Connect with us

News

New Emotet Campaign Bypasses Microsoft Blocks to Distribute Malicious OneNote Files

Published

on

Kindly share this post

Check Point Research reports that Emotet Trojan launched a new campaign last month to evade Microsoft’s macro block, sending spam emails containing malicious OneNote files. Meanwhile Ahmyth was the most prevalent mobile malware and Log4j took top spot once again as the most exploited vulnerability

Check Point® Software Technologies, a leading provider of cybersecurity solutions globally, has published its Global Threat Index for March 2023. Last month, researchers uncovered a new malware campaign for Emotet Trojan, which rose to become the second most prevalent malware.

As reported earlier this year, Emotet attackers have been exploring alternative ways to distribute malicious files since Microsoft announced they will block macros from office files. In the latest campaign, the attackers have adopted a new strategy of sending spam emails containing a malicious OneNote file.

Once opened, a fake message appears to trick the victim into clicking the document, which downloads the Emotet infection. Once installed, the malware can gather user email data such as login credentials and contact information. The attackers then use the gathered information to expand the reach of the campaign and facilitate future attacks.

“While big tech companies do their best to cut off cybercriminals at the earliest point, it’s near impossible to stop every attack from bypassing the security measures. We know that Emotet is a sophisticated Trojan and it is no surprise to see it has managed to navigate Microsoft’s latest defenses.

The most important thing people can do is make sure they have appropriate email security in place, avoid downloading any unexpected files and adopt heathy skepticism about the origins of an email and its contents” said Maya Horowitz, VP Research at Check Point Software.

CPR also revealed that “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.

Top malware families

Globally, Qbot was the most prevalent malware last month with an impact of more than 10% on worldwide organizations respectively, followed by Emotet and Formbook with a 4% global impact.

In Nigeria, Qbot was the most prevalent malware last month with an impact of more than 32.36%, followed by Expiro with 19.35% and BlackCat with a 9.68% impact.

  1. Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials or keystrokes and is often distributed via spam emails. Qbot employs several anti-VM, anti-debugging and anti-sandbox techniques to hinder analysis and evade detection.
  1. Expiro – Expiro is a polymorphic file infector first seen in 2010. It inserts its malicious code into executable files on the infected host. These files lead to new infections when they are run on other machines. Expiro steals user and system information from Windows, as well as FTP credentials. 
  1. BlackCat – BlackCat (aka ALPHV) operates in a ransomware-as-a-service (RaaS) business model. BlackCat ransomware is highly customizable ransomware that allows for attacks on a wide range of corporate environments. It targets both Linux and Windows systems, and is coded in Rust.

Top Attacked Industries in Africa

Last month, Manufacturing remained the most attacked industry globally, followed by Consultant and then Leisure/Hospitality.

  1. Manufactoring
  2. Consultant
  3. Leisure/Hospitality

Top exploited vulnerabilities

Last month, “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.

  1. ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
  1. ↑ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
  1. ↑MVPower DVR Remote Code Execution – A remote code execution vulnerability exists in MVPower DVR devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request.

Top Mobile Malwares

Last month, Ahmyth moved to the top spot as the most prevalent mobile malware, followed by Anubis and Hiddad.

  1. AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera.
  1. Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
  1. Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.

Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

Nigeria, Others Lag Behind as Egypt Tops Africa in AI Readiness

Published

on

Kindly share this post

Nigeria and other Sub-Saharan Africa countries rank ninth out of nine global regions as Egypt has emerged as Africa’s leading country in artificial intelligence readiness, ranking first on the continent and 51st globally in the 2025 Government AI Readiness Index published by Oxford Insights.

The impressive ranking has been lauded as underscoring North Africa’s growing influence in the global AI race.

According to Egypt’s Ministry of Communications and Information Technology (MCIT), the country scored 57.5 points out of 100, climbing 14 places from 65th in 2024.

The Nile nation also ranked fourth in the Middle East and North Africa (MENA) region, behind Saudi Arabia, Israel and the United Arab Emirates.

The Oxford Insights index assesses 195 governments using 69 indicators across six pillars, including policy capacity, governance, AI infrastructure, public sector adoption, development and diffusion, and resilience.

Egypt topped the Policy Capacity pillar globally with a perfect score of 100, tying with the UK, Serbia and Australia, an indicator of strong national AI policymaking and institutional readiness.

Oxford Insights noted that countries such as Egypt are “expanding the use of AI across national priorities while shaping policies to strengthen domestic AI ecosystems,” although gaps in infrastructure and talent development remain in some contexts.

MCIT minister Amr Talaat attributed Egypt’s strong performance to deliberate government action.

“This achievement reflects our efforts to integrate artificial intelligence into public services and accelerate digital transformation through Egypt’s second National AI Strategy. We are positioning Egypt as a regional AI hub while ensuring AI delivers real economic and social value,” he said.

Launched for 2025–2030, Egypt’s National AI Strategy targets sectors such as healthcare, justice and public administration, while aiming to train 30 000 AI specialists by 2030 and raise AI’s contribution to GDP to 7.7%.

Talaat also highlighted Egypt’s cybersecurity credentials when he highlighted that the country ranked among the top 12 globally in the ITU’s Global Cyber security Index.

Regionally, the results expose sharp contrasts across Africa. Sub-Saharan Africa ranks ninth out of nine global regions, with an average score of 28.04, reflecting persistent gaps in AI infrastructure and public sector adoption.

