Telecom
Cybercriminals Are Doubling Down on Credential Theft, Launching More Innovative Ransomware Attacks – Sophos 2023 Threat Report Reveals
Sophos, a global leader in innovating and delivering cybersecurity as a service, has on Monday published its 2023 Threat Report.
The report details how the cyberthreat landscape has reached a new level of commercialization and convenience for would-be attackers, with nearly all barriers to entry for committing cybercrime removed through the expansion of cybercrime-as-a-service.
The report also addresses how ransomware remains one of the greatest cybercrime threats to organizations with operators innovating their extortion tactics, as well as how demand for stolen credentials continues to grow.
Criminal underground marketplaces like Genesis have long made it possible to buy malware and malware deployment services (“malware-as-a-service”), as well as to sell stolen credentials and other data in bulk. Over the last decade, with the increasing popularity of ransomware, an entire “ransomware-as-a-service” economy sprung up.
Now, in 2022, this “as-a-service” model has expanded, and nearly every aspect of the cybercrime toolkit—from initial infection to ways to avoid detection—is available for purchase.
“This isn’t just the usual fare, such as malware, scamming and phishing kits for sale,” said Sean Gallagher, principal threat researcher, Sophos. “Higher rung cybercriminals are now selling tools and capabilities that once were solely in the hands of some of the most sophisticated attackers as services to other actors.
“For example, this past year, we saw advertisements for OPSEC-as-a-service where the sellers offered to help attackers hide Cobalt Strike infections, and we saw scanning-a-service, which gives buyers access to legitimate commercial tools like Metasploit, so that they can find and then exploit vulnerabilities.
“The commoditization of nearly every component of cybercrime is impacting the threat landscape and opening up opportunities for any type of attacker with any type of skill level.”
With the expansion of the “as-a-service” economy, underground cybercriminal marketplaces are also becoming increasingly commodified and are operating like mainstream businesses. Cybercrime sellers are not just advertising their services but are also listing job offers to recruit attackers with distinct skills. Some marketplaces now have dedicated help-wanted pages and recruiting staff, while job seekers are posting summaries of their skills and qualifications.
“Early ransomware operators were rather limited in how much they could do because their operations were centralized; group members were carrying out every aspect of an attack. But as ransomware became hugely profitable, they looked for ways to scale their productions. So, they began outsourcing parts of their operations, creating an entire infrastructure to support ransomware. Now, other cybercriminals have taken a cue from the success of this infrastructure and are following suit,” said Gallagher.
Indeed, as the cybercrime infrastructure has expanded, ransomware has remained highly popular—and highly profitable. Over the past year, ransomware operators have worked on expanding their potential attack service by targeting platforms other than Windows while also adopting new languages like Rust and Go to avoid detection. Some groups, most notably Lockbit 3.0, have been diversifying their operations and creating more “innovative” ways to extort victims.
“When we talk about the growing sophistication of the criminal underground, this extends to the world of ransomware. For example, Lockbit 3.0 is now offering bug bounty programs for its malware and ‘crowd-sourcing’ ideas to improve its operations from the criminal community. Other groups have moved to a ‘subscription model’ for access to their leak data and others are auctioning it off. Ransomware has become, first and foremost, a business,” said Gallagher.
The evolving economics of the underground has not only incentivized the growth of ransomware and the “as-a-service” industry, but also increased the demand for credential theft. With the expansion of web services, various types of credentials, especially cookies, can be used in numerous ways to gain a deeper foothold in networks, even bypassing MFA. Credential theft also remains one of the easiest ways for novice criminals to gain access to underground marketplaces and begin their “career.”
Sophos also analyzed the following trends:
·The war in Ukraine had global repercussions for the cyberthreat landscape. Immediately following the invasion, there was an explosion of financially motivated scams, while nationalism led to a shake-up of criminal alliances between Ukrainians and Russians, particularly among ransomware affiliates.
· Criminals continue to exploit legitimate executables and utilize “living off the land binaries” (LOLBins) to launch various types of attacks, including ransomware. In some cases, attackers deploy legitimate but vulnerable system drivers in“bring your own driver” attacks to attempt to shut down endpoint detection and response products to evade detection.
· Mobile devices are now at the center of new types of cybercrimes. Not only are attackers still using fake applications to deliver malware injectors, spyware and banking-associated malware, but newer forms of cyberfraud have been growing in popularity, such as “pig butchering” schemes. And this crime is no longer just affecting Android users, but iOS users as well.
· The devaluation of Monero, one of the most popular cryptocurrencies for cryptominers, led to a decrease in one of the oldest and most popular types of cryptocrime—cryptomining. But mining malware continues to spread through automated “bots” on both Windows and Linux systems.
