Connect with us

Telecom

2024 Sophos Threat Report: Cybercrime on Main Street Details Cyberthreats Facing SMBs

Published

on

Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, today released its annual 2024 Sophos Threat Report, with this year’s report detailing “Cybercrime on Main Street” and the biggest threats facing small- and medium-sized businesses (SMBs*).

According to the report, in 2023, nearly 50% of malware detections for SMBs were keyloggers, spyware and stealers, malware that attackers use to steal data and credentials.

Attackers subsequently use this stolen information to gain unauthorized remote access, extort victims, deploy ransomware, and more.

The Sophos report also analyses initial access brokers (IABs)—criminals who specialize in breaking into computer networks.

As seen in the report, IABs are using the dark web to advertise their ability and services to break specifically into SMB networks or sell ready-to-go-access to SMBs they’ve already cracked.

[caption] Above: Discovered by Sophos X-Ops: a sample of a dark web forum post advertising access to a small U.S. accounting firm. Additional examples of cybercriminal forum ads targeting SMBs, by industry and country, are in the 2024 Sophos Threat Report.

“The value of ‘data,’ as currency has increased exponentially among cybercriminals, and this is particularly true for SMBs, which tend to use one service or software application, per function, for their entire operation. For example, let’s say attackers deploy an infostealer on their target’s network to steal credentials and then get hold of the password for the company’s accounting software. Attackers could then gain access to the targeted company’s financials and have the ability to funnel funds into their own accounts,” said Christopher Budd, director of Sophos X-Ops research at Sophos. “There’s a reason that more than 90% of all cyberattacks reported to Sophos in 2023 involved data or credential theft, whether through ransomware attacks, data extortion, unauthorized remote access, or simply data theft.”

Ransomware Still the Biggest Cyberthreat to SMBs

While the number of ransomware attacks against SMBs has stabilized, it continues to be the biggest cyberthreat to SMBs. Out of the SMB cases handled by Sophos Incident Response (IR), which helps organizations under active attack, LockBit was the top ransomware gang wreaking havoc. Akira and BlackCat were second and third, respectively. SMBs studied in the report also faced attacks by lingering older and lesser-known ransomware, such as BitLocker and Crytox.

Ransomware operators continue to change ransomware tactics, according to the report. This includes leveraging remote encryption and targeting managed service providers (MSPs).

Between 2022 and 2023, the number of ransomware attacks that involved remote encryption—when attackers use an unmanaged device on organizations’ networks to encrypt files on other systems in the network—increased by 62%.

In addition, this past year, Sophos’s Managed Detection and Response (MDR) team responded to five cases involving small businesses that were attacked through an exploit in their MSPs’ remote monitoring and management (RMM) software.

Attackers Sharpen Their Social Engineering and Business Email Compromise (BEC) Attacks

Following ransomware, business email compromise (BEC) attacks were the second highest type of attacks that Sophos IR handled in 2023, according to the Sophos report.

These BEC attacks and other social engineering campaigns contain an increasing level of sophistication. Rather than simply sending an email with a malicious attachment, attackers are now more likely to engage with their targets by sending a series of conversational emails back and forth or even calling them.

In an attempt to evade detection by traditional spam prevention tools, attackers are now experimenting with new formats for their malicious content, embedding images that contain the malicious code or sending malicious attachments in OneNote or archive formats.

In one case Sophos investigated, the attackers sent a PDF document with a blurry, unreadable thumbnail of an “invoice.” The download button contained a link to a malicious website.

For in-depth details about these cybercrimes and more targeting SMBs, please read the 2024 Sophos Threat Report: Cybercrime on Main Street on Sophos.com.

*SMBs are organizations with 500 employees or less.

 


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

NASENI Retreat Focuses on Aligning Development Institutes’ Goals

Published

on

Kindly share this post

In order to achieve greater cohesion amongst its Development Institutes and also sustain their proper alignment with the goals and vision of the National Agency for Science and Engineering Infrastructure, NASENI, the Agency is holding a two-day strategic retreat for Overseeing Officers who are managing the institutes.

Participants at the retreat also include Project Managers, Coordinating Directors and some Directors from NASENI headquarters.

The event, held in Abuja, is expected to strengthen leadership skills to achieve strategic alignment of the various Development Institutes’ goals with the overarching vision of NASENI, ensure collaborative synergies with the headquarters to streamline efforts, maximize resource utilization and enhance decision making capabilities.

It will also shift the focus of research and development (R&D) efforts towards solutions that are market-ready, innovative and capable of generating sustainable economic values.

In his welcome address at the opening ceremony, the Executive Vice Chairman/Chief Executive Officer of NASENI, Mr. Khalil Suleiman Halilu, stated that the retreat was not merely about planning, but about creating the blueprint for action, adding that each of the participants hold a unique and pivotal role in translating the vision of NASENI into reality.

“The conversations, strategies, and commitments forged here will determine how effectively we position NASENI to lead Nigeria into a future defined by innovation, self-reliance, and technological advancement, instill a shared commitment to excellence by adopting global best practices in innovation management”, he stressed.

He pointed out that recent assessments have shed light on the need for greater cohesion between the goals of the Development Institutes and NASENI’s renewed vision, highlighting that the retreat was a critical step in the Agency’s transformative journey-a journey anchored in the guiding principles of Creation, Collaboration, and Commercialization (3Cs).

He added that the principles encapsulate the essence of what NASENI stands for: creating cutting-edge solutions that are commercially viable and impacting directly on the lives of Nigerians who sit at the core of the renewed hope agenda of the President.

“Today, we gather not just to deliberate but to lay the groundwork for a stronger, more unified NASENI-one that is poised to drive Nigeria’s technological aspirations to unprecedented heights.

