News
Daily Number of Human-driven Cyber Incidents Increased by 1.5 times in 2022

Research based on the analysis of incidents reported to customers of Kaspersky Managed Detection and Response (MDR) has revealed that Security Operations Center (SOC) analysts discovered more than three high-severity incidents with direct human involvement every day in 2022.
The efficiency external specialists provided while dealing with cybersecurity solutions and requirements of special knowledges were the main reasons for the companies to outsource external experts in 2022.
To address the lack of gaps in expertise among IT Security professionals and provide them with insights on the current threat landscape, Kaspersky analysed anonymised customer incidents detected by its MDR service.
Kaspersky’s annual Managed Detection and Response Analyst Report¹ showed the high-severity incidents required an average 43.8 minutes to be detected by Kaspersky MDR². Due to an increase in human-driven attacks this processing time grew by approximately 6% compared to the previous year, as they take up more of SOC analyst time.
Regarding the nature of such incidents, 30% of them were associated with APTsᵌ, 26% accounted for malware attacks, and just over 19% resulted from “ethical hacking” (pentests, red teaming or any other types of cyber exercises conducted in customers’ infrastructures either for the security assessment of IT systems or to test the operational readiness of the MDR service).
The proportion of incidents involving publicly available critical vulnerabilities and the detection of traces of previous attacks involving humans was around 9%. The remaining incidents resulted from the successful use of social engineering techniques or were linked to insider threats.
“The MDR report shows that sophisticated attacks driven by humans continue to grow. They require more resources to be investigated and they take up more of SOC analyst time as this type of attack lends itself to automation to a lesser degree.
“To detect these attacks efficiently we recommend companies to implement comprehensive threat hunting practices combined with classic alert monitoring,” comments Sergey Soldatov, Head of Security Operations Center, Kaspersky.
News
Toll Collection on Lagos-Calabar Highway Begins December

Senator David Umahi, the Minister of Works, has announced that a section of the Lagos-Calabar Coastal Highway will be tolled starting in December.
Umahi disclosed this during an interview for a forthcoming State House documentary marking the second anniversary of President Bola Tinubu’s administration.
He said: “By December, we will toll Section 1 of the Lagos-Calabar coastal highway. We project a 10-year return on investment.
“The road has solar-powered lighting and CCTV infrastructure, and offers carbon credit advantages.
“It is more than a road; it is an economic corridor and a catalyst for regional growth.”
According to the minister, 30 kilometres of Section 1 have already been completed, with an additional 10 kilometres in Section 2 nearing delivery. Both segments feature six-lane concrete-paved carriageways, designed to meet modern standards for safety and durability.
Umahi further revealed that construction had commenced on Sections 3 and 3B of the highway, spanning a total of 65 kilometres, covering 38 kilometres in Cross River State and 27 kilometres in Akwa Ibom.
He described the positive response from local communities as a clear indication of the project’s wide-reaching socioeconomic benefits.
“Just days ago, we flagged off Sections 3 and 3B—65 kilometres in total, covering 38 kilometres in Cross River State and 27 kilometres in Akwa Ibom. The host communities’ excitement speaks to these projects’ transformative impact,” he said.
Umahi also highlighted the administration’s renewed focus on the Sokoto-Badagry superhighway, which he noted was part of a broader vision dating back to colonial-era trade plans.
“The Trans-Saharan trade route dates back to colonial-era planning. President Tinubu is now bringing these long-abandoned visions to life,” the minister explained.
News
Kaspersky Uncovers Dero Crypto Miner Spreading via Exposed Container Environments

