News

‘I Am Not a Robot’, CAPTCHAs Being Used to Spread Malware, HP Warns

Published

6 months ago

March 27, 2025

Today at its annual Amplify Conference, HP Inc. (NYSE: HPQ) issued the latest HP Threat Insights Report, highlighting rising usage of fake CAPTCHA verification tests which allow threat actors to trick users into infecting themselves. The campaigns show attackers are capitalizing on people’s increasing familiarity with completing multiple authentication steps online – a trend HP calls ‘click tolerance’.

With analysis of real-world cyberattacks, the HP Threat Insights Report helps organizations to keep up with the latest techniques cybercriminals are using to evade detection and breach PCs. Based on data from millions of endpoints running HP Wolf Security1, notable campaigns identified by HP threat researchers include:

CAPTCHA Me If You Can: As bots get better at bypassing CAPTCHAs, authentication has grown more elaborate – meaning users have become more accustomed to jumping through hoops to prove they are human. HP threat researchers identified multiple campaigns where attackers crafted malicious CAPTCHAs. Users were directed to attacker-controlled sites, and prompted to complete a range of fake authentication challenges. Victims were tricked into running a malicious PowerShell command on their PC that ultimately installed the Lumma Stealer remote access trojan (RAT).

Attackers Capable of Accessing End-Users’ Webcams and Microphones to Spy on Victims: A second campaign saw attackers spreading an open source RAT, XenoRAT, with advanced surveillance features such as microphone and webcam capture. Using social engineering techniques to convince users to enable macros in Word and Excel documents, attackers could control devices, exfiltrate data, and log keystrokes – showing Word and Excel still present a risk for malware deployment.

Python Scripts Used for SVG Smuggling: Another notable campaign shows how attackers are delivering malicious JavaScript code inside Scalable Vector Graphic (SVG) images to evade detection. These images are opened by default in web browsers and execute the embedded code to deploy seven payloads—including RATs and infostealers—offering redundancy and monetization opportunities for the attacker. As part of the infection chain, the attackers also used obfuscated Python scripts to install the malware. Python’s popularity – which is being further boosted by rising interest in AI and data science – means it is an increasingly attractive language for attackers to write malware, as its interpreter is widely installed.

Patrick Schläpfer, Principal Threat Researcher in the HP Security Lab, comments:

“A common thread across these campaigns is the use of obfuscation and anti-analysis techniques to slow down investigations. Even simple but effective defence evasion techniques can delay the detection and response of security operations teams, making it harder to contain an intrusion. By using methods like direct system calls, attackers make it tougher for security tools to catch malicious activity, giving them more time to operate undetected – and compromise victims endpoints.”

By isolating threats that have evaded detection tools on PCs – but still allowing malware to detonate safely inside secure containers – HP Wolf Security has specific insight into the latest techniques used by cybercriminals. To date, HP Wolf Security customers have clicked on more than 65 billion email attachments, web pages, and downloaded files with no reported breaches.

The report, which examines data from calendar Q4 2024, details how cybercriminals continue to diversify attack methods to bypass security tools that rely on detection, such as:

At least 11% of email threats identified by HP Sure Click bypassed one or more email gateway scanners.
Executables were the most popular malware delivery type (43%), followed by archive files (32%).

Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc., comments:

“Multi-step authentication is now the norm, which is increasing our ‘click tolerance.’ The research shows users will take multiple steps along an infection chain, really underscoring the shortcomings of cyber awareness training. Organizations are in an arms race with attackers—one that AI will only accelerate.

To combat increasingly unpredictable threats, organizations should focus on shrinking their attack surface by isolating risky actions – such as clicking on things that could harm them. That way, they don’t need to predict the next attack; they’re already protected.”

News

VIDEO: Why I’ve Never Tried Convincing My Christian Wife To Convert To Islam — Tinubu

Published

12 hours ago

October 4, 2025

Editor

President Bola Ahmed Tinubu has explained why he has never attempted to convince his wife, First Lady Oluremi Tinubu, to convert to Islam, stressing his belief in love, religious freedom, and mutual respect among people of different faiths.

Speaking on Saturday at the funeral service of Nana Lydia Yilwatda, mother of the National Chairman of the All Progressives Congress (APC), Prof. Nentawe Yilwada, Tinubu said his marriage to a Christian pastor has never created any conflict in their home.

The president, who arrived in Jos, Plateau State around 2 p.m. for the ceremony at the COCIN headquarters church, said he inherited Islam from his family and has always upheld the principle of freedom of religion.

He noted that both he and the First Lady serve the same God and would ultimately be answerable to Him, adding that what matters most are people’s deeds, character, and love for others.

Tinubu urged Nigerians to embrace tolerance and peaceful coexistence, emphasising that hate should never have a place in the country.

He also prayed for the repose of the soul of the late Lydia Yilwada and asked God to grant comfort and blessings to those she left behind.

He said, “Hate is not an option for us. Love is what you preach, that we should love one another.

“Nobody, nobody determines what God has ordained. God’s ordained action and his promises are what matter. I inherited Islam from my family. I didn’t change. But my wife is a pastor. She prays for me.

“No conflict. And I never did at any single time try to convince her or convert her. I believe in the freedom of religion.

“We are praying to the same God. We are answerable to the same almighty God. We will answer to him. We will account to him. Our deeds, our character, our love for our fellow beings are what are important.

