E-Business
New Research from Trend Micro Shows Cyberattacks Relied on Substance Over Size in 2023
Trend Micro Incorporated, a global cybersecurity leader, has revealed that it blocked around 18 million email threats, almost two million malicious URLs and over four million malicious mobile apps targeted at Nigerian businesses and consumers between January and December 2023. This as threat actors deviate from big-batch attacks to focus on a narrower range of more lucrative targets.
These new patterns in the cybercrime landscape are highlighted in the Trend Micro 2023 Annual Cybersecurity Report, which presents highlights from the company’s telemetry covering the broadest attack surface view across millions of commercial and consumer clients.
“Our latest data shows that threat actors are fine-tuning their operations, shifting away from large-scale attacks, and instead focusing on a smaller range of targets but with higher victim profiles for maximum gain with minimum effort. As they continue to double down on tried and tested techniques, they are also delegating and streamlining operations — resulting in bolder, more effective strikes,” says Gareth Redelinghuys, Country Managing Director, African Cluster at Trend Micro.
Attacks focused on substance over quantity are more difficult to block
Though thousands of ransomware attacks were blocked by Trend Micro in Nigeria in 2023, year-on-year research shows that ransomware groups are working smarter instead of harder, prioritising high-value targets over volume.
There has been a general downward trend in ransomware detections, with worldwide detections from 2021 to 2023 averaging less than half of the recorded detections in 2020; however, this should not be misconstrued as a cue for security operations centres and decision-makers to lower their guards. Historically, ransomware attacks were launched in “bulk,” such as spam campaigns with malicious links, but attacks that focus on quantity can more easily be blocked.
What’s more, a continued increase in Trojan FRS threat detections globally could suggest that attackers are using more effective ways to evade preliminary detection by focusing on arrival and defense evasion techniques. Examples of this include Living-Off-The-Land Binaries and Scripts. Because these computer files are non-malicious in nature and local to the operating system, they can be used by threat actors to camouflage their attacks.
Last year, several ransomware families across the world were also observed maximising remote and intermittent encryption, as well as abusing unmonitored virtual machines to bypass Endpoint Detection and Response. Because there is less content used during intermittent encryption, for example, there is less chance of triggering detection.
Gangs are also launching bolder attacks: Prolific groups were some of the most active in 2023: Clop exploited major vulnerabilities, and BlackCat launched a new variant, while also making its extortion public by leveraging the U.S. Security and Exchange Commission’s four-day disclosure requirement to incentivise its victim to communicate more quickly with them.
Email threats – attackers are using more sophisticated ways to avoid detection
This trend towards threat actors opting for quality over quantity is equally present in the patterns observed around email threats. Though email threat detections in Nigeria decreased from more than 45 million in 2021 to 18 million in 2023, the increase in malware detection count over the same period suggests a shift in the threat landscape that finds attackers making use of more sophisticated ways to avoid detection.
Trend Micro’s data also shows a slight decrease in malicious URL detection in Nigeria from 2021 to 2023, indicating that instead of focusing on malicious links to randomly victimise users, criminals are using more targeted operations, such as BEC schemes, where emails are less likely to undergo scrutiny because of how legitimate they look.
Instead of launching attacks on a wider range of users and relying on victims clicking on malicious links in websites and emails, more sophisticated attacks are launched using specificity to trick a narrower field of high-profile victims. This also allows them to bypass early detection layers like network and email filters.
AI-powered phishing attempts are more convincing than ever
Over the course of 2023, AI showed great promise in social engineering attempts globally: its automation proved most useful in mining datasets for actionable information, while generative AI have made phishing on mass scale virtually effortless with error-free and convincing messages. The use of generative AI in phishing attempts is already branching beyond emails and texts to include persuasive audio and video ‘deepfakes’ for an even more business-affecting threat.
Imagine a company that requires live voice authorisation for purchases above a million dollars, for example. An attacker could send a real-seeming email request with a rigged phone number embedded and answer the confirmation call with a deepfaked voice to validate the transaction. These new tactics introduce the possibility of everything from stock market manipulations to democratic or wartime disinformation campaigns, or smear attacks on public figures.
