News
HP Wolf Security Threat Insights Report Shows How Cybercriminals Are Tricking Users
HP Inc. has released its latest global HP Wolf Security Threat Insights Report, providing analysis of real-world cybersecurity attacks. By isolating threats that have evaded detection tools and made it to user endpoints, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals.
The HP Wolf Security threat research team identified a wave of attacks utilizing Excel add-in files to spread malware, helping attackers to gain access to targets, and exposing businesses and individuals to data theft and destructive ransomware attacks.
There was a huge six-fold increase (+588%) in attackers using malicious Microsoft Excel add-in (.xll) files to infect systems compared to last quarter – a technique found to be particularly dangerous as it only requires one click to run the malware.
The team also found adverts for .xll dropper and malware builder kits on underground markets, which make it easier for inexperienced attackers to launch campaigns.
Additionally, a recent QakBot spam campaign used Excel files to trick targets, using compromised email accounts to hijack email threads and reply with an attached malicious Excel (.xlsb) file.
After being delivered to systems, QakBot injects itself into legitimate Windows processes to evade detection.
Malicious Excel (.xls) files were also used to spread the Ursnif banking Trojan to Italian-speaking businesses and public sector organizations through a malicious spam campaign, with attackers posing as Italian courier service BRT. New campaigns spreading Emotet malware are now using Excel instead of JavaScript or Word files too.
Other notable threats isolated by the HP Wolf Security threat insight team include:
- The return of TA505? HP identified a MirrorBlast email phishing campaign sharing many tactics, techniques, and procedures (TTPs) with TA505, a financially motivated threat group known for massive malware spam campaigns and monetizing access to infected systems using ransomware. The attack targeted organizations with the FlawedGrace Remote Access Trojan (RAT).
- Fake gaming platform infecting victims with RedLine: A spoofed Discord installer website has been discovered, tricking visitors into downloading the RedLine infostealer and stealing their credentials.
- Switching up uncommon file types is still bypassing detection: The Aggah threat group targeted Korean-speaking organizations with malicious PowerPoint add-in (.ppa) files disguised as purchase orders, infecting systems with remote access Trojans. PowerPoint malware is unusual, making up 1% of malware.
“Abusing legitimate features in software to hide from detection tools is a common tactic for attackers, as is using uncommon file types that may be allowed past email gateways.
Security teams need to ensure they are not relying on detection alone and that they are keeping up with the latest threats and updating their defenses accordingly.
For example, based on the spike in malicious .xll sightings we are seeing, I’d urge network administrators to configure email gateways to block incoming .xll attachments, only permit add-ins signed by trusted partners or disable Excel add-ins entirely,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
“Attackers are continually innovating to find new techniques to evade detection, so it’s vital that enterprises plan and adjust their defenses based on the threat landscape and the business needs of their users. Threat actors have invested in techniques such as email thread hijacking, making it harder than ever for users to tell friend from foe.”
The findings are based on data from the many millions of endpoints running HP Wolf Security. HP Wolf Security tracks malware by opening risky tasks in isolated, micro Virtual Machines (micro-VMs) to understand and capture the full infection chain, helping to mitigate threats that have slipped past other security tools.
This has let customers click on over 10 billion email attachments, web pages, and downloads with no reported breaches. By better understanding the behaviour of malware in the wild, HP Wolf Security researchers and engineers can bolster endpoint security protection and overall system resilience.
Other key findings in the report include:
- 13% of email malware isolated had bypassed at least one email gateway scanner.
- Threats used 136 different file extensions in their attempts to infect organizations.
- 77% of malware detected was delivered via email, while web downloads were responsible for 13%.
- The most common attachments used to deliver malware were documents (29%), archives (28%), executables (21%), spreadsheets (20%).
- The most common phishing lures were related to the New Year or business transactions such as “Order”, “2021/2022”, “Payment”, “Purchase”, “Request” and “Invoice”.
“Today, low-level threat actors can carry out stealthy attacks and sell access onto organized ransomware groups, leading to large-scale breaches that could cripple IT systems and grind operations to a halt,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
“Organizations should focus on reducing the attack surface and enabling quick recovery in the event of compromise. This means following Zero Trust principles and applying strong identity management, least privilege and isolation from the hardware level.
For example, by isolating common attack vectors such as email, browsers or downloads using micro-virtualization, any potential malware or exploits lurking within are contained, rendering them harmless.”
