News

‘I Am Not a Robot’, CAPTCHAs Being Used to Spread Malware, HP Warns

Published

3 months ago

March 27, 2025

Today at its annual Amplify Conference, HP Inc. (NYSE: HPQ) issued the latest HP Threat Insights Report, highlighting rising usage of fake CAPTCHA verification tests which allow threat actors to trick users into infecting themselves. The campaigns show attackers are capitalizing on people’s increasing familiarity with completing multiple authentication steps online – a trend HP calls ‘click tolerance’.

With analysis of real-world cyberattacks, the HP Threat Insights Report helps organizations to keep up with the latest techniques cybercriminals are using to evade detection and breach PCs. Based on data from millions of endpoints running HP Wolf Security1, notable campaigns identified by HP threat researchers include:

CAPTCHA Me If You Can: As bots get better at bypassing CAPTCHAs, authentication has grown more elaborate – meaning users have become more accustomed to jumping through hoops to prove they are human. HP threat researchers identified multiple campaigns where attackers crafted malicious CAPTCHAs. Users were directed to attacker-controlled sites, and prompted to complete a range of fake authentication challenges. Victims were tricked into running a malicious PowerShell command on their PC that ultimately installed the Lumma Stealer remote access trojan (RAT).

Attackers Capable of Accessing End-Users’ Webcams and Microphones to Spy on Victims: A second campaign saw attackers spreading an open source RAT, XenoRAT, with advanced surveillance features such as microphone and webcam capture. Using social engineering techniques to convince users to enable macros in Word and Excel documents, attackers could control devices, exfiltrate data, and log keystrokes – showing Word and Excel still present a risk for malware deployment.

Python Scripts Used for SVG Smuggling: Another notable campaign shows how attackers are delivering malicious JavaScript code inside Scalable Vector Graphic (SVG) images to evade detection. These images are opened by default in web browsers and execute the embedded code to deploy seven payloads—including RATs and infostealers—offering redundancy and monetization opportunities for the attacker. As part of the infection chain, the attackers also used obfuscated Python scripts to install the malware. Python’s popularity – which is being further boosted by rising interest in AI and data science – means it is an increasingly attractive language for attackers to write malware, as its interpreter is widely installed.

Patrick Schläpfer, Principal Threat Researcher in the HP Security Lab, comments:

“A common thread across these campaigns is the use of obfuscation and anti-analysis techniques to slow down investigations. Even simple but effective defence evasion techniques can delay the detection and response of security operations teams, making it harder to contain an intrusion. By using methods like direct system calls, attackers make it tougher for security tools to catch malicious activity, giving them more time to operate undetected – and compromise victims endpoints.”

By isolating threats that have evaded detection tools on PCs – but still allowing malware to detonate safely inside secure containers – HP Wolf Security has specific insight into the latest techniques used by cybercriminals. To date, HP Wolf Security customers have clicked on more than 65 billion email attachments, web pages, and downloaded files with no reported breaches.

The report, which examines data from calendar Q4 2024, details how cybercriminals continue to diversify attack methods to bypass security tools that rely on detection, such as:

At least 11% of email threats identified by HP Sure Click bypassed one or more email gateway scanners.
Executables were the most popular malware delivery type (43%), followed by archive files (32%).

Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc., comments:

“Multi-step authentication is now the norm, which is increasing our ‘click tolerance.’ The research shows users will take multiple steps along an infection chain, really underscoring the shortcomings of cyber awareness training. Organizations are in an arms race with attackers—one that AI will only accelerate.

To combat increasingly unpredictable threats, organizations should focus on shrinking their attack surface by isolating risky actions – such as clicking on things that could harm them. That way, they don’t need to predict the next attack; they’re already protected.”

News

Anambra Directs Residents To Repaint Houses

Published

2 hours ago

June 20, 2025

Editor

The Anambra State Government has directed residents and occupants of dilapidated buildings defacing the environment in public view areas across the state to repaint their structures, adding that regulators will be embarking on field operations to enforce compliance beginning from July 1.

