E-Business
Qbot Emerges Most Prevalent Malware in First Half of 2023, Mobile Trojan SpinOk Makes its Debut
Check Point® Software Technologies, a provider of cybersecurity solutions globally, has published its Global Threat Index for June 2023. Researchers found that the Trojan Qbot has been the most prevalent malware so far in 2023, ranking first in five out of the six months to date.
Meanwhile, mobile Trojan SpinOk made its way to the top of the malware list for the first time after being detected last month, and ransomware hit headlines following a zero-day vulnerability in file sharing software MOVEIt.
Qbot, which initially emerged in 2008 as a banking Trojan, has undergone consistent development, acquiring additional functionalities for the purpose of stealing passwords, emails, and credit card details.
It is commonly propagated through spam emails and employs various techniques such as anti-VM, anti-debugging, and anti-sandbox methods to impede analysis and avoid detection.
Presently, its primary role is to act as a loader for other malware and establish a presence within targeted organizations, serving as a stepping stone for ransomware group operators.
Meanwhile, researchers discovered a prolific mobile malware that has so far amassed 421 million downloads. Last month, for the first time, Trojanized Software Development Kit (SDK) SpinOk made its way to the top of the mobile malware families. Used by numerous popular apps for marketing purposes, this malicious software has infiltrated highly popular apps and games, some of which were available on the Google Play Store.
Capable of stealing sensitive information from devices and monitoring clipboard activities, SpinOk malware poses a serious threat to user privacy and security, underscoring the need for proactive measures to protect personal data and mobile devices. It also serves as a stark reminder of the devastating potential of software supply chain attacks.
Last month also saw the launch of a large-scale ransomware campaign that impacted organizations worldwide. In May 2023, Progress Software Corporation disclosed a vulnerability in MOVEit Transfer and MOVEit Cloud (CVE-2023-34362) that could allow unauthorized access to the environment.
Despite it being patched within 48 hours, cybercriminals associated with Russian-affiliated ransomware group Clop exploited the vulnerability and launched a supply chain attack against MOVEit users.
To date, 108 organizations – including seven US universities – have been listed publicly, following the incident, with hundreds and thousands of records obtained.
“The MOVEit exploit proves that 2023 is already becoming a significant year in ransomware. Prominent groups like Clop are not operating tactically to infect a single target, but instead, making their operations more efficient by exploiting software that is widely used in a corporate environment.
This approach means they can reach hundreds of victims in a single attack.” said Maya Horowitz, VP Research at Check Point Software. “This attack pattern emphasizes the importance for companies to implement a multi-layered cyber security strategy and to prioritize patching quickly when vulnerabilities are disclosed.”
CPR also revealed that “Web Servers Malicious URL Directory Traversal” was the most exploited vulnerability last month, impacting 51% of organizations globally, followed by “Apache Log4j Remote Code Execution” with 46% of organizations worldwide. “HTTP Headers Remote Code Execution” was the third most used vulnerability, with a global impact of 44%.
Top malware families
Globally, Qbot was the most prevalent malware last month with an impact of 7% worldwide organizations, followed by Formbook with a global impact of 4% and Emotet with a global impact of 3%.
In Nigeria, Qbot was the most prevalent malware last month with an impact of 19.72%, followed by Expiro with an impact of 15.49% and FormBook with an impact of 7.04%.
- Qbot – Qbot AKA Qakbot is a multipurpose malware that first appeared in 2008. It was designed to steal a user’s credentials, record keystrokes, steal cookies from browsers, spy on banking activities, and deploy additional malware. Often distributed via spam email, Qbot employs several anti-VM, anti-debugging, and anti-sandbox techniques to hinder analysis and evade detection.
- Expiro – Expiro is a polymorphic file infector first seen in 2010. It inserts its malicious code into executable files on the infected host. These files lead to new infections when they are run on other machines. Expiro steals user and system information from Windows, as well as FTP credentials.
