News
HP Wolf Security Report finds Surge in Daily QR “Scan Scams” Phishing on Mobile Devices
HP Inc. has issued its latest quarterly HP Wolf Security Threat Insights Report, showing hackers are diversifying attack methods, including a surge in QR code phishing campaigns.
By isolating threats on PCs that have evaded detection tools, HP Wolf Security has specific[i] insight into the latest techniques being used by cybercriminals in the fast-changing cybercrime landscape.
To date, HP Wolf Security customers have clicked on over 25 billion email attachments, web pages, and downloaded files with no reported breaches. Further HP Wolf Security insights will be featured at the upcoming Amplify Partner Conference, March 28-30, McCormick Place Chicago.
From February 2022, Microsoft began blocking macros in Office files by default, making it harder for attackers to run malicious code. Data collected by the HP Threat Research team shows that from Q2 2022, attackers have been diversifying their techniques to find new ways to breach devices and steal data. Based on data from millions of endpoints running HP Wolf Security[ii], the research found:
– The rise of QR scan scams: Since October 2022, HP has seen almost daily QR code “scan scam” campaigns. These scams trick users into scanning QR codes from their PCs using their mobile devices – potentially to take advantage of weaker phishing protection and detection on such devices. QR codes direct users to malicious websites asking for credit and debit card details. Examples in Q4 included phishing campaigns masquerading as parcel delivery companies seeking payment.
– HP noted a 38% rise[iii] in malicious PDF attachments: Recent attacks use embedded images that link to encrypted malicious ZIP files, bypassing web gateway scanners. The PDF instructions contain a password that the user is tricked into entering to unpack a ZIP file, deploying QakBot or IcedID malware to gain unauthorized access to systems, which are used as beachheads to deploy ransomware.
– 42% of malware was delivered inside archive files like ZIP, RAR, and IMG: The popularity of archives has risen 20% since Q1 2022, as threat actors switch to scripts to run their payloads. This is compared to 38% of malware delivered through Office files such as Microsoft Word, Excel, and PowerPoint.
“We have seen malware distributors like Emotet try to work around Office’s stricter macro policy with complex social engineering tactics, which we believe are proving less effective. But when one door closes another opens – as shown by the rise in scan scams, malvertising, archives, and PDF malware,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
“Users should look out for emails and websites that ask to scan QR codes and give up sensitive data, and PDF files linking to password-protected archives.”
In Q4, HP also found 24 popular software projects imitated in malvertising campaigns used to infect PCs with eight malware families – compared to just two similar campaigns in the previous year.
The attacks rely on users clicking on search engine advertisements, which lead to malicious websites that look almost identical to the real websites.
“While techniques evolve, threat actors still rely on social engineering to target users at the endpoint,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
“Organizations should deploy strong isolation to contain the most common attack vectors like email, web browsing and downloads. Combine this with credential protection solutions that warn or prevent users from entering sensitive details onto suspicious sites to greatly reduce the attack surface and improve an organization’s security posture.”
HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users, capturing detailed traces of attempted infections.
HP’s application isolation technology mitigates threats that might slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.
Google and UpSkill Universe, Sub-Saharan Africa’s leading AI and business skills training partner, have announced a major redesign of the Google Hustle Academy programme.
For the first time, the free training initiative is open to everyone, not just business owners. The new curriculum is focused on equipping individuals and entrepreneurs with practical AI skills.
Small businesses are the engine of Africa’s economy, creating over 80% of jobs on the continent. To help them grow, the Hustle Academy was launched in 2022, providing bootcamp-style training on business strategy, digital skills, AI, and leadership. The program has since trained over 18,000 SMEs, with many reporting increased revenue and job creation.
Now, as AI reshapes the job market, the program is evolving. The 2026 edition is built for anyone in Sub-Saharan Africa, including employees, students, and jobseekers, who wants to use AI to advance their career.
To meet the needs of a diverse audience, the new format includes short, 60-minute webinars and more immersive, high-impact bootcamps. These sessions are laser-focused on putting AI to work immediately in areas like digital commerce, marketing, and growth strategy.
Speaking about the academy, Gori Yahaya, Founder & CEO UpSkill Universe said “The 2026 Hustle Academy is designed to close the AI Skills gap with hands-on training that is short, focused, and immediately useful. AI is reshaping how businesses win and how careers are built, right across this continent.
“We’re excited to renew our partnership, now in its fifth year with Google, combining their global AI leadership with our deep regional AI expertise. The next wave of AI leaders will come from this continent. We are making sure they are ready.”
The Hustle Academy initiative has strengthened digital competitiveness across emerging African economies by enabling SMEs to move beyond AI awareness to practical implementation, positioning them for sustained growth in an increasingly AI-driven business environment.
“We believe that the future of Africa’s digital economy lies in the hands of individuals and entrepreneurs alike. Our new strategy focuses on scaling reach by training individuals in the latest AI-centered tools and techniques,” said a Google representative.
Lagos State has dragged 45 individuals and firms, including Bi-Courtney Aviation, DAAR Communications and Leaders & Company, to revenue court for tax debts running into billions of naira.
