E-Business
ChromeLoader Malware Campaign Punishes Pirating Users, HP warns

HP Inc. yesterday issued its quarterly HP Wolf Security Threat Insights Report, showing threat actors are hijacking users’ Chrome browsers if they try to download popular movies or video games from pirating websites.
By isolating threats that have evaded detection tools on PCs, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals in the fast-changing cybercrime landscape. To date, HP Wolf Security customers have clicked on over 30 billion email attachments, web pages, and downloaded files with no reported breaches.
Based on data from millions of endpoints running HP Wolf Security, the researchers found:
- The Shampoo Chrome extension is hard to wash out: A campaign distributing the ChromeLoader malware tricks users into installing a malicious Chrome extension called Shampoo. It can redirect the victim’s search queries to malicious websites, or pages that will earn the criminal group money through ad campaigns. The malware is highly persistent, using Task Scheduler to re-launch itself every 50 minutes.
- Attackers bypass macro policies by using trusted domains: While macros from untrusted sources are now disabled, HP saw attackers bypass these controls by compromising a trusted Office 365 account, setting up a new company email, and distributing a malicious excel file that infects victims with the Formbook infostealer.
- Firms must beware of what lurks beneath: OneNote documents can act as digital scrapbooks, so any file can be attached within. Attackers are taking advantage of this to embed malicious files behind fake “click here” icons. Clicking the fake icon opens the hidden file, executing malware to give attackers access to the users’ machine – this access can then be sold on to other cybercriminal groups and ransomware gangs.
Sophisticated groups like Qakbot and IcedID first embedded malware into OneNote files in January. With OneNote kits now available on cybercrime marketplaces and requiring little technical skill to use, their malware campaigns look set to continue over the coming months.
“To protect against the latest threats, we advise that users and businesses avoid downloading materials from untrusted sites, particularly pirating sites. Employees should be wary of suspicious internal documents and check with the sender before opening. Organizations should also configure email gateway and security tool policies to block OneNote files from unknown external sources,” explainsPatrick Schläpfer, Malware Analyst at the HP Wolf Security threat research team, HP Inc.
From malicious archive files to HTML smuggling, the report also shows cybercrime groups continue to diversify attack methods to bypass email gateways, as threat actors move away from Office formats. Key findings include:
- Archives were the most popular malware delivery type (42%) for the fourth quarter running when examining threats stopped by HP Wolf Security in Q1.
- There was a 37-percentage-point rise in HTML smuggling threats in Q1 versus Q4.
- There was a 4-point rise in PDF threats in Q1 versus Q4.
- There was a 6-point drop in Excel malware (19% to 13%) in Q1 versus Q4, as the format has become more difficult to run macros in.
- 14% of email threats identified by HP Sure Click bypassed one or more email gateway scanner in Q1 2023.
- The top threat vector in Q1 was email (80%) followed by browser downloads (13%).
“To protect against increasingly varied attacks, organizations must follow zero trust principles to isolate and contain risky activities such as opening email attachments, clicking on links, or browser downloads. This greatly reduces the attack surface along with the risk of a breach,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users. It also captures detailed traces of attempted infections. HP’s application isolation technology mitigates threats that might slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.
E-Business
Africa Tasked to Fast-track AI Skills Development

Africa has been urged to fast-track the development of Artificial intelligence (AI) skill to benefit from its economic value. AI could contribute $1.5 trillion to Africa’s economy by 2030 if the continent secures 10% of the global AI market, according to SAP, which sourced the statistic from online media.
However, a shortage of AI talent, with the need to retain cyber security and cloud skills, threatens to block opportunities to monetise growth.
This is part of a report released by SAP: ‘Africa’s AI Skills Readiness Revealed’, which reveals that African organisations are rushing to enhance their traditional IT skills base in the wake of accelerating adoption of AI.
The report adds that while 94% of organisations offer monthly AI training, none currently allocate more than 10% of their HR or IT budgets to skills development, a sharp decline from 2022.
Genevieve Koolen, HR director at SAP Africa, said: “There is a near-universal need for AI-related skills among African companies this year. Since traditional IT skills such as cloud and cyber security related competencies remain in high demand, companies now face the dual challenge of attracting and retaining traditional tech talent while also building greater AI competencies within their businesses. It is unsurprising then that most African organisations provide career development opportunities for employees with AI specialisations.”
The report reveals that all companies surveyed expect the demand for AI skills to increase in 2025. Nearly half said they expect a ‘significant’ increase.
