News
Check Point Research Reveals XLoader as August’s Top Malware in Nigeria
Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies, a provider of cyber security solutions globally, has published its latest Global Threat Index for August 2022.
In Nigeria, XLoader is the most widespread malware this month impacting 14.47% of organisations in the country, followed by Phorpiex and Guloader both with 6.58%.
Globally, CPR reports that FormBook is now the most prevalent malware, taking over from Emotet, which has held that position since its reappearance in January.
FormBook is an Infostealer targeting Windows OS which, once deployed, can harvest credentials, collect screenshots, monitor and log keystrokes as well as download and execute files according to its command and control (C&C) orders.
Since it was first spotted in 2016, it has continued to make a name for itself, marketed as a Malware as a Service (MaaS) in underground hacking forums, known for its strong evasion techniques and relatively low price.
August also saw a rapid increase in GuLoader activity, which resulted in it being the fourth most widespread malware. GuLoader was initially used to download Parallax RAT but has since been applied to other remote access trojans and infostealers such as Netwire, FormBook and Agent Tesla.
It is commonly distributed through extensive email phishing campaigns, that lure the victim into downloading and opening a malicious file, allowing the malware to get to work.
Additionally, Check Point Research reports that Joker, an Android spyware, is back in business and has claimed third place in the top mobile malware list this month. Once Joker is installed, it can steal SMS messages, contact lists and device information as well as sign the victim up for paid premium services without their consent. Its rise can partially be explained by an uplift in campaigns as it was recently spotted to be active in some Google Play Store applications.
“The shifts that we see in this month’s index, from Emotet dropping from first to fifth place to Joker becoming the third most prevalent mobile malware, is reflective of how fast the threat landscape can change” said Maya Horowitz, VP Research at Check Point Software.
“This should be a reminder to individuals and companies alike, of the importance of keeping up to date with the most recent threats as knowing how to protect yourself is essential.
“Threat actors are constantly evolving and the emergence of FormBook shows that we can never be complacent about security and must adopt a holistic, prevent-first approach across networks, endpoints and the cloud.”
CPR also revealed this month that the Education/Research sector is still the most targeted industry by cybercriminals globally. With Government/Military and Healthcare taking second and third place as the most attacked sectors.
“Apache Log4j Remote Code Execution” returns to first place as the most exploited vulnerability, impacting 44% of organizations worldwide, after overtaking “Web Server Exposed Git Repository Information Disclosure” which had an impact of 42%.
Top malware families
*The arrows relate to the change in rank compared to the previous month.
FormBook is the most widespread malware this month impacting 5% of organizations worldwide, followed by AgentTesla with an impact of 4% and XMRig with 2%.
- XLoader – XLoader is an Android Spyware and Banking Trojan developed by the Yanbian Gang, a Chinese hacker group. This malware uses DNS spoofing to distribute infected Android apps to collect personal and financial information..
- Phorpiex – Phorpiex is a botnet (aka Trik) that has been active since 2010 and at its peak controlled more than a million infected hosts. It is known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
- Guloader – GuLoader is a downloader that has been widely used since December 2019. When it first appeared, GuLoader was used to download Parallax RAT but has been applied to other remote access trojans and info-stealers such as Netwire, FormBook, and Agent Tesla.
Top Attacked Industries Globally
This month the Education/Research sector remained in first place as the most attacked industry globally, followed by Government/Military and Healthcare.
- Education/Research
- Government/Military
- Healthcare
Top Exploited Vulnerabilities
This month, “Apache Log4j Remote Code Execution” is the most common exploited vulnerability, impacting 44% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which dropped from first place to second with an impact of 42%. “Web Servers Malicious URL Directory Traversal” remains in the third place, with a global impact of 39%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↓ Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow unintentional disclosure of account information.
- ↔ Web Servers Malicious URL Directory Traversal (CVE-2010-4598,CVE-2011-2474,CVE-2014-0130,CVE-2014-0780,CVE-2015-0666,CVE-2015-4068,CVE-2015-7254,CVE-2016-4523,CVE-2016-8530,CVE-2017-11512,CVE-2018-3948,CVE-2018-3949,CVE-2019-18952,CVE-2020-5410,CVE-2020-8260) – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
Top Mobile Malwares
This month AlienBot is the most prevalent Mobile malware, followed by Anubis and Joker.
