Telecom
Ransomware Persisted Despite Improved Detection in 2022 – IBM Report
IBM Security released its annualX-Force Threat Intelligence Index finding that although ransomware’s share of incidents in the Middle East and Africa (MEA) held steady at 18%, globally defenders were more successful detecting and preventing ransomware.
Despite this, attackers continued to innovate, with the report showing that globally the average time to complete a ransomware attack dropped from two months down to less than 4 days.
According to the 2023 report, the deployment of backdoors, which allow remote access to systems, emerged as the top action by attackers in the MEA region last year. Backdoor deployments were detected in 27% of the cases X-Force responded to in this region in 2022. Ransomware and worms tied for the second-most common attack type in the region at 18% each. The uptick in backdoor deployments can be partially attributed to their high market value. X-Force observed threat actors selling existing backdoor access for as much as $10,000, compare this to stolen credit card data, which sells for less than $10 per card today.
As organizations across the MEA region try to address the ever-evolving cyber threats landscape, Frida Kleimert Knibbs, Security Leader at IBM MEA, stressed the critical role of threat intelligence in safeguarding against these threats. She commented: “Proactively managing security risks and evolving cybercrime tactics is a critical priority for organizations across MEA. The X-Force Threat Intelligence Index findings demonstrate the continued threat of ransomware and the increasing use of thread hijacking tactics.”
She added: “To safeguard against these threats, it’s imperative that companies remain vigilant and focus on effective incident response planning. As the security landscape evolves, it is crucial to prioritize threat intelligence and strengthen defenses”.
The IBM Security X-Force Threat Intelligence Index tracks new and existing trends and attack patterns – pulling from billions of datapoints from network and endpoint devices, incident response engagements and other sources.
Some of the key findings in the 2023 report include:
- Extortion: Threat Actors Go-to Method. The most common impact from cyberattacks in 2022 was extortion, which was primarily achieved through ransomware or business email compromise attacks. Extortion and financial loss each accounted for half of identified impacts in incidents across the MEA region in 2021. Manufacturing was the most extorted industry globally in 2022, and it was again the most attacked industry for the second consecutive year. Manufacturing organizations are an attractive target for extortion, given the extremely low tolerance for down time.
- Cybercriminals Weaponize Email Conversations. Thread hijacking saw a significant rise in 2022, with attackers using compromised email accounts to reply within ongoing conversations posing as the original participant. X-Force observed the rate of monthly attempts increase by 100% globally compared to 2021 data. Over the year, X-Force found that attackers used this tactic to deliver Emotet, Qakbot, and IcedID, malicious software that often results in ransomware infections.
- Legacy Exploits Still Doing the Job. The proportion of known exploits relative to vulnerabilities declined 10 percentage points globally from 2018 to 2022, due to the fact that the number of vulnerabilities hit another all-time high. The findings indicate that legacy exploits enabled older malware infections such as WannaCry and Conficker to continue to exist and spread.
- Phishers “Give Up” on Credit Card Data. The number of cybercriminals targeting credit card information in phishing kits dropped 52% globally in one year, indicating that attackers are prioritizing personally identifiable information such as names, emails, and home addresses, which can be sold for a higher price on the dark web or used to conduct further operations.
- Finance and Insurance Remain Prime Targets for Cyberattacks in MEA: In the Middle East and Africa, Finance and insurance was the most-targeted industry in 2022, accounting for 44% of incidents and down slightly from 2021 at 48%. Professional, business and consumer services accounted for 22% of attacks, with manufacturing and energy tying for third place at 11%.
The report features data IBM collected globally in 2022 to deliver insightful information about the global threat landscape and inform the security community about the threats most relevant to their organizations. You can download a copy of the 2023 IBM Security X-Force Threat Intelligence Report here.
Additional sources
- Read more about the report’s top findings in this IBM Security Intelligence blog.
- Sign up for the 2023 IBM Security X-Force Threat Intelligence Index webinar on Thursday, March 2, 2022, at 11:00 a.m. ET here
- Schedule a consult with IBM Security X-Force
Telecommunication companies have threatened to withdraw their Unstructured Supplementary Services Data (USSD), services from banks over what they called misinformation.
