News
Check Point Research Reveals XLoader as August’s Top Malware in Nigeria
Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies, a provider of cyber security solutions globally, has published its latest Global Threat Index for August 2022.
![]()
In Nigeria, XLoader is the most widespread malware this month impacting 14.47% of organisations in the country, followed by Phorpiex and Guloader both with 6.58%.
Globally, CPR reports that FormBook is now the most prevalent malware, taking over from Emotet, which has held that position since its reappearance in January.
FormBook is an Infostealer targeting Windows OS which, once deployed, can harvest credentials, collect screenshots, monitor and log keystrokes as well as download and execute files according to its command and control (C&C) orders.
Since it was first spotted in 2016, it has continued to make a name for itself, marketed as a Malware as a Service (MaaS) in underground hacking forums, known for its strong evasion techniques and relatively low price.
August also saw a rapid increase in GuLoader activity, which resulted in it being the fourth most widespread malware. GuLoader was initially used to download Parallax RAT but has since been applied to other remote access trojans and infostealers such as Netwire, FormBook and Agent Tesla.
It is commonly distributed through extensive email phishing campaigns, that lure the victim into downloading and opening a malicious file, allowing the malware to get to work.
Additionally, Check Point Research reports that Joker, an Android spyware, is back in business and has claimed third place in the top mobile malware list this month. Once Joker is installed, it can steal SMS messages, contact lists and device information as well as sign the victim up for paid premium services without their consent. Its rise can partially be explained by an uplift in campaigns as it was recently spotted to be active in some Google Play Store applications.
“The shifts that we see in this month’s index, from Emotet dropping from first to fifth place to Joker becoming the third most prevalent mobile malware, is reflective of how fast the threat landscape can change” said Maya Horowitz, VP Research at Check Point Software.
“This should be a reminder to individuals and companies alike, of the importance of keeping up to date with the most recent threats as knowing how to protect yourself is essential.
“Threat actors are constantly evolving and the emergence of FormBook shows that we can never be complacent about security and must adopt a holistic, prevent-first approach across networks, endpoints and the cloud.”
CPR also revealed this month that the Education/Research sector is still the most targeted industry by cybercriminals globally. With Government/Military and Healthcare taking second and third place as the most attacked sectors.
“Apache Log4j Remote Code Execution” returns to first place as the most exploited vulnerability, impacting 44% of organizations worldwide, after overtaking “Web Server Exposed Git Repository Information Disclosure” which had an impact of 42%.
Top malware families
*The arrows relate to the change in rank compared to the previous month.
FormBook is the most widespread malware this month impacting 5% of organizations worldwide, followed by AgentTesla with an impact of 4% and XMRig with 2%.
- XLoader – XLoader is an Android Spyware and Banking Trojan developed by the Yanbian Gang, a Chinese hacker group. This malware uses DNS spoofing to distribute infected Android apps to collect personal and financial information..
- Phorpiex – Phorpiex is a botnet (aka Trik) that has been active since 2010 and at its peak controlled more than a million infected hosts. It is known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
- Guloader – GuLoader is a downloader that has been widely used since December 2019. When it first appeared, GuLoader was used to download Parallax RAT but has been applied to other remote access trojans and info-stealers such as Netwire, FormBook, and Agent Tesla.
Top Attacked Industries Globally
This month the Education/Research sector remained in first place as the most attacked industry globally, followed by Government/Military and Healthcare.
- Education/Research
- Government/Military
- Healthcare
Top Exploited Vulnerabilities
This month, “Apache Log4j Remote Code Execution” is the most common exploited vulnerability, impacting 44% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which dropped from first place to second with an impact of 42%. “Web Servers Malicious URL Directory Traversal” remains in the third place, with a global impact of 39%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↓ Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow unintentional disclosure of account information.
- ↔ Web Servers Malicious URL Directory Traversal (CVE-2010-4598,CVE-2011-2474,CVE-2014-0130,CVE-2014-0780,CVE-2015-0666,CVE-2015-4068,CVE-2015-7254,CVE-2016-4523,CVE-2016-8530,CVE-2017-11512,CVE-2018-3948,CVE-2018-3949,CVE-2019-18952,CVE-2020-5410,CVE-2020-8260) – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
Top Mobile Malwares
This month AlienBot is the most prevalent Mobile malware, followed by Anubis and Joker.
- AlienBot – AlienBot is a banking Trojan for Android, sold underground as a Malware-as-a-Service (MaaS). It supports keylogging, dynamic overlays for credentials theft, as well as SMS harvesting for 2FA bypass. Additional remote control capabilities are provided by using a TeamViewer module.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger and audio recording capabilities as well as various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Joker – An Android Spyware in Google Play, designed to steal SMS messages, contact lists and device information. Furthermore, the malware can also sign the victim up for paid premium services without their consent or knowledge.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.
News
Beware of Fake Cerelac Products – NAFDAC