In a press statement released on Thursday, the state Commissioner for Environment, Dr Felix Odimegwu, said repainting of buildings with particular emphasis in Onitsha, Awka, Nkpor, Nnewi and Ekwuluobia areas, respectively, will commence with immediate effect with the aim of achieving a clean, beautiful and eco-friendly environment.

Odimegwu said concerned residents and corporate organisations in the areas mentioned are required to repaint their houses/buildings, especially those that have not been repainted in the last 10 years or buildings whose current paint is defacing the environment.

He said the exercise is aimed at strengthening the existing building structures, improving the aesthetic ambience, and the green space of the state as enshrined in the Anambra State Environmental Management, Protection and Administration Law 2024, Part 4 sec 79 (1-7).

The statement partly read, “Notice is hereby given to all residents and occupants of buildings which are in public view areas of the state with particular emphasis on Onitsha, Awka, Nkpor, Nnewil and Ekwuluobia respectively, that general house hold inspection on dilapidated and unpainted structures defacing the environment shall commence with immediate effect.

“This exercise is aimed at strengthening the existing building structures, improving the aesthetic ambience, and the green space of the state as enshrined in the Anambra State Environmental Management, Protection and Administration Law 2024, Part 4 sec 79 (1-7).

“Hence, residents are enjoined to fully maintain, repaint (if necessary) their residential and commercial premises which are in public view (anyaora) areas.”

He added that the Anambra State Environmental Management Protection and Administration Law 2024 provides the legal framework for beautification and aesthetic face-lifting of the state.

“Regulators will be embarking on field operations starting from July 1, 2025, for this particular purpose. Therefore, concerned individuals and corporate organisations within the purview as stated above are required to repaint their houses/buildings, especially those that have not been repainted in the last 10 years or buildings whose current paint is defacing the environment.

“A clean, beautiful and eco-friendly Anambra is possible if we join hands together to improve her aesthetic ambience,” the statement added.

News

Umahi Terminates Benin–Warri Road Contract, Seeks Refund

Published

2 hours ago

June 20, 2025

Editor

The Minister of Works, David Umahi, has terminated the contract awarded to Levant Construction Limited over its failure to deliver on the Benin–Sapele–Warri road project.

The road, a major federal highway, is being reconstructed under the Road Infrastructure Development and Refurbishment Investment Tax Credit Scheme.

Speaking in Abuja after a meeting with contractors handling various sections of the project, Umahi accused Levant of abandoning its section of the road despite multiple warnings and a final termination notice.

According to a statement signed by his media aide, Orji Uchenna, on Wednesday, the minister disclosed that despite intervention by the Edo State Government on the worst sections of the road, Levant failed to mobilise to its portion of the site, leaving critical areas unattended.

“We even begged the Edo State Governor to fix the worst-hit parts while Levant handled the remaining. While the governor delivered on his 23km stretch for N35bn, Levant abandoned its section.

“They received multiple warning letters, including a final notice, but chose not to return to the site,” Umahi said.

Umahi directed the Permanent Secretary to finalise the contract termination, initiate a joint measurement for completed works, and write to the company’s bank for the recovery of the Advance Payment Guarantee.

He warned that failure to refund the public funds could lead to prosecution by the Economic and Financial Crimes Commission.

In contrast to Levant’s performance, the minister praised Geld and SKECC for agreeing to return to the site following renegotiations.

He noted that a project review has been approved to accommodate inflationary pressures, including the rising cost of asphalt, now pegged at ₦30,000 per square metre from a previous ₦9,000.

“I’m pleased with Geld’s commitment. For their other job on the Lokoja-Abuja road, we’ve agreed to a price review. The same applies to the Itoki–Ikorodu road. We are happy to see movement again,” he said.

He also lauded the efforts of Delta State Governor, Sheriff Oborevwori, and Edo State Governor, Monday Okpebholo, for stepping in to fund critical sections of the federal road.

“We are grateful. These governors are doing very beautiful work,” he said.

Reacting to recent claims by some Northern groups accusing the Tinubu administration of favouring the South in road projects, Umahi described the allegations as “malicious and uncharitable”.