- AlienBot – AlienBot is a banking Trojan for Android, sold underground as a Malware-as-a-Service (MaaS). It supports keylogging, dynamic overlays for credentials theft, as well as SMS harvesting for 2FA bypass. Additional remote control capabilities are provided by using a TeamViewer module.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger and audio recording capabilities as well as various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Joker – An Android Spyware in Google Play, designed to steal SMS messages, contact lists and device information. Furthermore, the malware can also sign the victim up for paid premium services without their consent or knowledge.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.
News
TEDxPAU 2024: Exploring New Possibilities and Shaping Tomorrow
TEDxPAU 2024 brought together some of the brightest minds and boldest voices on November 16th at the Honeywell Auditorium, Lagos Business School. With over 500 attendees eager to explore new possibilities, the event’s theme, ‘Shaping the Future,’ set the tone for a day filled with inspiration, reflection, and transformative ideas.
The day opened with a TED talk by TED founder Chris Anderson, followed by welcome remarks from the Vice-Chancellor of Pan-Atlantic University, Prof. Enase Okonedo. She encouraged the audience to embrace the theme, saying, “The future is now, and it is up to all of us to join hands to shape tomorrow.”
The sessions featured inspiring talks from visionaries like Akose Enebeli, who emphasized sustainable urban living by “building upwards instead of outwards,” and Goodnews Igwe, who stressed that creating value is key to success.
Temitope Runsewe championed Africa’s family values as a foundation for economic recovery, describing family businesses as “the future of Nigeria.” Prof. Fabian Ajogwu, SAN, advocated for affordable education to drive literacy and digital skills, while Michael Oluwagbemi sparked intrigue with his bold statement that “CNG is the new garri,” promoting energy innovation.
Ziad Maalouf shared leadership insights, underscoring personal growth as the key to scaling success.
Adesuwa Ifedi, Senior Vice President at Heifer International, spoke about the significance of scaling innovation from the inside out, urging organizations to embrace change-driven solutions. Dr. Peter Bamkole, Deputy Vice Chancellor of PAU, described entrepreneurship as “a catalyst for systemic change,” calling for the transformation of problems into solutions with far-reaching impact.
Dr. Cosmas Maduka, who shared his journey from adversity to global success, inspired the audience to embrace their gifts and believe in limitless possibilities.
The event ended with a fireside chat between TEDxPAU organizer Bella Victor and Dr. Maduka, who spoke about the importance of legacy and purpose. He encouraged attendees to see themselves as part of Nigeria’s solution and to embrace both the challenges and triumphs of the country’s journey.
Beyond the talks, TEDxPAU 2024 captivated attendees with musical performances, a spoken word piece, and a high-energy dance performance by different talents from the university.
The event also recognized its sponsors and volunteers, thanking them for their critical role in making the day a success.
In his closing remarks, Bella Victor expressed heartfelt gratitude, stating: “TEDxPAU was founded with the goal of giving back to this incredible school and creating a 360-degree impact—supporting our students, raising awareness for our school, and giving innovators a platform to reach a global audience. It’s inspiring to see how this event has grown and how each of you have played a part in that mission today. I thank our speakers, sponsors, volunteers, and every attendee who believed in this vision. Together, we are shaping the future.”
Attendees also enjoyed networking opportunities during breaks, sponsor exhibitions, and a private lunch for VIP ticket holders, who engaged in deeper conversations with the speakers about shaping tomorrow.
TEDxPAU 2024 once again reaffirmed its commitment to “ideas worth spreading” and left attendees inspired to take action. For recordings of the event and updates on future editions, stay tuned.
News
Head of Civil Service Celebrates 100 Days in Office with the Launch of Galaxy Backbone’s “Govmail”
In a landmark moment for Nigeria’s public service, the Head of Civil Service of the Federation, Mrs. Didi Esther Walson-Jack, OON, MINI, today marked her 100 days in office and officially launched three digital services platforms for the Civil Service.
These include, Govmail, ServiceWise GPT and the Federal Civil Service Online Portal. These platforms, underscore President Bola Ahmed Tinubu’s administration’s commitment to enhancing digital governance and driving innovation across the nation’s Federal Civil Service.
Govmail, an email platform developed and powered by Galaxy Backbone (GBB) is an innovative solution set to enhance communication, boost efficiency, and accelerate Nigeria’s digital transformation journey within the public sector.
Speaking at a meeting where the Govmail Interface was first officially presented and demonstrated to her, the Head of Civil Service expressed her excitement about the platform, stating, “GBB’s Govmail is unbelievably WOW!
