E-Business
Check Point Identifies Most Wanted Malware in May 2022
Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies Ltd. a provider of cyber security solutions globally, has published its latest Global Threat Index for May 2022. Researchers report that Emotet, an advanced, self-propagating and modular Trojan, is still the most prevalent as a result of multiple widespread campaigns.
This month, Snake Keylogger has jumped into eighth place after a long absence from the index. Snake’s main functionality is to record users keystrokes and transmit collected data to threat actors.
Snake Keylogger is usually spread through emails that include docx or xlsx attachments with malicious macros, however this month researchers reported that SnakeKey Logger has been spread via PDF files.
This could be due in part to Microsoft blocking by default internet macros in Office, meaning cybercriminals have had to become more creative, exploring new file types such as PDFs. This rare way to spread malware is proving to be quite effective as some people perceive PDFs to be inherently safer than other file types.
Emotet, is impacting 8% of organizations worldwide, a slight increase from last month. This malware is an agile malware proving profitable due to its ability to remain undetected. Its persistence also makes it difficult to be removed once a device has been infected, making it the perfect tool in a cybercriminal’s arsenal. Originally a banking trojan, it is often distributed through phishing emails and has the ability to offer other malwares, enhancing its capacity to cause widespread damage.
“As evident with the recent Snake Keylogger campaigns, everything you do online puts you at risk of a cyberattack, and opening a PDF document is no exception,” said Maya Horowitz, VP Research at Check Point Software. “Viruses and malicious executable code can lurk in multimedia content and links, with the malware attack, in this case Snake Keylogger, ready to strike once a user opens the PDF.
“Therefore, just as you would question the legitimacy of a docx or xlsx email attachment, you must practice the same caution with PDFs too. In today’s landscape it has never been more important for organizations to have a robust email security solution that quarantines and inspects attachments, preventing any malicious files from entering the network in the first place.”
CPR also revealed that “Web Servers Malicious URL Directory Traversal” is the most commonly exploited vulnerability, impacting 46% of organizations worldwide, closely followed by “Apache Log4j Remote Code Execution” which has a global impact of 46%.
“Web Server Exposed Git Repository Information Disclosure” is in third place with a global impact of 45%. The Education & Research sector continues to be the most targeted industry by cybercriminals globally.
Top Malware Families
*The arrows relate to the change in rank compared to the previous month.
This month, Emotet is still the most popular malware with a global impact of 8%, followed by Formbook with an impact of 2% and AgentTesla impacting 2% of organizations worldwide.
This month in Nigeria, Ramnit is the most popular malware impacting 11.39% of organizations in the country, followed by Phorpiex at 7.59% and Formbook at 5.06%.
- ↔ Ramnit – Ramnit is a modular banking Trojan first discovered in 2010. Ramnit steals web session information, giving its operators the ability to steal account credentials for all services used by the victim, including bank accounts, and corporate and social networks accounts. The Trojan uses both hardcoded domains as well as domains generated by a DGA (Domain Generation Algorithm) to contact the C&C server and download additional modules.
- ↔ Phorpiex – Phorpiex is a botnet (aka Trik) that has been active since 2010 and at its peak controlled more than a million infected hosts. It is known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
- ↔ Formbook – FormBook is an Infostealer targeting the Windows OS and was first detected in 2016. It is marketed as Malware as a Service (MaaS) in underground hacking forums for its strong evasion techniques and relatively low price. FormBook harvests credentials from various web browsers, collects screenshots, monitors and logs keystrokes, and can download and execute files according to orders from its C&C.
The complete list of the top ten malware families in May can be found on the Check Point blog.
Top Attacked Industries Globally
In Africa, this month Communications is the most attacked industry, followed by Government/Military and Retail/Wholesale
- Communications
- Government & Military
- Retail/Wholesale
Top Exploited Vulnerabilities
This month, “Web Servers Malicious URL Directory Traversal” is the most commonly exploited vulnerability, impacting 46% of organizations worldwide, closely followed by “Apache Log4j Remote Code Execution” which has a global impact of 46%. “Web Server Exposed Git Repository Information Disclosure” is in third place with a global impact of 45%.
- ↑ Web Servers Malicious URL Directory Traversal (CVE-2010-4598, CVE-2011-2474, CVE-2014-0130, CVE-2014-0780, CVE-2015-0666, CVE-2015-4068, CVE-2015-7254, CVE-2016-4523, CVE-2016-8530, CVE-2017-11512, CVE-2018-3948, CVE-2018-3949, CVE-2019-18952, CVE-2020-5410, CVE-2020-8260)- There exists a directory traversal vulnerability on different web servers.