Koolen added that while there is an urgent need for policymakers and education institutions to fast-track AI skills development initiatives among Africa’s swelling youth population, companies also face pressure to equip existing workers with future-ready skills.
“Thirty-eight percent of companies surveyed said reskilling of employees is a top skills-related challenge for them in 2025, and nearly half said the same of upskilling. The impact of these changes creates its own challenges, as evidenced by the two-thirds of companies that said helping employees understand why reskilling is necessary is a top priority.”
Research also showed that African organisations are alive to the possibilities presented by AI-related innovation, with companies citing perceived value in improved decision-making (64%), marketing capabilities (51%) and innovation (47%) enabled by AI.
However, poor access to AI-ready skills is already causing negative impacts among the same companies, including failed innovation initiatives, delays completing projects, greater pressure on teams and an inability to take on new client projects.
“Organisations are rising to this challenge by increasing the frequency of training offered to employees, with 94% saying they offer training at least monthly,” said Koolen.
However, the latest data indicates a drop in the allocated budget for skills development.
In a previous survey conducted in 2022, a quarter of organisations said they spend more than 15% of their HR or IT budgets on skills development and training. This year, not a single organisation that formed part of the research spent more than 10%.
SAP lists several measures that companies can implement to ensure they cultivate the correct skills mix:
Be prepared: With universal demand for tech and AI-related skills and an ongoing skills scarcity, African organisations must prepare for a shortfall in critical AI-related skills this year.
“The moment calls for a pragmatic approach that combines longer-term skills development – including reskilling and upskilling – with short-term measures that alleviate some of the immediate pressures and creates space for more robust skills development initiatives. Organisations also need to take care to support employees through this uncertain period, for example, by using human capital management technologies that help HR teams identify concerns.”
Prioritise training: Koolen said it is surprising that budget allocations for training and skills development appear to be shrinking. “Too many digital transformation and innovation initiatives fail to deliver the expected business value due to a lack of appropriate skills.
“In light of the rapid pace of technological advancement, any organisation that fails to invest in skills will likely find they are unprepared and unable to leverage new innovations. In time, this will erode their competitiveness and lead to significant impacts to the bottom line.”
Instead, organisations should place skills development at the core of their business strategies to ensure a steady stream of work-ready talent and invest sufficient budget to guarantee high-quality outcomes for employees and the business.
Partner well: While Africa has the fastest-growing youth population of any continent, there are still significant systemic challenges with equipping youth with adequate work-ready skills.
“Africa’s ability to reap the benefits of AI-related innovation rests on broader public-private sector efforts at cultivating the correct skills mix,” said Koolen. “Partnering with educational institutions and other industry skills development initiatives can accelerate the rate at which skills become available to companies.”
She added that technology vendors can also play a valuable role. “Large technology companies often have large global workforces and strong employer brands, allowing them to attract top talent. Partnering with tech venters can augment organisations’ skills base and provide valuable support to AI-led initiatives.”
E-Business
Google Announces $37m Funding in Africa

Google has outlined a wave of AI support across Africa, representing $37 million in cumulative funding — including previously committed but unannounced funding — to research, talent development, and infrastructure.
The funding package includes funding and partnerships that aim to strengthen AI research, support African languages, improve food systems, expand digital skills, and build research capacity.
The AI Collaborative for Food Security, a multi-partner initiative launched with $25 million in funding from Google.org will bring together researchers, and nonprofit organizations to co-develop AI tools for early hunger forecasting, crop resilience, and tailored guidance for smallholder farmers.
The goal is to help make food systems across Africa more adaptive, equitable, and resilient in the face of increasing climate and economic shocks.
Google also announced $3 million in funding to the Masakhane Research Foundation, the open research collective advancing AI tools in over 40 African languages.
The funding will support the development of high-quality datasets, machine translation models, and speech tools that make digital content more accessible to millions of Africans in their native languages.
To further empower innovation, Google is launching a catalytic funding initiative to support AI-driven startups tackling real-world challenges.
This platform will combine philanthropic capital, venture investment, and Google’s technical expertise to help more than 100 early-stage ventures scale AI-based solutions in agriculture, healthcare, education, and other vital sectors.
Startups will also receive mentorship, access to tools, and technical guidance to support responsible development.
Africa’s AI talent is growing rapidly, but the infrastructure to support it must grow in tandem.
That’s why a cornerstone of this announcement is the launch of the AI Community Center in Accra — a first-of-its-kind space for AI learning, experimentation, and collaboration in Africa.
The Center will host training sessions, community events, and workshops focused on responsible AI development. Its programming will span four pillars: AI literacy, community technology, social impact, and arts and culture — providing a platform for a diverse ecosystem of developers, students, and creators to engage with AI in ways that are grounded in African priorities.