“May the almighty accept the soul of Lydia and give all that she left behind blessings and glory, so we say, may her soul rest in peace.”

View this post on Instagram
A post shared by Tribune Online (@tribuneonlineng)
Advertisement

News

UK Police Quiz Six After Fatal Synagogue Attack

Published

15 hours ago

October 4, 2025

Editor

Six people arrested on suspicion of “terrorism”-linked offences after a fatal car-ramming and knife attack on a UK synagogue remained in police custody on Saturday, as Prime Minister Keir Starmer urged people not to take part in pro-Palestinian protests.

Two people were killed and three others seriously wounded in Thursday’s attack in northwestern Manchester on Yom Kippur, the holiest day of the Jewish calendar.

Police shot dead the assailant, Jihad Al-Shamie, a 35-year-old UK citizen of Syrian descent, within minutes of the alarm being raised.

Three men and three women are in custody.

The attack has heightened fear among Britain’s Jewish community.

Police said they were patrolling places of worship across the city “with a particular focus on providing a high-visibility presence within our Jewish communities”.

The attack on Heaton Park Hebrew Congregation Synagogue in north Manchester was one of the worst antisemitic incidents in Europe since the October 7, 2023, attack in Israel led by Palestinian Islamist group Hamas.

The Hamas attack resulted in the deaths of 1,219 people, mostly civilians, according to an AFP tally of Israeli official figures.

Israel’s retaliatory offensive on the Gaza Strip has killed at least 66,288 Palestinians, also mostly civilians, according to health ministry figures in the occupied territory that the United Nations considers reliable.

The Gaza conflict has inflamed passions in Britain, with frequent pro-Palestinian rallies in cities that some critics allege have stoked antisemitism.

A “global movement for Gaza UK” protest went ahead in London late on Thursday, with police making 40 arrests.

London’s Metropolitan Police asked organisers delay another planned demonstration backing the banned Palestine Action group later on Saturday.

However, organisers Defend Our Juries rejected the calls.

A spokesman said the group “stood in solidarity” with the Jewish community over the attack.

– Accidental shooting –

Starmer urged protesters not to join the pro-Palestinian rally.

“I urge anyone thinking about protesting this weekend to recognise and respect the grief of British Jews. This is a moment of mourning. It is not a time to stoke tension and cause further pain,” he said on X.

During the attack, Shamie was seen “with a big knife, banging his knife into the glass, trying to get through”, synagogue chairman of trustees Alan Levy, who helped barricade the doors, told ITV News.

“The heroes of the congregation who saw what was happening then came to the doors because he was trying to break the doors down to get in,” he added.

A UK police watchdog, meanwhile, said it would look at the police shooting of Shamie.

The probe would also look at the shooting of a second victim who suffered a fatal gunshot and a third person who was shot but survived.

The Independent Office for Police Conduct (IOPC) said there was no evidence anyone other than police used firearms at the scene.

“Our independent investigation will look at the circumstances surrounding the fatal police shooting of Jihad Al-Shamie,” it said in a statement.

“A post mortem has today (Friday) concluded another man who died at the scene suffered a fatal gunshot wound.”

IOPC investigations are standard practice in situations where the use of force by police may have resulted in the death of a member of the public.

News

Edo Inaugurates Committee On Drug Abuse, Healthy Living

Published

18 hours ago

October 4, 2025

Editor

L-R: ACGN, NDLEA, Fidelis Cocodia, Deputy Governor of Edo State, Hon. Dennis Idahosa and Coordinator, Office of the First Lady, Edo State, Mrs. Edesili Okpebholo Anani during the Inauguration

Edo State Government has inaugurated Drug Control Committee for the state and local governments, aimed at curbing the menace of drug abuse in the state.

Inaugurating the committee, Governor Monday Okpehbolo said the committee was not only saddled with the responsibility of curbing the menace of illicit substances, but to promote healthier living across communities in the state.

Represented by his deputy, Hon. Dennis Idahosa, Okpebholo described the initiative as “a vital step in our unwavering commitment to stopping the menace of drug trafficking and substance use among youths.”

The governor, who bemoaned the rising tide of drug dependency and its impact on society, pointed out that the committee’s creation aligns with the national drug master plan and represents a bold stride toward protecting Edo future generations.

On his part, Chairman of the National Drug Law Enforcement Agency (NDLEA), Brig. Gen. Buba Marwa, represented by ACGN, Fidelis Cocodia, Zonal Commander, Zone 13, emphasised grassroots interventions, awareness campaigns, and support systems as the backbone of the fight against drug abuse.

Edo State commander of the NDLEA, Mitchell Ofoyeju disclosed that while national drug use prevalence stands at 14.4 percent, Edo state surpasses the average at 15 percent.

He noted that the state is one of the hardest-hit states in the country, warning that the trend has fueled crime and heightened youth vulnerability.

The state’s Commissioner for Health, Dr. Cyril Oshiomhole pledged to make Edo a model in drug control through rehabilitation, youth enlightenment, and second-chance opportunities for recovering addicts.

Coordinator, Office of the First Lady, Edo State, Mrs. Edesili Okpebholo Anani, described drug abuse as a pandemic, noting that “you hardly see a crime without drugs being involved.”

She added that women’s empathy and influence must be harnessed in the campaign against drug abuse.