News
HP Wolf Security Threat Insights Report Shows How Cybercriminals Are Tricking Users
HP Inc. has released its latest global HP Wolf Security Threat Insights Report, providing analysis of real-world cybersecurity attacks. By isolating threats that have evaded detection tools and made it to user endpoints, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals.
The HP Wolf Security threat research team identified a wave of attacks utilizing Excel add-in files to spread malware, helping attackers to gain access to targets, and exposing businesses and individuals to data theft and destructive ransomware attacks.
There was a huge six-fold increase (+588%) in attackers using malicious Microsoft Excel add-in (.xll) files to infect systems compared to last quarter – a technique found to be particularly dangerous as it only requires one click to run the malware.
The team also found adverts for .xll dropper and malware builder kits on underground markets, which make it easier for inexperienced attackers to launch campaigns.
Additionally, a recent QakBot spam campaign used Excel files to trick targets, using compromised email accounts to hijack email threads and reply with an attached malicious Excel (.xlsb) file.
After being delivered to systems, QakBot injects itself into legitimate Windows processes to evade detection.
Malicious Excel (.xls) files were also used to spread the Ursnif banking Trojan to Italian-speaking businesses and public sector organizations through a malicious spam campaign, with attackers posing as Italian courier service BRT. New campaigns spreading Emotet malware are now using Excel instead of JavaScript or Word files too.
Other notable threats isolated by the HP Wolf Security threat insight team include:
- The return of TA505? HP identified a MirrorBlast email phishing campaign sharing many tactics, techniques, and procedures (TTPs) with TA505, a financially motivated threat group known for massive malware spam campaigns and monetizing access to infected systems using ransomware. The attack targeted organizations with the FlawedGrace Remote Access Trojan (RAT).
- Fake gaming platform infecting victims with RedLine: A spoofed Discord installer website has been discovered, tricking visitors into downloading the RedLine infostealer and stealing their credentials.
- Switching up uncommon file types is still bypassing detection: The Aggah threat group targeted Korean-speaking organizations with malicious PowerPoint add-in (.ppa) files disguised as purchase orders, infecting systems with remote access Trojans. PowerPoint malware is unusual, making up 1% of malware.
“Abusing legitimate features in software to hide from detection tools is a common tactic for attackers, as is using uncommon file types that may be allowed past email gateways.
Security teams need to ensure they are not relying on detection alone and that they are keeping up with the latest threats and updating their defenses accordingly.
For example, based on the spike in malicious .xll sightings we are seeing, I’d urge network administrators to configure email gateways to block incoming .xll attachments, only permit add-ins signed by trusted partners or disable Excel add-ins entirely,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
“Attackers are continually innovating to find new techniques to evade detection, so it’s vital that enterprises plan and adjust their defenses based on the threat landscape and the business needs of their users. Threat actors have invested in techniques such as email thread hijacking, making it harder than ever for users to tell friend from foe.”
The findings are based on data from the many millions of endpoints running HP Wolf Security. HP Wolf Security tracks malware by opening risky tasks in isolated, micro Virtual Machines (micro-VMs) to understand and capture the full infection chain, helping to mitigate threats that have slipped past other security tools.
This has let customers click on over 10 billion email attachments, web pages, and downloads with no reported breaches. By better understanding the behaviour of malware in the wild, HP Wolf Security researchers and engineers can bolster endpoint security protection and overall system resilience.
Other key findings in the report include:
- 13% of email malware isolated had bypassed at least one email gateway scanner.
- Threats used 136 different file extensions in their attempts to infect organizations.
- 77% of malware detected was delivered via email, while web downloads were responsible for 13%.
- The most common attachments used to deliver malware were documents (29%), archives (28%), executables (21%), spreadsheets (20%).
- The most common phishing lures were related to the New Year or business transactions such as “Order”, “2021/2022”, “Payment”, “Purchase”, “Request” and “Invoice”.
“Today, low-level threat actors can carry out stealthy attacks and sell access onto organized ransomware groups, leading to large-scale breaches that could cripple IT systems and grind operations to a halt,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
“Organizations should focus on reducing the attack surface and enabling quick recovery in the event of compromise. This means following Zero Trust principles and applying strong identity management, least privilege and isolation from the hardware level.
