and advertising. Any software that automatically renders advertisements in order to generate revenue or accomplish some kind of goal is called Adware or Advertising-Supported Software," Andrew Kirkland, Trustwave regional director for Africa told Fin24.

The company specialises in software security threats and uncovered a number of applications that could be injected with malware on popular smartphone platforms.

"Malvertising (malicious advertising) affects mobile applications. It is very common in the applications stores of the various mobile phones to have application with a free and paid version, where the free versions normally contain the advertising. This advertising is vulnerable to Malware injection just as it would be on a normal computer," Kirkland added.

Original source

Cyber criminals can operate from any location in the world, and though Trustwave recently found that the US servers host the overall majority of malware globally, it is unclear what the original source of the malware is.

"It all depends on what the malware did and how easy it is to re-create the attacker's steps. It is best to do some forensic analysis and determine exactly what happened, not only will that give you a very good idea where the malware came from but also it will prevent the same breach from happening again," Kirkland explained.

Cyber criminals are making serious efforts to inject malware into popular applications and platforms. (Duncan Alfreds, Fin24)

Security company Kaspersky Lab recently unveiled an Android malware called Svpeng that has turned its attention to English speakers.

Once activated, the malware is able to lock people out of their mobile devices and demand payment through accounts that are difficult to trace.

"It is impossible to repel an attack of American Svpeng if a mobile device doesn't have a security solution - the malware will block the device completely, not separate files as Cryptolocker did. If it happens to you, you can do almost nothing," said Roman Unuchek, senior malware analyst at Kaspersky Lab.

Kirkland warned that corporates faced an acute threat from users who unwittingly or otherwise downloaded malware on to company servers.

"The business must prepare for the onslaught of malvertising by installing anti-malware gateways that sit between users and the internet to prevent corporate malware infections and data loss. The risk of infection through employees accidentally falling victim to a malware attack is too great for any business to not be ready for whatever is thrown their way."


Cyber criminals have a modus operandi of using major events like the World Cup or the disappearance of Malaysian flight ML370 to lure people to install malware on computers and now, even smartphones.

"It is up to the user to make sure they use the latest browser, for example, that would include the latest security advances that can make attacks more difficult. Other programs like Adobe Flash Player and Adobe Reader also needs to be kept up-to-date as they have vulnerabilities that can be exploited," advised Kirkland.

He said that it was virtually impossible for the organisers of major events to plan defences around cyber exploitation.

"It is very difficult for the organisers to play a part in preventing malware from being injected into their advertisements as the injection happens on the users' device."

- Follow Duncan on Twitter


Read News24’s Comments Policy

Comment on this story
1 comment
Comments have been closed for this article.

Read more from our Users

Nigeria @ 56: Words to my green f...

A leader’s job is not to dictate, but rather to be respected, admired and be a trustee, of the land we love, with so much potential, a land which should be freer than free. Its still a long way to fufilling our destiny! Read more...

Submitted by
Isaac Asabor263
Recession: An opportunity for Nig...

The recession should be seen as an opportunity for the country’s promotion as long as we all collectively conduct ourselves in a patriotic manner, writes Isaac Asabor.  Read more...

Submitted by
Black and White

We want to imitate the whites in everything because we are ignorant of our inherent originality and content. We spend all our Naira to acquire his inventions because we so oblivious of our natural endowments that we allow him have it for free. Read more...

Submitted by
Nate Nat
Adamawa State University Mubi: A ...

ADSU integrity forum has accused the Sunday Joshua Wugira, a lawyer, of adopting unorthodox tactics by abusing his privilege by attacking the integrity of ADSU Vice Chancellor Dr. Moses Zira Zaruwa, writes a News24 reader. Read more...

Submitted by
Abdulsalam Jubril
My Country Nigeria (Part One)

Poetry by Abdulsalam Jubril.

Submitted by
Abdulsalam Jubril
Recession, dearth in leadership a...

Every leader has the opportunity to become great and making himself immortal in the lives and hearts of people for generations to come. Will Mr. President seize this opportunity?, questions Abdulsalam Jubril. Read more...