News

‘I Am Not a Robot’, CAPTCHAs Being Used to Spread Malware, HP Warns

Published

5 months ago

March 27, 2025

Today at its annual Amplify Conference, HP Inc. (NYSE: HPQ) issued the latest HP Threat Insights Report, highlighting rising usage of fake CAPTCHA verification tests which allow threat actors to trick users into infecting themselves. The campaigns show attackers are capitalizing on people’s increasing familiarity with completing multiple authentication steps online – a trend HP calls ‘click tolerance’.

With analysis of real-world cyberattacks, the HP Threat Insights Report helps organizations to keep up with the latest techniques cybercriminals are using to evade detection and breach PCs. Based on data from millions of endpoints running HP Wolf Security1, notable campaigns identified by HP threat researchers include:

CAPTCHA Me If You Can: As bots get better at bypassing CAPTCHAs, authentication has grown more elaborate – meaning users have become more accustomed to jumping through hoops to prove they are human. HP threat researchers identified multiple campaigns where attackers crafted malicious CAPTCHAs. Users were directed to attacker-controlled sites, and prompted to complete a range of fake authentication challenges. Victims were tricked into running a malicious PowerShell command on their PC that ultimately installed the Lumma Stealer remote access trojan (RAT).

Attackers Capable of Accessing End-Users’ Webcams and Microphones to Spy on Victims: A second campaign saw attackers spreading an open source RAT, XenoRAT, with advanced surveillance features such as microphone and webcam capture. Using social engineering techniques to convince users to enable macros in Word and Excel documents, attackers could control devices, exfiltrate data, and log keystrokes – showing Word and Excel still present a risk for malware deployment.

Python Scripts Used for SVG Smuggling: Another notable campaign shows how attackers are delivering malicious JavaScript code inside Scalable Vector Graphic (SVG) images to evade detection. These images are opened by default in web browsers and execute the embedded code to deploy seven payloads—including RATs and infostealers—offering redundancy and monetization opportunities for the attacker. As part of the infection chain, the attackers also used obfuscated Python scripts to install the malware. Python’s popularity – which is being further boosted by rising interest in AI and data science – means it is an increasingly attractive language for attackers to write malware, as its interpreter is widely installed.

Patrick Schläpfer, Principal Threat Researcher in the HP Security Lab, comments:

“A common thread across these campaigns is the use of obfuscation and anti-analysis techniques to slow down investigations. Even simple but effective defence evasion techniques can delay the detection and response of security operations teams, making it harder to contain an intrusion. By using methods like direct system calls, attackers make it tougher for security tools to catch malicious activity, giving them more time to operate undetected – and compromise victims endpoints.”

By isolating threats that have evaded detection tools on PCs – but still allowing malware to detonate safely inside secure containers – HP Wolf Security has specific insight into the latest techniques used by cybercriminals. To date, HP Wolf Security customers have clicked on more than 65 billion email attachments, web pages, and downloaded files with no reported breaches.

The report, which examines data from calendar Q4 2024, details how cybercriminals continue to diversify attack methods to bypass security tools that rely on detection, such as:

At least 11% of email threats identified by HP Sure Click bypassed one or more email gateway scanners.
Executables were the most popular malware delivery type (43%), followed by archive files (32%).

Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc., comments:

“Multi-step authentication is now the norm, which is increasing our ‘click tolerance.’ The research shows users will take multiple steps along an infection chain, really underscoring the shortcomings of cyber awareness training. Organizations are in an arms race with attackers—one that AI will only accelerate.

To combat increasingly unpredictable threats, organizations should focus on shrinking their attack surface by isolating risky actions – such as clicking on things that could harm them. That way, they don’t need to predict the next attack; they’re already protected.”

News

FG Predicts Heavy Rainfall, Flood In Seven States

Published

5 hours ago

August 23, 2025

Editor

The Federal Ministry of Environment on Saturday predicted possible flooding in seven states and 25 locations across Nigeria.

The ministry, in its flood alert warned that heavy rainfall expected between August 23 and 24 could lead to flooding in the listed areas.

The alert was signed by the Director of the Erosion, Flood and Coastal Zone Management Department, Usman Bokani.

He further directed residents of communities along the flood plain from Jebba to Lokoja to evacuate immediately as the River Niger’s water level continues to rise.

“Due to the rise in the water level of River Niger, communities on the flood plain from Jebba to Lokoja are advised to evacuate,” he said.

The states and communities expected to be affected include Benue State (Abinsi, Agyo, Gbajimba, Gogo, Makurdi, Mbapa, Otobi, Otukpo, Udoma, Ukpiam); Borno State (Briyel, Dikwa, MaiduKamba; Gombe State (Bajoga, Dogon Ruwa, Gombe, Nafada); Kebbi State (Gwandu, Jega, Kamba); Nasarawa State (Agima, Keana, Keffi, Odogbo, Rukubi); Niger State (Lapai); and Yobe State (Gashua, Gasma, Potiskum).

On Friday, the National Emergency Management Agency urged residents in high-risk flood plains to evacuate to safer and higher grounds.

The states at high risk according to the agency are Kebbi, Niger, Kwara states that share borders with Benin Republic.

This was disclosed in a press statement signed by the agency’s Head of Press Unit, Manzo Ezekiel.

