E-Business
Malware Variety Grows by 13.7% in 2019 Due to Web Skimmers

In 2019, the number of unique malicious objects detected by Kaspersky’s web antivirus solution rose by an eighth, compared to last year — reaching 24,610,126.
This growth was mainly influenced by a 187% rise in web skimmer files. Other threats, such as backdoors and banking Trojans detected in-lab, also grew, while the presence of miners dropped by more than a half.
These trends have demonstrated a shift in the type of threats used by attackers on the web who search for more effective ways to target users, according to the Kaspersky Security Bulletin: Statistics of the Year report.
In 2018, unique malicious objects (including scripts, exploits and executable files) detected by Kaspersky’s web antivirus solution totaled 21,643,946, rising to 24,610,126 this year.
The growth accounts for an increase in the number and variety of HTML pages and scripts with hidden data loading – usually used by unscrupulous advertisers.
Yet, most notably, the growth was also partially caused by online skimmers (sometimes referred to as sniffers) – where scripts are embedded by attackers in online stores and used to steal users’ credit card data from websites.
The growth of online skimmers’ unique files (scripts and HTML) detected by Kaspersky web antivirus equaled 187%, reaching 510,000. At the same time the number of threats detected by web antivirus have risen five-fold (by 523%), totaling 2,660,000 in 2019.
“Web skimmers also entered the top 20 malicious objects detected online, taking 10th place in the overall ranking. The share of new Backdoors and banking Trojan files, among all types of threats detected in-lab, also grew by 134% and 61% to reach 7,644,402 and 739,551 respectively.
Nevertheless, the number of unique malicious URLs detected by Kaspersky web antivirus halved in comparison to 2018 (50.5%) – from 554,159,621 to 273,782,113. This shift was largely caused by significant decrease of hidden web miners, even though several detections related to them (including Trojan.Script.Miner.gen, Trojan.BAT.Miner.gen, Trojan.JS.Miner.m), can still be seen in the top 20 web malware threats.
The presence of programs that secretly generate cryptocurrency on users’ computers (called ‘local’ miners) has also been steadily declining over the year: the number of users’ computers affected by attempts to install miners dropped by 59%, from 5,638,828 to 2,259,038.
85% of web threats were detected as malicious URL – this detection name is used to identify links from Kaspersky’s black list. It includes links to web pages containing redirects to exploits, sites with exploits and other malicious programs, botnet command and control centers, extortion websites, and others.
“The volume of online attacks has been growing for years, but in 2019 we saw a clear shift from certain types of attacks that are becoming ineffective, to the ones focused on gaining clear profit from users. This is partly due to users becoming more aware of the threats and how to avoid them, and organisations steadily becoming more responsible.
A good example is miners, which have lost their popularity due to lower profitability and cryptocurrencies’ fight against covert mining.
“This year we also witnessed growth in zero-day exploits, showing products remain vulnerable and are used by attackers for sophisticated attacks, and this trend is likely to continue in the future,” says Vyacheslav Zakorzhevsky, Head of Anti-Malware Research at Kaspersky.
The number of new malicious files processed by Kaspersky’s in-lab detection technologies amounted to 342,102 – which is 1.05% less than the previous year.
E-Business
Microsoft Servers Hacked by Chinese Groups

Chinese “threat actors” have hacked Microsoft’s SharePoint document software servers and targeted the data of the businesses using it, the firm has said.
China state-backed Linen Typhoon and Violet Typhoon as well as China-based Storm-2603 were said to have “exploited vulnerabilities” in on-premises SharePoint servers, the kind used by firms, but not in its cloud-based service.
The US tech giant has released security updates in response and has advised all on-premises SharePoint server customers to install them.
“Investigations into other actors also using these exploits are still ongoing,” Microsoft said in a statement.
The firm said it had “high confidence” the hackers would continue to target systems which have not installed its security updates.
It added that it would update its website blog with more information as its investigation continues.
Microsoft said it had observed attacks in which hackers had sent a request to a SharePoint server “enabling the theft of the key material by threat actors”.
Charles Carmakal, chief technology officer at Mandiant Consulting firm, a division of Google Cloud, told reporter, it was “aware of several victims in several different sectors across a number of global geographies”.
Carmakal said it appeared that governments and businesses that use SharePoint on their sites were the primary target.
A number of adversaries who stole material encoded by cryptography were then able to regain ongoing access to the victims’ SharePoint data, he said.
“This was exploited in a very broad way, very opportunistically before a patch was made available. That’s why this is significant,” Carmakal said.
Carmakal said the “China-nexus actor” was deploying techniques similar to previous campaigns associated with Beijing.
Microsoft said Linen Typhoon had “focused on stealing intellectual property, primarily targeting organizations related to government, defence, strategic planning, and human rights” for 13 years.
It added that Violet Typhoon had been “dedicated to espionage”, primarily targeting former government and military staff, non-governmental organizations, think tanks, higher education, the media, the financial sector and the health sector in the US, Europe, and East Asia.
Meanwhile, Storm-2603 was “assessed with medium confidence to be a China-based threat actor”.
E-Business
NIMC Warns Nigerians of Fake NIN Website

