E-Business
Qbot, April 2023’s Most Wanted Malware Launches Substantial Malspam Campaign
Check Point® Software Technologies, a leading provider of cybersecurity solutions globally, has published its Global Threat Index for April 2023.
Last month, researchers uncovered a substantial Qbot malspam campaign distributed through malicious PDF files attached to emails seen in multiple languages. Meanwhile, Internet-of-Things (IoT) malware Mirai made the list for the first time in a year after exploiting a new vulnerability in TP-Link routers, and Healthcare moved up to become the second most exploited industry.
The Qbot campaign seen last month involves a new delivery method in which targets are sent an email with an attachment that contains protected PDF files. Once these are downloaded, the Qbot malware is installed on the device. Researchers found instances of the malspam being sent in multiple different languages, which means organizations can be targeted worldwide.
Last month also saw the return of Mirai, one of the most popular IoT malwares. Researchers discovered it was exploiting a new zero-day vulnerability CVE-2023-1380 to attack TP-Link routers and add them to its botnet, which has been used to facilitate some of the most disruptive distributed DDoS attacks on record. This latest campaign follows an extensive report published by Check Point Research (CPR) on the prevalence of IOT attacks.
There was also a change in impacted industries, with healthcare overtaking government as the second most exploited sector in April. Attacks on healthcare institutions have been well documented and some countries continue to face constant assaults.
For example, cybercriminal group Medusa recently launched attacks on cancer facilities in Australia. The industry remains a lucrative target for hackers as it gives them potential access to confidential patient data and payment information. It could have implications for pharmaceutical companies as it could lead to leaks regarding clinical trials or new medical drugs and devices.
“Cybercriminals are constantly working on new methods to bypass restrictions and these campaigns are further proof of how malware adapts to survive. With Qbot on the offensive again, it acts as another reminder of the importance of having comprehensive cybersecurity in place, and due diligence when it comes to trusting the origins and intent of an email.” said Maya Horowitz, VP Research at Check Point Software.
CPR also revealed that “Web Servers Malicious URL Directory Traversal” was the most exploited vulnerability, impacting 48% of organizations globally, followed by “Apache Log4j Remote Code Execution” with 44% and “HTTP Headers Remote Code Execution” with a global impact of 43%.
Top malware families
Globally, AgentTesla was the most prevalent malware last month with an impact of more than 10% on worldwide organisations respectively, followed by Qbot and Formbook with a 4% global impact.
In Nigeria, Qbot was the most prevalent malware last month with an impact of 20% on organisations, followed by Expiro with 10.67% and Formbook with an 8% impact.
- Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials and keystrokes. Often distributed via spam email, Qbot employs several anti-VM, anti-debugging, and anti-sandbox techniques to hinder analysis and evade detection.
- Expiro – Expiro is a polymorphic file infector first seen in 2010. It inserts its malicious code into executable files on the infected host. These files lead to new infections when they are run on other machines. Expiro steals user and system information from Windows, as well as FTP credentials.
- Formbook – Formbook is an Infostealer targeting the Windows OS and was first detected in 2016. It is marketed as Malware as a Service (MaaS) in underground hacking forums for its strong evasion techniques and relatively low price. FormBook harvests credentials from various web browsers, collects screenshots, monitors and logs keystrokes, and can download and execute files according to orders from its C&C.
Top Attacked Industries in Africa
Last month, Consultant was most attacked industry, followed by Manufacturing and Retail/Wholesale.
- Consultant
- Manufacturing
- Retail/Wholesale
Top exploited vulnerabilities
Last month, “Web Servers Malicious URL Directory Traversal” was the most exploited vulnerability, impacting 48% of organizations globally, followed by “Apache Log4j Remote Code Execution” with 44% and “HTTP Headers Remote Code Execution” with a global impact of 43%.
- ↑ Web Servers Malicious URL Directory Traversal – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
- ↓ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↓ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
Top Mobile Malwares
Last month, Ahmyth moved to the top spot as the most prevalent mobile malware, followed by Anubis and Hiddad.
- AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.
Jumia Nigeria has reaffirmed its role as one of the leading forces driving the adoption of e-commerce in Nigeria, saying sustained investment in consumer trust, local logistics and digital infrastructure has helped expand online shopping while laying the foundation for Africa’s broader digital commerce ecosystem.
Speaking during a panel discussion at the AfCFTA Digital Trade Forum 2026, the Chief Executive Officer of Jumia Nigeria, Temidayo Ojo, said the company’s experience over the years shows that building consumer confidence remains the single most important factor in accelerating e-commerce adoption across the continent.
According to him, while millions of Nigerians have embraced online shopping, significant opportunities still exist to bring many more consumers into the digital marketplace through stronger consumer protection, seamless payment systems and supportive public policies.
