News
Check Point Research Reveals XLoader as August’s Top Malware in Nigeria
Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies, a provider of cyber security solutions globally, has published its latest Global Threat Index for August 2022.
In Nigeria, XLoader is the most widespread malware this month impacting 14.47% of organisations in the country, followed by Phorpiex and Guloader both with 6.58%.
Globally, CPR reports that FormBook is now the most prevalent malware, taking over from Emotet, which has held that position since its reappearance in January.
FormBook is an Infostealer targeting Windows OS which, once deployed, can harvest credentials, collect screenshots, monitor and log keystrokes as well as download and execute files according to its command and control (C&C) orders.
Since it was first spotted in 2016, it has continued to make a name for itself, marketed as a Malware as a Service (MaaS) in underground hacking forums, known for its strong evasion techniques and relatively low price.
August also saw a rapid increase in GuLoader activity, which resulted in it being the fourth most widespread malware. GuLoader was initially used to download Parallax RAT but has since been applied to other remote access trojans and infostealers such as Netwire, FormBook and Agent Tesla.
It is commonly distributed through extensive email phishing campaigns, that lure the victim into downloading and opening a malicious file, allowing the malware to get to work.
Additionally, Check Point Research reports that Joker, an Android spyware, is back in business and has claimed third place in the top mobile malware list this month. Once Joker is installed, it can steal SMS messages, contact lists and device information as well as sign the victim up for paid premium services without their consent. Its rise can partially be explained by an uplift in campaigns as it was recently spotted to be active in some Google Play Store applications.
“The shifts that we see in this month’s index, from Emotet dropping from first to fifth place to Joker becoming the third most prevalent mobile malware, is reflective of how fast the threat landscape can change” said Maya Horowitz, VP Research at Check Point Software.
“This should be a reminder to individuals and companies alike, of the importance of keeping up to date with the most recent threats as knowing how to protect yourself is essential.
“Threat actors are constantly evolving and the emergence of FormBook shows that we can never be complacent about security and must adopt a holistic, prevent-first approach across networks, endpoints and the cloud.”
CPR also revealed this month that the Education/Research sector is still the most targeted industry by cybercriminals globally. With Government/Military and Healthcare taking second and third place as the most attacked sectors.
“Apache Log4j Remote Code Execution” returns to first place as the most exploited vulnerability, impacting 44% of organizations worldwide, after overtaking “Web Server Exposed Git Repository Information Disclosure” which had an impact of 42%.
Top malware families
*The arrows relate to the change in rank compared to the previous month.
FormBook is the most widespread malware this month impacting 5% of organizations worldwide, followed by AgentTesla with an impact of 4% and XMRig with 2%.
- XLoader – XLoader is an Android Spyware and Banking Trojan developed by the Yanbian Gang, a Chinese hacker group. This malware uses DNS spoofing to distribute infected Android apps to collect personal and financial information..
- Phorpiex – Phorpiex is a botnet (aka Trik) that has been active since 2010 and at its peak controlled more than a million infected hosts. It is known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
- Guloader – GuLoader is a downloader that has been widely used since December 2019. When it first appeared, GuLoader was used to download Parallax RAT but has been applied to other remote access trojans and info-stealers such as Netwire, FormBook, and Agent Tesla.
Top Attacked Industries Globally
This month the Education/Research sector remained in first place as the most attacked industry globally, followed by Government/Military and Healthcare.
- Education/Research
- Government/Military
- Healthcare
Top Exploited Vulnerabilities
This month, “Apache Log4j Remote Code Execution” is the most common exploited vulnerability, impacting 44% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which dropped from first place to second with an impact of 42%. “Web Servers Malicious URL Directory Traversal” remains in the third place, with a global impact of 39%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↓ Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow unintentional disclosure of account information.
- ↔ Web Servers Malicious URL Directory Traversal (CVE-2010-4598,CVE-2011-2474,CVE-2014-0130,CVE-2014-0780,CVE-2015-0666,CVE-2015-4068,CVE-2015-7254,CVE-2016-4523,CVE-2016-8530,CVE-2017-11512,CVE-2018-3948,CVE-2018-3949,CVE-2019-18952,CVE-2020-5410,CVE-2020-8260) – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
Top Mobile Malwares
This month AlienBot is the most prevalent Mobile malware, followed by Anubis and Joker.
