E-Business
ChromeLoader Malware Campaign Punishes Pirating Users, HP warns

HP Inc. yesterday issued its quarterly HP Wolf Security Threat Insights Report, showing threat actors are hijacking users’ Chrome browsers if they try to download popular movies or video games from pirating websites.
By isolating threats that have evaded detection tools on PCs, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals in the fast-changing cybercrime landscape. To date, HP Wolf Security customers have clicked on over 30 billion email attachments, web pages, and downloaded files with no reported breaches.
Based on data from millions of endpoints running HP Wolf Security, the researchers found:
- The Shampoo Chrome extension is hard to wash out: A campaign distributing the ChromeLoader malware tricks users into installing a malicious Chrome extension called Shampoo. It can redirect the victim’s search queries to malicious websites, or pages that will earn the criminal group money through ad campaigns. The malware is highly persistent, using Task Scheduler to re-launch itself every 50 minutes.
- Attackers bypass macro policies by using trusted domains: While macros from untrusted sources are now disabled, HP saw attackers bypass these controls by compromising a trusted Office 365 account, setting up a new company email, and distributing a malicious excel file that infects victims with the Formbook infostealer.
- Firms must beware of what lurks beneath: OneNote documents can act as digital scrapbooks, so any file can be attached within. Attackers are taking advantage of this to embed malicious files behind fake “click here” icons. Clicking the fake icon opens the hidden file, executing malware to give attackers access to the users’ machine – this access can then be sold on to other cybercriminal groups and ransomware gangs.
Sophisticated groups like Qakbot and IcedID first embedded malware into OneNote files in January. With OneNote kits now available on cybercrime marketplaces and requiring little technical skill to use, their malware campaigns look set to continue over the coming months.
“To protect against the latest threats, we advise that users and businesses avoid downloading materials from untrusted sites, particularly pirating sites. Employees should be wary of suspicious internal documents and check with the sender before opening. Organizations should also configure email gateway and security tool policies to block OneNote files from unknown external sources,” explainsPatrick Schläpfer, Malware Analyst at the HP Wolf Security threat research team, HP Inc.
From malicious archive files to HTML smuggling, the report also shows cybercrime groups continue to diversify attack methods to bypass email gateways, as threat actors move away from Office formats. Key findings include:
- Archives were the most popular malware delivery type (42%) for the fourth quarter running when examining threats stopped by HP Wolf Security in Q1.
- There was a 37-percentage-point rise in HTML smuggling threats in Q1 versus Q4.
- There was a 4-point rise in PDF threats in Q1 versus Q4.
- There was a 6-point drop in Excel malware (19% to 13%) in Q1 versus Q4, as the format has become more difficult to run macros in.
- 14% of email threats identified by HP Sure Click bypassed one or more email gateway scanner in Q1 2023.
- The top threat vector in Q1 was email (80%) followed by browser downloads (13%).
“To protect against increasingly varied attacks, organizations must follow zero trust principles to isolate and contain risky activities such as opening email attachments, clicking on links, or browser downloads. This greatly reduces the attack surface along with the risk of a breach,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users. It also captures detailed traces of attempted infections. HP’s application isolation technology mitigates threats that might slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.
E-Business
BPP Partners NDPC to Strengthen Data Protection

Dr Adebowale Adedokun, director-general, Bureau of Public Procurement (BPP), has reaffirmed the bureau’s commitment to data protection in Nigeria.
He disclosed this in a statement at the weekend by Zira Nagga, head of Public Relations, BPP, following a courtesy visit by a delegation from the National Data Protection Commission (NDPC).
Adedokun stressed that data protection is vital to Nigeria’s economy and development, particularly in areas such as demography, health, education, and other key sectors.
He emphasised that no country should leave its data unprotected, as it plays a crucial role in future planning and national development.
“Data governs the world. It is essential to technological progress and must be protected for a country or business to be taken seriously,” he said.
Adedokun described the visit, aimed at fostering partnership on data policy implementation and protection, as timely and aligned with national goals.
He said the BPP would collaborate closely with the NDPC to boost data development, capacity building, and enhance the procurement system.
“The BPP will support compliance as part of the ‘Nigeria First’ Policy, although it is not a core procurement eligibility requirement,” he explained.
He suggested a hybrid training model to help build strong capacity in data protection, privacy awareness, and policy understanding.
According to him, a dynamic training approach will reduce logistics costs and improve public confidence in data safety and privacy.
Dr Vincent Olatunji, CEO, and national commissioner, NDPC, praised Adedokun and the BPP for supporting data protection initiatives.
He said the partnership supports President Bola Tinubu’s vision and will strengthen data privacy across Ministries, Departments, and Agencies (MDAs).
“The collaboration will create awareness and train BPP staff to ensure a firm grasp of data protection principles and policies,” he stated.
Olatunji said the NDPC would establish a working group to finalise a Memorandum of Understanding beneficial to both institutions.
He added that President Tinubu signed the NDPC into law on 12 June 2023 to uphold citizens’ rights and protect national and business data.
Olatunji also noted that strict legal measures were in place to enforce data protection and ensure full compliance nationwide.
Both agencies agreed to form a team to sign the MoU and focus on capacity building and data management in procurement and beyond.
E-Business
FG Mulls Fibre Optic Layout to Bridge Internet Gaps

