Connect with us

Telecom

Ransomware Recovery Cost Reaches Nearly $2 Million- Sophos Survey Shows

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, today announced the findings of its global survey, “The State of Ransomware 2021,” which reveals that the average total cost of recovery from a ransomware attack has more than doubled in a year, increasing from $761,106 in 2020 to $1.85 million in 2021.

The average ransom paid is $170,404. The global findings also show that only 8% of organizations managed to get back all of their data after paying a ransom, with 29% getting back no more than half of their data.

The survey polled 5,400 IT decision makers in mid-sized organizations in 30 countries across Europe, the Americas, Asia-Pacific and Central Asia, the Middle East, and Africa.

While the number of organizations that experienced a ransomware attack fell from 51% of respondents surveyed in 2020 to 37% in 2021, and fewer organizations suffered data encryption as the result of a significant attack (54% in 2021 compared to 73% in 2020), the new survey results reveal worrying upward trends, particularly in terms of the impact of a ransomware attack.

“The apparent decline in the number of organizations being hit by ransomware is good news, but it is tempered by the fact that this is likely to reflect, at least in part, changes in attacker behaviors,” said Chester Wisniewski, principal research scientist, Sophos. “We’ve seen attackers move from larger scale, generic, automated attacks to more targeted attacks that include human hands-on-keyboard hacking. While the overall number of attacks is lower as a result, our experience shows that the potential for damage from these more advanced and complex targeted attacks is much higher. Such attacks are also harder to recover from, and we see this reflected in the survey in the doubling of overall remediation costs.”

The main findings of the State of Ransomware 2021 global survey include:

· The average cost of remediating a ransomware attack more than doubled in the last 12 months. Remediation costs, including business downtime, lost orders, operational costs, and more, grew from an average of $761,106 in 2020 to $1.85 million in 2021. This means that the average cost of recovering from a ransomware attack is now 10 times the size of the ransom payment, on average

· The average ransom paid was $170,404. While $3.2 million was the highest payment out of those surveyed, the most common payment was $10,000. Ten organizations paid ransoms of $1 million or more

· The number of organizations that paid the ransom increased from 26% in 2020 to 32% in 2021, although fewer than one in 10 (8%) managed to get back all of their data

“The findings confirm the brutal truth that when it comes to ransomware, it doesn’t pay to pay. Despite more organizations opting to pay a ransom, only a tiny minority of those who paid got back all their data,” said Wisniewski.

“This could be in part because using decryption keys to recover information can be complicated. What’s more, there’s no guarantee of success. For instance, as we saw recently with DearCry and Black Kingdom ransomware, attacks launched with low quality or hastily compiled code and techniques can make data recovery difficult, if not impossible.”

· More than half (54%) of respondents believe cyberattacks are now too advanced for their IT team to handle on their own

· Extortion without encryption is on the rise. A small, but important 7% said that their data was not encrypted, but they were held to ransom anyway, possibly because the attackers had managed to steal their information. In 2020, this figure was 3%

“Recovering from a ransomware attack can take years and is about so much more than just decrypting and restoring data,” said Wisniewski. “Whole systems need to be rebuilt from the ground up and then there is the operational downtime and customer impact to consider, and much more. Further, the definition of what constitutes a ‘ransomware’ attack is evolving. For a small, but significant minority of respondents, the attacks involved payment demands without data encryption.

“This could be because they had anti-ransomware technologies in place to block the encryption stage or because the attackers simply chose not to encrypt the data. It is likely that the attackers were demanding payment in return for not leaking stolen information online. A recent example of this approach involved the Clop ransomware gang and a known financially-motivated threat actor hitting around a dozen alleged victims with extortion-only attacks.

“In short, it is more important than ever to protect against adversaries at the door, before they get a chance to take hold and unfold their increasingly multi-faceted attacks. Fortunately, if organizations are attacked, they don’t have to face this challenge alone. Support is available 24/7 in the form of external security operations centers, human-led threat hunting and incident response services.”