The Director General of NEMA, Mrs. Zubaida Umar, also directed all NEMA offices covering communities along the River Niger to intensify advocacy and mobilization for flood preparedness following alerts of rising water levels in the upstream of the river in the Republic of Benin.

“In an urgent directive conveyed to the operations offices, Mrs. Zubaida Umar instructed them to sensitize communities to remain vigilant and advise residents in high-risk flood plains to evacuate to safer, higher grounds, especially those in Kebbi, Niger and Kwara states that share borders with Benin Republic.

“She further urged the State Governments of the identified high-risk areas to support their Emergency Management Agencies (SEMAs) and Local Emergency Management Committees (LEMCs) in activating contingency plans and preparedness measures to mitigate the potential impact of this year’s flooding.

“The Director General reaffirmed NEMA’s commitment to ensuring coordinated actions to safeguard lives and livelihoods along the River Niger,” the statement noted.

News

‘Court Of Corruption’ — Obasanjo Knocks INEC Chairman, Judiciary In New Book

Published

5 hours ago

August 23, 2025

Editor

Former President Olusegun Obasanjo has criticised the Nigerian judiciary, saying it has been “deeply compromised” and that corruption among judges has turned courts into “a court of corruption rather than a court of justice.”

In his new book, Nigeria: Past and Future, Obasanjo laments the steady decline of the Nigerian judiciary’s integrity, warning that justice has become commodified in Nigeria.

“The reputation of the Nigerian judiciary has steadily gone down from the four eras up till today. The rapidity of the precipitous fall, particularly in the Fourth Republic, is lamentable,” Obasanjo wrote.

He expressed concern that the judiciary’s decline poses a significant threat to the nation’s stability.

Obasanjo recounted an incident where a governor showed him six duplex buildings belonging to a judge who allegedly acquired them from money made as chairman of election tribunals. This anecdote, he said, illustrates the depth of corruption in the judiciary.

The former president also accused Mahmood Yakubu, INEC chairman, of undermining the electoral process since 2015.

“No wonder politicians do not put much confidence in an election which the INEC of Professor Mahmood Yakubu polluted and grossly undermined to make a charade,” he said.

Obasanjo further alleged that politicians believe the outcome of election disputes depends on the will of tribunal judges, court of appeal judges, and supreme court judges.

“No matter what the will of the people may be, the Chairman of INEC since after the 2015 election had made his will greater and more important than the will of the people,” he added.

Moreover, Obasanjo directly accused the late former President Muhammadu Buhari of colluding with the judiciary during his election cases.

“Buhari threw caution to the wind, no matter what had transpired between him and the judges who did his bidding. In his election cases, financially, he topped it up with appointments for them no matter their age and their ranks,” Obasanjo alleged.

The former president concluded that the current state of the judiciary and electoral system in Nigeria is alarming, saying, “After a false declaration of results, making losers winners and winners losers, the victim of the cheating is advised to go to court, which is a court of corruption rather than a court of justice.“

News

Sanwo-Olu Unveils Leather Hub, Eyes 10,000 Jobs

Published

6 hours ago

August 23, 2025

Editor

Lagos State Governor, Sanwo-Olu, on Saturday inaugurated a state-of-the-art leather processing and manufacturing hub in Mushin, projected to create 10,000 direct jobs and generate over $250 million in annual export turnover when fully operational.

In a press release sent to PUNCH Online, the governor said the facility was formally inaugurated on Saturday by the First Lady, Senator Oluremi Tinubu, during her three-day official visit to Lagos.

He added that the hub was named in her honour to recognise her grassroots initiatives in social investment and economic empowerment, with 70 per cent of its employment slots reserved for women and youths.

The hub is equipped with modern machinery to support Nano, Micro, Small, and Medium Enterprises (NMSMEs), enabling mass production of shoes, bags, belts, packaging materials, and other leather products.

It is designed to ease production bottlenecks, scale operations, and position Lagos as the leather logistics capital of West Africa.

Speaking at the inauguration, Tinubu described the hub as a “trailblazing project” aligned with President Bola Tinubu’s Renewed Hope Agenda to diversify Nigeria’s economy through industrialisation, manufacturing, and innovation.

The Lagos State Leather Hub in Mushin, formally commissioned by the First Lady of Nigeria, Senator Oluremi Tinubu, on Saturday, 23 August 2025.
“Leatherwork is a traditional craft that has stood the test of time. This facility will empower artisans, scale up leather goods production, and enable them to compete confidently in both local and international markets,” she said, urging entrepreneurs to dedicate themselves to excellence and continuous learning.

Sanwo-Olu said the project would provide training and start-up support to over 150,000 artisans, boost the local economy, attract investments, and strengthen trade links with fashion districts, e-commerce platforms, and future rail services.

“Hides and skins that once left our shores unprocessed will now be transformed here in Lagos into world-class footwear, garments, and accessories proudly stamped ‘Made in Lagos, Made in Nigeria’,” the governor said.

He pledged to expand the facility through transparent regulation and continuous infrastructure upgrades, adding: “True dividends of democracy are best felt when they reach the cobbler in Mushin, the tanner in Oko-Oba, and the young fashion designer in Yaba.”

Commissioner for Wealth Creation and Employment, Akinyemi Ajigbotafe, said the hub would lower production costs and raise quality standards, positioning Lagos-made leather products for dominance in both local and export markets.