E-Business
Experts Report More than Two Critical Cyber Incidents per day in 2023
The frequency of high-severity incidents with direct human involvement exceeded two per day in 2023, according to the Kaspersky Managed Detection and Response (MDR) team.
In the latest MDR Analyst Report, they observed this trend across all industries with financial, IT, government, and industrial sectors at the top of the list.
The annual Managed Detection and Response (MDR) Analyst Report provides information about the reported incidents, their nature, and their distribution by industry and geographic region.
It also highlights the most common tactics, techniques and tools attackers used in the past year. These results are based on analysis of MDR incidents detected by the Kaspersky Security Operations Center (SOC).
According to the report, 22.9% of all detected high-severity incidents were recorded in the government sector. IT companies came second (15.4%), closely followed by financial and industrial companies that reported 14.9% and 11.8% of incidents, respectively.
Regarding the nature of these incidents, nearly 25% of them were driven by humans. Just over 20% involved various types of ‘cyber exercises’, which had been previously classified by Kaspersky as targeted attacks but designated as ‘cyber exercises’ upon explicit confirmation by the customer.
The percentage of malware attacks resulting in serious consequences dipped slightly in 2023 compared to previous years, accounting for just over 12% of the total reported critical incidents.
This decline represents the smallest share of high severity incidents in recent years and can be attributed to the “commoditization of attacks”.
This trend reflects the widespread adoption of previously developed tools, originally designed for conducting targeted campaigns which, due to deliberate or accidental leaks, have become common. These tools are now being repurposed in attempts to implement fully automated attack scenarios.
The 2023 MDR’s report, also found that the proportion of incidents involving the detection of targeted attack artefacts, publicly available critical vulnerabilities and the use of social engineering was around 4-5%.
“In 2023, Kaspersky detected a smaller number of high-severity incidents, but observed a simultaneous increase in the number of medium and low severity ones. This redistribution of occurrences is associated with the detection of malware without visible traces of active human participation in attacks, which can be explained by the “commoditization of tools”.
However, it’s important to understand that the low number of high-severity incidents does not necessarily indicate low damage. Targeted attacks are now planned more carefull, and become more dangerous.
Therefore, we recommend the use of effective automated cybersecurity solutions managed with the help of experienced SOC analysts,” comments Sergey Soldatov, Head of Security Operations Center at Kaspersky.
To enhance protection against advanced attacks, companies are advised to implement effective cybersecurity solutions and hire qualified practitioners to manage them or adopt managed security services such as Managed Detection and Response (MDR) and Incident Response.
These products cover the entire incident management cycle from threat identification to continuous protection and remediation. These services will help protect against evasive cyberattacks, investigate incidents and provide additional expertise even if a company lacks security workers.
E-Business
NIMC Grants NCoS Licence to Register Inmates for NIN
National Identity Management Commission (NIMC) has granted licence for the Nigerian Correctional Service, (NCoS) to register inmates in the over 252 custodial centres across the country for National Identity Numbers, (NIN).
The approval followed the request made by Sylvester Nwakuche, acting controller general of the NCoS, who paid a visit to Engr Abisoye Coker-Odusote, director general/chief executive Officer of NIMC, in her office.
The acting controller-general, said the licence to carry out registration of inmates for NIN would eliminate exclusion of inmates from the country’s National Development plans, ensure their safety and security and facilitate their smooth recapture in times of jailbreaks.
The NCoS boss said the visit to the headquarters of NIMC was in search of collaboration that would enable the Service carry out its mandate seamlessly following on going reforms of the Correctional Service system.
According to Nwakuche, there are lots of socio-economic developments within the Correctional Service systems which had led to a number of inmates obtaining University degrees, Masters Degrees and Doctor of Philosophy (PhD) in various fields.
He said such inmates should not be excluded from the national development plans of the country as they should be integrated into the society to become useful for their families and the country.
Nwakuche said inside the Correctional centres are those awaiting trials whose innocence and otherwise has to be decided by the Courts, but argued that in times of National planning, census and other critical national development issues, they should not be disallowed from participating.
Coker-Odusote who granted the licence said NIN has become critical and essential to the country’s national development plans, stressing that NIMC has gone far with the private sector, especially the banks and the Central Bank of Nigeria (CBN) as all banks accounts are now linked with the NIN.
Coker-Odusote said the Eight points Agenda of President Bola Tinubu are also anchored on the Country’s digital identity or National identity Number, stressing that for instance NIN was tied to students loans to eradicate duplicity and prevent ghost beneficiaries.
Coker-Odusote expressed delight in the partnership with the NCoS, saying that the Commission had already entered into partnership with the Nigeria Immigration Service, NIS and other agencies in order to facilitate the smooth delivery of their constitutional mandates.
She commended Dr Olubunmi Tunji-Ojo, minister of Interior, for his dynamic leadership and role in ensuring the delivery of dividends of democracy to Nigeria through various reforms.
E-Business
NIMC Trains 388 Personnel to Boost NIN Enrolment
National Identity Management Commission (NIMC) has kicked off a three-day training program for 388 personnel aimed at enhancing the National Identification Number (NIN) enrolment process across the country.
