Connect with us

Telecom

Key Trends in Sophos 2022 Threat Report

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, on Wednesday published the Sophos 2022 Threat Report, which shows how the gravitational force of ransomware’s black hole is pulling in other cyberthreats to form one massive, interconnected ransomware delivery system – with significant implications for IT security.

The report, written by SophosLabs security researchers, Sophos Managed Threat Response threat hunters and rapid responders, and the Sophos AI team, provides a unique multi-dimensional perspective on security threats and trends facing organizations in 2022.

The Sophos 2022 Threat Report analyzes the following key trends:

1. Over the coming year, the ransomware landscape will become both more modular and more uniform, with attack “specialists” offering different elements of an attack “as-a-service” and providing playbooks with tools and techniques that enable different adversary groups to implement very similar attacks.

According to Sophos researchers, attacks by single ransomware groups gave way to more ransomware-as-a-service (RaaS) offerings during 2021, with specialist ransomware developers focused on hiring out malicious code and infrastructure to third-party affiliates.

Some of the most high profile ransomware attacks of the year involved RaaS, including an attack against Colonial Pipeline in the U.S. by a DarkSide affiliate.

An affiliate of Conti ransomware leaked the implementation guide provided by the operators, revealing the step-by-step tools and techniques that attackers could use to deploy the ransomware.

Once they have the malware they need, RaaS affiliates and other ransomware operators can turn to Initial Access Brokers and malware delivery platforms to find and target potential victims. This is fueling the second big trend anticipated by Sophos.

2. Established cyberthreats will continue to adapt to distribute and deliver ransomware. These include loaders, droppers and other commodity malware; increasingly advanced, human-operated Initial Access Brokers; spam; and adware. In 2021, Sophos reported on Gootloader operating novel hybrid attacks that combined mass campaigns with careful filtering to pinpoint targets for specific malware bundles.

3. The use of multiple forms of extortion by ransomware attackers to pressure victims into paying the ransom is expected to continue and increase in range and intensity. In 2021, Sophos incident responders catalogued 10 different types of pressure tactics, from data theft and exposure, to threatening phone calls, distributed denial of service (DDoS) attacks, and more.

4. Cryptocurrency will continue to fuel cybercrimes such as ransomware and malicious cryptomining, and Sophos expects the trend will continue until global cryptocurrencies are better regulated. During 2021, Sophos researchers uncovered cryptominers such as Lemon Duck and the less common, MrbMiner, taking advantage of the access provided by newly reported vulnerabilities and targets already breached by ransomware operators to install cryptominers on computers and servers.

“Ransomware thrives because of its ability to adapt and innovate,” said Chester Wisniewski, principal research scientist at Sophos. “For instance, while RaaS offerings are not new, in previous years their main contribution was to bring ransomware within the reach of lower-skilled or less well-funded attackers.

This has changed and, in 2021, RaaS developers are investing their time and energy in creating sophisticated code and determining how best to extract the largest payments from victims, insurance companies, and negotiators. They’re now offloading to others the tasks of finding victims, installing and executing the malware, and laundering the pilfered cryptocurrencies.

This is distorting the cyberthreat landscape, and common threats, such as loaders, droppers, and Initial Access Brokers that were around and causing disruption well before the ascendancy of ransomware, are being sucked into the seemingly all-consuming ‘black hole’ that is ransomware.

“It is no longer enough for organizations to assume they’re safe by simply monitoring security tools and ensuring they are detecting malicious code. Certain combinations of detections or even warnings are the modern equivalent of a burglar breaking a flower vase while climbing in through the back window.

“Defenders must investigate alerts, even ones which in the past may have been insignificant, as these common intrusions have blossomed into the foothold necessary to take control of entire networks.”

