Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

News

Check Point Research Reveals XLoader as August’s Top Malware in Nigeria

Published

on

Kindly share this post

Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies, a provider of cyber security solutions globally, has published its latest Global Threat Index for August 2022.

 

In Nigeria, XLoader is the most widespread malware this month impacting 14.47% of organisations in the country, followed by Phorpiex and Guloader both with 6.58%.

Globally, CPR reports that FormBook is now the most prevalent malware, taking over from Emotet, which has held that position since its reappearance in January.

FormBook is an Infostealer targeting Windows OS which, once deployed, can harvest credentials, collect screenshots, monitor and log keystrokes as well as download and execute files according to its command and control (C&C) orders.

Since it was first spotted in 2016, it has continued to make a name for itself, marketed as a Malware as a Service (MaaS) in underground hacking forums, known for its strong evasion techniques and relatively low price.

August also saw a rapid increase in GuLoader activity, which resulted in it being the fourth most widespread malware. GuLoader was initially used to download Parallax RAT but has since been applied to other remote access trojans and infostealers such as Netwire, FormBook and Agent Tesla.

It is commonly distributed through extensive email phishing campaigns, that lure the victim into downloading and opening a malicious file, allowing the malware to get to work.

Additionally, Check Point Research reports that Joker, an Android spyware, is back in business and has claimed third place in the top mobile malware list this month. Once Joker is installed, it can steal SMS messages, contact lists and device information as well as sign the victim up for paid premium services without their consent. Its rise can partially be explained by an uplift in campaigns as it was recently spotted to be active in some Google Play Store applications.

“The shifts that we see in this month’s index, from Emotet dropping from first to fifth place to Joker becoming the third most prevalent mobile malware, is reflective of how fast the threat landscape can change” said Maya Horowitz, VP Research at Check Point Software.

“This should be a reminder to individuals and companies alike, of the importance of keeping up to date with the most recent threats as knowing how to protect yourself is essential.

“Threat actors are constantly evolving and the emergence of FormBook shows that we can never be complacent about security and must adopt a holistic, prevent-first approach across networks, endpoints and the cloud.”

CPR also revealed this month that the Education/Research sector is still the most targeted industry by cybercriminals globally. With Government/Military and Healthcare taking second and third place as the most attacked sectors.

“Apache Log4j Remote Code Execution” returns to first place as the most exploited vulnerability, impacting 44% of organizations worldwide, after overtaking “Web Server Exposed Git Repository Information Disclosure” which had an impact of 42%.

Top malware families

*The arrows relate to the change in rank compared to the previous month.

FormBook is the most widespread malware this month impacting 5% of organizations worldwide, followed by AgentTesla with an impact of 4% and XMRig with 2%.

  1. XLoader – XLoader is an Android Spyware and Banking Trojan developed by the Yanbian Gang, a Chinese hacker group. This malware uses DNS spoofing to distribute infected Android apps to collect personal and financial information..
  2. Phorpiex – Phorpiex is a botnet (aka Trik) that has been active since 2010 and at its peak controlled more than a million infected hosts. It is known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
  3. Guloader – GuLoader is a downloader that has been widely used since December 2019. When it first appeared, GuLoader was used to download Parallax RAT but has been applied to other remote access trojans and info-stealers such as Netwire, FormBook, and Agent Tesla.

Top Attacked Industries Globally

This month the Education/Research sector remained in first place as the most attacked industry globally, followed by Government/Military and Healthcare.

  1. Education/Research
  2. Government/Military
  3. Healthcare

Top Exploited Vulnerabilities

This month, “Apache Log4j Remote Code Execution” is the most common exploited vulnerability, impacting 44% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which dropped from first place to second with an impact of 42%. “Web Servers Malicious URL Directory Traversal” remains in the third place, with a global impact of 39%.

