News
Stolen Credentials Selling on Dark Web for Price of 3 Litres of Fuel – Report
HP has released The Evolution of Cybercrime: Why the Dark Web is Supercharging the Threat Landscape and How to Fight Back – an HP Wolf Security Report.
The findings show cybercrime is being supercharged through “plug and play” malware kits that make it easier than ever to launch attacks. Cyber syndicates are collaborating with amateur attackers to target businesses, putting our online world at risk.
The HP Wolf Security threat team worked with Forensic Pathways, a leading group of global forensic professionals, on a three-month dark web investigation, scraping and analysing over 35 million cybercriminal marketplaces and forum posts to understand how cybercriminals operate, gain trust, and build reputation.
Key findings include:
– Malware is cheap and readily available – Over three quarters (76%) of malware advertisements listed, and 91% of exploits (i.e., code that gives attackers control over systems by taking advantage of software bugs), retail for under ₦4,923.17. The average cost of compromised Remote Desktop Protocol credentials is just ₦2,092.35.
Vendors are selling products in bundles, with plug-and-play malware kits, malware-as-a-service, tutorials, and mentoring services reducing the need for technical skills and experience to conduct complex, targeted attacks – in fact, just 2-3% of threat actors today are advanced coders.
-The irony of ‘honor amongst cyber-thieves’ – Much like the legitimate online retail world, trust and reputation are ironically essential parts of cybercriminal commerce: 77% of cybercriminal marketplaces analysed require a vendor bond – a license to sell – which can cost up to ₦1,230,793.
Eighty-five per cent of these use escrow payments, and 92% have a third-party dispute resolution service. Every marketplace provides vendor feedback scores. Cybercriminals also try to stay a step ahead of law enforcement by transferring reputation between websites – as the average lifespan of a dark net Tor website is only 55 days.
– Popular software is giving cybercriminals a foot in the door – Cybercriminals are focusing on finding gaps in software that will allow them to get a foothold and take control of systems by targeting known bugs and vulnerabilities in popular software.
Examples include the Windows operating system, Microsoft Office, web content management systems, and web and mail servers. Kits that exploit vulnerabilities in niche systems command the highest prices (typically ranging from ₦393,853.76 – ₦1,723,110.20). Zero Days (vulnerabilities that are not yet publicly known) are retailing at tens of thousands of dollars on dark web markets.
“Unfortunately, it’s never been easier to be a cybercriminal. Complex attacks previously required serious skills, knowledge and resource. Now the technology and training is available for the price of 3 litres of fuel.
“And whether it’s having your company and customer data exposed, deliveries delayed or even a hospital appointment cancelled, the explosion in cybercrime affects us all,” comments report author Alex Holland, Senior Malware Analyst at HP Inc.
“At the heart of this is ransomware, which has created a new cybercriminal ecosystem rewarding smaller players with a slice of the profits.
“This is creating a cybercrime factory line, churning out attacks that can be very hard to defend against and putting the businesses we all rely on in the crosshairs,” Holland adds.
HP consulted with a panel of experts from cybersecurity and academia – including ex-black hat hacker Michael ‘Mafia Boy’ Calce and authored criminologist, Dr. Mike McGuire – to understand how cybercrime has evolved and what businesses can do to better protect themselves against the threats of today and tomorrow.
They warned that businesses should prepare for destructive data denial attacks, increasingly targeted cyber campaigns, and cybercriminals using emerging technologies like artificial intelligence to challenge organisations’ data integrity.
To protect against current and future threats, the report offers up the following advice for businesses:
Master the basics to reduce cybercriminals’ chances: Follow best practices, such as multi-factor authentication and patch management; reduce your attack surface from top attack vectors like email, web browsing and file downloads; and prioritise self-healing hardware to boost resilience.
Focus on winning the game: plan for the worst; limit risk posed by your people and partners by putting processes in place to vet supplier security and educate workforces on social engineering; and be process-oriented and rehearse responses to attacks so you can identify problems, make improvements and be better prepared.
Cybercrime is a team sport. Cybersecurity must be too: talk to your peers to share threat information and intelligence in real-time; use threat intelligence and be proactive in horizon scanning by monitoring open discussions on underground forums; and work with third-party security services to uncover weak spots and critical risks that need addressing.
“We all need to do more to fight the growing cybercrime machine,” says Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc. “For individuals, this means becoming cyber aware.
Most attacks start with a click of a mouse, so thinking before you click is always important. But giving yourself a safety net by buying technology that can mitigate and recover from the impact of bad clicks is even better.”
“For businesses, it’s important to build resiliency and shut off as many common attack routes as possible,” Pratt continues.
“For example, cybercriminals study patches on release to reverse engineer the vulnerability being patched and can rapidly create exploits to use before organisations have patched. So, speeding up patch management is important.
