The use of spreadsheets in accounting and finance departments has vastly improved data analysis and enabled fast and accurate reporting, computing and information storage. Life without them is almost unthinkable. However, danger lurks within and although the use of macros in Excel to automate processes can enhance efficiency, macro malware can put your entire business at risk says Ryan Mer, Managing Director of eftsure Africa, a Know Your Payee™ (KYP) platform provider.

 

Macro malware was fairly common several years ago because macros ran automatically whenever a document was opened. Microsoft has disabled macros by default in recent versions of Microsoft Office. However, Business Email Comprise (BEC) attacks are on the rise, adding an additional layer of risk of spreadsheets being manipulated or fictitious ones being used as a mechanism to inject malware into existing systems. Business Email Compromise remains a threat to any organisation and its clients. In South Africa there is case precedence for firms being held liable for payments that did not reach the intended recipient; a situation that demands email correspondence containing bank details and personal information on Excel spreadsheets be handled with caution.

 

Macros allows staff in finance and accounts payable teams to automatically run tasks that are executed repeatedly. It can record the steps you take when performing a particular task in an Excel file. When run, the macro automatically executes your key strokes and mouse clicks, and can repeat those steps as many times as you want.

 

Cybercriminals have been using macros as a vehicle to automatically and secretly execute malware whenever the macro runs. Unlike a traditional phishing attack, which requires someone to actively click on a dangerous link or open a dangerous attachment to run malware, macro malware do not require anyone to actively click or open anything. This makes them particularly difficult to detect and stop.

 

“Senior managers should be viewing cybersecurity as a business problem and not just a technology problem. In reality, cybersecurity is very much a business consideration”, notes Mer.

 

Understand the danger

Microsoft Office files that have a macro in them have a different file extension to indicate that they have an embedded macro. A normal modern Word document is a .DOCX file, but if a macro is added to the file it is saved as a .DOCM file. The same goes for a modern Excel workbook that is a .XLSX file, but if there are macros in them the Excel file becomes a .XLSM file. A macro virus could be stored in macros within a Microsoft Office file such as a document, presentation, workbook, or template. Hackers can create and attach macros to any of these files to run arbitrary commands.

 

In many cases, employees in accounts payable teams use spreadsheets for certain functions that are repeated every month, such as listing all the outstanding invoices the company must pay. In such situations, it makes sense to create macros to automate the process.

 

It is advisable to enable macros only to staff members who regularly use them. Given the efficiency benefits of macros for accounting teams, it is likely that many in accounts payable teams will opt to enable macros in their Excel spreadsheets. Mer says many organisations also still rely on manual processes, which in turn, have numerous gaps. This offers opportunities to cybercriminals to use macro malware to compromise certain payment functions.

 

“eftsure identifies errors, fraud and scam attempts before funds can be released. Our Know Your Payee technology ensures that the verification of payees and eft payment data is done on a continuous basis, protecting companies from fraudulently changed or maliciously altered payee information.” Mer believes that well-informed staff, sound business processes and the right technology are at the frontline of fighting fraud and mitigating risk, and, when combined, can put up a formidable defence.

 

Skills and tools

“Since employees are usually the target of cybercrime, especially those in finance and accounts payable, equip them with the skills and tools to spot threats and respond effectively,” says Mer.

 

“Make sure teams understand the vulnerabilities of macros. Continuously remind them not to open suspicious emails or attachments and to delete emails for unknown people,” he adds.

 

Important strategies to adopt in your business when using macros:

  • Only enable macros for specific staff that rely on them on a regular basis.
  • Make sure macros are disabled when they are not required.
  • Ensure you are using the latest version of Microsoft Office and that it is always kept updated to reduce the risks of malware.
  • Provide training to accounts payable staff on the risks of macros, so they understand they must act with extreme caution if they have not been disabled.

 

Leave a Comment

Your email address will not be published.

