News
HP Wolf Security Threat Insights Report Shows How Cybercriminals Are Tricking Users
HP Inc. has released its latest global HP Wolf Security Threat Insights Report, providing analysis of real-world cybersecurity attacks. By isolating threats that have evaded detection tools and made it to user endpoints, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals.
The HP Wolf Security threat research team identified a wave of attacks utilizing Excel add-in files to spread malware, helping attackers to gain access to targets, and exposing businesses and individuals to data theft and destructive ransomware attacks.
There was a huge six-fold increase (+588%) in attackers using malicious Microsoft Excel add-in (.xll) files to infect systems compared to last quarter – a technique found to be particularly dangerous as it only requires one click to run the malware.
The team also found adverts for .xll dropper and malware builder kits on underground markets, which make it easier for inexperienced attackers to launch campaigns.
Additionally, a recent QakBot spam campaign used Excel files to trick targets, using compromised email accounts to hijack email threads and reply with an attached malicious Excel (.xlsb) file.
After being delivered to systems, QakBot injects itself into legitimate Windows processes to evade detection.
Malicious Excel (.xls) files were also used to spread the Ursnif banking Trojan to Italian-speaking businesses and public sector organizations through a malicious spam campaign, with attackers posing as Italian courier service BRT. New campaigns spreading Emotet malware are now using Excel instead of JavaScript or Word files too.
Other notable threats isolated by the HP Wolf Security threat insight team include:
- The return of TA505? HP identified a MirrorBlast email phishing campaign sharing many tactics, techniques, and procedures (TTPs) with TA505, a financially motivated threat group known for massive malware spam campaigns and monetizing access to infected systems using ransomware. The attack targeted organizations with the FlawedGrace Remote Access Trojan (RAT).
- Fake gaming platform infecting victims with RedLine: A spoofed Discord installer website has been discovered, tricking visitors into downloading the RedLine infostealer and stealing their credentials.
- Switching up uncommon file types is still bypassing detection: The Aggah threat group targeted Korean-speaking organizations with malicious PowerPoint add-in (.ppa) files disguised as purchase orders, infecting systems with remote access Trojans. PowerPoint malware is unusual, making up 1% of malware.
“Abusing legitimate features in software to hide from detection tools is a common tactic for attackers, as is using uncommon file types that may be allowed past email gateways.
Security teams need to ensure they are not relying on detection alone and that they are keeping up with the latest threats and updating their defenses accordingly.
For example, based on the spike in malicious .xll sightings we are seeing, I’d urge network administrators to configure email gateways to block incoming .xll attachments, only permit add-ins signed by trusted partners or disable Excel add-ins entirely,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
“Attackers are continually innovating to find new techniques to evade detection, so it’s vital that enterprises plan and adjust their defenses based on the threat landscape and the business needs of their users. Threat actors have invested in techniques such as email thread hijacking, making it harder than ever for users to tell friend from foe.”
The findings are based on data from the many millions of endpoints running HP Wolf Security. HP Wolf Security tracks malware by opening risky tasks in isolated, micro Virtual Machines (micro-VMs) to understand and capture the full infection chain, helping to mitigate threats that have slipped past other security tools.
This has let customers click on over 10 billion email attachments, web pages, and downloads with no reported breaches. By better understanding the behaviour of malware in the wild, HP Wolf Security researchers and engineers can bolster endpoint security protection and overall system resilience.
Other key findings in the report include:
- 13% of email malware isolated had bypassed at least one email gateway scanner.
- Threats used 136 different file extensions in their attempts to infect organizations.
- 77% of malware detected was delivered via email, while web downloads were responsible for 13%.
- The most common attachments used to deliver malware were documents (29%), archives (28%), executables (21%), spreadsheets (20%).
- The most common phishing lures were related to the New Year or business transactions such as “Order”, “2021/2022”, “Payment”, “Purchase”, “Request” and “Invoice”.
“Today, low-level threat actors can carry out stealthy attacks and sell access onto organized ransomware groups, leading to large-scale breaches that could cripple IT systems and grind operations to a halt,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
“Organizations should focus on reducing the attack surface and enabling quick recovery in the event of compromise. This means following Zero Trust principles and applying strong identity management, least privilege and isolation from the hardware level.
For example, by isolating common attack vectors such as email, browsers or downloads using micro-virtualization, any potential malware or exploits lurking within are contained, rendering them harmless.”