To learn more about the changing threat landscape in 2022 and what it means for security teams in 2023, read the full Sophos 2023 Threat Report.
As the revolutionary Airtel Spam AI Alert Service rolls out across Airtel Africa’s 14 operating countries, Airtel Nigeria CEO, Dinesh Balsingh, has elaborated on the unprecedented benefits and operating principles guiding the Spam Alert Service.
Designed to enhance user safety, this pioneering AI-driven product provides real-time defense against spam and fraudulent SMS messages, making it a gamechanger for mobile security across the continent.
The Airtel AI Spam Alert Service, which is engineered to automatically detect and label suspicious SMS messages as “Suspected SPAM” without requiring any user action or additional apps, leverages a robust AI algorithm that analyzes over 250 parameters.
These parameters includee sender behavior, message frequency, message geographical distribution, and unusual activity patterns. Impressively, the service completes this process under just two milliseconds, offering near-instantaneous alerts while maintaining the privacy of user data by not reading message content.
Commenting on the breakthrough service, Dinesh Balsingh, CEO of Airtel Nigeria, stated: “Nigeria is not just a critical market for us—it’s a leader in digital adoption within the continent. Our AI Spam Alert Service reflects our dedication to safeguarding our customers from the growing threat of SMS fraud.
“As the first of its kind in Africa, it addresses a fundamental issue of trust and security, which is paramount to our digital ecosystem. We’re proud to offer this service to Nigerians and extend it across our African footprint.”
Following its successful deployment in Nigeria, the Spam Alert Service has now launched in Tanzania and Kenya and is set to cover Airtel’s entire African operations. The service’s automatic activation for all Airtel customers, across both smartphones and feature phones, ensures maximum reach and accessibility.
Early feedback from subscribers has been overwhelmingly positive, with users praising the AI’s efficiency in flagging potentially harmful messages without interfering with their everyday communication.
By pioneering this AI-based spam detection technology, Airtel Africa demonstrates its commitment to leveraging cutting-edge innovation to resolve critical issues facing its subscribers. The AI Spam Alert Service not only protects users but also sets a new benchmark for mobile security standards in the region.
“Our goal is to build a safer digital environment for our users,” added Balsingh. “This innovation is part of our broader strategy to incorporate advanced technologies that address real challenges while enhancing the overall customer experience.”
As Africa stands at the point of a profound transformation, the imperative for greater intra-continental cooperation has never been clearer. The path to shared prosperity depends not on the progress of individual nations but on the collective strength of our commitments.
Central to this vision is the relationship between South Africa and Nigeria, two of the continent’s largest economies, and the institutions that serve as bridges between them.
It was an honour for MTN Group to host Minister Parks Tau (SA Minister of Trade Industry and Competition) and his delegation at our Headquarters in Johannesburg. At a time when global uncertainties are reshaping trade and technology, Africa must respond not in isolation, but in solidarity.
As MTN, we see it as our duty to serve as an economic diplomatic bridge between Nigeria and South Africa — driving growth, fostering inclusion, and unlocking opportunity for the Africa’s shared prosperity.
MTN’s journey exemplifies what is possible when two great nations collaborate. As Nigeria’s largest South African investor, MTN has long viewed its presence not simply as a commercial venture but as a platform for inclusive development.
Since commencing operations in Nigeria in 2001, we have invested more than US$10 billion in the country’s digital infrastructure.
Today, MTN Nigeria serves over 80 million subscribers, employs thousands directly, and supports hundreds of thousands of livelihoods across its extended value chain.
Yet, while the economic footprint is significant, our greatest source of pride lies in the social and developmental outcomes accompanying this investment, expanded access to connectivity, enhanced financial inclusion, and the empowerment of individuals and enterprises through digital technologies.
Still, the operating environment remains complex. Macroeconomic challenges in Nigeria, including currency depreciation, inflation, and constraints in accessing foreign exchange, have placed pressure on business continuity and investor confidence.
Despite these difficulties, MTN remains firmly committed to its business case and its long-term presence in Nigeria, underpinned by a belief in the country’s enduring potential and strategic importance to the continent.
However, for South Africa and Nigeria to truly unlock their bilateral potential, a number of long-standing issues require resolution. The upcoming South Africa–Nigeria Trade and Investment Summit, to be held in Abuja later this year, presents a unique opportunity to address these concerns.
The Summit serves not merely as a diplomatic engagement, but as a catalyst for policy reform, reciprocal market access, and institutional dialogue. Importantly, it should reinforce the private sector’s role in shaping practical, actionable solutions that support cross-border trade and investment.