MTN Nigeria, Airtel, Globacom and 9Mobile- the telcos disclosed that the banks’ notice to their customers on the new billing system and airtime deductions for USSD services was misleading.
Also, Association of Licensed Telecom Operators of Nigeria (ALTON) also denied that the directive was from the Nigerian Communications Commission (NCC).
USSD is done via shortcodes on mobile phones and allows bank customers to make transactions in places with limited or no internet service.
Recall that banks earlier this week claimed that NCC has directed them to begin charging them from their airtime rather than from customers’ accounts.
The notice from the banks read in part: “In line with the directive of the Nigerian Communications Commission (NCC), please be informed that effective June 3, 2025, charges for USSD banking services will no longer be deducted from your bank account.
“Going forward, these charges will be deducted directly from your mobile airtime balance in accordance with the NCC’s End-User Billing (EUB) model.
“Under this new billing structure, each USSD session will attract a charge of ?6.98 per 120 seconds, which will be billed by your mobile network operator.
“You will receive a consent prompt at the start of each session, and airtime will only be deducted upon your confirmation and availability of the bank to fulfil this service.
“If you do not wish to continue using USSD banking under this new model, you may choose to discontinue use of the USSD channel.”
Reacting, ALTON, umbrella body of telecom operators in Nigeria, said the banks’ notice is a gross misinformation deliberately hatched to suit their selfish interests.
Hence they threatened to withdraw network support to the banks’ USSD services.
Engr Gbenga Adebayo, chairman of ALTON told Vanguard: ” I don’t understand why the banks are twisting agreements and distorting information just to favour their selfish interests. In the first place, the information wasn’t a directive from the NCC but a joint regulatory agreement between the NCC and the Central Bank of Nigeria, CBN witnessed by the telcos and the banks. The agreement was that if the banks finally cleared all USSD debts owed to the telcos by June 2, 2025, they are free to migrate to the end-user billing method, so long as the model of migration is transparent and agreed upon by the telcos.
“The reason for that clause was because the telcos insisted that the process of migration is such that will not allow a customer to be billed twice; in other words, that a subscriber would not have his airtime deducted and also have his or her money deducted for same services from his or her bank account.
” As we speak, some of the banks have cleared their debts, but the majority are yet to do so. So, even if all the modalities of migrating to end-user billing have been perfectly carried out, the implementation cannot even begin because the banks are yet to clear the USSD debt owed to the telcos.
“Our position now is that if that is the way the banks want to treat the agreement, we may withdraw support for their USSD services. It is not a must-have. They can do without it. But, they should clear the debts as agreed,” he added.
MTN Nigeria has announced plans to embark on a massive capital expenditure (CAPEX) drive in 2025, committing nearly N900 billion to significantly enhance network service quality across Nigeria.
Dr. Karl Toriola, CEO, MTN Nigeria,
The substantial investment, more than double the combined CAPEX of approximately N440 billion spent in 2023 and 2024, underscored MTN’s aggressive strategy to address persistent service quality issues and meet growing customer and regulatory expectations.
Dr. Karl Toriola, CEO, MTN Nigeria, detailed this unprecedented financial commitment during a recent interview on Arise TV, emphasizing that improving service quality is the company’s paramount message for the year.
He highlighted a clear understanding and expectation from both the Nigerian Communications Commission (NCC) and security agencies for improved network quality.
A primary focus of this increased CAPEX will be on putting additional capacity in a city like Lagos, particularly in Abuja, where you have a lot of buildings coming up, you need additional sites because there are coverage issues.
Beyond these critical urban centers, the investment aims to bolster network resilience and ensure power stability for its infrastructure nationwide.
This includes proactively addressing site outages by ensuring timely payment for operational necessities such as diesel for generators, a persistent challenge in the Nigerian operating environment.
Toriola outlined a comprehensive upgrade process, which involves placing orders formally, opening letters of credit, and then the equipment gets shipped in and installed.
He added that MTN will be acquiring new sites and laying fiber to the base station to create better stability” where necessary.
