Connect with us

E-Business

XLoader Prevalent Malware in Nigeria, Impacting 14% of Organizations – CPR

Published

on

Kindly share this post

Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies Ltd., a provider of cybersecurity solutions globally, has published its latest Global Threat Index for September 2022.

CPR reports that In Nigeria, XLoader is the most prevalent malware impacting 14.06% of organizations in the country, followed by Ramnit 10.94% and Phorpiex 9.38%. While Formbook is still the most prevalent malware, impacting 3% of organizations worldwide, Vidar is now in eighth position, up seven places from August.

Vidar is an infostealer designed to give threat actors backdoor access, enabling them to steal sensitive banking information, login credentials, IP addresses, browser history and crypto wallets from infected devices.

The increase in its prevalence follows a malicious campaign whereby fake Zoom websites, such as zoomus website and zoom-download, were used to lure innocent users into downloading the malware. Formbook, an infostealer targeting Windows OS, remains in first place.

Since the onset of the Russia-Ukraine war, CPR has continued to monitor the impact on cyberattacks in both countries.

While the conflict intensifies, CPR’s Global Threat Index for September noted a significant change in the ‘threat rank’ of many Eastern European countries. The threat rank represents how much an organization is being attacked in a specific country compared to the rest of the world.

During September, Ukraine had jumped 26 places, Poland and Russia moved up 18 places each, and both Lithuania and Romania moved up 17 places, among others. All these countries are now among the top 25, with the biggest degradation in their ranking occurring in the past month.

“As the war on the ground continues, so too does the war in cyberspace. It’s likely no coincidence that the threat ranks of many Eastern European countries have increased this last month. All organizations are at risk and must shift to a prevent-first cybersecurity strategy before it’s too late,” commented Maya Horowitz, VP Research at Check Point.

“In terms of the most prevalent malwares in September, it’s interesting to see Vidar leap into the top ten after a long absence. Users of Zoom need to stay alert to fraudulent links as this is how the Vidar malware has been distributed lately. Always keep an eye out for inconsistencies or misspelled words in URLs. If it looks suspicious, it probably is.”

CPR also revealed that “Web Server Exposed Git Repository Information Disclosure” is the most commonly exploited vulnerability, impacting 43% of organizations worldwide, closely followed by “Apache Log4j Remote Code Execution” which dropped from first place to second, with an impact of 42%. September also saw Education/Research remain in first place as the most attacked industry globally.

Top Malware Families

*The arrows relate to the change in rank compared to the previous month.

This month, Formbook is still the most prevalent malware impacting 3% of organizations worldwide, followed by XMRig and AgentTesla which both impact 2% of organizations globally.

In Nigeria, XLoader is the most prevalent malware impacting 14.06% of organizations in the country, followed by Ramnit 10.94% and Phorpiex 9.38%.

  1. XLoader – XLoader is an Android Spyware and Banking Trojan developed by the Yanbian Gang, a Chinese hacker group. This malware uses DNS spoofing to distribute infected Android apps to collect personal and financial information.
  2. Ramnit – Ramnit is a modular banking Trojan first discovered in 2010. Ramnit steals web session information, giving its operators the ability to steal account credentials for all services used by the victim, including bank accounts, and corporate and social networks accounts. The Trojan uses both hardcoded domains as well as domains generated by a DGA (Domain Generation Algorithm) to contact the C&C server and download additional modules.
  3. Phorpiex – Phorpiex is a botnet (aka Trik) that has been active since 2010 and at its peak controlled more than a million infected hosts. It is known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.

Top Attacked Industries

In Africa, this month the ISP/MSP sector remains in first place as the most attacked industry globally, followed by Government/Military and Communications

  1. ISP/MSP
  2. Government/Military
  3. Communications

Top Exploited Vulnerabilities

This month, “Web Server Exposed Git Repository Information Disclosure” is the most commonly exploited vulnerability, impacting 43% of organizations globally. It is followed by “Apache Log4j Remote Code Execution” which dropped from first place to second and impacts 42% of organizations. “Command Injection Over HTTP Linux System Files Information Disclosure” jumps into third place, with a global impact of 40%.

  1. ↑ Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow unintentional disclosure of account information.
  2. Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
  3. ↑ Command Injection Over HTTP (CVE-2021-43936,CVE-2022-24086)  A command Injection over HTTP vulnerability has been reported. A remote attacker can exploit this issue by sending a specially crafted request to the victim. Successful exploitation would allow an attacker to execute arbitrary code on the target machine.

Top Mobile Malwares

This month, Anubis jumped into first place as the most widespread Mobile malware, followed by Hydra and Joker.