President Bola Tinubu said that his administration has initiated a project to install fibre optic cables across the country, aimed at enhancing the socio-economic development of Nigeria.
His plans were contained in a speech he delivered at a joint session of the National Assembly in commemoration of Democracy Day on Thursday, June 12.
He said the fibre optic layout is part of other projects being embarked on.
“In addition, we have embarked on an ambitious project to lay fibre optic cables across the nation, a transformative step toward bridging the digital divide and fostering greater connectivity.
“This initiative promises not only to enhance the speed and reliability of internet access but also to revolutionise how businesses operate, how students learn, and how communities stay connected,” Tinubu stated.
He maintained that by extending this critical infrastructure, his government is empowering entrepreneurs, enabling digital education, and providing the tools for our youth to compete in a globalised world.
In a most recent report on Internet connectivity, The ICIR pointed out how Nigeria has faced setbacks in its deployment of fibre optic cables and needs a transformation.
The challenges revolve around vandalism, inadequate coordination between road construction and telecom infrastructure, and varying right-of-way (RoW) charges across states.
Among industry experts, these issues impact network outages, increase repair costs, and hinder broadband expansion efforts.
It has also further threatened the digital economy, leading to slower Internet speeds, dropped calls, and unreliable connectivity among others.
E-Business
African Startups Raised $345m in Funding in May

African startups raised more than $345 million across 65 deals in May, more than double the amount raised in the same period of last year, according to a report by Briter, a research and business intelligence firm.
The report disclosed that both the number of deals and participating companies declined, confirming a growing trend of fewer companies raising funds in larger sizes.
It said fintech attracted the highest share of funding in May, accounting for 34 percent of the total, while cleantech followed closely, driven by a debt deal from Sun King. The company raised $80 million (in local currency) to expand clean energy access in Nigeria.
“Equity remains the primary instrument in terms of total value. There’s no doubt about it; in fact, equity deals with disclosed amounts captured more than half of the total funding volume in May.
“However, debt financing is increasingly proving its weight. Although it accounted for only 8 percent of all deals, it represented 32 percent of the total funding, highlighting the typically larger size of debt transactions. With the rise of specialised vehicles targeting early-stage businesses, debt is becoming an increasingly important part of Africa’s innovation funding landscape,” it said.
Briter’s report added that grants continued to play a vital role in early-stage support, especially in the education technology (EdTech) sector. The Mastercard Foundation led the pack in grant activity, funding a new cohort of EdTech innovators in Nigeria and Kenya. Each selected startup is set to receive $100,000 in grant funding, in addition to mentorship and business development support.
Multilaterals also made a strong showing in May, it said. The Multilateral Investment Guarantee Agency (MIGA), a World Bank Group member, issued a $179.6 million guarantee to CleanTech firm KOKO Networks. The support will help scale its clean energy solutions across Kenya.
“This deal not only demonstrates growing international confidence in African climate ventures but also signals a promising pathway for other asset-intensive startups in clean cooking, agriculture, and renewable energy,” the report said.
From a geographic perspective, Egypt emerged as the continent’s fundraising powerhouse for the month, contributing 51 percent of all funding raised. The country recorded 12 deals across equity, debt, and bond instruments. Notably, FinTech platform MNT-Halan raised $50 million through a bond issuance, further illustrating the diversification of capital-raising mechanisms in the region.
Outside Egypt, funding was distributed across Africa’s three other key markets, which are Egypt, Nigeria, and Kenya, with limited activity recorded in countries such as Ghana, Tunisia, Morocco, and Uganda, each registering between one and three deals.
In terms of exits, the African tech landscape continues to mature. Three companies—Baobab+, Qardy, and Shopa—were acquired in May, bringing the total number of exits this year to 22. This already surpasses last year’s count for the same period. Qardy was acquired by Catalyst Partners Middle East (CPME) in a disclosed deal valued at $23 million, the report added.
- Telecom2 days ago
GSMA, Mobile Industry Call for Strengthened Action to Advance Child Online Protection in Africa
- Telecom1 day ago
ALTON Clarifies on Migration to End-User Billing for USSD Services
- News2 days ago
Digital Africa Global Consult, NDPC Partner on Ground-Breaking “Nigeria Data Challenge” Initiative
- General News2 days ago
TD Africa, HP Strengthen Partnership to Advance Africa’s Tech Ecosystem
- General News1 day ago
African Parliamentarians Seek Answers from Telcos on Quality of Service
- News1 day ago
FCCPC Orders Air Peace to Appear Over Alleged Refund Violations
- Telecom1 day ago
Lagos Future Conference 2025: Stakeholders Call for Digital Responsibility and Grassroots Innovation
- News1 day ago
DStv Rewards Loyal Customers with Free Package Upgrades