News
Check Point Research Reveals XLoader as August’s Top Malware in Nigeria

Check Point Research (CPR), the Threat Intelligence arm of Check Point® Software Technologies, a provider of cyber security solutions globally, has published its latest Global Threat Index for August 2022.
In Nigeria, XLoader is the most widespread malware this month impacting 14.47% of organisations in the country, followed by Phorpiex and Guloader both with 6.58%.
Globally, CPR reports that FormBook is now the most prevalent malware, taking over from Emotet, which has held that position since its reappearance in January.
FormBook is an Infostealer targeting Windows OS which, once deployed, can harvest credentials, collect screenshots, monitor and log keystrokes as well as download and execute files according to its command and control (C&C) orders.
Since it was first spotted in 2016, it has continued to make a name for itself, marketed as a Malware as a Service (MaaS) in underground hacking forums, known for its strong evasion techniques and relatively low price.
August also saw a rapid increase in GuLoader activity, which resulted in it being the fourth most widespread malware. GuLoader was initially used to download Parallax RAT but has since been applied to other remote access trojans and infostealers such as Netwire, FormBook and Agent Tesla.
It is commonly distributed through extensive email phishing campaigns, that lure the victim into downloading and opening a malicious file, allowing the malware to get to work.
Additionally, Check Point Research reports that Joker, an Android spyware, is back in business and has claimed third place in the top mobile malware list this month. Once Joker is installed, it can steal SMS messages, contact lists and device information as well as sign the victim up for paid premium services without their consent. Its rise can partially be explained by an uplift in campaigns as it was recently spotted to be active in some Google Play Store applications.
“The shifts that we see in this month’s index, from Emotet dropping from first to fifth place to Joker becoming the third most prevalent mobile malware, is reflective of how fast the threat landscape can change” said Maya Horowitz, VP Research at Check Point Software.
“This should be a reminder to individuals and companies alike, of the importance of keeping up to date with the most recent threats as knowing how to protect yourself is essential.
“Threat actors are constantly evolving and the emergence of FormBook shows that we can never be complacent about security and must adopt a holistic, prevent-first approach across networks, endpoints and the cloud.”
CPR also revealed this month that the Education/Research sector is still the most targeted industry by cybercriminals globally. With Government/Military and Healthcare taking second and third place as the most attacked sectors.
“Apache Log4j Remote Code Execution” returns to first place as the most exploited vulnerability, impacting 44% of organizations worldwide, after overtaking “Web Server Exposed Git Repository Information Disclosure” which had an impact of 42%.
Top malware families
*The arrows relate to the change in rank compared to the previous month.
FormBook is the most widespread malware this month impacting 5% of organizations worldwide, followed by AgentTesla with an impact of 4% and XMRig with 2%.
- XLoader – XLoader is an Android Spyware and Banking Trojan developed by the Yanbian Gang, a Chinese hacker group. This malware uses DNS spoofing to distribute infected Android apps to collect personal and financial information..
- Phorpiex – Phorpiex is a botnet (aka Trik) that has been active since 2010 and at its peak controlled more than a million infected hosts. It is known for distributing other malware families via spam campaigns as well as fueling large-scale spam and sextortion campaigns.
- Guloader – GuLoader is a downloader that has been widely used since December 2019. When it first appeared, GuLoader was used to download Parallax RAT but has been applied to other remote access trojans and info-stealers such as Netwire, FormBook, and Agent Tesla.
Top Attacked Industries Globally
This month the Education/Research sector remained in first place as the most attacked industry globally, followed by Government/Military and Healthcare.
- Education/Research
- Government/Military
- Healthcare
Top Exploited Vulnerabilities
This month, “Apache Log4j Remote Code Execution” is the most common exploited vulnerability, impacting 44% of organizations globally, followed by “Web Server Exposed Git Repository Information Disclosure” which dropped from first place to second with an impact of 42%. “Web Servers Malicious URL Directory Traversal” remains in the third place, with a global impact of 39%.
- ↑ Apache Log4j Remote Code Execution (CVE-2021-44228) – A remote code execution vulnerability exists in Apache Log4j. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system.
- ↓ Web Server Exposed Git Repository Information Disclosure – An information disclosure vulnerability has been reported in Git Repository. Successful exploitation of this vulnerability could allow unintentional disclosure of account information.
- ↔ Web Servers Malicious URL Directory Traversal (CVE-2010-4598,CVE-2011-2474,CVE-2014-0130,CVE-2014-0780,CVE-2015-0666,CVE-2015-4068,CVE-2015-7254,CVE-2016-4523,CVE-2016-8530,CVE-2017-11512,CVE-2018-3948,CVE-2018-3949,CVE-2019-18952,CVE-2020-5410,CVE-2020-8260) – There exists a directory traversal vulnerability on different web servers. The vulnerability is due to an input validation error in a web server that does not properly sanitize the URI for the directory traversal patterns. Successful exploitation allows unauthenticated remote attackers to disclose or access arbitrary files on the vulnerable server.