In a striking moment of global recognition for African talent in artificial intelligence, Shenzhen-based Nigerian technologist, Francis Okafor has emerged as the second-place winner at the 2026 Tencent OpenClaw Hackathon, a fiercely contested competition hosted by Chinese tech giant Tencent.
The achievement places the Nigerian engineer among the top innovators in one of the world’s most competitive technology hubs, Shenzhen, often described as China’s Silicon Valley.
Okafor’s journey to the podium was anything but scripted. Walking into Tencent’s facility on the day of the contest, he found a room already buzzing with elite programmers deep in preparation.
“Laptops open. Heads down. Some people setting up their system before the challenges even dropped,” he recalled, contrasting the scene with his own uncertainty at that moment. “And then there is me — a Nigerian looking around like, okay Francis, what exactly are you doing here?”
Rather than confidence, his first reaction was raw nerves. “I won’t lie, I had goose bumps. Not the inspirational kind,” he admitted, describing a quiet internal debate about whether he had wandered into territory far beyond his league. Yet that hesitation quickly gave way to experimentation, a hallmark of the hackathon spirit.
Earlier that same week, Tencent had rolled out OpenClaw integration into WeChat (known domestically as Weixin), exposing its massive user base to AI agent capabilities.
Okafor, a senior technology lead, artificial intelligence advocate, and global community organiser, had already been stress-testing the system and decided, on the spot, to build his entry around it. “I had been pushing it hard all week just to see what it could do… so when the challenges dropped I thought, you know what, let me use this thing as my weapon.”
That decision proved decisive. Competing against some of the most accomplished engineers in China’s hyper-competitive tech ecosystem, Okafor’s solution stood out for both ingenuity and execution. “It went far enough apparently,” he said with understated pride after securing second place.
Remarkably, he had entered without a grand plan. “I didn’t go in with a strategy. I went in for the thrill of it… Honestly I thought I would learn a few things and go home with a good story.” Instead, he left with a trophy, and a narrative that has resonated far beyond the competition hall.
Beyond personal triumph, Okafor emphasized the broader technological significance of the moment. Tencent released the WeChat OpenClaw plugin on the very morning of the event, effectively putting advanced AI agent tools into the hands of an estimated 1.4 billion users.
In his view, this signals a profound shift in how artificial intelligence will reach the public. The company, he observed, is “not just making AI accessible to developers… they are bridging it to everyone,” while using hackathons to identify innovators capable of pushing the technology forward, regardless of origin.
Okafor was acutely aware of his uniqueness in the room. “I was definitely the only African there and for sure stood out,” he noted. Yet what mattered was not nationality but capability. “Nobody cared about where I was from. They cared about what I built.”
His message to aspiring technologists, particularly those from underrepresented regions, is both simple and powerful: show up. “Enter things you think you have no business entering,” he urged. “The worst case is you learn something. The best case is you shock yourself.”
In an industry often defined by geography, capital, and institutional advantage, Okafor’s victory offers a compelling counter-narrative. Talent, preparation, and courage can still disrupt expectations, even in rooms that seem designed for someone else.
As he concluded in a line that has since captured widespread attention: Black excellence, he said, “doesn’t need a geography.”
Economic and Financial Crimes Commission (EFCC) has urged the Central Bank of Nigeria (CBN) to deepen collaboration and provide faster operational support in Enugu State.
Zonal Director of the EFCC Enugu Zonal Directorate, Commander Daniel Isei, made the call during a courtesy visit to the CBN Branch Controller in Enugu, Mr Otutubuike Justice Agbaeze, on Tuesday.
The engagement forms part of ongoing efforts to boost inter-agency ties, enhance financial sector accountability, and fortify anti-money laundering initiatives nationwide.
Isei described the CBN as “our most critical partner in the fight against economic and financial crimes,” highlighting years of joint operations and the bank’s role in securing recovered assets.
“The CBN naturally stands out as one of our most critical partners… it serves as a secure repository for valuables recovered by the EFCC and it has greatly enhanced our operations,” he stated.
While commending past cooperation, Isei appealed for quicker responses to the EFCC’s frequent investigative requests from its Enugu office.
“We understand that these requests may be demanding, but timely responses are crucial, as time is of the essence in financial investigations. We therefore seek your continued indulgence in ensuring that our letters receive expeditious attention,” he added.