Kaspersky Security Services experts have identified a sophisticated cyberattack campaign targeting containerized environments to deploy a miner for the Dero cryptocurrency.
The attackers abuse exposed Docker APIs — parts of Docker, an open-source container development platform. In 2025, there are a significant number of Docker API default ports that are insecurely published, accounting for almost 500 occurrences worldwide on average each month.
In the discovered campaign, cybercriminals inject two types of malwares into the compromised systems: one is the miner itself and the other is a propagation malware that can spread the campaign to other insecure container networks.
Kaspersky experts discovered this malicious campaign as part of a compromise assessment project. According to expert estimates, any organisation that operates containerized infrastructure — while exposing Docker APIs without robust security controls — can be a potential target. These may include technology companies, software development firms, hosting providers, cloud service providers and more enterprises.
According to Shodan, in 2025, there are 485 published Docker API default ports¹ worldwide each month on average. This figure illustrates the campaign’s potential attack surface by tallying the “entry points” — or insecurely exposed ports that attackers might target.
Once attackers identify an insecurely published Docker API, they either compromise existing containers or create new malicious ones based on a legitimate standard Ubuntu image. They then inject two malware types into the compromised containers: “nginx” and “cloud”.
The latter is a Dero cryptocurrency miner, while “nginx” is a malicious software that maintains persistence, ensures execution of the miner and scans for other exposed environments. This malware allows attackers to operate without traditional Command-and-Control (C2) servers; instead, each infected container independently scans the Internet and can spread the miner to new targets.
“The campaign has the potential for exponential growth of infections, with each compromised container acting as a new source of attack, if security measures are not immediately put in place in the potentially targeted networks,” explains Amged Wageh, an incident response and a compromise assessment expert at Kaspersky Security Services.
“Сontainers are foundational to software development, deployment, and scalability. Their widespread use across cloud-native environments, DevOps, and microservices architectures makes them an attractive target for cyber attackers. This growing reliance demands organisations adopt a 360-degree approach to security — combining robust security solutions with proactive threat hunting and regular compromise assessments”.
The attackers embedded the names “nginx” and “cloud” directly in the binary — an inflexible executable file composed of instructions and data for the processor, not for humans. This is a classic masquerading tactic that lets the payload pose as a legitimate tool, trying to deceive both analysts and automated defenses.
News
Manager, Others Arraigned for Allegedly Hacking into Premium Trust Bank’s Server

Economic and Financial Crimes Commission (EFCC), on Tuesday, charged five defendants before a Federal High Court in Lagos for allegedly hacking into the server of Premium Trust Bank.
The defendants are listed as the bank’s e-payment service manager, Matthew Adeniyi; Kehinde Odeyemi, a nursing mother; Samson Latshin, Bolaji Omotosho and Sunday Okunnola.
They were charged before Justice Alexander Owoeye, on a six-count charge bordering on conspiracy, cybercrime and unlawful access to the bank’s database.
They, however, pleaded not guilty to the charge.
Mrs. Zeenat Atiku, prosecutor, alleged that they committed the offence between April and May this year, in collaboration with three others, now at large.
Those still at large are Isa Ismaila, Victor Joshua, also known as ‘Oracle’ as well as one other, simply identified as Humble.
According to the charge, the first defendant unlawfully disclosed sensitive credentials, including the bank’s server IP and domain details, to these parties.
She said this enabled an unauthorised access to the bank’s database and the consequent data breach allegedly resulted in financial gains of $10,000.
The prosecutor also alleged that the defendants attempted to intercept the bank’s network and procured a Hewlett-Packard ProBook 440 G9 laptop (serial No. SN#5CD2473N6G) configured to bypass the bank’s security systems.
The anti-graft agency said the alleged offences contravened the provisions of sections 12(1)(b), 27, 28(1)(b)(c) and 28(3) of the Cybercrimes (Prohibition Act, 2015 (as amended in 2024).
Following their pleas, the prosecutor, requested for a trial date and sought an order to remand the defendants in custody.
Meanwhile, the court declined an oral bail by the defence counsel and directed that a formal bail application be filed.
He adjourned the case until June 30, for trial and ordered that the defendants be remanded at the Nigerian correctional centre, pending bail.
The court, however, added that the defence may apply for an earlier trial date, upon filing their bail applications.
- E-Financial2 days ago
CBN Introduces AML to Fight Financial Terrorism, Gives Banks Deadline
- Telecom2 days ago
Celebrating African Creativity: Made by Africa, Loved by the World’ Returns for Its Fifth Year
- E-Financial2 days ago
Peter Obi Denies Secret Meeting with Tinubu over Fidelity Bank
- Broadcasting2 days ago
Luft Pay TV Launches in Lagos, Promises to Revolutionize Entertainment
- E-Financial2 days ago
PremiumTrust Bank Reassures Customers of Continued Security after Cyberattack Foil
- E-Financial2 days ago
Fidelity Bank’s N10.5tr assets base reinforces stakeholders’ confidence -Insiders bid for more equity stakes
- E-Business2 days ago
INEC Sets Up AI Division to Strengthen Electoral System
- General News2 days ago
Over 250,000 Cyberattacks Disguised as Anime – Report