Ojo noted that Jumia’s growth has mirrored the increasing acceptance of e-commerce in Nigeria, with the company consistently investing in technologies, logistics capabilities and customer experience initiatives that have made online shopping more accessible, convenient and reliable for consumers.
He explained that one of the biggest challenges facing digital commerce remains consumer trust, particularly among first-time online shoppers who are unable to physically inspect products before making purchases. To address this, Jumia has continuously strengthened its customer experience through reliable delivery, transparent order tracking, quality assurance and responsive dispute resolution processes that encourage repeat purchases and long-term confidence in online retail.
“Trust is the currency of digital commerce,” Ojo said, adding that stronger consumer protection frameworks across African markets would further accelerate the growth of the sector by giving consumers greater confidence whenever issues such as payment disputes, delayed deliveries or product quality concerns arise.
Beyond consumer confidence, Ojo identified fragmented payment systems as one of the major obstacles limiting intra-African digital trade. Despite significant innovation within Africa’s fintech ecosystem, varying regulations and limited interoperability continue to make cross-border transactions more complex than necessary.
He called for greater harmonisation of payment frameworks across the continent, noting that seamless digital payments would make it easier for businesses to scale beyond their domestic markets while allowing consumers to transact effortlessly across borders.
Ojo also emphasised the importance of stronger collaboration between governments and the private sector in creating an enabling environment for digital businesses. According to him, coordinated policies and regulatory certainty would accelerate investment, encourage innovation and strengthen confidence in Africa’s digital economy.
As one of Africa’s largest e-commerce platforms, Jumia sees regional integration as a significant growth opportunity. The company already connects tens of thousands of merchants with consumers across several African markets and believes improved cross-border trade policies would enable many more local businesses to reach new customers beyond their national boundaries.
Such integration, he said, has the potential to unlock access to a combined consumer market of more than 500 million people, creating new opportunities for African enterprises to trade with one another and strengthen the continent’s digital economy.
He added that while many first-time shoppers initially prefer cash-on-delivery because of perceived risks, their confidence in digital payments increases significantly after experiencing reliable service, quality products and efficient deliveries.
According to Ojo, Jumia’s journey reflects the broader evolution of e-commerce in Nigeria, one driven by sustained investments in trust, technology and local partnerships. He maintained that with stronger consumer protection, harmonised regulations and deeper collaboration between governments and the private sector, Africa is well positioned to unlock the next phase of digital commerce growth.
Africa’s leading technology distributor Powerhouse, TD Africa, has reaffirmed its commitment to advancing cybersecurity awareness and digital resilience by sponsoring the 3rd Annual Secure 360 Summit Nigeria 2026, hosted by global cybersecurity leader Check Point Software Technologies, as Gold Sponsor.
Chioma Chimere, Coordinating Managing Director, TD Africa
This year’s summit was held in Abuja and Lagos, bringing together key stakeholders from across Nigeria’s technology ecosystem.
Now in its third edition, the Secure 360 Summit has evolved into one of Nigeria’s premier cybersecurity forums, bringing together Chief Information Security Officers (CISOs), Chief Information Officers (CIOs), IT Directors, and senior technology leaders from the financial services, telecommunications, enterprise, energy, and public sectors to address today’s rapidly evolving cyber threat landscape.
Speaking on the significance of the summit, Kingsley Oseghale, Country Manager, Check Point Nigeria, emphasized the need for stronger collaboration in tackling emerging cyber risks. “Cybersecurity has become a business priority rather than just an IT concern.
“Through the Secure 360 Summit, we continue to provide a platform for industry leaders to exchange insights, strengthen partnerships, and explore innovative approaches to securing today’s digital economy.
“We are pleased to have TD Africa as a valued partner in driving cybersecurity awareness across Nigeria.”
In her remarks, Chioma Chimere, Coordinating Managing Director, TD Africa, applauded Check Point for creating a platform that addresses one of the most critical challenges facing businesses and individuals. “Cybersecurity is everyone’s business. We owe it to ourselves, our organisations, and our communities to remain security-conscious in an increasingly connected world.
“At TD Africa, innovation drives everything we do, and innovation can only thrive in a secure environment.
“This is why we are proud to support initiatives like the Secure 360 Summit that promote knowledge sharing and strengthen our collective cyber resilience.”
The summit featured expert-led sessions on emerging cyber threats, artificial intelligence, cloud security, ransomware, and strategies for building resilient digital infrastructures, equipping participants with practical insights to navigate today’s cybersecurity landscape.
Through its continued partnership with global technology leaders like Check Point, TD Africa remains committed to empowering businesses across Africa with world-class cybersecurity solutions, fostering industry collaboration, and driving the continent’s secure digital transformation.