National Agency for Food and Drug Administration and Control (NAFDAC) has alerted Nigerians on counterfeit and unregistered Cerelac Mixed Fruits and Wheat products being sold in Lagos.

NAFDAC said Nestle Nigeria, the genuine Marketing Authorisation Holder of the product, received a complaint of suspected counterfeit purportedly manufactured by Nestlé Spain, bearing Batch Code 308002910.
It said that Nestle Nigeria reported that the complainant described that the counterfeit product emitted an odour suggestive of possible contact with fuel.
NAFDAC said that preliminary review of the product by Nestle Nigeria indicated that it had expired, in spite of the container displaying an expiry date of 10-2026, which suggested that the date coding had been tampered with (revalidated).
Nestle Cerelac Mixed Fruits and Wheat is a nutritious infant cereal, designed to be a delicious first food for infants.
NAFDAC said that its post-marketing surveillance’s directorate officers in Lagos conducted a surveillance visit to Maxland Shopping Centre, 193 Ago Palace, Okota, where the product was purchased by the complainant.
It added that the suspected counterfeit and unregistered Cerelac were found on sale at the premises and subsequently mopped up, while Nestle assisted in identifying the distinguishing features between registered and unregistered product.
According to the regulatory agency, Nestle revealed that the unregistered product used a hyphen (-) to separate the day from the year, while the registered product used a slash (/) to separate the day from the year.
“It is important to note that Nestle Nigeria is not aware of the channels through which the products are supplied into the country.
“Healthcare professionals and consumers are advised to report any suspicion of the sale of substandard and falsified regulated products to the nearest NAFDAC office, call 0800-162-3322, or send an email to [email protected],” NAFDAC said.
The agency warned that counterfeit formula often lacked essential nutrients, vitamins and minerals, leading to stunted growth or developmental issues.
It said that such formula might also contain contaminants that might lead to severe health consequences to infants or even death.
NAFDAC reiterated its commitment to safeguarding public health adding that it would continue surveillance activities to ensure the quality, safety, and efficacy of all NAFDAC-regulated products circulating in Nigeria.
It said that all zonal directors of the agency and state coordinators had been directed to carry out surveillance and mop up the revalidated product, if found within the zones and states.
The agency urged distributors, retailers, healthcare professionals, and caregivers to exercise caution and vigilance within the supply chain, to avoid the distribution, sale, and use of fake products.
News
NITDA Strengthens Collaboration with NIPSS to Drive Digital Innovation, Orange Economy Growth

The National Information Technology Development Agency (NITDA) has reinforced its commitment to advancing Nigeria’s digital transformation agenda through strengthened collaboration with key strategic institutions, as it hosted the Director General of the National Institute for Policy and Strategic Studies (NIPSS), Professor Ayo Omotayo, alongside participants of the Senior Executive Course (SEC) 48, 2026.

