News
Stolen Credentials Selling on Dark Web for Price of 3 Litres of Fuel – Report

HP has released The Evolution of Cybercrime: Why the Dark Web is Supercharging the Threat Landscape and How to Fight Back – an HP Wolf Security Report.

The findings show cybercrime is being supercharged through “plug and play” malware kits that make it easier than ever to launch attacks. Cyber syndicates are collaborating with amateur attackers to target businesses, putting our online world at risk.
The HP Wolf Security threat team worked with Forensic Pathways, a leading group of global forensic professionals, on a three-month dark web investigation, scraping and analysing over 35 million cybercriminal marketplaces and forum posts to understand how cybercriminals operate, gain trust, and build reputation.
Key findings include:
– Malware is cheap and readily available – Over three quarters (76%) of malware advertisements listed, and 91% of exploits (i.e., code that gives attackers control over systems by taking advantage of software bugs), retail for under ₦4,923.17. The average cost of compromised Remote Desktop Protocol credentials is just ₦2,092.35.
Vendors are selling products in bundles, with plug-and-play malware kits, malware-as-a-service, tutorials, and mentoring services reducing the need for technical skills and experience to conduct complex, targeted attacks – in fact, just 2-3% of threat actors today are advanced coders.
-The irony of ‘honor amongst cyber-thieves’ – Much like the legitimate online retail world, trust and reputation are ironically essential parts of cybercriminal commerce: 77% of cybercriminal marketplaces analysed require a vendor bond – a license to sell – which can cost up to ₦1,230,793.
Eighty-five per cent of these use escrow payments, and 92% have a third-party dispute resolution service. Every marketplace provides vendor feedback scores. Cybercriminals also try to stay a step ahead of law enforcement by transferring reputation between websites – as the average lifespan of a dark net Tor website is only 55 days.
– Popular software is giving cybercriminals a foot in the door – Cybercriminals are focusing on finding gaps in software that will allow them to get a foothold and take control of systems by targeting known bugs and vulnerabilities in popular software.
Examples include the Windows operating system, Microsoft Office, web content management systems, and web and mail servers. Kits that exploit vulnerabilities in niche systems command the highest prices (typically ranging from ₦393,853.76 – ₦1,723,110.20). Zero Days (vulnerabilities that are not yet publicly known) are retailing at tens of thousands of dollars on dark web markets.
“Unfortunately, it’s never been easier to be a cybercriminal. Complex attacks previously required serious skills, knowledge and resource. Now the technology and training is available for the price of 3 litres of fuel.
“And whether it’s having your company and customer data exposed, deliveries delayed or even a hospital appointment cancelled, the explosion in cybercrime affects us all,” comments report author Alex Holland, Senior Malware Analyst at HP Inc.
“At the heart of this is ransomware, which has created a new cybercriminal ecosystem rewarding smaller players with a slice of the profits.
“This is creating a cybercrime factory line, churning out attacks that can be very hard to defend against and putting the businesses we all rely on in the crosshairs,” Holland adds.
HP consulted with a panel of experts from cybersecurity and academia – including ex-black hat hacker Michael ‘Mafia Boy’ Calce and authored criminologist, Dr. Mike McGuire – to understand how cybercrime has evolved and what businesses can do to better protect themselves against the threats of today and tomorrow.
They warned that businesses should prepare for destructive data denial attacks, increasingly targeted cyber campaigns, and cybercriminals using emerging technologies like artificial intelligence to challenge organisations’ data integrity.
To protect against current and future threats, the report offers up the following advice for businesses:
Master the basics to reduce cybercriminals’ chances: Follow best practices, such as multi-factor authentication and patch management; reduce your attack surface from top attack vectors like email, web browsing and file downloads; and prioritise self-healing hardware to boost resilience.
Focus on winning the game: plan for the worst; limit risk posed by your people and partners by putting processes in place to vet supplier security and educate workforces on social engineering; and be process-oriented and rehearse responses to attacks so you can identify problems, make improvements and be better prepared.
Cybercrime is a team sport. Cybersecurity must be too: talk to your peers to share threat information and intelligence in real-time; use threat intelligence and be proactive in horizon scanning by monitoring open discussions on underground forums; and work with third-party security services to uncover weak spots and critical risks that need addressing.
“We all need to do more to fight the growing cybercrime machine,” says Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc. “For individuals, this means becoming cyber aware.
Most attacks start with a click of a mouse, so thinking before you click is always important. But giving yourself a safety net by buying technology that can mitigate and recover from the impact of bad clicks is even better.”
“For businesses, it’s important to build resiliency and shut off as many common attack routes as possible,” Pratt continues.
“For example, cybercriminals study patches on release to reverse engineer the vulnerability being patched and can rapidly create exploits to use before organisations have patched. So, speeding up patch management is important.
“Many of the most common categories of threat such as those delivered via email and the web can be fully neutralised through techniques such as threat containment and isolation, greatly reducing an organisation’s attack surface regardless of whether the vulnerabilities are patched or not.”
News
How Moniepoint’s Founders, Tosin Eniolorunda and Felix Ike are Redefining African Tech and Finance