The barriers to entry for techniques like these have fallen away radically with the rise of readily available app-style interfaces like HeyGen. Cybercriminals with no coding knowledge or special computing resources can produce customised high-resolution outputs that are humanly undetectable.
“Looking at the overall trend in decreasing ransomware threats, it might be tempting for local organisations to develop a false sense of security and lower their defenses. However, our research shows that these increasingly sophisticated attacks are going to become more and more difficult for businesses to detect and that they will be increasingly costly when they succeed. IT leaders must refine their processes and protocols to enable their defenses to combat persistence with efficiency,” concludes Zaheer Ebrahim, Solutions Architect, Middle East and Africa at Trend Micro.
Media Rights Agenda (MRA), has unveiled a visual brief emphasizing the critical need for responsible and ethical use of Artificial Intelligence (AI) in journalism, particularly within Nigeria’s evolving media environment.
This is coming ahead of World Press Freedom Day today.
The visual brief, developed under this year’s global theme, “Reporting in the Brave New World – The Impact of Artificial Intelligence on Press Freedom and the Media,” explores the opportunities and dangers AI poses to media freedom in Nigeria and across the world.
In a statement released in Lagos by John Gbadamosi, its programme officer,MRA noted that AI is quickly changing the way news is produced and consumed, adding that it offers powerful tools that can assist journalists in analysing data, translating stories into local languages, and extend the reach of vital information, especially to underserved areas with limited media infrastructure.
Gbadamosi added that AI can help to ensure that essential news and information are also disseminated to local communities.
However, Gbadamosi warned that the same technology is being weaponised to undermine truth and press freedom, saying: “While AI can be used to advance journalism, it can just as easily be exploited to spread disinformation, create deepfakes, and drown out independent voices with algorithmically generated propaganda.”
According to him, “In Nigeria, journalists face threats that go beyond just physical dangers; such threats now also encompass digital, algorithmic, and systemic harms and challenges, which requires media professionals to ensure that AI enhances, rather than undermines, media freedom and that technology is used to promote the truth, not distort it.”
“The visual brief breaks down key concepts like misinformation, disinformation, mal-information, and information overload, which are increasingly shaping Nigeria’s digital media ecosystem. It also raises concerns about AI-enabled surveillance, political manipulation, and the marginalisation of community-based journalists.”
Gbadamosi stated that the visual brief also advocates support for independent media, transparent AI regulations aligned with Nigeria’s context, increased digital literacy, and stronger accountability from tech companies regarding platform content and influence.
He therefore urged all stakeholders to advocate for responsible AI usage and a free, independent, professional and vibrant media environment in Nigeria, stressing that “when media freedom thrives, democracy lives.”
The National Identity Management Commission (NIMC) has raised the fees for all its products and services, including charges related to data modification on the National Identification Number (NIN) database.
In a statement issued in Abuja, Kayode Adegoke, NIMC’s Head of Corporate Communications, announced that the updated service fees are published on the commission’s official website.
Adegoke noted that the new pricing structure for NIMC’s services and products marks the first comprehensive review of its fees in over a decade.
The statement stated that the revised pricing is designed to align with prevailing operational costs and industry standards, while continuing to ensure that services remain accessible and affordable for all Nigerians.
The statement warned its Front-End Partners (FEPs) to comply with the newly approved rates, stating that any failure to do so could attract strict sanctions, including possible license revocation.
“The new structure ensures that the quality and integrity of our services remain uncompromised. We are committed to protecting the interests of Nigerians through fair and transparent pricing,” the statement read.
NIMC urged the public to report any Front-End Partners (FEPs) found charging beyond the approved rates. Reports can be directed to the Commission’s Inspectorate and Enforcement Unit via email at ieu@nimc.gov.ng
It further reaffirmed its commitment to delivering secure and dependable identity services. A complete list of the revised service fees can be accessed on its official website at www.nimc.gov.ng.