The visit, which builds on an earlier strategic study tour, provided a platform for in-depth engagement on the role of digital innovation in driving sustainable economic growth, with particular focus on the Orange Economy.
Representing the Director General of NITDA, Kashifu Inuwa CCIE, the Director of Stakeholder Management and Partnerships, Dr Aristotle Onumo, highlighted the Agency’s commitment to fostering a vibrant digital ecosystem through inclusive policies, strategic partnerships, and capacity development initiatives.
“NITDA is committed to creating an enabling environment where innovation can thrive by bringing together government, private sector, academia, and creatives to drive Nigeria’s digital economy,” he stated.
Inuwa underscored the growing importance of the Orange Economy, describing it as a critical driver of innovation and economic value through intellectual property. He identified sectors such as digital content creation, film, animation, and digital art as key contributors to national development.
“The Orange Economy represents a powerful opportunity to transform our rich cultural heritage and creativity into sustainable economic growth,” he noted.
He further highlighted Nigeria’s unique advantage, particularly its youthful and creative population, while calling for stronger collaboration among stakeholders to fully harness the sector’s potential.
“With our youthful population and rich cultural assets, Nigeria is well-positioned to become a global leader in the Orange Economy if we deepen collaboration and investment across the ecosystem,” he added.
During the engagement, NITDA also presented its strategic initiatives aimed at supporting the digital and creative sectors, including digital infrastructure development, promotion of digital literacy, and implementation of policies that enable startups and innovators to scale.
Addressing challenges facing the sector, Inuwa pointed to issues such as limited access to funding, infrastructure gaps, weak intellectual property protection, and ecosystem fragmentation, while emphasising the need for coordinated action.
“Addressing challenges such as funding gaps, infrastructure deficits, and intellectual property protection is critical to unlocking the full potential of Nigeria’s creative economy,” he said.
The Agency reiterated its target of achieving 70 per cent digital literacy by 2027, noting that ongoing programmes are equipping millions of Nigerians with essential digital skills, including those in underserved and informal sectors.
In his remark, Professor Omotayo described the visit as an important opportunity to deepen understanding of how digital technologies are reshaping economic sectors, particularly the creative industry. He noted that the insights gathered would contribute significantly to policy recommendations aimed at strengthening Nigeria’s economic framework.
Participants of the SEC 48 programme engaged actively during the session, raising questions on capacity development, access to tools, and frameworks for protecting digital content. NITDA highlighted its ongoing collaborations with industry stakeholders to provide training, innovation hubs, and access to digital tools for young Nigerians.
The engagement concluded with a renewed commitment from both NITDA and NIPSS to strengthen collaboration in research, policy development, and capacity building, aimed at positioning Nigeria as a globally competitive force in the digital and creative economy.
News
NRS Takes Over Mineral Royalties Collection Under New Tax Laws

Nigeria Revenue Service (NRS) has assumed responsibility for collecting mineral royalties from mining operators nationwide, following new tax laws effective January 1, 2026.

NRS
The shift emerged from a Thursday meeting between Solid Minerals Development Minister Dele Alake and NRS Chairman Dr. Zacch Adedeji. Their joint statement, endorsed by both, confirms NRS now administers all federally collectible revenues, including royalties.
Enacted by President Bola Tinubu on June 26, 2025, the Nigeria Tax Laws 2025 empower this transition. The Ministry of Solid Minerals Development remains a key partner, supplying pricing data, geological insights, and sector coordination.
NRS Special Adviser Dare Adekanmbi’s statement outlines collaborative steps: a nationwide sensitization program for operators on filing and payments; development of a digital royalty system; and regular joint technical sessions to address issues.
Both agencies pledge orderly, transparent implementation to boost the mining sector. Operators must comply with obligations and join upcoming programs.
The move aims to streamline revenue collection while fostering mining growth.
E-Financial3 days agoN4.65 Trillion in the Vault, but is the Real Economy Locked Out?
General News2 days agoUnion Bank Looted: How Former Directors Gambled with Billions and Nearly Destroyed a National Bank
E-Business1 day agoFG to Strengthen Cybersecurity Coordination as NDPC Probes Alleged Data Breach
Telecom1 day agoFG Moves to Strengthen Cybersecurity Coordination as NDPC Probes Alleged Data Breach
Telecom1 day agoCompensation for Poor Service Quality is Automatic- NCC
General News1 day agoTinubu Approves N3.3 Trillion Payment Plan to Boost Power Supply
News1 day agoBeware of Fake Cerelac Products – NAFDAC
E-Business1 day agoOffset Communications Slams N50m Suit against Qore Technologies for Alleged Copyright Infringement

















