Connect with us

E-Business

Experts Report More than Two Critical Cyber Incidents per day in 2023

Published

on

Kindly share this post

The frequency of high-severity incidents with direct human involvement exceeded two per day in 2023, according to the Kaspersky Managed Detection and Response (MDR) team.

In the latest MDR Analyst Report, they observed this trend across all industries with financial, IT, government, and industrial sectors at the top of the list.

The annual Managed Detection and Response (MDR) Analyst Report provides information about the reported incidents, their nature, and their distribution by industry and geographic region.

It also highlights the most common tactics, techniques and tools attackers used in the past year. These results are based on analysis of MDR incidents detected by the Kaspersky Security Operations Center (SOC).

According to the report, 22.9% of all detected high-severity incidents were recorded in the government sector. IT companies came second (15.4%), closely followed by financial and industrial companies that reported 14.9% and 11.8% of incidents, respectively.

Regarding the nature of these incidents, nearly 25% of them were driven by humans. Just over 20% involved various types of ‘cyber exercises’, which had been previously classified by Kaspersky as targeted attacks but designated as ‘cyber exercises’ upon explicit confirmation by the customer.

The percentage of malware attacks resulting in serious consequences dipped slightly in 2023 compared to previous years, accounting for just over 12% of the total reported critical incidents.

This decline represents the smallest share of high severity incidents in recent years and can be attributed to the “commoditization of attacks”.

This trend reflects the widespread adoption of previously developed tools, originally designed for conducting targeted campaigns which, due to deliberate or accidental leaks, have become common. These tools are now being repurposed in attempts to implement fully automated attack scenarios.

The 2023 MDR’s report, also found that the proportion of incidents involving the detection of targeted attack artefacts, publicly available critical vulnerabilities and the use of social engineering was around 4-5%.

“In 2023, Kaspersky detected a smaller number of high-severity incidents, but observed a simultaneous increase in the number of medium and low severity ones. This redistribution of occurrences is associated with the detection of malware without visible traces of active human participation in attacks, which can be explained by the “commoditization of tools”.

However, it’s important to understand that the low number of high-severity incidents does not necessarily indicate low damage. Targeted attacks are now planned more carefull, and become more dangerous.

Therefore, we recommend the use of effective automated cybersecurity solutions managed with the help of experienced SOC analysts,” comments Sergey Soldatov, Head of Security Operations Center at Kaspersky.

To enhance protection against advanced attacks, companies are advised to implement effective cybersecurity solutions and hire qualified practitioners to manage them or adopt managed security services such as Managed Detection and Response (MDR) and Incident Response.

These products cover the entire incident management cycle from threat identification to continuous protection and remediation. These services will help protect against evasive cyberattacks, investigate incidents and provide additional expertise even if a company lacks security workers.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

NIMC Grants NCoS Licence to Register Inmates for NIN

Published

on

Kindly share this post

National Identity Management Commission (NIMC) has granted licence for the Nigerian Correctional Service, (NCoS) to register inmates in the over 252 custodial centres across the country for National Identity Numbers, (NIN).

NIMC Grants NCoS Licence to Register Inmates for NIN

The approval followed the request made by Sylvester Nwakuche, acting controller general of the NCoS, who paid a visit to Engr Abisoye Coker-Odusote, director general/chief executive Officer of NIMC, in her office.

The acting controller-general, said the licence to carry out registration of inmates for NIN would eliminate exclusion of inmates from the country’s National Development plans, ensure their safety and security and facilitate their smooth recapture in times of jailbreaks.

The NCoS boss said the visit to the headquarters of NIMC was in search of collaboration that would enable the Service carry out its mandate seamlessly following on going reforms of the Correctional Service system.

According to Nwakuche, there are lots of socio-economic developments within the Correctional Service systems which had led to a number of inmates obtaining University degrees, Masters Degrees and Doctor of Philosophy (PhD) in various fields.

He said such inmates should not be excluded from the national development plans of the country as they should be integrated into the society to become useful for their families and the country.

Nwakuche said inside the Correctional centres are those awaiting trials whose innocence and otherwise has to be decided by the Courts, but argued that in times of National planning, census and other critical national development issues, they should not be disallowed from participating.

Coker-Odusote who granted the licence said NIN has become critical and essential to the country’s national development plans, stressing that NIMC has gone far with the private sector, especially the banks and the Central Bank of Nigeria (CBN) as all banks accounts are now linked with the NIN.

Coker-Odusote said the Eight points Agenda of President Bola Tinubu are also anchored on the Country’s digital identity or National identity Number, stressing that for instance NIN was tied to students loans to eradicate duplicity and prevent ghost beneficiaries.

Coker-Odusote expressed delight in the partnership with the NCoS, saying that the Commission had already entered into partnership with the Nigeria Immigration Service, NIS and other agencies in order to facilitate the smooth delivery of their constitutional mandates.

