E-Business
Kaspersky Uncovers New Grandoreiro Light Variant

Despite the arrest of important operators in early 2024, Grandoreiro continues to be used by its partners in new campaigns. Kaspersky Global Research and Analysis team (GReAT) has discovered a new light version focused on Mexico targeting around 30 banks. These findings are to be highlighted at the Security Analyst Summit (SAS) 2024.

Remaining one of the most active threats globally and targeting users of more than 1,700 banks, Grandoreiro variants account for around five percent of banking trojan attacks this year. Mexico is one of the most targeted countries by various Grandoreiro strains, including the new light version, seeing 51,000 recorded incidents this year.
Kaspersky data indicates Grandoreiro has been active since 2016. In 2024, the threat targets more than 1,700 financial institutions and 276 cryptocurrency wallets across 45 countries and territories, lastly adding Asia and Africa to the list of its targets, making it a truly global financial threat.
Among countries affected in Africa are Algeria, Angola, Ethiopia, Ghana, Ivory Coast, Kenya, Mozambique, Nigeria, South Africa, Tanzania, Uganda.
After assisting an INTERPOL-coordinated action, which has led to Brazilian authorities arresting operators behind a Grandoreiro banking trojan operation, Kaspersky discovered that the group’s codebase has been split into lighter, fragmented versions of the trojan, to continue its attacks.
Recent analysis has identified a specific light version focused primarily on Mexico, which has been used to target approximately 30 financial institutions. The creators likely have access to the source code and are launching new campaigns using the simplified legacy malware.
“All the recent developments underscore the evolving nature of the threat. Fragmented and lighter versions may represent a trend that could extend beyond Mexico and into other regions, including beyond Latin America.
However, we believe that only some trusted affiliates have access to the malware source code to develop such lighter versions. Grandoreiro operates differently from the traditional ‘Malware-as-a-Service’ model we are accustomed to.
You won’t find announcements on underground forums selling the Grandoreiro package; instead, access to it appears to be limited,” explains Fabio Assolini, head of the Latin American (GReAT) at Kaspersky.
Multiple variants of Grandoreiro, including the new light version and the primary malware, accounted for approximately five percent of global banking trojan attacks detected by Kaspersky in 2024, making it one of the most active threats worldwide.
Kaspersky has also analysed the newer samples of the primary Grandoreiro from 2024, and observed new tactics.
It records mouse activity to mimic real user patterns, aiming to evade detection by machine learning-based security systems that analyse behaviour. By replaying natural mouse movements, the malware aims to trick anti-fraud tools into seeing the activity as legitimate.
Additionally, Grandoreiro has adopted a cryptographic technique known as Ciphertext Stealing (CTS), which Kaspersky has never seen being used in malware. In this case, its aim is to encrypt the malicious code strings.
“Grandoreiro has a large and complex structure, which would make it easier for security tools or analysts to detect if its strings were not encrypted. This is likely why they introduced this new technique – to complicate the detection and analysis of their attacks,” Fabio Assolini elaborated.
E-Business
Jumia Expands Nationwide Footprint, Deepens Reach Across Underserved Nigerian Cities

e-commerce company, Jumia Nigeria, has announced a significant expansion of its logistics and pickup network across Nigeria, extending its reach into underserved regions and strengthening access to e-commerce services for millions of consumers.

The expansion, executed during the first quarter of 2026, marks a deliberate shift toward upcountry growth, with new and expanded operations across Northern Nigeria, including Kebbi, Sokoto, and Kaduna, while also strengthening presence in strategic cities like Zaria. The move is designed to close long-standing coverage gaps in high-potential areas and bring its services closer to more customers.
According to the company, the expansion reflects a convergence of customer demand, infrastructure strategy, and long-term market development, as more Nigerians outside major urban centres seek reliable access to digital retail.
“We are seeing a structural shift in where demand is coming from. What this expansion does is align our infrastructure with that reality. By extending our network deeper into the country, we are not only improving service delivery, but we are also unlocking new demand, enabling more sellers to participate in the digital economy, and building a more inclusive retail ecosystem that reflects the true scale of the Nigerian market,” said Temidayo Ojo, CEO of Jumia Nigeria.
The rollout includes a significant increase in pickup stations and delivery touchpoints across both established and emerging cities. Existing urban centres such as Lagos, Ibadan, Abuja and Port Harcourt have seen network density increase, while new and previously underserved locations are being integrated into Jumia’s logistics grid. This broader footprint is supported by investments towards parcel distribution centres, designed to decentralise inventory flow, reduce delivery time, and optimise operating costs across regions.
As part of the expansion, Jumia has also strengthened its logistics partnerships and delivery capacity, enabling more efficient last-mile fulfilment while creating income opportunities for a growing network of logistics partners and JForce agents. The company notes that these investments are critical to sustaining scale as order volumes increase across a more geographically diverse customer base.
Looking ahead, Jumia plans to extend its expansion into the South-East and South-South regions ahead of the peak retail season, further increasing its national coverage and reinforcing its position as a leading e-commerce platform in Nigeria.
E-Business
RHUCE Taps Into Africa’s $3Bn Creator Economy with New Monetisation Platform

RHUCE, a new social platform designed for African creatives, has officially launched today, introducing a new model for how creators across the continent can turn their skills, learning, and content into income.