While the immediate CAPEX is geared towards improving existing service quality and capacity, this investment aligns with MTN’s broader goals of enhancing financial inclusion in underserved rural areas, suggesting a long-term vision for network expansion and service improvement that extends beyond metropolitan areas.
Subscribers can anticipate tangible improvements in service quality, with a significant improvement in quality of service expected by the end of the second quarter or early in the third quarter of 2025, according to Toriola.
“This year is all going to be about capital expenditure on an aggressive basis to fix quality of service issues (and) meet both the regulators’ and the public’s expectations,” he affirmed, reiterating MTN’s steadfast focus on customer experience through substantial capital investment.
Telecom regulators and industry leaders from across the Middle East and Africa gathered in Cairo last week to chart a data-driven future for the region.
In a region where digital transformation is accelerating at unprecedented speed, connectivity intelligence firm, Ookla and Egypt’s National Telecom Regulatory Authority (NTRA) joined forces to organise the Telecommunications Regulatory Summit
Themed ‘Harnessing Data and Technology for Superior QoS’, the summit focused on how data, particularly crowdsourced insights, can transform regulatory strategies across the region.
The summit attracted stakeholders from over 30 countries, including delegates from the International Telecommunication Union (ITU) and World Broadband Association (WBBA), who engaged in high-level discussions on optimising network performance and accelerating digital inclusion.
Karim Yaici, lead industry analyst for the Middle East and Africa at Ookla, said the event set the tone for the growing value of data-driven decision-making.
“Access to and the use of crowdsourced data contribute to making more informed decisions, fostering transparency and ensuring that citizens in the MEA region benefit from high-quality, accessible and affordable connectivity,” he said.
The experts underlined that crowdsourced data is becoming a critical complement to traditional regulatory methods.
They agreed that it helps identify service gaps, prioritise infrastructure investments, and drive innovation.
With broadband speeds now closely tied to GDP growth and productivity, accurate performance data is seen as key to socio-economic advancement.
Dr. Hossam Abdel-Mawla, vice-president of technical affairs and quality of service at NTRA, stressed that the summit was pivotal in fostering regional collaboration.
“By actively sharing best practices and exploring innovative data-driven strategies, we are shaping a future where telecom regulations ensure digital inclusion and economic growth across the region,” he said.
In a key session, Ahmed Nabawy, director of client services at Ookla, presented findings on 5G performance in Egypt and Tunisia.
He demonstrated how Ookla’s unified data platform, powered by AI, enables operators to analyse 5G-capable device density and prioritise high-impact rollout areas.
The summit also explored the shift from conventional network quality metrics to more user-centric Quality of Experience models. These advanced analytics tools promise to enhance transparency, improve accountability, and ultimately deliver better connectivity experiences for all.
Telcos Threaten to Disconnect Banks over Misinformation on New USSD Charges
MTN Nigeria Plans N900Bn in Service Upgrade
NDIC Calls for Inputs to IADI Core Principles for Effective Deposit Insurance
Netflix Hikes Subscription Fees Again in Nigeria over “Market Conditions”
DSO: STBMAN Accuses NBC of Contempt, Seeks Presidential Intervention
E-Business2 days agoNIMC Plans to Register 95 Percent Nigerians by December
News2 days agoJAMB Waxes Worriedly over Rising Digital Exam Fraud
Telecom2 days ago9mobile Nigeria Inks Agreement to Roam with MTN
Telecom2 days agoIHS Nigeria Moves to Enhance G4S Secure Solutions Site Patrols and Increase Operational Efficiency with Patrol Vehicles
Telecom2 days agoBanks, Telcos to Start Deducting USSD Charges from Airtime Today
E-Business1 day agoAXIAN Telecom Invests in Jumia Post-MTN Era
Telecom2 days agoKonga Launches 3rd Edition of Mid-Year Shopping Festival with Unbeatable Discounts
E-Financial2 days agoFitch Upgrades Fidelity Bank’s National Rating to ‘A+(nga)’, Affirms Long-Term IDR at ‘B’