ExploitGuard💻

Application Security Eng.|Building Ardevo - real time MoMo fraud detection for Ghana’s fintech ecosystem | Watch. Detect. Protect. 🇬🇭🇺🇸

[ExploitGuard💻 @ExploitGuard]

🇬🇭 Ghanaian AppSec Engineer building Ardevo; real-time MoMo fraud detection for Ghana’s fintech ecosystem. GHS 346M lost in 2023 alone. The tooling is lagging. So I built something. Live demo: https://t.co/4MXz07CdVB 🤝🏾

[ExploitGuard💻 @ExploitGuard]

@DerrickAbaitey The Ghana law enforcement is very weak and lenient. Everybody will do what they want.

[ExploitGuard💻 @ExploitGuard]

@callmeoheneba @Dr_nuellie_ Oh I agree; no doubt. The issue is two fold in my opinion.

[ExploitGuard💻 @ExploitGuard]

Oh of course they can. Unfortunately, none of us work for MTN to know the real details when it comes to their security architecture. One thing I can say though is that the regulatory bodies who govern the telcos in the country have sat there and allowed MTN to provide abysmal support to customers in fraud cases, that needs to stop. MTN must also implement MFA instead of OTP for MoMo wallets; OTP is a weak form of authentication.

[ExploitGuard💻 @ExploitGuard]

@LawLibrarian3 @esselirah @Replay_remix Ahh, did I say they are not better?

[ExploitGuard💻 @ExploitGuard]

People trying to find loopholes in Telecel is not something you and I can prove, nor do we have information on what kind of techniques have been used against Telecel to be 100% sure that their security controls are more formidable. The vulnerability you’re describing is very valid; yet we cannot sit here and say that is the main reason why one is more robust than the other. The factors involved are plenty. All I’m saying, is that from the standpoint of an attacker, going after MTN payment rails would prove more beneficial. The attacker is more interested in where there is more money to obtain, and with MTN, the likelihood of getting a bigger payday is higher because there are more people to steal from.

[ExploitGuard💻 @ExploitGuard]

Your user experience is one thing. The architectural design is another. Number of users is also another factor. The robustness of a system does not only rely on your user experience. The reason one produces more fraud incidents than the other can be tied to many things, but the one thing we know for sure, is that MTN owns majority of the user base in Ghana and that’s a fact.

[ExploitGuard💻 @ExploitGuard]

@esselirah @Replay_remix Do you have the architectural design for both systems?

[ExploitGuard💻 @ExploitGuard]

I don’t think broda man understands the license he’s talking about😂. Is he ready to go to school for 4 years to acquire that license before he can sell his cars?

[GHANA CHRONICLES @_GhChronicles]

“We cannot go into the medical field to work because we are not medical professionals but why are some Doctors and other professionals importing cars in the country? We have to provide license to our members and anyone who want to import car should acquire that license”

Mr. Desmond, the Kumasi Secretary of the Venicle and Assets Dealers Union ot Ghana (VADUG), also addressed members on the current state of the automobile dealership industry.

[ExploitGuard💻 @ExploitGuard]

@RevErskineGH 😂😂😂😂😂😂😂😂 Ahh wtf?

[ExploitGuard💻 @ExploitGuard]

@forrealnomoney Capital city like Accra..flooding nkoaaa for years! They couldn’t use that duty money to fix? Eii

[ExploitGuard💻 @ExploitGuard]

@godofdansoman See this one….pure wickedness!

[ExploitGuard💻 @ExploitGuard]

Those selling land as well.

[Nomoneynohoney @forrealnomoney]

99% of Ghanaian Car Dealers are thieves!

[ExploitGuard💻 @ExploitGuard]

@forrealnomoney 😅😅 Serious greedy cheat!

[Ameyaw Debrah @AmeyawDebrah]

Goodnight 😂

[ExploitGuard💻 @ExploitGuard]

Kevin Taylor went hard ooo..😅

[ExploitGuard💻 @ExploitGuard]

@eastsportsman 😂😂😂😂😂

[ExploitGuard💻 @ExploitGuard]

@Theroinmee @thenanaaba They’re soo predictable 😂

[ExploitGuard💻 @ExploitGuard]

@thenanaaba 😂😂😂😂 Simple