Connect with us

E-Business

Infostealer Vidar Identified as Most Wanted Malware in January 2023

Published

on

Kindly share this post

Check Point Software Technologies, a provider of cybersecurity solutions globally, has published its Global Threat Index for January 2023.

Last month saw infostealer Vidar return to the top ten list in seventh place after an increase in instances of brandjacking, and the launch of a major njRAT malware phishing campaign in the Middle East and North Africa.

In January, infostealer Vidar was seen spreading through fake domains claiming to be associated with remote desktop software company AnyDesk. The malware used URL jacking for various popular applications to redirect people to a single IP address claiming to be the official AnyDesk website.

Once downloaded, the malware masqueraded as a legitimate installer to steal sensitive information such as login credentials, passwords, cryptocurrency wallet data and banking details.

Researchers also identified a major campaign dubbed Earth Bogle delivering the njRAT malware to targets across the Middle East and North Africa. The attackers used phishing emails containing geopolitical themes, enticing users to open malicious attachments.

Once downloaded and opened, the Trojan can infect devices, allowing attackers to conduct numerous intrusive activities to steal sensitive information. njRAT came in at number ten on the top malware list, having dropped off after September 2022.

“Once again, we’re seeing malware groups use trusted brands to spread viruses, with the aim of stealing personal identifiable information. I cannot stress enough how important it is that people pay attention to the links they are clicking on to ensure they are legitimate URLs.

Look out for the security padlock, which indicates an up-to-date SSL certificate, and watch for any hidden typos that might suggest the website is malicious.” said Maya Horowitz, VP Research at Check Point Software.

CPR also revealed that “Web Server Exposed Git Repository Information Disclosure” remained the most exploited vulnerability last month, impacting 46% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 42% of organizations worldwide. “MVPower DVR Remote Code Execution” came in third with a global impact of 39%.

Top malware families

Qbot and Lokibot were the most prevalent malware last month with an impact of more than 6% on worldwide organizations respectively, followed by AgentTesla with a global impact of 5%.

In Nigeria, Qbot was the most widespread malware this month impacting 18.64% of organisations in the country, followed by Expiro with 10.17% and Nitol with 6.78%.

  1. Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials and keystrokes. Often distributed via spam email, Qbot employs several anti-VM, anti-debugging, and anti-sandbox techniques to hinder analysis and evade detection.
  1. XMRig – XMRig is open-source CPU mining software used to mine the Monero cryptocurrency. Threat actors often abuse this open-source software by integrating it into their malware to conduct illegal mining on victims¿ devices.
  1. Vidar – Vidar is an infostealer that targets Windows operating systems. First detected at the end of 2018, it is designed to steal passwords, credit card data and other sensitive information from various web browsers and digital wallets. Vidar is sold on various online forums and used as a malware dropper to download GandCrab ransomware as its secondary payload.

Top Attacked Industries Globally

Last month, Communications remained the most attacked industry in Africa, followed by Government/Military and then ISP/MSP.

  1. Communications
  2. Government/Military
  3. ISP/MSP

Top exploited vulnerabilities

Last month, “Web Server Exposed Git Repository Information Disclosure” was the most exploited vulnerability, impacting 46% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 42% of organizations worldwide. “MVPower DVR Remote Code Execution” came in third with a global impact of 39%.

  1. ↔ Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow an unintentional disclosure of account information.
  1. ↑ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
  1. ↑MVPower DVR Remote Code Execution – A remote code execution vulnerability exists in MVPower DVR devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request.

Top Mobile Malwares

Last month, Anubis remained the most prevalent mobile malware, followed by Hiddad and AhMyth.

  1. Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
  1. Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.
  1. AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera, which usually used to steal sensitive information.

Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence.

ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Nigeria Takes the Lead in the Global WSIS+20 Digital Agenda

Published

on

Kindly share this post

Nigeria has unveiled a comprehensive, multi-pronged strategy designed to localise WSIS+20 commitments. This roadmap accelerates national transformation by prioritising robust infrastructure, transparent internet governance, and advanced cybersecurity through deep stakeholder collaboration.

