News
BlueNoroff Targets Eecutives on Windows and MacOS Using AI-driven Tools

At the Security Analyst Summit in Thailand, Kaspersky’s Global Research and Analysis Team (GReAT) unveiled the latest BlueNoroff APT activity through two highly targeted malicious campaigns ‘GhostCall’ and ‘GhostHire’. The ongoing operations have been targeting Web3 and cryptocurrency organisations across India, Turkiye, Australia and other countries in Europe and Asia since at least April 2025.

BlueNoroff, a subdivision of the notorious Lazarus group, continues to expand its signature ‘SnatchCrypto’ campaign, a financially motivated operation which targets crypto industries worldwide. The newly described GhostCall and GhostHire campaigns employ new infiltration techniques and customised malware to compromise blockchain developers and executives. These attacks affect macOS and Windows systems as primary targets and are managed through a unified command-and-control infrastructure.
The GhostCall campaign focuses on macOS devices, beginning with a highly sophisticated and personalised social engineering attack. The attackers reach out via Telegram, impersonating venture capitalists and in some cases using compromised accounts of real entrepreneurs and startup founders to promote investment or partnership opportunities. The victims are invited to fake investment meetings on phishing sites mimicking Zoom or Microsoft Teams during which they are prompted to “update” their client to fix an audio issue, this action downloads a malicious script and deploys a malware infection on the device.
“This campaign relied on deliberate and carefully planned deception. Attackers replayed videos of previous victims during staged meetings to make the interaction appear like a real call and manipulate new targets. The data collected in this process is then used not only against the initial victim but also exploited to enable subsequent and supply-chain attacks, leveraging established trust relationships to compromise a broader range of organisations and users,” comments Sojun Ryu, security researcher at Kaspersky GReAT.
Attackers deployed seven multi-stage execution chains, four which were previously unseen, to distribute a range of new customised payloads, including crypto stealers, browser credential stealers, secrets stealer, and Telegram credential stealers.
In the GhostHire campaign the APT targets blockchain developers by posing as recruiters. Victims are tricked into downloading and running a GitHub repository containing malware, presented as a skill assessment. GhostHire shares its infrastructure and tools with the GhostCall campaign, but instead of using video calls, it focuses on approaching hands-on developers and engineers through fake recruitment. After initial contact, victims are added to a Telegram bot that delivers either a ZIP file or a GitHub link, along with a short deadline to complete the task. Once executed, the malware installs itself on the victim’s machine, customised for the operating system.
The use of generative AI has enabled BlueNoroff to accelerate malware development and refine its attack techniques. The attackers introduced new programming languages and added additional features, complicating detection and analysis tasks. It further enables the actor to manage and expand its operations, increasing both the complexity and scale of attacks.
“Since its previous campaigns, the threat actor’s targeting strategy has evolved beyond simple cryptocurrency and browser credential theft. The use of generative AI has significantly accelerated this process, enabling easier malware development with reduced operational overhead.
“This AI-driven approach helps to fill the gaps in available information, enabling more focused targeting. By combining compromised data with AI’s analytical capabilities, the scope of these attacks has expanded. We hope our research will contribute to preventing further harm,” comments Omar Amin, senior security researcher at Kaspersky GReAT.
News
Cybervergent Expands to Three New Markets

Cybervergent has launched version 3.0 of its artificial intelligence (AI)-native posture management platform and expanded operations into Kenya, Ghana, and SA.

The move, according to the company, introduces automated risk verification for enterprises and aims to position Africa as a force in digital governance technology.
It goes on to say the latest platform upgrade introduces continuous posture management, replacing traditional point-in-time governance, risk, and compliance reporting with real-time verification systems.
An AI engine independently verifies 99.9% of audit and monitoring findings before they appear on enterprise dashboards, according to Cybervergent.
It says risk management, compliance, audit, and data security operations are integrated into a unified system built for cloud and on-premise environments.
According to Cybervergent, the platform maps more than 4 500 controls across frameworks, including the Nigeria Data Protection Act (NDPA), International Organisation for Standardisation (ISO) 27001, and System and Organisation Controls (SOC) 2.
Cybervergent says the rollout of its first South African customer validates the platform’s readiness for highly regulated enterprise markets and strengthens its expansion strategy across Africa’s leading technology and financial hubs.
The company is also adopting a channel-first deployment model, working with local partners and system integrators in Lagos, Accra and Johannesburg to scale verified security infrastructure for enterprises navigating increasingly complex regulatory demands.
“We built verification into the architecture,” said Ayomide Daniels, co-founder and chief scientist at Cybervergent. “If a finding is not traceable back to source documentation, it does not reach the dashboard.”
Cybervergent rebranded from Infoprivacy in late 2023 to reflect its shift towards AI-automated cybersecurity.
The start-up previously focused on data privacy compliance in the West African market before pivoting to its current integrated posture management model.
News
FG Bans Honorary Degree Holders from Using ‘Dr’ Title, Warns of Academic Fraud

Federal Government has directed recipients of honorary doctorate degrees to stop using the title “Dr.” before their names, as part of efforts to protect the integrity of academic qualifications and curb the misuse of honorary awards.

