E-Business
Kaspersky Identifies Ongoing Supply Chain Attack on Official Daemon Tools Website Distributing Backdoor Malware

Kaspersky’s Global Research and Analysis Team (GReAT) discovered an active supply chain attack targeting the official website of Daemon Tools, a widely used virtual drive emulation software.
![]()
The compromised installer delivers malicious software alongside the legitimate application, granting threat actors the ability to execute arbitrary commands and remotely control infected devices.
During a recent telemetry study, researchers identified that threat actors have actively distributed the modified software directly through the vendor’s primary domain since April 8, 2026, successfully concealing the malware with a valid developer digital certificate.
The malicious injection affects Daemon Tools version 12.5.0.2421 up through the current release. Kaspersky has notified AVB Disc Soft, the developer of Daemon Tools, so that remediation actions can be taken.
Because disk emulation software requires low-level system access to function properly, users routinely grant the application elevated administrative privileges during installation. This mechanism allows the embedded malware to secure a deep foothold within the host operating system, severely compromising device integrity.
Specifically, attackers tampered with legitimate application binaries to execute malicious code at process startup and leveraged a legitimate Windows service to maintain persistence on the host.
Kaspersky telemetry indicates a widespread, global distribution of the compromised updates across more than 100 countries and territories. The majority of victims are located in Russia, Brazil, Türkiye, Spain, Germany, France, Italy, and China.
The analysis shows that 10% of the affected systems belong to businesses and organisations. While Daemon Tools is heavily adopted by consumers, its presence in corporate environments exposes enterprise networks to severe downstream risks.
On a small subset of just over ten machines — belonging to organisations in the retail, scientific, government, and manufacturing sectors — Kaspersky GReAT observed attackers manually deploying additional payloads, including a shellcode injector and previously unknown Remote Access Trojans (RATs).
The narrow industry profile of these victims, combined with typos and inconsistencies in the executed commands, indicates that the follow-on activity is conducted hands-on against specifically chosen targets.
While researchers identified Chinese-language artifacts within the malicious implants, the campaign is not currently attributed to any known threat actor.
“A compromise of this nature bypasses traditional perimeter defences because users implicitly trust digitally signed software downloaded directly from an official vendor,” said Georgy Kucherin, senior security researcher at Kaspersky GReAT. “Because of that, the Daemon Tools attack has gone unnoticed for about a month.
This period of time, in turn, indicates that the threat actor behind this attack is sophisticated and has advanced offensive capabilities. Given the high complexity of the compromise, it is thus of paramount importance for organisations to isolate machines having Daemon Tools software installed, as well as to conduct security sweeps to prevent further spreading of malicious activities inside corporate networks.”
Kaspersky actively detects and blocks the execution of the compromised installers. Researchers advise organisations to audit their networks for the presence of Daemon Tools Lite, isolate affected endpoints, and monitor for unauthorised command execution or lateral movement. Individual users should promptly uninstall the compromised application and run a thorough system scan to clear any persistent threats.
In March 2026, a Kaspersky study found supply chain attacks were the most common cyberthreat businesses faced over the prior 12 months, yet only 9% of organisations ranked them as a top concern.
E-Business
Galaxy Backbone @ 20, Unveils New Identity

Galaxy Backbone (GBB) has unveiled a new corporate identity, signalling what the organisation described as a new phase of growth and readiness to support the future of digital governance in Nigeria.