“Many of the most common categories of threat such as those delivered via email and the web can be fully neutralised through techniques such as threat containment and isolation, greatly reducing an organisation’s attack surface regardless of whether the vulnerabilities are patched or not.”
Police Special Fraud Unit (PSFU), Ikoyi, Lagos, said its operatives have busted a syndicate who used Point of Sale (POS) terminals and other technological tools to gain access to financial institution’s database to steal more than N3 billion.
Police did not name the financial institution where the money was stolen but DSP Ovie Ewhubare, spokesperson for the Unit, in a statement Friday, said that while a member of the syndicate has been arrested, other remained at large.
The PSFU spokesperson said the suspect was apprehended following an extensive investigation into a sophisticated cyber intrusion targeting a financial institution.
“The members of the syndicate allegedly used Point of Sale (POS) terminals and other technological tools to gain unauthorised access to the financial institution’s database.
“The breach enabled the suspects to initiate fraudulent transactions worth more than N3 billion,’’ he said.
According to him, investigations reveal that the proceeds of the alleged fraud are quickly laundered through multiple bank accounts in an attempt to conceal the source and movement of the funds.
The spokesperson said that the detectives deployed advanced digital forensic techniques and financial analysis to trace the transactions, identify members of the syndicate and recover key evidence to support prosecution.
Ewhubare said that Mr Eloho Okpoiakpo, commissioner of Police in charge of the PSFU, commended the investigating team for its professionalism in uncovering the alleged fraud.Law Enforcement
He said that Okpoiakpo directed the detectives to intensify efforts to apprehend other fleeing members of the syndicate, assuring that every effort would be made to bring all those involved to justice.
A new case study by Moniepoint Inc., Africa’s all-in-one financial ecosystem platform for individuals, businesses and their customers, traces four decades of Nigeria’s food service industry and reveals how the sector’s most persistent payment problems, that include settlement delays, unreliable confirmation, unchecked theft and inaccessible credit have been resolved by real-time digital infrastructure, turning food commerce into an $11.09 billion market in 2025.
The sector has undergone a massive structural shift marked by food-delivery super-apps, as well as a new generation of cloud kitchens operating without a single dining chair, with the food service industry poised to experience unprecedented growth as the Nigerian market is projected to reach $19.31 billion by 2030, growing at 11.73% annually.
The study traces the industry’s roots from the UAC-owned Kingsway Rendezvous of 1973 and the 1986 launch of Mr Bigg’s, through the rise of Chicken Republic and other quick-service chains, to the present day, where food and drinks form the second-largest merchant sector on Moniepoint’s platform, trailing only retail.
Tosin Eniolorunda, group CEO of Moniepoint Inc., noted that “Moniepoint believes financial inclusion is not just about access. It’s about dignity, about enabling people to transact on their terms. What’s happening in the food service sector today is significant. The real competitive question today is how deeply that payment infrastructure is woven into the way the business actually runs day to day.
“Moniepoint is sitting right at the centre of that shift. We are ensuring that payments are connected to inventory, inventory to recipes, recipes to procurement, procurement to credit, and credit to growth plans. By building out tools like Moniebook and Orda that match the operational reality of these culinary entrepreneurs, who act as mini-factories converting perishable raw materials into time-sensitive output, we are providing the digital operating system that drives sustainable scale for Nigeria’s socio-economic development.”
The report finds that for most of that history, Nigerian food businesses ran almost entirely on cash, with multi-location operators managing cash across a dozen or more outlets, facing constant exposure to loss, theft and human error. The rise of bank transfers in the 2010s introduced a new pain point around confirming that the payment had actually landed before releasing an order. At peak hours, the study notes, this manual verification could add two to five minutes to every transaction, with digital infrastructure most likely to falter precisely when demand and stakes were highest, especially during Christmas, New Year’s and Eid celebrations.
The study also documents how disconnected payment and inventory systems enabled operational leakage that was structurally difficult to detect, from unaccounted stock in the kitchen to under-ringing at the till and how Nigeria’s collateral-based lending system routinely locked thriving food businesses out of credit.
The International Finance Corporation estimates that the country’s unmet MSME credit demand was $32.2 billion in 2022, a gap that falls disproportionately on women, who, the report shows, own 86.8% of businesses in the accommodation and food services sector, the most female-dominated sector in the Nigerian economy.
To address these bottlenecks, Moniepoint introduced three structural interventions that reshaped the industry’s economics. Moving away from the traditional $T+1$ bank settlement cycle, it provided instant, same-day access to funds, allowing operators to finance the next morning’s inventory directly from the previous day’s sales.
