Connect with us

News

New Emotet Campaign Bypasses Microsoft Blocks to Distribute Malicious OneNote Files

Published

on

Kindly share this post

Check Point Research reports that Emotet Trojan launched a new campaign last month to evade Microsoft’s macro block, sending spam emails containing malicious OneNote files. Meanwhile Ahmyth was the most prevalent mobile malware and Log4j took top spot once again as the most exploited vulnerability

Check Point® Software Technologies, a leading provider of cybersecurity solutions globally, has published its Global Threat Index for March 2023. Last month, researchers uncovered a new malware campaign for Emotet Trojan, which rose to become the second most prevalent malware.

As reported earlier this year, Emotet attackers have been exploring alternative ways to distribute malicious files since Microsoft announced they will block macros from office files. In the latest campaign, the attackers have adopted a new strategy of sending spam emails containing a malicious OneNote file.

Once opened, a fake message appears to trick the victim into clicking the document, which downloads the Emotet infection. Once installed, the malware can gather user email data such as login credentials and contact information. The attackers then use the gathered information to expand the reach of the campaign and facilitate future attacks.

“While big tech companies do their best to cut off cybercriminals at the earliest point, it’s near impossible to stop every attack from bypassing the security measures. We know that Emotet is a sophisticated Trojan and it is no surprise to see it has managed to navigate Microsoft’s latest defenses.

The most important thing people can do is make sure they have appropriate email security in place, avoid downloading any unexpected files and adopt heathy skepticism about the origins of an email and its contents” said Maya Horowitz, VP Research at Check Point Software.

CPR also revealed that “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.

Top malware families

Globally, Qbot was the most prevalent malware last month with an impact of more than 10% on worldwide organizations respectively, followed by Emotet and Formbook with a 4% global impact.

In Nigeria, Qbot was the most prevalent malware last month with an impact of more than 32.36%, followed by Expiro with 19.35% and BlackCat with a 9.68% impact.

  1. Qbot – Qbot AKA Qakbot is a banking Trojan that first appeared in 2008. It was designed to steal a user’s banking credentials or keystrokes and is often distributed via spam emails. Qbot employs several anti-VM, anti-debugging and anti-sandbox techniques to hinder analysis and evade detection.
  1. Expiro – Expiro is a polymorphic file infector first seen in 2010. It inserts its malicious code into executable files on the infected host. These files lead to new infections when they are run on other machines. Expiro steals user and system information from Windows, as well as FTP credentials. 
  1. BlackCat – BlackCat (aka ALPHV) operates in a ransomware-as-a-service (RaaS) business model. BlackCat ransomware is highly customizable ransomware that allows for attacks on a wide range of corporate environments. It targets both Linux and Windows systems, and is coded in Rust.

Top Attacked Industries in Africa

Last month, Manufacturing remained the most attacked industry globally, followed by Consultant and then Leisure/Hospitality.

  1. Manufactoring
  2. Consultant
  3. Leisure/Hospitality

Top exploited vulnerabilities

Last month, “Apache Log4j Remote Code Execution” was the most exploited vulnerability, impacting 44% of organizations globally, followed by “HTTP Headers Remote Code Execution” with 43% of organizations worldwide and “MVPower DVR Remote Code Execution” with a global impact of 40%.

  1. ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
  1. ↑ HTTP Headers Remote Code Execution (CVE-2020-10826,CVE-2020-10827,CVE-2020-10828,CVE-2020-13756) – HTTP headers let the client and the server pass additional information with an HTTP request. A remote attacker may use a vulnerable HTTP Header to run arbitrary code on the victim machine.
  1. ↑MVPower DVR Remote Code Execution – A remote code execution vulnerability exists in MVPower DVR devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request.

Top Mobile Malwares

Last month, Ahmyth moved to the top spot as the most prevalent mobile malware, followed by Anubis and Hiddad.

  1. AhMyth – AhMyth is a Remote Access Trojan (RAT) discovered in 2017. It is distributed through Android apps that can be found on app stores and various websites. When a user installs one of these infected apps, the malware can collect sensitive information from the device and perform actions such as keylogging, taking screenshots, sending SMS messages, and activating the camera.
  1. Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger, audio recording capabilities and various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
  1. Hiddad – Hiddad is an Android malware which repackages legitimate apps and then releases them to a third-party store. Its main function is to display ads, but it can also gain access to key security details built into the OS.

Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research Arm of Check Point Software Technologies.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

How Moniepoint’s Founders, Tosin Eniolorunda and Felix Ike are Redefining African Tech and Finance

Published

on

Kindly share this post

In an era where global tech giants dominate headlines, two Nigerian entrepreneurs are quietly revolutionizing financial services across Africa, proving that world-class innovation can emerge from homegrown talent and local institutions.

Tosin Eniolorunda and Felix Ike, co-founders of Moniepoint Inc, have built one of Africa’s fastest-growing fintech companies, not despite their exclusively Nigerian education, but in many ways, because of it.

Their journey from the lecture halls of Obafemi Awolowo University and the University of Lagos to the TIME100 Most Influential Companies list stands as a powerful testament to the caliber of talent nurtured within Nigerian universities and the transformative potential of locally-rooted vision.

Tosin Eniolorunda’s path exemplifies how Nigerian educational institutions can cultivate entrepreneurial excellence. After earning his degree in Mechanical Engineering from Obafemi Awolowo University, he didn’t follow the well-trodden path abroad but instead chose to build solutions for Nigerian challenges within Nigeria itself. This decision proved prescient.

Understanding the unique financial ecosystem and infrastructure gaps firsthand from the work at TeamApt Ltd where they were building from majority of the country’s banks, Tosin pioneered several industry firsts: introducing instant POS transfers to Nigeria, launching the country’s first virtual account services, and constructing a vertically integrated payments processing switch with full switching and processing licenses.

These feats and technological achievements must be viewed from the prism that these were deeply contextual innovations born from intimate knowledge of local needs, the kind of understanding that comes from being educated and embedded in the communities one serves.

Felix Ike’s contribution complements this vision with technical brilliance equally rooted in Nigerian educational excellence. Graduating with first-class honors in Computer Science from the University of Lagos, Felix brought to Moniepoint the kind of engineering rigor required to build mission-critical financial infrastructure.

As Chief Technology Officer, he has architected systems that are not just functional but scalable, resilient, and secure enough to serve over 10 million businesses and individuals across Nigeria and Africa. His work demonstrates that Nigerian universities are producing software engineering leaders capable of building world-class technology that can compete on the global stage with technology that processes millions of transactions daily and underpins the financial dreams of an entire continent.

Since its founding in 2015, Moniepoint has evolved into Africa’s largest distributor of financial services in Nigeria, with presence across all 774 local government areas. The company’s all-in-one financial ecosystem offering seamless payments, banking, credit, and business management solutions reflects a sophisticated understanding of what African businesses and individuals actually need to thrive.

The accolades have followed: recognition by TIME as one of the 100 Most Influential Companies in 2025, listing among CNBC’s top UK fintech firms, and ranking in the Financial Times’ Africa’s Fastest-Growing Companies for three consecutive years.

The Moniepoint story as an indigenously rooted but globally compliant player challenges prevailing narratives about where innovation must originate and what credentials are necessary for building transformative companies. Tosin and Felix’s success illustrates that Nigerian universities, when their graduates are empowered with vision, opportunity, and determination, can produce founders who don’t just participate in the global economy but reshape it.


Kindly share this post
Continue Reading

News

FIRS Declares NIN, CAC Numbers as Tax IDs from 2026

Published

on

Kindly share this post

Federal Inland Revenue Service (FIRS) has announced that the National Identification Number (NIN) issued by the National Identity Management Commission (NIMC) will automatically serve as the Tax Identification Number (Tax ID) for all Nigerian citizens, while registered businesses will use their Corporate Affairs Commission (CAC) registration numbers.

FIRS Declares NIN, CAC Numbers as Tax IDs from 2026

FIRS

The disclosure was made during a public awareness campaign on the new tax laws posted on X (formerly Twitter) on Monday.

According to the Service, the Nigeria Tax Administration Act (NTAA), which comes into force in January 2026, mandates the use of Tax IDs for certain financial and commercial transactions, including bank account ownership.

FIRS explained that the measure is part of efforts to unify all previously issued Tax Identification Numbers (TINs) by both the federal and state revenue services into a single identifier.