You may also like

Agriculture Business Culture Economy

FG TO STREAMLINE EXISTING SORGHUM VARIETIES TO ENHANCE SELF-SUFFICIENCY, OTHERS

post-image

 

Federal Government has reiterated its commitment to streamline the existing sorghum varieties in the country to enhance Self-sufficiency, income generation, Food and Nutrition Security amongst others.

The Minister, Federal Ministry of Agriculture and Rural Development, Dr. Mohammad Mahmood Abubakar revealed this while receiving report of the Sorghum Technical Committee, in his office, in Abuja, recently.

He stated that the objective of streamlining the existing sorghum varieties was to find other ways of improving productivity, value addition and quality of sorghum produce, noting that the exercise was crucial as it would enhance farmer’s income, attract more youth to sorghum cultivation, meet national demand as well as contribute to the growth of the Gross Domestic Product.

In his words” This cannot be achieved without the collaborative efforts of all Stakeholders of which farmers, Seed producers, Input providers and international Institutes are part”.

He recalled that the technical committee arose from a sorghum stakeholders meeting on…

Read More
Business Economy

African startups are weathering the funding storm with acquisitions

post-image

A new report from Africa’s foremost digital economy consultancy, TechCabal (https://TechCabal.com) Insights has revealed that acquisitions have become more frequent in Africa’s tech ecosystem, showing signs of a maturing market. According to the report, 2021 saw 32 acquisition deals on the continent. At the end of Q3 2022, there were about 43 acquisition deals, signaling a consolidation trend.

 

 

After two years of continuous growth in VC investment, funding announcements have hit a plateau. Startups have resorted to cutting costs to extend their runway, and acquisition deals have become necessary for survival, particularly with startups operating in the same market. The number of acquisitions between startups operating in the same market increased from 31% in Q2 to 52% in Q3 2022.

 

The State of Tech in Africa Report compiled by TechCabal Insights, also found that the average seed ticket size remained stable at $2.5M in…

Read More
Business Economy Society Technology Technology Trends

Multimillion-dollar boost for small business as more African countries join MultiChoice Africa Accelerator Programme

post-image

Following the success of the MultiChoice (www.MultiChoice.com) Africa Accelerator (https://bit.ly/3OtthRz) Programme, which secured $16 million (USD) of funding for six emerging businesses last year, the programme has been expanded to eight more countries across Africa.

 

Many more small businesses in Africa’s technology sector now have the chance to benefit from the 2023 programme, which provides the skills and opportunities needed to attract transformative business funding.

“We’re really excited to be expanding the MultiChoice Africa Accelerator Programme to more African countries,” said Calvo Mawela, MultiChoice Group CEO, announcing the launch. “It’s part of our long-term commitment to growing and multiplying Africa’s technology potential, which is critical to our future growth.”

The MultiChoice Africa Accelerator Programme, which kicked off during Global Entrepreneurship Week,  is aimed at established start-ups and small enterprises in specific technology sectors – healthtech, agritech, fintech, edutech, the circular economy and the creative industries.

“There…

Read More
Announcements Business Culture Events Technology Tourism Trends

Spark Africa set to hold the largest tech gathering in Africa; the Africa Technology Expo.

post-image

 

Spark Africa, The African Technology Leader has announced the company’s readiness to host the African Technology Expo, a gathering of tech enthusiasts and stakeholders with the aim of promoting indigenous African talents and innovations.

This was disclosed by the Convener of the event and CEO of Spark Africa, Nnaemeka Clinton, during a Press briefing.

According to him;“Nigeria has over 30 Million People with viable ideas, about 10,000 startups and over 200 of these startups are fintech.

Most tech events in Africa and Nigeria specifically do not solve the issue of helping our unique talents with viable tech ideas translate their ideas to startups.
This isn’t about creating an avenue for motivation and encouraging networking amongst African talents alone, that is good, however, the “working the talk” is by transforming their ideas into startups.
The Africa Technology Expo, the largest tech gathering in Africa is different, this year’s debut edition is aimed at converting over…

Read More
Announcements Business Economy Technology Technology Trends Telecoms

ON THE UPCOMING AUCTION OF TWO (2) LOTS OF 3.5GHZ SPECTRUM

post-image

 

The Nigerian Communications Commission (the Commission), in line with Section 121 of the Nigerian Communications Act 2003 (the Act) has the responsibility to manage and administer Spectrum resources for the communications sector in an efficient and effective manner. This is for the socio-economic benefit of the country.