- FormBook – FormBook is an Infostealer targeting the Windows OS and was first detected in 2016. It is marketed as Malware as a Service (MaaS) in underground hacking forums for its strong evasion techniques and relatively low price. FormBook harvests credentials from various web browsers, collects screenshots, monitors and logs keystrokes, and can download and execute files according to orders from its C&C.
Top Attacked Industries Globally
Last month, Communications remained in first place as the most exploited industry globally, followed by Utilities and Transportation.
- Communication
- Utilities
- Transportation
Top exploited vulnerabilities
Last month, “Web Servers Malicious URL Directory Traversal” was the most exploited vulnerability, impacting 51% of organizations globally, followed by “Apache Log4j Remote Code Execution” with 46% of organizations worldwide. “HTTP Headers Remote Code Execution” was the third most used vulnerability, with a global impact of 44%.
- ↔ Web Servers Malicious URL Directory Traversal – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
- ↔ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↔ HTTP Headers Remote Code Execution (CVE-2020-10826, CVE-2020-10827, CVE-2020-10828, CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
Top Mobile Malwares
Last month SpinOk rose to first place in the most prevalent Mobile malware, followed by Anubis and AhMyth.
- SpinOk – SpinOk is an Android software module that operates as spyware. It collects information about files stored on devices and is capable of transferring them to malicious threat actors. The malicious module was found present in more than 100 Android apps and downloaded more than 421,000,000 times until May 23.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera, which usually used to steal sensitive information.
Jumia Nigeria has reaffirmed its role as one of the leading forces driving the adoption of e-commerce in Nigeria, saying sustained investment in consumer trust, local logistics and digital infrastructure has helped expand online shopping while laying the foundation for Africa’s broader digital commerce ecosystem.
Speaking during a panel discussion at the AfCFTA Digital Trade Forum 2026, the Chief Executive Officer of Jumia Nigeria, Temidayo Ojo, said the company’s experience over the years shows that building consumer confidence remains the single most important factor in accelerating e-commerce adoption across the continent.
According to him, while millions of Nigerians have embraced online shopping, significant opportunities still exist to bring many more consumers into the digital marketplace through stronger consumer protection, seamless payment systems and supportive public policies.
Ojo noted that Jumia’s growth has mirrored the increasing acceptance of e-commerce in Nigeria, with the company consistently investing in technologies, logistics capabilities and customer experience initiatives that have made online shopping more accessible, convenient and reliable for consumers.
He explained that one of the biggest challenges facing digital commerce remains consumer trust, particularly among first-time online shoppers who are unable to physically inspect products before making purchases. To address this, Jumia has continuously strengthened its customer experience through reliable delivery, transparent order tracking, quality assurance and responsive dispute resolution processes that encourage repeat purchases and long-term confidence in online retail.
“Trust is the currency of digital commerce,” Ojo said, adding that stronger consumer protection frameworks across African markets would further accelerate the growth of the sector by giving consumers greater confidence whenever issues such as payment disputes, delayed deliveries or product quality concerns arise.
Beyond consumer confidence, Ojo identified fragmented payment systems as one of the major obstacles limiting intra-African digital trade. Despite significant innovation within Africa’s fintech ecosystem, varying regulations and limited interoperability continue to make cross-border transactions more complex than necessary.
He called for greater harmonisation of payment frameworks across the continent, noting that seamless digital payments would make it easier for businesses to scale beyond their domestic markets while allowing consumers to transact effortlessly across borders.
Ojo also emphasised the importance of stronger collaboration between governments and the private sector in creating an enabling environment for digital businesses. According to him, coordinated policies and regulatory certainty would accelerate investment, encourage innovation and strengthen confidence in Africa’s digital economy.
As one of Africa’s largest e-commerce platforms, Jumia sees regional integration as a significant growth opportunity. The company already connects tens of thousands of merchants with consumers across several African markets and believes improved cross-border trade policies would enable many more local businesses to reach new customers beyond their national boundaries.
