E-Business
HP Q3 Wolf Security Report Shows What is Helping Threat Actors Hoodwink Detection Tools
HP Inc. issued its third quarter HP Wolf Security Threat Insights Report, finding that archive file formats – such as ZIP and RAR files – were the most common file type for delivering malware, surpassing Office files for the first time in three years.
This report provides an analysis of real-world cyberattacks, helping organizations to keep up with the latest techniques cybercriminals use to evade detection and breach users in the fast-changing cybercrime landscape.
Based on data from millions of endpoints running HP Wolf Security, the research found 44% of malware was delivered inside archive files – an 11% rise on the previous quarter – compared to 32% delivered through Office files such as Microsoft Word, Excel, and PowerPoint.
The report identified several campaigns that were combining the use of archive files with new HTML smuggling techniques – where cybercriminals embed malicious archive files into HTML files to bypass email gateways – to then launch attacks.
For example, recent QakBot and IceID campaigns used HTML files to direct users to fake online document viewers that were masquerading as Adobe. Users were then instructed to open a ZIP file and enter a password to unpack the files, which then deployed malware onto their PCs.
As the malware within the original HTML file is encoded and encrypted, detection by email gateway or other security tools is very difficult.
Instead, the attacker relies on social engineering, creating a convincing and well-designed web page to fool people into initiating the attack by opening the malicious ZIP file. In October, the same attackers were also found using fake Google Drive pages in an ongoing effort to trick users into opening malicious ZIP files.
“Archives are easy to encrypt, helping threat actors to conceal malware and evade web proxies, sandboxes, or email scanners. This makes attacks difficult to detect, especially when combined with HTML smuggling techniques.
“What was interesting with the QakBot and IceID campaigns was the effort put in to creating the fake pages – these campaigns were more convincing than what we’ve seen before, making it hard for people to know what files they can and can’t trust,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
HP also identified a complex campaign using a modular infection chain, which could potentially enable attackers to change the payload – such as spyware, ransomware, keylogger – mid-campaign, or to introduce new features, like geo-fencing.
This could enable an attacker to change tactics depending on the target they have breached. By not including malware directly in the attachment sent to the target, it is also harder for email gateways to detect this type of attack.
“As shown, attackers are constantly switching up techniques, making it very difficult for detection tools to spot,” comments Dr Ian Pratt, Global Head of Security for Personal Systems, HP Inc. “By following the Zero Trust principle of fine-grained isolation, organizations can use micro-virtualization to make sure potentially malicious tasks – like clicking on links or opening malicious attachments – are executed in a disposable virtual machine separated from the underlying systems.
“This process is completely invisible to the user, and traps any malware hidden within, making sure attackers have no access to sensitive data and preventing them from gaining access and moving laterally.”
HP Wolf Security runs risky tasks like opening email attachments, downloading files and clicking links in isolated, micro-virtual machines (micro-VMs) to protect users, capturing detailed traces of attempted infections.
HP’s application isolation technology mitigates threats that can slip past other security tools and provides unique insights into novel intrusion techniques and threat actor behavior.
By isolating threats on PCs that have evaded detection tools, HP Wolf Security has specific insight into the latest techniques being used by cybercriminals. To date, HP customers have clicked on over 18 billion email attachments, web pages, and downloaded files with no reported breaches.
National Identity Management Commission (NIMC) yesterday said that it has mandated security agencies to arrest and prosecute Nigerians printing what it described as ‘NIN cards’ ahead of its planned General Multipurpose Card (GMPC).
NIMC in a statement by Kayode Adegoke, head, Corporate Communications Unit, reiterated that the NIN slip is the only legal document authorized as a means of identification.
NIMC said it has observed that “some unscrupulous individuals, cyber cafes, and organizations” are indiscriminately printing unauthorized NIN cards and charging unsuspecting members of the public exorbitant fees.
Such activities, it warned, are a direct violation of the NIMC Act No. 23 of 2007.
NIMC urged the public and organizations to refrain from printing or accepting these unauthorized cards, emphasising that they are not legally recognised.
On no account should these counterfeit NIN cards be presented as valid means of identification.
The security agencies have been notified and mandated to apprehend those involved, with offenders set to face legal consequences.
The commission reaffirmed that the only valid document for identification is the NIN slip, which must be verified before accessing services.
To address public demand, NIMC has concluded plans to launch the Improved GMPC, a multifunctional card serving as both a physical identification document and a payment card, powered by the AfriGO local payment platform.
By Kehinde Ogundare, Country Head, Zoho Nigeria
Nigeria’s entrepreneurial spirit is undeniable. Amidst a dynamic and competitive market, businesses are brimming with potential, poised to become regional and even global powerhouses. However, realising this potential requires navigating a challenging landscape—one marked by limited IT resources, complex operational hurdles, and the inertia of traditional business practices. For Nigerian businesses, the path to sustainable growth lies in digital transformation, with cloud-based technologies serving as a key enabler.
With a burgeoning middle class and a tech-savvy population, Nigeria offers fertile ground for innovation and expansion. Yet, many businesses remain tethered to manual processes, limiting their ability to scale and compete effectively. This is where cloud technology and comprehensive digital toolsets become indispensable.
The need for digital transformation
Traditional growth models lack the agility needed to keep pace with an evolving market. Manual processes lead to inefficiencies, limited data insights hinder informed decision-making, and restricted IT resources stifle innovation. To overcome these hurdles, businesses must adopt digital tools that streamline operations, automate workflows, and provide actionable insights.
