Telecom
Key Trends in Sophos 2022 Threat Report
Sophos, a global leader in next-generation cybersecurity, on Wednesday published the Sophos 2022 Threat Report, which shows how the gravitational force of ransomware’s black hole is pulling in other cyberthreats to form one massive, interconnected ransomware delivery system – with significant implications for IT security.
The report, written by SophosLabs security researchers, Sophos Managed Threat Response threat hunters and rapid responders, and the Sophos AI team, provides a unique multi-dimensional perspective on security threats and trends facing organizations in 2022.
The Sophos 2022 Threat Report analyzes the following key trends:
1. Over the coming year, the ransomware landscape will become both more modular and more uniform, with attack “specialists” offering different elements of an attack “as-a-service” and providing playbooks with tools and techniques that enable different adversary groups to implement very similar attacks.
According to Sophos researchers, attacks by single ransomware groups gave way to more ransomware-as-a-service (RaaS) offerings during 2021, with specialist ransomware developers focused on hiring out malicious code and infrastructure to third-party affiliates.
Some of the most high profile ransomware attacks of the year involved RaaS, including an attack against Colonial Pipeline in the U.S. by a DarkSide affiliate.
An affiliate of Conti ransomware leaked the implementation guide provided by the operators, revealing the step-by-step tools and techniques that attackers could use to deploy the ransomware.
Once they have the malware they need, RaaS affiliates and other ransomware operators can turn to Initial Access Brokers and malware delivery platforms to find and target potential victims. This is fueling the second big trend anticipated by Sophos.
2. Established cyberthreats will continue to adapt to distribute and deliver ransomware. These include loaders, droppers and other commodity malware; increasingly advanced, human-operated Initial Access Brokers; spam; and adware. In 2021, Sophos reported on Gootloader operating novel hybrid attacks that combined mass campaigns with careful filtering to pinpoint targets for specific malware bundles.
3. The use of multiple forms of extortion by ransomware attackers to pressure victims into paying the ransom is expected to continue and increase in range and intensity. In 2021, Sophos incident responders catalogued 10 different types of pressure tactics, from data theft and exposure, to threatening phone calls, distributed denial of service (DDoS) attacks, and more.
4. Cryptocurrency will continue to fuel cybercrimes such as ransomware and malicious cryptomining, and Sophos expects the trend will continue until global cryptocurrencies are better regulated. During 2021, Sophos researchers uncovered cryptominers such as Lemon Duck and the less common, MrbMiner, taking advantage of the access provided by newly reported vulnerabilities and targets already breached by ransomware operators to install cryptominers on computers and servers.
“Ransomware thrives because of its ability to adapt and innovate,” said Chester Wisniewski, principal research scientist at Sophos. “For instance, while RaaS offerings are not new, in previous years their main contribution was to bring ransomware within the reach of lower-skilled or less well-funded attackers.
This has changed and, in 2021, RaaS developers are investing their time and energy in creating sophisticated code and determining how best to extract the largest payments from victims, insurance companies, and negotiators. They’re now offloading to others the tasks of finding victims, installing and executing the malware, and laundering the pilfered cryptocurrencies.
This is distorting the cyberthreat landscape, and common threats, such as loaders, droppers, and Initial Access Brokers that were around and causing disruption well before the ascendancy of ransomware, are being sucked into the seemingly all-consuming ‘black hole’ that is ransomware.
“It is no longer enough for organizations to assume they’re safe by simply monitoring security tools and ensuring they are detecting malicious code. Certain combinations of detections or even warnings are the modern equivalent of a burglar breaking a flower vase while climbing in through the back window.
“Defenders must investigate alerts, even ones which in the past may have been insignificant, as these common intrusions have blossomed into the foothold necessary to take control of entire networks.”
Additional trends Sophos analyzed include:
· After the ProxyLogon and ProxyShell vulnerabilities were discovered (and patched) in 2021, the speed at which they were seized upon by attackers was such that Sophos expects to see continued attempts to mass-abuse IT administration tools and exploitable internet facing services by both sophisticated attackers and run-of-the-mill cybercriminals
· Sophos also expects cybercriminals to increase their abuse of adversary simulation tools, such as Cobalt Strike Beacons, mimikatz and PowerSploit. Defenders should check every alert relating to abused legitimate tools or combination of tools, just as they would check a malicious detection, as it could indicate the presence of an intruder in the network
· In 2021, Sophos researchers detailed a number of new threats targeting Linux systems and expect to see a growing interest in Linux-based systems during 2022, both in the cloud and on web and virtual servers
· Mobile threats and social engineering scams, including Flubot and Joker, are expected to continue and diversify to target both individuals and organizations
· The application of artificial intelligence to cybersecurity will continue and accelerate, as powerful machine learning models prove their worth in threat detection and alert prioritization. At the same time, however, adversaries are expected to make increasing use of AI, progressing over the next few years from AI-enabled disinformation campaigns and spoof social media profiles to watering-hole attack web content, phishing emails and more as advanced deepfake video and voice synthesis technologies become available
To learn more about the threat landscape in 2021 and what this means for IT security in 2022, read the full Sophos 2022 Threat Report.