This was paired with automated transfer confirmation at the terminal to eliminate manual verification queues and an embedded lending model that used verified transaction history instead of property collateral to unlock bulk purchasing power ahead of seasonal surges. Driven by these updates and the tightening of the cashless policy, Moniepoint witnessed a 2,823% surge in QSR terminal usage.
Beyond payments, a unified business banking dashboard replaced month-end spreadsheets with real-time, role-based visibility to curb financial misconduct across multiple branches. With Moniepoint’s launch of Moniebook and the acquisition of Orda, analysts say that the business is transitioning from a payment provider to a complete operating system, in line with its ecosystem ambition.
This integration allows culinary businesses to track ingredient depletion against precise recipes to expose hidden theft or portioning errors, while simultaneously consolidating fragmented orders from delivery apps, social media, and walk-ins into a single inventory ledger.
Some other insights from the study:
- Transaction volume across the industry peaks at lunch, between 1 pm and 2 pm, with a second evening peak at 7 pm reaching 10 to 15 times its level at 7 am – except online food delivery, which peaks and remains strong past 10 pm.
- Card payment activity records its biggest month-on-month jump of the year between November and December, while April is the industry’s quietest month for payment activity, running 46.3% below December’s.
This food service case study joins Moniepoint’s expanding pool of definitive thought leadership materials curated for the benefit of stakeholders, including regulators, investors, and the general public, aimed at enhancing their understanding of how digital payment ecosystems are transforming Nigeria’s commercial landscape across diverse sectors and market structures.
Flutterwave has secured a strategic investment from Circle Ventures, the venture capital arm of Circle Internet Group, to accelerate the expansion of its USDC payments and settlement infrastructure across Africa.
This comes as demand for faster and more efficient cross-border transactions grows.
The investment strengthens Flutterwave’s ambition to integrate USDC settlement into its existing payment ecosystem, allowing businesses to receive payments in local currencies while settling in the dollar-backed stablecoin.
The company said the move would reduce settlement delays and transaction costs while enabling near-instant settlements beyond traditional banking hours.
The announcement comes after Flutterwave participated in the launch of the Circle Payments Network in 2025, marking a deeper collaboration between the two companies in advancing digital payment infrastructure across the continent.
Flutterwave said the investment aligns with its strategy of positioning stablecoins as a key component of Africa’s financial infrastructure, while ensuring blockchain-based payment services operate within existing regulatory and compliance frameworks.
Commenting on the development, Flutterwave Founder and Chief Executive Officer, Olugbenga Agboola, said the investment would help build the infrastructure required for the next phase of global money movement from Africa.
According to him, stablecoins have evolved beyond experimentation into core financial infrastructure capable of transforming how businesses move money across borders.
“This support from Circle Ventures is about backing the rails that will power the next era of global money movement from Africa. Stablecoins like USDC are no longer an experiment; they are becoming core financial infrastructure.
“By embedding USDC settlement into our current payments infrastructure, we are building a system that lets businesses move money at the speed of the internet. This fundamentally changes how payments from Africa connect to the world, and it positions Flutterwave as the default stablecoin gateway for the continent,” Agboola said.
Police Busts Syndicate Who Allegedly Stole N3Bn from Financial Institution
MTN Accelerates Network Expansion to Meet Surging Telecom Demand
Court Remands Akujobi, Ex Access over alleged Theft of N294.5m
TeKnowledge, Equinix Partner to Advance Nigerian Digital Infrastructure
NSIB Faults Runway Identification, Reveals Cockpit Disagreement in Asaba Jet Incident
Nigeria Launches FreeTV Nationwide
NASENI Moves to Digitize CCB’s 5m Assets Declaration and Operations
NRC, Ponzi Scheme Collapses Resulting Loss of Billions of Naira
Lebara Nigeria Launches Lebara Play, Africa’s First Telecom-Owned Micro-Drama Platform
CANAL+ Partners Samsung to Pre-Load DStv Stream on New Samsung TVs In Nigeria, Other African Countries
Telecom2 days agoFixed Wired Internet Market Lags as Mobile Gains Ground
News2 days agoStudy Reveals How Moniepoint is Powering Nigeria’s $11Bn Food Service Sector
Broadcasting2 days agoBON Establishes Six Ad Hoc Committees to Modernize Broadcasting
General News2 days agoCourt Adjourns Alleged Binance Tax Evasion Case over Settlement Talks
E-Business2 days agoNew NIMC Act Strengthens Data Protection, Privacy – Director
News1 day agoPolice Busts Syndicate Who Allegedly Stole N3Bn from Financial Institution
General News2 days agoXenophobic Attacks: OYC Threatens to Picket MTN Nigeria Offices
Telecom1 day agoDStv, GOtv Owner MultiChoice Officially Joins Canal+ Group