News
Stolen Credentials Selling on Dark Web for Price of 3 Litres of Fuel – Report
HP has released The Evolution of Cybercrime: Why the Dark Web is Supercharging the Threat Landscape and How to Fight Back – an HP Wolf Security Report.
The findings show cybercrime is being supercharged through “plug and play” malware kits that make it easier than ever to launch attacks. Cyber syndicates are collaborating with amateur attackers to target businesses, putting our online world at risk.
The HP Wolf Security threat team worked with Forensic Pathways, a leading group of global forensic professionals, on a three-month dark web investigation, scraping and analysing over 35 million cybercriminal marketplaces and forum posts to understand how cybercriminals operate, gain trust, and build reputation.
Key findings include:
– Malware is cheap and readily available – Over three quarters (76%) of malware advertisements listed, and 91% of exploits (i.e., code that gives attackers control over systems by taking advantage of software bugs), retail for under ₦4,923.17. The average cost of compromised Remote Desktop Protocol credentials is just ₦2,092.35.
Vendors are selling products in bundles, with plug-and-play malware kits, malware-as-a-service, tutorials, and mentoring services reducing the need for technical skills and experience to conduct complex, targeted attacks – in fact, just 2-3% of threat actors today are advanced coders.
-The irony of ‘honor amongst cyber-thieves’ – Much like the legitimate online retail world, trust and reputation are ironically essential parts of cybercriminal commerce: 77% of cybercriminal marketplaces analysed require a vendor bond – a license to sell – which can cost up to ₦1,230,793.
Eighty-five per cent of these use escrow payments, and 92% have a third-party dispute resolution service. Every marketplace provides vendor feedback scores. Cybercriminals also try to stay a step ahead of law enforcement by transferring reputation between websites – as the average lifespan of a dark net Tor website is only 55 days.
– Popular software is giving cybercriminals a foot in the door – Cybercriminals are focusing on finding gaps in software that will allow them to get a foothold and take control of systems by targeting known bugs and vulnerabilities in popular software.
Examples include the Windows operating system, Microsoft Office, web content management systems, and web and mail servers. Kits that exploit vulnerabilities in niche systems command the highest prices (typically ranging from ₦393,853.76 – ₦1,723,110.20). Zero Days (vulnerabilities that are not yet publicly known) are retailing at tens of thousands of dollars on dark web markets.
“Unfortunately, it’s never been easier to be a cybercriminal. Complex attacks previously required serious skills, knowledge and resource. Now the technology and training is available for the price of 3 litres of fuel.
“And whether it’s having your company and customer data exposed, deliveries delayed or even a hospital appointment cancelled, the explosion in cybercrime affects us all,” comments report author Alex Holland, Senior Malware Analyst at HP Inc.
“At the heart of this is ransomware, which has created a new cybercriminal ecosystem rewarding smaller players with a slice of the profits.
“This is creating a cybercrime factory line, churning out attacks that can be very hard to defend against and putting the businesses we all rely on in the crosshairs,” Holland adds.
HP consulted with a panel of experts from cybersecurity and academia – including ex-black hat hacker Michael ‘Mafia Boy’ Calce and authored criminologist, Dr. Mike McGuire – to understand how cybercrime has evolved and what businesses can do to better protect themselves against the threats of today and tomorrow.
They warned that businesses should prepare for destructive data denial attacks, increasingly targeted cyber campaigns, and cybercriminals using emerging technologies like artificial intelligence to challenge organisations’ data integrity.
To protect against current and future threats, the report offers up the following advice for businesses:
Master the basics to reduce cybercriminals’ chances: Follow best practices, such as multi-factor authentication and patch management; reduce your attack surface from top attack vectors like email, web browsing and file downloads; and prioritise self-healing hardware to boost resilience.
Focus on winning the game: plan for the worst; limit risk posed by your people and partners by putting processes in place to vet supplier security and educate workforces on social engineering; and be process-oriented and rehearse responses to attacks so you can identify problems, make improvements and be better prepared.
Cybercrime is a team sport. Cybersecurity must be too: talk to your peers to share threat information and intelligence in real-time; use threat intelligence and be proactive in horizon scanning by monitoring open discussions on underground forums; and work with third-party security services to uncover weak spots and critical risks that need addressing.
“We all need to do more to fight the growing cybercrime machine,” says Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc. “For individuals, this means becoming cyber aware.
Most attacks start with a click of a mouse, so thinking before you click is always important. But giving yourself a safety net by buying technology that can mitigate and recover from the impact of bad clicks is even better.”
“For businesses, it’s important to build resiliency and shut off as many common attack routes as possible,” Pratt continues.