The main findings of the State of Ransomware 2021 for Nigeria:

· 22% of respondents from Nigeria had experienced a ransomware attack in the last 12 months, compared to 53% in 2020

· 39% of respondents from Nigeria that weren’t hit by ransomware in the last 12 months but expect to be hit in the future, believe that ransomware attacks are getting increasingly hard to stop due to their sophistication

· 26% of respondents from Nigeria that weren’t hit by ransomware in the last 12 months but expect to be hit in the future, say it is hard to stop their users from compromising the organization’s security

Sophos recommends the following six best practices to help defend against ransomware and related cyberattacks:

1. Assume you will be hit. Ransomware remains highly prevalent. No sector, country or organization size is immune from the risk. It’s better to be prepared, but not hit, rather than the other way round

2. Make backups and keep a copy offline. Backups are the main method organizations surveyed used to recover their data after an attack. Opt for the industry standard approach of 3:2:1 (three sets of backups, using two different media, one of which is kept offline)

3. Deploy layered protection. As more ransomware attacks also involve extortion, it is more important than ever to keep adversaries out in the first place. Use layered protection to block attackers at as many points as possible across an estate

4. Combine human experts and anti-ransomware technology. The key to stopping ransomware is defense in depth that combines dedicated anti-ransomware technology and human-led threat hunting. Technology provides the scale and automation an organization needs, while human experts are best able to detect the tell-tale tactics, techniques and procedures that indicate an attacker is attempting to get into the environment. If you don’t have the skills in house, look at enlisting the support of a specialist cybersecurity company – Security Operation Centers (SOCs) are now realistic options for organizations of all sizes

5. Don’t pay the ransom. Easy to say, but far less easy to do when an organization has ground to a halt due to a ransomware attack. Independent of any ethical considerations, paying the ransom is an ineffective way to get data back. If you do decide to pay, bear in mind that the adversaries will restore, on average, only two-thirds of your files

6. Have a malware recovery plan. The best way to stop a cyberattack from turning into a full breach is to prepare in advance. Organizations that fall victim to an attack often realize they could have avoided significant financial loss and disruption, if they had an incident response plan in place

The State of Ransomware 2021 survey report is available in full on Sophos.com.

The State of Ransomware 2021 survey was conducted by Vanson Bourne, an independent specialist in market research, in January and February 2021. The survey interviewed 5,400 IT decision makers in 30 countries, in the US, Canada, Brazil, Chile, Colombia, Mexico, Austria, France, Germany, the UK, Italy, the Netherlands, Belgium, Spain, Sweden, Switzerland, Poland, the Czech Republic, Turkey, Israel, UAE, Saudi Arabia, India, Nigeria, South Africa, Australia, Japan, Singapore, Malaysia, and the Philippines. All respondents were from organizations with between 100 and 5,000 employees.

Sophos Intercept X protects users by detecting the actions and behaviors of ransomware and other attacks.

 


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Coker Urges Africa to Close Digital Infrastructure Gap for Prosperity

Published

on

Kindly share this post

Ayotunde Coker, Chief Executive Officer of Open Access Data Centre, has said that closing Africa’s digital infrastructure gap is the key to increasing prosperity on the continent.

“Closing the digital infrastructure gap is key to Africa’s prosperity,” he said this in his keynote speech at the ‘Hyperscalers Convergence Africa’ event held in Lagos on Thursday.

The inaugural Hyperscalers conference was organised by Africa Hyperscalers Media and was aimed at uniting the continent’s digital infrastructure community.

Coker stated that Africa accounts for about 17 percent of the world’s population but contributes only around 4 percent of the global GDP. This disparity, which he termed the prosperity gap, is closely linked to Africa’s underdeveloped digital infrastructure.

For instance, nine submarine cables deliver internet capacity to Nigeria’s shores, but a 90,000-kilometer fiber infrastructure gap results in slow and unreliable internet access in the country. Gaps like this hurt the economic potential of the most populous African nation.

“Meaningful broadband connectivity, which is measured by speed, latency, and cost, is necessary for economic development,” he stated.

He urged governments and businesses to focus on expanding fibre networks and improving broadband services to support digital growth. He noted the role of supportive regulations, arguing that while some African countries have made progress in implementing regulations for the digital economy, more needs to be done.

“There needs to be collaboration between governments, regulatory bodies, and the private sector to create an environment that fosters investment in digital infrastructure,” Coker stated.

He acknowledged ongoing efforts in Nigeria and across the continent to improve visibility and support for digital projects but warned that progress would remain limited unless the underlying infrastructure gaps were addressed.