Top Mobile Malwares
This month AlienBot is the most prevalent Mobile malware, followed by Anubis and Joker.
- AlienBot – AlienBot is a banking Trojan for Android, sold underground as a Malware-as-a-Service (MaaS). It supports keylogging, dynamic overlays for credentials theft, as well as SMS harvesting for 2FA bypass. Additional remote control capabilities are provided by using a TeamViewer module.
- Anubis – Anubis is a banking Trojan malware designed for Android mobile phones. Since it was initially detected, it has gained additional functions including Remote Access Trojan (RAT) functionality, keylogger and audio recording capabilities as well as various ransomware features. It has been detected on hundreds of different applications available in the Google Store.
- Joker – An Android Spyware in Google Play, designed to steal SMS messages, contact lists and device information. Furthermore, the malware can also sign the victim up for paid premium services without their consent or knowledge.
Check Point’s Global Threat Impact Index and its ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence. ThreatCloud provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints and mobiles. The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, The Intelligence & Research Arm of Check Point Software Technologies.
News
NIA Questions Legality of Reps’ Financial Probe

The Nigerian Insurers Association has urged the House Committee on Capital Market and Institutions to respect the constitutional separation of powers as it carries out a probe on over 20 insurance firms.
In a statement on Tuesday night, the Director General/Chief Executive Officer of NIA, Mrs Bola Odukale, said the decision of NIA and the affected firms to approach the court was to seek clarity on the constitutional limits of the House Committee’s probe.
It would be recalled that the House of Representatives on Monday is investigating no fewer than 25 insurance companies operating in the country for various financial infractions spanning financial reporting, claims settlement, premium remittance, and issuance of policies.
The Chairman, House Sub-Committee on Capital Market and Institutions, Kwamoti Laori, during a meeting with the management of the insurance companies at the National Assembly Complex in Abuja, said the meeting was convened following the receipt of a petition on infractions by the insurance companies.
In the statement, Odukale said, “The Association wishes to state unequivocally that all actions taken by the NIA and the affected member companies in response to the Committee’s invitations and pronouncements were based entirely on legal advice by its Solicitors. It was on the firm instruction of legal counsel that recourse was made to the courts.
“The objective of approaching the Court is to seek judicial guidance on the legality, propriety, and constitutional limits of the Committee’s intervention in order to safeguard institutional integrity, uphold regulatory independence, and ensure that legislative oversight remains within the bounds of law.
“The Court action seeks to determine whether the current posture of the Committee reflects an exercise of legislative judgment, which, by constitutional design, is the exclusive province of statutory regulators, such as the National Insurance Commission, Securities and Exchange Commission, Nigerian Exchange, Financial Reporting Council, Nigeria Data Protection Commission, and the National Information Technology Development Agency.
“This raises serious questions about legislative overreach and an erosion of the doctrine of separation of powers, a cornerstone of Nigeria’s constitutional democracy.”
Odukale maintained that the NIA was committed to lawful and constructive engagement with all arms of government, provided that such engagement respects the autonomy of statutory regulators and the boundaries established by the Constitution.
“The NIA will continue to provide its full support to all member companies while upholding the principles of legal compliance and sector-wide integrity,” Odukale concluded.
17 of the companies that went to court were represented by their lawyer, Mr Abimbola Kayode, at the meeting with the committee.
News
Horn of Africa Leaders Seek Enhanced Digital Integration for Increased Regional Growth

Finance ministers and development partners from the Horn of Africa have called for enhanced digital integration to boost trade, drive economic growth and promote regional stability during the 25th Ministerial Meeting of the Horn of Africa Initiative (HoAI).
Held in Nairobi, on July 14, the meeting was co-chaired by the African Development Bank’s Vice President for Regional Development, Integration and Business Delivery, Nnenna Nwabufo and Somalia’s Minister of Finance, Bihi Iman Egeh. Discussions underscored the critical role of digital integration in reducing trade barriers, boosting government service delivery and creating employment — particularly for the region’s youth.
“Digital technologies are shaping today’s economy and tomorrow’s industries. By embedding these technologies into our programs, we can not only improve inclusion but also leapfrog outdated development models,” said Nwabufo.
She called for digital integration a “central enabler” in each of the Horn of Africa Initiative’s pillars – trade, infrastructure, resilience, and human capital,
Learning through experience
Drawing from global and regional success stories, speakers highlighted the transformative potential of technology-led development. The ministers pointed to the Philippines as a strong example, where ICT has generated millions of jobs in business process outsourcing. Similarly, Kenya’s fintech innovation—especially the success of M-PESA—was cited as a model for scaling digital financial services across the region.