In a related development, Abisoye Coker-Odusote, Director General of the National Identity Management Commission (NIMC), expressed sincere appreciation to President Bola Ahmed Tinubu for his unwavering support in enhancing the National Identity Database (NIDB).
She also extended her gratitude to the Minister of Interior, Dr. Olubunmi Tunji-Ojo, and other key partners for their pivotal roles in advancing a sustainable and effective identity management system.
Artificial intelligence (AI) adoption could boost Africa’s gross domestic product by an additional 4.9 percentage points by 2035, as the African economy is reshaped by the emerging technology.
This is according to PwC’s recently released report: Value in Motion. It is based on data-driven scenario analysis, which reveals that globally, AI has the potential to boost economic output by up to 15 percentage points over the next decade.
The global growth dividend from AI varies according to the region and depends on more than technical success – it also hinges on responsible deployment, clear governance, and public and organisational trust, notes the report.
This would effectively add one percentage point to annual growth rates − on par with the growth increment the world began enjoying with 19th century industrialisation.
In other scenarios analysed by PwC, characterised by lower trust and co-operation, the incremental boost to the economy from AI would be more muted at 8%, or in a pessimistic scenario just 1%.
The research finds that rapid reconfiguration of the economy is already under way. PwC analysis indicates the pressure for African businesses to reinvent themselves is at some of the highest levels seen in the last 25 years across six out of nine sectors in Africa.
The $150.54 billion in revenue in Africa is set to shift between companies in 2025 alone, a trend that begun prior to the recent global increase in tariffs.
PwC’s research suggests that over the next decade, industries will reconfigure to meet human needs in new ways, leading to the formation of new ‘domains’ that cross traditional sector lines.
Dion Shango, PwC Africa CEO, explains: “As the structure of the economy transforms, value will increasingly come from organisations that can connect the dots across traditional industry boundaries. By focusing on evolving customer needs and using technology to dramatically change the way business operates, business leaders can unlock a step change in growth.”
According to Google’s Digital Opportunity of Africa report, AI could contribute up to $30 billion to Sub-Saharan Africa’s economy by 2030. Africa stands to accelerate its growth through AI as more people gain connectivity and harness technology for good, it notes.
“Across the continent, a new generation of innovators are harnessing technology to solve some of the world’s most pressing challenges,” says Google.
In terms of AI’s impact on the climate, PwC’s analysis shows that while AI is set to accelerate growth, the costs of physical climate threats will impose economic constraints.
PwC’s economic modelling suggests that physical climate impacts could result in the African economy being over 12%smaller (globally: 7%) by 2035 in all scenarios than it would have been otherwise.
“Increased AI adoption is expected to lead to increased energy use by data centres. However, modest use of AI to drive energy-efficiency could offset this increased use of energy. PwC estimates that the energy use and emissions impact of AI would be neutral if each additional percentage point of AI use led to innovations which cut energy intensity by just 0.1% globally,” says the report.
Fines: Meta Threatens to Shut Down Facebook, Instagram in Nigeria
History as TVC News Unveils Nigeria’s First AI-Powered News Anchors
Court Rejects Bid to Stop CBN from Using e-Naira Trademark
MRA Flags AI Concerns ahead of Press Freedom Day Today
NITDA, RHI, Commission IT Community Centre in Ibadan
E-Financial3 days agoCBN Slams ₦250m Fine on Paystack Over Zap Wallet Operations
General News3 days agoNITDA Inaugurates Start-up Consultative Forum
Telecom2 days agoSterling Bank Introduces AlwaysOn, Offering Nigerians Up to ₦1 Million Monthly
Telecom22 hours agoFines: Meta Threatens to Shut Down Facebook, Instagram in Nigeria
Telecom3 days agoGBB Reaffirms Commitment to Driving Public Sector Innovation @ the 5th Public Service Innovation Competition Awards
Telecom2 days agoBanks Settle ₦160Bn USSD Debt to Telcos, Ending Five-Year Dispute
General News3 days agoNFIU Alerts Nigerians of Rising Ponzi Schemes, Unregulated Crowdfunding Scams
News3 days agoFirm Warns Against AI Password Generation @ World Password Day