The training, tagged “Refresher Training of Trainers on NIN Integration to the National Social Register: Technical and hands-on devices and field operations and procedures”, is in collaboration with the National Social Safety-Net Coordinating Office.
The training is also to equip personnel with the necessary skills to efficiently handle the complexities of enrolment processes
In her address at the event held in Port Harcourt on Monday, Abisoye Coker-Odusote, director-general and chief executive officer, NIMC, noted that the initiative aligns with the commission’s overarching goal of achieving secured and great success for the Renewed Hope social initiatives.
Represented by Adedapo Adedoyin, her technical advisor on ICT, the NIMC DG said the event is a pivotal initiative that marks a significant step forward in our mission to enhance and modernize the National Identification Number enrolment process across Nigeria.
She stated, “Today, I am pleased to announce the launch of a comprehensive training program aimed at refreshing the technical and operational skills of the National Social Safety-Net Coordinating Office State Operations Coordinating Unit and NIMC staff.
“This initiative focuses on practical and field-based exercises, ensuring that our teams are well-equipped to handle the complexities of enrolment processes with precision and efficiency.
“This initiative aligns with our overarching goal of achieving secured and great success for the Renewed Hope social initiatives. Through verified digital identification, we aim to improve the lives of Nigerians by providing them with access to essential services and opportunities that require a reliable and secure identity verification system”.
Coker-Odusote explained that the training program will be conducted in two batches, encompassing four states: Kwara, Nasarawa, Kano, and Rivers. A total of 388 attendees will participate in this initiative, including 225 NASSCO State Operations Coordinating Unit representatives, 35 NIMC facilitators, and 128 State support staff.
She added, “The sessions are meticulously designed to foster knowledge sharing and hands-on experience with NIMC’s enrolment device and software, ensuring that our personnel are adept at using these tools to their full potential.
“By empowering our teams with enhanced skills and practical experience, we are setting the stage for more efficient and accurate NIN enrolment processes across the nation”.
Coker-Odusote further said the training program “is a crucial step toward achieving the World Bank’s Identification for Development Initiative target of enrolling 180 million Nigerians with secure digital IDs.
“By bolstering our technical and operational capabilities, we are ensuring that NIMC is well-positioned to meet and exceed this target, thereby contributing to the global vision of inclusive and accessible digital identification for all”.
The NIMC boss8 called for collaboration between all stakeholders saying, “As we embark on this journey, I urge all participants to embrace this opportunity for growth and development.
“Together, we can build a robust and efficient National Identification System that will serve as the cornerstone for Nigeria’s social and economic progress.”
E-Business
Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media
Kaspersky experts have uncovered a new phishing scam targeting businesses that promote their pages on Facebook. Scammers send emails allegedly on behalf of Meta for Business – Facebook’s platform for businesses – claiming the recipient’s page contains prohibited content.
The email suggests users provide explanations in order for their account and page to be unblocked. The goal of the attackers is likely to get access to users’ business accounts.
Kaspersky’s anonymised data shows that such emails started reaching users on 14 December 2024, with complaints coming from organisations all over the world, including the Middle East, Turkiye and Africa.
By examining the “From” field in the email it can be seen that the domain does not belong to Facebook. According to Kaspersky data the emails that this campaign used were sent from different domains.
The link in the email redirects users to Facebook Messenger. On Messenger, the account posing as Facebook’s support team appears legitimate, creating a false sense of trust.
There is an indication that this is a fan page, but it is easy to miss in a situation of high stress after being accused of spreading illegitimate content.
This scheme stands out for its sophistication. Unlike earlier scams that accused users of copyright violations and directed them to respond via email, this approach simulates internal communication on the Facebook platform itself.
“In 2025, we anticipate a rise in attacks leveraging social engineering and user trust in major platforms. Scams like this are becoming more sophisticated as attackers strive to mimic official services closely.
“Users must remain vigilant, verify the authenticity of messages, and avoid clicking on suspicious links. We strongly advise users not to engage with suspicious accounts and to activate additional security measures, such as two-factor authentication.
“If you receive such an email, report the incident to Facebook’s support team and update your passwords immediately if any information has been compromised,” comments Andrey Kovtun, Email Threats Protection Group Manager at Kaspersky.
- Telecom2 days ago
USSD Dispute: FG May Blacklist 18 Banks Allegedly Owing Telcos N250Bn
- E-Financial2 days ago
NGX Warns Public of Fraudulent Impersonation by ‘Value Gain’
- E-Business2 days ago
Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media
- General News2 days ago
Enterprise Development Fund Launched to Bridge Capital Access Gap
- News2 days ago
AfDB to Partner LAMATA to Expand Existing Rail System
- General News2 days ago
UBA Rewards Customers with over N41m in Final Edition of Legacy Promo
- E-Business2 days ago
NIMC Trains 388 Personnel to Boost NIN Enrolment
- News1 day ago
EFCC Dismantles Fake Hotel Review Syndicate, Arrests 105 in Crackdown