Telecom
Attackers Exploit Stolen Session Cookies to Bypass Multi Factor Authentication and Gain Access to Corporate Resources – Sophos Report Reveals
Sophos, a global leader in next-generation cybersecurity, today announced in the Sophos X-Ops report, “Cookie stealing: the new perimeter bypass,” that active adversaries are increasingly exploiting stolen session cookies to bypass Multi-Factor Authentication (MFA) and gain access to corporate resources.
In some cases, the cookie theft itself is a highly targeted attack, with adversaries scraping cookie data from compromised systems within a network and using legitimate executable to disguise the malicious activity.
Once the attackers obtain access to corporate web-based and cloud resources using the cookies, they can use them for further exploitation such as business email compromise, social engineering to gain additional system access, and even modification of data or source code repositories.
“Over the past year, we’ve seen attackers increasingly turn to cookie theft to work around the growing adoption of MFA. Attackers are turning to new and improved versions of information stealing malware like Raccoon Stealer to simplify the process of obtaining authentication cookies, also known as access tokens,” said Sean Gallagher, principal threat researcher, Sophos. “If attackers have session cookies, they can move freely around a network, impersonating legitimate users.”
Session, or authentication, cookies are a particular type of cookie stored by a web browser when a user logs into web resources. If attackers obtain them, then they can conduct a “pass-the-cookie” attack whereby they inject the access token into a new web session, tricking the browser into believing it is the authenticated user and nullifying the need for authentication.
Since a token is also created and stored on a web browser when using MFA, this same attack can be used to bypass this additional layer of authentication.
Compounding the issue is that many legitimate web-based applications have long-lasting cookies that rarely or never expire; other cookies only expire if the user specifically logs out of the service.
Thanks to the malware-as-a-service industry, it’s getting easier for entry-level attackers to get involved in credential theft. For example, all they need to do is buy a copy of an information-stealing Trojan like Raccoon Stealer to collect data like passwords and cookies in bulk and then sell them on criminal marketplaces, including Genesis.
Other criminals on the attack chain, such as ransomware operators, can then buy this data and sift through it to leverage anything they deem useful for their attacks.
Conversely, in two of the recent incidents that Sophos investigated, attackers took a more targeted approach. In one case, the attackers spent months inside a target’s network gathering cookies from the Microsoft Edge browser.
The initial compromise occurred via an exploit kit, and then the attackers used a combination of Cobalt Strike and Meterpreter activity to abuse a legitimate compiler tool to scrape access tokens. In another case, the attackers used a legitimate Microsoft Visual Studio component to drop a malicious payload that scraped cookie files for a week.
“While historically we’ve seen bulk cookie theft, attackers are now taking a targeted and precise approach to cookie stealing. Because so much of the workplace has become web-based, there really is no end to the types of malicious activity attackers can carry out with stolen session cookies. They can tamper with cloud infrastructures, compromise business email, and convince other employees to download malware or even rewrite code for products. The only limitation is their own creativity,” said Gallagher.
“Complicating matters is that there is no easy fix. For example, services can shorten the lifespan of cookies, but that means users must re-authenticate more often, and, as attackers turn to legitimate applications to scrape cookies, companies need to combine malware detection with behavioral analysis.”
To learn more about session cookie theft and how adversaries are exploiting the technique to carry out malicious activity, read the full report, “Cookie Stealing: the new perimeter bypass,” on Sophos.com.
Telecom
FG Says 50 Percent Telecom Tariff Hike is Only a Start
Wale Edun, minister of Finance, has stated that the recently approved 50 percent tariff increase in the cost of telecommunications services is only a starting point. He noted that it is necessary to balance rising operational costs with the provision of quality services and the broader economic considerations for both consumers and the telecoms industry.
He said this during an interview on Arise News at the 2025 World Economic Forum (WEF) in Davos, Switzerland.
Edun explained that the tariff review, the first in 12 years, was necessitated by inflation and a significant rise in telecom operators’ operational costs.
While operators had requested a 100 percent increase to meet cost demands, the Federal Government approved a 50 percent increment as a compromise.
