News
HP Wolf Security Threat Insights Report Shows How Cybercriminals Are Tricking Users

HP Inc. has released its latest global HP Wolf Security Threat Insights Report, providing analysis of real-world cybersecurity attacks. By isolating threats that have evaded detection tools and made it to user endpoints, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals.

The HP Wolf Security threat research team identified a wave of attacks utilizing Excel add-in files to spread malware, helping attackers to gain access to targets, and exposing businesses and individuals to data theft and destructive ransomware attacks.
There was a huge six-fold increase (+588%) in attackers using malicious Microsoft Excel add-in (.xll) files to infect systems compared to last quarter – a technique found to be particularly dangerous as it only requires one click to run the malware.
The team also found adverts for .xll dropper and malware builder kits on underground markets, which make it easier for inexperienced attackers to launch campaigns.
Additionally, a recent QakBot spam campaign used Excel files to trick targets, using compromised email accounts to hijack email threads and reply with an attached malicious Excel (.xlsb) file.
After being delivered to systems, QakBot injects itself into legitimate Windows processes to evade detection.
Malicious Excel (.xls) files were also used to spread the Ursnif banking Trojan to Italian-speaking businesses and public sector organizations through a malicious spam campaign, with attackers posing as Italian courier service BRT. New campaigns spreading Emotet malware are now using Excel instead of JavaScript or Word files too.
Other notable threats isolated by the HP Wolf Security threat insight team include:
- The return of TA505? HP identified a MirrorBlast email phishing campaign sharing many tactics, techniques, and procedures (TTPs) with TA505, a financially motivated threat group known for massive malware spam campaigns and monetizing access to infected systems using ransomware. The attack targeted organizations with the FlawedGrace Remote Access Trojan (RAT).
- Fake gaming platform infecting victims with RedLine: A spoofed Discord installer website has been discovered, tricking visitors into downloading the RedLine infostealer and stealing their credentials.
- Switching up uncommon file types is still bypassing detection: The Aggah threat group targeted Korean-speaking organizations with malicious PowerPoint add-in (.ppa) files disguised as purchase orders, infecting systems with remote access Trojans. PowerPoint malware is unusual, making up 1% of malware.
“Abusing legitimate features in software to hide from detection tools is a common tactic for attackers, as is using uncommon file types that may be allowed past email gateways.
Security teams need to ensure they are not relying on detection alone and that they are keeping up with the latest threats and updating their defenses accordingly.
For example, based on the spike in malicious .xll sightings we are seeing, I’d urge network administrators to configure email gateways to block incoming .xll attachments, only permit add-ins signed by trusted partners or disable Excel add-ins entirely,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
“Attackers are continually innovating to find new techniques to evade detection, so it’s vital that enterprises plan and adjust their defenses based on the threat landscape and the business needs of their users. Threat actors have invested in techniques such as email thread hijacking, making it harder than ever for users to tell friend from foe.”
The findings are based on data from the many millions of endpoints running HP Wolf Security. HP Wolf Security tracks malware by opening risky tasks in isolated, micro Virtual Machines (micro-VMs) to understand and capture the full infection chain, helping to mitigate threats that have slipped past other security tools.
This has let customers click on over 10 billion email attachments, web pages, and downloads with no reported breaches. By better understanding the behaviour of malware in the wild, HP Wolf Security researchers and engineers can bolster endpoint security protection and overall system resilience.
Other key findings in the report include:
- 13% of email malware isolated had bypassed at least one email gateway scanner.
- Threats used 136 different file extensions in their attempts to infect organizations.
- 77% of malware detected was delivered via email, while web downloads were responsible for 13%.
- The most common attachments used to deliver malware were documents (29%), archives (28%), executables (21%), spreadsheets (20%).
- The most common phishing lures were related to the New Year or business transactions such as “Order”, “2021/2022”, “Payment”, “Purchase”, “Request” and “Invoice”.
“Today, low-level threat actors can carry out stealthy attacks and sell access onto organized ransomware groups, leading to large-scale breaches that could cripple IT systems and grind operations to a halt,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
“Organizations should focus on reducing the attack surface and enabling quick recovery in the event of compromise. This means following Zero Trust principles and applying strong identity management, least privilege and isolation from the hardware level.
For example, by isolating common attack vectors such as email, browsers or downloads using micro-virtualization, any potential malware or exploits lurking within are contained, rendering them harmless.”
News
FG Mandates Shared Funding for N1.98trn Electricity Subsidy

Federal Government has directed state governments to begin sharing the cost of electricity subsidy alongside the Federal Government.