The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
- ↔ Apache Log4j Remote Code Execution (CVE-2021-44228)- A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
3.↓ Web Server Exposed Git Repository Information Disclosure- An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow an unintentional disclosure of account information.
Top Mobile Malwares
This month AlienBot is the most prevalent Mobile malware, followed by FluBot and xHelper.
- AlienBot – AlienBot malware family is a Malware-as-a-Service (MaaS) for Android devices that allows a remote attacker, as a first step, to inject malicious code into legitimate financial applications. The attacker obtains access to victims’ accounts, and eventually completely controls their device.
- FluBot – FluBot is an Android malware distributed via phishing SMS messages (Smishing), most often impersonating logistics delivery brands. Once the user clicks the link inside the message, they are redirected to the download of a fake application containing FluBot. Once installed the malware has various capabilities to harvest credentials and support the Smishing operation itself, including uploading of the contacts list as well as sending SMS messages to other phone numbers.
- xHelper – A malicious application seen in the wild since March 2019, used for downloading other malicious apps and display advertisements. The application is capable of hiding itself from the user and reinstalling itself in the case that it was uninstalled.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles.
The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.
Abisoye Coker-Odusote, director general, National Identity management commission (NIMC) has said that the commission is set to register 95 percent of Nigerians into the National Identity Database before December 2025.
Abisoye Coker-Odusote,, DG, NIMC
She made this statement at a press briefing to highlight the commissions goal aligns with President Bola Tinubu’s Renewed Hope Agenda, particularly on digital governance and inclusive development.
The mass enrollment drive will be powered by a combination of improved infrastructure, expanded registration centres, and robust public sensitization campaigns.
As of May 2025, NIMC reports over 120 million Nigerians have been enrolled, and about 100 million more would be captured by December.
The federal government, in collaboration with the International Fund for Agricultural Development (IFAD), is building a digital registrar that will identify farmers, their farmlands, type of soil and the crops they grow for targeted services.
The information and the National Identification Number (NIN) will be integrated into a multipurpose identity card that farmers can use to access financial services, inputs and other forms of government assistance.
The digitisation is expected to harmonise farmers’ data across all the 36 states and the Federal Capital Territory.
Speaking at the national launch of the Policy Dialogue Initiative on the National Digital Farmers Registry (NDFR) recently in Abuja, Dr Marcus Ogunbiyi, permanent secretary, Federal Ministry of Agriculture and Food Security (FMAFS), said the new system would address the issue of portfolio farmers, whom he described as “farmers who have no farm.”
“We are going to register farmers and their farms. Not only that, farmers and the type of crop they grow, farmers and the locality they are, the type of soil they have on their farms. There is no farm that will not have a farmer. But there are many farmers who do not have farms. This is an encompassing package.
“When we register these farmers, we are going to provide a physical and digital card for them. With the card, many things can be done by the farmers. It can be used as a means of identification, an asset to some gateway – just anything. It is going to have a handshake with the database of the country, such that with that particular card, the farmer can enter any place and get things done. He or she can redeem inputs and even get a loan, depending on the financial entity,” Ogunbiyi explained.
He said that to accomplish this, the Federal Ministry of Agriculture and Food Security has taken decisive steps to transform their approach to farmer data management, adding, “Chief among these is our strategic partnership with the National Identity Management Commission (NIMC) to implement a far-reaching farmer registration and database project. At the heart of this initiative is the integration of the NIN, which ensures that every Nigerian farmer is uniquely identified and seamlessly integrated into a national agricultural system.”
Mrs Dede Ahoefa Ekoue, country director/representative of the IFAD in Nigeria, said the United Nations (UN) organisation was proud to be part of the initiative on the National Digital Farmer Registry in Nigeria.
“Our role is to convene all the partners, development partners from the public sector, private sector and the international community to put our resources together to support the effort of the government in establishing and enabling a digital farmer registry for the country,” she said.
Mrs Ekoue said that although there were previous efforts to have a national database of farmers, it had the issues of fragmentation and sustainability.
“The government is now providing us with a sense of direction and matching orders to all the actors to work together. This is what we are doing today with several partners, including the African Development Bank, FAO, the World Bank, the EU, the Islamic Development Bank and UK. Also, what is very key is farmers’ organisations because it is about them, it is for them, it must be with them,” she added.