Additional content for the Sophos 2022 Threat Report:
· Video of the headline findings, presented by Chester Wisniewski, principal research scientist, Sophos
· An article on SophosLabs Uncut recapping the report sections
· A Sophos News opinion piece by Wisniewski on the ransomware turf wars
· A Naked Security article introducing the report
As the revolutionary Airtel Spam AI Alert Service rolls out across Airtel Africa’s 14 operating countries, Airtel Nigeria CEO, Dinesh Balsingh, has elaborated on the unprecedented benefits and operating principles guiding the Spam Alert Service.
Designed to enhance user safety, this pioneering AI-driven product provides real-time defense against spam and fraudulent SMS messages, making it a gamechanger for mobile security across the continent.
The Airtel AI Spam Alert Service, which is engineered to automatically detect and label suspicious SMS messages as “Suspected SPAM” without requiring any user action or additional apps, leverages a robust AI algorithm that analyzes over 250 parameters.
These parameters includee sender behavior, message frequency, message geographical distribution, and unusual activity patterns. Impressively, the service completes this process under just two milliseconds, offering near-instantaneous alerts while maintaining the privacy of user data by not reading message content.
Commenting on the breakthrough service, Dinesh Balsingh, CEO of Airtel Nigeria, stated: “Nigeria is not just a critical market for us—it’s a leader in digital adoption within the continent. Our AI Spam Alert Service reflects our dedication to safeguarding our customers from the growing threat of SMS fraud.
“As the first of its kind in Africa, it addresses a fundamental issue of trust and security, which is paramount to our digital ecosystem. We’re proud to offer this service to Nigerians and extend it across our African footprint.”
Following its successful deployment in Nigeria, the Spam Alert Service has now launched in Tanzania and Kenya and is set to cover Airtel’s entire African operations. The service’s automatic activation for all Airtel customers, across both smartphones and feature phones, ensures maximum reach and accessibility.
Early feedback from subscribers has been overwhelmingly positive, with users praising the AI’s efficiency in flagging potentially harmful messages without interfering with their everyday communication.
By pioneering this AI-based spam detection technology, Airtel Africa demonstrates its commitment to leveraging cutting-edge innovation to resolve critical issues facing its subscribers. The AI Spam Alert Service not only protects users but also sets a new benchmark for mobile security standards in the region.
“Our goal is to build a safer digital environment for our users,” added Balsingh. “This innovation is part of our broader strategy to incorporate advanced technologies that address real challenges while enhancing the overall customer experience.”
As Africa stands at the point of a profound transformation, the imperative for greater intra-continental cooperation has never been clearer. The path to shared prosperity depends not on the progress of individual nations but on the collective strength of our commitments.
Central to this vision is the relationship between South Africa and Nigeria, two of the continent’s largest economies, and the institutions that serve as bridges between them.
It was an honour for MTN Group to host Minister Parks Tau (SA Minister of Trade Industry and Competition) and his delegation at our Headquarters in Johannesburg. At a time when global uncertainties are reshaping trade and technology, Africa must respond not in isolation, but in solidarity.
As MTN, we see it as our duty to serve as an economic diplomatic bridge between Nigeria and South Africa — driving growth, fostering inclusion, and unlocking opportunity for the Africa’s shared prosperity.
MTN’s journey exemplifies what is possible when two great nations collaborate. As Nigeria’s largest South African investor, MTN has long viewed its presence not simply as a commercial venture but as a platform for inclusive development.
Since commencing operations in Nigeria in 2001, we have invested more than US$10 billion in the country’s digital infrastructure.
Today, MTN Nigeria serves over 80 million subscribers, employs thousands directly, and supports hundreds of thousands of livelihoods across its extended value chain.
Yet, while the economic footprint is significant, our greatest source of pride lies in the social and developmental outcomes accompanying this investment, expanded access to connectivity, enhanced financial inclusion, and the empowerment of individuals and enterprises through digital technologies.
Still, the operating environment remains complex. Macroeconomic challenges in Nigeria, including currency depreciation, inflation, and constraints in accessing foreign exchange, have placed pressure on business continuity and investor confidence.
Despite these difficulties, MTN remains firmly committed to its business case and its long-term presence in Nigeria, underpinned by a belief in the country’s enduring potential and strategic importance to the continent.
However, for South Africa and Nigeria to truly unlock their bilateral potential, a number of long-standing issues require resolution. The upcoming South Africa–Nigeria Trade and Investment Summit, to be held in Abuja later this year, presents a unique opportunity to address these concerns.