Such integration, he said, has the potential to unlock access to a combined consumer market of more than 500 million people, creating new opportunities for African enterprises to trade with one another and strengthen the continent’s digital economy.
He added that while many first-time shoppers initially prefer cash-on-delivery because of perceived risks, their confidence in digital payments increases significantly after experiencing reliable service, quality products and efficient deliveries.
According to Ojo, Jumia’s journey reflects the broader evolution of e-commerce in Nigeria, one driven by sustained investments in trust, technology and local partnerships. He maintained that with stronger consumer protection, harmonised regulations and deeper collaboration between governments and the private sector, Africa is well positioned to unlock the next phase of digital commerce growth.
Africa’s leading technology distributor Powerhouse, TD Africa, has reaffirmed its commitment to advancing cybersecurity awareness and digital resilience by sponsoring the 3rd Annual Secure 360 Summit Nigeria 2026, hosted by global cybersecurity leader Check Point Software Technologies, as Gold Sponsor.
Chioma Chimere, Coordinating Managing Director, TD Africa
This year’s summit was held in Abuja and Lagos, bringing together key stakeholders from across Nigeria’s technology ecosystem.
Now in its third edition, the Secure 360 Summit has evolved into one of Nigeria’s premier cybersecurity forums, bringing together Chief Information Security Officers (CISOs), Chief Information Officers (CIOs), IT Directors, and senior technology leaders from the financial services, telecommunications, enterprise, energy, and public sectors to address today’s rapidly evolving cyber threat landscape.
Speaking on the significance of the summit, Kingsley Oseghale, Country Manager, Check Point Nigeria, emphasized the need for stronger collaboration in tackling emerging cyber risks. “Cybersecurity has become a business priority rather than just an IT concern.
“Through the Secure 360 Summit, we continue to provide a platform for industry leaders to exchange insights, strengthen partnerships, and explore innovative approaches to securing today’s digital economy.
“We are pleased to have TD Africa as a valued partner in driving cybersecurity awareness across Nigeria.”
In her remarks, Chioma Chimere, Coordinating Managing Director, TD Africa, applauded Check Point for creating a platform that addresses one of the most critical challenges facing businesses and individuals. “Cybersecurity is everyone’s business. We owe it to ourselves, our organisations, and our communities to remain security-conscious in an increasingly connected world.
“At TD Africa, innovation drives everything we do, and innovation can only thrive in a secure environment.
“This is why we are proud to support initiatives like the Secure 360 Summit that promote knowledge sharing and strengthen our collective cyber resilience.”
The summit featured expert-led sessions on emerging cyber threats, artificial intelligence, cloud security, ransomware, and strategies for building resilient digital infrastructures, equipping participants with practical insights to navigate today’s cybersecurity landscape.
Through its continued partnership with global technology leaders like Check Point, TD Africa remains committed to empowering businesses across Africa with world-class cybersecurity solutions, fostering industry collaboration, and driving the continent’s secure digital transformation.
President Bola Tinubu has directed the National Identity Management Commission (NIMC) to ensure that every Nigerian is enrolled in the national identity database before the end of 2026, according to Abisoye Coker-Odusote, director general and chief executive officer of the agency.
Abisoye Coker-Odusote, director general and chief executive officer, NIMC
Coker-Odusote, who appeared on Channels Television, said the directive forms part of the federal government’s efforts to establish a comprehensive national identity system capable of supporting effective governance, planning, and service delivery.
“The President has given us till the end of this year to make sure that we capture every single Nigerian,” she said.
According to her, NIMC is working with partners under the World Bank-supported Identification for Development (ID4D) project to accelerate nationwide enrolment.
“What we have done is we have partnered through the World Bank ID4D project with front-end partners. They are part of the digital identity ecosystem. These are private citizens that we’ve enabled and given jobs to enrol citizens on our behalf,” she explained.
She stressed that the National Identification Number (NIN) remains a unique identifier, ensuring that every individual is registered only once.