This is a game-changer for our nation’s civil service, streamlining communication and creating a secure path to other government digital services. With Govmail, we are truly embracing the future of digital governance.”
Govmail is a secure, Nigeria-centric email platform designed by a team from Galaxy Backbone, exclusively for public service professionals. It ensures that all official communication are seamlessly managed while safeguarding Nigeria’s data sovereignty. The initiative emerged as a key outcome of the Digitalisation War Room, established by Mrs. Walson- Jack, to drive the implementation of cutting-edge digital solutions in government.
Commenting on this milestone, Professor Ibrahim A. Adeyanju, Managing Director/CEO of Galaxy Backbone, shared, “We are immensely proud to have developed this revolutionary platform, ensuring that every Nigerian civil servant has access to a robust and secure communication channel.
Govmail is not just about email—it’s about enabling productivity, efficiency, and sovereignty in governance. Galaxy Backbone remains committed to driving the digital transformation of Nigeria’s public sector.”
The Permanent Secretary, Federal Ministry of Communications, Innovation & Digital Economy, Engr. Faruk Yusuf Yabo emphasized the strategic importance of the Govmail for the nation’s Civil Service stating that “Govmail significantly reduces the government’s reliance on foreign email platforms, cutting costs and addressing licensing challenges. This is a commendable achievement by the Head of Service and the leadership of Galaxy Backbone.”
Through GBB’s dedicated efforts, Govmail will rapidly roll out email accounts to over 70,000 Federal civil servants across Nigeria, ensuring every government professional is equipped with a secure communication platform in record time. This initiative aligns with Nigeria’s goal of leveraging technology to build a digitally driven and globally competitive public service.
News
Senate Approves New $2.2Bn External Borrowing for Nigeria
The Senate has approved the new external borrowing plan request of $2.2 billion presented for consideration by President Bola Tinubu.
The approval followed the adoption of the report of the Senate Committee on Local and Foreign Debts at the plenary session on Thursday.
The report was presented by the Sen. Aliyu Wammako, chairman of the Committee.
President Bola Tinubu had on Tuesday, Nov 19, in separate letters to both chambers of the National Assembly, requested approval of a $2.2 billion external borrowing plan to part fund the N9.7 trillion deficit in the 2024 budget .
Senate upon receipt of the request, mandated its committee on local and foreign debts to expeditiously ensure further legislative inputs on the request and report back within 24 hours.
Presenting the committee‘s report, Wammako said the presidential request was very necessary for approval.
He said the loan request would be utilised for execution of ongoing projects and programmes in the 2024 appropriation act , saying that the projects were critical for national growth and development.
“It will contribute to the implementation of the debt management strategy, which seeks to reduce the cost of borrowing.
” It will lengthen maturity of the public debt stock, free – up space in the domestic market for other borrowers, and help increase Nigeria’s external reserves .” Wammako said Nigeria could raise all or part of the 2.2billion dollars through the issuance of Eurobonds in the International Capital Market ( ICM) .
Wammako thereafter is recommended as follows:
“That the Senate do approve the implementation of the new external borrowing of 2.2 billion dollars at the budget exchange rate of one dollars to N800 in the 2024 appropriation act and that the amount should be raised from one or more sources.
“Namely, issuance of eurobonds in the ICM, issuance of debut sovereign Sukuk in the ICM, and bridge, syndicated loans, subject to market conditions.”
The report was thereafter unanimously approved via an affirmative voice vote.
In his remarks after the approval, Senator Jibrin Barau, deputy president of the Senate, who presided plenary, commended the Wammako led committee for a job well done.
- News3 days ago
ALX Organises First-ever Business Showcase for its Community Entrepreneurs
- Telecom3 days ago
Airtel Africa-UNICEF Partnership Connects 1,200 Schools, 1M Africa Children to Digital Education
- Telecom3 days ago
Treepz Embarks on Global Expansion Journey with Trade Accelerator Program
- Telecom3 days ago
Kari Toriola: How Telecom Can Propel Nigeria to a $1 Trillion Economy
- E-Business2 days ago
NDPC to Begin Prosecution of Data Privacy Offenders from 2025
- Broadcasting3 days ago
Flymate Travel Unveils Visadoc App to Enhance Travel Convenience
- Telecom3 days ago
Galaxy Backbone, Bauchi State Government Sign Landmark MOU to Enhance Digital Infrastructure and ICT Capacity
- E-Business2 days ago
Nigeria, Others Confront Flood of Cyber-Attacks