E-Business
Check Point Identifies Trickbot, Emotet and the Log4j Plague as December 2021’s Most Wanted Malware

Check Point Research, the Threat Intelligence arm of Check Point Software Technologies, a leading provider of cyber security solutions globally, has published its latest Global Threat Index for December 2021.

In a month that saw the Apache Log4j vulnerability sweep the internet, researchers reported that Trickbot is still the most prevalent malware, albeit at a slightly lower rate affecting 4% of organizations worldwide (5% in November).
The recently resurgent Emotet has swiftly risen from seventh position to second. CPR also reveals that the most attacked industry continues to be Education/Research.
This month “Apache Log4j Remote Code Execution” is the most exploited vulnerability, affecting 48.3% of organizations globally. The vulnerability was first reported on December 9th in the Apache logging package Log4j – the most popular Java logging library used in many Internet services and apps with over 400,000 downloads from its GitHub project.
The vulnerability caused a new plague, impacting almost half of all companies worldwide in a very short space of time. Attackers are able to exploit vulnerable apps to execute cryptojackers and other malware on compromised servers.
Until now, most of the attacks have focused on the use of cryptocurrency mining at the expense of the victims however, advanced attackers have started to act aggressively and take advantage of the breach on high-quality targets.
“Log4j dominated headlines in December. It is one of the most serious vulnerabilities we have ever witnessed, and due to the complexity in patching it and its easiness to exploit, it is likely to stay with us for many years to come unless companies take immediate action to prevent attacks,” said Maya Horowitz, VP Research at Check Point Software. “This month we have also seen the Emotet botnet move from the seventh most prevalent malware to the second.
Just as we suspected, it has not taken long at all for Emotet to build a strong foothold since it resurfaced in November. It is evasive and is spreading fast via phishing emails with malicious attachments or links.
It is now more important than ever to have a robust email security solution in place and to ensure that users know how to identify a suspicious looking message or attachment.”
CPR revealed this month that Education/Research is the most attacked industry globally, followed by Government/Military and ISP/MSP. “Apache Log4j Remote Code Execution” is the most commonly exploited vulnerability, impacting 48.3% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which affects 43.8% of organizations worldwide. “HTTP Headers Remote Code Execution” remains in third place in the top exploited vulnerabilities list, with a global impact of 41.5%.
Top malware families
*The arrows relate to the change in rank compared to the previous month.
This month, Trickbot is the most popular malware impacting 4% of organizations worldwide, followed by Emotet and Formbook, both with a global impact of 3%.
In Nigeria, Ramnit is the most popular malware impacting 12.64% of organizations in the country, followed by Phorpiex at 10.34% and Formbook with a country impact of 8.05%.
- ↔ Ramnit – Ramnit is a banking Trojan which incorporates lateral movement capabilities. Ramnit steals web session information, enabling the worm operators to steal account credentials for all services used by the victim, including bank accounts, corporate and social networks accounts.
- ↑ Phorpiex – Phorpiex is a botnet (aka Trik) has been since 2010 and at its peak controlled more than a million infected hosts. Known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
- ↔ Formbook – First detected in 2016, FormBook is an InfoStealer that targets the Windows OS. It is marketed as MaaS in underground hacking forums for its strong evasion techniques and relatively low price. FormBook harvests credentials from various web browsers, collects screenshots, monitors and logs keystrokes, and can download and execute files according to orders from its C&C.
Top Attacked Industries Globally:
This month, Education/Research is the most attacked industry globally, followed by Government/Military and ISP/MSP. In Africa the most attacked industry is Communications followed by ISP/MSP and Finance/Banking.
|
|
|
Top exploited vulnerabilities
This month, “Apache Log4j Remote Code Execution” is the most commonly exploited vulnerability, impacting 48.3% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which affects 43.8% of organizations worldwide. “HTTP Headers Remote Code Execution” remains in third place in the top exploited vulnerabilities list, with a global impact of 41.5%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↔ Web Server Exposed Git Repository Information Disclosure- An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow an unintentional disclosure of account information.
- ↔ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
Top Mobile Malwares
This month, AlienBot takes first place in the most prevalent Mobile malwares, followed by xHelper and FluBot.
- AlienBot – AlienBot malware family is a Malware-as-a-Service (MaaS) for Android devices that allows a remote attacker, as a first step, to inject malicious code into legitimate financial applications. The attacker obtains access to victims’ accounts, and eventually completely controls their device.
- xHelper – A malicious application seen in the wild since March 2019, used for downloading other malicious apps and display advertisements. The application is capable of hiding itself from the user and can even reinstall itself in the event that it was uninstalled.
- FluBot – FluBot is an Android botnet distributed via phishing SMS messages, most often impersonating logistics delivery brands. Once the user clicks the link inside the message, FluBot is installed and gets access to all sensitive information on the phone.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.
E-Business
Nigeria Takes the Lead in the Global WSIS+20 Digital Agenda

Nigeria has unveiled a comprehensive, multi-pronged strategy designed to localise WSIS+20 commitments. This roadmap accelerates national transformation by prioritising robust infrastructure, transparent internet governance, and advanced cybersecurity through deep stakeholder collaboration.