To help meet the rising demand for AI and digital skills, Google is rolling out 100,000 Google Career Certificate scholarships for students in higher learning institutions across Ghana.
These fully funded, self-paced programs will focus on AI Essentials, Prompting Essentials, and other high-growth fields like IT Support, Data Analytics, and Cybersecurity — enabling more learners to access job-ready training and build careers in AI and the digital economy.
Beyond Ghana, Google.org is committing an additional $7 million to support AI education across Nigeria, Kenya, South Africa, and Ghana.
The funding will support academic institutions and nonprofits building localized AI curricula, online safety training, and cybersecurity programs.
Additionally, two new $1 million grants from Google.org aim to bolster AI research capacity across the continent.
One grant goes to the African Institute for Data Science and Artificial Intelligence (AfriDSAI) at the University of Pretoria to support applied AI research and training.
The other supports the Wits Machine Intelligence and Neural Discovery (MIND) Institute in South Africa, which will fund MSc and PhD students to conduct foundational AI research and help shape Africa’s role in the global AI landscape.
Speaking about the announcements, James Manyika, senior vice president for Research, Labs, and Technology & Society at Google, said: “Africa is home to some of the most important and inspiring work in AI today. We are committed to supporting the next wave of innovation through long-term investment, local partnerships, and platforms that help researchers and entrepreneurs build solutions that matter.”
Yossi Matias, vice president of Engineering and Research at Google, added: “This new wave of support reflects our belief in the talent, creativity, and ingenuity across the continent. By building with local communities and institutions, we’re supporting solutions that are rooted in Africa’s realities and built for global impact.”
E-Business
How High the Risk of a Cyber Incident in Your Organisation

One of the core reasons why businesses remain vulnerable to cyberthreats is that they underestimate their risk or overestimate the strength of their existing defences.
According to a recent Kaspersky survey entitled “Cybersecurity in the workplace: Employee knowledge and behaviour”, 52,1% of professionals surveyed in the Middle East, Turkiye and Africa (META) region, whose work requires the use of computers, asses the risk of a cybersecurity incident happening to their company as quite possible.
Commenting on the probable consequences of a cybersecurity incident, 55,6% of employees surveyed supposed that it might seriously affect the company. This understanding of risks comes not only from general cybersecurity awareness, but also from knowledge about cyber incidents in their organisations: 31,8% of respondents acknowledged such incidents happened in the past 12-months, while an additional 26,2% said they have heard about these incidents from colleagues.
Organisations nowadays face a variety of cyberthreats ranging from phishing and business email compromise to ransomware and advanced persistent threats.
In a lot of these attacks, the entry point into the organisation’s network is via a human mistake, and it is for that reason attackers actively employ social engineering techniques and AI tools to make their efforts more effective.
The survey shows that the majority of respondents understand that cybersecurity is an issue that should be considered by the IT department, while 23,9% also mentioned top level executives and 15,9% cited legal and financial employees as core groups within the business who should keep cybersecurity issues in mind. Only 30,6% of employees surveyed viewed cybersecurity as an issue that should be considered by all employees across the entire business.
“In today’s digital landscape, cybersecurity is a collective responsibility that extends beyond the IT department. Every employee should remain vigilant against evolving threats.
“Regular cybersecurity training, use of relevant IT solutions, well-defined policies and an incident response plan are essential pillars of organisational cyber resilience. When every team member is informed and prepared, the organisation stands stronger against cyber threats,” says Brandon Muller, Technical Expert for the MEA region at Kaspersky.
- Telecom3 days ago
History as MTN Nigeria Becomes First to Hit ₦10 Trillion Market Cap @ NGX
- Telecom3 days ago
MTN Nigeria’s CAPEX Soars Nearly 300 Percent to ₦565.7Bn in Q1 2025
- Telecom3 days ago
MTN Nigeria Celebrates Super Falcons with ₦150 Million Reward After WAFCON Triumph
- General News3 days ago
Nigeria Sends Egusi, Others to Space @ NASA’s Crew-11 Mission Launch
- Telecom3 days ago
Vitel Wireless Rolls Out 50,000 SIM Cards, eSIMs
- General News3 days ago
AfDB Approves $46m to Transform Healthcare in Sokoto State
- General News3 days ago
NITDA DG says Nigeria’s Digital Economy Will Empower Citizens, Bridge Divides, and Drive Unity
- News3 days ago
Experts Caution e-commerce Operators on Eco-friendly Materials