News
HP Wolf Security Threat Insights Report Shows How Cybercriminals Are Tricking Users

HP Inc. has released its latest global HP Wolf Security Threat Insights Report, providing analysis of real-world cybersecurity attacks. By isolating threats that have evaded detection tools and made it to user endpoints, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals.
The HP Wolf Security threat research team identified a wave of attacks utilizing Excel add-in files to spread malware, helping attackers to gain access to targets, and exposing businesses and individuals to data theft and destructive ransomware attacks.
There was a huge six-fold increase (+588%) in attackers using malicious Microsoft Excel add-in (.xll) files to infect systems compared to last quarter – a technique found to be particularly dangerous as it only requires one click to run the malware.
The team also found adverts for .xll dropper and malware builder kits on underground markets, which make it easier for inexperienced attackers to launch campaigns.
Additionally, a recent QakBot spam campaign used Excel files to trick targets, using compromised email accounts to hijack email threads and reply with an attached malicious Excel (.xlsb) file.
After being delivered to systems, QakBot injects itself into legitimate Windows processes to evade detection.
Malicious Excel (.xls) files were also used to spread the Ursnif banking Trojan to Italian-speaking businesses and public sector organizations through a malicious spam campaign, with attackers posing as Italian courier service BRT. New campaigns spreading Emotet malware are now using Excel instead of JavaScript or Word files too.
Other notable threats isolated by the HP Wolf Security threat insight team include:
- The return of TA505? HP identified a MirrorBlast email phishing campaign sharing many tactics, techniques, and procedures (TTPs) with TA505, a financially motivated threat group known for massive malware spam campaigns and monetizing access to infected systems using ransomware. The attack targeted organizations with the FlawedGrace Remote Access Trojan (RAT).
- Fake gaming platform infecting victims with RedLine: A spoofed Discord installer website has been discovered, tricking visitors into downloading the RedLine infostealer and stealing their credentials.
- Switching up uncommon file types is still bypassing detection: The Aggah threat group targeted Korean-speaking organizations with malicious PowerPoint add-in (.ppa) files disguised as purchase orders, infecting systems with remote access Trojans. PowerPoint malware is unusual, making up 1% of malware.
“Abusing legitimate features in software to hide from detection tools is a common tactic for attackers, as is using uncommon file types that may be allowed past email gateways.
Security teams need to ensure they are not relying on detection alone and that they are keeping up with the latest threats and updating their defenses accordingly.
For example, based on the spike in malicious .xll sightings we are seeing, I’d urge network administrators to configure email gateways to block incoming .xll attachments, only permit add-ins signed by trusted partners or disable Excel add-ins entirely,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
“Attackers are continually innovating to find new techniques to evade detection, so it’s vital that enterprises plan and adjust their defenses based on the threat landscape and the business needs of their users. Threat actors have invested in techniques such as email thread hijacking, making it harder than ever for users to tell friend from foe.”
The findings are based on data from the many millions of endpoints running HP Wolf Security. HP Wolf Security tracks malware by opening risky tasks in isolated, micro Virtual Machines (micro-VMs) to understand and capture the full infection chain, helping to mitigate threats that have slipped past other security tools.
This has let customers click on over 10 billion email attachments, web pages, and downloads with no reported breaches. By better understanding the behaviour of malware in the wild, HP Wolf Security researchers and engineers can bolster endpoint security protection and overall system resilience.
Other key findings in the report include:
- 13% of email malware isolated had bypassed at least one email gateway scanner.
- Threats used 136 different file extensions in their attempts to infect organizations.
- 77% of malware detected was delivered via email, while web downloads were responsible for 13%.
- The most common attachments used to deliver malware were documents (29%), archives (28%), executables (21%), spreadsheets (20%).
- The most common phishing lures were related to the New Year or business transactions such as “Order”, “2021/2022”, “Payment”, “Purchase”, “Request” and “Invoice”.
“Today, low-level threat actors can carry out stealthy attacks and sell access onto organized ransomware groups, leading to large-scale breaches that could cripple IT systems and grind operations to a halt,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
“Organizations should focus on reducing the attack surface and enabling quick recovery in the event of compromise. This means following Zero Trust principles and applying strong identity management, least privilege and isolation from the hardware level.
For example, by isolating common attack vectors such as email, browsers or downloads using micro-virtualization, any potential malware or exploits lurking within are contained, rendering them harmless.”