“As an institution saddled with the responsibility of indigenous technology advancement, NASENI has always been a beacon of innovation, a catalyst for progress, and a key driver of sector-specific solutions.

“Across our specialized Development Institutes, I see clearly that remarkable work has been done to push the frontiers of research, foster innovation, and develop solutions that address national and industrial challenges.

“Yet, we recognize that to stay true to our mission in this rapidly evolving world, we must continuously adapt, align, and refocus our efforts”, he affirmed.

The EVC/CEO, therefore urged the top management staff to engage fully, think boldly, and collaborate purposefully. “This is our moment to redefine our collective impact and to reaffirm our dedication to a vision that transcends individual institutes to unite us under the banner of progress for our nation.

“Together, we can and will achieve extraordinary outcomes. Let us move forward with clarity, resolve, and to demonstrate an unyielding commitment to excellence that defines NASENI,” he concluded.


Kindly share this post
Continue Reading

Telecom

IHS Nigeria Partners with the NCMM to Digitize Nigeria’s Cultural Heritage

Published

on

Kindly share this post

IHS Nigeria, part of the IHS Holding Limited (“IHS Towers”) group, one of the largest independent owners, operators, and developers of shared communications infrastructure in the world by tower count has announced a strategic partnership with the National Commission for Museums and Monuments (NCMM) and the Federal Ministry of Art, Culture, and the Creative Economy (FMACCE) to support the digitization of Nigeria’s cultural heritage.

This collaboration aims to make Nigeria’s historical artifacts, artworks, and cultural monuments more accessible to the public through a digital museum.

The partnership between IHS Nigeria, NCMM, and FMACCE will leverage technologies to digitalize and display artifacts online, helping to preserve and showcase Nigeria’s cultural heritage. It marks a significant step towards modernizing the preservation and dissemination of Nigeria’s cultural assets, making them more accessible to a broader audience.

The digital museum is the first significant project under the Honorable Minister’s Digital Culture Initiative and is designed to provide a platform for the exploration and appreciation of Nigeria’s diverse cultural heritage. This partnership underscores IHS Nigeria’s commitment to sustainability and its role in helping foster cultural preservation and digital education.

Mohamad Darwish, CEO, IHS Nigeria, commented, “We are excited to partner with the National Council for Museums and Monuments and the Federal Ministry of Art, Culture and the Creative Economy on this groundbreaking initiative. As a company deeply rooted in Nigeria, we recognize the importance of preserving, protecting, and promoting our cultural heritage.

“This partnership also aligns with our commitment to sustainability, education, economic growth, and community development. We look forward to contributing to the preservation of Nigeria’s cultural legacy”.

Hannatu Musawa, Nigeria’s Minister of Art, Culture and the Creative Economy, commented, “We are delighted to partner with IHS Nigeria on this initiative which aligns with His Excellency President Bola Ahmed Tinubu’s Renewed Hope Agenda, and our Ministry’s 8-point plan on fostering strategic partnerships.

“I am particularly pleased that this initiative, which is the first significant project under our Digital Culture Initiative, embodies our commitment to innovation, global partnerships, and the sustainable growth of our creative industries, positioning Nigeria as a leader on the global stage.”

Olugbile Holloway, Director General, National Commission for Museums and Monuments, commented, “We are grateful to IHS Nigeria for their support in this remarkable initiative.

“We believe that to keep ahead of current trends and appeal to a younger demographic, it is imperative that a digital experience of our rich cultural heritage is created and made available to the public.

“The digital museum will serve as an invaluable resource for researchers, students, and the general public, both in Nigeria and around the world, and will play a crucial role in the preservation of our national heritage.”

 


Kindly share this post
Continue Reading

Telecom

Google Faces Major Antitrust Action: DOJ Demands Chrome Sale

Published

on

Kindly share this post

In a significant escalation of its antitrust battle against Google, the US Department of Justice (DOJ) on Wednesday, November 20, urged a federal judge to break up the tech giant by ordering the sale of its widely used Chrome browser.

The DOJ also called for an end to Google’s agreements to be the default search engine on smartphones and proposed measures to prevent it from leveraging its Android operating system to dominate the market.

The DOJ suggested that if these remedies fail, Google should be compelled to divest Android entirely. The proposals mark one of the most aggressive antitrust moves against a major tech company in decades, with regulators seeking to curtail Google’s alleged abuse of its market power.

Google’s president of global affairs, Kent Walker, criticized the filing, accusing the DOJ of pursuing a “radical interventionist agenda.” Walker warned that the proposed breakup would disrupt Google’s product ecosystem, harm innovation in artificial intelligence, and threaten America’s global technological leadership.

This case represents a historic shift in the US government’s approach to regulating tech companies, following decades of relative inaction since the failed attempt to break up Microsoft in the early 2000s.

Google is set to respond in a filing next month, with a hearing scheduled for April before Judge Amit Mehta. The judge’s August ruling declared Google a monopoly, setting the stage for this next phase of the legal battle. Any decision is likely to be appealed, potentially taking years to resolve and possibly reaching the US Supreme Court.

The case’s future could also hinge on political changes, as President-elect Donald Trump’s incoming administration may take a different approach to antitrust enforcement. Trump has previously criticized Google for alleged bias against conservatives but has also expressed skepticism about breaking up major tech companies.

The DOJ’s proposals come amid broader efforts to address the dominance of big tech, with five antitrust cases currently pending against Amazon, Meta, Apple, and Google. These cases, brought under the Biden administration, are expected to shape the regulatory landscape for years to come.


Kindly share this post
Continue Reading

Trending