Accordingly, it is the Commission’s responsibility, as the industry regulator, to ensure that harmonized and standardized Spectrum resources are made available in a timely manner to ensure its optimal utilization. The impact of the Commission’s regulatory activities in this regard is evident in the contribution of ICT, and telecommunications in particular, to the Gross Domestic Product (GDP) of the country.

The Act allows available Spectrum resources to be licensed through different methods. Spectrum licensing via Auction is one of the most transparent methods of assigning Spectrum resources globally. It is important to note that the Commission in response to requests for more Spectrum lots…

Read More
Business Economy News Technology Technology Trends Telecoms

NCC-CSIRT Urges Adoption of Two-Factor Authentication as Somnia Ransomware Targets Telegram Accounts

post-image

 

In response to the discovery of a new attack that compromises victims’ VPN (Virtual Private Network) accounts to compromise messaging app, Telegram, the Nigerian Communications Commission’s Computer Security Incident Response Team (NCC-CSIRT) has advised users to adopt two-factor authentication to protect their Telegram accounts and to not download unknown Advanced IP Scanner Software.
Ukrainian cyber experts discovered the attack, which uses Vidar Malware (Vidar Stealer) to steal Telegram session data, which in the absence of configured two-factor authentication and a passcode, allows unauthorized access to the victim’s telegram account and corporate account or network.

The malware, which exploits unauthorized access to users’ Telegram accounts and corporate accounts to steal data, targets platforms across iOS, Android, Linux, Mac and Windows Operating Systems.

“The Ukrainian CERT alleged that a Somnia Ransomware was created to be used on Telegram that tricks users to download an installer that mimics ‘Advanced IP Scanner’ software, which contains Vidar…

Read More
Business Economy Energy

KOLMANI OIL AND GAS PROJECT HAS ATTRACTED OVER $3BN INVESTMENT IN FOSSIL ENERGY – PRESIDENT BUHARI

post-image

 

– Restates Net Zero Carbon Emission By 2060

President Muhammadu Buhari has declared that his administration attracted over $3bn investment in the Oil and Gas Sector at a time of near-zero appetite for investment in fossil energy.

Speaking Tuesday in Bauchi at the Flag-off Ceremony of the Kolmani Integrated Development Project, a fully integrated in-situ development project comprising upstream production, oil refining, power generation and fertilizer, President Buhari said:

“Considering the land locked location and the huge capital requirement, the economics of the project is a challenging proposition. Consequently, from the outset, I instructed NNPC Limited to utilize and leverage their vast asset portfolio across all corridors of its operations to de-risk the project to attract the much-needed investment.

“It is therefore to the credit of this administration that at a time when there is near zero appetite for investment in fossil energy, coupled with the location challenges, we are able to attract…

Read More
Business Culture Economy Technology Technology Trends

uqudo Paves The Way for Digital Identity in Africa

post-image

uqudo’s (https://uqudo.com/) CEO, Mohamed Fagiri recently spoke on “Building Global Bridges: How to Access New Markets” at the Africa Tech Festival, the leading tech festival connecting innovators and changemakers across the continent. Mohamed shared his insights on scaling start-ups and building key products that can transform the world.

 

 

A digital identity company that is building an “identity layer” that makes customer onboarding safe, efficient and cost-effective in a digital world, uqudo has seen major growth in the past few months. Providing digital identity verification for key fintech players in the EMEA region, uqudo has also partnered with numerous entities in the African region to enhance digital identity in the continent.

 

The World Bank and Africa Development bank estimate that of the 1.3 billion people in Africa, 50% are smartphone users. With the population projected to increase in the next few decades, smartphone penetration will also see drastic…

Read More