News
HCSF Describes Galaxy Backbone as a Strategic Partner in Civil Service Digitalization Reforms

In a significant move towards accelerating the Federal Government’s digital transformation agenda, the Head of the Civil Service of the Federation (HCSF), Mrs. Didi Esther Walson-Jack, paid a strategic working visit to Galaxy Backbone (GBB) Limited, Nigeria’s foremost ICT infrastructure and shared services provider.
The visit, which took place at GBB’s National Shared Services Centre (NSSC) and Corporate Headquarters in Abuja, forms part of the HCSF’s efforts to deepen collaboration and assess the technological infrastructure supporting the government’s ongoing digitalisation reforms across Ministries, Departments, and Agencies (MDAs).
Accompanied by the Permanent Secretary of the Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE), Mr. Adeladan Rafi’u Olarinre, and a delegation of Permanent Secretaries and Directors from the Office of the Head of the Civil Service, the visit featured an extensive tour of GBB’s cutting-edge Digital Infrastructure facilities. These included its Network Operations Centre (NOC), Security Operations Centre (SOC), and Uptime Institute Certified Tier III Data Centre; all built to ensure a secure, scalable, and sovereign digital infrastructure for Nigeria’s public sector.
In his welcome address, Mr. Adeladan Rafi’u Olarinre described Galaxy Backbone as a critical institution under the supervision of FMCIDE, tasked with providing the nation’s core digital infrastructure and shared ICT services. “Today’s visit is an important opportunity to showcase the significant progress GBB has made in building the infrastructure necessary for a truly digital government,” he said.
“I believe this engagement will foster stronger alignment and collaboration between MDAs and GBB as we move towards a more connected and efficient public service.”
The Managing Director/CEO of Galaxy Backbone, Professor Ibrahim A. Adeyanju, expressed appreciation for the visit, noting its alignment with GBB’s mandate to support Nigeria’s digital transformation goals.
“A visit of this nature by the Head of the Civil Service is highly symbolic,” he remarked. “It reinforces the central role that the Civil Service plays in national development and highlights the importance of strategic ICT infrastructure in driving effective governance.”
He went on to emphasize that GBB’s mission to design, build, and manage Nigeria’s digital infrastructure aligns seamlessly with the Civil Service’s digital reform agenda.
“Our platforms; including the 1Government Cloud, GovMail, and our extensive fibre optic network present in 28 states, are designed to support a digitally enabled, secure, and efficient government,” Prof. Adeyanju added.
He also called for greater collaboration with the Office of the Head of Service to drive the adoption of GBB’s infrastructure, particularly the fibre optic connectivity already terminated at Federal Secretariat buildings across 28 states of the country. He further appealed for support in expanding Local Area Networks (LANs) in the Federal Capital Territory (FCT) secretariat buildings to integrate more MDAs into the digital ecosystem.
In her remarks, Mrs. Walson-Jack commended the world-class infrastructure and strategic digital solutions developed by Galaxy Backbone, stating that her perception of the agency had been greatly enhanced following the tour.
“This visit has opened my eyes to the enormous potential and capacity that Galaxy Backbone brings to Nigeria’s digital journey,” she said. “I now see GBB not just as an ICT agency, but as a strategic partner in the realisation of our dream to build a modern, agile, and paperless civil service.”
She specifically praised GBB’s support for the “War Room” initiative, the widespread deployment of GovMail — currently serving over 34,000 civil servants, and the agency’s high-speed fibre connectivity provided during the 2025 International Civil Service Week hosted by her office.
Reaffirming her office’s commitment to achieving a fully paperless civil service by December 31, 2025, the Head of Service expressed optimism that this goal is attainable with stronger collaboration and technical support from GBB.
She also highlighted several strategic areas where partnership with GBB is critical, including:
- Full implementation of the 1Government Cloud to host and manage MDA operations.
- Adoption of an Enterprise Content Management System (ECMS) to streamline records and workflow automation across MDAs.
- Synergy between the 1Government Cloud Academy and the Civil Service Academy to enhance capacity development.
- Training and onboarding of civil servants on innovative tools such as Service-Wise GPT – Nigeria’s AI-powered platform designed to transform public service delivery.
Mr. Mohammed Ibrahim Sani, Executive Director of Finance and Corporate Services at GBB, in his vote of thanks, expressed deep gratitude to the Head of Service and her delegation for taking the time to visit and engage with the team. He reiterated GBB’s unwavering commitment to partnering with all stakeholders to deliver inclusive, resilient, and forward-looking digital solutions for the Federal Government.
