Telecom
Key Trends in Sophos 2022 Threat Report
Sophos, a global leader in next-generation cybersecurity, on Wednesday published the Sophos 2022 Threat Report, which shows how the gravitational force of ransomware’s black hole is pulling in other cyberthreats to form one massive, interconnected ransomware delivery system – with significant implications for IT security.
The report, written by SophosLabs security researchers, Sophos Managed Threat Response threat hunters and rapid responders, and the Sophos AI team, provides a unique multi-dimensional perspective on security threats and trends facing organizations in 2022.
The Sophos 2022 Threat Report analyzes the following key trends:
1. Over the coming year, the ransomware landscape will become both more modular and more uniform, with attack “specialists” offering different elements of an attack “as-a-service” and providing playbooks with tools and techniques that enable different adversary groups to implement very similar attacks.
According to Sophos researchers, attacks by single ransomware groups gave way to more ransomware-as-a-service (RaaS) offerings during 2021, with specialist ransomware developers focused on hiring out malicious code and infrastructure to third-party affiliates.
Some of the most high profile ransomware attacks of the year involved RaaS, including an attack against Colonial Pipeline in the U.S. by a DarkSide affiliate.
An affiliate of Conti ransomware leaked the implementation guide provided by the operators, revealing the step-by-step tools and techniques that attackers could use to deploy the ransomware.
Once they have the malware they need, RaaS affiliates and other ransomware operators can turn to Initial Access Brokers and malware delivery platforms to find and target potential victims. This is fueling the second big trend anticipated by Sophos.
2. Established cyberthreats will continue to adapt to distribute and deliver ransomware. These include loaders, droppers and other commodity malware; increasingly advanced, human-operated Initial Access Brokers; spam; and adware. In 2021, Sophos reported on Gootloader operating novel hybrid attacks that combined mass campaigns with careful filtering to pinpoint targets for specific malware bundles.
3. The use of multiple forms of extortion by ransomware attackers to pressure victims into paying the ransom is expected to continue and increase in range and intensity. In 2021, Sophos incident responders catalogued 10 different types of pressure tactics, from data theft and exposure, to threatening phone calls, distributed denial of service (DDoS) attacks, and more.
4. Cryptocurrency will continue to fuel cybercrimes such as ransomware and malicious cryptomining, and Sophos expects the trend will continue until global cryptocurrencies are better regulated. During 2021, Sophos researchers uncovered cryptominers such as Lemon Duck and the less common, MrbMiner, taking advantage of the access provided by newly reported vulnerabilities and targets already breached by ransomware operators to install cryptominers on computers and servers.
“Ransomware thrives because of its ability to adapt and innovate,” said Chester Wisniewski, principal research scientist at Sophos. “For instance, while RaaS offerings are not new, in previous years their main contribution was to bring ransomware within the reach of lower-skilled or less well-funded attackers.
This has changed and, in 2021, RaaS developers are investing their time and energy in creating sophisticated code and determining how best to extract the largest payments from victims, insurance companies, and negotiators. They’re now offloading to others the tasks of finding victims, installing and executing the malware, and laundering the pilfered cryptocurrencies.
This is distorting the cyberthreat landscape, and common threats, such as loaders, droppers, and Initial Access Brokers that were around and causing disruption well before the ascendancy of ransomware, are being sucked into the seemingly all-consuming ‘black hole’ that is ransomware.
“It is no longer enough for organizations to assume they’re safe by simply monitoring security tools and ensuring they are detecting malicious code. Certain combinations of detections or even warnings are the modern equivalent of a burglar breaking a flower vase while climbing in through the back window.
“Defenders must investigate alerts, even ones which in the past may have been insignificant, as these common intrusions have blossomed into the foothold necessary to take control of entire networks.”
Additional trends Sophos analyzed include:
· After the ProxyLogon and ProxyShell vulnerabilities were discovered (and patched) in 2021, the speed at which they were seized upon by attackers was such that Sophos expects to see continued attempts to mass-abuse IT administration tools and exploitable internet facing services by both sophisticated attackers and run-of-the-mill cybercriminals
· Sophos also expects cybercriminals to increase their abuse of adversary simulation tools, such as Cobalt Strike Beacons, mimikatz and PowerSploit. Defenders should check every alert relating to abused legitimate tools or combination of tools, just as they would check a malicious detection, as it could indicate the presence of an intruder in the network
· In 2021, Sophos researchers detailed a number of new threats targeting Linux systems and expect to see a growing interest in Linux-based systems during 2022, both in the cloud and on web and virtual servers
· Mobile threats and social engineering scams, including Flubot and Joker, are expected to continue and diversify to target both individuals and organizations
· The application of artificial intelligence to cybersecurity will continue and accelerate, as powerful machine learning models prove their worth in threat detection and alert prioritization. At the same time, however, adversaries are expected to make increasing use of AI, progressing over the next few years from AI-enabled disinformation campaigns and spoof social media profiles to watering-hole attack web content, phishing emails and more as advanced deepfake video and voice synthesis technologies become available
To learn more about the threat landscape in 2021 and what this means for IT security in 2022, read the full Sophos 2022 Threat Report.