In an era where global tech giants dominate headlines, two Nigerian entrepreneurs are quietly revolutionizing financial services across Africa, proving that world-class innovation can emerge from homegrown talent and local institutions.

Tosin Eniolorunda and Felix Ike, co-founders of Moniepoint Inc, have built one of Africa’s fastest-growing fintech companies, not despite their exclusively Nigerian education, but in many ways, because of it.
Their journey from the lecture halls of Obafemi Awolowo University and the University of Lagos to the TIME100 Most Influential Companies list stands as a powerful testament to the caliber of talent nurtured within Nigerian universities and the transformative potential of locally-rooted vision.
Tosin Eniolorunda’s path exemplifies how Nigerian educational institutions can cultivate entrepreneurial excellence. After earning his degree in Mechanical Engineering from Obafemi Awolowo University, he didn’t follow the well-trodden path abroad but instead chose to build solutions for Nigerian challenges within Nigeria itself. This decision proved prescient.
Understanding the unique financial ecosystem and infrastructure gaps firsthand from the work at TeamApt Ltd where they were building from majority of the country’s banks, Tosin pioneered several industry firsts: introducing instant POS transfers to Nigeria, launching the country’s first virtual account services, and constructing a vertically integrated payments processing switch with full switching and processing licenses.
These feats and technological achievements must be viewed from the prism that these were deeply contextual innovations born from intimate knowledge of local needs, the kind of understanding that comes from being educated and embedded in the communities one serves.
Felix Ike’s contribution complements this vision with technical brilliance equally rooted in Nigerian educational excellence. Graduating with first-class honors in Computer Science from the University of Lagos, Felix brought to Moniepoint the kind of engineering rigor required to build mission-critical financial infrastructure.
As Chief Technology Officer, he has architected systems that are not just functional but scalable, resilient, and secure enough to serve over 10 million businesses and individuals across Nigeria and Africa. His work demonstrates that Nigerian universities are producing software engineering leaders capable of building world-class technology that can compete on the global stage with technology that processes millions of transactions daily and underpins the financial dreams of an entire continent.
Since its founding in 2015, Moniepoint has evolved into Africa’s largest distributor of financial services in Nigeria, with presence across all 774 local government areas. The company’s all-in-one financial ecosystem offering seamless payments, banking, credit, and business management solutions reflects a sophisticated understanding of what African businesses and individuals actually need to thrive.
The accolades have followed: recognition by TIME as one of the 100 Most Influential Companies in 2025, listing among CNBC’s top UK fintech firms, and ranking in the Financial Times’ Africa’s Fastest-Growing Companies for three consecutive years.
The Moniepoint story as an indigenously rooted but globally compliant player challenges prevailing narratives about where innovation must originate and what credentials are necessary for building transformative companies. Tosin and Felix’s success illustrates that Nigerian universities, when their graduates are empowered with vision, opportunity, and determination, can produce founders who don’t just participate in the global economy but reshape it.
News
FIRS Declares NIN, CAC Numbers as Tax IDs from 2026

Federal Inland Revenue Service (FIRS) has announced that the National Identification Number (NIN) issued by the National Identity Management Commission (NIMC) will automatically serve as the Tax Identification Number (Tax ID) for all Nigerian citizens, while registered businesses will use their Corporate Affairs Commission (CAC) registration numbers.

