E-Business
Securing Your Organization Against Ransomware Attacks
Nigerian businesses continue to reap immense gains from deploying contemporary digital technologies in the design and execution of their processes. But these tools aren’t always insulated from potential sabotage. Malicious actors may find vulnerabilities in those technologies, and exploit such weaknesses to wreak havoc on the organizations that use them.
One way that cybercriminals do this is by targeting their victims with ransomware. Over the past decade, cyberattacks involving ransomware have grown in number, and have become more sophisticated. These attacks hit SMEs and large corporations, and even public sector agencies, and costs them tens of millions of naira.
If you are a business or an institution in Nigeria, you should be concerned about ransomware and the damage it could cause you.
Ransomware: A Brief Introduction
Ransomware is a program that blocks access to its victim’s files until the victim pays a ransom. Cybercriminals infect a target’s computer with it, aiming to extort a specific amount of money from that target in return for restored access, in a manner akin to a kidnap-for-ransom.
Typically, the perpetrator would send ransomware disguised as a harmless file to victims. If the target downloads or opens the file, it infects their system. The program may be spread through email attachments, malicious URLs, remote desktop protocol, and even malicious advertising.
Newer ransomware types can self-propagate across a network, potentially infecting every system used in an organization. They are capable of shutting down entire businesses.
Ransomware Attacks Are Fairly Common
Reports on the state of IT and the contemporary business environment reveal that ransomware attacks are fairly common across the globe. Not surprisingly, they are usually concentrated on businesses.
In 2020 alone, there were an estimated 304 million ransomware attacks worldwide. This was up 62% on the previous year. According to the Singapore Computer Emergency Response Team, there was “a seven-fold jump” in the number of reported ransomware incidents in the first half of 2020.
Some of that spike in activity was attributed to cyber criminals trying to exploit lapse IT security during the COVID-19 pandemic; their targets were predominantly remote workforces. However, these incidents have numbered in the hundreds of millions per year since 2016.
Nigerian organizations have been affected. A report by the Sophos Group, a UK-based security software and hardware security firm, revealed that 53% of the Nigerian businesses it surveyed had been victims of ransomware in 2019.
Of the businesses hit, about 38% of them admitted to paying the attackers to regain access to their files. However, the Sophos report indicated that these payments didn’t always result in the victims recovering all their resources.
A Few Well-Known Ransomware Attacks
In 2019 and 2020, many companies worldwide were targeted by ransomware called Ryuk. It is spread via malicious emails that contain dubious links or attachments. If successfully deployed on an organization’s computers, it can request a ransom of more than $300,000. As of January 2021, cybercriminals had reaped more than $150 million from Ryuk.
Three years before this, another ransomware, Petya, began infecting computers in several countries. It denied users access to their Operating Systems and demanded a $300 ransom from them. A later version did not unlock the infected system even after the ransom was paid.
The most infamous ransomware attack to date involved the WannaCry program, which infected more than 200,000 computers in over 150 countries. In May 2017, it spread across the world fairly rapidly, affecting both businesses and public institutions. The global cost of the attack is believed to have exceeded $4 billion.
Since the first known ransomware was created in 1989, several more have been designed and deployed, to devastating effect.
Organizations Incur Significant Costs from Ransomware Attacks
The cost of recovering from a ransomware attack has doubled in the past year. The cumulative global cost was well over $1 billion in 2020 alone.
Sophos says that these incidents cost mid-sized businesses an average of $133,000 annually. Some companies incurred several million dollars in recovery costs. In many cases, this expenditure racks up from multiple incidents.
The most hard-hit sectors included media, IT and telecoms, and energy/oil and gas utilities. The public sector was the least frequently targeted. Regardless, organizations in these domains have spent large amounts of money on damages inflicted by ransomware.
Unfortunately, many SMEs are unable to bear the financial weight of recovery. At least 1 in 5 of these businesses shut down within a year of suffering an attack. Bigger companies are better able to cope, but they too aren’t immune from the burden that such events bring.
How to Protect Your Organization Against Ransomware
The threat of a ransomware attack is ever-present. You will do well to prepare for an attempted strike against you.
Map your assets and note the degrees to which each one is vulnerable to an attack. Work with your IT team to prepare a resilience plan, complete with data backup, business continuity, and recovery strategies.
Also, ensure that the latest Operating Systems patches are applied when they become available, and update critical software as soon as is possible. Carry out penetration tests to determine where the weak points are, and fix them.
Adopt enhanced passwords and multi-factor authentication for staff at your organization. Train them to verify emails and other messages before engaging with them, and not to open websites unless they have a URL that begins with ‘HTTPS’ (Hypertext Transfer Protocol). The last ‘s’ is crucial; it indicates a secure site.
