News
New Emotet Campaign Bypasses Microsoft Blocks to Distribute Malicious OneNote Files
Check Point Research reports that Emotet Trojan launched a new campaign last month to evade Microsoft’s macro block, sending spam emails containing malicious OneNote files. Meanwhile Ahmyth was the most prevalent mobile malware and Log4j took top spot once again as the most exploited vulnerability
Check Point® Software Technologies, a leading provider of cybersecurity solutions globally, has published its Global Threat Index for March 2023. Last month, researchers uncovered a new malware campaign for Emotet Trojan, which rose to become the second most prevalent malware.
As reported earlier this year, Emotet attackers have been exploring alternative ways to distribute malicious files since Microsoft announced they will block macros from office files. In the latest campaign, the attackers have adopted a new strategy of sending spam emails containing a malicious OneNote file.
Once opened, a fake message appears to trick the victim into clicking the document, which downloads the Emotet infection. Once installed, the malware can gather user email data such as login credentials and contact information. The attackers then use the gathered information to expand the reach of the campaign and facilitate future attacks.
“While big tech companies do their best to cut off cybercriminals at the earliest point, it’s near impossible to stop every attack from bypassing the security measures. We know that Emotet is a sophisticated Trojan and it is no surprise to see it has managed to navigate Microsoft’s latest defenses.
The most important thing people can do is make sure they have appropriate email security in place, avoid downloading any unexpected files and adopt heathy skepticism about the origins of an email and its contents” said Maya Horowitz, VP Research at Check Point Software.
CPR also revealed that “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.
Top malware families
Globally, Qbot was the most prevalent malware last month with an impact of more than 10% on worldwide organizations respectively, followed by Emotet and Formbook with a 4% global impact.
In Nigeria, Qbot was the most prevalent malware last month with an impact of more than 32.36%, followed by Expiro with 19.35% and BlackCat with a 9.68% impact.
- Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials or keystrokes and is often distributed via spam emails. Qbot employs several anti-VM, anti-debugging and anti-sandbox techniques to hinder analysis and evade detection.
- Expiro – Expiro is a polymorphic file infector first seen in 2010. It inserts its malicious code into executable files on the infected host. These files lead to new infections when they are run on other machines. Expiro steals user and system information from Windows, as well as FTP credentials.
- BlackCat – BlackCat (aka ALPHV) operates in a ransomware-as-a-service (RaaS) business model. BlackCat ransomware is highly customizable ransomware that allows for attacks on a wide range of corporate environments. It targets both Linux and Windows systems, and is coded in Rust.
Top Attacked Industries in Africa
Last month, Manufacturing remained the most attacked industry globally, followed by Consultant and then Leisure/Hospitality.
- Manufactoring
- Consultant
- Leisure/Hospitality
Top exploited vulnerabilities
Last month, “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↑ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
- ↑MVPower DVR Remote Code Execution – A remote code execution vulnerability exists in MVPower DVR devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request.
Top Mobile Malwares
Last month, Ahmyth moved to the top spot as the most prevalent mobile malware, followed by Anubis and Hiddad.
- AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.
Socio-Economic Rights and Accountability Project (SERAP) has called on Mr. Bayo Bashir Ojulari, group chief executive officer, Nigerian National Petroleum Company (NNPCL) Limited, to provide clarification regarding the missing N500 billion.
According to the World Bank, this sum was not remitted to the Federation Account between October and December 2024.
SERAP is urging accountability and transparency in addressing this financial discrepancy.
SERAP urged Mr Ojulari “to identify those suspected to be involved, surcharge them for the full amount involved, and hand them over to the Independent Corrupt Practices and Other Related Offences Commission (ICPC) and the Economic and Financial Crimes Commission (EFCC) for investigation and prosecution.”
SERAP also urged Mr Ojulari “to invite the EFCC and ICPC to investigate the spending and whereabouts of the N500 billion, and to ensure the full recovery and remittance of the money to the Federation Account without further delay.
Last week, the World Bank disclosed that out of the N1.1 trillion revenue from crude sales and other income in 2024, the NNPC only remitted N600 billion, leaving a deficit of N500 billion unaccounted for. The International Monetary Fund (IMF) also recently called for the subsidy removal savings to be transferred to the national budget.
