Telecom
Abuse of Trusted Applications Grows by 51% in Latest Sophos Report
Sophos, a global leader in innovating and delivering cybersecurity as a service, today released “The Bite from Inside: The Sophos Active Adversary Report,” an in-depth look at the changing behaviors and attack techniques that adversaries used in the first half of 2024.
John Shier, field CTO, Sophos
The data, derived from nearly 200 incident response (IR) cases from across both the Sophos X-Ops IR team and Sophos X-Ops Managed Detection and Response (MDR) team, found that attackers are leveraging trusted applications and tools on Windows systems, commonly called “living off the land” binaries, to conduct discovery on systems and maintain persistence.
When compared to 2023, Sophos saw a 51% increase in abusing “Living off the Land” binaries or LOLbins; since 2021, it’s increased by 83%.
Among the 187 unique Microsoft LOLbins detected in the first half of the year, the most frequently abused trusted application was remote desktop protocol (RDP). Of the nearly 200 IR cases analyzed, attackers abused RDP in 89% of them.
This dominance continues a trend first observed in the 2023 Active Adversary report in which RDP abuse was prevalent in 90% of all IR cases investigated.
“Living-off-the-land not only offers stealth to an attacker’s activities but also provides a tacit endorsement of their activities. While abusing some legitimate tools might raise a few defenders’ eyebrows, and hopefully some alerts, abusing a Microsoft binary often has the opposite effect. Many of these abused Microsoft tools are integral to Windows and have legitimate uses, but it’s up to system administrators to understand how they are used in their environments and what constitutes abuse. Without nuanced and contextual awareness of the environment, including continuous vigilance to new and developing events within the network, today’s stretched IT teams risk missing key threat activity that often leads to ransomware,” says John Shier, field CTO, Sophos.
In addition, the report found that, despite the government disruption of LockBit’s main leak website and infrastructure in February, LockBit was the most frequently encountered ransomware group, accounting for approximately 21% of infections in the first half of 2024.
Other key findings from the latest Active Adversary Report:
· Root Cause of Attacks: Continuing a trend first noted in the Active Adversary Report for Tech Leaders, compromised credentials are still the number one root cause of attacks, accounting for the root cause in 39% of cases. This is, however, a decline from the 56% noted in 2023
· Network Breaches Dominate for MDR: When examining solely the cases from the Sophos MDR team, network breaches were the dominant incident the team encountered
· Dwell Times Are Shorter for MDR Teams: For cases from the Sophos IR team, dwell time (the time from when an attack starts to when it’s detected) has remained approximately eight days. However, with MDR, the median dwell time is just one day for all types of incidents and only three days for ransomware attacks
· The Most Frequently Compromised Active Directory Servers Are Nearing End of Life: Attackers most frequently compromised the 2019, 2016, and 2012 server versions of Active Directory (AD). All three of these versions are now out of mainstream Microsoft support—one step before they become end-of-life (EOL) and impossible to patch without paid support from Microsoft. In addition, a full 21% of the AD server versions compromised were already EOL
To learn more about attacker behaviors, tools and techniques, read “The Bite from Inside: The Sophos Active Adversary Report,” on Sophos.com.
In a resounding commitment to bridging gender digital divide, the National Information Technology Development Agency (NITDA), in collaboration with the Federal Ministry of Women Affairs (FMWA), has taken a decisive step toward closing the gender digital divide by presenting the National Gender Digital Inclusion Strategy (NGDIS) at the United Nations 69th Session of the Commission on the Status of Women (CSW69). Themed “Digital Harmony: Advancing Gender Inclusion by Empowering Women and Children for a Secure Digital Future,” the high-level event reinforced Nigeria’s commitment to fostering equitable access to digital technology, online safety, and economic empowerment for women and children.
L-R: Esther Eghobamien-Mshelis – President of UN CEDAW, Iklima Musa – Special Assistant to the Director General of NITDA, Noimot Salako – Deputy Governor Ogun state, Maryam Ciroma – former minster of women affairs, Imaan Sulaiman- Minister of Women Affairs, Josephine Anenih – former Minister of women affairs and Dr Maryam Keshinro – Permanent Secretary – Ministry of Women Affairs at the United Nations 69th Session.
Speaking at the event, Iklima Musa Salihu, Special Assistant to the Director General on Strategic Partnerships, presented the strategy, emphasizing NITDA’s role in driving digital transformation and creating opportunities for women and girls to actively participate in the digital economy.
The NGDIS, developed in alignment with Nigeria’s Renewed Hope Agenda and Sustainable Development Goals (SDGs) 5 and 8, seeks to remove barriers to digital inclusion by expanding access to digital skills training, infrastructure, and mentorship opportunities for women and girls.
Kashifu Inuwa Abdullahi, Director General of NITDA as represented by the SA, in his special remarks reaffirmed the Agency’s commitment to ensuring that Nigeria’s digital transformation is inclusive and equitable, highlighting NGDIS as a game-changer in achieving gender parity in the digital space.
He noted that the framework prioritizes digital literacy, entrepreneurship, safety, and gender-responsive policies to accelerate women’s participation in Nigeria’s growing digital economy.
The NGDIS is built on five core pillars that will drive women’s access, participation, and leadership in the digital ecosystem. It seeks to expand digital literacy and skills by ensuring at least 40% female participation in all national training initiatives.
