E-Business
ChromeLoader Malware Campaign Punishes Pirating Users, HP warns
HP Inc. yesterday issued its quarterly HP Wolf Security Threat Insights Report, showing threat actors are hijacking users’ Chrome browsers if they try to download popular movies or video games from pirating websites.
By isolating threats that have evaded detection tools on PCs, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals in the fast-changing cybercrime landscape. To date, HP Wolf Security customers have clicked on over 30 billion email attachments, web pages, and downloaded files with no reported breaches.
Based on data from millions of endpoints running HP Wolf Security, the researchers found:
- The Shampoo Chrome extension is hard to wash out: A campaign distributing the ChromeLoader malware tricks users into installing a malicious Chrome extension called Shampoo. It can redirect the victim’s search queries to malicious websites, or pages that will earn the criminal group money through ad campaigns. The malware is highly persistent, using Task Scheduler to re-launch itself every 50 minutes.
- Attackers bypass macro policies by using trusted domains: While macros from untrusted sources are now disabled, HP saw attackers bypass these controls by compromising a trusted Office 365 account, setting up a new company email, and distributing a malicious excel file that infects victims with the Formbook infostealer.
- Firms must beware of what lurks beneath: OneNote documents can act as digital scrapbooks, so any file can be attached within. Attackers are taking advantage of this to embed malicious files behind fake “click here” icons. Clicking the fake icon opens the hidden file, executing malware to give attackers access to the users’ machine – this access can then be sold on to other cybercriminal groups and ransomware gangs.
Sophisticated groups like Qakbot and IcedID first embedded malware into OneNote files in January. With OneNote kits now available on cybercrime marketplaces and requiring little technical skill to use, their malware campaigns look set to continue over the coming months.
“To protect against the latest threats, we advise that users and businesses avoid downloading materials from untrusted sites, particularly pirating sites. Employees should be wary of suspicious internal documents and check with the sender before opening. Organizations should also configure email gateway and security tool policies to block OneNote files from unknown external sources,” explainsPatrick Schläpfer, Malware Analyst at the HP Wolf Security threat research team, HP Inc.
From malicious archive files to HTML smuggling, the report also shows cybercrime groups continue to diversify attack methods to bypass email gateways, as threat actors move away from Office formats. Key findings include:
- Archives were the most popular malware delivery type (42%) for the fourth quarter running when examining threats stopped by HP Wolf Security in Q1.
- There was a 37-percentage-point rise in HTML smuggling threats in Q1 versus Q4.
- There was a 4-point rise in PDF threats in Q1 versus Q4.
- There was a 6-point drop in Excel malware (19% to 13%) in Q1 versus Q4, as the format has become more difficult to run macros in.
- 14% of email threats identified by HP Sure Click bypassed one or more email gateway scanner in Q1 2023.
- The top threat vector in Q1 was email (80%) followed by browser downloads (13%).
“To protect against increasingly varied attacks, organizations must follow zero trust principles to isolate and contain risky activities such as opening email attachments, clicking on links, or browser downloads. This greatly reduces the attack surface along with the risk of a breach,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users. It also captures detailed traces of attempted infections. HP’s application isolation technology mitigates threats that might slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.
E-Business
Jumia Replatforms its Retail Media Program to Mirakl Ads to Enhance Marketplace Advertising
Jumia, e-Commerce platform in Africa, has partnered with Mirakl to elevate its marketplace advertising capabilities by deploying Mirakl Ads, a retail media solution uniquely designed to optimize performance for both first-party and third-party sellers.
This move strengthens Jumia’s efforts to deliver more value to its sellers, enhance the customer experience, and unlock profitable and sustainable new sources of revenue. Retail media is a rapidly growing sector within the e-commerce industry, expected to reach $204 billion by 2027 with a projected compound annual growth rate (CAGR) of 17.2%.
Jumia’s adoption of Mirakl Ads positions the company at the forefront of digital advertising innovation in Africa, unlocking significant opportunities to increase revenue generation. With growing usage across its platform, Jumia is well-placed to capitalize on this momentum by delivering improved advertising tools to sellers and more relevant, personalized product recommendations to customers.
“Advertising is a key growth lever in our marketplace strategy, and this partnership with Mirakl allows us to accelerate that journey with speed and scale.
“By integrating Mirakl Ads, we’re empowering our sellers with smarter tools and delivering a better, more personalized experience to our customers. It also positions us to unlock new revenue streams while deepening engagement across our platform. Importantly, this partnership supports our ambition to grow gross profit and accelerate our path to profitability,” said Francis Dufay, CEO of Jumia.
The collaboration is a testament to Mirakl’s ability to rapidly deploy enterprise-grade solutions, with Jumia launching Mirakl Ads in just two months. This showcases the platform’s ease of integration and fast time-to-value. Now live, the solution equips Jumia’s advertising ecosystem with advanced automation, AI-powered optimization, and seamless campaign management.
With Mirakl Ads, all advertisers – from the biggest brands to the smallest marketplace sellers – can now boost their sales by leveraging advertising campaigns in Ghana, Uganda, Kenya, Nigeria, Senegal, Egypt, Algeria, Morocco and Ivory Coast.