Additional content for the Sophos 2022 Threat Report:
· Video of the headline findings, presented by Chester Wisniewski, principal research scientist, Sophos
· An article on SophosLabs Uncut recapping the report sections
· A Sophos News opinion piece by Wisniewski on the ransomware turf wars
· A Naked Security article introducing the report
Telecom
IHS Nigeria Hosts Telecom Industry Stakeholders to Discuss Protection of Critical National Infrastructure in Lagos State
IHS Nigeria, part of the IHS Holding Limited (NYSE: IHS) (“IHS Towers”) group, one of the largest independent owners, operators, and developers of shared communications infrastructure in the world by tower count, recently hosted a high-level meeting of stakeholders in the telecommunications industry including regulators and law enforcement agencies, at its corporate headquarters in Lagos.
The meeting was organized to develop a multi-stakeholder action plan for the protection of Critical National Information Infrastructure (CNII) assets in Lagos state.
Recognizing the importance of communications infrastructure as the backbone of national security, economic growth and social cohesion, the stakeholders at the meeting convened under the umbrella of the Association of Licensed Telecoms Operators of Nigeria (ALTON) agreed on the urgent need for collaborative solutions to ensure the protection of these vital assets.
The meeting was attended by senior representatives from the telecommunications stakeholder groups and regulatory bodies including the Nigerian Communications Commission (NCC), the Association of Licensed Telecoms Operators of Nigeria (ALTON), Association of Telecommunications Companies of Nigeria (ATCON) and the Lagos State Infrastructure Maintenance and Regulatory Agency (LASIMRA).
Also in attendance were representatives from the Mobile Network Operators (MNOs), and InfraCos as well as the Nigeria Security and Civil Defence Corps (NSCDC), the security agency tasked with the protection of Critical National Infrastructure across the country.
Following extensive deliberations, the stakeholders resolved to establish a working group dedicated to addressing key industry challenges, including the vandalization and theft of telecommunications infrastructure, arbitrary shutdown of base stations, fiber cuts due to road construction and the denial of access by unauthorized individuals by leveraging technology for real-time monitoring and protection, strengthening security measures around telecommunication sites and collaborating more with the security and regulatory agencies to mitigate these challenges.
The stakeholders underscored the need to prioritize deterrence and prevention of these incidents and highlighted the importance of public awareness campaigns to sensitize the host communities and public of the need to protect telecommunications infrastructure in their localities.
Dapo Otunla, Senior Vice President & Chief Corporate Services Officer of IHS Nigeria, commented, “The protection of Critical National Information Infrastructure (CNII) has been a critical concern for all industry stakeholders.
“We are experiencing daily losses of assets, which significantly impact on the quality of service delivered to subscribers. Addressing these issues is paramount to sustaining Nigeria’s digital ecosystem and meeting regulatory expectations.”
Over 1ooo athletes are already set to participate in the upcoming MTN Champs Continental Relays, taking place between April 9 and April 12 at the UNILAG and Yabatech Sports complexes. Organisers anticipate even more registrations before the April 2 deadline.
MTN Champs is Nigeria’s largest grassroots sports competition, a collaboration between MTN Nigeria and Making of Champs (MoC), providing a platform for young athletes to showcase their talents and potentially represent Nigeria on the global stage.
Osaze Ebueku, Senior Manager, Go-to-Market at MTN Nigeria at the opening ceremony of the MTN Champs Classics events in Benin had emphasised the long-term vision behind MTN Champs: “We’re building future Olympians for Nigeria. MTN Champs is about more than competition. It’s about changing lives.”
The continental relays mark the second leg of the MTN Champs Season 3, following the Classics competition in Benin, which saw 4,371 event entries from 2,056 athletes.
As of March 24, the Lagos leg had already recorded 2,821 event entries across different age categories, highlighting the growing enthusiasm around the competition.
The registered athletes are spread across four categories, with 174 in the Cadet (U-14) category, 388 in Youth (U-17), 270 in Junior (U-20), and 279 in the Senior category.
To ensure smooth participation, organisers have outlined important guidelines. Athletes in the Cadet, Youth, and Junior categories must submit a signed Parental Consent Form, while all registered schools and athletes must collect their competition bibs by April 8 at the competition venue to confirm their participation and secure their place on the start list.