In response, Agbaeze reaffirmed CBN’s dedication to the partnership, pledging expert support and improved synergy “in the interest of financial system stability and national development.”
As smart devices with artificial intelligence (AI) tools, and always-on services become part of everyday life, the cybersecurity habits many people formed a few years ago may no longer be enough.
From AI-powered scams to social media trends that encourage users to upload personal details, the way people interact online is changing quickly. Ensuring that you stay secure now requires small, deliberate actions in your daily digital behaviour. Experts from Kaspersky, a global cybersecurity and digital privacy company, share the below advice to stay safe online.
- Be cautious with verification requests. Many scams now mimic legitimate verification processes, asking users to confirm accounts, update payment details, or approve login attempts. Because people are used to frequent security prompts, it is easy to respond automatically. Pause before sharing verification codes or personal information and independently verify requests through official websites or by contacting service providers directly.
- Cultivate healthy AI usage habits. AI agents, chatbots and multimedia-generating apps can be convenient and entertaining, but uploading high-resolution photos or personal information carries privacy implications. Facial images can function as biometric identifiers, and once shared with an online service, be it AI or a social network, control over how that data is stored or reused may be limited. Before using AI tools, review privacy policies, minimise the personal information they provide, and avoid uploading sensitive documents or confidential content.
- Do your homework on AI. For parents, the rise of AI assistants introduces another dimension. While AI tools can help in making education interactive and gamified, children may turn to AI tools for homework support or entertainment without fully understanding how their data is used or how to evaluate responses critically.
Open conversations about responsible AI use, privacy awareness, and the importance of not oversharing personal information can help children build safe digital habits from an early age.
- Audit your online subscriptions. Reducing digital exposure is another simple but often overlooked step. Over time, unused subscriptions, dormant accounts, and forgotten apps accumulate personal data and payment details. Regularly reviewing subscriptions, deleting unused accounts, and checking which apps have access to personal information can significantly reduce risks of this data being leaked.
- Secure your devices and home. Device longevity and smart home security also play an important role. Older devices that no longer receive security updates may contain unpatched vulnerabilities.
Ensure that smartphones, laptops, routers, and smart home devices are running the latest firmware and are protected with strong passwords and multi-factor authentication. Changing default passwords on connected devices and securing home Wi-Fi networks are essential steps in protecting both personal data and physical spaces.
As technology and AI becomes more integrated into daily life, security is less about dramatic measures and more about consistent, informed habits.
“Technology evolves quickly, and our online behaviour should keep pace,” says Brandon Muller, Technical Expert for the Middle East and Africa region at Kaspersky. “Take time to review privacy settings, app permissions, and connected third-party services, removing anything that is no longer needed. By being more deliberate about what we share, how we verify requests, and how we manage our devices, we can significantly reduce exposure to modern cyber risks while enjoying all the benefits of new technologies.”
Anti Graft Agencies Raise Alarm over Rising Crypto-Linked Financial Crimes
NITDA Takes Over National Digital Architecture System
NDIC Insures 99 Percent of Bank Customers
FG Shifting Focus to “Meaningful Connectivity” to Drive Inclusion – Minister
CBN Bars Chronic Loan Defaulters from Accessing Loans
Kaspersky Discovers New Phishing Campaign Exploiting Google Tasks Notifications to Steal Corporate Credentials
Spotify’s Loud & Clear Report Reveals Over ₦60Bn Revenue for Nigerian Artists in 2025
Madonna University Taps Tech Guru Adote for Strategic Board Role
China Threatens to Shut Nigeria’s Satellite Over $11.44m Unpaid Debt
MTN Nigeria Posts Record N1.70 Trillion Pre‑Tax Profit, Declares N20 Dividend for 2025
Telecom3 days agoUS Jury Finds Meta, Google Liable in Landmark Social Media Addiction Case
News3 days agoEU Pumps €290m into Nigeria’s Digital, Health, Agri Sectors
News3 days agoFirm Shares Tips for Updating Your Digital Habits for an AI-driven World
E-Business3 days ago5 Wealth-Building Strategies for Nigerian Women-led Businesses
General News2 days agoNCC to Curb SIM Fraud, Strengthen Digital Security with New Platform
Telecom3 days agoMobile Money Transactions Accounted for $2 trillion in 2025
E-Business3 days agoNigeria, Finland Sign Cybersecurity Pact
General News2 days agoKidnappers Now Use Banks to Collect Ransoms — Expert