News
New Emotet Campaign Bypasses Microsoft Blocks to Distribute Malicious OneNote Files

Check Point Research reports that Emotet Trojan launched a new campaign last month to evade Microsoft’s macro block, sending spam emails containing malicious OneNote files. Meanwhile Ahmyth was the most prevalent mobile malware and Log4j took top spot once again as the most exploited vulnerability
Check Point® Software Technologies, a leading provider of cybersecurity solutions globally, has published its Global Threat Index for March 2023. Last month, researchers uncovered a new malware campaign for Emotet Trojan, which rose to become the second most prevalent malware.
As reported earlier this year, Emotet attackers have been exploring alternative ways to distribute malicious files since Microsoft announced they will block macros from office files. In the latest campaign, the attackers have adopted a new strategy of sending spam emails containing a malicious OneNote file.
Once opened, a fake message appears to trick the victim into clicking the document, which downloads the Emotet infection. Once installed, the malware can gather user email data such as login credentials and contact information. The attackers then use the gathered information to expand the reach of the campaign and facilitate future attacks.
“While big tech companies do their best to cut off cybercriminals at the earliest point, it’s near impossible to stop every attack from bypassing the security measures. We know that Emotet is a sophisticated Trojan and it is no surprise to see it has managed to navigate Microsoft’s latest defenses.
The most important thing people can do is make sure they have appropriate email security in place, avoid downloading any unexpected files and adopt heathy skepticism about the origins of an email and its contents” said Maya Horowitz, VP Research at Check Point Software.
CPR also revealed that “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.
Top malware families
Globally, Qbot was the most prevalent malware last month with an impact of more than 10% on worldwide organizations respectively, followed by Emotet and Formbook with a 4% global impact.
In Nigeria, Qbot was the most prevalent malware last month with an impact of more than 32.36%, followed by Expiro with 19.35% and BlackCat with a 9.68% impact.
- Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials or keystrokes and is often distributed via spam emails. Qbot employs several anti-VM, anti-debugging and anti-sandbox techniques to hinder analysis and evade detection.
- Expiro – Expiro is a polymorphic file infector first seen in 2010. It inserts its malicious code into executable files on the infected host. These files lead to new infections when they are run on other machines. Expiro steals user and system information from Windows, as well as FTP credentials.
- BlackCat – BlackCat (aka ALPHV) operates in a ransomware-as-a-service (RaaS) business model. BlackCat ransomware is highly customizable ransomware that allows for attacks on a wide range of corporate environments. It targets both Linux and Windows systems, and is coded in Rust.
Top Attacked Industries in Africa
Last month, Manufacturing remained the most attacked industry globally, followed by Consultant and then Leisure/Hospitality.
- Manufactoring
- Consultant
- Leisure/Hospitality
Top exploited vulnerabilities
Last month, “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↑ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
- ↑MVPower DVR Remote Code Execution – A remote code execution vulnerability exists in MVPower DVR devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request.
Top Mobile Malwares
Last month, Ahmyth moved to the top spot as the most prevalent mobile malware, followed by Anubis and Hiddad.
- AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.
News
DBN Awards N13m in Grants to Tech Startups

Development Bank of Nigeria (DBN) has awarded a total of N13 million in grants to three standout tech startups at the 2025 Techpreneur Summit held in Lagos, reinforcing its commitment to innovation and inclusive growth among Nigeria’s micro, small, and medium enterprises (MSMEs).
The winners include: BuyScrap, a digital marketplace for recyclable materials – N6 million; Qiqi Farms, which connects local farmers to hospitality and export markets – N4 million; Eco-Cyclers, a youth-led recycling initiative based in Enugu – N3 million
Alongside the grant awards, DBN also launched a new digital data asset, a first-of-its-kind platform aimed at enabling data-driven decisions within the MSME ecosystem.
The platform offers deep insights into business trends, sector-specific challenges, and growth opportunities—supporting smarter policymaking and targeted investments.
In his keynote address in Lagos, Tony Okpanachi, managing director/ CEO, DBN, described the event’s theme, “CTRL + SHIFT: Tech Empowered Movement for Naija,” as a strategic call to reimagine enterprise development in Nigeria.
“This isn’t just a keyboard shortcut,” he said. “It’s a mindset reset—powered by technology—to build a more inclusive, innovative, and resilient business landscape. From financing to innovation, DBN remains committed to enabling MSMEs to thrive.”
Okpanachi emphasized that the Summit aligns with DBN’s AMPLIFI Strategy, which integrates digital transformation, sustainability, and scalability into its core programs.
He highlighted initiatives such as the Digital Shift Workshops and the Eco-Innovation Challenge as key steps toward embedding innovation in Nigeria’s MSME sector.
Encouraging young innovators, he added: “The future belongs to those bold enough to imagine and build it. DBN is proud to support the ideas that will shape tomorrow.”
A major highlight was the unveiling of the DBN Data Asset—a digital platform designed to provide real-time, evidence-based insights into Nigeria’s MSME landscape.
The platform combines DBN’s proprietary data with external sources like the National Bureau of Statistics (NBS) to offer a comprehensive view of MSME performance by region and sector.
Jeremy Dan Okayi, DBN’s Head of Strategy, Policy & Innovation, described the platform as: “A reservoir of insight, potential, and direction—built on two years of collaboration and shared vision. This tool will support informed decision-making across the public and private sectors.”
News
FCCPC Shuts France, Belgium, and Italy Visa Centres in Abuja Over Alleged Consumer Rights Violations