Additional trends Sophos analyzed include:

· After the ProxyLogon and ProxyShell vulnerabilities were discovered (and patched) in 2021, the speed at which they were seized upon by attackers was such that Sophos expects to see continued attempts to mass-abuse IT administration tools and exploitable internet facing services by both sophisticated attackers and run-of-the-mill cybercriminals

· Sophos also expects cybercriminals to increase their abuse of adversary simulation tools, such as Cobalt Strike Beacons, mimikatz and PowerSploit. Defenders should check every alert relating to abused legitimate tools or combination of tools, just as they would check a malicious detection, as it could indicate the presence of an intruder in the network

· In 2021, Sophos researchers detailed a number of new threats targeting Linux systems and expect to see a growing interest in Linux-based systems during 2022, both in the cloud and on web and virtual servers

· Mobile threats and social engineering scams, including Flubot and Joker, are expected to continue and diversify to target both individuals and organizations

· The application of artificial intelligence to cybersecurity will continue and accelerate, as powerful machine learning models prove their worth in threat detection and alert prioritization. At the same time, however, adversaries are expected to make increasing use of AI, progressing over the next few years from AI-enabled disinformation campaigns and spoof social media profiles to watering-hole attack web content, phishing emails and more as advanced deepfake video and voice synthesis technologies become available

To learn more about the threat landscape in 2021 and what this means for IT security in 2022, read the full Sophos 2022 Threat Report.

Additional content for the Sophos 2022 Threat Report:

· Video of the headline findings, presented by Chester Wisniewski, principal research scientist, Sophos

· An article on SophosLabs Uncut recapping the report sections

· A Sophos News opinion piece by Wisniewski on the ransomware turf wars

· A Naked Security article introducing the report


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Firm Highlights Skills Development to Drive Data Center Expertise and Sustainability

Published

on

Kindly share this post

The integration of modern technologies has introduced both challenges and opportunities for the data center workforce. Over the past 15 years, the evolution from finance-focused IT applications to edge computing on the cloud has transformed the industry, steering data centers toward a more distributed IT model.

Today, the emphasis is on sustainability, and selecting the right certifications is pivotal for career development in various roles, ranging from data center design to networking and security.

Ben Selier, Vice President of Secure Power for Anglophone Africa at Schneider Electric, emphasizes the need for strategic skills development, noting that, “Training and certifications in data centers have traditionally focused on IT-related and non-IT-related roles. With the industry shifting towards sustainability and smart technologies, the need for relevant certifications has never been greater.”

The shift to the Internet of Things (IoT), artificial intelligence (AI), and smart applications has fueled the digital economy but has not been matched by the growth of a skilled workforce. Specialized IT professionals, previously experts in fields like finance software, face the challenge of rapidly outdated skills.

“The adoption rate of technologies like AI—reaching 1,000 million users in just two months compared to the World Wide Web’s seven years—highlights the pressing skills gap in areas such as cooling and power specialization,” Selier explains. Companies are struggling to train or hire fast enough to meet the demand, exacerbating operational issues within data centers.

Modern technologies offer significant competitive advantages, but Selier warns of the challenges: “Attracting and recruiting skilled technicians, engineers, and operators has become a critical priority for the industry. Without proper investment in training, the shortage of qualified staff could hinder growth and innovation.”

Certifications remain a cornerstone for building expertise in the rapidly changing data center landscape. Schneider Electric has been proactive in addressing this need through its Schneider Electric University and comprehensive training services. “Our programs are designed to bridge the knowledge gap, enabling professionals to gain the latest competencies quickly,” Selier notes.

Flexible training plans have also been introduced to meet immediate demands, allowing companies to collaborate with data center partners for temporary solutions while their teams undergo certification. The EcoXpert™ Partner Program, which initially focused on IT solutions, has been expanded to include sustainability certifications for roles such as cooling specialists and systems integrators.

“The program reflects the growing need for sustainability-specific training, empowering partners to adopt innovative technologies in data center design and operations,” Selier explains. The initiative is designed to educate and create opportunities for collaboration across industry.

