Connect with us

E-Business

HP Q3 Wolf Security Report Shows What is Helping Threat Actors Hoodwink Detection Tools

Published

on

Kindly share this post

HP Inc. issued its third quarter HP Wolf Security Threat Insights Report, finding that archive file formats – such as ZIP and RAR files – were the most common file type for delivering malware, surpassing Office files for the first time in three years.

This report provides an analysis of real-world cyberattacks, helping organizations to keep up with the latest techniques cybercriminals use to evade detection and breach users in the fast-changing cybercrime landscape.

Based on data from millions of endpoints running HP Wolf Security, the research found 44% of malware was delivered inside archive files – an 11% rise on the previous quarter – compared to 32% delivered through Office files such as Microsoft Word, Excel, and PowerPoint.

The report identified several campaigns that were combining the use of archive files with new HTML smuggling techniques – where cybercriminals embed malicious archive files into HTML files to bypass email gateways – to then launch attacks.

For example, recent QakBot and IceID campaigns used HTML files to direct users to fake online document viewers that were masquerading as Adobe. Users were then instructed to open a ZIP file and enter a password to unpack the files, which then deployed malware onto their PCs.

As the malware within the original HTML file is encoded and encrypted, detection by email gateway or other security tools is very difficult.

Instead, the attacker relies on social engineering, creating a convincing and well-designed web page to fool people into initiating the attack by opening the malicious ZIP file. In October, the same attackers were also found using fake Google Drive pages in an ongoing effort to trick users into opening malicious ZIP files.

“Archives are easy to encrypt, helping threat actors to conceal malware and evade web proxies, sandboxes, or email scanners. This makes attacks difficult to detect, especially when combined with HTML smuggling techniques.

“What was interesting with the QakBot and IceID campaigns was the effort put in to creating the fake pages – these campaigns were more convincing than what we’ve seen before, making it hard for people to know what files they can and can’t trust,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.

HP also identified a complex campaign using a modular infection chain, which could potentially enable attackers to change the payload – such as spyware, ransomware, keylogger – mid-campaign, or to introduce new features, like geo-fencing.

This could enable an attacker to change tactics depending on the target they have breached. By not including malware directly in the attachment sent to the target, it is also harder for email gateways to detect this type of attack.

“As shown, attackers are constantly switching up techniques, making it very difficult for detection tools to spot,” comments Dr Ian Pratt, Global Head of Security for Personal Systems, HP Inc. “By following the Zero Trust principle of fine-grained isolation, organizations can use micro-virtualization to make sure potentially malicious tasks – like clicking on links or opening malicious attachments – are executed in a disposable virtual machine separated from the underlying systems.

“This process is completely invisible to the user, and traps any malware hidden within, making sure attackers have no access to sensitive data and preventing them from gaining access and moving laterally.”

HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users, capturing detailed traces of attempted infections.

HP’s application isolation technology mitigates threats that can slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.

By isolating threats on PCs that have evaded detection tools, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals. To date, HP customers have clicked on over 18 billion email attachments, web pages, and downloaded files with no reported breaches.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Tech Expert Unveils BAT-BOT AI App to Curb Fake News ahead of 2027 Elections

Published

on

Kindly share this post

An artificial intelligence (AI) application has been developed to help combat the spread of fake news, misinformation and political propaganda as political activities gradually build toward the 2027 general elections in Nigeria.

Tech Expert Unveils BAT-BOT AI App to Curb Fake News ahead of 2027 Elections

The app, known as BAT-BOT AI, was unveiled in Abuja by Mr. Gunu Usman, its founder, who said the platform is designed to assist the federal government in addressing the growing challenge of false information within nation’s digital space.

‎Mr Usman explained that the new platform was created to ensure that factual information circulates faster than falsehood.

He noted that the rapid spread of misinformation, disinformation, hate speech and manipulated narratives targeting the administration of Bola Tinubu, the ruling All Progressives Congress, and national institutions poses risks to democratic stability and public trust.

According to Mr. Usman, BAT-BOT AI was developed to support public access to verified information while countering misleading narratives online.

The Technology expert described the system as a sovereign AI-powered civic information and fact-verification platform designed to strengthen Nigeria’s digital information ecosystem ahead of the 2027 general election.

He added that the initiative aligns with the government’s policy direction under the Renewed Hope Agenda of President Tinubu, which seeks to promote transparency and encourage informed civic participation.

The founder further explained that the platform is currently accessible to Nigerians through multiple digital channels, enabling users to verify claims, seek clarification on government policies and obtain information on national development initiatives.

Mr.  Usman expressed optimism that the tool would help curb the spread of false information and contribute to a more credible digital environment as the country prepares for the next electoral cycle.

 

 


Kindly share this post
Continue Reading

E-Business

Why JustMarkets Is a Strong Choice for Gold Trading

Published

on

Kindly share this post

Over the past four years, gold has risen by more than 400%. The precious metal has long been one of the most traded assets in global financial markets. From its role as a traditional store of value to its sensitivity to inflation, interest rates, and geopolitical uncertainty, gold continues to attract traders seeking efficient and predictable trading opportunities during a period of global uncertainty and high volatility.