He stressed that project distribution under President Bola Tinubu’s Renewed Hope Agenda has been fair, inclusive, and based on inherited commitments and current needs.

“In this ministry, we don’t count regions. We follow the President’s example—he inherited projects and chose to continue them irrespective of location,” Umahi said, citing the Abuja–Kaduna–Zaria–Kano road project as a case in point.

He noted that under the NNPC Tax Credit Scheme alone, Niger State accounts for 26 per cent of the project portfolio, while the South-West and South-East combined barely get 9 per cent.

In his detailed response, Umahi listed several ongoing projects in the North, including the Abuja–Kaduna–Zaria–Kano road (Sections I & III) worth N252bn, with 30 per cent already paid.

He said, “Section II of the same highway, 164km long, valued at N525bn, with another 30 per cent (N152bn) already disbursed. Sokoto–Zamfara–Katsina–Kaduna 750km road at N825bn, started under President Tinubu.

“There are Dangote-backed Tax Credit projects in Borno, including 49km in Bama and 52km in Dikwa. The N958bn dual carriageway project in Kebbi, with a second phase heading to FEC for approval. The 439km Akwanga–Jos–Bauchi–Gombe superhighway is being redesigned to a six-lane concrete pavement on Tinubu’s directive.”

He added that under the Renewed Hope legacy projects, the North is receiving 52 per cent of the investments, while the South gets 48 per cent.

On the controversial Lagos–Calabar Coastal Highway, Umahi said the project is not designed to favour any region, explaining that comparable investments are being made in the North with the same quality and cost standards.

“For instance, the Kebbi section alone, with just one carriageway, is costing about N958bn. When the second lane is approved, that’s nearly N2tn—comparable to Lagos-Calabar segments,” he said.

Addressing criticisms on the slow pace of work on the Eleme–Onnexis of the East–West Road, Umahi said the contractor, RCC, has since improved performance after initial issues. He clarified that asphalt work being done on a completed lane was to maintain traffic flow around flyover sections.

“Let the critics go and verify. We’ve done one carriageway. Where asphalt is being reapplied, it’s around flyover intersections for smooth movement,” he said.

The minister reaffirmed his commitment to restoring public confidence in Nigeria’s road infrastructure, saying, “We want Nigerians to feel the impact of governance.

“President Tinubu is investing heavily in roads—North, South, East and West—because he understands the economy runs on infrastructure. I have never seen such a unique President.”
(PUNCH)

News

542 Senior Military Officers Retire

Published

2 hours ago

June 20, 2025

Editor

A total of 542 senior Non-Commissioned Officers retired from the Nigerian Armed Forces on Thursday after 35 years of service.

The retirement ceremony, held at the Nigerian Armed Forces Resettlement Centre in Oshodi, Lagos, included 362 soldiers from the Nigerian Army, 134 from the Navy, and 46 from the Air Force.

Speaking at the event, the Chief of Army Staff, Lieutenant General Olufemi Oluyede, represented by Major General Aligbe Obhiozele of TRADOC, praised the retirees for their dedication.

Obhiozele stated, “Today we celebrate your courage, discipline and selfless service to our great nation. Your 35-year journey embodies the finest military traditions of resilience and patriotism.

“As you transition to civilian life, we urge you to uphold these values and become pillars in your communities.”

He also urged the retirees to avoid financial mismanagement and neglect of their health, warning that society expects them to continue to uphold the discipline they displayed during service.

NAFRC Commandant, Air Vice Marshal Bashir Mamman, said the centre had trained over 53,000 personnel since its establishment.

Mamman thanked President Bola Tinubu for approving major improvements such as bigger starter packs for retirees, digitisation of records, e-learning upgrades, and new workshop equipment.

“These interventions have significantly enhanced our capacity to prepare servicemen for civilian life,” Mamman noted.

Retirees, who were trained in various vocational skills, received discharge certificates to the cheers of their families. Some described the moment as emotional, but hopeful.

Sergeant Musa Bello said, “The training has prepared me well for civil life. I was trained in farming. I hope to invest my gratuity in it. I am proud of my service years.”

The event ended with the traditional lowering of flags, marking their formal exit from military service.