The rise of AI, cloud, edge computing, and IoT has disrupted traditional data center operations, making advanced certifications essential for career growth. Certified EcoXpert partners gain expertise in areas such as power distribution, grid management, and new energy landscapes.

“Acquiring skills in emerging technologies not only breaks traditional constraints but also propels the career trajectory of data center professionals,” Selier asserts. The expanded EcoXpert program is tailored to meet the evolving needs of individuals and organizations, fostering collaboration and innovation in critical infrastructure.

He concludes with the statement, “The future of the data center industry depends on our ability to develop talent, embrace sustainability, and invest in skills that meet the demands of a rapidly evolving landscape.”


Kindly share this post
Continue Reading

Telecom

Subscribers’ Group Threatens to Sue Telcos over Proposed Tariff Hike

Published

on

Kindly share this post

Subscribers have said they are preparing to sue telecommunications companies over a proposed tariff hike that could double service costs nationwide.

Subscribers’ Group Threatens to Sue Telcos over Proposed Tariff Hike

Adeolu Ogunbanjo, national president, National Association of Telecommunications Subscribers (NATCOMS), said that his group plans to file a class-action lawsuit if the telecom operators proceed with the hike without first exploring alternative revenue-generating methods.

Punch reported that Ogunbanjo criticised the proposed 100 per cent tariff hike as excessive and unsustainable, urging the Nigerian Communications Commission to deny the operators’ request.

“Initially, we were looking at a marginal increase of five per cent to 10 per cent. Then the NCC considered a 40 per cent increase. Now, telcos are proposing 100 per cent, and we are saying no,” Ogunbanjo.

The proposed tariff hike would raise the cost of a voice call from N11.00 to N22.00 per minute, an SMS from N4.00 to N8.00 per message, and a 1GB data bundle from N1,000 to N2,000.

The NCC is currently reviewing the proposal and has not yet made a final decision.

Ogunbanjo warned that NATCOMS was ready to challenge any approval in court, stating, “This is a sector of national interest, and we will not hesitate to seek legal redress to protect subscribers’ rights.”

The NATCOMS president suggested that telecom operators explore the capital market as an alternative to raising tariffs.

“They can go to the Nigerian Stock Exchange to raise funds. Nigerians will buy their shares, and I am confident it will be oversubscribed. MTN has already done this successfully; other operators like Glo and Airtel should follow suit,” he added.

Ogunbanjo acknowledged the financial pressures faced by telcos, including inflation and rising operational costs. However, he emphasised that subscribers should not bear the brunt of these challenges without first exploring other viable funding options.

“If the operators cannot meet their financial needs after raising funds through the stock exchange, they can return to the table for discussions,” he said.

The consumer group argued that the proposed hike would disproportionately affect low-income subscribers and could hinder access to essential communication services.

Recall that, Karl Toriola, chief executive officer, MTN Nigeria had recently said that telcos had formally submitted requests to the NCC for the 100 per cent tariff hike.

“We’ve put forward requests of approximately 100 per cent tariff increases to regulators. I doubt they’re going to approve that quantum of increases because they are very, very sensitive to the current economic situation in the country,” Toriola said.

He defended the proposed hike as essential for the sustainability of the telecom sector, which has been grappling with rising operational costs.

 


Kindly share this post
Continue Reading

Telecom

Navigating the Path to Sustainable Telecom Services for Subscribers

Published

on

Kindly share this post

By Dinesh Balshingh

As Nigeria continues its journey towards becoming a digitally driven economy, reliable telecommunications services remain the backbone of our collective progress. At Airtel Nigeria, we are committed to delivering world-class connectivity to millions of Nigerians, enabling economic growth, empowering businesses, and enhancing lives.

We understand that the future technology needs of the country, as ushered in by the highspeed 5G era of AI, Cloud computing, Data science applications, and Blockchain, should be directing significant investments towards building a resilient network. However, the industry faces significant challenges that require a closer look as we strive to maintain the high standards that our customers deserve.