“Jumia’s decision to replatform to Mirakl Ads is a powerful validation of our platform’s ability to deliver immediate and measurable impact for leading marketplaces. By combining Mirakl’s cutting-edge retail media technology with Jumia’s deep market reach, we are enabling sellers to grow faster and customers to benefit from a more relevant, engaging experience. This partnership is a true milestone, not only for Jumia and Mirakl, but for the future of digital commerce across Africa.” said Adrien Nussenbaum, cofounder and co-CEO of Mirakl.
Through this partnership, Jumia is taking a decisive step in accelerating monetization, improving customer engagement, and advancing its long-term financial performance and profitability.
E-Business
Galaxy Backbone, Rural Electrification Agency Commit to Deepening Digital and Energy Access Across Nigeria
In a major step towards deepening Nigeria’s digital and energy infrastructure, Galaxy Backbone Limited (GBB) and the Rural Electrification Agency (REA) have signed a strategic Memorandum of Understanding (MoU) at a brief but impactful ceremony held in Abuja.
The MoU signals a collaborative effort between both agencies to enhance Nigeria’s digital transformation agenda by integrating reliable energy solutions with cutting-edge ICT infrastructure, especially in higher institutions, Government institutions, underserved and rural communities across the country.
Speaking at the event, the Managing Director/CEO of Galaxy Backbone, Professor Ibrahim A. Adeyanju, described the partnership as “a landmark moment in Nigeria’s journey towards a digitally empowered, sustainably powered, and inclusively connected nation.”
“This partnership exemplifies what is possible when two visionary government institutions come together, united by shared goals and driven by the desire to improve the lives of Nigerians everywhere,” he said.
Professor Adeyanju emphasized that while Galaxy Backbone’s core mandate is to provide secure digital infrastructure that powers government operations, reliable and sustainable energy particularly in rural areas is essential to fully actualize digital transformation.
Major highlights of the MoU include:
- Solar electrification of some of GBB’s Metro Fibre sites in Abuja by the REA.
- Powering Hostels of Higher Institutions across the country through the Fibre to Hostel Project being driven by the Federal Ministry of Communications Innovation and Digital Economy (FMCIDE).
- Support for the rollout of the 774 Local Government Digitization Initiative, beginning with six pilot Local Government Areas.
- Provision of LANs, access points, cloud services, colocation infrastructure, and temporary connectivity to enhance REA’s operational facilities nationwide.
The Managing Director of the Rural Electrification Agency Mr Abba Aliyu, in his remarks, expressed optimism that this collaboration will further bridge the digital and energy divide across Nigeria. He noted that by combining REA’s achievements in expanding energy access with GBB’s robust ICT backbone, both agencies are poised to create lasting impact across governance, education, healthcare, and entrepreneurship.
This partnership is also in direct alignment with the Renewed Hope Digital Transformation Agenda of President Bola Ahmed Tinubu, GCFR, which envisions an inclusive digital economy powered by innovation and sustainable energy.
The ceremony was attended by top management from both organizations as well as members of the media.
With today’s signing, Galaxy Backbone and the Rural Electrification Agency have set the tone for stronger, smarter, and more inclusive public service delivery powered by strategic inter-agency collaboration.
National Identity Management Commission (NIMC) has announced the restoration of its National Identification Number (NIN) verification services nationwide.
This, according to the commission, follows the completion of a system maintenance exercise.
In a statement issued on Friday, the NIMC confirmed that all previously disrupted services have resumed.
“NIMC wishes to inform the general public that the recent technical maintenance has been completed and all services have been restored,” the statement read.
The NIMC urged Nigerians seeking to enroll for NIN to visit the its official website to locate the nearest enrollment centers.
The agency also encouraged individuals to make use of its self-service portal for tasks such as data modification, including name changes.
To further ease the verification process, the Commission recommended downloading the NIMC NameAuth app (oath.app) from the Google Play Store or Apple App Store for quick and secure NIN authentication.
NIMC expressed appreciation for the public’s patience during the service disruption, which had impacted banks, telecom providers, and government agencies that rely on NIN verification for their operations.
4 Dead, 20 Others Injured as Fire Engulfs Cairo Data Centre
EFCC Re-Arraigns Echefu, TStv CEO for Allegedly Defrauding Ex-Minister of N1Bn, $1.3m
FG Declares Admissions outside CAPS Illegal
Nigeria Loses over N200Bn from SSB Tax Annually – CAPPA
Jumia Replatforms its Retail Media Program to Mirakl Ads to Enhance Marketplace Advertising
Telecom2 days agoY’ello Care’s 21-Day Campaign Bridges Digital Divide for Thousands Nationwide
General News2 days agoEnugu Air Commences Operations Today
E-Business2 days agoGalaxy Backbone, Rural Electrification Agency Commit to Deepening Digital and Energy Access Across Nigeria
Broadcasting2 days agoNDPC Slaps Multichoice with ₦766M Fine for Data Privacy Violations
News2 days agoLagos-Calabar Highway Gets $100M Push from ECOWAS to Drive Regional Growth
Telecom2 days ago20 Years of Digital Leadership: Layer3’s Legacy and the Road Ahead
News2 days agoNBS May Release Rebased Figures for Nigerian Economy July 11
Telecom1 day agoNCC Wins Global ICT Award for Digital Awareness in Schools