Sports enthusiasts can look forward to an electrifying showcase of emerging talent, as young athletes seize the opportunity to prove their skills on a professional stage.
Telecom
Again, Labour Fumes, Threatens Shutdown of Telcos over Non-Implementation of 15 Percent Tariff Reduction
Nigeria Labour Congress (NLC) is threatening to shut down operations of telecommunications companies over their refusal to comment on the 15 percent reduction in telecom tariffs.
Recall that that organised labour, through the NLC, forced the federal government and NCC to reduce the telecommunications tariff hike from 50% to 35% after threatening to shut down telecom operations and the NCC in response to what it saw as exploitative economic policies amidst excruciating suffering, hardship, and deepening poverty.
The government had previously formed a 10-member committee, consisting of five government and NLC representatives, to deliberate on the thorny topic of tariff hikes within two weeks and report back before making a final decision on the new telecom tariff structure.
Consequently, on Friday, February 21, 2025, the committee, at a meeting conducted in the office of the National Security Adviser (NSA) that lasted nearly three hours, decided on a 15 per cent tariff cut.
According to reports, in accordance with the conditions of the agreement, an official communiqué announcing the tariff reduction was scheduled to be released on Saturday, February 22.
According to Chronicle,iIt was said that the meeting began at 4:00 p.m. and concluded around 7:00 p.m., during which NLC representatives insisted that the tariff hike be withdrawn.
According to sources, after significant pressure from NLC representatives in the 10-man committee, the government and NCC gave up and agreed on the 15% decrease, which the government or NCC should have announced the next day.
However, at the time of this report, no such announcement has been made.
Leaders of the labour union are not taking the government’s failure to announce or implement the 15% tariff decrease lightly, suspecting that they have been duped.
The Labour leaders have therefore resolved to directly confront the NCC and telecommunications operators next week.
Though it has been reported that the date for the start of the industrial action against the NCC and telecom providers has been set and mobilisation is underway, the information is being closely guarded.
One of the leaders of the NLC stated that “We have received directives to commence mobilisation since last week. In fact, the date for the commencement of industrial action against the NCC and telecommunication operators’ offices across the country has been fixed. We have been warned not to disclose the date because the plan is to take all concerned by surprise. We are not giving any notice because we thought we had resolved this matter over a month ago. It is as if we have been scammed. Therefore, we have decided to confront the matter head-on.”
On February 12, the NLC expressed outrage over telecommunications companies’ tariff hikes, despite an earlier agreement with the Federal Government and the NCC.
According to the Labour union, “If the telecommunications companies fail to revert to the old tariff by the end of February 2025, a total shutdown of their operations nationwide will commence on March 1, 2025.”
To demonstrate its seriousness, the NLC declared that, as a first step in resisting the arbitrary tariff hike, it directed that workers and other willing citizens boycott the services of MTN, AIRTEL, and GLO daily between 11:00 a.m. and 2:00 p.m. until the end.
On Tuesday, February 11, NLC leaders issued a communiqué at the conclusion of their Central Working Committee (CWC) meeting in Lokoja, Kogi State, urging workers and citizens to suspend data purchases from telecommunications companies, which have also become one of their most effective tools for exploiting Nigerian citizens.
The communiqué, signed by Joe Ajaero and Emma Ugboaja, Congress’ President and General Secretary, respectively, instructed NLC State Councils and industrial union affiliates to quickly sensitise and mobilise their members and the general public in their jurisdictions.
Titan Trust Bank Selects Oracle FSS for Core and Digital Banking Technology
IMF Appoints Elumelu, Nigerian Businessman to Advisory Council
NCS to Launch Electronic System for Cash Declarations at Airports
IHS Nigeria Hosts Telecom Industry Stakeholders to Discuss Protection of Critical National Infrastructure in Lagos State
Aquaterra Energy Secures Multi-million-dollar well Intervention Contract with Intrepid Energy in Nigeria
Telecom2 days agoAgain, Labour Fumes, Threatens Shutdown of Telcos over Non-Implementation of 15 Percent Tariff Reduction
News2 days agoNNPC Ready to Go to Capital Market for IPO- CFIO
E-Business2 days agoFG Launches Online Visa Approval Centre
E-Business2 days agoQNET Disassociates From Fraudulent Academy in Abuja, Supports EFCC Arrest
E-Business2 days agoFirm Discovers Sophisticated Chrome Zero-day Exploit Used in Active Attacks
Telecom1 day agoIHS Nigeria Hosts Telecom Industry Stakeholders to Discuss Protection of Critical National Infrastructure in Lagos State
E-Business2 days agoNITDA Partners JICA to Launch Nigeria-Japan Startup Hub
E-Financial2 days agoFintech, Remittances Anchor Africa’s Booming Payments System