News
HP Wolf Security Report finds Surge in Daily QR “Scan Scams” Phishing on Mobile Devices
HP Inc. has issued its latest quarterly HP Wolf Security Threat Insights Report, showing hackers are diversifying attack methods, including a surge in QR code phishing campaigns.
By isolating threats on PCs that have evaded detection tools, HP Wolf Security has specific[i] insight into the latest techniques being used by cybercriminals in the fast-changing cybercrime landscape.
To date, HP Wolf Security customers have clicked on over 25 billion email attachments, web pages, and downloaded files with no reported breaches. Further HP Wolf Security insights will be featured at the upcoming Amplify Partner Conference, March 28-30, McCormick Place Chicago.
From February 2022, Microsoft began blocking macros in Office files by default, making it harder for attackers to run malicious code. Data collected by the HP Threat Research team shows that from Q2 2022, attackers have been diversifying their techniques to find new ways to breach devices and steal data. Based on data from millions of endpoints running HP Wolf Security[ii], the research found:
– The rise of QR scan scams: Since October 2022, HP has seen almost daily QR code “scan scam” campaigns. These scams trick users into scanning QR codes from their PCs using their mobile devices – potentially to take advantage of weaker phishing protection and detection on such devices. QR codes direct users to malicious websites asking for credit and debit card details. Examples in Q4 included phishing campaigns masquerading as parcel delivery companies seeking payment.
– HP noted a 38% rise[iii] in malicious PDF attachments: Recent attacks use embedded images that link to encrypted malicious ZIP files, bypassing web gateway scanners. The PDF instructions contain a password that the user is tricked into entering to unpack a ZIP file, deploying QakBot or IcedID malware to gain unauthorized access to systems, which are used as beachheads to deploy ransomware.
– 42% of malware was delivered inside archive files like ZIP, RAR, and IMG: The popularity of archives has risen 20% since Q1 2022, as threat actors switch to scripts to run their payloads. This is compared to 38% of malware delivered through Office files such as Microsoft Word, Excel, and PowerPoint.
“We have seen malware distributors like Emotet try to work around Office’s stricter macro policy with complex social engineering tactics, which we believe are proving less effective. But when one door closes another opens – as shown by the rise in scan scams, malvertising, archives, and PDF malware,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
“Users should look out for emails and websites that ask to scan QR codes and give up sensitive data, and PDF files linking to password-protected archives.”
In Q4, HP also found 24 popular software projects imitated in malvertising campaigns used to infect PCs with eight malware families – compared to just two similar campaigns in the previous year.
The attacks rely on users clicking on search engine advertisements, which lead to malicious websites that look almost identical to the real websites.
“While techniques evolve, threat actors still rely on social engineering to target users at the endpoint,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
“Organizations should deploy strong isolation to contain the most common attack vectors like email, web browsing and downloads. Combine this with credential protection solutions that warn or prevent users from entering sensitive details onto suspicious sites to greatly reduce the attack surface and improve an organization’s security posture.”
HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users, capturing detailed traces of attempted infections.
HP’s application isolation technology mitigates threats that might slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.
Sir Stanley Amuchie, chief operations and information officer, Fidelity Bank Plc has been named “Outstanding Banker of the Year” for his incisive record of digital transformation in the financial sector.
Sir Stanley Amuchie,
He was crowned at Africa’s Beacon of ICT Merit and Leadership Lectures and Awards, held at the weekend in Lagos.
Africa’s Beacon of ICT Merit and Leadership Lectures and Awards, is an annual, highly respected event in Nigeria’s technology sector organized by Nigeria CommunicationsWeek.
The awards recognize and celebrate organizations, public authorities, and individuals who have made extraordinary contributions to digital transformation and ICT growth across the continent.
Amuchie bagged “Outstanding Banker of the Year” according to the organizers for being one of Nigeria’s most accomplished and sought-after financial executive and technocrat.
He graduated as a First-Class student in Industrial Chemistry from the University of Benin and holds a Master’s degree in Corporate Governance from Leeds Beckett University in the UK.
With over two decades of experience, he is currently the executive director/chief operations & Information Fidelity Bank Plc.
Amuchie started his career at Arthur Andersen, Lagos, Nigeria (now KPMG Professional Services) in September 1995 where he rose to the level of a Senior manager before exiting the organization in February 2000 to work in the banking industry.
He had earlier been the General Manager/Group Zonal Head, Zenith Bank Plc. Prior to this position, he was in Financial Control & Strategic Planning Department of the Bank from February 2000 to May 2018 where he rose to the rank of Group Chief Financial Officer of the Bank.
In addition to his then responsibilities, he was a Director of Zenith Nominees Limited, a global Custody Subsidiary of Zenith Bank Plc.
He was at various times in-charge of the co-ordination of the Group’s Foreign Operations and Real Estate Operations.
Prior to the Bank’s election to operate as a Commercial bank with foreign authorization, he held the following positions in the subsidiaries of the Bank; Chairman – Zenith Securities Limited; Director – Zenith Trustees Ltd, Director – Zenith Bureau De Change Ltd.
He is a Fellow of the Institute of Chartered Accountants of Nigeria (FCA), and an
Honorary Senior Member of the Chartered Institute of Banker’s of Nigeria (HCIB).
He has attended various local and foreign Leadership courses in institutions like
Insead Business School in France and Harvard Business School in USA. Currently, he is an Executive Director Chief of Operations and Information Fidelity Bank PLC.
He is the Founder/President of The Goodlight Foundation.