The unveiling of the identity was part of activities marking 20 years of providing critical digital infrastructure and services to government institutions.
According to GBB, the rebranding signals the organization’s strategic evolution from a core government ICT infrastructure provider to a broad national digital transformation enabler connecting governments, businesses, and institutions.
Speaking at the 20th anniversary celebration and awards ceremony in Abuja, Senator George Akume, secretary to the Government of the Federation, urges GBB to lead the next phase of Nigeria’s digital transformation.
Represented by Dr Ibrahim Kana, permanent secretary, General Services Office, Akume, described the organisation as a key driver of modern governance, cybersecurity and digital service delivery across Nigeria.
He said Galaxy Backbone has evolved from a modest initiative into the nation’s foremost provider of secure government connectivity, cloud infrastructure, data hosting and shared ICT services, helping to improve efficiency, transparency and collaboration across Ministries, Departments and Agencies.
‘Digital transformation is no longer an option but a necessity. Nations that embrace technology and innovation are better positioned to achieve sustainable economic growth, improve governance outcomes and enhance the quality of life of their citizens,” he said.
Senator Akume stressed that digital transformation is now essential for economic growth and effective governance. He urged Galaxy Backbone to strengthen its role in emerging technologies, including artificial intelligence, cloud computing, blockchain and big data analytics, to support Nigeria’s digital economy and public sector modernisation.
“The next phase of Nigeria’s digital transformation will require greater innovation, stronger cybersecurity capabilities, expanded broadband infrastructure and deeper collaboration among stakeholders,” he added.
Earlier in his remarks, Professor Ibrahim Adeyanju, managing director of Galaxy Backbone, said the organisation’s journey began with a bold vision to connect government institutions and make digital infrastructure a strategic national asset. He noted that two decades later, the organisation has become a critical pillar of Nigeria’s digital ecosystem.
“Twenty years ago, a bold idea was born. An idea that government could be more connected, that technology could transform governance, and that digital infrastructure could become a strategic national asset,” Adeyanju said.
Professor Adeyanju said Galaxy Backbone’s achievements were made possible through the support of the Federal Government, stakeholders, partner agencies and generations of staff who helped build the institution.
He added that the organisation’s greatest strength remains its workforce and reaffirmed its commitment to innovation, service delivery and talent development.
E-Business
NDPC to Review Data Law to Address AI, Privacy Concerns

Nigeria Data Protection Commission (NDPC) has said that it plans to seek a review of the Nigeria Data Protection Act (NDPA) 2023 to address emerging technologies such as Artificial Intelligence (AI), robotics and big data, amid growing concerns over privacy, cybersecurity and data governance in an increasingly digital economy.

The proposed review comes as regulators across the world grapple with the rapid adoption of AI-driven technologies and the challenges they pose to existing legal frameworks designed to protect personal data and privacy rights.
Experts believe the move signals Nigeria’s determination to align its data protection regime with global technological developments and emerging regulatory standards.
Speaking during activities marking the third anniversary of the signing of the Nigeria Data Protection Act into law, Dr. Vincent Olatunji, national commissioner and chief executive officer of the NDPC, said the current law requires updates to adequately reflect technological realities that have evolved significantly since its enactment.
According to him, the pace of innovation has made it necessary for policymakers to move beyond broad references to emerging technologies and provide clearer regulatory guidance.
“We are in the era of emerging technologies. At the time the law was drafted, we could only make broad references to emerging technologies, but today we can specifically mention Artificial Intelligence, robotics and big data,” Olatunji said.
The NDPC boss noted that technologies which were once considered futuristic have now become central to economic activities, digital services and public administration.
“Ten years ago, nobody was talking about AI the way we are doing now, but today it has become central to virtually every aspect of digital transformation. We need to be more specific about what constitutes emerging technologies and provide examples because the technologies keep evolving,” he added.
Industry stakeholders say the review is timely, given the increasing deployment of AI tools across sectors including banking, telecommunications, healthcare, education and public services.
They argue that clearer rules are needed to govern automated decision-making, algorithmic accountability, data ownership and cross-border data transfers.
The proposed amendment also aligns with the National Assembly’s ongoing work to assess the existing law and identify areas to strengthen in light of evolving cyber threats and technological advancements.
Senator Afolabi Salisu, chairman, Senate Committee on ICT and Cybersecurity, had earlier indicated that lawmakers were reviewing the legislation to ensure it remains relevant in addressing developments such as AI and emerging cybercrime threats.
Analysts believe the review could further strengthen investor confidence in Nigeria’s digital economy by providing clearer regulatory certainty for businesses operating in data-intensive sectors.
The NDPA 2023 established the NDPC as the country’s primary data protection regulator and created a legal framework for the collection, processing, storage and transfer of personal data.
Since its enactment, the Commission has ramped up enforcement, compliance monitoring, and awareness campaigns to strengthen data governance across public and private institutions.
Olatunji, however, cautioned against excessive reliance on AI technologies, stressing that human oversight remains critical in data processing and decision-making systems.
“We still need the human component. We should not leave everything to artificial intelligence,” he said.
He further noted that issues relating to digital footprints, privacy rights and responsible data use would continue to demand regulatory attention as technology becomes more integrated into everyday life.
Technology policy experts say the emergence of generative AI, machine learning systems and autonomous technologies has created new legal and ethical questions that many existing privacy laws were not originally designed to address.
These include concerns around automated profiling, bias in AI systems, consent management, surveillance and accountability for decisions made by intelligent systems.
Meanwhile, the NDPC has in recent months demonstrated a growing focus on AI governance, including participation in international initiatives aimed at promoting responsible and privacy-conscious deployment of artificial intelligence technologies.
Stakeholders believe that any amendment to the Act should strike a balance between protecting citizens’ privacy rights and supporting innovation within Nigeria’s rapidly expanding digital economy.
Hence, the proposed review signals the likelihood of stricter compliance obligations for business and increased scrutiny of how personal data is collected, processed and utilised.
While experts advise organisations to begin strengthening internal governance frameworks, data management systems and privacy compliance programmes in anticipation of future regulatory changes.
Consequently, the planned review of the Data Protection Act underscores the growing recognition that regulatory frameworks must evolve alongside technological innovation, while for policymakers, the challenge will be ensuring that the law remains flexible enough to encourage innovation while robust enough to protect citizens in an era increasingly defined by data and artificial intelligence.
E-Business
FG Bans Use of Gmail, Other Personal Emails for Civil Service Operations