A Partner You Can Trust
Ransomware attacks have grown more sophisticated and precise over time. If you have sensitive data to protect, you will want to work with IT security experts to set up a strong defense for your organization.
Layer3 provides this expertise through its cybersecurity services. With our IT risk vulnerability and management, email authentication, and network access solutions, you can build a strong buffer against various kinds of cyber threats, including ransomware.
To find out more about our IT security offerings, or the other services we provide, you can contact us here.
Ozi (www.ozionline.com), a pioneer community-driven delivery app, launches, offering users a new way to send packages and earn extra cash.
L-r: Co-Founders of Ozionline.com: Ikenna Ani (CEO), Azubike Augustine (COO) and Engr. Christian Chime (CTO)
By connecting people traveling with those needing package delivery, Ozi turns everyday trips into profitable opportunities, aiming to disrupt the global parcel delivery industry, also known as the Courier, Express, and Parcel (CEP) market, currently valued at around $460 billion.
Imagine this scenario – You’re traveling to Abuja from Lagos and have empty space in your car. With Ozi, that unused capacity can earn you extra cash by delivering a package along the way. Or maybe you’re a small business owner who needs to send a package to another state but balk at the high cost of courier services.
With Ozi, you can find a verified traveler heading in the right direction to handle your delivery, Engr. Christian Chime, Ozi’s co-founder and CEO, said during the startup launch held at Four Point by Sheraton, Victoria Island, Lagos.
“Why travel empty when you can earn?” asks Engr. Chime said. “Ozi allows travelers to make the most of their journeys while helping others get their packages delivered with ease.”
“This simple yet powerful idea leverages the daily movements of millions of Nigerians to create a logistics network that is fast, affordable, and efficient.
“Ozi’s unique approach leverages the everyday movement of travelers to bridge this gap, creating a system where everyone benefits”.
He said that the choice of Nigeria as the first launch-location for Ozi was due the potential the country holds in the parcel delivery sub-sector.
“Actually, we had the opportunity to launch OZI in another country outside Nigeria but for our thrust in the Nigerian dream and its potentials made us choose the country as the first to witness Ozi’s innovation”, Engr. Chime said.
“Travelers can now monetize their journeys by delivering packages along their routes, while senders gain access to an affordable and convenient alternative to traditional courier services”.
Ozi combines convenience, innovation, and community to deliver a win-win solution for Nigerians. From quick intra-city deliveries to long-distance trips, Ozi offers an affordable, efficient solution for all.
Whether you’re a traveler looking to earn on your trips or a sender seeking a reliable delivery option, Ozi offers a solution that works for everyone.
In the words of Azubuike Augustine, the co-founder and Chief Technology Officer of Ozi, “Ozi’s mission goes beyond simplifying package delivery. The app represents a broader effort to create shared value for all stakeholders in the logistics process.
“By connecting senders and travelers, Ozi creates a win-win scenario where costs are reduced, trust is built, and income opportunities are created”.
“Ozi prioritizes safety and transparency. Every user, whether sender or traveler, undergoes a comprehensive verification process that includes ID checks and phone number authentication. This ensures that all participants in the system are trustworthy and accountable”.
To enhance security further, the CTO said that Ozi offers real-time tracking for all transactions. Senders can monitor their packages throughout the delivery process, ensuring peace of mind. For high-value items, optional insurance coverage provides an added layer of protection, reinforcing Ozi’s commitment to reliability.
“At Ozi, we understand that trust is critical in logistics,” the Azubuike added. “That’s why we’ve built a platform where every step is designed to safeguard both the traveler and the sender.”
“Ozi is more than an app; it’s a community where everyone wins,” said Ikenna Ani, co-founder/COO of Ozi.
“From today, travelers across the globe can sign up through www.ozionline.com and start making every trip count”, he said. “We have put measures in place to ensure only genuine and verified travelers or senders use the platform. Security is primary for us”.
Ikenna added that the app will be released on Google Play Store and Apple (iOS) on January 1, 2025. Ozi Live on Instagram | Facebook.
Temu is set to enchant the holiday season with its unique blend of green magic, bringing a touch of festive wonder to Christmas celebrations. The initiative, themed “Ride the ‘Wicked’ Wave,” promises to deliver an unforgettable experience, combining technology, entertainment, and commerce to create a magical holiday atmosphere.
Temu’s green magic initiative aims to captivate audiences with a variety of festive offerings, from fashion to home decor, handmade crafts, beauty items, chic clothes, shoes, and more.