The African Continental Free Trade Area (AfCFTA) offers a historic platform to actualise these ambitions. Yet its success will depend as much on infrastructure and digital connectivity as it will on tariff liberalisation or regulatory harmonisation.
As a pan-African operator, MTN is investing heavily in the digital foundations of AfCFTA, facilitating seamless mobile communication, enabling digital payments, and building platforms for cross-border entrepreneurship.
We also believe that integration must extend beyond economic frameworks to include cultural exchange and people-to-people engagement. One such initiative is our MTN Media Innovation Programme, which brings emerging Nigerian media professionals to South Africa for immersive learning.
Through programmes like these, we aim to cultivate not only knowledge and skills, but also enduring bonds between our nations’ future leaders.
Nigeria’s telecommunications sector witnessed a notable decline in internet users following a 50 per cent tariff hike on voice, data, and SMS services implemented in January 2025.
The Nigerian Communications Commission (NCC) made this known in industry statistics on its website.
According to the report, the industry lost approximately one million internet users in February, with the user base shrinking from 142.16 million to 141.25 million.
It said although a slight recovery was observed in March, with the figure rising to 142.05 million, the sector’s data consumption patterns were significantly impacted.
The NCC data showed a 12 per cent decline in monthly data consumption in February, dropping to 893.06 petabytes from January’s record high of one exabyte.
It, however, said a marginal rebound was recorded in March, with data usage increasing by 11.5 per cent to 995.88 petabytes.
Despite this modest recovery, the report said consumption levels remained slightly below the January peak, suggesting that subscribers continued to exhibit caution in their usage habits due to the increased tariffs.
Meanwhile, the telecom industry demonstrated resilience in other areas, with operators adding 3.39 million new telephone users between January and March.
This growth propelled the total active lines from 169.32 million to 172.71 million, subsequently boosting Nigeria’s teledensity from 78.10 per cent to 79.67 per cent during the same period.
In terms of market dynamics, Mobile Network Operators (MNOs) maintained their dominance in the internet market.
MTN Nigeria led with 75.62 million users, followed by Airtel Nigeria with 48.8 million, Globacom with 15.37 million, and 9mobile with 1.75 million.
MTN also retained its market lead in active telephone lines with 90.5 million subscribers, representing a 52.48 per cent market share, while Airtel followed with 58.3 million users (33.78 per cent), Globacom with 20.7 million (12 per cent), and 9mobile with 2.9 million (1.72 per cent).
The latest industry figures underscore the complexities facing Nigeria’s telecom sector as operators navigate economic pressures and evolving consumer behaviours.
On porting activities, the NCC report noted that Nigeria’s fourth mobile network operator, 9mobile, had continued to experience a decline in its subscriber base, with a total of 5809 customers porting out of its network both in February and March.
The report showed that other operators recorded insignificant outgoing porting numbers compared to 9mobile.
It showed that MTN lost 647 customers, Airtel recorded 695 outgoing portings, Globacom recorded 771, while 9mobile lost 5808 in both February and March.
In terms of incoming porting, MTN gained the most customers from other operators, with 4855 subscribers joining its network in February and March, the report revealed.
It stated that Airtel recorded 2084 incoming porting, while Globacom gained 1007 customers in both months.
The NCC added that, meanwhile, 9mobile recorded only three incoming porting for both months.
According to the NCC report on incoming and outgoing porting activities of mobile network operators, a total of 7922 subscribers moved from one network to another in February and March.
Airtel Reveals Mechanism of Spam Alert Service
Nigerian Tech Prodigy sets World Record with Smallest GPS Tracker
Minister Seeks Digital Tech Adoption to Improve Agriculture, Boost Food Security
Africa Looks to Solar Amid Electricity Challenges
Fidelity Bank grows PBT by 167.8% to N105.8 billion in Q1 2025
Telecom3 days agoPAFON 2.0: Tizel Cybersecurity Calls for Vigilance over Surge in AI-Powered Fraud
E-Business3 days agoGov. Mbah Tasks Youths to Embrace Technology as Enugu Tech Festival Opens
News3 days agoPower Ministry, NAEC Partner to Unlock Nuclear Energy Potential
General News3 days agoFG Launches Virtual Privacy Academy
Telecom3 days agoSeerBit, Spectranet Unveil ExpressPay to Simplify Broadband Payments
News2 days agoTomato ‘Ebola’ May Disrupt Nigeria’s Agric Value Chain- Rewane
News3 days agoZamfara, Oracle Partner to Drive Digital Skills Development
Broadcasting2 days agoMultiChoice vs FCCPC: Only President has Power to Fix Prices- Court