News
Check Point Research Reveals XLoader as August’s Top Malware in Nigeria

Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies, a provider of cyber security solutions globally, has published its latest Global Threat Index for August 2022.
In Nigeria, XLoader is the most widespread malware this month impacting 14.47% of organisations in the country, followed by Phorpiex and Guloader both with 6.58%.
Globally, CPR reports that FormBook is now the most prevalent malware, taking over from Emotet, which has held that position since its reappearance in January.
FormBook is an Infostealer targeting Windows OS which, once deployed, can harvest credentials, collect screenshots, monitor and log keystrokes as well as download and execute files according to its command and control (C&C) orders.
Since it was first spotted in 2016, it has continued to make a name for itself, marketed as a Malware as a Service (MaaS) in underground hacking forums, known for its strong evasion techniques and relatively low price.
August also saw a rapid increase in GuLoader activity, which resulted in it being the fourth most widespread malware. GuLoader was initially used to download Parallax RAT but has since been applied to other remote access trojans and infostealers such as Netwire, FormBook and Agent Tesla.
It is commonly distributed through extensive email phishing campaigns, that lure the victim into downloading and opening a malicious file, allowing the malware to get to work.
Additionally, Check Point Research reports that Joker, an Android spyware, is back in business and has claimed third place in the top mobile malware list this month. Once Joker is installed, it can steal SMS messages, contact lists and device information as well as sign the victim up for paid premium services without their consent. Its rise can partially be explained by an uplift in campaigns as it was recently spotted to be active in some Google Play Store applications.
“The shifts that we see in this month’s index, from Emotet dropping from first to fifth place to Joker becoming the third most prevalent mobile malware, is reflective of how fast the threat landscape can change” said Maya Horowitz, VP Research at Check Point Software.
“This should be a reminder to individuals and companies alike, of the importance of keeping up to date with the most recent threats as knowing how to protect yourself is essential.
“Threat actors are constantly evolving and the emergence of FormBook shows that we can never be complacent about security and must adopt a holistic, prevent-first approach across networks, endpoints and the cloud.”
CPR also revealed this month that the Education/Research sector is still the most targeted industry by cybercriminals globally. With Government/Military and Healthcare taking second and third place as the most attacked sectors.
“Apache Log4j Remote Code Execution” returns to first place as the most exploited vulnerability, impacting 44% of organizations worldwide, after overtaking “Web Server Exposed Git Repository Information Disclosure” which had an impact of 42%.
Top malware families
*The arrows relate to the change in rank compared to the previous month.
FormBook is the most widespread malware this month impacting 5% of organizations worldwide, followed by AgentTesla with an impact of 4% and XMRig with 2%.
- XLoader – XLoader is an Android Spyware and Banking Trojan developed by the Yanbian Gang, a Chinese hacker group. This malware uses DNS spoofing to distribute infected Android apps to collect personal and financial information..
- Phorpiex – Phorpiex is a botnet (aka Trik) that has been active since 2010 and at its peak controlled more than a million infected hosts. It is known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
- Guloader – GuLoader is a downloader that has been widely used since December 2019. When it first appeared, GuLoader was used to download Parallax RAT but has been applied to other remote access trojans and info-stealers such as Netwire, FormBook, and Agent Tesla.
Top Attacked Industries Globally
This month the Education/Research sector remained in first place as the most attacked industry globally, followed by Government/Military and Healthcare.
- Education/Research
- Government/Military
- Healthcare
Top Exploited Vulnerabilities
This month, “Apache Log4j Remote Code Execution” is the most common exploited vulnerability, impacting 44% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which dropped from first place to second with an impact of 42%. “Web Servers Malicious URL Directory Traversal” remains in the third place, with a global impact of 39%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↓ Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow unintentional disclosure of account information.
- ↔ Web Servers Malicious URL Directory Traversal (CVE-2010-4598,CVE-2011-2474,CVE-2014-0130,CVE-2014-0780,CVE-2015-0666,CVE-2015-4068,CVE-2015-7254,CVE-2016-4523,CVE-2016-8530,CVE-2017-11512,CVE-2018-3948,CVE-2018-3949,CVE-2019-18952,CVE-2020-5410,CVE-2020-8260) – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
Top Mobile Malwares
This month AlienBot is the most prevalent Mobile malware, followed by Anubis and Joker.
- AlienBot – AlienBot is a banking Trojan for Android, sold underground as a Malware-as-a-Service (MaaS). It supports keylogging, dynamic overlays for credentials theft, as well as SMS harvesting for 2FA bypass. Additional remote control capabilities are provided by using a TeamViewer module.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger and audio recording capabilities as well as various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Joker – An Android Spyware in Google Play, designed to steal SMS messages, contact lists and device information. Furthermore, the malware can also sign the victim up for paid premium services without their consent or knowledge.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.
News
EFCC Bans Cash above $10,000 from Leaving Nigeria without Declaration

Ola Olukoyede, chairman of the Economic and Financial Crimes Commission (EFCC), has warned against cash transportation above $10,000 or its equivalent without declaration to the appropriate government agencies.