Why JustMarkets Is a Strong Choice for Gold Trading

JustMarkets

For traders looking to effectively access gold markets, choosing the right trading environment is as important as timing their entry. One of the most popular and effective gold trading platforms is JustMarkets, offering the tools, conditions, and infrastructure to enable traders to achieve their most ambitious gold trading goals.

Tight Spreads on XAU/USD

Cost efficiency is a critical factor in gold trading, especially for active day traders. JustMarkets offers extremely competitive XAU/USD spreads, allowing traders to open and close positions with reduced transaction costs. Lower spreads can significantly impact short-term strategies, where precision and timing are key to effectively entering a trade. By minimizing trading costs, JustMarkets helps traders focus more on market analysis and finding the ideal entry point, and less on overhead.

Fast and Reliable Execution

Gold is recognized for its volatility, especially during the day, especially with economic announcements or geopolitical events. Speed is of the essence in volatile markets. JustMarkets provides high-speed execution of orders, which helps minimize the risks of delays, especially during periods of high volatility. This ensures that traders are able to respond better to market conditions, thereby having better control over trade management.

Flexible Trading Conditions

Each trader has their own approach to gold, ranging from intraday trading to position trading. JustMarkets offers flexible leverage and account types, enabling traders to adjust their exposure based on their risk tolerance and trading style. This flexibility is suitable for both conservative and aggressive traders while still allowing them to access the same global gold market.

Advanced Platforms and Tools

Successful gold trading is based on thorough technical and fundamental analysis. JustMarkets provides access to industry-standard trading platforms equipped with advanced charting tools, multiple timeframes, and a wide range of indicators for recognizing divergences and clear entry points. These features help traders analyze price trends, identify key levels, and plan their trades with greater confidence.

Accessibility via mobile devices and computers via the JustMarkets Mobile Trading app also ensures traders can monitor positions and market movements from anywhere and at any time.

Education and Market Support

Gold is also affected by factors such as inflation rates, central bank policies, and currency fluctuations. Understanding these factors is important for developing a structured trading strategy.

JustMarkets offers resources for traders, which provide information on how global events can impact the price of gold like case studies, daily, bank and weekly analysis. This is a knowledge-based system, which enables the trader to make more informed decisions rather than relying on the price movements of gold.

Trading Activities That Keep Gold Traders Engaged

In addition to the competitive trading environment, JustMarkets also runs various special activities and campaigns that aim to make the trading experience more interesting. At certain intervals, the special activities may include trading contests on specific trading instruments, such as gold, which are highly sought after by traders. This will give the traders an added impetus to keep trading.

The special activities are designed to encourage trading, consistency, and skill-building among the traders, along with the additional motivation for the trading strategies. This is also in line with the overall philosophy of JustMarkets to create a dynamic trading environment where trading, learning, and motivation are linked together.

A Trading Environment Built for Gold Traders

Gold is still one of the most dynamic markets with the greatest number of opportunities in the world. With tight spreads on XAU/USD, fast execution, flexible trading terms, and access to advanced analytical tools, JustMarkets creates an optimal trading environment for those who want to trade gold efficiently.

In addition to the comprehensive educational assistance, JustMarkets continues to position itself as a strong competitor for traders who are looking for professional trading conditions combined with growth opportunities.


Kindly share this post
Continue Reading

E-Business

Microsoft Expands Africa AI Push while DeepSeek Gains Users

Published

on

Kindly share this post

Microsoft is stepping up its push to expand artificial-intelligence adoption across Africa as competition intensifies with Chinas DeepSeek for influence in one of the worlds youngest and fastest-growing digital markets.

Microsoft Expands Africa AI Push while DeepSeek Gains Users

The company plans to train 3 million Africans on its AI technologies this year through partnerships with schools, universities and other institutions, with a focus on South Africa, Kenya, Nigeria and Morocco.

The effort reflects Microsofts broader attempt to accelerate adoption of its AI ecosystem across emerging markets where developers and enterprises are increasingly experimenting with generative AI tools.

Alongside the training initiative, Microsoft is working with MTN Group (MTNOY), Africas largest telecommunications company, to distribute Microsoft 365 and its Copilot digital assistant to about 300 million subscribers.

The Elevate program is designed to expand AI literacy and reduce cost barriers that might otherwise limit adoption, according to regional leadership.

The push comes as Chinese technology firms expand their footprint across the continent, with DeepSeeks open-source models accounting for roughly 11% to 14% of chatbot use in several African markets and reaching about 20% in countries such as Ethiopia and Zimbabwe following investments tied to digital infrastructure and telecom networks.

Microsoft is also increasing its infrastructure investment in the region.

In South Africa, the company plans to invest 5.4 billion rand, or about $330 million, to expand its cloud and AI capacity by the end of next year, while it is also exploring plans for a geothermal-powered data center in Kenya.

Early corporate adoption is emerging across the continent, with South African grocer Spar Group using Copilot in ways that save more than 700 employee hours annually and Nigerias Access Holdings integrating AI into daily workflows.

Regional leadership has suggested broader AI adoption could potentially contribute up to $1.5 trillion to Africas gross domestic product by 2030 if governments and businesses continue investing in digital infrastructure and AI skills.

 


Kindly share this post
Continue Reading

Trending