Increased Intensity of Investments: The increasing demand for digital services across sectors such as education, media, banking, transportation, and manufacturing has come with an increased demand on telecom capacity.

Upgrading networks to deliver more data capacity is key to a sustainable future. To help ensure that the Nigerian economy keeps pace with the global improvements in technology and communications while supporting the aspirations of consumers, we also take on the responsibility of executing new technology and system upgrades as well as improved security. Data security is now more than ever a priority as more and more people upload personal information online.

All of these require significant investments which are sourced from the international markets at costs denominated in US Dollars. In the past three to four years, for instance, the dollar has gone from exchanging for about N500 to over N1,600.

This more than three-fold increase in foreign exchange conversion exponentially increases the cost of investments required to run a good quality network.

In addition to this unprecedented hike in capital expenditure, the operating costs have surged dramatically, with operating expenses rising by over 300% in the last 18 to 24 months alone.

While several critical areas of the business are impacted, I would, for expediency, focus on three of those areas: Rising Energy Cost, Infrastructure Challenges, and a Commitment to Quality Service.

Rising Energy Costs: Powering telecommunication infrastructure requires significant energy resources. Energy is the single largest operating cost for running a network. With increasing global energy prices and while efforts are ongoing to fully stabilize power supply in Nigeria, Airtel Nigeria and other operators in the sector are incurring soaring costs to keep networks running seamlessly.

Infrastructure Challenges: The industry continues to grapple with rampant fiber cuts and vandalization of critical infrastructure. These incidents not only disrupt services but also demand substantial investments to repair and maintain facilities.

Commitment to Quality Service: Despite these challenges, Airtel Nigeria has remained steadfast in ensuring quality of service. From expanding 4G and 5G networks to meeting growing demand in urban and rural areas, we have painstakingly absorbed the rising costs of these obligations to avoid compromising the customer experience and ensuring Nigerians, regardless of their location, have access to mobile communication and remain connected to the digital economy.

Telecommunications operators have worked tirelessly to sustain services despite keeping tariffs unchanged for the last 10 years. While tariffs have remained static for over a decade, the economic realities necessitate a review to ensure the sustainability of services hence our recent application to the government for tariff adjustment which if approved will be a step towards addressing this imbalance.

It is not a decision taken lightly but one borne out of the need to guarantee continued investment in network expansion, technology upgrades, and improved service delivery.

The telecommunications sector is pivotal to Nigeria’s ambition to become a digital economy leader in Africa. Meeting this aspiration requires operators to make substantial investments in network infrastructure, spectrum acquisition, and innovative solutions. These investments come at a cost, one that must be shared proportionally to ensure long-term viability.

At Airtel Nigeria, we remain resolute in our commitment to:

Delivering Quality Services: As the government continues to monitor operators’ compliance with service quality standards. Airtel is dedicated to surpassing these benchmarks, ensuring customers experience uninterrupted and superior connectivity.

Driving Economic Growth: By expanding our network and enhancing digital inclusivity, we are enabling the government’s economy turnaround agenda and fostering opportunities for all Nigerians.

Being a Reliable Partner: Despite industry challenges, we are steadfast in our role as a trusted partner in Nigeria’s digital transformation journey.

While significant tariff adjustments have become warranted for the sustainability of the industry, Airtel has always been sensitive to affordability and understand that the price adjustments must be done gradually to support our customers’ financial positions.

“We believe that an approval of revised tariffs will empower operators to invest in capacity, expand coverage to underserved areas, aim for advanced security on the networks, and improve service quality and network availability while ensuring that Nigeria remains competitive in the global digital landscape.

As we navigate the present imperatives together, we urge all stakeholders, including customers, regulators, and partners to recognize the importance of building a resilient telecommunications ecosystem. Airtel Nigeria remains committed to delivering unmatched value while supporting the nation’s economic development.

Dinesh Balsingh is the Managing Director/CEO of Airtel Nigeria.

 


Kindly share this post
Continue Reading

Trending