The platform’s innovative approach ensures that customers can enjoy a seamless shopping experience, with free shipping on all orders1.
As part of the celebration, Temu has also introduced a magical winter Christmas backdrop, perfect for creating a festive ambiance at home.
This backdrop, made from high-quality polyester, is designed to bring the spirit of the season to life, making it an ideal addition to any holiday decor.
With its commitment to providing exceptional products and services, Temu continues to set new standards in the e-commerce industry, ensuring that customers can enjoy the magic of Christmas in style
With the holiday season here, it’s not only a time for magic and celebration but also a prime opportunity for fraudsters to exploit the festive rush for gifts and bargains.
Amid the sparkle of year-end celebrations, cybersecurity experts at Kaspersky have identified several prominent scams targeting consumers across various regions and languages.
Fake holiday shops
Deceptive online stores mimic the look and feel of legitimate e-commerce sites, offering seasonal items such as decorations, gifts, and even trees at steep discounts.
These sites often appear highly localised, adapting their language and currency based on the user’s geographic location, leveraging data extracted from browsers.
Victims typically encounter these stores by following links in ads or pop-ups.
These sites aim to steal funds. Often, these fraudulent stores exist only for a short period, as they get flagged by the vendors of goods.
Free mobile data offer
This scam plays on the allure of free services, claiming to provide free mobile data valid across all major telecom providers.
In order to receive the free data, victims are required to share the promotion link with 10–15 contacts via WhatsApp, ensuring the scam spreads exponentially.
After sharing, victims are prompted to enter their personal details — name, phone number, and email — into a form.
The collected data is then sold on the Dark Web or used in other fraudulent activities.
In some cases, victims unknowingly download malware that compromises their devices, leading to further exploitation.
Holiday payments on behalf of government agencies
Fraudsters impersonate government authorities, promising fictitious payments in celebration of the holidays.
This scam has been reported in several African countries, including Kenya and Nigeria.
To receive payment, victims are directed to fill out a survey which requires personal details like name and phone number.
Once the survey is completed the user is asked to share the link to the announcement with their connections via WhatsApp.
These details are collected and added to fraudulent databases, then sold to third parties or used for phishing attacks and identity theft.
This scam exploits trust in government systems and the festive spirit of giving.
Christmas recipe scam
This scam begins with a seemingly harmless email promoting a holiday cake recipe.
Victims are encouraged to pay a small fee to access the recipe.
Once payment is made, the victim’s credit card information is stolen. The fraudsters also collect other personal information essential for accessing banking services.
“Holiday scams are not a new phenomenon, but they have evolved to become increasingly sophisticated, leveraging regional traditions and technology to exploit unsuspecting victims.
The rush of the holidays makes people more vulnerable — they’re distracted, eager to grab a deal, or trust promotions that align with festive themes. Cybercriminals are not just stealing money — they’re building massive databases of personal information that fuel future fraudulent schemes.
The holiday season is a time for joy and giving, but users need to remain vigilant to ensure they’re not unknowingly giving fraudsters the tools to exploit them further,” said Olga Svistunova, Senior Web Content Analyst at Kaspersky.
FG Gives Banks, Telcos Six-Month Deadline to Resolve N250Bn USSD Debt
NCC Launches Initiative to Combat Fraud, Spam Messaging
SEC Restates Commitment to Transparency in Fintech Regulation
Egueke, Former Bank Manager Jailed for $46,900 Fraud
Ecobank Warns against Fraud during Yuletide
UBA Group Sets Foot in France with Full Banking Services
FG Begins N50 Electronic Levy Deductions from Moniepoint, Other Digital Banks
Report Reveals Most Organisations Fear AI-driven Cyberattacks but Lack Key Defences
Nigeria Risks Missing out on $1.2 Trillion AI Opportunity- NigComSat
Firm Sues NIMC, Others On Digital Rights Breach Allegations
Telecom2 days agoFrom Niche App to Global Giant: TikTok’s Controversial Journey
Telecom2 days agoGroup Advocates for Digital Rights at 2024 Internet Governance Forum
Broadcasting2 days agoAero Contractors Celebrates Long-Serving Employees at Award Ceremony
E-Financial2 days agoCBN Permits BDC Operators to Buy FX from NAFEM During Festive Season
Telecom2 days agoPatricia Technologies Begins Repayments to Customers Affected by 2022 Security Breach
E-Business24 hours agoOzi Launches to Redefine $460Bn Global Package Delivery Market
Broadcasting24 hours agoAfrica Magic Announces Call for Entries for 11th AMVCA
Telecom24 hours agoHow Artificial Intelligence is Revolutionizing Business Plans for Entrepreneurs