National Identity Management Commission (NIMC) has issued a public warning that it is not associated with NINcard.com.
According to the commission, the website has been circulating online to offer services for Nigerians seeking National Identification Number (NIN) services.
NIMC, in a post on its official X account on Wednesday, said, “NINcard.com is not in anyway affiliated to NIMC. Stay vigilant!”
The warning was accompanied by screenshots of fake payment receipts and OTP request pages from the website, both of which were boldly stamped “FAKE” by NIMC to alert the public.
E-Business
NITDA, API Partner Against Harmful Online Content

National Information Technology Development Agency (NITDA), in partnership with the Advocacy for Policy and Innovation (API), has convened a one-day workshop in Abuja to advance dialogue on the draft Online Harm Protection (OHP) Bill to confront harmful online content.
The bill, a rights-based, locally rooted, and multi-stakeholder initiative, is aimed at addressing the challenges of the digital age.
The event, which held yesterday, brought together government officials, civil society, academics, digital platforms, and legal experts to shape a policy framework designed to combat online ills such as cyberbullying, disinformation, hate speech, digital exploitation, and gender-based violence, while safeguarding democratic freedoms and digital inclusion.
In his keynote remarks, Kashifu Inuwa, director general, NITDA urged a paradigm shift in the way society engages with digital technologies.
“For almost two decades, we have viewed digital technology through a consumer lens. But these technologies are not just products and services. They are transforming how we live, work, and interact. They shape our politics, our society, and our democracy,” he said.
Warning against unaccountable digital power in the hands of private corporations, the DG likened the digital journey to the tale of Alice in Wonderland, where initial fascination with innovation has given way to deeper concerns about privacy, autonomy, and manipulation by big tech platforms.
“We thought we were using Google, but now we realise Google is using us. Social media, once a tool of expression, has become a tool of surveillance and influence,” Inuwa noted.
He, therefore, emphasised the urgency of developing a democratic and accountable framework. He explained that following the 2021 Twitter ban, NITDA facilitated dialogue between the government and platform operators, leading to a Code of Practice that stressed Nigeria’s sovereignty and legal standards.
According to him, the same process birthed the multi-stakeholder steering committee and the OHP White Paper in December 2024, laying the foundation for the current legislative push.
Earlier in her opening remarks, Victoria Manya, co-founder, API, observed the moral and civic necessity of the bill.
Her words: “The internet did not break society, it merely revealed its unfiltered version. Every day, Nigerians are exposed to harassment, disinformation, exploitation, and even algorithmic violence. The OHP Bill is not a war on the Internet. It is a peace offering to its users, a social contract for a digital future that is safe, inclusive, and democratic.
“We cannot answer the question of algorithmic power with unchecked state control. We must answer it with shared, rights-based governance. This bill must not be written for the people, but with them.”
- E-Financial3 days ago
Kuda Unveils New Wallet for Multiple Currencies
- Telecom3 days ago
Telcos Resume SIM Card Sales after 2-Week Halt
- Telecom3 days ago
Nigeria, Others Achieve 84% Adult Mobile Phones Penetration
- E-Business3 days ago
How AI Alert by Airtel is Transforming Mobile Security in Africa
- E-Business3 days ago
NITDA, API Partner Against Harmful Online Content
- Telecom2 days ago
Glo Launches Nigeria’s First-of-its-kind Device Protection Plan
- Telecom2 days ago
Telcos: How and Why Network Services have Been Poor
- News3 days ago
Horn of Africa Leaders Seek Enhanced Digital Integration for Increased Regional Growth