President Bola Tinubu has directed the National Identity Management Commission (NIMC) to ensure that every Nigerian is enrolled in the national identity database before the end of 2026, according to Abisoye Coker-Odusote, director general and chief executive officer of the agency.
Abisoye Coker-Odusote, director general and chief executive officer, NIMC
Coker-Odusote, who appeared on Channels Television, said the directive forms part of the federal government’s efforts to establish a comprehensive national identity system capable of supporting effective governance, planning, and service delivery.
“The President has given us till the end of this year to make sure that we capture every single Nigerian,” she said.
According to her, NIMC is working with partners under the World Bank-supported Identification for Development (ID4D) project to accelerate nationwide enrolment.
“What we have done is we have partnered through the World Bank ID4D project with front-end partners. They are part of the digital identity ecosystem. These are private citizens that we’ve enabled and given jobs to enrol citizens on our behalf,” she explained.
She stressed that the National Identification Number (NIN) remains a unique identifier, ensuring that every individual is registered only once.
“That’s why it’s called a unique identifier, so that you’re only enrolled once,” the NIMC DG added.
Coker-Odusote said Nigeria’s actual population remains uncertain, with estimates ranging from 200 million to 250 million, making a comprehensive identity database essential for national planning.
“It is estimated that we’re 200 million. When we’re done enrolling, we will then know the actual numbers that we have. Some estimates say 230 million, while a few people say 250 million.
“Your identity is basically the foundation for effective governance and service delivery. How can you plan if you don’t know the total number of persons that you have? We have been mandated by Mr President to go down to the community levels to enrol every single Nigerian”, she said.
Responding to concerns about whether an individual could obtain multiple identities by registering in different locations or under different names, the NIMC boss said the commission’s biometric verification system prevents such occurrences.
She explained that while the previous system could accept duplicate enrolments before detecting them later, the current process automatically identifies and invalidates multiple registrations.
“The legacy system had no way of verifying at the front end whether you had already been captured. Once the record comes into the system, it flags it as a duplicate or that the person already exists in the database.
“You would only have one identity generated for you. The other record goes into a deduplication bucket where it is invalidated,” she said.
The NIMC DG added that biometric verification, including fingerprints and facial recognition, makes it virtually impossible for one person to maintain multiple identities.
“Absolutely. One of the things that this Act has done is to cement our role in capturing biometrics. Private and public sector organisations will no longer capture biometrics independently. They will validate identities through API integration with NIMC.
“The telcos are already doing that with us. If you need a SIM card, they capture your facial biometrics, which are matched against our database in real time to confirm that you are who you claim to be. We’re using biometric validation to tighten security around identity confirmation,” she said.
The remarks come weeks after Tinubu signed the National Identity Management Commission (NIMC) Act 2026 into law on June 26, repealing the 2007 legislation.
The new law reinforces the “One Person, One Identity” policy by making the NIN the country’s foundational identity credential for accessing government and essential private services, including banking, passport applications, tax administration, pensions, land transactions, and consumer credit.
It also introduces stiffer penalties for identity theft, multiple registrations and unauthorised access to personal identity data, while strengthening data privacy protections and granting NIMC wider powers to investigate identity-related offences.
NBC Scraps Annual Digital Access Fee on DSO
Surge in Fibre Cuts Hobbles Service Provisioning
Why Bandits, Kidnappers are Hard to Trace despite NIN-SIM Linkage – FG
First Securities Brokers Empowers Nigerians to Trade in the Stock Market with the Launch of FirstInvest App
Quest Merchant Bank Hosts Great Place to Work® Nigeria Study Mission
NRC, Ponzi Scheme Collapses Resulting Loss of Billions of Naira
Nigeria Launches FreeTV Nationwide
NASENI Moves to Digitize CCB’s 5m Assets Declaration and Operations
Lebara Nigeria Launches Lebara Play, Africa’s First Telecom-Owned Micro-Drama Platform
CANAL+ Partners Samsung to Pre-Load DStv Stream on New Samsung TVs In Nigeria, Other African Countries
Telecom2 days agoMTN Nigeria Slashes Cost of Broadband Internet Router, Unwraps New Data Bundles for Low-Budget Users
E-Financial2 days agoNigerians Accumulate $59Bn in Cryptocurrency Assets —FDC
General News2 days agoNearpays, Nigerian Fintech Becomes First African Startup to Win UN’s AI for Good Innovation Factory
E-Financial2 days agoFlutterwave Partners Xoom on Transfers into Nigeria
News2 days agoDataPro Upgrades Dangote Cement’s Credit Rating to AA+
Telecom2 days agoNokia’s 14 Years of Mobile-Phone Supremacy Ended in an Afternoon
General News2 days agoLASG Signs PPP Concession Agreements to Advance Digital Services, Others
General News2 days agoFintech Brands Should Communicate Right in a VUCA Economy