For example, by isolating common attack vectors such as email, browsers or downloads using micro-virtualization, any potential malware or exploits lurking within are contained, rendering them harmless.”
Microsoft has rolled out a new set of features for its Microsoft 365 Copilot platform, including tools for complex, multi-step work and deeper research tasks, as competition in workplace artificial intelligence (AI) intensifies.
The update introduces Copilot Cowork, a capability aimed at handling long-running tasks across Microsoft 365 applications.
The feature is being made available through the company’s Frontier programme, which typically gives early access to experimental tools.
Microsoft is also integrating technology linked to Claude – an AI model developed by Anthropic –into Copilot, signalling a broader shift toward using multiple AI systems within a single product rather than relying on a single model.
Jared Spataro, chief marketing officer for AI at Work at Microsoft, says the company is positioning Copilot as a system embedded directly into workplace software, rather than a standalone tool.
“Microsoft 365 Copilot is your AI for work,” he says, adding that it draws on multiple AI models and is integrated into existing workflows.
Alongside this, Microsoft has upgraded its Researcher feature, which is designed to analyse information from multiple sources and generate structured reports.
A new “Critique” function separates the drafting and review process between different AI models – one generates an initial response, while another evaluates and refines it.
The company says this approach improves output quality, with Researcher showing gains on its internal benchmark for accuracy, completeness and objectivity.
Another addition, called Model Council, allows users to compare outputs from different AI models side-by-side, highlighting differences in responses and reasoning.
The updates form part of what Microsoft calls “Wave 3” of Copilot, as it pushes to embed generative AI deeper into enterprise software. The move reflects a wider industry trend towards combining models from multiple providers, including OpenAI and Anthropic, to improve performance and reliability.
Dangote Petroleum Refinery and Petrochemicals (DPRP) has debunked recent circulation of unauthorised information regarding a potential Initial Public Offering (IPO).
In a statement, DPRP noted that several online platforms and unofficial sources have published unverified, and in some instances inaccurate, information relating to a potential offering.
“Such reports do not originate from DPRP and should be treated with caution. All official updates regarding any potential transaction will be communicated strictly through DPRP’s formal public disclosures and announcements issued by its appointed advisers, in line with applicable laws and regulatory requirements.
“Accordingly, the public, investors, and all market participants are strongly advised to disregard speculative commentary and rely solely on verified information formally issued by DPRP or its authorised representatives,” the statement said.
The firm assured stakeholders that, when appropriate, comprehensive, and accurate details regarding any proposed transaction will be made available through official channels, including regulatory filings, authorised press releases, and coordinated communications by the Enterprise and its appointed advisers.
News
Descasio Launches “Give to Gain” Leadership Insights Report, Hosts Executive Brunch for Women in Leadership
In celebration of International Women’s Day, Descasio hosted an intimate executive brunch bringing together distinguished women leaders from its customer community for a thoughtful conversation on leadership, partnership, and shared growth.
Centered around the 2026 International Women’s Day theme, “Give to Gain,” the gathering created space for accomplished women in enterprise leadership to reflect on mentorship, collaboration, and investing in people as key drivers of sustainable growth.
Held in Lagos, the event convened leaders from organizations including Honeywell Group Limited, Finchglow Travels, NGCOM, and Eroton Exploration & Production Company.
Guests were personally welcomed at the start of the gathering by Mr. Dele Nedd, CEO of Descasio; who greeted each of the women leaders and expressed his appreciation for their presence before leaving the session to allow the women lead the conversation among themselves.
The gesture reflected Descasio’s leadership culture; one where women are not only recognized, but actively supported and empowered. It also underscored the company’s belief that meaningful progress in leadership requires partnership and allyship across the organization.
Rather than a traditional panel discussion, the brunch was designed as a candid and reflective exchange among peers navigating leadership in complex industries. Throughout the conversation, participants shared perspectives shaped by experience, responsibility, and the realities of leading teams and organizations.
A recurring theme in the discussion was the role of execution and accountability in leadership. For many organizations, strategy alone is not enough; consistent delivery is what ultimately builds credibility and trust.