- AlienBot – AlienBot is a banking Trojan for Android, sold underground as a Malware-as-a-Service (MaaS). It supports keylogging, dynamic overlays for credentials theft, as well as SMS harvesting for 2FA bypass. Additional remote control capabilities are provided by using a TeamViewer module.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger and audio recording capabilities as well as various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Joker – An Android Spyware in Google Play, designed to steal SMS messages, contact lists and device information. Furthermore, the malware can also sign the victim up for paid premium services without their consent or knowledge.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.
Flutterwave has secured a strategic investment from Circle Ventures, the venture capital arm of Circle Internet Group, to accelerate the expansion of its USDC payments and settlement infrastructure across Africa.
This comes as demand for faster and more efficient cross-border transactions grows.
The investment strengthens Flutterwave’s ambition to integrate USDC settlement into its existing payment ecosystem, allowing businesses to receive payments in local currencies while settling in the dollar-backed stablecoin.
The company said the move would reduce settlement delays and transaction costs while enabling near-instant settlements beyond traditional banking hours.
The announcement comes after Flutterwave participated in the launch of the Circle Payments Network in 2025, marking a deeper collaboration between the two companies in advancing digital payment infrastructure across the continent.
Flutterwave said the investment aligns with its strategy of positioning stablecoins as a key component of Africa’s financial infrastructure, while ensuring blockchain-based payment services operate within existing regulatory and compliance frameworks.
Commenting on the development, Flutterwave Founder and Chief Executive Officer, Olugbenga Agboola, said the investment would help build the infrastructure required for the next phase of global money movement from Africa.
According to him, stablecoins have evolved beyond experimentation into core financial infrastructure capable of transforming how businesses move money across borders.
“This support from Circle Ventures is about backing the rails that will power the next era of global money movement from Africa. Stablecoins like USDC are no longer an experiment; they are becoming core financial infrastructure.
“By embedding USDC settlement into our current payments infrastructure, we are building a system that lets businesses move money at the speed of the internet. This fundamentally changes how payments from Africa connect to the world, and it positions Flutterwave as the default stablecoin gateway for the continent,” Agboola said.
Justice Kudirat Kekere-Ekun, Chief Justice of Nigeria (CJN), has cautioned newly appointed judges of the lower courts against accepting unsolicited gifts, warning that such actions could expose them to petitions and erode public confidence in the judiciary.
The CJN gave the warning at the opening of an induction course for newly appointed judges in Abuja on Tuesday.
Represented by the Administrator of the National Judicial Institute (NJI), Justice Babatunde Adejumo, Kekere-Ekun urged the judges to uphold the highest standards of integrity and ensure the speedy and fair dispensation of justice.
She said judicial officers must remain above reproach in both their official and personal conduct.
“Most importantly, do not allow unsolicited gifts. You must equally avoid throwing unnecessary birthday parties. People will seize the opportunity to bring unsolicited gifts that can lead to petitions,” she said.
The CJN also advised the judges to work harmoniously with court officials, including registrars and exhibit keepers, while maintaining professionalism in the discharge of their duties.
She urged them to familiarise themselves with court rules to avoid being misled by legal practitioners and cautioned against the excessive use of contempt powers.
“You must work harmoniously with all the officials under you and ensure that you manage them diplomatically and technically. Read the rules of court so that lawyers will not take you for a ride,” she said.
Kekere-Ekun stressed that prompt and fair determination of cases was essential to sustaining public trust in the nation’s judicial system.
In his remarks, Justice Adejumo congratulated the new judges on their appointments, describing their elevation to the Bench as a significant responsibility in upholding constitutional supremacy, the rule of law and access to justice.
He said the induction programme was designed to equip participants with knowledge of judicial ethics, courtroom management, substantive and procedural law, and the practical skills required for effective adjudication.