In a bold enforcement action, the Federal Competition and Consumer Protection Commission (FCCPC), supported by the Nigeria Police Force and the Nigeria Security and Civil Defence Corps (NSCDC), has sealed off the visa application centres of France, Belgium, and Italy in Abuja over alleged consumer protection breaches and obstruction of regulatory investigations.
The affected centres—located at Mukhtar El-Yakub House in the Central Business District and operated by TLS Contact, a Teleperformance Company—were shut down following reports that they refused to accept formal correspondence from the FCCPC regarding a consumer complaint. The Commission cited further infractions, including obstruction of investigation and alleged assault of its officers during lawful duties.
Speaking to journalists at the scene, Mrs. Boladale Adeyinka, Director of Surveillance and Investigations at the FCCPC, explained: “This is an enforcement operation against TLS. On March 25, 2025, we served them a letter to address a consumer complaint, which they refused to accept. Instead, TLS officers assaulted our team, and in a subsequent visit on June 17, they also allegedly assaulted uniformed police officers.”
Citing Section 33 of the Federal Competition and Consumer Protection Act (FCCPA), Mrs. Adeyinka emphasized that failure to comply with Commission directives constitutes a criminal offense, punishable by imprisonment, fines of up to ₦20 million, or both.
TLS has been ordered to appear before the Commission on June 20, 2025, to provide testimony, submit evidence, and make formal depositions. The company may be held liable for any financial losses suffered by applicants due to the disruption of visa services.
Despite multiple requests for comment, management at TLS Contact declined to respond as of press time.
News
How and Why N210 Trillion is Missing in NNPCL – CFO

Adedapo Segun, chief financial officer (CFO), Nigerian National Petroleum Company Limited (NNPC), has explained why there is a missing sum of N210 trillion in the company’s audited financial statement spanning from 2017 to 2023.
According to Segun, the missing funds are cash calls requested by joint venture (JV) partners and settlement to the JVs.
He spokeat a session of the Senate Committee on Public Accounts chaired by Aliyu Wadada.
Segun was responding to an alarm raised by the committee over missing N210 trillion in NNPCL’s audited financial statement.
Recall that Wadada issued a one-week ultimatum to NNPCL to account for the missing N210 trillion.
Reacting, Segun said, “The N103 trillion and N107 trillion are made up of joint venture cash calls that have been requested by the JV operators and JV cash call payments made by NNPCL, which are yet to be reconciled because governance procedures were not done at that time.
“That is why you see the description reflecting those two items would be washed out because they are two sides of the same transaction, which is the cash calls by JV partners and the settlement by NNPCL.”
However, Habu Sadeik, a financial analyst, in a post on X on Thursday, said Segun’s response was unsatisfactory.
Saidik faulted NNPCL’s response about the fund discrepancies, noting that something is not right with the audited financial statement.
“Forget about the senators’ lack of knowledge.
“The CFO’s response is not satisfactory. Are you saying that cash calls worth hundreds of trillions are just appearing on your FS only in 2024 without 31 disclosure?
“If it’s a cash call, why hasn’t the disclosure said so?
“Which cash call is over 100 trillion?
“Something is definitely not right, and I hope they retrospectively correct that FS.
“Someone somewhere did a chef’s work,” he wrote on X.
- General News2 days ago
NASRDA, Galaxy Space Firm Sign MoU on Satellite Connectivity
- Telecom2 days ago
Over 1m Nigerians Reached through MTN Staff’s Digital and Community Outreach
- Telecom2 days ago
Mafab Gets 0724 Number Series, Launches Mcom 5G Brand
- News2 days ago
DBN Awards N13m in Grants to Tech Startups
- Telecom2 days ago
NCC to Name, Shame Telecom Infrastructure Vandals
- News2 days ago
FCCPC Shuts France, Belgium, and Italy Visa Centres in Abuja Over Alleged Consumer Rights Violations
- Telecom2 days ago
WSIS Review: Nigerian ICT Leaders Urged to Shape Global Digital Future
- E-Financial2 days ago
Bank Customers Petition CBN over Illegal Deductions, Demand Action