In the Freedom of Information request dated 17 May 2025 and signed by Kolawole Oluwadare, SERAP deputy director, the organisation said: “There is a legitimate public interest in explaining the whereabouts of the alleged missing N500 billion oil money and grave violations of the Nigerian Constitution 1999 [as amended]’
“The country’s oil wealth ought to be used solely for the benefit of the Nigerian people, and for the sake of the present and future generations.”
According to SERAP, Nigerians have the right to know why the NNPCL failed to remit the subsidy removal savings to the Federation Account.
“We would be grateful if the recommended measures are taken within 7 days of the receipt and/or publication of this letter. If we have not heard from you by then, SERAP shall consider appropriate legal actions to compel the NNPCL to comply with our requests in the public interest,” the letter read in part.
“Without the full recovery and remittance of the missing N500 billion of oil revenue, the dire economic situation may worsen and Nigerians will continue to be denied access to basic public goods and services,” it read.
“The Freedom of Information Act, Section 39 of the Nigerian Constitution, article 9 of the African Charter on Human and Peoples’ Rights and article 19 of the International Covenant on Civil and Political Rights guarantee to everyone the right to information on the whereabouts of the missing N500 billion of oil revenue.”
Hannatu Musawa, Minister of Arts, Culture, and the Creative Economy, has revealed that the ministry has secured over $300 million in investment commitments.
Musawa disclosed this at the Ministerial Press Briefing Session held on Friday in Abuja.
She emphasised that the government has set a goal of creating at least two million jobs within the creative industry by 2027.
According to her, “In just 18 months, we have secured over $300 million in investment commitments and established innovative funding mechanisms, including the Creative Economy Development Fund (CEDF).
“We have also initiated the development of key infrastructure projects, which are projected to generate at least two million jobs by 2027.”
The Minister further noted that President Bola Tinubu plans to unveil creative hubs across Nigeria’s six geopolitical zones in the coming months, positioning Nigeria as a global hub for creativity.
“Beyond the numbers, we have elevated Nigeria’s global cultural standing while ensuring inclusivity, empowering rural communities, women, and young people to participate meaningfully in the creative economy,”.
The Minister highlighted the significant role the creative economy will play in Nigeria’s future, particularly the music industry.
She pointed out that the government has identified five key segments within the music value chain production, marketing, sales, and others—that can generate over 500,000 new jobs by 2030, representing a transformative opportunity for Nigeria’s economy.
“A key initiative in this drive is the $200 million Creative Economy Development Fund (CEDF), managed by the African Export-Import Bank (AfreximBank).
The fund aims to provide affordable financing to creative businesses and entrepreneurs, empowering them to innovate, expand their operations, and contribute to job creation across multiple sectors such as film, music, fashion, and tourism.
The minister said in addition to funding, the ministry is working on the Abuja Creative City project, which seeks to transform the capital into a vibrant hub for the creative sector.
“This project is expected to foster economic growth, create job opportunities, and showcase Nigeria’s diverse cultural heritage.
The Minister also emphasized the importance of effective policy formulation to foster the growth of the creative sector. Currently, the Ministry is evaluating 49 sub-sectors within the creative industries, with priority given to key areas such as music, film, fashion, art, and gastronomy.
“This targeted approach is aimed at driving sustainable development and further enhancing Nigeria’s cultural and economic standing on the global stage.
“Through these initiatives, the Nigerian government is taking significant steps to harness the untapped potential of its creative industries, paving the way for a more dynamic and inclusive economy.
As part of this effort, the Ministry, in collaboration with the private sector and led by the Nigerian Economic Summit Group, is working on creating a clear policy framework not just for the creative economy but also for the art, culture, and tourism sectors.
The Nigerian government is working on a series of policy reforms National Intellectual Property Policy, which will soon be presented to the Federal Executive Council.
This policy aims to foster industry growth by securing intellectual property rights for creators. Additionally, the government is reviewing key policies such as the National Policy on Incentives for the Arts, Culture, and Creative Economy, which is designed to offer incentives and boost confidence among creative businesses.
Another important update is the review of the 2005 National Tourism Policy, intended to better support the tourism sector, which plays a crucial role in Nigeria’s cultural economy.
The government is updating the outdated 1988 National Policy on Culture and introducing a new Policy on Monetary and Credit Solutions to ensure financial support for creative businesses.