Adejumo noted that the lower courts remain the first point of contact for most Nigerians seeking justice and play a critical role in the effective administration of the country’s judicial system.
He urged the judges to make the most of the training as they prepare to assume their responsibilities on the Bench.
Economic and Financial Crimes Commission (EFCC), on Tuesday, July 7, handed over 1,452 items recovered from proceeds of crime to the Federal Ministry of Education to support schools across the country.
The recovered items, comprising 501 double-step bunk beds, 939 mattresses and 12 wooden beds with mattresses, were formally presented to the Minister of Education, Tunji Alausa, at a ceremony in Abuja by the Chairman of the EFCC, Ola Olukoyede.
Speaking at the event, Olukoyede said the items were recovered during the commission’s “Operation Eagle Flush,” a nationwide operation conducted in late 2024 against cybercrime and other financial offences.
He described the operation as the largest single operation ever undertaken by the commission.
According to him, the operation led to the arrest of 792 suspects, including 193 foreign nationals, all of whom were investigated, prosecuted and convicted before the foreign nationals were deported after serving their jail terms.
Olukoyede said the decision to transfer the recovered items to the education ministry was in line with the Federal Government’s resolve to channel recovered assets into projects that directly benefit Nigerians.
The EFCC chairman noted that the handover was not the first intervention from recovered assets directed at the education sector.
He recalled that a forfeited university was previously transferred to the Federal Government and converted into the Federal University of Applied Sciences, Kachia.
Olukoyede also said recovered proceeds of crime had supported the establishment of the student loan scheme through the Nigerian Education Loan Fund.
He stated that more than 1.4 million students had benefited from the initiative, arguing that improved access to education would help reduce the attraction of cybercrime among young Nigerians.
He added that the commission would continue to recover proceeds of crime and ensure they were deployed transparently.
Receiving the items, Alausa commended the EFCC chairman for adopting a proactive approach to tackling corruption, particularly procurement-related offences and cybercrime.
He described education as central to the Federal Government’s economic agenda and said President Bola Ahmed Tinubu had deliberately directed recovered assets towards strengthening the sector.
The minister disclosed that the Federal University of Applied Sciences, Kachia, admitted about 3,000 students in its first academic session and is expected to increase its intake to over 5,000 students in its second year.
He also revealed that the initial N50 billion seed funding for the Nigerian Education Loan Fund came from recovered proceeds of crime.
CAC to Sanction Companies with Incomplete Business Letters From August 1
BVN Enrollments Hit 69.55m- NIBSS
CBN Warns against Rejection of N100 Banknotes
Data Protection Industry Hits N16.3Bn in 3 Years- NDPC
NCC Seeks Cost-Based Pricing Framework for Ducts
NASENI Moves to Digitize CCB’s 5m Assets Declaration and Operations
Mobile Internet Gender Gap Widest in Africa – GSMA
Nigeria Launches FreeTV Nationwide
CANAL+ Partners Samsung to Pre-Load DStv Stream on New Samsung TVs In Nigeria, Other African Countries
CredibleVoteNG Opens Free Access to all Polling Units in Nigeria after INEC Demanded N1.Bn for Register
News2 days agoNRC, Ponzi Scheme Collapses Resulting Loss of Billions of Naira
General News3 days agoIHS Nigeria, FCT-HSES Concludes Clean Cooking Energy Campaign “Project Breathe Clean Air” in Abuja
E-Business3 days agoKaspersky Transforms Threat Intelligence Reporting into an Interactive Content Hub
News3 days agoMicrosoft to Lay Off 4,800 Workers
Broadcasting3 days agoNELFUND Investigates 34 Universities Over Students’ Missing Tuition Refunds
Telecom3 days agoAirtel Africa Cuts Diesel Dependence by 9.1m Litres
Telecom3 days agoA New Blueprint – How Strategic Collaboration is Rewriting the Narrative on Youth Drug Abuse
News3 days agoAccess Bank, Fifth Chukker and UNICEF Renew Commitment to Expanding Educational Opportunities for Nigeria’s Most Vulnerable Children