  1. Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
  2. Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow unintentional disclosure of account information.
  3. ↔ Web Servers Malicious URL Directory Traversal (CVE-2010-4598,CVE-2011-2474,CVE-2014-0130,CVE-2014-0780,CVE-2015-0666,CVE-2015-4068,CVE-2015-7254,CVE-2016-4523,CVE-2016-8530,CVE-2017-11512,CVE-2018-3948,CVE-2018-3949,CVE-2019-18952,CVE-2020-5410,CVE-2020-8260) – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.

Top Mobile Malwares

This month AlienBot is the most prevalent Mobile malware, followed by Anubis and Joker.

  1. AlienBot – AlienBot is a banking Trojan for Android, sold underground as a Malware-as-a-Service (MaaS). It supports keylogging, dynamic overlays for credentials theft, as well as SMS harvesting for 2FA bypass. Additional remote control capabilities are provided by using a TeamViewer module.
  2. Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger and audio recording capabilities as well as various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
  3. Joker – An Android Spyware in Google Play, designed to steal SMS messages, contact lists and device information. Furthermore, the malware can also sign the victim up for paid premium services without their consent or knowledge.

Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

Experts Urge MSMEs to Build Strong Partnerships in Solving Problems,

Published

on

Kindly share this post

For a business to remain strong and relevant, experts have urged entrepreneurs to engage in solving problems in the Micro, Small, Medium Enterprises (MSMEs) space and build strong partnerships.

The experts stated at the United Bank for Africa (UBA) Business Series with the theme, “Stronger Together: Building Powerful Business Partnerships for Progress.”

Four seasoned business owners including: Beauty Entrepreneur, Dabota Lawson; Real Estate Mogul and Entrepreneur, Wale Ayilara; Journalist and TV producer Peace Hyde and Fashion Entrepreneur, Mai Atafo, encouraged participants to solve problems, invent in products & service and, create value to remain stronger in business and thrive amid competitive business environment.

Ayilara expressed that an entrepreneur must be able to solve problems and build a strong partnership in order to remain relevant in a challenging business environment.

He stressed further that there are a lot of business opportunities in Nigeria and questioned where consumers money is directed into.

Lawson said the inability to find a suitable sensitive skincare that matches her skin tone forced her to start her company.

On her part, Hyde stated that she ventures into media on the backdrop of telling Africa’s stories to international audiences.

Atafo said passion made him venture into fashion, maintaining that being an entrepreneur in Nigeria is tough work.

Speaking earlier, UBA’s Group Head, Retail and Digital Banking, Shamsideen Fashola, highlighted the critical role of partnerships in today’s dynamic business environment.

“In an increasingly interconnected world, the power of collaboration cannot be overstated. At UBA, we recognise that collaboration is the cornerstone of sustainable business success.

“The ‘Stronger Together’ Business Series is designed to inspire entrepreneurs and corporate leaders to forge meaningful alliances that drive progress, unlock opportunities, and contribute to Africa’s economic transformation,” Shamsideen said.


Kindly share this post
Continue Reading

News

FirstBank, NLNG, Shell back QEDNG Creative Powerhouse Summit

Published

on

Kindly share this post

Nigeria’s leading commercial bank, First Bank of Nigeria, has joined forces with Mighty Media Plus Network Limited for the maiden edition of the QEDNG Creative Powerhouse Summit.

Also supporting the event are Nigeria LNG (NLNG) and Shell Nigeria, two major players in the country’s energy and development sectors.

Chief Executive Officer of Mighty Media Plus Network Limited, Olumide Iyanda, announced the partnerships in a statement on Monday.

Mr Iyanda described FirstBank’s involvement as a strong statement of the bank’s belief in the power of Nigeria’s creative sector.

“FirstBank’s support is a reaffirmation of its long-standing commitment to promoting the creative economy,” he said. “Through First@arts, the bank has become a reliable partner to talents, institutions, and organisations working to grow Nigeria’s cultural assets.”