Alongside the Creative Economy Development Fund, these reforms aim to create a supportive environment for the sector to grow and position Nigeria as a major force in the global creative economy.
Musawa also announced the implementation of the Creative Economy Development Fund (CEDF), which aims to provide funding to creative businesses, drive innovation, and create jobs across multiple sectors.
Additionally, a global standard arena is under construction in Nigeria to host major music and cultural events, aligning with the country’s ambition to become Africa’s cultural hub.
Husk Power Energy Systems Nigeria Ltd (Husk Nigeria), a subsidiary of solar mini-grid operator Husk Power Systems Inc., has received a $5 million investment from The International Finance Corp. (IFC), a member of the World Bank Group, with the support of the Government of Canada.
L-r: Ethiopis Tafara, Regional Vice President for Africa, International Finance Corporation (IFC), and Olu Aruike, Country Director, Husk Power Systems, Nigeria during the signing of a $5m investment meant to expand access to reliable, renewable energy in Nigeria through IFC’s $250m DARES platform in Abidjan, Cote d’Ivoire
The financing will support the rollout of Husk’s portfolio of solar hybrid mini grids in Northern Nigeria, helping address one of the country’s most urgent development challenges: access to electricity.
It marks the first investment under the IFC Distributed Access through Renewable Energy Scale-up (DARES) Platform, a $200 million debt facility approved in November 2024 to catalyze private sector solutions across West and Central Africa.
The DARES Platform complements the World Bank-financed Nigeria DARES Project, a $750 million initiative launched in December 2023 and implemented by Nigeria’s Rural Electrification Agency.
Together, these efforts aim to provide over 17.5 million Nigerians with new or improved electricity access through decentralized renewable energy (DRE) systems.
IFC’s financing package will enable Husk to develop and operate up to 108 mini-grid sites, resulting in around 28,750 new electricity connections and delivering clean, affordable energy to around 115,000 people and businesses.
The total project cost is estimated at $25 million. IFC’s $5 million package includes a $2.5 million senior loan from its own account and a $2.5 million concessional subordinated loan from the Canada-IFC Renewable Energy Program for Africa.
The facility is structured as a revolving loan, allowing Husk to repay and redraw funds multiple times during the project’s implementation.
“The DARES Platform is an innovative approach to tackling one of Africa’s most pressing challenges—energy access. By partnering with Husk, a leading renewable energy developer globally, through the first project under the DARES Platform, we are not only addressing the immediate electricity needs of underserved communities in Nigeria but also laying the foundation for a scalable model that can be replicated across the continent,” said Ethiopis Tafara, regional vice president of Africa, IFC.
“This innovative debt facility is exactly what the minigrid industry needs to scale — blended, long-term and affordable capital,” said Manoj Sinha, Husk co-founder and CEO.
“Access to working capital is critical for sustained and rapid growth. Adding 108 new communities to our minigrid portfolio with IFC support is an important step toward our goal of deploying at least 250MW of decentralized renewable energy projects in Nigeria.” said Olu Aruike, Manager, Husk Nigeria.
FG Verifies 2m Households for Cash Transfer
NOTAP Urges South Eastern Entrepreneurs to Embrace Franchising as Business Model
SERAP Asks Ojulari, NNPC CEO to Account for Missing N500Bn or Face Legal Action
FG Launches Online Citizenship, Business Management Platform
MTN’s Digital Lending Arm Disburses $592m Loans in Q1
Telecom3 days ago₦800 Billion Infrastructure Plan Set to Boost MTN’s Network Quality Nationwide
News3 days agoCreative Economy Ministry Secures $300M Investments Commitment
E-Business3 days agoNITDA, CISCO Empower Youth with Digital Skills
E-Financial3 days agoFidelity Bank reclaims trillion-naira market cap as stock rises to ₦21
Telecom3 days agoAfrican Women Hit Hardest as Mobile Internet Gender Gap Persists
General News3 days agoNITDA DG says its Community IT Centres Should be a Catalyst of Change
Telecom3 days agoRemita’s Bold Leap: Nigeria’s Fintech Giant Expands Across Africa
E-Financial3 days agoKuda Co-founder Urges Young Developers to Build Tech with Purpose @NACOSS 2025