Connect with us

News

New Emotet Campaign Bypasses Microsoft Blocks to Distribute Malicious OneNote Files

Published

on

Kindly share this post

Check Point Research reports that Emotet Trojan launched a new campaign last month to evade Microsoft’s macro block, sending spam emails containing malicious OneNote files. Meanwhile Ahmyth was the most prevalent mobile malware and Log4j took top spot once again as the most exploited vulnerability

Check Point® Software Technologies, a leading provider of cybersecurity solutions globally, has published its Global Threat Index for March 2023. Last month, researchers uncovered a new malware campaign for Emotet Trojan, which rose to become the second most prevalent malware.

As reported earlier this year, Emotet attackers have been exploring alternative ways to distribute malicious files since Microsoft announced they will block macros from office files. In the latest campaign, the attackers have adopted a new strategy of sending spam emails containing a malicious OneNote file.

Once opened, a fake message appears to trick the victim into clicking the document, which downloads the Emotet infection. Once installed, the malware can gather user email data such as login credentials and contact information. The attackers then use the gathered information to expand the reach of the campaign and facilitate future attacks.

“While big tech companies do their best to cut off cybercriminals at the earliest point, it’s near impossible to stop every attack from bypassing the security measures. We know that Emotet is a sophisticated Trojan and it is no surprise to see it has managed to navigate Microsoft’s latest defenses.

The most important thing people can do is make sure they have appropriate email security in place, avoid downloading any unexpected files and adopt heathy skepticism about the origins of an email and its contents” said Maya Horowitz, VP Research at Check Point Software.

CPR also revealed that “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.

Top malware families

Globally, Qbot was the most prevalent malware last month with an impact of more than 10% on worldwide organizations respectively, followed by Emotet and Formbook with a 4% global impact.

In Nigeria, Qbot was the most prevalent malware last month with an impact of more than 32.36%, followed by Expiro with 19.35% and BlackCat with a 9.68% impact.

  1. Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials or keystrokes and is often distributed via spam emails. Qbot employs several anti-VM, anti-debugging and anti-sandbox techniques to hinder analysis and evade detection.
  1. Expiro – Expiro is a polymorphic file infector first seen in 2010. It inserts its malicious code into executable files on the infected host. These files lead to new infections when they are run on other machines. Expiro steals user and system information from Windows, as well as FTP credentials. 
  1. BlackCat – BlackCat (aka ALPHV) operates in a ransomware-as-a-service (RaaS) business model. BlackCat ransomware is highly customizable ransomware that allows for attacks on a wide range of corporate environments. It targets both Linux and Windows systems, and is coded in Rust.

Top Attacked Industries in Africa

Last month, Manufacturing remained the most attacked industry globally, followed by Consultant and then Leisure/Hospitality.

  1. Manufactoring
  2. Consultant
  3. Leisure/Hospitality

Top exploited vulnerabilities

Last month, “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.

  1. ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
  1. ↑ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
  1. ↑MVPower DVR Remote Code Execution – A remote code execution vulnerability exists in MVPower DVR devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request.

Top Mobile Malwares

Last month, Ahmyth moved to the top spot as the most prevalent mobile malware, followed by Anubis and Hiddad.

  1. AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera.
  1. Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
  1. Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.

Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

FG Directs Banks, Fintechs to Remit VAT on Service Fees

Published

on

Kindly share this post

The Federal Government has directed all banks and fintechs to collect and remit 7.5 per cent value-added tax on certain electronic banking services, effective Monday, January 19, 2026, according to an email notice issued by payment platforms.

The VAT will apply to electronic banking charges, including mobile money transfers, USSD transaction fees, and card issuance fees, according to an email notice on Wednesday shared with customers by Moniepoint.

For example, if a bank charges N100 to make a transfer, the 7.5 per cent VAT will be applied to that service fee, not the money being sent.

“From Monday, January 19, 2026, we are required to collect a 7.5 per cent VAT, to be remitted to the Nigerian Revenue Service (formerly known as the Federal Inland Revenue Service).

“VAT will apply to certain banking services that include electronic banking charges such as mobile banking fees (transfers), USSD transaction fees, and card issuance fees,” the email read.

Other operators are expected to issue similar notices to their customers in the coming days. Services that will remain exempt include interest earned on deposits and savings, meaning customers will not pay tax on the returns from their accounts.

The NRS, formerly known as the Federal Inland Revenue Service, has set the deadline to ensure that all commercial banks, microfinance banks, and electronic money operators comply with the collection and remittance requirement.

Moniepoint stressed that this is not a price increase but a statutory obligation. “Moniepoint is required to collect and remit VAT to the Nigerian Revenue Service,” the company said in a statement.

The move is part of the government’s broader efforts to standardise VAT collection on digital financial services and expand revenue generation amid Nigeria’s growing digital economy. VAT on banking transactions is not entirely new; the NRS is now enforcing uniform collection rules across all platforms, ensuring compliance across the sector.

Customers have been assured that the new tax will be clearly itemised, with the VAT shown separately on transaction statements and reports.

In December, several commercial banks informed customers that the N50 stamp duty would be deducted on electronic transfers of N10,000 and above, following the commencement of provisions of the new Tax Act.

The charge, previously known as the EMTL, has now been formally reclassified as stamp duty and will be applied as a one-off fee on qualifying electronic transfers.

 


Kindly share this post
Continue Reading

News

Moniepoint Launches Second Cohort of DreamDevs Initiative to Double Down on Africa’s Tech Talent Pipeline

Published

on

Kindly share this post

Moniepoint Inc, Africa’s leading digital financial services provider, has announced the opening of applications for the second cohort of its flagship DreamDevs initiative, a transformative program designed to bridge the tech talent gap in Africa by equipping recent graduates with industry-ready skills and real-world experience.