FIRS
The disclosure was made during a public awareness campaign on the new tax laws posted on X (formerly Twitter) on Monday.
According to the Service, the Nigeria Tax Administration Act (NTAA), which comes into force in January 2026, mandates the use of Tax IDs for certain financial and commercial transactions, including bank account ownership.
FIRS explained that the measure is part of efforts to unify all previously issued Tax Identification Numbers (TINs) by both the federal and state revenue services into a single identifier.
“For individuals, your NIN automatically serves as your Tax ID, while for registered companies, your CAC RC number is used. You do not need a physical card; the Tax ID is a unique number linked directly to your identity,” the Service stated.
The agency noted that the requirement has been in place since the Finance Act of 2019 but has now been strengthened under the NTAA to ensure compliance and ease of administration.
Officials emphasized that the reform would simplify tax processes, reduce duplication, and improve transparency in Nigeria’s tax system.
The Service added that the integration of NIN and CAC numbers into the tax framework would also enhance data accuracy, curb tax evasion, and streamline the monitoring of taxable activities across the country.
Tax experts have described the development as a significant step toward modernizing Nigeria’s revenue administration, noting that it aligns with global best practices where national identity systems are linked to tax compliance.
The FIRS urged Nigerians to ensure that their NINs and CAC registration details are up-to-date, stressing that the identifiers would be required for transactions such as property purchases, contract awards, and access to certain financial services once the NTAA takes effect
News
US Begins Partial Visa Ban on Nigerians January 1

The United States will begin a partial suspension of visa issuance to Nigerians from January 1, 2026, following a new presidential proclamation aimed at strengthening border and national security.

The US Mission in Nigeria announced on Monday that the restriction will take effect at 12:01 a.m. Eastern Standard Time in accordance with Presidential Proclamation 10998, titled ‘Restricting and Limiting the Entry of Foreign Nationals to Protect the Security of the United States.’
According to the mission, Nigeria is one of 19 countries affected by the measure.
Others listed are Angola, Antigua and Barbuda, Benin, Burundi, Cote d’Ivoire, Cuba, Dominica, Gabon, The Gambia, Malawi, Mauritania, Senegal, Tanzania, Togo, Tonga, Venezuela, Zambia and Zimbabwe.
The proclamation provides for a partial suspension of visa issuance covering nonimmigrant B-1/B-2 visitor visas, as well as F, M and J student and exchange visitor visas.
It also applies to immigrant visas, though with limited exceptions.
The statement read in part, “Effective January 1, 2026, at 12:01 a.m. EST, in line with Presidential Proclamation 10998 on “Restricting and Limiting the Entry of Foreign Nationals to Protect the Security of the United States,” the Department of State is partially suspending visa issuance to nationals of 19 countries – Angola, Antigua and Barbuda, Benin, Burundi, Cote D’Ivoire, Cuba, Dominica, Gabon, The Gambia, Malawi, Mauritania, Nigeria, Senegal, Tanzania, Togo, Tonga, Venezuela, Zambia, and Zimbabwe – for nonimmigrant B-1/B-2 visitor visas and F, M, J student and exchange visitor visas, and all immigrant visas with limited exceptions.”
US officials clarified that the policy does not apply to all travellers. Exemptions include immigrant visas for ethnic and religious minorities facing persecution in Iran, dual nationals applying with passports from countries not affected by the suspension, and Special Immigrant Visas for eligible US government employees.
Other exempted categories include lawful permanent residents of the United States and participants in certain major international sporting events.
The US government emphasised that the proclamation applies only to foreign nationals who are outside the United States on the effective date and who do not hold a valid US visa as of January 1, 2026.
“Foreign nationals, even those outside the United States, who hold valid visas as of the effective date are not subject to Presidential Proclamation 10998. No visas issued before January 1, 2026, at 12:01 a.m. EST, have been or will be revoked pursuant to the Proclamation,” the statement added.
Visa applicants from affected countries may continue to submit applications and attend interviews. However, the US Mission noted that such applicants “may be ineligible for visa issuance or admission to the US” under the new rules.
The announcement comes amid a series of recent US policy decisions that have raised concerns among Nigerians seeking to travel, study or migrate to the country.
In October, the United States added Nigeria back to its list of countries accused of violating religious freedom, citing persistent insecurity and attacks on Christian communities. This was followed by Nigeria’s inclusion on a revised US travel ban list that imposed partial entry restrictions on Nigerians.
The US has also tightened immigration and visa policies affecting Nigerians. Earlier this year, the validity of most non-immigrant visas issued to Nigerians was reduced to single-entry visas with a three-month duration.
E-Financial2 days agoBanks quietly move to enforce new ₦50 transfer levy from Jan. 1
Telecom3 days agoNigeria’s Internet Usage Hits 1.24m Terabytes – NCC
General News2 days agoEcobank Guarantees Seamless Digital Banking Services Throughout the Christmas and Year-End Period
News1 day agoHow Moniepoint’s Founders, Tosin Eniolorunda and Felix Ike are Redefining African Tech and Finance















