E-Business
Firm Discovers Sophisticated Chrome Zero-day Exploit Used in Active Attacks
Kaspersky has identified and helped patch a sophisticated zero-day vulnerability in Google Chrome (CVE-2025-2783) that allowed attackers to bypass the browser’s sandbox protection system.
The exploit, discovered by Kaspersky’s Global Research and Analysis Team (GReAT), required no user interaction beyond clicking a malicious link and demonstrated exceptional technical complexity. Kaspersky researchers have been acknowledged by Google for discovering and reporting this vulnerability.
In mid-March 2025, Kaspersky detected a wave of infections triggered when users clicked personalised phishing links delivered via email. After clicking, no additional action was needed to compromise their systems.
Once Kaspersky’s analysis confirmed that the exploit leveraged a previously unknown vulnerability in the latest version of Google Chrome, Kaspersky swiftly alerted Google’s security team. A security patch for the vulnerability was released on March 25, 2025.
Kaspersky researchers dubbed the campaign “Operation ForumTroll”, as attackers sent personalised phishing emails inviting recipients to the “Primakov Readings” forum. These lures targeted media outlets, educational institutions, and government organisations in Russia.
The malicious links were extremely short-lived to evade detection, and in most cases ultimately redirected to the legitimate website for “Primakov Readings” once the exploit was taken down.
The zero-day vulnerability in Chrome was only part of a chain that included at least two exploits: a still-unobtained remote code execution (RCE) exploit that apparently launched the attack, while the sandbox escape discovered by Kaspersky constituted the second stage. Analysis of the malware’s functionality suggests the operation was designed primarily for espionage. All evidence points to an Advanced Persistent Threat (APT) group.
“This vulnerability stands out among the dozens of zero-days we’ve discovered over the years,” said Boris Larin, principal security researcher at Kaspersky GReAT. “The exploit bypassed Chrome’s sandbox protection without performing any obviously malicious operations – it’s as if the security boundary simply didn’t exist.
The technical sophistication displayed here indicates development by highly skilled actors with substantial resources. We strongly advise all users to update their Google Chrome and any Chromium-based browser to the latest version to protect against this vulnerability.”
Google has credited Kaspersky for uncovering and reporting the issue, reflecting the company’s ongoing commitment to collaboration with the global cybersecurity community and ensuring user safety.
Kaspersky continues to investigate Operation ForumTroll. Further details, including a technical analysis of the exploits and malicious payload, will be released in a forthcoming report once Google Chrome user security is assured.
Meanwhile, all Kaspersky products detect and protect against this exploit chain and associated malware, ensuring users are shielded from the threat.
This discovery follows Kaspersky GReAT’s previous identification of another Chrome zero-day (CVE-2024-4947), which was exploited last year by the Lazarus APT group in a cryptocurrency theft campaign.
In that case, Kaspersky researchers found a type confusion bug in Google’s V8 JavaScript engine that enabled attackers to bypass security features through a fake cryptogame website.
Nigerian Copyright Commission (NCC) has pledged to enforce its legal obligations to combat online intellectual property infringement and urged commercial music users to obtain proper licences from rights holders or their representatives.
The Commission stated that this ensures creators are fairly compensated, supporting the music industry’s sustainable growth.
In a statement commemorating the 2025 World Intellectual Property Day, themed “IP and Music: Feel the Best of IP,” the NCC announced plans to enforce the Copyright Act 2022, which allows for the takedown of infringing materials and blocking of websites hosting illegal content.
Signed by Mrs Ijeoma Egbunike, director of Public Affairs, the statement outlined an aggressive anti-piracy campaign in collaboration with the private sector, targeting the online environment.
Egbunike affirmed the NCC’s commitment to establishing enforceable standards for transparency, digital audits, and real-time royalty reporting to protect creators’ rights. She stated, “The NCC will continue to champion policies that support the growth of the music industry, improve the livelihoods of Nigerian musicians, and foster a culture of creativity and respect for intellectual property.”
Despite the global success of Afrobeats and other Nigerian genres, the NCC noted that many musicians face low royalty returns due to rampant digital piracy.
To address this, the Commission revised its Collective Management Regulations to enhance transparency and accountability among Collective Management Organisations (CMOs).
The NCC emphasised that proper licensing is a legal obligation and vital for Nigeria’s creative economy, stating, “Music must feel the beat of intellectual property for the full potential of creativity to be realised.”
The Commission highlighted that creators’ livelihoods depend on fair royalty compensation.
Recent enforcement measures include the NCC’s designation by the Attorney-General of the Federation as an authority under the Proceeds of Crime (Recovery and Management) Act 2022.
This, combined with the Copyright Act 2022, empowers the NCC to order takedowns and block illegal music distribution websites.
The Federal Government, has warned Nigerians against the growing threat of cyber slavery within the West African sub-region.
The Ministry of Foreign Affairs, in a statement issued in Abuja by Kimiebi Imomotimi Ebienfa, acting spokesperson, noted with grave concern the alarming rise of cyber slavery across parts of West Africa, targeting Nigerian citizens, particularly vulnerable youths.
The government said many young Nigerians, including underage teenagers, were lured out of the country under the false promise of lucrative employment opportunities abroad, particularly in crypto-related operations.