Recognizing the role of women in Nigeria’s innovation and entrepreneurship landscape, the strategy emphasizes access to funding, mentorship, and technical assistance for female-led startups, leveraging the Nigeria Startup Act to increase financial and institutional support for women in the tech ecosystem. With 58% of young women globally experiencing online harassment, the NGDIS prioritizes online safety and cybersecurity awareness.
Speaking at the event, Minister of Women Affairs, Honourable Imaan Sulaiman, FSI, underscored the urgent need for action in tackling gender disparities in digital access.
She revealed alarming statistics that demonstrate the stark reality of the digital divide in Nigeria, highlighting that 68% of Nigerian women do not own smartphones, making it difficult for them to access online services and economic opportunities.
She stressed that this divide extends beyond access, as women and children face significant online risks, including cyber harassment, digital gender-based violence, and exclusion from the rapidly growing tech-driven economy.
She called for the swift implementation of the National Gender Digital Inclusion Strategy (NGDIS) 2024-2027, which seeks to remove the structural barriers that prevent women from fully engaging in the digital economy.
She emphasized the need for strong legal frameworks that would accelerate action in promoting digital literacy, providing safe online spaces, and empowering women to thrive in technology-driven industries.
She reaffirmed that President Bola Ahmed Tinubu’s Renewed Hope Agenda is committed to creating an inclusive digital future where no woman or child is left behind.
She urged all stakeholders to work together to transform digital access and security for women and children, making technology a tool for empowerment rather than exclusion.
As the world embraces the Fourth Industrial Revolution, NITDA in collaboration with stakeholders is taking bold and strategic steps to ensure that women and girls are not only participants but also leaders in the digital transformation journey.
The National Gender Digital Inclusion Strategy is a blueprint for action, providing a clear framework for accelerating digital inclusion, fostering entrepreneurship, and strengthening online safety for Nigerian women and children.
Nigeria Data Protection Commission (NDPC) on Thursday unveiled the Nigeria Data Protection Act – General Application and Implementation Directive (NDP Act-GAID), 2025.
The directive is aimed at safeguarding the fundamental rights and freedoms of Nigerians in the context of data privacy and protection.
Speaking at a press conference in Abuja, Dr Vincent Olatunji, National Commissioner/CEO of NDPC, said the directive was a significant milestone in Nigeria’s quest to protect citizens’ data.
Olatunji explained that the directive addressed various critical areas, including data protection principles, lawful bases of data processing, and data subjects’ rights.
He added that the directive also emphasized the importance of safeguarding privacy rights in the context of emerging technologies like Artificial Intelligence.
The NDPC boss noted that the commission had introduced the data subjects’ Standard Notice to Address Grievance (SNAG), empowering Nigerians to demand remedial action from data controllers and processors.
Olatunji said the full implementation of the NDP Act would commence in September 2025, with provisions related to fees starting in January 2026.
He assured that the NDPC would provide guidance notices, carry out capacity-building programs, and collect feedback to inform future reviews and regulatory instruments.
Nigeria CommunicationsWeek reports that the NDP Act-GAID, 2025, is a regulatory instrument that gives effect to the noble objectives of the Nigeria Data Protection Act, 2023.
The act was signed into law by President Bola Tinubu on June 12, 2023, to guarantee the privacy of citizens, their homes, correspondence, telephone conversations, and telegraphic communications.
Universal Service Provision Fund (USPF) has unveiled plans to deploy 1,000 base transceiver stations (BTS) across rural communities in Nigeria by 2030.
The initiative, in collaboration with development partners, aims to bridge the digital divide and foster socio-economic growth in underserved areas.
Base transceiver stations are essential components of cellular networks, enabling wireless communication between user devices and network infrastructure.
By expanding this infrastructure, the USPF seeks to enhance telecommunications access, supporting vital sectors such as education, healthcare, and commerce.
The move aligns with global efforts to improve rural connectivity, with innovative solutions such as mounting BTS on wind turbines being explored in some regions to ensure cost-effective and widespread network coverage.
With this large-scale deployment, the USPF is reaffirming Nigeria’s commitment to achieving universal ICT access, creating opportunities for millions of people in remote areas to benefit from digital transformation and economic inclusion.
The Universal Service Provision Fund (USPF) is a Nigerian government initiative under the Nigerian Communications Commission (NCC) aimed at bridging the digital divide by expanding telecommunications and ICT services to underserved and unserved areas across the country.
Public Outrage, Legal Threats as Abuja Council Demands N500, 000 as TV Levy
FIRS Partners Flutterwave for Digital Payment Collection
NIN Enrolment Hits 117.3m – NIMC
BOI Launches N10Bn GLOW Fund for Female Entrepreneurs
FG Invests N2.5Bn in Satellite Surveillance System to Revolutionise Mining Sector
Telecom3 days agoATCON Calls for Telecom Policy Improvements in Nigeria
E-Business3 days agoGoogle to Buy Cybersecurity Company Wiz for $32Bn
E-Business3 days agoDarey.io, Xterns.ai to Expand Digital Skills, Experience Through Lagos Tech Hub
E-Business2 days agoFirm Offers Steps to Prevent a WhatsApp Account from being Hacked
E-Business3 days agoMicrosoft Warns of StilachiRAT Malware Threat to Cryptocurrency Wallets
Telecom3 days agoMTN Group to Invest $10Bn in African Expansion by 2030
E-Financial2 days agoCourt Slams Zenith Bank with N30m Damages over Fraudulent Debits in Customer’s Account
E-Business3 days agoSenate Votes to Compel Facebook, Others to Open Offices in Nigeria