“For individuals, your NIN automatically serves as your Tax ID, while for registered companies, your CAC RC number is used. You do not need a physical card; the Tax ID is a unique number linked directly to your identity,” the Service stated.

The agency noted that the requirement has been in place since the Finance Act of 2019 but has now been strengthened under the NTAA to ensure compliance and ease of administration.

Officials emphasized that the reform would simplify tax processes, reduce duplication, and improve transparency in Nigeria’s tax system.

The Service added that the integration of NIN and CAC numbers into the tax framework would also enhance data accuracy, curb tax evasion, and streamline the monitoring of taxable activities across the country.

Tax experts have described the development as a significant step toward modernizing Nigeria’s revenue administration, noting that it aligns with global best practices where national identity systems are linked to tax compliance.

The FIRS urged Nigerians to ensure that their NINs and CAC registration details are up-to-date, stressing that the identifiers would be required for transactions such as property purchases, contract awards, and access to certain financial services once the NTAA takes effect


Kindly share this post
Continue Reading

News

US Begins Partial Visa Ban on Nigerians January 1

Published

on

Kindly share this post

The United States will begin a partial suspension of visa issuance to Nigerians from January 1, 2026, following a new presidential proclamation aimed at strengthening border and national security.

US Begins Partial Visa Ban on Nigerians January 1

The US Mission in Nigeria announced on Monday that the restriction will take effect at 12:01 a.m. Eastern Standard Time in accordance with Presidential Proclamation 10998, titled ‘Restricting and Limiting the Entry of Foreign Nationals to Protect the Security of the United States.’

According to the mission, Nigeria is one of 19 countries affected by the measure.

Others listed are Angola, Antigua and Barbuda, Benin, Burundi, Cote d’Ivoire, Cuba, Dominica, Gabon, The Gambia, Malawi, Mauritania, Senegal, Tanzania, Togo, Tonga, Venezuela, Zambia and Zimbabwe.

The proclamation provides for a partial suspension of visa issuance covering nonimmigrant B-1/B-2 visitor visas, as well as F, M and J student and exchange visitor visas.

It also applies to immigrant visas, though with limited exceptions.

The statement read in part, “Effective January 1, 2026, at 12:01 a.m. EST, in line with Presidential Proclamation 10998 on “Restricting and Limiting the Entry of Foreign Nationals to Protect the Security of the United States,” the Department of State  is partially suspending visa issuance to nationals of 19 countries – Angola, Antigua and Barbuda, Benin, Burundi, Cote D’Ivoire, Cuba, Dominica, Gabon, The Gambia, Malawi, Mauritania, Nigeria, Senegal, Tanzania, Togo, Tonga, Venezuela, Zambia, and Zimbabwe – for nonimmigrant B-1/B-2 visitor visas and F, M, J student and exchange visitor visas, and all immigrant visas with limited exceptions.”

US officials clarified that the policy does not apply to all travellers. Exemptions include immigrant visas for ethnic and religious minorities facing persecution in Iran, dual nationals applying with passports from countries not affected by the suspension, and Special Immigrant Visas for eligible US government employees.

Other exempted categories include lawful permanent residents of the United States and participants in certain major international sporting events.

The US government emphasised that the proclamation applies only to foreign nationals who are outside the United States on the effective date and who do not hold a valid US visa as of January 1, 2026.

“Foreign nationals, even those outside the United States, who hold valid visas as of the effective date are not subject to Presidential Proclamation 10998. No visas issued before January 1, 2026, at 12:01 a.m. EST, have been or will be revoked pursuant to the Proclamation,” the statement added.

Visa applicants from affected countries may continue to submit applications and attend interviews. However, the US Mission noted that such applicants “may be ineligible for visa issuance or admission to the US” under the new rules.

The announcement comes amid a series of recent US policy decisions that have raised concerns among Nigerians seeking to travel, study or migrate to the country.

In October, the United States added Nigeria back to its list of countries accused of violating religious freedom, citing persistent insecurity and attacks on Christian communities. This was followed by Nigeria’s inclusion on a revised US travel ban list that imposed partial entry restrictions on Nigerians.

The US has also tightened immigration and visa policies affecting Nigerians. Earlier this year, the validity of most non-immigrant visas issued to Nigerians was reduced to single-entry visas with a three-month duration.

 


Kindly share this post
Continue Reading

Trending