Connect with us

E-Business

Infostealer Vidar Identified as Most Wanted Malware in January 2023

Published

on

Kindly share this post

Check Point Software Technologies, a provider of cybersecurity solutions globally, has published its Global Threat Index for January 2023.

Last month saw infostealer Vidar return to the top ten list in seventh place after an increase in instances of brandjacking, and the launch of a major njRAT malware phishing campaign in the Middle East and North Africa.

In January, infostealer Vidar was seen spreading through fake domains claiming to be associated with remote desktop software company AnyDesk. The malware used URL jacking for various popular applications to redirect people to a single IP address claiming to be the official AnyDesk website.

Once downloaded, the malware masqueraded as a legitimate installer to steal sensitive information such as login credentials, passwords, cryptocurrency wallet data and banking details.

Researchers also identified a major campaign dubbed Earth Bogle delivering the njRAT malware to targets across the Middle East and North Africa. The attackers used phishing emails containing geopolitical themes, enticing users to open malicious attachments.

Once downloaded and opened, the Trojan can infect devices, allowing attackers to conduct numerous intrusive activities to steal sensitive information. njRAT came in at number ten on the top malware list, having dropped off after September 2022.

“Once again, we’re seeing malware groups use trusted brands to spread viruses, with the aim of stealing personal identifiable information. I cannot stress enough how important it is that people pay attention to the links they are clicking on to ensure they are legitimate URLs.

Look out for the security padlock, which indicates an up-to-date SSL certificate, and watch for any hidden typos that might suggest the website is malicious.” said Maya Horowitz, VP Research at Check Point Software.

CPR also revealed that “Web Server Exposed Git Repository Information Disclosure” remained the most exploited vulnerability last month, impacting 46% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 42% of organizations worldwide. “MVPower DVR Remote Code Execution” came in third with a global impact of 39%.

Top malware families

Qbot and Lokibot were the most prevalent malware last month with an impact of more than 6% on worldwide organizations respectively, followed by AgentTesla with a global impact of 5%.

In Nigeria, Qbot was the most widespread malware this month impacting 18.64% of organisations in the country, followed by Expiro with 10.17% and Nitol with 6.78%.

  1. Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials and keystrokes. Often distributed via spam email, Qbot employs several anti-VM, anti-debugging, and anti-sandbox techniques to hinder analysis and evade detection.
  1. XMRig – XMRig is open-source CPU mining software used to mine the Monero cryptocurrency. Threat actors often abuse this open-source software by integrating it into their malware to conduct illegal mining on victims¿ devices.
  1. Vidar – Vidar is an infostealer that targets Windows operating systems. First detected at the end of 2018, it is designed to steal passwords, credit card data and other sensitive information from various web browsers and digital wallets. Vidar is sold on various online forums and used as a malware dropper to download GandCrab ransomware as its secondary payload.

Top Attacked Industries Globally

Last month, Communications remained the most attacked industry in Africa, followed by Government/Military and then ISP/MSP.

  1. Communications
  2. Government/Military
  3. ISP/MSP

Top exploited vulnerabilities

Last month, “Web Server Exposed Git Repository Information Disclosure” was the most exploited vulnerability, impacting 46% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 42% of organizations worldwide. “MVPower DVR Remote Code Execution” came in third with a global impact of 39%.

  1. ↔ Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow an unintentional disclosure of account information.
  1. ↑ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
  1. ↑MVPower DVR Remote Code Execution – A remote code execution vulnerability exists in MVPower DVR devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request.

Top Mobile Malwares

Last month, Anubis remained the most prevalent mobile malware, followed by Hiddad and AhMyth.

  1. Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
  1. Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.
  1. AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera, which usually used to steal sensitive information.

Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence.

ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

NITDA DG Reaffirms FG Commitment to Responsible and Inclusive AI

Published

on

Kindly share this post

The Federal Government of Nigeria has reaffirmed its commitment to building a responsible, inclusive, and sovereign artificial intelligence ecosystem to enable Nigeria to transition from being a passive consumer of AI technologies to an architect and builder of indigenous AI systems.

This was said by the Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa Abdullahi CCIE, while delivering a virtual address at the InnovateAI Conference held in Lagos.

The conference brought together policymakers, technology leaders, innovators, and stakeholders to discuss the future of artificial intelligence and its role in driving Nigeria’s digital economy and national development agenda.

Inuwa outlined Nigeria’s ambition to transition from being a consumer of artificial intelligence technologies to becoming a builder and owner of AI systems that reflect national values and priorities, in line with the National AI Strategy.

“Our goal is not just to use AI, but to architect and build our own AI systems in Nigeria,” he said, stressing that the country must take ownership of its AI future.

He noted that Nigeria’s approach to artificial intelligence extends beyond innovation to include governance, infrastructure, data sovereignty, and policy evolution.

According to him, “Responsible AI is never a finished job; it is an iterative journey. Our policies must evolve as the technology evolves, and we must avoid frozen laws by adopting living policies that adapt over time.”

He cited the implementation of the Digital Economy and E-Governance Bill as a key mechanism for generating insights that will help refine AI regulations and governance frameworks.

Inuwa also highlighted the challenge of data representation in global AI systems, noting that most models are trained on non-African datasets, which often results in bias against local dialects, cultures, and demographics.

“If a model shows bias against a local dialect or demographic, we cannot just patch it. We must reinvest in infrastructure to retrain it with inclusive and representative local datasets,” he stated.