Federal government has banned the use of personal email accounts, such as Gmail, Yahoo Mail, or Hotmail, for official public-sector transactions, mandating that civil servants transition to a secure, institutional digital platform.

This ban requires all government officials to use secure institutional platforms with the approved .gov.ng domain to safeguard sensitive data.
The announcement was made in Abuja by Didi Esther Walson-Jack, head, the Civil Service of the Federation, during a digital transformation summit held to celebrate the 20th anniversary of Galaxy Backbone.
According to Walson-Jack, the government has activated more than 115,000 official GovMail accounts to ensure that communication within the federal civil service remains secure, professional, and easy to track.
She said government activities should no longer rely on personal email services or informal channels that make record-keeping difficult.
The Head of service explained that official information must remain within government systems even when an officer leaves a position.
This, she said, will help preserve important records and prevent the loss of government information tied to individual workers.
The Head of Service also disclosed that the Federal Government achieved a major target by completing the digitalisation of work processes across all 38 federal ministries and extra-ministerial departments before the end of December 2025.
She described the development as proof that reforms can succeed when there is clear leadership and commitment from government institutions.
According to her, the achievement shows that the civil service is capable of adapting to modern methods of operation.
Walson-Jack recalled that in the past, government files could easily be delayed, misplaced, or trapped in lengthy approval processes.
She said the shift to digital systems now makes it easier to monitor documents, improve accountability, and measure progress in government operations.
Walson-Jack added that the paperless civil service initiative is aimed at making government work more efficient by cutting delays, reducing unnecessary bureaucracy, improving transparency, and allowing records to be retrieved and processed faster.
Telecom3 days agoTikTok, ICC Gather Nigeria’s Entrepreneurs to Drive Small Business Growth and Digital Transformation
E-Business3 days agoPayaza Launches AI-powered Storefront Platform to Drive Cross-border Commerce
Telecom3 days agoNigeria Moves to End Solar Imports as NASENI, REA Seal Major Renewable Energy Deal
Telecom3 days agoHow a New NITDA-TikTok Partnership Could Transform Thousands of Nigerian Businesses
E-Business3 days agoFG Bans Use of Gmail, Other Personal Emails for Civil Service Operations
E-Financial3 days agoNAICOM’s 18 Months Management Spill @ African Alliance Ends
General News3 days agoIndwelt Studios Seeks Increased Awareness @ World Sickle Cell Day
E-Financial3 days agoStandard Bank Targets $15.4b SME Growth in Nigeria, Others with Trade Expansion Drive















