E-Business
Preventing, Mitigating Ransomware with Cyber Situational Awareness
If you’re familiar with mafia movies then you’re familiar with extortion – the practice of obtaining something, especially money, through force or threats.
Extortion has been around for centuries – well before “The Godfather” or “Goodfellas.” Even cyber extortion, which extends this criminal activity into the digital world, isn’t new.
What is new, however, is the wide variety of methods that are used by the bad guys to get their money.
Three main tactics are behind cyber extortion: the threat of distributed denial of service (DDoS), the threat of data compromise and ransomware.
DDoS attacks are one of the most popular means to facilitate extortion. These types of attacks typically target business-critical websites in order to increase the likelihood of payment, usually via Bitcoin (BTC), and can have crippling effects on organizations.
In certain cases, such as when targeting hosting providers, the threat actor may add more pressure to pay by using the negative publicity associated with service downtime as a threat.
A second method of extortion involves the potential release of compromised data. This method is dependent on the fact that the target’s data has already been compromised.
The threat of its release to the public domain is used as blackmail in order to extort money from the affected entity.
A third type of extortion, and the one most often in the news as of late, is ransomware – malicious software (malware) that restricts access to the computer system it has infected.
The malware demands that a ransom be paid before restoring access to affected resources.
Ransomware can prevent access to many features of a victim’s machine, including files, applications and the operating system itself.
Because ransomware is an ever-evolving threat that can be more challenging to address than other cyber extortion tactics, let’s take a closer look at how it works and how to prevent and mitigate it.
At a high-level, the ransomware process is fairly standard. Files are encrypted and the attackers, who hold the decryption key, will only allow the target to decrypt the files after the required BTC ransom is paid. Specific details of the attack, however, will depend on the variant.
Until recently ransomware has been delivered most commonly via drive-by-downloads from exploit kits, or through spam emails that either contain malicious attachments or encourage recipients to visit websites hosting malicious content.
But we see that starting to change with threat actors using more targeted methods to achieve their objective, such as spear-phishing emails purporting to be from a job applicant or including the name, job title and job-relevant information of the recipient.
The disclosure that some organizations are paying the fee to unencrypt data likely provides further motivation for these types of attacks. In fact, when the actor estimates there’s a high likelihood of payment of the ransom fee they invest in more reconnaissance which can further increase the likelihood of infection.
As ransomware becomes big business, research on the dark web reveals a number of services being advertised to make it easy for beginners with low technical understanding to execute ransomware attacks with success.
Everything they need is available on a USB stick for $1,200 or they can take advantage of a hosted service in return for 5 percent commission on the ransom payments received.
So how can you combat cyber extortion? Cyber situational awareness can give you greater insights into the tools and processes used by actors that employ DDoS-based extortion and compromised data release extortion.
Advanced knowledge of the typical demands of a threat actor and their capabilities can help you make difficult decisions if presented with such a scenario and help you prevent future attacks.
Mitigating ransomware threats is more complex. It requires a combination of technical and process controls and company-wide engagement – from employees, to executives, to IT security teams. Cyber situational awareness can help you understand the infection vectors of the malware and apply the appropriate security controls to mitigate the risk of infection.
This includes insights you can use to raise staff awareness of how ransomware attacks occur and help you devise technical and procedural controls to prevent infection and to develop ransomware response procedures in the case of infection.
Of course ensuring that backups are maintained and are separate from the network can increase resilience to such attacks. In addition, several decryption tools have been released but, in the cat and mouse game between ransomware and such tools, their effectiveness tends to be short-lived; ransomware developers are continuously developing encryption methods to evade them.
As defenders, staying up-to-date with the latest trends and innovation can be hard, but it is essential in order to effectively prevent and mitigate the effects of extortion on your business.
With cyber situational awareness you can learn about the actors involved in extortion and their tactics, tools and motivations. With this knowledge you can more effectively align your defenses and make better decisions in the face of an attack.
Alastair Paterson, CEO and Co-Founder of Digital Shadows
Corporate Affairs Commission (CAC) in partnership with the Nigeria Inter-Bank Settlement System (NIBSS) has unveiled a new Application Programming Interface (API) integration system to allow private firms access company data from the Commission’s database.
Hussaini Ishaq Magaji (SAN), registrar general of CAC, who spoke in Abuja at the unveiling said the system would give selected private organizations access to CAC services through technology-based companies, called “super agents.”
“This is a practical step to show that the Commission is committed to meeting the expectations of our customers,” he said.
Magaji explained that the integration allows the agents to retrieve data from the CAC database for use in specific client requests, outside the standard services provided by the Commission.
“Before now, only a few government agencies had this integration, especially those involved in investigations, anti-money laundering, and terrorism financing. Now, private companies that meet the criteria can also access it,” he said.
He said the system complies with the Nigerian Data Protection Act 2023, and information such as residential addresses, phone numbers, and dates of birth may be restricted.
“This is a call to law firms and companies with the right technology. We’ve started with NIPS because of their credibility. Embassies and banks can now authenticate company records directly through them.”
“There are prescribed fees. We already collect them on our portal, and now customers can also pay through these agents,” he explained.
He named NIPS, MoneyPoint, and OPE as some of the companies involved.
“OPE and MoneyPoint handle only registrations. But NIPS has moved further into validation and verification,” he said.