With applications open to graduates across Nigeria, DreamDevs is designed as a national talent search for the next generation of world-class engineers. Each year, just 20 high-potential candidates are selected into an intensive bootcamp, with the strongest performers progressing into internship and full-time roles at Moniepoint. Last year’s cohort delivered four hires – three interns and one full-time engineer – validating the programme’s role as a high-impact talent pipeline.

Targeting graduates from technology, computer science, engineering, and related fields with foundational programming knowledge in HTML, CSS, and JavaScript, DreamDevs offers a rigorous nine-week boot camp that immerses participants via hands-on training from leading software engineers. Standout performers will secure six-month internship placements at Moniepoint, with potential progression to full-time employment based on performance.

“The results from our first cohort validated our belief that with the right training and support, Africa’s young tech talent can compete globally,” says Felix Ike, Co-Founder and Chief Technology Officer at Moniepoint Inc. “This year, we’re doubling down on our commitment by aiming to convert half of our participants into full-time employees. For us, DreamDevs is all about creating sustainable career pathways that drive Africa’s digital economy forward.”

The initiative aligns with Moniepoint’s broader vision of using technology to power the dreams of millions and engineer financial happiness across Africa. It complements the company’s existing talent development programs, including HatchDev – a collaboration with NITHub Unilag that produces 500 specialised developers annually across software engineering, intelligent systems, and IoT/embedded systems as well as its hugely popular, Women-in-Tech which is now in its fifth year.

The initiative is also in tandem with the Federal Government’s 3 Million Technical Talent (3MTT) programme, for which Moniepoint serves as a key sponsor. While the 3MTT programme focuses on mass technical skills training across Nigeria, DreamDevs provides a specialised pathway that takes graduates from foundational training through to employment, creating a complete talent development ecosystem.

“We’re proud to support the government’s vision of building three million technical talents while also creating direct employment opportunities through initiatives like DreamDevs. This multi-faceted approach ensures we’re contributing to national goals while simultaneously addressing our industry’s immediate talent needs.

“By investing in young people and providing them with practical experience, startup incubation support, and product development opportunities, we are not only creating high-impact jobs and driving sustainable economic growth across the continent,” Ike said.

For Victor Adepoju, a member of the first cohort and now a Backend Engineer at Moniepoint, “The organisation of the program was top-notch. The training covered a wide range of topics and provided a solid foundation I could continue to build on. I learned a great deal about cloud technologies, particularly Google Cloud Platform. The program also emphasised valuable soft skills, including planning, organisation, and prioritisation, which have been very useful in my day-to-day work.”

Selection will be based on technical aptitude, learning potential, and alignment with Moniepoint’s values of innovation and excellence. Interested and qualified recent graduates are encouraged to apply before the January 20th deadline via the official portal at dreamdevs.moniepoint.com.


Kindly share this post
Continue Reading

News

Nigeria, Others Lag Behind as Egypt Tops Africa in AI Readiness

Published

on

Kindly share this post

Nigeria and other Sub-Saharan Africa countries rank ninth out of nine global regions as Egypt has emerged as Africa’s leading country in artificial intelligence readiness, ranking first on the continent and 51st globally in the 2025 Government AI Readiness Index published by Oxford Insights.

The impressive ranking has been lauded as underscoring North Africa’s growing influence in the global AI race.

According to Egypt’s Ministry of Communications and Information Technology (MCIT), the country scored 57.5 points out of 100, climbing 14 places from 65th in 2024.

The Nile nation also ranked fourth in the Middle East and North Africa (MENA) region, behind Saudi Arabia, Israel and the United Arab Emirates.

The Oxford Insights index assesses 195 governments using 69 indicators across six pillars, including policy capacity, governance, AI infrastructure, public sector adoption, development and diffusion, and resilience.

Egypt topped the Policy Capacity pillar globally with a perfect score of 100, tying with the UK, Serbia and Australia, an indicator of strong national AI policymaking and institutional readiness.

Oxford Insights noted that countries such as Egypt are “expanding the use of AI across national priorities while shaping policies to strengthen domestic AI ecosystems,” although gaps in infrastructure and talent development remain in some contexts.

MCIT minister Amr Talaat attributed Egypt’s strong performance to deliberate government action.

“This achievement reflects our efforts to integrate artificial intelligence into public services and accelerate digital transformation through Egypt’s second National AI Strategy. We are positioning Egypt as a regional AI hub while ensuring AI delivers real economic and social value,” he said.

Launched for 2025–2030, Egypt’s National AI Strategy targets sectors such as healthcare, justice and public administration, while aiming to train 30 000 AI specialists by 2030 and raise AI’s contribution to GDP to 7.7%.

Talaat also highlighted Egypt’s cybersecurity credentials when he highlighted that the country ranked among the top 12 globally in the ITU’s Global Cyber security Index.

Regionally, the results expose sharp contrasts across Africa. Sub-Saharan Africa ranks ninth out of nine global regions, with an average score of 28.04, reflecting persistent gaps in AI infrastructure and public sector adoption.

However, countries such as Kenya, South Africa, Mauritius and Nigeria lead the sub-region, while Rwanda and Ethiopia are gaining momentum through innovation hubs and policy reforms.

In contrast, the MENA region ranks fifth globally, buoyed by significant investment in AI infrastructure and policy capacity, particularly in Gulf states.


Kindly share this post
Continue Reading

Trending