It was gathered that payments for the subsidy will now be funded through the Power Assistance Consumers Fund (PCAF), a government-backed pool created to subsidise electricity bills for low-income and vulnerable consumers.
The fund is designed to replace blanket subsidies with targeted support, improve affordability amid rising tariffs and stabilise the power sector.
More than 18 states are already operating electricity regulatory agencies, while others are preparing to do so. The states include Lagos, Ondo, Osun, Ekiti, Edo, Delta, Bayelsa, Akwa Ibom, Cross River, Abia, Anambra, Imo, Kogi, Niger, Nasarawa, Plateau, Gombe and Jigawa.
The Director-General of the Budget Office of the Federation, Mr. Tanimu Yakubu, disclosed this in Abuja at the opening of the 2026 Post-Budget Preparation workshop on the Government Integrated Financial Management Information System (GIFMIS).
Speaking in an address read on his behalf by the Director of Expenditure Social, Mr. Yusuf Muhammed, Yakubu said states that enjoy the political benefits of electricity subsidy must also contribute to covering the financial gap created by the policy.
“Mr. President has directed that we operationalise a clearer framework to share the cost of electricity across the federation, so the burden is not treated as an open-ended fiscal residual — I mean federal residual,” he said.
“If you want a stable power sector, we must pay for the choices we make. When tariffs are held low, a gap is created. That gap is a subsidy, and a subsidy is a bill.”
He added: “In 2026, we will stop pretending that this bill can be left to the Federal Government alone, especially where the policy choice or the political benefit is shared across tiers of government.”
According to him, the President has ordered the activation of the electricity sector’s legal framework to ensure subsidy burden-sharing is practical and transparent.
“This means subsidy costs must be explicit, tracked and funded, so they do not return as arrears, liquidity crises or hidden liabilities in the market,” Yakubu said.
“It also means that if any tier of government chooses affordability intervention, the responsibility must be clear, agreed and enforceable. This is not punishment. It is an alignment.”
He further warned MDAs to make subsidy-related costs visible in their planning.
“The implication is simple: make subsidy-related costs visible in your planning and submissions. Do not push liabilities into the market as arrears or unfunded commitments,” he said.
Yakubu also disclosed that President Bola Tinubu has directed a review of Nigeria’s Fiscal Responsibility Framework to make fiscal rules more dynamic and enforceable.
“Fiscal rules are not a slogan; they are the guardrails of government,” he said.
“Without guardrails, spending becomes impulsive, debt becomes casual, and the budget becomes a statement of intent rather than a tool of delivery.”
He added that capital projects in 2026 must be delivery-ready and properly financed.
“A long list of projects is not a development strategy. It is often a map of disappointment. What citizens feel is delivery, completed roads, reliable power, functional schools and working hospitals,” Yakubu said.
Reacting to the development, the Director of Media and Communications of the Nigerian Governors’ Forum, Mr. Yunusa Abdullahi, said: “We are reviewing the context and content of the information. We will not be making further comments on it.”
News
Spain Bars Under-16s from Social Media in Digital Safety Crackdown

Spanish Prime Minister Pedro Sánchez has unveiled plans to ban children under 16 from social media platforms, mandating robust age verification systems as part of a sweeping legislative package to curb toxic online content.

Speaking at the World Government Summit in Dubai, Sánchez declared platforms must erect “real barriers that work” beyond mere checkboxes, shielding minors from the “digital Wild West” where they navigate unprotected.
The proposal, set for approval by Spain’s Council of Ministers next week, amends a draft bill in parliament and holds social media executives legally accountable for illegal content like disinformation, hate speech and child pornography.
The measures introduce tools to track harmful material spread, while criminalising algorithm manipulation that amplifies such content for profit.
“Spreading hate must come at a legal, economic and ethical cost platforms can no longer ignore,” Sánchez emphasised, vowing governments would stop turning a blind eye.
Spain joins Europe’s hardening stance on youth online access, mirroring Denmark’s under-15 ban plans from last fall, France’s push for restrictions by September, and Portugal’s new bill requiring parental consent for under-16s.
The moves signal a continental shift to “regain control” of digital spaces amid rising concerns over youth vulnerability.
News
US Set to Deport 79 Nigerians on Criminal List

The United States Department of Homeland Security (DHS) on Monday, said that it will deport no fewer than 79 convicted Nigerians listed on its ‘worst-of-the-worst’ criminal list.