“That’s why it’s called a unique identifier, so that you’re only enrolled once,” the NIMC DG added.
Coker-Odusote said Nigeria’s actual population remains uncertain, with estimates ranging from 200 million to 250 million, making a comprehensive identity database essential for national planning.
“It is estimated that we’re 200 million. When we’re done enrolling, we will then know the actual numbers that we have. Some estimates say 230 million, while a few people say 250 million.
“Your identity is basically the foundation for effective governance and service delivery. How can you plan if you don’t know the total number of persons that you have? We have been mandated by Mr President to go down to the community levels to enrol every single Nigerian”, she said.
Responding to concerns about whether an individual could obtain multiple identities by registering in different locations or under different names, the NIMC boss said the commission’s biometric verification system prevents such occurrences.
She explained that while the previous system could accept duplicate enrolments before detecting them later, the current process automatically identifies and invalidates multiple registrations.
“The legacy system had no way of verifying at the front end whether you had already been captured. Once the record comes into the system, it flags it as a duplicate or that the person already exists in the database.
“You would only have one identity generated for you. The other record goes into a deduplication bucket where it is invalidated,” she said.
The NIMC DG added that biometric verification, including fingerprints and facial recognition, makes it virtually impossible for one person to maintain multiple identities.
“Absolutely. One of the things that this Act has done is to cement our role in capturing biometrics. Private and public sector organisations will no longer capture biometrics independently. They will validate identities through API integration with NIMC.
“The telcos are already doing that with us. If you need a SIM card, they capture your facial biometrics, which are matched against our database in real time to confirm that you are who you claim to be. We’re using biometric validation to tighten security around identity confirmation,” she said.
The remarks come weeks after Tinubu signed the National Identity Management Commission (NIMC) Act 2026 into law on June 26, repealing the 2007 legislation.
The new law reinforces the “One Person, One Identity” policy by making the NIN the country’s foundational identity credential for accessing government and essential private services, including banking, passport applications, tax administration, pensions, land transactions, and consumer credit.
It also introduces stiffer penalties for identity theft, multiple registrations and unauthorised access to personal identity data, while strengthening data privacy protections and granting NIMC wider powers to investigate identity-related offences.
NBC Scraps Annual Digital Access Fee on DSO
Surge in Fibre Cuts Hobbles Service Provisioning
Why Bandits, Kidnappers are Hard to Trace despite NIN-SIM Linkage – FG
First Securities Brokers Empowers Nigerians to Trade in the Stock Market with the Launch of FirstInvest App
Quest Merchant Bank Hosts Great Place to Work® Nigeria Study Mission
NRC, Ponzi Scheme Collapses Resulting Loss of Billions of Naira
Nigeria Launches FreeTV Nationwide
NASENI Moves to Digitize CCB’s 5m Assets Declaration and Operations
Lebara Nigeria Launches Lebara Play, Africa’s First Telecom-Owned Micro-Drama Platform
CANAL+ Partners Samsung to Pre-Load DStv Stream on New Samsung TVs In Nigeria, Other African Countries
Telecom2 days agoMTN Nigeria Slashes Cost of Broadband Internet Router, Unwraps New Data Bundles for Low-Budget Users
E-Financial2 days agoNigerians Accumulate $59Bn in Cryptocurrency Assets —FDC
E-Financial2 days agoFlutterwave Partners Xoom on Transfers into Nigeria
General News2 days agoNearpays, Nigerian Fintech Becomes First African Startup to Win UN’s AI for Good Innovation Factory
News2 days agoDataPro Upgrades Dangote Cement’s Credit Rating to AA+
Telecom2 days agoNokia’s 14 Years of Mobile-Phone Supremacy Ended in an Afternoon
E-Business2 days agoTinubu Orders NIMC to Enrol Every Nigerian by End of this Year – DG
General News2 days agoFintech Brands Should Communicate Right in a VUCA Economy