Unveiled in New York at the Nigerian high-level side event titled “Re-Imagining Digital Cooperation for Sustainable Development: From WSIS+20 Vision to Local Action,” the strategy cements Nigeria’s position as a primary architect of the world’s digital future.
Speaking at the event, the Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa, CCIE represented by Director, Corporate Planning and Strategy, Dr. Dimie Shively Wariowei said Nigeria’s approach is deliberately aligned with the four core activity areas identified under the ongoing WSIS+20 review process.
According to him, the focus areas provide a practical framework for translating global digital commitments into measurable national outcomes, ensuring that international resolutions drive inclusive growth and sustainable digital development at the country level.
Inuwa identified digital infrastructure as the foundation of effective localisation, noting persistent challenges in extending connectivity to underserved and remote communities. Beyond infrastructure gaps, he highlighted affordability constraints and digital literacy deficits, stressing that addressing these issues remains central to Nigeria’s digital inclusion drive.
He explained that government alone cannot shoulder the burden of nationwide digital infrastructure deployment, given Nigeria’s vast geographical spread, hence the adoption of collaborative Public-Private Partnership (PPP) models. He disclosed that Nigeria, in collaboration with the World Bank, is implementing a major fibre-optic project spanning about 90,000 kilometres nationwide to boost connectivity.
The NITDA DG also revealed that the current National Broadband Plan, which has guided broadband expansion in recent years, is nearing completion, with plans underway to renew and reposition it for the next five years. The renewed plan, he said, will strategically target increased broadband penetration as a catalyst for digital access and economic growth.
On internet governance, Inuwa referenced Nigeria’s active participation in the Internet Governance Forum (IGF), noting that the country successfully hosted its annual national IGF. He said the forum operates on a multi-stakeholder model that brings together government, the private sector, civil society and the technical community to foster cooperation and informed policy dialogue.
Cybersecurity, he added, remains a critical pillar of Nigeria’s localisation efforts. He cited the existing Cybersecurity Act and ongoing efforts to strengthen the legal framework through a reviewed version currently awaiting parliamentary approval. These measures, he said, are designed to mitigate risks associated with increased internet use and to protect users and critical digital infrastructure.
Inuwa further stressed Nigeria’s ambition to play a leadership role in advancing digital cooperation across Africa through inclusive, multi-stakeholder engagement. He underscored the importance of coordinated national data collection, noting that reliable, country-specific data is essential for tracking progress and presenting Africa’s digital development story on the global stage.
He concluded that sustained engagement and follow-up actions arising from the WSIS+20 review would strengthen digital cooperation among African countries and ensure that global digital commitments translate into tangible national and regional impact.
Stakeholders commended Nigeria’s efforts in the digital space, acknowledging the country’s growing role in shaping Africa’s digital future.
Earlier, Ms. Jennifer Chung, Co-Convener of the Informal Multi-Stakeholder Sounding Board (IMSB), praised Nigeria for convening a broad-based, multi-stakeholder delegation and for its commitment to the meaningful implementation of WSIS+20 outcomes.
Chung stressed the growing demand for localised WSIS follow-up mechanisms, noting that platforms such as the annual IGF, National and Regional IGF Initiatives (NRIs), and youth-led forums are vital for tracking progress towards the 2030 Agenda and Africa’s Agenda 2063.
She described the WSIS+20 review as a critical step toward effective monitoring, reliable data collection and evidence-based evaluation, particularly for developing countries in the Global South. According to her, these measures are essential to achieving WSIS targets and ensuring that no region is left behind.
Drawing parallels with the Asia-Pacific region, Chung noted that challenges around affordable and meaningful connectivity remain widespread across developing economies. She emphasised that expanding broadband penetration and reducing the cost of access are crucial to closing digital divides in Africa, Asia-Pacific and other parts of the Global South.
She also highlighted the need to enable active citizen participation in emerging technologies, including artificial intelligence and future innovations such as quantum technologies, stressing that inclusive digital access is key to maximising the benefits of digital transformation.
Reflecting on the WSIS+20 review process, Chung praised the innovative and inclusive approach adopted through the informal multi-stakeholder sounding board, describing it as one of the first of its kind in global digital governance. She called for sustained collaboration among governments, the private sector, civil society and the technical community to carry the WSIS vision from global commitments to local action.
E-Business
UBA Partners CIG Motors, Lagride, Launches $100m “Drive to Own” Scheme

United Bank for Africa (UBA) Plc has announced a $100 million financing partnership with CIG Motors, Lagride and the Lagos State Government to promote urban mobility and financial inclusion through a scheme tagged “Drive to Own.”