Minister of Education, Tunji Alausa
Minister of Education, Tunji Alausa, announced the directive after the approval of the new policy by the Federal Executive Council (FEC).
Alausa said the measure was necessary to address the growing abuse, commercialisation and politicisation of honorary degrees in some tertiary institutions across the country.
He explained that honorary doctorates are symbolic recognitions of outstanding contributions to society and do not equate to earned academic qualifications obtained through rigorous study, research and examination.
“Recipients of honorary doctorate degrees are not entitled to use the title ‘Dr.’ as a prefix to their names in official, professional or academic engagements,” he said.
According to the minister, awardees may instead indicate the honorary distinction after their names using formats such as D.Litt (Honoris Causa), LL.D (Honoris Causa) or other approved honorary designations.
Under the revised policy, only universities with active doctoral programmes will be permitted to confer honorary doctorate awards.
The government also restricted recognised honorary awards to four categories: Doctor of Laws (LL.D), Doctor of Letters (D.Litt), Doctor of Science (D.Sc), and Doctor of Humanities (D.Arts).
In addition, all honorary degree certificates must clearly carry inscriptions such as “Honorary” or “Honoris Causa” to distinguish them from earned academic degrees.
The minister warned universities against indiscriminate conferment of honorary degrees, noting that institutions found violating the directive would face sanctions from the National Universities Commission and the Federal Ministry of Education.
He said the policy was part of broader reforms aimed at restoring credibility to Nigeria’s higher education system and ensuring academic titles are not misrepresented for personal, political or financial gains.
Observers say the development could reshape the long-standing culture where public office holders, business executives and celebrities often adopt the “Dr.” title after receiving honorary awards.
News
Africa Fintech Revenues to Hit $65 billion by 2030 – Report

African fintech revenues are projected to expand 13-fold to approximately $65 billion by 2030, marking the continent as the world’s fastest-growing digital finance market.

The “Beyond Payments: Unlocking Africa’s Second FinTech Wave ” report, released by Boston Consulting Group at the Inclusive FinTech Forum in Kigali, indicates the sector is shifting from transactional inclusion to scalable, infrastructure-driven systems.
While Sub-Saharan Africa accounts for 74% of global mobile money volume, more than 50% of lending still occurs through informal channels, representing a massive gap for B2B payments and data-driven underwriting.
The opportunity now is to convert scale into sustained, institutional-grade growth, says the report. Markets offering regulatory clarity and interoperable infrastructure are becoming increasingly attractive to long-term capital.
Rwanda is highlighted as an example of deliberate institutional coordination that lowers the cost to scale for financial institutions.
Forward-looking regulation and the License Passporting Memorandum of Understanding between Rwanda and Kenya are cited as practical steps toward easing regional expansion.
Financial centres like the Kigali International Financial Centre play a critical role in this next phase by reducing uncertainty for banks and investors.
By combining regulatory clarity and Pan-African integration, they reduce uncertainty for banks, fintechs, and investors, and help position markets as credible, long-term investment destinations.
Africa’s next fintech phase will be led by financial institutions, the report notes. It goes on to say banks and regulated entities are becoming the primary customers of digital financial infrastructure, demanding platforms that align with their risk frameworks.
The report identifies five institutional priorities to sustain momentum: interoperable infrastructure, data-driven credit, regulatory coherence, trust, and resilience.
Building seamless wallet-to-bank integration will enable more efficient value movement, while transforming transaction data into AI-enabled underwriting models will help bridge the gap in SME lending.
Proportional licensing frameworks and predictable supervisory practices will lower the cost to scale for innovators. Furthermore, expanding cybersecurity capabilities will ensure the ecosystem remains reliable as digital usage grows.
Africa has demonstrated that fintech scale is achievable, and the next decade will be shaped by those markets that strengthen their institutional foundations, the report concludes.
General News3 days agoWhy 9 African Countries Are Looking to Nigeria for Data Protection Lessons
E-Business3 days agoFirm Spots Rising Scam Activity Around the 2026 World Cup, from Bogus Tickets to $500,000 “grant” Emails
E-Financial3 days agoCBN to Raise N700Bn in First Treasury Bills Auction this May
Telecom3 days agoTelcos Recover N2 Trillion following Crackdown on Indebted Subscribers
Telecom3 days agoOrganized Criminals Plunder Telecom Infrastructure across Nigeria, Cause Service Disruptions
Telecom3 days agoMTN Nigeria Remits N878.7Bn Taxes, Levies in 2025
E-Financial3 days agoWhy African Crypto Brands must Communicate like Banks, Not Startups
E-Business2 days agoKled AI, US Data Firm Blocks Nigeria over High ‘Fraudulent Activity’