“There is a need to reflect the fact that over a 12-year period, there has been a rise in costs, there has been inflation, and that needs to be reflected,” Edun said.
“It is all about compromise and the timing and sequencing of these changes. As critical players in Nigeria’s economy, we want the telcos to operate efficiently, providing quality services, and contributing to GDP growth.”
Edun highlighted that the government’s primary objective is to ensure that telecom operators deliver efficient services, such as seamless call terminations and improved quality, while fostering growth in the sector.
“We don’t want dropped calls. We want good quality services from them. And at the same time, we want them growing, employing people, and adding to the country’s GDP,” he stated.
While acknowledging the backlash to the tariff increase due to its potential impact on the cost of living, Edun maintained that the government is committed to ongoing reviews and consultations to address these concerns and ensure that the adjustments remain beneficial for both consumers and operators.
“The cost-of-living increase that has occurred has to be reflected,” he explained.
“But I believe that this 50 percent increase is a start, and it is a situation that will be looked at on a forward-looking basis as we go forward. There will continue to be review, consultation, and discussion in this area.”
The minister also noted that telecom pricing is regulated to prevent arbitrary increases and the importance of dialogue and compromise in setting tariffs.
Telecom
NANS Threatens Nationwide Protests over 50 Percent Telecom Tariff Hike
National Association of Nigerian Students (NANS) has condemned the recently approved 50 per cent increment in telecommunications tariffs by the Nigeria Communications Commission (NCC) and the Ministry of Communications, Digital Economy, describing it as not only abnormal but inconsiderate and unjustifiable.
NANS in a statement signed by Comrade Oladimeji Uthman, clerk of the Senate, National Headquarters, warned the NCC and the Ministry of Communications, Digital Economy to review the increment within 72 hours or risk a nationwide protest by over 40 million Nigerian students already going through untold hardships occasioned by rising inflation.
Comrade Uthman stated further, “This decision is not only abnormal but also highly inconsiderate and unjustifiable, especially in the current socio-economic climate that has placed an unbearable burden on Nigerian students and citizens.
“In an era where digital connectivity has become indispensable to education and daily life, such a steep increment will have far-reaching consequences for students. The proposed hike will escalate the cost of internet data and other telecommunication services, which are critical tools for learning, research, and academic activities.
“The harsh realities of Nigeria’s economic situation—marked by rising tuition fees, expensive transportation, increased accommodation costs, and general inflation—already weigh heavily on the shoulders of students and their families.”
NANS emphasised that adding a 50% tariff increment to these challenges amounts to an outright disregard for the welfare and progress of Nigerian students, saying that the association had over the year been at the forefront for affordable and inclusive access to digital infrastructure as a way to bridge the educational gap in Nigeria.
It stated that the NCC’s decision, if implemented, will further exacerbate the digital divide, excluding millions of students from accessing quality education and information as it raised concerns that the policy undermines the government’s commitment to youth development, innovation, and the digital economy agenda.
Considering the challenges faced by the telecommunications industry, including inflation and operational costs, NANS cautioned that the burden of these challenges should not be transferred to the masses, especially Nigerian students and urged the NCC and the Ministry of Digital Economy to explore alternative measures to address these issues without jeopardizing the affordability and accessibility of telecommunications services.
NANS explained further ,”As stakeholders in the future of this nation, we call for immediate dialogue with the NCC, the Ministry of Digital Economy, and relevant telecommunications stakeholders to discuss a fair and balanced approach that prioritizes the welfare of Nigerian students and citizens. We believe that together, we can find a sustainable solution that balances industry growth with public interest.
The statement added, “As the umbrella body of Nigerian students, NANS cannot sit idly by while policies detrimental to the collective interest of over 40 million Nigerian students are implemented without due consideration.
“We hereby issue a 72-hour ultimatum to the NCC to review this tariff increment and take decisive steps toward its reversal. Failure to heed this call will leave NANS with no other choice but to embark on a nationwide mass protest to demand justice and fairness for Nigerian students.