Ola Olukoyede, chairman, EFCC
Olukoyede gave this charge in Kano at the weekend at a joint sensitisation program organised by the Nigeria Customs Service (NCS), the Independent Corrupt Practices and Other Related Offences Commission (ICPC) and the EFCC to educate Nigerians on legal protocols for cash movement across Nigeria’s borders.
He cautioned Bureau De Change (BDC) operators and other business stakeholders across the country against illegal cash smuggling, urging individuals transporting cash exceeding $10,000 (or its equivalent) to declare it to the NCS, as failure to do so constitutes a criminal offence.
According to the anti-graft czar, despite existing laws, many travellers, whether businessmen, pilgrims, or tourists, still engage in illegal cash movements out of ignorance or deliberate attempts to evade financial regulations.
Under the theme, “Illegal Cash Movement Through Nigerian Airports: Consequences, Legal Frameworks, and EFCC’s Enforcement Role,” Olukoyede, who spoke through CE Ibrahim Shazali, Kano Zonal Director of the EFCC, underscored the severe repercussions of non-compliance with Nigeria’s financial regulations.
“Today, we will clarify the legal requirements, reporting obligations, and consequences of non-compliance”.
“The consequences of illegal cash trafficking are grave—ranging from imprisonment and hefty fines to forfeiture of assets.
“The EFCC, in collaboration with sister agencies, remains resolute in prosecuting offenders and safeguarding the integrity of Nigeria’s financial system,” he said.
“Section 3(3) of the Money Laundering (Prevention and Prohibition) Act declares cash transportation above $10,000 (or equivalent) without declaration illegal and Section 18 of the same Act mandates BDCs to report suspicious transactions to the NFIU (Nigeria Financial Intelligence Unit).
He emphasised that illicit cash movement undermines economic stability and fuels crimes such as money laundering, terrorism financing and corruption.
Olukoyede also outlined the legal frameworks governing cash movements, including the EFCC Act (2004), the Money Laundering (Prevention and Prohibition Act) 2022 and Central Bank of Nigeria guidelines.
“Nigeria, as a signatory to international anti-money laundering conventions, has established strict laws to regulate the movement of cash in and out of the country.
“The Central Bank of Nigeria (CBN) Act, Money Laundering (Prevention and Prohibition) Act 2022, and the EFCC Establishment Act provide clear guidelines on cash declarations and penalties for violations.”
The sensitisation program highlighted the inter-agency commitment to enforcing compliance.
Representatives from the NCS and ICPC reinforced the importance of adhering to anti-corruption laws and cross-border financial regulations.
Stakeholders, including BDC operators, were urged to uphold ethical practices and report suspicious activities.
The EFCC’s boss called for stakeholders’ support and collective vigilance against illicit financial flows in Nigeria.
“We urge all stakeholders to prioritise national interest over personal gain. Compliance is not optional; it is a legal and patriotic obligation. Together, we can curb illicit financial flows and promote economic security”, he said.
News
Lagos Sets the Benchmark in Renewable Energy as CADEF Launches Transformative Platform

Against the backdrop of Lagos State’s proactive efforts to reform its electricity sector, the Consumer Advocacy and Empowerment Foundation (CADEF) has launched its ‘Renew Energy Nigeria’ platform, a nationwide initiative with potential synergies for the state’s ambitious energy goals.
Professor Chiso Ndukwe-Okafor, CADEF’s Executive Director, introduced the platform in Lagos, highlighting its aim to empower Nigerians with information and access to decentralized renewable energy (DER) solutions. “The launch of this platform marks a significant step towards democratizing access to information and resources within Nigeria’s burgeoning sustainable energy sector.”
The platform’s launch comes as Lagos State, under the Lagos State Electricity Law, is actively establishing a regulatory framework and attracting private sector investment. Kamaldeen Abiodun-Balogun, General Manager of the LSEB, detailed the state’s progress in creating a functional electricity market, ensuring payment security, and addressing infrastructure challenges. “This law enabled us to create policy documents and establish regulatory agencies to initiate the implementation of the Lagos electricity market,” he explained, adding that private sector involvement will be key in areas where existing Discos face performance issues.
Segun Adaju, a private sector player deeply engaged in the energy sector, lauded Lagos State’s leadership. “In all these, Lagos State is always setting the pace. Many of us in the private sector players like myself, we are also looking up to Lagos State to set the pace,” he said, also mentioning his work on the Centralized Renewable Energy Desk for the state government.
While acknowledging national-level challenges such as import restrictions and forex fluctuations as noted by Professor Ndukwe-Okafor: “The recent federal plan on restrictions on the importation of solar products and the fluctuation of forex rate have made clean energy solutions costly”, the focus on Lagos State’s progress suggests a promising local environment for DER adoption, potentially amplified by CADEF’s new platform.
The broader socio-economic context, as highlighted by Olumide Ajayi, “Over 40% of Nigerians do not have access to reliable electricity”, underscored the importance of initiatives like ‘Renew Energy Nigeria’ and the enabling policies being implemented in states like Lagos.
Professor Ndukwe-Okafor concluded with a powerful call to action. “This platform is not an isolated intervention. It is aligned with our ideal country’s national vision, the 30-30-30 initiative. Let us not build a solar future that only serves the wealthy. Let us democratize clean energy. Let us make it local, inclusive, and scalable.”
The launch of “Renew Energy Nigeria” marks a significant step towards a more sustainable and equitable energy future for Nigeria, driven by innovation, collaboration, and a commitment to empowering its citizens. The platform is now live and accessible to all Nigerians seeking reliable and clean energy alternatives
News
EFCC Secures Arrest Warrant for Six CBEX Promoters

