Connect with us

E-Business

HP Q3 Wolf Security Report Shows What is Helping Threat Actors Hoodwink Detection Tools

Published

on

Kindly share this post

HP Inc. issued its third quarter HP Wolf Security Threat Insights Report, finding that archive file formats – such as ZIP and RAR files – were the most common file type for delivering malware, surpassing Office files for the first time in three years.

This report provides an analysis of real-world cyberattacks, helping organizations to keep up with the latest techniques cybercriminals use to evade detection and breach users in the fast-changing cybercrime landscape.

Based on data from millions of endpoints running HP Wolf Security, the research found 44% of malware was delivered inside archive files – an 11% rise on the previous quarter – compared to 32% delivered through Office files such as Microsoft Word, Excel, and PowerPoint.

The report identified several campaigns that were combining the use of archive files with new HTML smuggling techniques – where cybercriminals embed malicious archive files into HTML files to bypass email gateways – to then launch attacks.

For example, recent QakBot and IceID campaigns used HTML files to direct users to fake online document viewers that were masquerading as Adobe. Users were then instructed to open a ZIP file and enter a password to unpack the files, which then deployed malware onto their PCs.

As the malware within the original HTML file is encoded and encrypted, detection by email gateway or other security tools is very difficult.

Instead, the attacker relies on social engineering, creating a convincing and well-designed web page to fool people into initiating the attack by opening the malicious ZIP file. In October, the same attackers were also found using fake Google Drive pages in an ongoing effort to trick users into opening malicious ZIP files.

“Archives are easy to encrypt, helping threat actors to conceal malware and evade web proxies, sandboxes, or email scanners. This makes attacks difficult to detect, especially when combined with HTML smuggling techniques.

“What was interesting with the QakBot and IceID campaigns was the effort put in to creating the fake pages – these campaigns were more convincing than what we’ve seen before, making it hard for people to know what files they can and can’t trust,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.

HP also identified a complex campaign using a modular infection chain, which could potentially enable attackers to change the payload – such as spyware, ransomware, keylogger – mid-campaign, or to introduce new features, like geo-fencing.

This could enable an attacker to change tactics depending on the target they have breached. By not including malware directly in the attachment sent to the target, it is also harder for email gateways to detect this type of attack.

“As shown, attackers are constantly switching up techniques, making it very difficult for detection tools to spot,” comments Dr Ian Pratt, Global Head of Security for Personal Systems, HP Inc. “By following the Zero Trust principle of fine-grained isolation, organizations can use micro-virtualization to make sure potentially malicious tasks – like clicking on links or opening malicious attachments – are executed in a disposable virtual machine separated from the underlying systems.

“This process is completely invisible to the user, and traps any malware hidden within, making sure attackers have no access to sensitive data and preventing them from gaining access and moving laterally.”

HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users, capturing detailed traces of attempted infections.

HP’s application isolation technology mitigates threats that can slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.

By isolating threats on PCs that have evaded detection tools, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals. To date, HP customers have clicked on over 18 billion email attachments, web pages, and downloaded files with no reported breaches.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Firm Identifies AI as Common Denominator in Entertainment Industry’s 2026 Security Threats

Published

on

Kindly share this post

In its Kaspersky Security Bulletin, the cybersecurity company’s researchers identified critical threats expected to affect the global entertainment industry in 2026, from ticketing and visual effects pipelines to content delivery networks, games and regulation.

Artificial intelligence is changing how people buy tickets, watch movies and play games – and it is also changing how malicious actors target those experiences.

The entertainment industry is particularly sensitive to AI because the technology does not only automate back-office workflows; it increasingly creates and imitates the core product itself – human-centered stories, performances and visual experiences.

Kaspersky researchers highlighted five critical threats emerging as AI integrates deeper into entertainment workflows and consumer experiences.

What happens when ticket markets become an arms race between algorithms and scalpers? Kaspersky predicts that AI will make dynamic pricing faster and more granular, while also giving scalpers better tools to identify profitable events, deploy bots at scale and manage resale pricing across multiple platforms.

Even when artists choose fixed face values, AI-driven resellers can recreate “dynamic” pricing on secondary markets by adjusting prices in real time based on demand signals.

How will AI-commodified visual effects affect the risk of leaks? As high-end computer-generated imagery becomes more accessible through cloud-based AI platforms, studios will connect to larger networks of small vendors and freelancers.

Kaspersky expects attackers to target this extended supply chain by compromising render farms, plug-ins or small post-production houses in order to quietly steal sequences, assets or episodes before release, bypassing more heavily protected studio environments.

Could content delivery networks become a direct target? CDNs now carry unreleased episodes, game builds and live streams for many major entertainment brands, concentrating valuable content in a small number of providers.