President Trump
According to the DHS website, 79 Nigerians were convicted of offences bordering on fraud, drug peddling, assault, manslaughter and robbery, among others.
An accompanying note showed that the convicts were arrested as part of the United States’ crackdown on criminal immigrants.
The note read, “The U.S. Department of Homeland Security is highlighting the worst of the worst criminal aliens arrested by the U.S. Immigration and Customs Enforcement.
“Under Secretary Noem’s leadership, the hardworking men and women of DHS and ICE are fulfilling President Trump’s promise and carrying out mass deportations, starting with the worst of the worst, including the illegal aliens you see here.”
The list showed that the convicted Nigerians include Boluwaji Akingunsoye, Ejike Asiegbunam, Emmanuel Mayegun Adeola, Bamidele Bolatiwa, Ifeanyi Nwaozomudoh, Aderemi Akefe, Solomon Wilfred, Chibundu Anuebunwa, Joshua Ineh, Usman Momoh, Oluwole Odunowo, Bolarinwa Salau, and Oriyomi Aloba.
Others are Oludayo Adeagbo, Olaniyi Akintuyi, Talatu Dada, Olatunde Oladinni, Jelili Qudus, Abayomi Daramola, Toluwani Adebakin, Olamide Jolayemi, Isaiah Okere, Benji Macaulay and Joseph Ogbara.
Also listed are Olusegun Martins, Kingsley Ariegwe, Olugbenga Abass, Oyewole Balogun, Adeyinka Ademokunla, Christian Ogunghide, Christopher Ojuma, Olamide Adedipe, Patrick Onogwu, Olajide Olateru-Olagbegi, and Omotayo Akinto.
Others include Kenneth Unanka, Jeremiah Ehis, Oluwafemi Orimolade, Ayibatonyе Bienzigha, Uche Diuno, Akinwale Adaramaja, Boluwatife Afolabi, Chinonso Ochie, Olayinka A. Jones, Theophilus Anwana, Aishatu Umaru, and Henry Idiagbonya.
Further names on the list are Okechukwu Okoronkwo, Daro Kosin, Sakiru Ambali, Kamaludeen Giwa, Cyril Odogwu, Ifeanyi Echigeme, Kingsley Ibhadore, Suraj Tairu, Peter Equere, Dasola Abdulraheem, Adewale Aladekoba, and Akeem Adeleke.
Also included are Bernard Ogie Oretekor, Abiemwense Obanor, Olufemi Olufisayo Olutiola, Chukwuemeka Okorie, Abimbola Esan, Elizabeth Miller, Chima Orji, Adetunji Olofinlade, Abdul Akinsanya, Elizabeth Adeshewo, Dennis Ofuoma, and Boluwaji Akingunsoye.
Others are Quazeem Adeyinka, Ifeanyi Okoro, Oluwaseun Kassim, Olumide Bankole Morakinyo, Abraham Ola Osoko, Oluchi Jennifer and Chibuzo Nwaonu.
Trump’s administration has continued to crackdown on criminal and illegal immigrants across the US with many Nigerians in the country affected by the policy.
Telecom2 days agoTelecom Operators Invest Over $1Bn on 2,850 New Sites in 2025 – NCC
E-Financial2 days agoIf Capital is the Answer, What Exactly is the Problem with First Holdco
E-Financial2 days agoAmaanah Finance to Unveils Non-Interest Banking Services Today
General News2 days agoFirst Trustees to Host 8th Islamic Estate Planning Clinic in Abuja
News2 days agoNSCDC Hands over Fake Crypto Currency Trader to EFCC
News2 days agoAlakija’s Flourish Africa Provides N300m Grants for Women Entrepreneurs
General News2 days agoSecurity Forces Probe Use of Drones by Terrorists
Broadcasting2 days agoNew Horizons Nigeria Breaks Ground: First to Fuse Mandarin into ICT Curriculum



