Unveiled in New York at the Nigerian high-level side event titled “Re-Imagining Digital Cooperation for Sustainable Development: From WSIS+20 Vision to Local Action,” the strategy cements Nigeria’s position as a primary architect of the world’s digital future.

Speaking at the event, the Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa, CCIE represented by Director, Corporate Planning and Strategy, Dr. Dimie Shively Wariowei said Nigeria’s approach is deliberately aligned with the four core activity areas identified under the ongoing WSIS+20 review process.

According to him, the focus areas provide a practical framework for translating global digital commitments into measurable national outcomes, ensuring that international resolutions drive inclusive growth and sustainable digital development at the country level.

Inuwa identified digital infrastructure as the foundation of effective localisation, noting persistent challenges in extending connectivity to underserved and remote communities. Beyond infrastructure gaps, he highlighted affordability constraints and digital literacy deficits, stressing that addressing these issues remains central to Nigeria’s digital inclusion drive.

He explained that government alone cannot shoulder the burden of nationwide digital infrastructure deployment, given Nigeria’s vast geographical spread, hence the adoption of collaborative Public-Private Partnership (PPP) models. He disclosed that Nigeria, in collaboration with the World Bank, is implementing a major fibre-optic project spanning about 90,000 kilometres nationwide to boost connectivity.

The NITDA DG also revealed that the current National Broadband Plan, which has guided broadband expansion in recent years, is nearing completion, with plans underway to renew and reposition it for the next five years. The renewed plan, he said, will strategically target increased broadband penetration as a catalyst for digital access and economic growth.

On internet governance, Inuwa referenced Nigeria’s active participation in the Internet Governance Forum (IGF), noting that the country successfully hosted its annual national IGF. He said the forum operates on a multi-stakeholder model that brings together government, the private sector, civil society and the technical community to foster cooperation and informed policy dialogue.

Cybersecurity, he added, remains a critical pillar of Nigeria’s localisation efforts. He cited the existing Cybersecurity Act and ongoing efforts to strengthen the legal framework through a reviewed version currently awaiting parliamentary approval. These measures, he said, are designed to mitigate risks associated with increased internet use and to protect users and critical digital infrastructure.

Inuwa further stressed Nigeria’s ambition to play a leadership role in advancing digital cooperation across Africa through inclusive, multi-stakeholder engagement. He underscored the importance of coordinated national data collection, noting that reliable, country-specific data is essential for tracking progress and presenting Africa’s digital development story on the global stage.

He concluded that sustained engagement and follow-up actions arising from the WSIS+20 review would strengthen digital cooperation among African countries and ensure that global digital commitments translate into tangible national and regional impact.

Stakeholders commended Nigeria’s efforts in the digital space, acknowledging the country’s growing role in shaping Africa’s digital future.

Earlier, Ms. Jennifer Chung, Co-Convener of the Informal Multi-Stakeholder Sounding Board (IMSB), praised Nigeria for convening a broad-based, multi-stakeholder delegation and for its commitment to the meaningful implementation of WSIS+20 outcomes.

Chung stressed the growing demand for localised WSIS follow-up mechanisms, noting that platforms such as the annual IGF, National and Regional IGF Initiatives (NRIs), and youth-led forums are vital for tracking progress towards the 2030 Agenda and Africa’s Agenda 2063.

She described the WSIS+20 review as a critical step toward effective monitoring, reliable data collection and evidence-based evaluation, particularly for developing countries in the Global South. According to her, these measures are essential to achieving WSIS targets and ensuring that no region is left behind.

Drawing parallels with the Asia-Pacific region, Chung noted that challenges around affordable and meaningful connectivity remain widespread across developing economies. She emphasised that expanding broadband penetration and reducing the cost of access are crucial to closing digital divides in Africa, Asia-Pacific and other parts of the Global South.

She also highlighted the need to enable active citizen participation in emerging technologies, including artificial intelligence and future innovations such as quantum technologies, stressing that inclusive digital access is key to maximising the benefits of digital transformation.

Reflecting on the WSIS+20 review process, Chung praised the innovative and inclusive approach adopted through the informal multi-stakeholder sounding board, describing it as one of the first of its kind in global digital governance. She called for sustained collaboration among governments, the private sector, civil society and the technical community to carry the WSIS vision from global commitments to local action.