Lagos Govt
Bi-Courtney, operators of Murtala Muhammed Airport Terminal Two, faces N38.7 million claim; DAAR, behind Africa Independent Television, owes N22.4 million; ThisDay publishers Leaders & Company allegedly skip N67.1 million.
GMT Energy Resources tops corporates at N145.8 million, followed by Sheriff Deputies at N132.1 million; others like Heyden Petroleum, AA Rescue, BRT operator Primero also listed.
Individuals owe N13.5 million to N35 million each.
Attorney-General Lawal Pedro said suits followed ignored notices, aiming to enforce laws and fund infrastructure.
More defendants: IENG Nigeria, James Fisher, V Care Diagnostics, Venture Garden, Saro Africa, Barry Callebaut, Native Media, First Consulting, Eyowo Payments.
Compliant taxpayers post-notice escaped prosecution; defaulters risk penalties, interest, jail.
Pedro urged prompt filings and payments.
National Agency for Food and Drug Administration and Control (NAFDAC) has alerted Nigerians on counterfeit and unregistered Cerelac Mixed Fruits and Wheat products being sold in Lagos.
NAFDAC said Nestle Nigeria, the genuine Marketing Authorisation Holder of the product, received a complaint of suspected counterfeit purportedly manufactured by Nestlé Spain, bearing Batch Code 308002910.
It said that Nestle Nigeria reported that the complainant described that the counterfeit product emitted an odour suggestive of possible contact with fuel.
NAFDAC said that preliminary review of the product by Nestle Nigeria indicated that it had expired, in spite of the container displaying an expiry date of 10-2026, which suggested that the date coding had been tampered with (revalidated).
Nestle Cerelac Mixed Fruits and Wheat is a nutritious infant cereal, designed to be a delicious first food for infants.
NAFDAC said that its post-marketing surveillance’s directorate officers in Lagos conducted a surveillance visit to Maxland Shopping Centre, 193 Ago Palace, Okota, where the product was purchased by the complainant.
It added that the suspected counterfeit and unregistered Cerelac were found on sale at the premises and subsequently mopped up, while Nestle assisted in identifying the distinguishing features between registered and unregistered product.
According to the regulatory agency, Nestle revealed that the unregistered product used a hyphen (-) to separate the day from the year, while the registered product used a slash (/) to separate the day from the year.
“It is important to note that Nestle Nigeria is not aware of the channels through which the products are supplied into the country.
“Healthcare professionals and consumers are advised to report any suspicion of the sale of substandard and falsified regulated products to the nearest NAFDAC office, call 0800-162-3322, or send an email to [email protected],” NAFDAC said.
The agency warned that counterfeit formula often lacked essential nutrients, vitamins and minerals, leading to stunted growth or developmental issues.
It said that such formula might also contain contaminants that might lead to severe health consequences to infants or even death.
NAFDAC reiterated its commitment to safeguarding public health adding that it would continue surveillance activities to ensure the quality, safety, and efficacy of all NAFDAC-regulated products circulating in Nigeria.
It said that all zonal directors of the agency and state coordinators had been directed to carry out surveillance and mop up the revalidated product, if found within the zones and states.
The agency urged distributors, retailers, healthcare professionals, and caregivers to exercise caution and vigilance within the supply chain, to avoid the distribution, sale, and use of fake products.
Nigeria Demands Cloud Sovereignty to Anchor Africa’s Digital Independence
Digital Encode Sponsors PAFON 3.0 as CVO Prof. Adewale Set to Deliver Keynote on Cybersecurity and Trust
Polaris Bank Targets Youth with Financial Literacy Drive
As Nigerians Struggle to Save, Mutual Benefits Highlights Power of Structured Financial Planning
NITDA Boss Warns of AI Threat Shift @ GITEX Africa
Spotify’s Loud & Clear Report Reveals Over ₦60Bn Revenue for Nigerian Artists in 2025
Why JustMarkets Is a Strong Choice for Gold Trading
Kuda MFB Increases Kuda for Her Business Grants to ₦10 Million
Canal+ to Cut Jobs as Part Sweeping Restructuring
Nigeria tops global rankings for USDT, USDC ownership
Telecom2 days agoFrom Import Dependency to Local Capacity: Nigeria’s Tech Manufacturing Journey
E-Financial2 days agoHow Unethical Deals Triggered CBN Takeover of Union Bank -Forensic Report
E-Business2 days agoKaspersky Warns of Digital Medicine Risks on the Occasion of World Health Day
E-Financial2 days agoBVN Database hits 68.6m – NIBSS
Broadcasting2 days agoMultichoice Bleeds Customers in South Africa, Loses 580,000 Subscribers
E-Financial1 day agoHow Sterling Bank Is Empowering 1m Women with ₦500Bn
Broadcasting2 days agoBroadcast Station Owners Reject IBAN’s Threat to Boycott Wike’s Media Engagements
General News2 days agoFG Asks MDAs to Halt New Policies Until Full Compliance with RIA