The Summit serves not merely as a diplomatic engagement, but as a catalyst for policy reform, reciprocal market access, and institutional dialogue. Importantly, it should reinforce the private sector’s role in shaping practical, actionable solutions that support cross-border trade and investment.
The African Continental Free Trade Area (AfCFTA) offers a historic platform to actualise these ambitions. Yet its success will depend as much on infrastructure and digital connectivity as it will on tariff liberalisation or regulatory harmonisation.
As a pan-African operator, MTN is investing heavily in the digital foundations of AfCFTA, facilitating seamless mobile communication, enabling digital payments, and building platforms for cross-border entrepreneurship.
We also believe that integration must extend beyond economic frameworks to include cultural exchange and people-to-people engagement. One such initiative is our MTN Media Innovation Programme, which brings emerging Nigerian media professionals to South Africa for immersive learning.
Through programmes like these, we aim to cultivate not only knowledge and skills, but also enduring bonds between our nations’ future leaders.
Nigeria’s telecommunications sector witnessed a notable decline in internet users following a 50 per cent tariff hike on voice, data, and SMS services implemented in January 2025.
The Nigerian Communications Commission (NCC) made this known in industry statistics on its website.
According to the report, the industry lost approximately one million internet users in February, with the user base shrinking from 142.16 million to 141.25 million.
It said although a slight recovery was observed in March, with the figure rising to 142.05 million, the sector’s data consumption patterns were significantly impacted.
The NCC data showed a 12 per cent decline in monthly data consumption in February, dropping to 893.06 petabytes from January’s record high of one exabyte.
It, however, said a marginal rebound was recorded in March, with data usage increasing by 11.5 per cent to 995.88 petabytes.
Despite this modest recovery, the report said consumption levels remained slightly below the January peak, suggesting that subscribers continued to exhibit caution in their usage habits due to the increased tariffs.
Meanwhile, the telecom industry demonstrated resilience in other areas, with operators adding 3.39 million new telephone users between January and March.
This growth propelled the total active lines from 169.32 million to 172.71 million, subsequently boosting Nigeria’s teledensity from 78.10 per cent to 79.67 per cent during the same period.
In terms of market dynamics, Mobile Network Operators (MNOs) maintained their dominance in the internet market.
MTN Nigeria led with 75.62 million users, followed by Airtel Nigeria with 48.8 million, Globacom with 15.37 million, and 9mobile with 1.75 million.
MTN also retained its market lead in active telephone lines with 90.5 million subscribers, representing a 52.48 per cent market share, while Airtel followed with 58.3 million users (33.78 per cent), Globacom with 20.7 million (12 per cent), and 9mobile with 2.9 million (1.72 per cent).
The latest industry figures underscore the complexities facing Nigeria’s telecom sector as operators navigate economic pressures and evolving consumer behaviours.
On porting activities, the NCC report noted that Nigeria’s fourth mobile network operator, 9mobile, had continued to experience a decline in its subscriber base, with a total of 5809 customers porting out of its network both in February and March.
The report showed that other operators recorded insignificant outgoing porting numbers compared to 9mobile.
It showed that MTN lost 647 customers, Airtel recorded 695 outgoing portings, Globacom recorded 771, while 9mobile lost 5808 in both February and March.
In terms of incoming porting, MTN gained the most customers from other operators, with 4855 subscribers joining its network in February and March, the report revealed.
It stated that Airtel recorded 2084 incoming porting, while Globacom gained 1007 customers in both months.
The NCC added that, meanwhile, 9mobile recorded only three incoming porting for both months.
According to the NCC report on incoming and outgoing porting activities of mobile network operators, a total of 7922 subscribers moved from one network to another in February and March.
Airtel Reveals Mechanism of Spam Alert Service
Nigerian Tech Prodigy sets World Record with Smallest GPS Tracker
Minister Seeks Digital Tech Adoption to Improve Agriculture, Boost Food Security
Africa Looks to Solar Amid Electricity Challenges
Fidelity Bank grows PBT by 167.8% to N105.8 billion in Q1 2025
News2 days agoTomato ‘Ebola’ May Disrupt Nigeria’s Agric Value Chain- Rewane
Broadcasting2 days agoMultiChoice vs FCCPC: Only President has Power to Fix Prices- Court
General News1 day agoFCMB Group Posts ₦35bn Q1 Profit as Revenue Surpasses Forecast
Telecom2 days agoSEO Secrets: How Media Professionals Can Make Their Blog Posts Rank High
News2 days agoLoan Controversy: Court adjourns Otudeko, others’ case to June 11
E-Financial2 days agoIMF Confirms Nigeria’s Full Repayment of $3.4bn COVID-19 Loan
E-Business2 days agoNEPC, NBS Sign MoU on Data Capturing
E-Business2 days agoNOTAP, REVASS Ink Agreement to Strengthen Tech Compliance