“We are prepared to mobilize all student leaders, unions, and organizations across the 36 states and the Federal Capital Territory to peacefully demonstrate against this decision.”
It warned that the planned protests will not only demand the reversal of the tariff increment but also advocate for broader consultations with stakeholders before any future policies affecting the public are implemented, saying it remained committed to peaceful advocacy and dialogue as a means of resolving issues but with limited patience.
The review, which comes amid rising inflation and economic pressures, has elicited mixed reactions. While consumers have expressed affordability concerns, industry players see it as a long-overdue adjustment to sustain operations and improve service delivery.
Telecom
9mobile Pledges to Boost Service Quality, Customer Experience
Telecommunications provider, 9mobile, has applauded the Federal Government and the Nigerian Communications Commission (NCC) for approving a 50% tariff adjustment—a vital initiative aimed at addressing persistent challenges in Nigeria’s telecom sector.
This decision, reached after extensive deliberations, marks a significant step towards ensuring the long-term sustainability of the industry by enabling the necessary investments to enhance service quality for consumers nationwide.
The telecom industry had previously advocated for a substantial tariff review to combat surging operational costs, driven by inflation, skyrocketing energy prices, and a currency devaluation exceeding 300%.
While the industry’s initial request called for a larger increase up to 100%, the NCC’s approval of a 50% adjustment represents a balanced approach to safeguarding affordability for consumers while addressing industry sustainability concerns.
Obafemi Banigbe, 9mobile’s CEO, emphasized that the tariff adjustment will enable telecom operators to reinvest in critical infrastructure upgrades and capacity expansion—both of which have been delayed due to financial constraints. “This tariff adjustment is timely and essential,” Banigbe stated.
“It allows operators to fulfill obligations and capital commitments necessary for future growth. Without this, the industry risked a decline in service quality due to insufficient funding. With this change, we are better positioned to drive innovation, growth, and enhanced connectivity for Nigerians.”
Banigbe further noted that the increase provides a much-needed boost for 9mobile’s ongoing business transformation. This includes modernizing network infrastructure, expanding coverage, and improving digital platforms for faster and more reliable connectivity. “This decision enables us to replace outdated equipment, expand our network to underserved areas, and enhance the overall customer experience,” he added.
The tariff adjustment is a strategic measure to bridge the funding gap exacerbated by rising operational expenses, many of which are denominated in foreign currency.
These challenges have strained telecom operators, limiting their ability to reinvest and driving up debt levels. The new pricing structure provides a pathway to financial stability while ensuring the delivery of top-tier services to millions of Nigerians.
Telecom operators have long advocated for market reflective pricing structure, highlighting its importance for industry sustainability. The approval of this tariff adjustment ensures that operators can balance affordability with the need to cover escalating costs and maintain quality services.
Reaffirming 9mobile’s commitment to the Nigerian market, Banigbe stated: “Our focus remains on investing in infrastructure that delivers reliable and innovative services to our esteemed customers. We are dedicated to empowering Nigerians through connectivity, expanding access, and supporting the nation’s vision of becoming a leading digital economy in Africa.”
With this development, 9mobile is poised to further strengthen its reputation as a customer-centric, quality-focused service provider, ensuring that Nigerians remain connected and empowered in an increasingly digital world.
- Telecom3 days ago
Samsung Galaxy S25 Series: Redefining Smartphones with Advanced AI Integration
- News3 days ago
Social Impact Champions Call for Business Investment in African Women and Girls
- Telecom3 days ago
FG, WIOCC Sign $10M MoU to Connect 3 million Homes with Broadband Fibre Connectivity
- Telecom3 days ago
NLC Announces Nationwide Boycott over Telecom Hike
- Telecom3 days ago
MainOne Boosts Connectivity for West African Businesses with Equiano Cable
- Telecom3 days ago
All the Android updates coming to the Samsung Galaxy S25 series and more
- Telecom2 days ago
NiMet, MTN, and Tomorrow.io Collaborate to Enhance Climate Resilience in Nigeria
- Broadcasting3 days ago
NCC, NBTE to formulate IP Policy for Polytechnics, Technical Institutions