According to the government, “In reality, these individuals are trafficked into sophisticated scam operations and enslaved to work in criminal “call centres” — often referred to as “419 cyber-scam factories.” There, they are forced under coercive and inhumane conditions to send thousands of fraudulent emails, text messages, and calls aimed at defrauding victims worldwide.”
The government also noted with dismay, a recent incident where the Economic and Organised Crimes Office (EOCO) in Accra, Ghana, rescued and detained a group of Nigerians forced to engage in cybercrime activities under inhumane conditions.
“This incident highlights the severe exploitation and abuse associated with cybercrime operations. It also underscores the need for enhanced efforts to combat such multibillion-dollar criminal networks and mitigate the susceptibility of victims.
“The Ministry strongly warns all Nigerians, especially the youths and parents, to exercise the utmost caution when presented with job offers, particularly those promising easy money, overseas travel, or remote work involving cryptocurrencies.
“Nigerians are therefore advised to verify all employment offers through official channels and report suspicious cases to relevant authorities for necessary investigation and action to curtail the activities of the perpetrators.
“The Ministry wishes to assure the general public that, as a precautionary measure to address this unfortunate situation, the Federal Government is working closely with regional partners, law enforcement agencies, and international organizations to tackle this heinous crime, rescue victims, and bring perpetrators to justice.
“The Ministry remains committed to protecting Nigerian citizens at home and abroad and will continue to raise awareness about emerging threats to the welfare and dignity of our people,” the statement read.
E-Business
ALX Nigeria Launches 2025 Ventures Incubator, Premieres Pan-African “Do Hard Things” Finale
ALX Nigeria is once again proving that when African talent meets the right opportunity, magic happens. In a celebration of innovation, grit, and ambition, ALX officially launched its 2025 Ventures Incubator Cohort, an elite group of startup founders handpicked from across the country, while simultaneously premiering the grand finale of the pan-African “Do Hard Things Challenge” at its Lagos hub.
From tech founders solving community challenges to creatives turning ideas into global solutions, ALX is backing the bold and building the infrastructure to help them scale. The ALX Ventures Incubator is the next big leap for graduates of the Founder Academy, providing them with hands-on mentorship, investor access, and the resources to grow sustainable businesses that shape the future of the continent.
“The launch of the ALX Ventures Incubator is proof of our unwavering commitment to building the infrastructure for African innovation to thrive,” said Ruby Igwe, Country General Manager at ALX Nigeria. “We witnessed incredible potential at our Founder Academy, and this next step ensures that these promising startups receive the support they need to grow into high-impact ventures. It’s about translating potential into lasting impact.”
These new ventures are powered by the same spirit that drove the Do Hard Things Challenge—a bold initiative that saw ALX travel to eight African cities in search of the continent’s most inspiring entrepreneurs. The final stop? Mauritius, where top finalists pitched in a high-stakes finale, now screened live for the Lagos tech and media community.
The challenge took ALX across Lagos, Nairobi, Johannesburg, Kigali, Accra, Cairo, Casablanca, and Addis Ababa, shining a spotlight on resilience, creativity, and unstoppable drive.
“The ‘Do Hard Things Challenge’ embodies the spirit we cultivate at ALX: resilience, ambition, and the courage to tackle complex problems,” said Joshua Ebinabo, ALX Ventures Country Entrepreneurship Development Manager.
“Showcasing the finale from Mauritius here in Lagos connects our local innovators to the broader African story. It inspires our learners, reassures parents about the future of tech, and shows business leaders the investment-ready talent right here in our ecosystem.”
The event brought together founders, business leaders, creators, and media influencers—all gathered to witness what happens when African talent is seen, celebrated, and supported. The energy was electric, the vision was bold, and the mission was clear: empower Africa’s brightest minds to build global solutions from right here on the continent.
Whether you’re a startup founder looking to scale or a dreamer looking for your big break, ALX continues to be the launchpad for Africa’s digital and entrepreneurial revolution.
Learn more about ALX’s tech and business programmes at alxafrica.ng, and follow the movement on YouTube, TikTok, LinkedIn, and Instagram via @alxnigeria.
AFC Appoints Ireti Samuel-Ogbu as Chair of Board of Directors
FG to Sanction Airports Without Permits from January 2026
CBN Urges Banks to Source FX for PAPSS Settlement Through NFEM
FIRS Orders Banks to Close Unauthorised Tax Collection Accounts
NBC Loses Appeal as Tribunal Upholds ₦190m Fine for Misleading Packaging
Telecom2 days agoMeta Challenges Nigerian Tribunal’s $220M Fine over Data Breaches
Broadcasting2 days agoAI and Cybersecurity: Balancing Innovation with Caution
E-Financial2 days agoSupreme Court Sets Aside N22 Trillion Judgement against Union Bank
E-Business2 days agoFG Warns Nigerians Against Growing Threat of Cyber Slavery in West Africa
News2 days agoEFCC Bans Cash above $10,000 from Leaving Nigeria without Declaration
E-Financial2 days agoUBA Envisions Footprint in over 100 Countries
Telecom14 hours agoMTN’s Talent Hunt Returns: A Stage for Nigeria’s Next Creative Stars
E-Business2 days agoNCC Vows to Tackle Online Infringement, Block Illegal Music Websites