RHUCE
As Africa’s creator economy, estimated at over $3 billion, continues to grow, millions of young people are building digital skills but struggle to convert them into sustainable opportunities. RHUCE aims to bridge this gap by combining professional identity, creator monetisation, and opportunity discovery in a single ecosystem.
“Across Africa, talent is everywhere, but opportunity is fragmented,” said Simeon Ifeoluwa Adeyanju, CEO of RHUCE Limited. “Creators are learning, building, and sharing their work, but they lack a structured way to turn that into visibility, credibility, and income.”
Unlike traditional platforms that prioritise virality or finished work, RHUCE enables users to document their growth in real time, transforming their learning journey into a living portfolio.
“We believe your journey is your greatest asset,” Adeyanju said. “On RHUCE, your growth becomes your portfolio, your consistency builds your credibility, and opportunities can discover you based on what you’re becoming, not just what you’ve done.”
The platform introduces a shift from application-based hiring to discovery-driven opportunities, where creators are matched with jobs, gigs, and collaborations based on their evolving skills and documented progress.
“Instead of chasing opportunities across WhatsApp groups, DMs, and multiple platforms, we’ve built a system where you can post once and be discovered continuously,” he added.
RHUCE also provides monetisation tools that allow creators to earn through digital products, paid learning content, and brand-sponsored campaigns, unlocking new income streams within Africa’s fast-growing digital economy.
With over 60% of Africa’s population under 25, the platform positions itself as infrastructure for the continent’s next generation of talent.
“RHUCE is not just a platform for finished professionals,” Adeyanju said. “It is for people becoming something. Our goal is simple: help Africans turn learning into opportunity, and opportunity into income.”
E-Business
Kaspersky Warns of Digital Medicine Risks on the Occasion of World Health Day

On World Health Day, Kaspersky warns of risks tied to the digitisation of healthcare and use of telemedicine. Recent incidents show that medical services can be breached, and as a result, medical records may be leaked and then traded on the dark web.

The operations of healthcare services can get disrupted. Another aspect is that healthcare platforms may share user data with third parties that handle it irresponsibly.
Telemedicine has moved from a convenience to a core part of healthcare delivery, but its security model has not kept pace with its adoption, and the risks are not theoretical. Recent incidents highlight how real these risks have become.
In 2023, it was disclosed that Cerebral, a major telehealth provider focused on mental health services, had been sharing sensitive patient data – including mental health assessments, intake information, and personal identifiers – with third-party platforms such as social media and advertising networks. Millions of users were affected over several years.
More broadly, incidents in 2025 illustrate a different but equally critical risk – large-scale disruption of digital healthcare infrastructure. The breach of the ManageMyHealth patient portal exposed sensitive medical records of more than 120,000 patients, while the attack on SimonMed Imaging compromised over a million records and led to ransomware demands. These cases show that both telemedicine platforms and the broader digital healthcare ecosystems are increasingly targeted by attackers.
In parallel, scam campaigns focusing on medical topics are evolving, inviting patients for check-ups or follow-up consultations. Often the domains of the alleged “medical services” websites were created just a few weeks ago, links to the social media accounts on their pages are not working, and the Terms of Use and Privacy Policy pages are absent.
At the same time, these pages request users’ personal information, including photos of documents and even photos of parts of the body that need medical attention. Such websites often try to convince users with branding, fake doctor profiles, and urgent calls to action.
Users risk submitting sensitive personal data that can be either sold on the dark web, be used for identity theft, or subsequently used in more sophisticated attacks in the future that are targeted specifically at them for further data extortion.
To safeguard sensitive data, use a reliable security solution with an AI-powered anti-phishing component which prevents clicking on malicious links.
“The digital healthcare experience is transforming access to care, but it is also expanding the attack surface in ways many users underestimate. Medical data is highly valuable and actively traded on the dark web, making patients a prime target for fraud and targeted phishing.
“At the same time, health-related scams exploit urgency and trust, using fake consultations or discounted offers to trick users into sharing sensitive information. Patients should approach digital healthcare with the same caution as financial services – verifying providers, avoiding unsolicited links, and understanding how their data is used. Security and privacy must become a core part of the digital healthcare experience,” comments Anna Larkina, Web Content and Privacy Analysis Expert at Kaspersky.
E-Business3 days agoNigeria Cyberattacks: Stronger Collaboration as a Panacea
Telecom3 days agoAirtel Becomes World’s Second Largest Telco as Global Customer Base Surpasses 650 Million
General News3 days agoNIBSS Says 28 Percent of Nigerians have Registered for BVN
Telecom2 days agoFrom Import Dependency to Local Capacity: Nigeria’s Tech Manufacturing Journey
E-Business3 days agoCBN Slams Custodian Investment with N419m Fines over Rule Breaches
General News3 days agoNITDA DG Urges Stronger Collaboration to Drive Nigeria’s Digital Economy
General News3 days agoOgun Set for Direct London Flights as Gateway Airport Gains Momentum
E-Financial2 days agoHow Unethical Deals Triggered CBN Takeover of Union Bank -Forensic Report


















