News
New Emotet Campaign Bypasses Microsoft Blocks to Distribute Malicious OneNote Files

Check Point Research reports that Emotet Trojan launched a new campaign last month to evade Microsoft’s macro block, sending spam emails containing malicious OneNote files. Meanwhile Ahmyth was the most prevalent mobile malware and Log4j took top spot once again as the most exploited vulnerability

Check Point® Software Technologies, a leading provider of cybersecurity solutions globally, has published its Global Threat Index for March 2023. Last month, researchers uncovered a new malware campaign for Emotet Trojan, which rose to become the second most prevalent malware.
As reported earlier this year, Emotet attackers have been exploring alternative ways to distribute malicious files since Microsoft announced they will block macros from office files. In the latest campaign, the attackers have adopted a new strategy of sending spam emails containing a malicious OneNote file.
Once opened, a fake message appears to trick the victim into clicking the document, which downloads the Emotet infection. Once installed, the malware can gather user email data such as login credentials and contact information. The attackers then use the gathered information to expand the reach of the campaign and facilitate future attacks.
“While big tech companies do their best to cut off cybercriminals at the earliest point, it’s near impossible to stop every attack from bypassing the security measures. We know that Emotet is a sophisticated Trojan and it is no surprise to see it has managed to navigate Microsoft’s latest defenses.
The most important thing people can do is make sure they have appropriate email security in place, avoid downloading any unexpected files and adopt heathy skepticism about the origins of an email and its contents” said Maya Horowitz, VP Research at Check Point Software.
CPR also revealed that “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.
Top malware families
Globally, Qbot was the most prevalent malware last month with an impact of more than 10% on worldwide organizations respectively, followed by Emotet and Formbook with a 4% global impact.
In Nigeria, Qbot was the most prevalent malware last month with an impact of more than 32.36%, followed by Expiro with 19.35% and BlackCat with a 9.68% impact.
- Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials or keystrokes and is often distributed via spam emails. Qbot employs several anti-VM, anti-debugging and anti-sandbox techniques to hinder analysis and evade detection.
- Expiro – Expiro is a polymorphic file infector first seen in 2010. It inserts its malicious code into executable files on the infected host. These files lead to new infections when they are run on other machines. Expiro steals user and system information from Windows, as well as FTP credentials.
- BlackCat – BlackCat (aka ALPHV) operates in a ransomware-as-a-service (RaaS) business model. BlackCat ransomware is highly customizable ransomware that allows for attacks on a wide range of corporate environments. It targets both Linux and Windows systems, and is coded in Rust.
Top Attacked Industries in Africa
Last month, Manufacturing remained the most attacked industry globally, followed by Consultant and then Leisure/Hospitality.
- Manufactoring
- Consultant
- Leisure/Hospitality
Top exploited vulnerabilities
Last month, “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↑ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
- ↑MVPower DVR Remote Code Execution – A remote code execution vulnerability exists in MVPower DVR devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request.
Top Mobile Malwares
Last month, Ahmyth moved to the top spot as the most prevalent mobile malware, followed by Anubis and Hiddad.
- AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.
News
PalmPay MD Seeks Stronger Infrastructure, Access to Finance for SMEs @ Digital Pay Expo 2026

PalmPay has called for stronger infrastructure and better access to finance for small businesses as essential to the next phase of financial inclusion and economic growth in Nigeria.