AI-enhanced attackers will be able to map CDN infrastructure more efficiently, locate where premium content resides and search for weak credentials or configuration errors. A single successful compromise could expose multiple titles at once or allow malicious code to be injected into legitimate streams.

How will generative tools change abuse patterns in games and fan communities? Players and power users will continue to jailbreak in-game AI companions and content editors, and to use external generative models to produce material that would normally be blocked – such as hyper-violent or sexualized scenarios – and then reimport it into games, mods, or fan videos.

There is also a risk of personal data appearing in “creative” outputs if training or fine-tuning data is not properly cleaned, for example, when lyrics, dialogue, or imagery inadvertently include real names or other identifying details.

What role will regulation and compliance play for AI in creative work? Lawmakers and industry groups are moving toward rules that require transparency about AI-generated media and clearer consent and licensing practices for training on copyrighted material.

Kaspersky expects this to drive the creation of new roles inside entertainment companies, similar to COVID-compliance managers on film sets, focused on AI governance: checking how AI tools are trained, how they are used in production and marketing, and whether they comply with contractual and legal requirements.

“As we examined different parts of the industry, it became clear that AI is the thread running through most of the emerging risks.

“By diving into this, we wanted to highlight that AI will not only help defenders detect anomalies faster, it will also help attackers model markets, probe infrastructure and generate convincing malicious content.

“Studios, platforms and rights holders need to treat AI systems, and the data behind them, as part of their core attack surface, not just as creative tools, and build security and governance around that reality,” said Anna Larkina, web content analysis expert at Kaspersky.

 


Kindly share this post
Continue Reading

E-Business

Firm Detected a Fivefold Surge in QR Code Phishing Attacks in the Second Half of 2025

Published

on

Kindly share this post

Kaspersky has reported a spike in phishing emails containing malicious QR codes. Detections for these jumped from 46,969 in August 2025 to 249,723 in November 2025 – a more than fivefold growth – as cybercriminals increasingly exploit QR codes, a trend that will likely continue in 2026.

Attackers use QR codes in emails more frequently because they provide a simple and cost-effective way to conceal malicious URLs, evading detection by many protective solutions.

These QR codes are often embedded directly in email bodies or, even more commonly, within PDF attachments – an evolution that both masks phishing links and encourages users to scan them on mobile phones, which may have weaker security than work PCs.

Malicious QR codes commonly appear in mass phishing campaigns as well as targeted ones. Links embedded within them may lead to:

  • Phishing forms impersonating login pages for services like Microsoft accounts or internal corporate portals, designed to steal usernames, passwords, and other credentials.
  • Fake HR notifications urging employees to review or sign documents, such as vacation schedules, or even view lists of terminated staff, ultimately directing to credential-stealing sites.
  • Fraudulent invoices or purchase confirmations in PDF attachments, often combined with vishing (voice phishing) tactics that prompt victims to call provided phone numbers to “cancel” or clarify the transaction, enabling further social engineering attacks.

These tactics exploit trust in routine business communications, leading to credential theft, account takeovers, data breaches, and financial fraud.

“Malicious QR codes have evolved into one of the most effective phishing tools, particularly when hidden in PDF attachments or disguised as legitimate business communications like HR updates.

“The explosive growth in November 2025 highlights how attackers are capitalising on this low-cost evasion technique to target employees on mobile devices, where protection is often minimal.

“Without advanced image analysis at the email gateway and safe scanning practices, organisations are left vulnerable to credential compromise and downstream breaches,” comments Roman Dedenok, Anti-Spam Expert at Kaspersky.

To defend against this escalating threat, Kaspersky recommends educating employees on cybersecurity and deploying a mail server security solution such as Kaspersky Security for Mail Server that provides trusted and secure corporate email exchange, countering spam, email-borne infections, all forms of phishing, business email compromise (BEC), QR code attacks, and other threats.


Kindly share this post
Continue Reading

E-Business

JustMarkets Unveils Top 5 Trading Assets for 2026 Profits

Published

on

Kindly share this post

As the world markets continue into a new cycle that sees them plunging into much trouble and uncertainty, the year 2026 beckons to be one that is ridden with high uncertainty and volatility in terms of geopolitical and macroeconomic trends. Although the year may pose various threats to traders, it also comes along with unparalleled opportunities that may be leveraged to achieve trading success through various trading assets set to display notable volatility trends in the year 2026.

JustMarkets Unveils Top 5 Trading Assets for 2026 Profits

JustMarkets

From long-term fundamentals to trading dynamics, these five key assets on JustMarkets are set to continue to be at the forefront in trading in 2026.