Tony Elumelu, chairman, United Bank for Africa (UBA) and Heirs Holdings, has called on Africa to avow itself in the fast-evolving global technology landscape, calling for deeper partnerships, infrastructure investments, and recognition of the continent’s digital potential.
Tony Elumelu, chairman, United Bank for Africa (UBA) and Heirs Holdings,
Elumelu, who made this statement in a series of posts on his verified X handle over the weekend, questioned the continent’s current role in global tech innovation and value creation, noting that while technology is transforming the world, Africa risks being sidelined without urgent strategic action.
“We know technology is transforming our world, and the pace of transformation is accelerating. Where is Africa? Are we in the conversation, or are we being left behind?” Elumelu asked.
Citing Africa’s youthful, entrepreneurial, and digitally native population, Elumelu stressed the need for stronger global partnerships that empower African startups and tech developers to not only serve local markets but compete globally.
“Young Africans are digitally native, entrepreneurial, and hungry to build. What we need are more opportunities for partnership, more belief in our potential, and platforms to amplify our voices.
“Africa has led in digital banking and payments. Our value chains are ripe for transformation. Yet we need more investment, more platforms, and more belief in our potential.
“We know that many of the minerals that are techs’ foundation are found in Africa. But is Africa getting the benefit? Africa needs to capture the moment – ensure we have digital sovereignty – that African priorities are understood and met”
The UBA Chairman revealed that he attended an exclusive dinner with French President Emmanuel Macron and global technology executives at the Élysée Palace in Paris, where he sought to amplify Africa’s voice at the highest level of innovation discourse.
“I had enriching conversations with global tech CEOs, including the CEO of NVIDIA, Jensen Huang, on how innovation can and must solve humanity’s most urgent challenges—including those facing Africa,” he said.
Elumelu used the opportunity to advocate for the continent as the next frontier of global tech investment, calling attention to Africa’s unique demographics and the imperative for inclusive innovation.
Speaking further he said through his investment company, Heirs Holdings, remains committed to Africa’s digital transformation, actively backing tech ventures such as Heirs Technologies and Redtech Limited, which are building solutions tailored for the African market while competing on a global scale.
National Space Research and Development Agency (NASRDA) has called on African businesses to seize the opportunities emerging within the rapidly growing global space economy, which is projected to reach one trillion dollars annually by 2030.
The appeal was made by Dr Matthew Adepoju, director-general, NASRDA, during a press briefing at the weekend in advance of the second Africa Space Economy Conference and Exhibition (ASEC 2025), scheduled to take place in Abuja from 17 to 19 June.
The event, organised in collaboration with the Abuja Chamber of Commerce and Industry (ACCI), will focus on the theme “Space Economy and Emerging Markets in Africa”.
Dr Adepoju highlighted that the global space economy is on the verge of surpassing $500 billion per year, making it the fastest-growing economic sector worldwide.
He stressed that Africa must position itself at the forefront of innovation, science, and technology by investing in space-related ventures.
“This is the Fourth Industrial Revolution and Africa must not be left behind.
“It is time for us to take our rightful place at the forefront of global innovation, science and technology, with space technology being the pinnacle of human endeavour.
“The space economy is the fastest growing economic sector in the world and it is projected to hit one trillion dollars per annum. Currently it’s more than 500 billion dollars annually,” he said.
The conference aims to foster collaboration between industry leaders, academic institutions, and research organisations, all working to strengthen Nigeria’s space ecosystem.
Dr Adepoju praised President Bola Tinubu for his forward-thinking economic initiatives, noting the President’s directive to transform NASRDA into a revenue-generating body.
NASRDA, he said, is now committed to fully commercialising and industrialising space research. The upcoming conference is expected to attract international participants, with confirmed interest from countries such as China, the United States, and several European and African nations.
The agency is also preparing for the launch of four new satellites—three optical and one Synthetic Aperture Radar (SAR).
These satellites are intended to support national security, environmental monitoring, and economic surveillance, particularly in sectors such as the blue economy and oil and gas.
Dr Adepoju encouraged private sector involvement in areas including satellite technology, data services, rocketry, and space-based applications.
He stressed that with Nigeria being Africa’s most populous country, there is already a significant market for space-related products and services, and now is the time for African businesses to build capacity, invest locally, and retain economic value.
Speaking on behalf of Chief Emeka Obegolu, ACCI President, Mr Agabaidu Jideani, chamber’s director-general, noted that Africa has yet to fully tap into the space economy’s potential.
He pointed out challenges such as limited public awareness, infrastructure gaps, and evolving policy environments, but said these issues also present opportunities for innovation and investment.