“Africa must light up its dark digital spine,” Coker stated, emphasising the need for revolutionary efforts to drive corporate adoption of digital infrastructure and broadband connectivity. “Without these steps, Africa’s economic growth would continue to be stifled by its underdeveloped digital landscape,” he added.

Also corroborating Coker, Deremi Atanda, the chief executive officer of Remita Payments, noted that connectivity can transform Africa’s innovation and economy.

During a panel session themed ‘Innovating Towards Africa’s Digital Future,’ he stressed that the continent’s prosperity lies in the strength of its digital infrastructure.

“The prosperity of Africa is dependent on the quality of our digital infrastructure. Connectivity has the power to redefine Africa’s innovation,” Atanda said.

He explained that the ability of Africans to take responsibility for their own challenges will only improve with better digital infrastructure. “We must respond to Africa’s needs when it comes to digital infrastructure. It will enable Africans to better understand their problems and improve their quality of life across the continent.”

Frank Eleanya, Senior Writer for Business, and Big Tech at TechCabal, acknowledged that while efforts have been made to improve digital infrastructure, there has been a lack of leadership to fully realize these goals.

“What’s needed is the leadership to make it all happen. We have the capacity, but leadership must wake up and translate all these plans into reality,” Eleanya said.

Wabo Majavu, Executive of Strategy and Business Operations at Africa Data Centre, pointed out that involving communities in Africa’s innovation journey requires monitoring and measuring impact. “When you look at the opportunities, there’s a need to talk about access,” Majavu noted.


Kindly share this post
Continue Reading

Telecom

Public-Private Partnerships for Infrastructure Development: Insights from Anambra and Lagos States

Published

on

Kindly share this post

At the Hyperscalers Convergence Africa Conference held recently at the Federal Palace Hotel, Lagos, leading experts in technology and infrastructure development convened to discuss regulatory frameworks for fostering digital infrastructure in Africa.

CFA

Among the distinguished panelists were the Honorable Commissioner for Innovation, Science, and Technology, Lagos State, Olatubosun Alake, and the Managing Director/CEO of the Anambra State ICT Agency, Chukwuemeka Fred Agbata, who shared insights from their respective states on the journey so far.

In his remarks, Chukwuemeka Fred Agbata, CFA, highlighted Anambra’s success story through Public-Private Partnerships (PPP), particularly in digital infrastructure development.

He noted that Governor Charles Soludo’s initiative to waive Right of Way (RoW) charges was pivotal in attracting investors and enhancing ease of business, following the examples set by Lagos and Kaduna.

“Governor Soludo’s decision to waive RoW charges significantly boosted connectivity and economic growth in the state,” CFA said.

“Government is financially burdened, so we have focused on collaborating with local partners to connect our services.

For the first time, we now have a civil service with access to the internet – another successful example of PPP in action.”

A major component of the state’s digital transformation strategy has been leveraging partnerships with local businesses to foster digital access across government institutions.

CFA emphasized that such collaborations were critical for states, not just Anambra, as efficient resource management is key to meeting diverse governance priorities.

“Partnerships as this enable progress in areas like digital infrastructure without placing the full burden on government resources, making them a vital part of modern governance”. He concluded.

Olatubosun Alake, Lagos State’s Commissioner for Innovation, Science, and Technology, highlighted the importance of stakeholder consultation and advocacy, particularly when engaging the private sector.

He urged companies to establish their own codes of conduct to ensure smooth interactions with the government and legislative bodies, which play a critical role in reforms aimed at fostering ease of doing business.

“Ease of doing business is pivotal because it determines whether an investor will engage,” Alake said.

He also emphasized the importance of qualified personnel in civil service sectors and advocated for competitive pay packages to ensure optimal service delivery.

Other distinguished panelists included Dr. Ayotunde Coker, Chairman, Africa Data Centres Association; Tony Izuagbe Emoekpere, President, Association of Telecommunications Companies of Nigeria; and Douglas Njenga, Director of Regulatory Affairs and Special Projects, WIOCC Group. The session was moderated by Sade Dada, Public Policy Manager for Anglophone West Africa at Meta.

The discussions underscored the importance of regulatory frameworks, partnerships, and targeted reforms in driving digital infrastructure development across Nigeria and the African continent.


Kindly share this post
Continue Reading

Telecom

Trump’s Crypto-business: What Does it Portend for American People if he Wins the Election?

Published

on

Kindly share this post

Donald Trump is promising to make America the “crypto capital of the planet” if he returns to the White House.