Kindly share this post
Continue Reading

E-Business

UBA Partners CIG Motors, Lagride, Launches $100m “Drive to Own” Scheme

Published

on

Kindly share this post

United Bank for Africa (UBA) Plc has announced a $100 million financing partnership with CIG Motors, Lagride and the Lagos State Government to promote urban mobility and financial inclusion through a scheme tagged “Drive to Own.”

UBA Partners CIG Motors, Lagride, Launches $100m “Drive to Own” Scheme

Group Managing Director/CEO, United Bank for Africa(UBA) and, Chairman, LagRide, Chief Diana Chen, flagged by LagRide drivers, at the signing ceremony of $100 Million Expansion Facility, strengthening smart mobility, driver asset ownership of over 3,500 cars, financed by UBA in partnership with Lagos State Government and LagRide, held in Lagos on Tuesday.

 

The initiative, unveiled on Wednesday in Alausa, Lagos, will empower 3,500 drivers in the state by enabling them to own vehicles with an equity contribution of 10 per cent of the total cost, while the balance is payable over 48 months.

UBA’s Group Managing Director/CEO, Oliver Alawuba, described the scheme as transformational, noting that it would foster inclusive economic growth, support MSME development and create opportunities for the younger generation.

“This partnership with Lagride is transformational. It will drive inclusivity for economic growth and ensure progress for everyone,” he said.

Alawuba shared a personal story, recalling that his father worked as a driver and was able to fund his education through that income. He said the scheme would provide similar opportunities for many families.

UBA’s Head of SME Banking, Babatunde Ajayi, said the partnership reflected a rethinking of traditional banking models.

“Not every business has a shop. Some businesses have wheels. Every commercial driver is running a business, yet they have remained outside formal finance. We designed credit that fits their reality,” he said.

Chairman of Lagride, Diana Chen, said the company had built a data-driven and credit-ready mobility platform for drivers, stressing that transportation remained the backbone of Africa’s economic future.

“Lagride now stands as the most structured, data-driven and credit-ready mobility platform in Nigeria,” Chen said.

The partnership aligns the strengths of the three organisations, with UBA providing financial support, CIG Motors offering viable business opportunities, and Lagride delivering a technology-driven platform to ensure sustainable livelihoods for driver-partners.


Kindly share this post
Continue Reading

E-Business

Check Point Reveals Nigeria as Second Most Targeted African Country for Cyberattacks in November

Published

on

Kindly share this post

The November 2025 Global Threat Intelligence report released by Check Point Research on Tuesday, shows Nigerian organisations faced an average of 3,374 cyberattacks per week.

Making the country as one of the primary targets for cybercriminals in Africa last month, with a record of a staggering volume of digital threats despite an overall decline in attacks across the continent.

The report shows that this figure places Nigeria second among the four major African nations analysed, trailing only Angola, which topped the list with 4,251 weekly attacks per organisation.

While Africa as a whole saw a 13 percent year-on-year decrease in cyber incidents, Nigeria’s high numbers reveal a persistent vulnerability within its digital infrastructure. Kenya and South Africa followed Nigeria with 2,384 and 1,863 weekly attacks, respectively.

The report also identified government institutions and financial services as the most targeted sectors across Africa. Globally, the education and research sector remained the most frequent victim, hit by an average of 4,656 attacks per week.

A significant highlight of the report is the emerging threat posed by Generative Artificial Intelligence (GenAI). Check Point Research found that one in every 35 GenAI prompts submitted within corporate networks globally posed a high risk of sensitive data leakage.

In Nigeria and abroad, employees are increasingly using AI tools that operate outside of formal security frameworks. The report noted that 87 percent of organisations using GenAI were affected by ‘high-risk’ prompts, which often included the input of proprietary code, customer data, or internal communications into public AI models.

Ransomware continues to be a primary tool for extortion, with global incidents rising by 22 percent year-on-year. While North America remains the most targeted region for ransomware, the impact is increasingly felt in emerging markets like Nigeria.

The most active ransomware groups identified in November were Qilin, Clop, and Akira, which primarily targeted industrial manufacturing and consumer goods sectors.


Kindly share this post
Continue Reading

Trending