“For example, cybercriminals study patches on release to reverse engineer the vulnerability being patched and can rapidly create exploits to use before organisations have patched. So, speeding up patch management is important.
“Many of the most common categories of threat such as those delivered via email and the web can be fully neutralised through techniques such as threat containment and isolation, greatly reducing an organisation’s attack surface regardless of whether the vulnerabilities are patched or not.”
In a striking moment of global recognition for African talent in artificial intelligence, Shenzhen-based Nigerian technologist, Francis Okafor has emerged as the second-place winner at the 2026 Tencent OpenClaw Hackathon, a fiercely contested competition hosted by Chinese tech giant Tencent.
The achievement places the Nigerian engineer among the top innovators in one of the world’s most competitive technology hubs, Shenzhen, often described as China’s Silicon Valley.
Okafor’s journey to the podium was anything but scripted. Walking into Tencent’s facility on the day of the contest, he found a room already buzzing with elite programmers deep in preparation.
“Laptops open. Heads down. Some people setting up their system before the challenges even dropped,” he recalled, contrasting the scene with his own uncertainty at that moment. “And then there is me — a Nigerian looking around like, okay Francis, what exactly are you doing here?”
Rather than confidence, his first reaction was raw nerves. “I won’t lie, I had goose bumps. Not the inspirational kind,” he admitted, describing a quiet internal debate about whether he had wandered into territory far beyond his league. Yet that hesitation quickly gave way to experimentation, a hallmark of the hackathon spirit.
Earlier that same week, Tencent had rolled out OpenClaw integration into WeChat (known domestically as Weixin), exposing its massive user base to AI agent capabilities.
Okafor, a senior technology lead, artificial intelligence advocate, and global community organiser, had already been stress-testing the system and decided, on the spot, to build his entry around it. “I had been pushing it hard all week just to see what it could do… so when the challenges dropped I thought, you know what, let me use this thing as my weapon.”
That decision proved decisive. Competing against some of the most accomplished engineers in China’s hyper-competitive tech ecosystem, Okafor’s solution stood out for both ingenuity and execution. “It went far enough apparently,” he said with understated pride after securing second place.
Remarkably, he had entered without a grand plan. “I didn’t go in with a strategy. I went in for the thrill of it… Honestly I thought I would learn a few things and go home with a good story.” Instead, he left with a trophy, and a narrative that has resonated far beyond the competition hall.
Beyond personal triumph, Okafor emphasized the broader technological significance of the moment. Tencent released the WeChat OpenClaw plugin on the very morning of the event, effectively putting advanced AI agent tools into the hands of an estimated 1.4 billion users.
In his view, this signals a profound shift in how artificial intelligence will reach the public. The company, he observed, is “not just making AI accessible to developers… they are bridging it to everyone,” while using hackathons to identify innovators capable of pushing the technology forward, regardless of origin.
Okafor was acutely aware of his uniqueness in the room. “I was definitely the only African there and for sure stood out,” he noted. Yet what mattered was not nationality but capability. “Nobody cared about where I was from. They cared about what I built.”
His message to aspiring technologists, particularly those from underrepresented regions, is both simple and powerful: show up. “Enter things you think you have no business entering,” he urged. “The worst case is you learn something. The best case is you shock yourself.”
In an industry often defined by geography, capital, and institutional advantage, Okafor’s victory offers a compelling counter-narrative. Talent, preparation, and courage can still disrupt expectations, even in rooms that seem designed for someone else.
As he concluded in a line that has since captured widespread attention: Black excellence, he said, “doesn’t need a geography.”
Economic and Financial Crimes Commission (EFCC) has urged the Central Bank of Nigeria (CBN) to deepen collaboration and provide faster operational support in Enugu State.
Zonal Director of the EFCC Enugu Zonal Directorate, Commander Daniel Isei, made the call during a courtesy visit to the CBN Branch Controller in Enugu, Mr Otutubuike Justice Agbaeze, on Tuesday.
The engagement forms part of ongoing efforts to boost inter-agency ties, enhance financial sector accountability, and fortify anti-money laundering initiatives nationwide.
Isei described the CBN as “our most critical partner in the fight against economic and financial crimes,” highlighting years of joint operations and the bank’s role in securing recovered assets.
“The CBN naturally stands out as one of our most critical partners… it serves as a secure repository for valuables recovered by the EFCC and it has greatly enhanced our operations,” he stated.
While commending past cooperation, Isei appealed for quicker responses to the EFCC’s frequent investigative requests from its Enugu office.