However, countries such as Kenya, South Africa, Mauritius and Nigeria lead the sub-region, while Rwanda and Ethiopia are gaining momentum through innovation hubs and policy reforms.

In contrast, the MENA region ranks fifth globally, buoyed by significant investment in AI infrastructure and policy capacity, particularly in Gulf states.


Kindly share this post
Continue Reading

News

SERAP Sues INEC Over Alleged ₦55.9Bn Election Funds Diversion

Published

on

Kindly share this post

Socio-Economic Rights and Accountability Project (SERAP) has dragged the Independent National Electoral Commission (INEC) to court over the alleged failure to account for ₦55.9 billion reportedly meant for the procurement of election materials for the 2019 general elections.

SERAP Sues INEC Over Alleged ₦55.9Bn Election Funds Diversion

The grave allegations are documented in the latest annual report published by the Auditor-General on 9 September 2025.

In the suit number FHC/ABJ/CS/38/2026 filed last Friday at the Federal High Court in Abuja, SERAP is seeking: “an order of mandamus to direct and compel INEC to account for the missing or diverted N55.9 billion meant to buy smart card readers, ballot papers, and other election materials for the 2019 general elections.”

SERAP is also seeking: “an order of mandamus to direct and compel INEC to disclose the names of all contractors paid the N55.9 billion for the procurement of smart card readers, ballot papers, result sheets, and other election materials for the 2019 general elections, including the names of their directors and shareholders.”

In the suit, SERAP is arguing that: “INEC must operate without corruption if the commission is to ensure free and fair elections in the country and uphold Nigerians’ right to participation.”

SERAP is also arguing that, “INEC cannot ensure impartial administration of future elections if these allegations are not satisfactorily addressed, perpetrators including the contractors involved are not prosecuted and the proceeds of corruption are not fully recovered.”

According to SERAP, “INEC cannot properly carry out its constitutional and statutory responsibilities to conduct free and fair elections in the country if it continues to fail to uphold the basic principles of transparency, accountability and the rule of law.”

SERAP is also arguing that, “These allegations also constitute abuse of public office and show the urgent need by INEC to commit to transparency, accountability, clean governance and the rule of law.”

SERAP also said, “Allegations of corruption in the supply of smart card readers, ballot papers, result sheets and other election materials directly undermine Nigerians’ right to participate in elections that are free, fair, transparent, and credible.”

The lawsuit filed on behalf of SERAP by its lawyers, Kolawole Oluwadare, Kehinde Oyewumi, and Andrew Nwankwo, read in part: “These grim allegations by the Auditor-General suggest a grave violation of the public trust, the Nigerian Constitution 1999 [as amended] and international anticorruption standards.”

“According to the recently published 2022 audited report by the Auditor General of the Federation (AGF), the Independent National Electoral Commission (INEC) ‘irregularly paid’ over N5.3 billion [N5,312,238,499.39] ‘to a contractor for the supply of Smart Card Readers for the 2019 general elections’.

“The contract was awarded without prior approval from the Bureau of Public Procurement (BPP) and the Federal Executive Council. The payment was also ‘made without any document. There was no evidence of supplies to the commission.’”


Kindly share this post
Continue Reading

News

FG Inaugurates N40Bn CCTV Control Centre for Third Mainland Bridge

Published

on

Kindly share this post

Federal government has inaugurated a ₦40 billion closed-circuit television (CCTV) control centre for the Third Mainland Bridge in Lagos.

FG Inaugurates N40Bn CCTV Control Centre for Third Mainland Bridge

Speaking at the inauguration on Sunday, David Umahi, minister of Works, said the project followed extensive rehabilitation works carried out on the bridge after the current administration took office in 2023.

“When we came on board in 2023, we met a very terrible Third Mainland Bridge,” Umahi said, adding that the structure, along with Carter and Iddo bridges, required comprehensive re-evaluation and repairs both above and below water level.

He said President Bola Tinubu approved the total rehabilitation of the bridge, including replacement of expansion joints, noting that the completed work had improved driving conditions and extended the bridge’s lifespan.

Umahi said the CCTV system, first announced in 2025, was designed to curb dangerous driving, prevent suicide attempts and strengthen security.

He added that security personnel would monitor live footage from the control centre and enforce speed limits on the bridge.

The minister commended the China Civil Engineering Construction Corporation (CCECC), which executed the project, for what he described as high-quality delivery. He said the contract also included a surveillance boat and two Hilux vans, which would be handed over to the police to support monitoring and rapid response.

“The idea is that we can see everything that is happening on the bridge,” Umahi said, expressing concern over excessive speeding and urging motorists to comply with traffic regulations.

Earlier, Olufemi Dare, federal controller of works in Lagos, said the facility was the first of its kind on any bridge in Nigeria.

He said the system allows real-time monitoring of activities on the bridge and surrounding waters.

Dare said the project includes 240 solar panels, 10 inverters, a 300 KVA transformer, a standby generator, multiple monitoring screens and full air-conditioning for the control centre.

He added that the contract also covers 1,268 solar-powered street lights and a borehole facility.

According to Dare, the project was awarded at a cost of ₦40.17 billion, with about ₦36 billion paid so far to the contractor. He said the current inauguration marked the first phase, with additional commissioning planned once work on the bridge’s extension is completed.

He thanked the president for approving the project and praised Umahi for ensuring due process during its execution.


Kindly share this post
Continue Reading

Trending