  1. Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger and audio recording capabilities as well as various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
  2. Hydra – Hydra is a banking Trojan designed to steal finance credentials by requesting victims to enable dangerous permissions.
  3. Joker – An Android Spyware in Google Play, designed to steal SMS messages, contact lists and device information. Furthermore, the malware can also sign the victim up for paid premium services without their consent or knowledge.

Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Kaspersky Reveals Malware Attacks on SMBs Disguised as AI Services Surged by Five Times in 2026

Published

on

Kindly share this post

From January to April 2026, Kaspersky security solutions detected more than 33,300 attacks on small and medium-sized businesses (SMBs), in which malicious or unwanted software for PCs were disguised as popular artificial intelligence (AI) services. This number has surged by almost five times when compared to the same period in 2025.

A new Kaspersky report reveals threat analysis and mitigation strategies to help SMBs protect themselves against the evolving threat landscape.

Kaspersky experts explored the extent to which threat actors target small and medium-sized businesses with malware disguised as legitimate AI services, considering the growing popularity of such tools for the business workflow. At the beginning of 2026 the most common lures in cyberattacks involved malware posing as ChatGPT (42%), Claude (24%), and DeepSeek (20%).

Among unique malicious files detected in the SMB sector and masqueraded as AI services, Kaspersky experts observed mainly different Trojware (Trojans and Trojan-like malware), including those capable of downloading and running other malware on compromised devices.

Trojware disguises itself as harmless files to trick users into installing them. Their functionality may vary depending on the type of the malware. It may include stealing, deleting, blocking, modifying or copying users’ data, as well as other malicious capabilities. Given this, Trojware represents a highly dangerous cyberthreat to entrepreneurs and businesses.

However, in 2026 Kaspersky telemetry detected even more attacks on SMBs, in which malicious or unwanted software for PCs were disguised as messenger apps and video conferencing software: Telegram, WhatsApp, Zoom and Microsoft Teams. From January to April Kaspersky solutions blocked almost 415,000 such attacks.

The number of attacks changed marginally compared to the previous year’s figures. Thus, Kaspersky experts note that the lure of fake communication apps remains a widespread cyberthreat.

“The threat landscape is evolving with new lures constantly appearing. For example, for the first four months of this year our solutions for small and medium-sized businesses detected hundreds of attacks, in which malicious or unwanted software were disguised as OpenClaw – an AI tool that rapidly gains popularity in 2026.

Corporate employees are increasingly using various AI services and other tools in their workflows, including those that are publicly available. Thus, to be on the safe side, SMB employees – as well as all users – should exercise caution when looking for software on the Internet. Always check the correct spelling of the website and links in suspicious emails, and use robust security solutions,” says Vasily Kolesnikov, security expert at Kaspersky.

“As adversaries constantly refine their methods to exploit human error, the need for up-to-date security awareness training for businesses of all kinds and sizes is undeniable. However, the reality is that micro-organisations often struggle to allocate time and budget to regularly update their staff on the latest threats and malicious trends.

“We believe this issue can be largely addressed through solutions tailored for small businesses which deliver robust core protection while also providing accessible security education,” adds Rodion Pyanov, product manager, Kaspersky Small Office Security.

 


Kindly share this post
Continue Reading

E-Business

LG Showcases AI-Powered Smart Living Innovations @ Africa Technology Expo 2026

Published

on

Kindly share this post

LG Electronics has reaffirmed its commitment to advancing innovation and smart living across Africa by participating as a supporting sponsor at the Africa Technology Expo (ATE) 2026, where the company is showcasing its latest portfolio of premium consumer electronics and home appliance innovations.

The two-day expo, themed around strengthening Africa’s enterprise technology ecosystem through collaboration and innovation, has brought together industry leaders, technology innovators, multinational companies, policymakers, and entrepreneurs to explore opportunities for cross-border partnerships and digital transformation across the continent.

As one of the supporting sponsors of this year’s event, LG’s interactive exhibition booth has become a major attraction, offering visitors firsthand experience of the company’s latest AI-powered technologies designed to enhance everyday life while delivering greater comfort, convenience, energy efficiency, and connectivity.

Among the innovations on display are the latest LG QNED TV, delivering exceptional picture quality and immersive entertainment; the iconic MoodUP™️ Refrigerator, which combines intelligent cooling with customizable LED door panels; the innovative LG WashTower™️, an all-in-one premium laundry solution that maximizes space and efficiency; the energy-efficient LG ARTCOOL Air Conditioner and LG Air Tower, designed to provide smarter climate control; alongside LG’s advanced Dehumidifier and other intelligent home solutions.