A federal high court in Abuja has granted permission to the Economic and Financial Crimes Commission (EFCC) to arrest and detain six Crypto Bridge Exchange (CBEX) promoters over allegations of investment fraud to the tune of over one billion dollars.
Emeka Nwite, presiding judge, gave the order following an ex parte application moved by Fadila Yusuf, counsel to the EFCC.
In the application by the EFCC, the six suspects are Adefowora Olanipekun, Adefowora Oluwanisola, Emmanuel Uko, Seyi Oloyede, Avwerosuo Otorudo and Chukwuebuka Ehirim.
The commission sought an order of the court for a warrant of arrest of the defendants.
They also prayed the court for “an order remanding the defendants in the custody of the complainant/applicant pending the conclusion of investigation of the alleged offences and possible prosecution”.
Yusuf said that the defendants are at large and a warrant of arrest is required to arrest the defendants for proper investigation and prosecution of this case.
In the affidavit in support of the motion, the EFCC said preliminary investigation into the intel revealed that the defendants “using their company ST Technologies International Limited, promoted another company Crypto Bridge Exchange (CBEX) by making adverts and lured unsuspecting members of the public to invest crypto cryptocurrencies on the CBEX investment platform”.
The EFCC said the defendants promised an unrealistic return on investment of up to 100 percent.
“The victims were made to convert their digital assets into a stablecoin of USDT for onward deposit into the suspects’ crypto wallet,” Yusuf said.
“The victims were initially given full access to the platform to monitor their investment.
“Following the deposits valued at over $1 billion by the victims, the CBEX investment platform became inaccessible to them, and they could no longer withdraw from the investment made.
“The victims later discovered that the said scheme is a scam.
“During the course of investigation, it was discovered that the said ST Technologies International Limited, though registered with the Corporate Affairs Commission (CAC), it was not registered with the Securities and Exchange Commission (SEC) for investment purposes.
“It was also discovered during the investigation that the defendants had moved out of their last known address in Lagos and Ogun states.”
The anti-graft agency said obtaining a warrant of arrest was necessary in order to place the defendants on a watch list, enabling authorities to trace and apprehend the suspects to face the charges brought against them.
Nwite granted the request for a warrant of arrest and remand, adding that the order was necessary to enable the commission to apprehend the defendants and conclude its investigation.
“I have listened to the submission of the learned counsel for the applicant,” Nwite said.
“I have also gone through the affidavit evidence with exhibits thereto, along with the written address.
“I am of the view and I so hold that the application is meritorious.
“Consequently, the application is granted as prayed.”
Earlier in April, reports emerged that CBEX users could no longer withdraw their funds.
On Monday, angry investors stormed and looted the office of Smart Treasure (ST Team), an affiliate of CBEX, in Ibadan, Oyo State.
The EFCC recently confirmed receiving multiple complaints about the platform.
Dele Oyewale, the commission spokesperson, assured affected investors that efforts were underway to recover their funds.
- Telecom3 days ago
MTN Appoints Egerton Idehen as Chief Broadband Officer
- Telecom3 days ago
Digital Realty Expands ServiceFabric to Nigeria, Enhancing Global Interconnectivity
- General News3 days ago
UBA Marks 75 Years of Excellence at 65th AGM
- Telecom3 days ago
MTN Group Suffers Cyberattack
- Telecom3 days ago
MTN Foundation Launches Skills Academy to Bridge Nigeria’s Digital Skills Gap
- Telecom3 days ago
Legend Internet Plc Makes History as First Indigenous Telecom Firm on NGX
- Telecom3 days ago
Tribunal Upholds FCCPC’s $220m Fine against Meta, WhatsApp
- E-Financial3 days ago
World Bank Predicts Rise of Poverty in Nigeria Despite Economic Growth