Participants urged governments to proactively foster digital ecosystems by capitalizing on the demographic dividend, identifying infrastructure upgrades, tighter regulatory reforms, and digital skills trainings as priorities to enable broader participation in the digital economy.
Minister Egeh reiterated the need for more coordinated regional efforts to create the enabling environment required for accelerated digital integration and expansion. He referenced the HoAI Digital Policy Matrix, adopted in 2023 which provides a blueprint on how to address key obstacles to achieving effective digital integration across the region.
Barack Makokha, Kenya’s Cabinet Secretary for National Treasury, underscored the importance of regionally-aligned public private partnerships and advocated for blended financing to reduce investment risk and expand digital access in underserved areas.
World Bank Vice President for Eastern and Southern Africa, Ndiame Diop, called for a comprehensive multi-pronged approach, combining cross-border coordination, large-scale financing, robust policy support, and digital infrastructure investments. He pointed out that such measures could transform digital integration into, “a powerful engine of economic transformation” for the Horn of Africa—ensuring no one is left behind in the digital era.
The meeting concluded with a shared recognition that sustained political will and the determination to implement a multifaceted approach are essential to unlocking the region’s economic potential and driving long-term growth.
The event also welcomed observers from the East African Community, Agence française de développement, and Shelter Afrique, reflecting strong regional and international backing for the HoAI in the development community.
News
CSCS Inaugurates Custodian Portal to Enhance Digital Access, Operational Efficiency

Central Securities Clearing System Plc (CSCS), Nigeria’s capital market infrastructure provider, has launched its Custodian Portal, a user-centric digital solution designed to optimise custodian operations through intuitive, secure and efficient features.
Haruna Jalo-Waziri, Chief Executive Officer (CEO), CSCS, announced this in a statement on Monday.
The CSCS is a Public Limited Company with a diversified shareholder base, which serves as the Central Securities Depository for the Nigerian Capital Market.
It serves as the Central Depository for Equities, Commercial Papers, Corporate Bonds, Sub-National Bonds, certain Sovereign Bonds like the FGN Sukuk and the FGN Savings Bond, Equity-traded Funds, Real Estate Investment Trusts, Mutual funds and Commodities.
Jalo-Waziri said that the custodian portal offered a streamlined experience for market participants with powerful tools that facilitate comprehensive portfolio and trade management, document tracking, share transfer operations, client symbol search, and real-time access to vital data.
He explained that the portal, designed to operate through a flexible subscription-based model, empowered users to manage their records effortlessly and securely through convenient payment channels such as GTPay and Paystack.
According to him, “Digital transformation remains at the core of our strategy to enhance the efficiency, transparency and accessibility of Nigeria’s capital market services.
“The custodian portal is a significant leap in that direction, offering custodians a centralised platform to manage critical processes in real-time.
“We are excited about the value this innovation brings to our stakeholders, and we will continue to evolve the platform in line with users’ needs and industry trends.”
The CEO also explained that the portal was designed with user experience in mind with feature tools like portfolio viewing and downloads in PDF or Excel format.
He further said that it also featured tracking of stock movements across date ranges, inbox messaging and request tracking, as well as robust user management capabilities including role assignment and status tracking.
Similarly, the Divisional Head, Business Technology and Digital Innovation, CSCS Plc, Tobe Nnadozie, said that the portal aligned with CSCS’s drive to automate the market.
“In addition to the normal features, the platform is a part of an omnichannel platform for custodians, and includes API services.
“It also connects to the market-wide workflow, which CSCS has built to ensure secured communication and approvals across all major stakeholders in the market.
“The platform is well secured with best-of-breed cybersecurity solutions and our SOC,” he said.
The Custodian Portal reinforces CSCS’s commitment to leveraging technology to streamline back-office functions and support a more agile, data-driven capital market ecosystem.
All custodians in the Nigerian capital market have now been successfully on-boarded on the Custodian Portal, marking a significant milestone in CSCS’s ongoing drive to enhance collaboration, standardise operational processes, and promote digital adoption across the market.
- E-Financial3 days ago
Kuda Unveils New Wallet for Multiple Currencies
- Telecom3 days ago
Telcos Resume SIM Card Sales after 2-Week Halt
- Telecom3 days ago
Nigeria, Others Achieve 84% Adult Mobile Phones Penetration
- E-Business3 days ago
How AI Alert by Airtel is Transforming Mobile Security in Africa
- E-Business3 days ago
NITDA, API Partner Against Harmful Online Content
- Telecom2 days ago
Telcos: How and Why Network Services have Been Poor
- Telecom2 days ago
Glo Launches Nigeria’s First-of-its-kind Device Protection Plan
- News3 days ago
Horn of Africa Leaders Seek Enhanced Digital Integration for Increased Regional Growth