Speaking on LG’s participation, Mr. H.S. ji, Managing Director, LG Electronics West Africa, said: “Africa Technology Expo provides an excellent platform to engage with innovators, businesses, and consumers who are shaping the future of technology across the continent. At LG, innovation goes beyond creating advanced products, it is about developing meaningful solutions that improve everyday life.

“Our participation reflects our commitment to supporting Africa’s digital transformation while introducing intelligent technologies that make homes and workplaces smarter, healthier, and more energy-efficient.”

The Africa Technology Expo was established to foster stronger collaboration among African businesses, emerging enterprises, and multinational organisations. During the opening ceremony, the organisers emphasized the need for deeper continental collaboration to unlock Africa’s innovation and economic potential, noting that previous editions of the expo have facilitated approximately $192 million in business deals among participating companies.

LG’s presence at the event aligns with this vision by demonstrating how cutting-edge consumer technology can support economic growth, digital inclusion, and sustainable development across Africa.

Visitors to the LG booth are participating in live product demonstrations, interactive experiences, and expert consultations, gaining valuable insights into how LG’s AI-powered ecosystem seamlessly connects home appliances and entertainment products to deliver a smarter lifestyle.

As technology continues to reshape industries and everyday living, LG remains committed to driving innovation that empowers consumers, supports enterprise growth, and contributes to Africa’s evolving digital economy.


Kindly share this post
Continue Reading

E-Business

Want a Business Loan Without Interest? SMEDAN Launches N500m Fund

Published

on

Kindly share this post

Small and Medium Enterprises Development Agency of Nigeria (SMEDAN) has secured a 12 million-dollar commitment from the South Korean Government to establish a Skills Acquisition Centre in Abuja to boost entrepreneurship and strengthen Nigeria’s Micro, Small and Medium Enterprises (MSMEs).

Want a Business Loan Without Interest? SMEDAN Launches N500m Fund

SMEDAN

The Director-General of SMEDAN, Mr Charles Odii, disclosed this in a statement on Sunday to commemorate the 2026 World MSME Day with the theme: “Empowering MSMEs through Innovation and Sustainable Industrial Development.”

Odii said the proposed centre would provide vocational and entrepreneurial training for thousands of young Nigerians and improve the productive capacity of small businesses across the country.

He said the agency was awaiting the allocation of land by the Federal Capital Territory Administration (FCTA) to commence the project.

According to him, SMEDAN is determined not to allow Nigeria to lose the opportunity presented by the South Korean Government’s intervention.

“We need land in the FCT to build the Skills Acquisition Centre. If the FCT Administration is unable to provide one, we will use our office premises in Idu, Abuja, because we do not want Nigeria to miss this 12 million-dollar commitment and opportunity offered by the Korean Government to support skills and vocational training,” he said.

Odii described MSMEs as the backbone of Nigeria’s economy, noting that the agency’s interventions were aimed at empowering small businesses to drive employment and economic growth.

“Small businesses are the heartbeat of Nigeria’s economy. They contribute significantly to employment generation and economic growth.

“By providing infrastructure, skills and financing, we are creating an enabling environment for them to grow, thrive and contribute meaningfully to national development,” he said.

The SMEDAN boss also announced the launch of a N500 million zero-interest Grow Fund to improve access to affordable finance for MSMEs.

He said the facility would be disbursed through cooperative societies, trade associations and business membership organisations under a revolving loan arrangement.

Odii explained that the association-based lending model was designed to improve accountability, ensure effective monitoring and guarantee that funds reached genuine entrepreneurs.

“We visited traders at the market because it is not enough to sit in offices and formulate policies without understanding the realities of the people we are meant to serve.

“We met with butchers, pepper sellers, vegetable traders, provision store owners and market leaders, and they all said one thing: they need access to affordable finance.

“That was why we immediately decided to launch the N500 million Grow Fund. We are not giving the money directly to individuals. We are giving it to associations that know their members and can monitor how the funds are used,” he said.

According to him, beneficiaries will access loans ranging from N250,000 to N500,000, depending on their business needs, without paying interest.

“The funding is meant to support and improve businesses. It should be used for working capital, workspaces, tools and other productive business needs.

“It is a revolving fund. When one beneficiary repays, another entrepreneur can access the same money. This way, the impact of the intervention continues to expand and more small businesses can benefit,” he added.

Odii said the agency planned to expand the fund through partnerships with state governments, development partners and financial institutions willing to provide matching funds.

He also disclosed that SMEDAN had commenced consultations on a new National MSME Policy, expected to be relaunched in November, to strengthen the policy framework for the sector.

He reaffirmed the agency’s commitment to supporting small businesses through skills development, access to finance and policies that would enhance their competitiveness and contribution to Nigeria’s economic development.


Kindly share this post
Continue Reading

Trending