News
Festive Seasons Trigger 400% Spike in Livestock Prices Across Nigeria’s North East — Moniepoint Study

A new study by Moniepoint Inc., Africa’s leading financial technology company, has revealed that livestock prices in Nigeria’s North East markets surge by up to 400% during festive seasons, driven by high demand from cities like Lagos, Port Harcourt, and Onitsha.
The report, which focuses on informal market dynamics in Borno State, shows that traders at Kasuwan Shanu in Gamboru dispatch an average of 50 trucks daily during peak periods such as Eid al-Adha and Christmas, with goat prices rising by 400–470% and rams by over 230%.
Beyond seasonal spikes, the study highlights a shift toward investment-minded trading, where livestock is raised in advance to boost resale value. This approach is helping traders build more stable and profitable businesses, despite the region’s history of conflict and economic volatility.
Key findings include:
- 51.2% of traders source goods from Maiduguri, reinforcing its role in Nigeria’s food supply chain
- 45% of traders now accept digital payments, with mobile transfers and POS usage rising sharply since the 2023 cash crunch
- Informal credit and trust-based transactions remain dominant, often conducted via phone calls and voice notes, without formal contracts
Moniepoint CEO Tosin Eniolorunda said the company’s tools are helping bridge long-standing gaps in access to finance: “This shift isn’t just tech-enabled — it’s structurally impactful. We’re helping build an economy where everyone can participate.”
The study joins Moniepoint’s growing portfolio of thought leadership on Nigeria’s informal economy, following previous reports on Onitsha Market, community pharmacies, and women-owned businesses.
News
FG Eyes 8,000MW Power Boost in 18 Months with Grid Overhaul

Federal Government has expressed optimism that improved management of the national power grid by the Nigerian Independent System Operator (NISO) could increase electricity supply to 8,000 megawatts within the next 12 to 18 months.
Speaking at a leadership retreat to onboard NISO’s top management in Abuja, the Director General of the Bureau of Public Enterprises (BPE), Mr. Ayodeji Gbeleyi, noted that although Nigeria’s installed generation capacity exceeds 14,000MW, actual daily output has hovered around 5,500MW.
Gbeleyi emphasized that with more efficient grid operations and increased investments in transmission and distribution infrastructure, the power sector is poised for substantial improvement.
“As an independent entity, NISO now carries the critical responsibility of managing the national grid with impartiality and integrity. It must ensure non-discriminatory access, efficient dispatch coordination, and fair market settlements—free from undue influence or conflicts of interest.
“Currently, about 5,500MW of power is being wheeled daily, compared to a nameplate generation capacity of over 14,000MW. With the right investments and enhanced grid resilience, it is realistic to project a 50% increase in supply within 12 to 18 months,” he said.
Gbeleyi also revealed that the Federal Government has secured a $500 million loan from the World Bank to support the upgrade of the distribution infrastructure. Under this initiative, 3.2 million electricity meters will be deployed across Nigeria, with an additional 2 to 3 million meters to be provided through a separate presidential initiative.
Chairman of the NISO Board, Dr. Adesegun Akin-Olugbade, stressed the significance of NISO’s independence following its unbundling from the Transmission Company of Nigeria (TCN).
“NISO is not just a new institution; it represents a new approach—an independent system operator, a neutral market coordinator, and a strategic planning authority. Our responsibilities span real-time grid operations, long-term system planning, and the development of the electricity market.
“These are not peripheral tasks—they are core to national stability. When power fails, everything else suffers: industry, healthcare, education, even security,” he said.
Also speaking, NISO Managing Director/CEO, Engr. Abdu Bello, affirmed that the 8,000MW target is achievable within the projected timeframe.
“We must stay focused, get our internal structures right, and attract private sector investment. This retreat is part of the strategic planning process. With a clear direction and commitment, the goal is within reach,” Bello stated.
- Telecom2 days ago
MTN’s ₦31.75Bn Investment in Health Lauded at Arthur Mbanefo Lecture
- E-Financial3 days ago
Zenith Banks Leads as 8 Banks Suffer N156Bn Impairment Charges
- Telecom3 days ago
MTN @ Swish Fusion Summit, Showcases 5G Rollout Strategy
- News2 days ago
CAC Flags Three Companies, Warns Nigerians
- E-Business3 days ago
Olatunji, NDPC Boss Calls for Integrated Strategy on Data Privacy, Cyber-Security
- E-Business2 days ago
France Moves to Tackle Online GBV in Africa with $4.3m Funding
- News3 days ago
US Launches ‘Window on America’ @ Ogun Tech Hub
- E-Business3 days ago
Kaspersky Experts Warn of the Risks Hidden Behind QR Codes