He added that building national AI infrastructure is critical to achieving data sovereignty and ensuring that Nigeria is not merely an end user of foreign AI systems.

He further called for strategic partnerships with global technology companies and hyperscalers to build AI infrastructure in Nigeria while aligning with local values and national priorities.

“The world today is a global village. We need to work with global players, but they must understand our local nuances and help us build the infrastructure to retrain and develop AI models that reflect our context,” he said.

The NITDA Director General explained that adopting a comprehensive AI lifecycle approach, from responsible data collection and governance to deployment and continuous feedback, will enable Nigeria to move from reacting to AI developments to proactively designing indigenous AI systems.

“Without understanding how AI models are trained, how decisions are made, and how models are retrained, it will be difficult to build a responsible and trustworthy AI system,” he warned.

He reaffirmed that the Federal Government is intentional about promoting responsible AI and is working closely with the technology ecosystem to co-design national AI guardrails. He described platforms such as the InnovateAI Conference and other national AI dialogues as critical to shaping Nigeria’s AI future.


Kindly share this post
Continue Reading

E-Business

Mutual Benefits Assurance Settles ₦5.9bn Claims in January 2026

Published

on

Kindly share this post

Mutual Benefits Assurance, a leading Nigerian insurance company, has paid a total of ₦5,937,665,353.57 in claims to policyholders in January 2026 alone, underlining its strong financial capacity and unwavering commitment to prompt claims settlement.

Mutual Benefits Assurance Settles ₦5.9bn Claims in January 2026

Mutual Benefits Assurance

A breakdown of the figures shows that ₦3,426,602,834.28 was paid under its General (Non-Life) Insurance portfolio, while ₦2,511,062,519.29 was paid across its Life businesses, including Group Life and Retail Life policies.

The significant payout within a single month reinforces Mutual Benefits’ reputation as a dependable insurer that honors its obligations swiftly and responsibly.

Commenting on the development, Olufemi Asenuga, Managing Director, Mutual Benefits Assurance Plc stated that claims settlement remains the core promise of insurance and the ultimate test of an insurer’s credibility.

“Insurance is built on trust. Our ability to settle over ₦5.9 billion in claims in one month demonstrates not only our financial strength, but also our deep commitment to our policyholders. At Mutual Benefits, we do not just sell policies. We stand by our promises,” he said.

With over three decades of operations, Mutual Benefits has consistently positioned itself as a strong and well-capitalised insurer.

The company operates both Life and General Insurance businesses and remains fully compliant with regulatory capital requirements as stipulated by the National Insurance Commission (NAICOM).

The January payout reflects Mutual Benefit’s robust underwriting standards, prudent risk management practices and efficient claims administration framework.

It also aligns with the company’s broader record of substantial claims settlement in recent years, reinforcing its standing as a trusted brand in the Nigerian insurance industry.

Mutual Benefits employs over 5,000 staff, managed by seasoned management team and an experienced Board of Directors. Industry observers note that prompt claims payment remains one of the most critical differentiators in Nigeria’s competitive insurance landscape.

By consistently settling valid claims without delay, Mutual Benefits continues to strengthen customer confidence, deepen market trust and expand its footprint across retail and corporate segments.

As the company begins 2026 on a strong footing, it reiterates its commitment to innovation, service excellence and delivering value to policyholders and stakeholders alike. Mutual Benefits Assurance focused on its mission to provide reliable risk protection solutions while maintaining the highest standards of professionalism and integrity.


Kindly share this post
Continue Reading

E-Business

NITDA Warns Nigerians of Actively Exploited Microsoft Office Vulnerability

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) has issued an urgent cybersecurity warning about a serious Microsoft Office vulnerability (CVE-2026-21509) that attackers are actively exploiting.

NITDA Warns Nigerians of Actively Exploited Microsoft Office Vulnerability

This advisory, shared through Nigeria’s Computer Emergency Response Team (CERRT.NG), highlights the risks of this flaw and recommends immediate action to protect systems.

Microsoft has released quick security updates to fix this vulnerability, which has a severity score of 7.8, showing it is a serious risk. Attackers have already used it in targeted attacks.

CVE-2026-21509 affects multiple versions of Microsoft Office, including Office 2016, Office 2019, Microsoft 365 Apps, Office 2021, and later versions.

This flaw allows attackers to bypass security features meant to stop harmful Object Linking and Embedding (OLE) controls. OLE is an older Microsoft technology that can be used to embed links or content, but it has often been exploited by malware.

By exploiting this flaw, attackers can create specially designed Office documents.

When a user opens these documents, they can run malicious code or gain further access to the system.

Exploitation requires user interaction, meaning attackers often trick people into opening harmful Word, Excel, or other Office documents. Common methods include using email attachments or files from untrusted sources.

Because Microsoft confirmed that the vulnerability is being actively exploited, they have made emergency security updates available outside their usual schedule. Users and organisations should:

  1. Install the latest Microsoft Office security updates for all affected versions.
  2. Restart Office applications for Office 2021 and later to ensure that the updates take effect.
  3. Use registry-based settings for protection if updates can’t be applied right away.
  4. Follow good cybersecurity practices, like using endpoint protection and filtering emails.

Microsoft’s updates for Office 2021 and newer versions are automatically applied, but need a restart of the applications to be active.


Kindly share this post
Continue Reading

Trending