Reflecting on this, Josephine Adebola, Data Compliance & Process Automation Manager at Finchglow Travels, emphasized the importance of reliability in leadership and the discipline required to translate vision into results. “Get it done on time and in full.”
The conversation also explored the role of curiosity and continuous learning in shaping effective leaders. In rapidly evolving industries, the ability to ask questions, remain open to new perspectives, and keep learning is often what enables leaders to grow alongside their organizations.
Sharing her perspective, Tomi Otudeko, Chief Operating Officer at Honeywell Group Limited, reflected on how curiosity has shaped her leadership journey.
“Asking questions and continuously learning have always stood me in good stead as a leader.”
She also spoke about the importance of leading with empathy and understanding the people behind the roles within organizations.
“Everyone has multiple dimensions to who they are. Leadership has taught me to see people in their totality. That awareness doesn’t make a leader weak; it makes them more effective.”
Another important theme that emerged from the conversation was authenticity in leadership. In an environment where leaders often face pressure to conform to traditional expectations, remaining true to one’s identity while continuing to evolve is essential.
For Helen James-Eziashi, General Manager at NGCOM, authenticity and curiosity remain key guiding principles. “Be yourself, keep learning, and stay curious.”
The discussion also highlighted the role of self-awareness in sustaining leadership journeys, particularly in complex and high-responsibility environments. Understanding one’s values, motivations, and support systems often becomes the anchor that allows leaders to navigate uncertainty with confidence.
Reflecting on this, Ifeanyi Onyejekwe, IT Manager at Eroton, emphasized the importance of knowing what grounds a leader.
“Know who you are and understand what supports and sustains your leadership journey.”
According to Descasio, the event reflects its broader commitment to building strong partnerships and fostering meaningful leadership conversations across its enterprise customer community.
“For us, this was about more than marking International Women’s Day,” said Umama David-Ogebe, The HR Manager at Descasio. “It was about creating a space where leaders could learn from one another and reflect on the kind of leadership that builds strong organizations. The most meaningful partnerships grow from conversations like these.”
To extend the impact of the discussion, Descasio has published “The Give to Gain Leadership Report: Insights from Women Leading Enterprise Organizations,” a curated publication capturing key reflections and leadership lessons shared during the session.
The report highlights themes including:
- The role of curiosity and continuous learning in leadership
• Building stronger teams through empathy and accountability
• The importance of authenticity and self-awareness in navigating leadership journeys
• How investing in people drives stronger partnerships and resilient organizations
The Give to Gain Leadership Report is now available for download Here.
How Recycled SIM Card Linked to N50m Kidnapping Nearly Landed me in Jail – Businesswoman
Senate Gives Tinubu Nod to Borrow Fresh $6Bn
FG Earmarks $2Bn to Launch 2 Satellites in 2028, 2029
CBN Directs Banks, Fintechs to Complete Cybersecurity Audit Tool
FG Launches CLHEEAN to Streamline Access to Government Services
Spotify’s Loud & Clear Report Reveals Over ₦60Bn Revenue for Nigerian Artists in 2025
Madonna University Taps Tech Guru Adote for Strategic Board Role
China Threatens to Shut Nigeria’s Satellite Over $11.44m Unpaid Debt
Jumia Tech Week 2026 Begins with Tech Deals on Smartphones, Electronics, and Everyday Technology
FCCPC Bans Lagos ‘No Refund’ Policy, Vows Fines and Shutdowns for Traders
E-Financial2 days agoCBN bars large‑ticket loan defaulters from banking services in tough new crackdown
General News2 days agoARN Rejects Medical Bill over Attempt to ‘Scrap’ Profession
Telecom2 days agoNIGCOMSAT Supports Startups Growth with the Launch of Accelerator 3.0
News2 days agoMeningitis Kills a Quarter Million People a Year -Study
Telecom2 days agoFG Unveils Digital Economy Research Fund Scheme
News2 days agoStakeholder says AI is Crucial to Nigerian Data Centres Amid Persistent Grid Collapse
- General News2 days ago
Nigeria Advances Digital Governance as NITDA takes over NGEA Portal
General News2 days agoZarttech Reflects on Its Role in Changing Global Perceptions of Africa