Ngover Ihyembe-Nwankwo, executive director at NIBSS, who represented Premier Oiwoh, managing director, said the service allows secure and efficient data verification.
“This is the result of years of effort to connect our systems with CAC. It will help users verify data within the limits of data protection laws,” she said.
She said the move is a way to lower costs and promote interoperability across the financial sector.
Ministry of Interior has announced the launch of a new Online Citizenship and Business Management Platform in line with the Renewed Hope Agenda of President Bola Tinubu.
A statement signed by Dr Magdalene Ajani, permanent secretary, Ministry of Interior’s said the initiative forms a key part of its ongoing reforms aimed at promoting transparency, enhancing operational efficiency, and significantly improving service delivery to the public.
The new digital platform is designed to streamline the application and processing of citizenship and business-related services, ensuring faster turnaround times and improved user experience.
The platform allows users to apply for and manage business permits, ensuring that both local and foreign businesses operate legally in Nigeria.
It includes an Expatriate Quota System to manage work permits for foreign employees, helping companies hire skilled workers while complying with Nigeria’s immigration laws.
The Citizenship Administration and Management System provides a streamlined online process for applying, tracking, and managing Nigerian citizenship applications and related services.
Members of the public, corporate entities, and other stakeholders are expected to access the platform through the ministry’s website: https://interior.gov.ng , Direct Portal Access: https://candb.interior.gov.ng , or contact candb-support@interior.gov.ng for support and inquiries.
“The Ministry of Interior remains committed to establishing a more efficient, transparent, and secure framework for citizenship administration, while continuously enhancing service delivery through digital transformation,” the statement read in part.
Fifty selected young unemployed Nigerians have completed a four-week intensive digital skills bootcamp under the Digital Literacy for All (DL4ALL) initiative, gaining practical training in Data Science, Artificial Intelligence (AI), and IT Essentials.
The programme, a collaborative effort between the National Information Technology Development Agency (NITDA) and Cisco, was hosted at NITDA’s South West Zonal Office in Victoria Island, Lagos.
Speaking on behalf of the Director General of NITDA, Kashifu Inuwa , the Head of the South West Zonal Office, Mrs. Chioma Okee-Agugwo, described the initiative as a vital component of Nigeria’s digital future. “This is not just a closing ceremony. It is the launchpad for new journeys—anchored in digital knowledge and powered by innovation,” she remarked.
According to the Director General, the initiative is rooted in NITDA’s Strategic Roadmap and Action Plan (SRAP 2.0) and reflects key focus areas including Digital Literacy, Emerging Technologies, and Youth Empowerment. It also aligns with President Bola Ahmed Tinubu’s Renewed Hope Agenda, which seeks to accelerate economic diversification through digitisation, innovation, and skills development.
Inuwa noted that the DL4ALL initiative forms part of Nigeria’s broader commitment to digital inclusion—ensuring that no one is left behind in the evolving digital economy. It also supports the ambitious goal of achieving 70% digital literacy by 2027, championed by the Honourable Minister of Communications, Innovation and Digital Economy, Dr. Bosun Tijani. This national vision aims to equip millions of Nigerians with the skills required to thrive in a tech-driven world.
He further emphasized the importance of empowering youth with globally relevant skills. “They are no longer just consumers of technology. They are creators, innovators, and future employers,” he said.
The NITDA boss explained that throughout the bootcamp, participants engaged in hands-on learning experiences designed to build both technical proficiency and digital leadership capabilities.
“This is only the beginning,” he stated. “Through our zonal strategy, we are bringing innovation closer to local communities. This is how we democratise access and unlock Nigeria’s full digital potential.”
Inuwa expressed appreciation to Cisco for delivering high-impact training and called on stakeholders to continue investing in partnerships, people, and platforms that drive digital inclusion.
He asserted that the newly certified participants are now equipped to contribute meaningfully to Nigeria’s digital economy—armed with the skills to build solutions, secure infrastructure, and launch tech ventures that solve real-world problems.
At the end of the bootcamp, participants demonstrated their knowledge through impressive presentations that showcased the integration of skills acquired across Data Science, AI, and IT Essentials. Many spoke passionately about how the programme had expanded their technical competence and sparked a drive to create job opportunities—not only for themselves but also for others—as entrepreneurs and digital solution providers in their communities.
MTN Nigeria Drags 20 Banks to Court over N6Bn Debt by SleekChip
Manager, Others Arraigned for Allegedly Hacking into Premium Trust Bank’s Server
Africa Launches First Continental Space Agency
DBI Clocks 21, to Train 5m Workers
CAC, NIBSS Unveil Platform for Data Access to Private Firms
E-Financial3 days agoAccess Holdings Sets Benchmark in Fraud Prevention With ₦193.5Bn Tech Investment
E-Financial3 days agoMTN’s Digital Lending Arm Disburses $592m Loans in Q1
E-Financial3 days agoFG Verifies 2m Households for Cash Transfer
E-Financial3 days agoAccess Bank, Deloitte Partner to Equip SMEs with Tools for Growth
News3 days agoSERAP Asks Ojulari, NNPC CEO to Account for Missing N500Bn or Face Legal Action
E-Business3 days agoFG Launches Online Citizenship, Business Management Platform
Telecom3 days agoEquinix Expands Digital Footprint in Nigeria with Launch of LG2.3 Data Center
General News3 days agoNOTAP Urges South Eastern Entrepreneurs to Embrace Franchising as Business Model