“It was with this foresight that ACCI, through our Policy Advocacy Centre, in a strategic partnership with NASRDA, conceptualised the ASEC,” he said.
Dr Haruna Mohammed, co-chairman of the Conference Organising Committee, reiterated that the event is aimed at the private sector and will showcase how space-based technologies can aid in economic diversification, enhance infrastructure, and promote sustainable development across the continent.
Schneider Electric’s newly launched innovation hub is set to benefit not just large corporations, but also local communities, start-ups and learners from technical, vocational education and training (TVET) colleges.
This is according to Canninah Dladla, Schneider’s first female cluster president for English-speaking Africa, speaking at the launch of the hub over the weekend at the company’s headquarters in Midrand.
The hub builds on Schneider Electric’s global strategy to bring its technology closer to its customers on the African continent, while reinforcing its leadership in sustainability, innovation and digitisation, according to the company.
This African hub is part of Schneider Electric’s global network of over 40 registered innovation hubs, and provides an interactive environment where visitors can explore the company’s integrated solutions across key segments, including energy solutions, industrial automation, building solutions as well as power and grid solutions.
“We are building an ecosystem that thrives on collaboration, innovation and relevance to the African context; one that values local talent, fosters local partnerships and drives local solutions. The innovation hub enables us to create a truly dynamic experience that embodies Schneider Electric’s purpose: enabling all to maximise energy and resources while bridging progress and sustainability,” said Dladla.
“Indeed, Africa holds immense potential, and this hub is designed to help our customers and partners unlock it through digitalisation, innovation and collaboration.”
During the event, Dladla highlighted the company’s commitment to Africa’s energy future, emphasising the need for innovative solutions to address energy challenges on the continent.
“There is more to this building launch; it is unveiling our commitment to Africa’s energy for the future. Everybody, including local media, talks about Africa’s energy issues and problems. But maybe it’s about time we stopped talking about issues and problems and come with solutions.”
Walid Sheta, president of the Middle East and Africa at Schneider Electric, said the hub is made for all Schneider’s partners, colleagues and customers, adding that everyone is invited to visit and learn how the technology drives sustainability and efficiency.
“We believe our software solutions and digital offerings will shape the future for our customers. With technology like AI and sensors, we can detect issues like leaks in pipelines or equipment failures before they happen.
“This helps prevent losses, reduce emissions and keep production running smoothly. It’s already being used in various industries, like refineries, power plants and even buildings, to optimise performance and predict potential problems,” he said.
Speaking at the launch, Dr Anna Mokgokong, Schneider Electric South Africa chairperson, stressed the need for businesses to adapt and innovate in today’s fast-changing landscape. She highlighted the significance of the agriculture sector, acknowledging its challenges, and pointed out that Schneider’s automation solutions could address the sector’s challenges
Mokgokong, who also serves as a chancellor at the North-West University, said there is a need to integrate innovation in academic institutions.
“We should focus on equipping students with in-demand skills, allowing them to gain practical experience and build connections with companies like Schneider through vacation work. This way, by the time they graduate, they’ll have a competitive edge and be more likely to secure employment. It’s time for our universities and colleges to shift mindsets and prioritise quality education that meets industry needs.”
Smartcash PSB Launches Access to Instant Motor Insurance via Leadway Assurance
GSMA, Mobile Industry Call for Strengthened Action to Advance Child Online Protection in Africa
CBN Suspends Dividend, Bonus Payments for Banks under Forbearance
Elumelu, UBA Chair Seeks Digital Sovereignty for Africa
Court Orders Lawyer to Produce “Bail-Jumping” Client in MTN Cyber Fraud Case
E-Financial1 day agoFidelity Bank ED, Kevin Ugwuoke takes over as President of Risk Managers Association
News1 day agoWhy I am vying for AFRINIC board seat in 2025 election – Terry Edet
General News1 day agoAirtel Concludes Nationwide Environment Week with Market Clean-Up by Employees
Telecom1 day agoCrypto Exchange MEXC Rolls Out P2P Support for Naira, Birr, and Rupee
General News1 day agoCourt Orders Lawyer to Produce “Bail-Jumping” Client in MTN Cyber Fraud Case
Broadcasting1 day agoMultichoice Nigeria Faces Revenue Decline Amid Economic Challenges
News1 day agoElumelu, UBA Chair Seeks Digital Sovereignty for Africa
E-Financial1 day agoCBN Suspends Dividend, Bonus Payments for Banks under Forbearance