News
NCC Retains Rudman as Chairman of the Newly Inaugurated IPv6 Council Board, Tasked Them to Advance Nigeria’s Digital Migration
The Nigerian Communications Commission (NCC) has officially inaugurated the new board of the Nigerian Internet Protocol version 6 (IPv6) Council in Ikeja, Lagos. Mr. Muhammed Rudman, Chief Executive Officer of the Internet Exchange Point of Nigeria (IXPN), will continue to serve as Chairman.
This inauguration marks a significant milestone for Nigeria’s telecommunications sector, as global demand for IPv4 now exceeds the available IPv4 address space.
Following the event, Rudman acknowledged the contributions of former board members, including Olusola Teniola (former President, ATCON), Funke Opeke (Founder, MainOne), Mary Uduma (former President, NiRA), and Lanre Ajayi (past President, ATCON), emphasizing that their involvement was instrumental in establishing the nation’s foundational IPv6 migration efforts.
Rudman noted that membership in the IPv6 Council is institution-based. The reconstituted board includes Mr. Muhammed Rudman as Chairman and a representative from the NCC as Co-Chairman. Institutional representatives from NITDA, ATCON, NIRA, ALTON, ISPON, and NgREN serve as board members, with Dr. Chris Uwaje and Prof. Latif Ladid acting as Advisers. This group is responsible for leading the nationwide migration from IPv4 to IPv6.
“The transition to IPv6 is a strategic national priority. It is essential for enabling Nigeria’s digital transformation, economic growth, and global competitiveness. The council’s strategy identifies IPv6 as a primary catalyst for national development, focusing on three pillars: supporting emerging technologies such as 5G and the Internet of Things (IoT), promoting economic diversification, and providing enhanced security and performance compared to legacy solutions such as Network Address Translation (NAT),” Rudman stated.
To achieve these objectives, the council’s action plan is structured around two primary initiatives: awareness-raising and capacity-building. The board will prioritize promoting national awareness of IPv6 through targeted events and workshops, while also providing IPv6 training to network engineers across various operators, including ISPs, telecommunications companies, educational institutions, and financial organizations. These efforts are expected to facilitate the acquisition and deployment of IPv6 throughout Nigerian networks.
The council will develop and oversee the national IPv6 strategy, monitor adoption across sectors, and report regularly to the Federal Government. Additionally, the council will identify technical challenges, strengthen local engineering capacity, and recommend regulatory measures to encourage ISPs, telecommunications operators, academic institutions, and enterprises to upgrade.
With the Nigeria IPv6 Council now operational, local enterprises and network providers are required to upgrade their systems to sustain the nation’s position in the global digital landscape.
Pan-African talent accelerator ALX is expanding its footprint and shifting to a fully self-paced learning model to train and integrate young Africans into the workforce, as the global economy reorganises around artificial intelligence (AI).
Partnering with the MasterCard Foundation, the technology training provider and career accelerator designed to equip African talent, says it enables learners to access tech training for $5 a month.
It emphasises a shift in demographics saying that by 2035, more young Africans will enter the workforce annually.
ALX notes that its model has graduated 347,100 learners, with 63% finding employment within six months. Women represent over half of all graduates. To increase flexibility, the organisation emphasises that learning is now entirely self-paced.
“Learners progress through modular blocks, earning credentials as they go, ensuring that the training fits around their existing responsibilities,” says Shana-Michelle Rabonda, Chief Operating Officer of ALX.
Rabonda adds that global employers are taking notice: “We are building a direct pipeline to the global digital economy. When companies look for elite tech talent, they are looking at Africa.”
Due to this demand, firms such as Absa, Stanbic Bank, MTN, and KPMG now employ between 50 and 180 ALX graduates each. Meanwhile, community entrepreneurs have created over 60,100 jobs through AI startups like Signvrse and Edulga.
With Africa’s AI market projected to grow to $16.5 billion by 2030, ALX operates alongside competitors like Moringa School and GoMyCode to secure mindshare.
“With the right skills and networks, young Africans can seize these opportunities,” Rabonda emphasises. “Africa’s youth should not just be consumers of AI; they should be creators shaping innovations that will define the global economy.”
AfDB Says 70 Percent of Nigerian Firms Depend on Generators
Amuchie, ED Fidelity Bank Named “Outstanding Banker of the Year” @ ABoICT 2026
Lagos Airport Reviews Ebola Emergency Response, Tightens Passenger Monitoring
NCC Retains Rudman as Chairman of the Newly Inaugurated IPv6 Council Board, Tasked Them to Advance Nigeria’s Digital Migration
Nigerian Banks Under Pressure as Bad Loans Hit 8.03% After CBN Policy Shift
MTN, VDT, Zoracom, Digital Realty Back 2026 Girls in ICT Campaign
Vitel Wireless Partners Fintechs to Expand Access to Services
CPN Begins Crackdown on Quack IT Professionals, Vows Tougher Action against Cybercrime
Nigeria Hit by 24.1m Data Breaches – Surfshark
Kaspersky Identifies Ongoing Supply Chain Attack on Official Daemon Tools Website Distributing Backdoor Malware
Telecom3 days agoTelcos Mull Calculator to Address Data Depletion Complaints
General News3 days agoNCDC Says Lagos, FCT, Others on High Ebola Alert
E-Business3 days agoAnthropic Raises $65 Bn to Expand AI Research, Innovation
Telecom2 days agoNCC Expands IPv6 Board with the Appointment of Olusola Teniola, Funke Opeke Others
E-Financial2 days agoNigerian Capital Market to Transition to T+1 Settlement Cycle on Monday
E-Business2 days agoReport Shows Start-ups Fuel Innovations in Africa
E-Business2 days agoNDPC Raises Alarm: Fake News, Data Abuse Could Destroy Nigeria’s 2027 Elections
Telecom2 days agoQNET, Manchester City Host Football Clinic for Young Talents in Ghana