Group Managing Director/CEO, United Bank for Africa(UBA) and, Chairman, LagRide, Chief Diana Chen, flagged by LagRide drivers, at the signing ceremony of $100 Million Expansion Facility, strengthening smart mobility, driver asset ownership of over 3,500 cars, financed by UBA in partnership with Lagos State Government and LagRide, held in Lagos on Tuesday.
The initiative, unveiled on Wednesday in Alausa, Lagos, will empower 3,500 drivers in the state by enabling them to own vehicles with an equity contribution of 10 per cent of the total cost, while the balance is payable over 48 months.
UBA’s Group Managing Director/CEO, Oliver Alawuba, described the scheme as transformational, noting that it would foster inclusive economic growth, support MSME development and create opportunities for the younger generation.
“This partnership with Lagride is transformational. It will drive inclusivity for economic growth and ensure progress for everyone,” he said.
Alawuba shared a personal story, recalling that his father worked as a driver and was able to fund his education through that income. He said the scheme would provide similar opportunities for many families.
UBA’s Head of SME Banking, Babatunde Ajayi, said the partnership reflected a rethinking of traditional banking models.
“Not every business has a shop. Some businesses have wheels. Every commercial driver is running a business, yet they have remained outside formal finance. We designed credit that fits their reality,” he said.
Chairman of Lagride, Diana Chen, said the company had built a data-driven and credit-ready mobility platform for drivers, stressing that transportation remained the backbone of Africa’s economic future.
“Lagride now stands as the most structured, data-driven and credit-ready mobility platform in Nigeria,” Chen said.
The partnership aligns the strengths of the three organisations, with UBA providing financial support, CIG Motors offering viable business opportunities, and Lagride delivering a technology-driven platform to ensure sustainable livelihoods for driver-partners.
E-Business
Check Point Reveals Nigeria as Second Most Targeted African Country for Cyberattacks in November

The November 2025 Global Threat Intelligence report released by Check Point Research on Tuesday, shows Nigerian organisations faced an average of 3,374 cyberattacks per week.

Making the country as one of the primary targets for cybercriminals in Africa last month, with a record of a staggering volume of digital threats despite an overall decline in attacks across the continent.
The report shows that this figure places Nigeria second among the four major African nations analysed, trailing only Angola, which topped the list with 4,251 weekly attacks per organisation.
While Africa as a whole saw a 13 percent year-on-year decrease in cyber incidents, Nigeria’s high numbers reveal a persistent vulnerability within its digital infrastructure. Kenya and South Africa followed Nigeria with 2,384 and 1,863 weekly attacks, respectively.
The report also identified government institutions and financial services as the most targeted sectors across Africa. Globally, the education and research sector remained the most frequent victim, hit by an average of 4,656 attacks per week.
A significant highlight of the report is the emerging threat posed by Generative Artificial Intelligence (GenAI). Check Point Research found that one in every 35 GenAI prompts submitted within corporate networks globally posed a high risk of sensitive data leakage.
In Nigeria and abroad, employees are increasingly using AI tools that operate outside of formal security frameworks. The report noted that 87 percent of organisations using GenAI were affected by ‘high-risk’ prompts, which often included the input of proprietary code, customer data, or internal communications into public AI models.
Ransomware continues to be a primary tool for extortion, with global incidents rising by 22 percent year-on-year. While North America remains the most targeted region for ransomware, the impact is increasingly felt in emerging markets like Nigeria.
The most active ransomware groups identified in November were Qilin, Clop, and Akira, which primarily targeted industrial manufacturing and consumer goods sectors.
News3 days agoSiBAN New Executive Council to Champion Vision for Nigeria’s Digital Economy
E-Financial3 days agoTax Reform or Financial Exclusion? The Trouble with Mandatory TINs
General News3 days agoNITDA DG Calls for Innovation-Led Economic Rebirth @ Kano Startup Weekend
Telecom3 days agoNCC Blames NOGASA for Abuja Outage
Telecom2 days agoAirtel Africa Partners Starlink to Launch Direct-to-cell Service in 14 Markets
E-Business2 days agoCheck Point Reveals Nigeria as Second Most Targeted African Country for Cyberattacks in November
News3 days agoAPC National Chairman Appoints Mr. Abimbola Tooki as Special Adviser on Media
News2 days agoREA, NBS Partner to Deliver Comprehensive Energy Data for Nigeria



