1. Gold (XAU/USD): The Ultimate Macro-Driven Asset

The gold price in 2025 reached $4,500 per troy ounce, and it continues to be one of the most traded assets world-wide. Gold is extremely sensitive to changes in the levels of inflation, interest rate forecasts, geopolitical events, and currency exchange rate movements. The recent years have shown the ability of the gold market to provide an extremely strong bullish momentum, as well as intraday momentum.

The relevance of the market of gold in the year 2026 specifically stems from the fact that the environment surrounding the economy of the world is facing challenges associated with growth, debt, and the policies of monetary easing. Despite the falling inflation rate in the economy, the real interest rates are also expected to be pressured downward, which has traditionally translated to favorable market conditions for the price of gold. The factor of geopolitics uncertainty and tensions between specific countries also adds to the significance of the market of gold.

For traders, the market offers favorable conditions because of its high volatility regime with adequate liquidity.

2. Silver (XAG/USD): Volatility with a Dual Personality

Silver often overshadows gold, but its performance in 2025 significantly outperformed its main competitor. The precious metal briefly reached $85, making it one of the best-performing assets in 2025. While silver, like gold, is sensitive to monetary policy and market sentiment, it also enjoys strong industrial demand related to energy transition technologies, electronics, and manufacturing.

This dual nature makes silver one of the most volatile and fastest-growing precious metals and trading instruments overall. In 2026, as global growth expectations fluctuate and industrial cycles remain uneven, silver will experience sharp directional movements and prolonged periods of volatility, but will fundamentally maintain a growth trend similar to gold.

For traders seeking high volatility, silver offers even greater percentage swings than gold, making it a powerful tool for well-managed strategies, both scalping and holding positions for multiple days.

3. Oil (WTI & Brent): Trading Supply, Politics, and Policy

Oil is still among the market-sensitive commodities. The change in OPEC+ production levels, global events affecting major oil-producing nations, as well as changes in global demand can cause prices to surge within a matter of hours.

Turning the focus on the outlook for the year 2026, it seems likely that the oil market will face well-supplied conditions. However, this will not mean extremely small degrees of volatility. Events surrounding Venezuela represent yet another key source of uncertainty. Changes within US policies regarding Venezuela, the export of oil, and the political leadership of the country could represent important influences on the levels of supply, especially when the focus shifts towards the heavier grades. Yet, the possibility of a substantial recovery looks very unlikely.

Even in highly saturated markets, surprise disruptions, production policy changes, or geopolitical tensions, particularly in the Middle East, Eastern Europe, and Latin America, can cause sharp price moves. Conversely, macroeconomic growth slowdowns or money market cycles may exert pressures on demands, thereby leading to highly two-sided markets.

4. US Stock Indices (Dow 30, S&P 500, Nasdaq): Liquidity and Trend Potential

US indices continue to be key trading assets in global trading activity. The Dow Jones, S&P 500, and Nasdaq reflect US economic performance, as well as global risk appetite, capital flows, and technological leadership, primarily driven by the AI boom.

In 2026, stock markets are likely to face divergent forces. On the one hand, monetary easing is supporting valuations, while slowing economic growth, declining interest in AI, and political uncertainty are increasing volatility and the risk of a deeper sell-off. This combination often leads to strong moves, deep corrections, and renewed all-time highs.

Indices offer unrivaled liquidity, clear technical behavior, and the ability to express macroeconomic views without the risk associated with individual stocks, making them important tools for both short-term and position traders.

5. EUR/USD: The World’s Most Traded Currency Pair

EUR/USD remains the benchmark for forex trading. Its deep liquidity, tight spreads, and technical clarity make it a favorite among professional traders. More importantly, the euro reflects the balance between the world’s two most influential central banks: the Federal Reserve and the European Central Bank.

As interest rate differentials narrow and fiscal dynamics shift on both sides of the Atlantic, there’s every reason to believe EUR/USD will experience prolonged and powerful trending phases, punctuated by strong reactions to economic data and central bank signals.

In 2026, shifts in growth expectations, inflation trajectories, and political developments in both regions will keep this pair highly active, making EUR/USD a preferred option for traders who value stability, transparency, and adaptability across all trading styles.

Perfect Assets to Trade in 2026

These five markets unite their relevance on a global stage, and the responsiveness of these markets to macroeconomic and geopolitical events. Markets traded in gold, silver, oil, US indices, and the currency pair EUR/USD include the combination of markets most traders seek: deep liquidity, clear structure, and meaningful volatility.

On the JustMarkets trading platform, these instruments excel because of the optimal trading conditions offered, ensuring effective active trading. Tight spreads, fast execution of orders, as well as high leverage of up to 3000, enable traders to react swiftly to key market drivers, such as central bank statements or inflation figures, as well as geopolitical events.


Kindly share this post
Continue Reading

Trending