First@arts is FirstBank’s platform for supporting the arts. It provides financing, advisory services, and exposure for creatives across the value chain. The bank has backed major cultural events and partnered with institutions such as British Council, Duke of Shomolu Productions, Live Theatre Lagos, Freedom Park and Terra Kulture.

Among the projects FirstBank has supported are The Headies Awards, Lagos International Theatre Festival, The Oxymoron of Kenny Blaq, Kurunmi, Eni Ogun, and Oke Langbodo.

Iyanda also praised NLNG for its role in promoting excellence in literature and science through The Nigeria Prize for Literature, The Nigeria Prize for Science, and The Nigeria Prize for Literary Criticism.

“NLNG has shown leadership by rewarding creativity and innovation in ways that impact both the literary and scientific communities,” he said.

The prizes, worth up to USD100,000, are among the most prestigious on the continent. They celebrate Nigerian authors, critics, and scientists whose work makes a real difference.

Shell’s support for the summit reflects its ongoing commitment to education and social development. The company focuses on sustainable, community-driven educational projects, ranging from scholarships to infrastructure development and ICT donations.

“Shell’s belief in education as a foundation for long-term progress aligns with our vision for the summit,” Iyanda added.

He further noted that more sponsors will be unveiled in the coming weeks.

The QEDNG Creative Powerhouse Summit, themed “Financing as Catalyst for a Thriving Creative Economy,” will take place on Tuesday, August 12, 2025, at 10:00 a.m. The venue is the prestigious Radisson Blu Hotel, Isaac John Street, Ikeja GRA, Lagos.

The summit will bring together creatives, investors, policymakers, and business leaders to explore solutions to the funding challenges facing Nigeria’s creative industries.


Kindly share this post
Continue Reading

News

EFCC: Accusations Against Our Chairman Are Baseless and Misleading

Published

on

Kindly share this post

Economic and Financial Crimes Commission (EFCC) has strongly denied allegations of lack of integrity and transparency directed at its chairman, Ola Olukoyede, by columnist Steve Osuji.

In a statement issued by Dele Oyewale, spokesperson, EFCC. the commission described the claims as “worrisome and unjustifiable,” particularly criticizing the personal attacks on Olukoyede.

“More worrisome was his attack on Olukoyede for no justifiable reason. Allegations of lack of transparency, accountability and integrity deficit are wild and clearly off the mark,” Oyewale said.

He questioned the basis for the allegations and defended Olukoyede’s leadership since taking office.

“The question is: in what way has Olukoyede fallen short? Is it by insisting that the right things should always be done? By moving the nation’s anti-graft war forward radically and unprecedentedly?

“By bringing forth a preventive framework to tackle corruption and reaping bountiful gains for the nation?

“By recovering the globally-acclaimed 753 duplexes and other apartments, which are proceeds of fraudulent dealings for the nation?

“By launching the EFCC into a global map of accomplished anti-graft agencies? By handling 50,000 case files in one year?

“By embarking on a courageous internal cleansing system and other progressive initiatives to deepen and strengthen the anti-corruption fight?

“It is cowardly and uncharitable for any columnist to hide under vague and opaque cover to splash mud on Ola Olukoyede, arguably one of the finest breed of anti-graft czars around the world.”

Olukoyede, through the statement, reaffirmed that the EFCC has consistently submitted its annual reports to the National Assembly as required by law.

“Equally preposterous are claims of re-looting of assets by officers of the Commission. For the purpose of clarification, the Commission does not recover monetary assets into its covers and the non-monetary assets that are recovered are disposed of following clear pronouncements by court and proceeds paid into the Confiscated and Forfeited Properties Account account in the Central Bank in line with provisions of the Proceeds of Crime (Recovery and Management) Act, 2022.

“The EFCC does not operate in secrecy. All its operations are regularly communicated to the public, including public auction of assets. To deliberately cast the Commission in the mould of fraudulent engagements or criminality is not only mischievous but also untenable,” the statement concluded.


Kindly share this post
Continue Reading

Trending