This position was shared by Chika Nwosu, Managing Director of PalmPay Nigeria, during a panel session at Digital Pay Expo 2026, where regulators, fintech leaders, payment operators and other key ecosystem stakeholders gather to discuss the future of digital payments in Africa.
Speaking during a session focussed on advancing financial inclusion and SME growth, Nwosu said that while the micro, small, and medium enterprises remain central to economic activity, many still face real barriers around access to credit, reliable payment infrastructure, and the relevant digital tools needed to grow sustainably.
According to him, meaningful financial inclusion must go beyond onboarding more users into the formal financial rail. It must also address the structural issues that limit how small businesses participate, transact, and scale.
“SMEs contribute 40 per cent of the country’s GDP. For us in PalmPay, Financial inclusion is not just about enabling transactions. It is also about helping businesses access the tools and support they need to expand, build resilience, and create jobs.
He also highlighted the importance of digital literacy, noting that as digital tools and AI become more embedded in financial services, business owners must be equipped to use them effectively and responsibly.
For PalmPay, the future of inclusion will depend not only on innovation, but on how well the ecosystem reduces friction for small businesses and provides the infrastructure and financial support they need to grow.
Discussions at the event also pointed to the need for stronger collaboration across the ecosystem and more practical approaches to helping SMEs move from awareness to adoption of digital financial services.
PalmPay’s MD noted that unlocking the full potential of Nigeria’s SMEs will require a combination of accessible finance, financial education, trusted platforms, and coordinated ecosystem support.
News
Kaspersky Identifies Over 336 Unique Domains Impersonating the Official World Cup Website

The World Cup 2026 kicked off on June 11 and alongside it the number of scammers attempting to exploit fan excitement has also increased. According to Kaspersky, at least 336 unique domains mimicking official World Cup resources have been detected. In addition, cybercriminals are actively exploiting growing interest in match streaming and sports betting.

Fake broadcasting schemes
Since the start of the tournament, millions of viewers worldwide have been tuning in across TVs and other devices to watch matches live. At the same time, fraudsters have been creating websites offering “online streaming” of the championship.
The scam works as follows: attackers set up fake websites that claim to provide free access to World Cup broadcasts. After clicking “Watch now,” users are prompted to register to gain access. They are then asked to pay a cryptocurrency fee for “lifetime tournament access.” The danger of this scheme lies in the potential loss of both registration data and cryptocurrency funds.
Betting traps: When the wager is already lost
Another trap targeting football fans involves fraudulent betting and match prediction platforms. For instance, a Spanish-language website was found requesting extensive personal information, including first and last name, email address, phone number and more, under the guise of account creation.
Such schemes expose users to credential theft, particularly if they reuse the same password across multiple services, as well as to potential financial loss.
“Since the start of the tournament, scammers have increasingly focused on the ways fans engage with the event online, as watching matches today requires only an Internet connection and a device.
As a result, criminal activity continues to grow, as reflected in the fraudulent websites we observe offering streaming and betting services in multiple languages. We recommend that users stick to official broadcasts to help protect their data and finances,” says Olga Altukhova, Senior Web Content Analyst at Kaspersky.
You’ve got mail: (Un)real predictions
Another attack scenario involves emails in which attackers attempt to trick users into sending money or clicking phishing links. To increase engagement, these messages often use compelling subject lines and persuasive wording.
In one observed case, fans received emails advertising football analytics services and match winner predictions. A notable feature is the sense of urgency, asking recipients to act quickly, which is one of the common indicators of a possible scam email.
In this case, users are asked to pay a $200 fee to access football analytics. While the offer targets fans interested in betting, paying for such “services” can potentially result in irreversible financial loss.
News
CredibleVoteNG Opens Free Access to all Polling Units in Nigeria after INEC Demanded N1.Bn for Register

CredibleVoteNG, a citizen-built, open-access platform is hosting precise, verified information for all 37 states (including the FCT), 774 Local Government Areas (LGAs), and 176,846 individual polling units for free.