Digital transformation isn’t about adopting technology for its own sake—it’s about scaling efficiently. In today’s digital economy, scaling is critical for businesses seeking to expand their market reach, remain competitive, and meet evolving customer demands. Digital tools enable businesses to amplify their impact, drive revenue growth, and optimise costs, ensuring long-term sustainability.
The power of cloud-based solutions
Cloud-based platforms eliminate the need for costly infrastructure investments, offering businesses access to cutting-edge technology on a flexible, scalable basis. By automating repetitive tasks, streamlining workflows, and enhancing productivity, these platforms free up valuable resources, allowing businesses to focus on strategy and customer engagement.
An integrated SaaS platform offers a unified ecosystem to manage all facets of a business. By providing a centralised suite of applications, it automates workflows, reduces manual data entry, and improves team collaboration. Businesses can reduce operational costs and accelerate decision-making, ultimately enabling faster expansion into new markets.
With Zoho software, the emphasis is on contextual intelligence, leveraging AI to provide genuine customer value. In a market where customer experience is paramount, Zoho’s AI-powered insights enable businesses to personalise interactions, anticipate needs, and strengthen customer relationships. Zoho’s unwavering commitment to customer privacy also ensures that businesses can leverage data responsibly, fostering trust and long-term loyalty.
A holistic approach to business growth
Zoho’s philosophy of optimising the entire technology stack—from hardware to software—ensures seamless integration and optimal performance. This holistic approach translates into better technology for Nigerian businesses, enabling them to focus on their core competencies without being weighed down by technical complexities.
For Nigerian businesses, digital transformation is no longer optional—it’s a necessity. By embracing cloud-based technology, they can overcome traditional growth barriers, scale efficiently, and unlock their full potential.
The future of Nigerian business is digital. By adopting the cloud, businesses can transform challenges into opportunities, paving the way for sustainable growth in an increasingly competitive global marketplace.
All communities in Abia State are to be connected to Internet Service within the next 9 months, according to Dr. Alex Otti, state governor.
All communities in Abia State are to be connected to Internet Service within the next 9 months, according to Dr. Alex Otti, state governor.
Otti stated this at the Nnamdi Azikiwe State Secretariat premises at Umuahia, the state capital, while flagging off the first phase of the Umuahia Dedicated Internet Access/Wide Area Network And Managed Network Services Project (Project), saying that it promises to re-engineer efficiency and flexibility in operations and interactions within and amongst institutions, enhance policy execution, and engender a culture of outcome-oriented competition amongst civil servants.
The Project is being handled by iPNX, a major internet service provider.
At the ceremony, Otti, said the project includes distributing high-performance digital tools, laying fibre optic cables in public institutions, and installing infrastructure for high-speed data transmission.
He added that the initiative focuses on improving leadership efficiency, empowering civil servants with digital tools, and enhancing service delivery.
Transitioning to digital platforms would streamline government processes, enable faster communication among Ministries, departments, and Areas (MDAs), and improve engagement with development partners and the global community.
The governor also announced a mandatory digital literacy requirement for civil servants, making proficiency in technology essential for career growth.
Assuring that while the government would provide training, those unwilling to embrace technology risk becoming uncompetitive in the evolving civil service structure.
Plans are underway to expand digital access across Abia, with an agreement already in place to lay fiber optic cables in Aba, Umuahia, and Ohafia.
Otti directed Mr. Gerald Ilukwe, chief information officer to ensure that within nine months, every community in Abia must have reliable network service, enabling businesses to thrive virtually.
The Governor urged the people of Abia to embrace technology as a tool for empowerment rather than a replacement for human roles as the use of technology ought to be on enhancing service delivery and economic development, as well as keeping human decision-making at the core of governance.
The commencement of the initiative marks a major milestone in Abia’s journey towards a fully digital economy.
Ilukwe, described the project as a critical foundation for a digital government, emphasising its role in modernising service delivery.
Ilukwe said Phase I of the initiative prioritises multi-tenant buildings and complexes housing multiple MDAs and assured that MDAs not included in this phase would be covered in subsequent stages.
“Even as we are rounding off this phase, we are already preparing for the next, by the end of this service year, the entire government offices in Umuahia will be interconnected on a single network,” Ilukwe said.
Mr Ejovi Aror, group managing director, ipNX, expressed gratitude to Gov. Alex Otti for the opportunity to be part of the state’s digital transformation journey.
“This partnership signals the beginning of a new chapter in the journey towards building a digitally connected, technologically advanced, and economically empowered Abia State,” Aror said.
Authorities Seize 1842 Devices in African-Wide Cybercrime Crackdown
Police Arrest 4 Bank Staff over Alleged ₦270m Fraud, Money Laundering
Enza Raises $6.75m Seed Funding to Boost Embedded Payment Solutions Across Africa
NIMC to Prosecute Nigerians Printing ‘NIN Cards’, Says Only Slip is Legal
FG, UK FCDO, and Ghana Partner to Launch Sankore
Broadcasting1 day agoNGO Blasts MultiChoice for Tariff Hike in Nigeria, Slash in South Africa
E-Business1 day agoOtti, Abia State Gov Promises Internet Access for all Abia Communities in 9 Months
News1 day agoNIPOST Explains Clamping Down on Illegal Logistics Services in Enugu
Telecom1 day agoTelcos Mull Introduction of Different Tariff Plans for Different States
News1 day agoNESREA Urges Nigerians to Dispose Batteries Properly to Avoid Hazards
E-Financial1 day agoCITN Seeks AI to Curb Revenue Leakage in Nigeria’s Tax System
News1 day agoTony Elumelu Foundation Grants $15m to 3,000 African Entrepreneurs
E-Financial1 day agoSEC Declares War on Capital Market Fraudsters