The country director said the IFAD was happy to bring together the private sector and different ministries, departments and agencies, adding, “It will be a game changer for having a strong, updated and sustainable national digital farmer registry.”
Dr Lekan Tobe, the country director of Heifer International in Nigeria, in his remarks at the official launch of the Policy Dialogue Initiative on the National Digital Farmer Registry, emphasised the critical role of partnership and data in transforming Nigeria’s agricultural sector.
He said that this initiative, born from recommendations of previous policy dialogues organised in collaboration with the federal government, aimed to scale up innovative digital technology to enhance food systems across the country.
Dyna.Ai, a global leader in AI-as-a-Service (AIaaS), has launched its operations in Nigeria with an exclusive closed-door ‘Nigeria Dyna Day’ event in Lagos, which saw the introduction and orientation of its suite of AI-powered products and solutions to Nigeria’s emerging financial ecosystem.
The event, tagged ‘Nigeria Dyna Day’ and themed “AI Unleashed: Revolutionising Nigeria’s Financial Future,” brought together leading voices from the country’s AI, financial, fintech, telecom, and other key sectors, including representatives from government agencies and major enterprises.
In his opening remarks, Tomas Skoumal, chairman and co-president of Dyna.Ai, emphasized the strategic importance of Nigeria and the broader African market, stating, “For us, it makes sense to start in Nigeria.
There is no bigger country in Africa—this is where the momentum is.” He noted that Africa is no longer just “the future,” but is actively transforming today, driven by rapid digitalization and fintech innovation.
“This is the perfect time to be here,” he added, highlighting that Dyna.Ai sees technology as a vital bridge to financial inclusion and long-term growth across the region.
Skoumal introduced Dyna.Ai’s advanced Agentic AI solutions, including its proprietary Agent Studio and industry-specific language models, designed to power intelligent automation across customer service, marketing, collections, HR and more.
He also underscored the company’s long-term ambition to invest in local talent, stating, “We’re not just here to sell a product—we’re here to build infrastructure, create local jobs, and scale innovation from Nigeria to the rest of Africa.”
Dyna.Ai also showcased its advanced AI technologies at the event, including AvatarGPT, an AI digital human delivering interactive experiences; VoiceGPT, a voice agent featuring authentic local accents for seamless communication in Yoruba, Hausa, and Igbo; along with live demonstrations showing how these innovations empower customer engagement and employee experience.
Delivering the keynote address at the event, Tokoni Peter Igoin, Special Assistant to the President on ICT Development and Digital Innovation, underscored the Federal Government’s vision for a secure and forward-thinking digital ecosystem.
“The government of the Federal Republic of Nigeria, under the visionary leadership of His Excellency, President Bola Ahmed Tinubu, is fully committed to responsible innovation. Our approach to AI and financial technology is rooted in a positive framework. It encourages creativity while ensuring transparency, data protection, and digital security”, he said
Also in his remarks, Olatunbosun Alake, Lagos State Commissioner of Innovation, Science and Technology, gave insights from the government/regulatory perspective.
He announced that the Lagos State government is also taking steps towards the wide adoption and regulation of artificial intelligence in the state with the planned release of the first AI guidelines for the deployment and management of AI in the coming weeks.
JAMB Waxes Worriedly over Rising Digital Exam Fraud
9mobile Nigeria Inks Agreement to Roam with MTN
Banks, Telcos to Start Deducting USSD Charges from Airtime Today
NIMC Plans to Register 95 Percent Nigerians by December
IHS Nigeria Moves to Enhance G4S Secure Solutions Site Patrols and Increase Operational Efficiency with Patrol Vehicles
News1 day agoSERAP Sues NNPC over Alleged Missing ₦500Bn, Seeks Accountability
E-Business1 day agoFarmers to Get Identity Card for Loans, Inputs
News1 day agoFirst Asset Management Receives 2024 Fund Manager Award
E-Business1 day agoDyna.Ai Launches Operations in Nigeria
General News1 day agoNigeria Relaunches National Talent Export Programme to Unlock $1 Trillion Global Outsourcing Market
Telecom1 day agoARCON Probes 9mobile over Alleged N1Bn Advertising Debt
Telecom1 day agoNiRA Holds 17th AGM, Elects New Leadership to Propel .ng Domain Growth
General News1 day agoFG Plans Special Court for Exam Cheats