E-Business
Kaspersky Warns of a Two-fold Surge in Browser Extensions that Steal Crypto

A browser extension is a piece of software that users can install to customise the functionality of a web browser. Browser extensions are handy, but they can also pose serious threats to privacy and security.
As an increasing number of people have begun to rely on cryptocurrencies for online transactions, cybercriminals have adapted their tactics accordingly: browser extensions have become an attractive target for hackers looking to exploit unsuspecting crypto users.
At the beginning of 2023 Kaspersky observed a two-fold increase in the number of malicious browser extensions, specifically those designed to perform web injects and steal cryptocurrency. There was also a rise in the number of malicious droppers that install harmful extensions on victims’ machines.
A malicious browser extension interferes in browser functionality and mimics legitimate software. It could be difficult to detect by antivirus software. Malicious extensions can alter what the user sees on his/her browser, as opposed to what is actually sent by the server.
For example, these extensions can add or remove text, labels, text fields, and other website elements. Malicious extensions can track affiliate IDs, engage in phishing activities and steal credentials, as well as steal cryptocurrency.
For instance, a malicious extension can insert an additional field to a form sent by a crypto wallet server. The purpose of these extra fields (accompanied by supporting labels and instructions) is to dupe the user into entering certain confidential information (e.g., login credentials, credit card numbers, CVVs, PINs, tokens, etc.) even if that information was not being requested by the crypto wallet in the original form.
These malicious extensions often mimic legitimate ones, making it difficult for users to differentiate between safe and harmful add-ons. Once installed, these extensions can inject malicious code into users’ browsers, enabling cybercriminals to steal sensitive information such as private keys, seed phrases for crypto wallets, login credentials and two-factor authentication information.
“Browser extensions can be installed both from official browser stores (e.g., in Chrome, Firefox) or direct from a file – this is currently available on Windows machines in the most popular browser – Chrome.
When installed from outside the official stores, the risk of the extension being malicious increases. Users, especially those who engage in cryptocurrency operations on their Windows machines, should be wary of browser extensions that they install,” comments Sergey Lozhkin, Lead Security Researcher at Kaspersky GReAT.
E-Business
Transcorp Hotels Delivers Stellar H1 Results, Declares Over ₦1Bn Dividend

Transcorp Hotels Plc has delivered a stellar performance in the first half of 2025, recording a 60% year-on-year surge in revenue to ₦47.57 billion, up from ₦29.72 billion in H1 2024. Gross profit climbed 71% to ₦36.21 billion, maintaining a strong 76% margin despite inflation and operational headwinds.
The hospitality giant, a subsidiary of Transnational Corporation Plc, also announced an interim dividend payout of ₦1.024 billion — offering ₦0.10 per 50 kobo ordinary share to shareholders.
In a bold move, the company unveiled Nigeria’s largest corporate venue — the 5,000-seat Transcorp Centre — staking its claim as the new leader in event hospitality. Chairman Emmanuel Nnorom described the results as proof of Transcorp Hotels’ transformative strategies and unwavering investor commitment. MD/CEO Uzo Oshogwe attributed the success to relentless execution and a resilient business model.
Transcorp Hotels, renowned for iconic assets like Transcorp Hilton Abuja and its digital platform Aura, says it isn’t just leading Nigeria’s hospitality sector — it’s redefining excellence across Africa.
E-Business
Microsoft Servers Hacked by Chinese Groups

Chinese “threat actors” have hacked Microsoft’s SharePoint document software servers and targeted the data of the businesses using it, the firm has said.
China state-backed Linen Typhoon and Violet Typhoon as well as China-based Storm-2603 were said to have “exploited vulnerabilities” in on-premises SharePoint servers, the kind used by firms, but not in its cloud-based service.
The US tech giant has released security updates in response and has advised all on-premises SharePoint server customers to install them.
“Investigations into other actors also using these exploits are still ongoing,” Microsoft said in a statement.
The firm said it had “high confidence” the hackers would continue to target systems which have not installed its security updates.
It added that it would update its website blog with more information as its investigation continues.
Microsoft said it had observed attacks in which hackers had sent a request to a SharePoint server “enabling the theft of the key material by threat actors”.
Charles Carmakal, chief technology officer at Mandiant Consulting firm, a division of Google Cloud, told reporter, it was “aware of several victims in several different sectors across a number of global geographies”.
Carmakal said it appeared that governments and businesses that use SharePoint on their sites were the primary target.
A number of adversaries who stole material encoded by cryptography were then able to regain ongoing access to the victims’ SharePoint data, he said.
“This was exploited in a very broad way, very opportunistically before a patch was made available. That’s why this is significant,” Carmakal said.
Carmakal said the “China-nexus actor” was deploying techniques similar to previous campaigns associated with Beijing.
Microsoft said Linen Typhoon had “focused on stealing intellectual property, primarily targeting organizations related to government, defence, strategic planning, and human rights” for 13 years.
It added that Violet Typhoon had been “dedicated to espionage”, primarily targeting former government and military staff, non-governmental organizations, think tanks, higher education, the media, the financial sector and the health sector in the US, Europe, and East Asia.
Meanwhile, Storm-2603 was “assessed with medium confidence to be a China-based threat actor”.
E-Business
NIMC Warns Nigerians of Fake NIN Website

National Identity Management Commission (NIMC) has issued a public warning that it is not associated with NINcard.com.
According to the commission, the website has been circulating online to offer services for Nigerians seeking National Identification Number (NIN) services.
NIMC, in a post on its official X account on Wednesday, said, “NINcard.com is not in anyway affiliated to NIMC. Stay vigilant!”
The warning was accompanied by screenshots of fake payment receipts and OTP request pages from the website, both of which were boldly stamped “FAKE” by NIMC to alert the public.
- Telecom2 days ago
Glo Launches Nigeria’s First-of-its-kind Device Protection Plan
- Telecom2 days ago
Telcos: How and Why Network Services have Been Poor
- Broadcasting2 days ago
Canal+ Clears Final Hurdle to Acquire South Africa’s MultiChoice
- E-Business2 days ago
NIMC Warns Nigerians of Fake NIN Website
- Telecom2 days ago
MTN Executive Adeola Oduntan Emerges as Africa’s Supply Chain Leader of 2025
- Telecom2 days ago
MTN Nigeria Sweeps Africa’s Procurement Awards With Innovation and Impact
- E-Business2 days ago
Microsoft Servers Hacked by Chinese Groups
- Telecom2 days ago
Telegram to allow U.S. users send, receive crypto directly in app