While he runs for president, Trump has launched a new venture to trade cryptocurrencies – promoting them on the same social media accounts that he uses for his campaign.

His two eldest sons, Donald Jr. and Eric, are also posting about their new platform, called World Liberty Financial.

So, too, is his daughter-in-law, Lara Trump, who is married to Eric and also serves as co-chair of the Republican National Committee.

Trump has long melded his political and business interests, promoting his hotels and golf courses in the White House while selling sneakers, Bibles and shares in his social media company during his current campaign.

Now, Trump has launched a new moneymaking venture that could explode in value if he’s elected.

What’s more, presidential power could allow him to push through legislative and regulatory changes long sought by crypto advocates.

“Taking a pro-crypto stance is not necessarily troubling; the troubling aspect is doing it while starting a way to personally benefit from it,” said Jordan Libowitz, a spokesperson for the government watchdog group Citizens for Responsibility and Ethics in Washington.

“The success of this could be very tied to American economic policy,” Libowitz said.

Trump has changed his tune

Cryptocurrencies are forms of digital money that can be traded over the internet without relying on the global banking system.

They are commonly traded on exchanges, which are marketplaces that can be used to buy, sell and trade cryptocurrencies.

Exchanges often charge fees for withdrawals of Bitcoin and other currencies.

World Liberty Financial – linked to Trump – is expected to be a borrowing and lending service similar to recently hacked Dough Finance, an app built by four people listed as World Liberty Financial team members, according to crypto news site CoinDesk.

Many details about World Liberty Financial, including what stake Trump and his family members have in it, are still unknown.

After Lara Trump posted Tuesday on her X account about “our goal at World Liberty”, her husband, Eric Trump, posted online that Lara and his sister, Tiffany, had been hacked.

During his time in the White House, Trump said he was “not a fan” of cryptocurrency and tweeted in 2019: “Unregulated Crypto Assets can facilitate unlawful behaviour, including drug trade and other illegal activity.”

Trump has since, however, changed his tune and taken on a more favourable view of cryptocurrencies.

In May, he announced that his presidential campaign would begin accepting donations in cryptocurrency as part of an effort to build a “crypto army” leading up to Election Day.

The former president also attended a bitcoin conference in Nashville this year, where he promised to make the US the “crypto capital of the planet”.

Influence on monetary policy

If elected again, Trump has talked about exerting more control over monetary policy, suggesting he would press the Federal Reserve to set lower interest rates.

He is also promoting decentralised finance, or “DeFi,” which is a general term for using public blockchain space to disrupt the traditional finance world.

Trump has also talked about subsidising the use of Bitcoin mining in order to increase energy production and has vowed to block the creation of a Federal Reserve-administered Central Bank Digital Currency.

This is a digital form of central bank money that would be available to the public.

Appealing to the crypto voter base

Embracing cryptocurrency could be another way for the Trump campaign to reach younger men, including by engaging with conservative influencers.

Crypto also appeals to Trump allies who are concerned about government influence over global markets and worry generally about the reach of the so-called “deep state”.

Dustin Stockton, a pro-Trump activist turned crypto influencer, said he is supportive of the former president’s endeavours in the crypto space and the upcoming launch of World Liberty Financial.

“The Trump family’s engagement and involvement, and learning what it is that underlies crypto, I think is actually a really positive thing,” he said.

Stockton points to the Biden administration as anti-crypto, citing SEC head Gary Gensler’s pursuit of firms like Coinbase and Binance.

A conflict of interest?

While the White House issued an executive order on digital assets in 2022, no substantive laws have been passed by Congress or written into regulation by the White House.

Stockton said the lack of clarity of written rules by the Biden administration, as well as the SEC’s heavy-handed enforcement on crypto firms through a series of lawsuits, indicates that “there’s no clarity and there’s selective and arbitrary enforcement of regulations”.

“Frankly, I’d like to see all members of government get a better understanding of what this is,” he said.

J.W. Verret, a professor at George Mason University’s law school, said Trump would not be in violation of the law by launching a new project and promoting policies that would benefit it.

“I don’t see any problem with someone, anyone in government who owns assets or who starts a business – in fact, I think it’s hard for someone to regulate a particular type of business unless they work in that business,” he said.

 

Credit: Euronews except headline


Kindly share this post
Continue Reading

Trending