This is coming months after the Independent National Electoral Commission (INEC) placed a N1.5 billion price tag on requests for Nigeria’s complete polling unit register under the Freedom of Information (FOI) Act.
But CredibleVoteNG, being promoted by two Nigerian technology enthusiasts have built a platform that provides the same information free of charge.
The platform, offers structured digital access to all 176,846 polling units across Nigeria’s 36 states and the Federal Capital Territory, covering the country’s 774 local government areas and 8,809 electoral wards.
The initiative emerged against the backdrop of a public controversy that followed INEC’s October 2025 response to an FOI request by a Nigerian law firm seeking the commission’s polling unit database.
In its reply, the electoral body estimated that providing the information would cost N1,505,901,750, citing the need to print more than six million pages at N250 per page.
The response triggered widespread criticism from lawyers, civil society organisations and transparency advocates, who argued that electoral information critical to democratic participation should be readily accessible to citizens.
While the debate continued, Kelly Omobude, software developer and Uzoanya Grant, product owner, quietly worked on what would become CredibleVoteNG, a free and open-source platform designed to make electoral data available to everyone.
Accessible online through a public Application Programming Interface (API), the platform requires no registration, subscription or API key.
Developers, journalists, election observers, political parties and ordinary citizens can access the data without charge.
According to the founders, the project was inspired by the belief that credible elections depend on unrestricted access to reliable information.
“Independent observation requires independent data. If every organisation is working from the same verified, open baseline — that is the foundation for credible accountability. That is what we are trying to provide,” they said.
The platform enables users to navigate Nigeria’s electoral structure from the national level down to states, local government areas, wards and individual polling units through nine dedicated API endpoints. Information is delivered in a structured format within seconds, making it useful for both technical and non-technical users.
To broaden accessibility, the developers incorporated a Swagger-based interface that allows users with no coding experience to search and explore electoral data through a standard web browser.
Omobude, who designed the platform’s technical architecture, database infrastructure and cloud-hosting environment, said the project has been developed and maintained using personal resources since March 2023.
Grant, who led product design and user experience development, described the initiative as a civic intervention intended to bridge longstanding information gaps within Nigeria’s electoral ecosystem.
For election observers and civil society organisations, access to comprehensive polling unit data has often posed significant operational challenges.
Many monitoring groups spend weeks assembling information from multiple sources before deploying field personnel.
CredibleVoteNG seeks to eliminate that burden by providing a standardised and verified dataset that can be used simultaneously by multiple organisations.
Election monitoring experts say such access is particularly important for Parallel Vote Tabulation (PVT), a globally recognised methodology used to independently verify election outcomes through polling unit-level data collection and analysis.
The platform’s creators argue that a common and publicly accessible electoral dataset can improve consistency among observer groups and strengthen confidence in election monitoring efforts.
The database may also prove valuable to journalists and media organisations, enabling them to verify polling unit distributions, scrutinise electoral claims and undertake data-driven reporting on voter access and representation.
The platform further highlights variations in polling unit distribution across the country. Lagos State has 13,325 polling units, Kano 11,222 and Kaduna 8,012, while Bayelsa has 2,244 and Ekiti 2,445.
Analysts say access to such information could encourage deeper discussions around voter accessibility, electoral logistics and resource allocation.
Political parties are also expected to benefit, as accurate ward and polling unit data are essential for deploying agents, monitoring election-day activities and identifying organisational gaps during campaigns.
Although the project has attracted limited publicity since its launch in March 2026, the founders say adoption has continued to grow through referrals and online searches.
Hosted on cloud infrastructure and verified across all states and the FCT, CredibleVoteNG is increasingly being viewed by election stakeholders as a practical contribution to transparency, civic participation and electoral accountability ahead of the 2027 general elections.
As preparations intensify for another election cycle, the emergence of a citizen-built platform providing free access to one of Nigeria’s most important democratic datasets underscores the role innovation can play in advancing transparency and strengthening public trust in the electoral process.
Telecom2 days agoMTN Nigeria Commits to Ethical Conduct with IFRS S1, S2 Compliance
E-Financial2 days agoFG Moves to End Double Taxation
News2 days agoBoI’s EIB-Backed Financing Accelerates Fidson’s Pharmaceutical Manufacturing Growth
General News2 days agoALTON Backs CBN on Local Data Hosting Rule for Banks, Fintechs
E-Business2 days agoNDPC to Review Data Law to Address AI, Privacy Concerns
Telecom2 days agoNCC, CAC Move to Block Unapproved Ownership Changes in Telecom Sector
E-Business1 day agoKaspersky Discovered a Malware Campaign Targeting Steam Users Through Infected Wallpaper
E-Business2 days agoGalaxy Backbone @ 20, Unveils New Identity


