“We understand that these requests may be demanding, but timely responses are crucial, as time is of the essence in financial investigations. We therefore seek your continued indulgence in ensuring that our letters receive expeditious attention,” he added.
In response, Agbaeze reaffirmed CBN’s dedication to the partnership, pledging expert support and improved synergy “in the interest of financial system stability and national development.”
As smart devices with artificial intelligence (AI) tools, and always-on services become part of everyday life, the cybersecurity habits many people formed a few years ago may no longer be enough.
From AI-powered scams to social media trends that encourage users to upload personal details, the way people interact online is changing quickly. Ensuring that you stay secure now requires small, deliberate actions in your daily digital behaviour. Experts from Kaspersky, a global cybersecurity and digital privacy company, share the below advice to stay safe online.
- Be cautious with verification requests. Many scams now mimic legitimate verification processes, asking users to confirm accounts, update payment details, or approve login attempts. Because people are used to frequent security prompts, it is easy to respond automatically. Pause before sharing verification codes or personal information and independently verify requests through official websites or by contacting service providers directly.
- Cultivate healthy AI usage habits. AI agents, chatbots and multimedia-generating apps can be convenient and entertaining, but uploading high-resolution photos or personal information carries privacy implications. Facial images can function as biometric identifiers, and once shared with an online service, be it AI or a social network, control over how that data is stored or reused may be limited. Before using AI tools, review privacy policies, minimise the personal information they provide, and avoid uploading sensitive documents or confidential content.
- Do your homework on AI. For parents, the rise of AI assistants introduces another dimension. While AI tools can help in making education interactive and gamified, children may turn to AI tools for homework support or entertainment without fully understanding how their data is used or how to evaluate responses critically.
Open conversations about responsible AI use, privacy awareness, and the importance of not oversharing personal information can help children build safe digital habits from an early age.
- Audit your online subscriptions. Reducing digital exposure is another simple but often overlooked step. Over time, unused subscriptions, dormant accounts, and forgotten apps accumulate personal data and payment details. Regularly reviewing subscriptions, deleting unused accounts, and checking which apps have access to personal information can significantly reduce risks of this data being leaked.
- Secure your devices and home. Device longevity and smart home security also play an important role. Older devices that no longer receive security updates may contain unpatched vulnerabilities.
Ensure that smartphones, laptops, routers, and smart home devices are running the latest firmware and are protected with strong passwords and multi-factor authentication. Changing default passwords on connected devices and securing home Wi-Fi networks are essential steps in protecting both personal data and physical spaces.
As technology and AI becomes more integrated into daily life, security is less about dramatic measures and more about consistent, informed habits.
“Technology evolves quickly, and our online behaviour should keep pace,” says Brandon Muller, Technical Expert for the Middle East and Africa region at Kaspersky. “Take time to review privacy settings, app permissions, and connected third-party services, removing anything that is no longer needed. By being more deliberate about what we share, how we verify requests, and how we manage our devices, we can significantly reduce exposure to modern cyber risks while enjoying all the benefits of new technologies.”
Anti Graft Agencies Raise Alarm over Rising Crypto-Linked Financial Crimes
NITDA Takes Over National Digital Architecture System
NDIC Insures 99 Percent of Bank Customers
FG Shifting Focus to “Meaningful Connectivity” to Drive Inclusion – Minister
CBN Bars Chronic Loan Defaulters from Accessing Loans
Spotify’s Loud & Clear Report Reveals Over ₦60Bn Revenue for Nigerian Artists in 2025
Madonna University Taps Tech Guru Adote for Strategic Board Role
China Threatens to Shut Nigeria’s Satellite Over $11.44m Unpaid Debt
MTN Nigeria Posts Record N1.70 Trillion Pre‑Tax Profit, Declares N20 Dividend for 2025
Jumia Tech Week 2026 Begins with Tech Deals on Smartphones, Electronics, and Everyday Technology
General News2 days agoNCC to Curb SIM Fraud, Strengthen Digital Security with New Platform
General News2 days agoKidnappers Now Use Banks to Collect Ransoms — Expert
Broadcasting2 days agoNBC Boss Urges Content Ceators to Participate in DSO
E-Financial2 days agoCBN Says Bank Customers Won’t Lose Deposits because of Recapitalisation
E-Business2 days agoJury Finds Meta, Google Liable for Woman’s Social Media Addiction
News2 days agoFrancis Okafor Stuns China, Emerges Second-Place Winner @ Tencent OpenClaw Hackathon
E-Financial1 day agoBreaking…..Kuda Lays Off Many Employees in Broad Restructuring
Telecom2 days agoIFC Invests $45m to Green African Telecom Sites