She commended Dr Olubunmi Tunji-Ojo, minister of Interior, for his dynamic leadership and role in ensuring the delivery of dividends of democracy to Nigeria through various reforms.


Kindly share this post
Continue Reading

E-Business

NIMC Trains 388 Personnel to Boost NIN Enrolment

Published

on

Kindly share this post

National Identity Management Commission (NIMC) has kicked off a three-day training program for 388 personnel aimed at enhancing the National Identification Number (NIN) enrolment process across the country.

NIMC Trains 388 Personnel to Boost NIN Enrolment

The training, tagged “Refresher Training of Trainers on NIN Integration to the National Social Register: Technical and hands-on devices and field operations and procedures”, is in collaboration with the National Social Safety-Net Coordinating Office.

The training is also to equip personnel with the necessary skills to efficiently handle the complexities of enrolment processes

In her address at the event held in Port Harcourt on Monday, Abisoye Coker-Odusote, director-general and chief executive officer, NIMC, noted that the initiative aligns with the commission’s overarching goal of achieving secured and great success for the Renewed Hope social initiatives.

Represented by Adedapo Adedoyin, her technical advisor on ICT, the NIMC DG said the event is a pivotal initiative that marks a significant step forward in our mission to enhance and modernize the National Identification Number enrolment process across Nigeria.

She stated, “Today, I am pleased to announce the launch of a comprehensive training program aimed at refreshing the technical and operational skills of the National Social Safety-Net Coordinating Office State Operations Coordinating Unit and NIMC staff.

“This initiative focuses on practical and field-based exercises, ensuring that our teams are well-equipped to handle the complexities of enrolment processes with precision and efficiency.

“This initiative aligns with our overarching goal of achieving secured and great success for the Renewed Hope social initiatives. Through verified digital identification, we aim to improve the lives of Nigerians by providing them with access to essential services and opportunities that require a reliable and secure identity verification system”.

Coker-Odusote explained that the training program will be conducted in two batches, encompassing four states: Kwara, Nasarawa, Kano, and Rivers. A total of 388 attendees will participate in this initiative, including 225 NASSCO State Operations Coordinating Unit representatives, 35 NIMC facilitators, and 128 State support staff.

She added, “The sessions are meticulously designed to foster knowledge sharing and hands-on experience with NIMC’s enrolment device and software, ensuring that our personnel are adept at using these tools to their full potential.

“By empowering our teams with enhanced skills and practical experience, we are setting the stage for more efficient and accurate NIN enrolment processes across the nation”.

Coker-Odusote further said the training program “is a crucial step toward achieving the World Bank’s Identification for Development Initiative target of enrolling 180 million Nigerians with secure digital IDs.

“By bolstering our technical and operational capabilities, we are ensuring that NIMC is well-positioned to meet and exceed this target, thereby contributing to the global vision of inclusive and accessible digital identification for all”.

The NIMC boss8 called for collaboration between all stakeholders saying, “As we embark on this journey, I urge all participants to embrace this opportunity for growth and development.

“Together, we can build a robust and efficient National Identification System that will serve as the cornerstone for Nigeria’s social and economic progress.”

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media

Published

on

Kindly share this post

Kaspersky experts have uncovered a new phishing scam targeting businesses that promote their pages on Facebook. Scammers send emails allegedly on behalf of Meta for Business – Facebook’s platform for businesses – claiming the recipient’s page contains prohibited content.

The email suggests users provide explanations in order for their account and page to be unblocked. The goal of the attackers is likely to get access to users’ business accounts.

Kaspersky’s anonymised data shows that such emails started reaching users on 14 December 2024, with complaints coming from organisations all over the world, including the Middle East, Turkiye and Africa.

By examining the “From” field in the email it can be seen that the domain does not belong to Facebook. According to Kaspersky data the emails that this campaign used were sent from different domains.

The link in the email redirects users to Facebook Messenger. On Messenger, the account posing as Facebook’s support team appears legitimate, creating a false sense of trust.

There is an indication that this is a fan page, but it is easy to miss in a situation of high stress after being accused of spreading illegitimate content.

This scheme stands out for its sophistication. Unlike earlier scams that accused users of copyright violations and directed them to respond via email, this approach simulates internal communication on the Facebook platform itself.

“In 2025, we anticipate a rise in attacks leveraging social engineering and user trust in major platforms. Scams like this are becoming more sophisticated as attackers strive to mimic official services closely.

“Users must remain vigilant, verify the authenticity of messages, and avoid clicking on suspicious links. We strongly advise users not to engage with suspicious accounts and to activate additional security measures, such as two-factor authentication.

“If you receive such an email, report the incident to Facebook’s support team and update your passwords immediately if any information has been compromised,” comments Andrey Kovtun, Email Threats Protection Group Manager at Kaspersky.

 

 


Kindly share this post
Continue Reading

Trending