Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

Telecom

Sophos Research Reveals that Attackers Are Using Log4Shell Vulnerability to Deliver Backdoors to Virtual Servers

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, has released findings on how attackers are using the Log4Shell vulnerability to deliver backdoors and profiling scripts to unpatched VMware Horizon servers, paving the way for persistent access and future ransomware attacks. A new technical paper, “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers,” details the tools and techniques used to compromise the servers and deliver three different backdoors and four cryptominers. The backdoors are possibly delivered by Initial Access Brokers.

Log4Shell is a remote code execution vulnerability in the Java logging component, Apache Log4J, which is embedded in hundreds of software products. It was reported and patched in December 2021.

“Widely used applications such as VMware Horizon that are exposed to the internet and need to be manually updated, are particularly vulnerable to exploitation at scale,” said Sean Gallagher, senior security researcher at Sophos. “Sophos detections reveal waves of attacks targeting Horizon servers, starting in January, and delivering a range of backdoors and cryptominers to unpatched servers, as well as scripts to collect some device information. Sophos believes that some of the backdoors may be delivered by Initial Access Brokers looking to secure persistent remote access to a high value target that they can sell on to other attackers, such as ransomware operators.”

The multiple attack payloads Sophos detected using Log4Shell to target vulnerable Horizon servers include:

·         Two legitimate remote monitoring and management tools, Atera agent and Splashtop Streamer, likely intended for malicious use as backdoors

·         The malicious Sliver backdoor

·         The cryptominers z0Miner, JavaX miner, Jin and Mimu

·         Several PowerShell-based reverse shells that collect device and backup information

Sophos’ analysis revealed that Sliver is sometimes delivered together with Atera and PowerShell profiling scripts and is used to deliver the Jin and Mimu variants of the XMrig Monero miner botnet.

According to Sophos, the attackers are using several different approaches to infect targets. While some of the earlier attacks used Cobalt Strike to stage and execute the cryptominer payloads, the largest wave of attacks that began in mid-January 2022, executed the cryptominer installer script directly from the Apache Tomcat component of the VMware Horizon server. This wave of attacks is ongoing.

“Sophos’ findings suggest that multiple adversaries are implementing these attacks, so the most important protective step is to upgrade all devices and applications that include Log4J with the patched version of the software. This includes patched versions of VMware Horizon if organizations use the application in their network,” said Gallagher.

“Log4J is installed in hundreds of software products and many organizations may be unaware of the vulnerability lurking in within their infrastructure, particularly in commercial, open-source or custom software that doesn’t have regular security support. And while patching is vital, it won’t be enough if attackers have already been able to install a web shell or backdoor in the network. Defense in depth and acting upon any detection of miners and other anomalous activity is critical to avoid falling victim to such attacks.”

For further information read the article “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers” on Sophos News.

Sophos has closely monitored attack activity related to the Log4Shell vulnerability and has published a number of in depth technical and advisory reports, including  Log4Shell Hell – Anatomy of an Exploit Outbreak, Log4Shell Response and Mitigation Recommendations, Inside the Code: How the Log4Shell Exploit Works, and Log4Shell: No Mass Abuse, But No Respite, What Happened?

Additional Resources

·  Sophos endpoint products, such as Intercept X, protect users by detecting the actions and behaviors of attackers

. Further details on the evolving cyberthreat landscape can be found in the Sophos 2022 Threat Report

. Tactics, techniques, and procedures (TTPs) and more for different types of threats are available on SophosLabs Uncut, which provides Sophos’ latest threat intelligence

. Information on attacker behaviors, incident reports and advice for security operations professionals is available on Sophos News SecOps

. Learn more about Sophos’ Rapid Response Service that contains, neutralizes and investigates attacks 24/7
The four top tips for responding to a security incident  from Sophos Rapid Response and the Managed Threat Response Team

 

 

 
 
 

Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Emerging Technologies, Cybersecurity, Others Form Key Focus of NCA 2003 Review

Published

on

Kindly share this post

The House of Representatives Committee on Communications has commenced process to review the Nigerian Communications Act 2003, with Colloquium in Lagos, theme: ” The Nigerian Communications Act 2003, 22 Years After: Reassessing the Nigerian Communications Act, Challenges, Opportunities, and Future Directions for a Digital Nigeria”.

Dr. Aminu Maida, executive vice chairman, Nigerian Communications Commission (NCC) in his opening remarks, said that the Nigerian Communications Act of 2003 represents a cornerstone of Nigeria’s telecommunications momentous evolution, and today, we are tasked with evaluating its impact, confronting its challenges, and charting a bold path toward a digitally inclusive and globally competitive Nigeria.

According to him, “when the Nigerian Communications Act was enacted over two decades ago, it heralded a new era for our nation’s telecommunications sector. By dismantling monopolistic barriers and establishing a transparent, independent regulatory framework, the Act empowered the Commission to midwife a sector that has become a bedrock of Nigeria’s economic and social progress.

“The explosion in telecommunications services, its availability and enablement of transformational changes in the Sector, are fruits of this bold legislative initiative by the vibrant Nigerian legislature.

“The numbers speak for themselves: mobile subscriptions have grown from less than 300 thousand in 2001 to over 150 million today. Internet penetration has surged, connecting millions to the digital economy, while the telecommunications sector’s contribution to Nigeria’s Gross Domestic Product has risen to approximately 13.94% as of the 3rd quarter of 2024. Beyond statistics, the Act has enabled transformative innovations, mobile banking, e-commerce, digital communications and digital education—that have redefined how Nigerians live, work, and interact”.

Dr. Maida added that these milestones are a testament to the vision of the Act’s framers, the resilience of industry players, and the trust of Nigerian consumers.

“They reflect the power of collaboration between the legislature, regulator, operators, and stakeholders in building a sector that has become a global model for telecommunications liberalization in emerging markets.

“The global telecommunications industry is undergoing a seismic shift, driven by disruptive technologies such as 5G networks, artificial intelligence, quantum computing, the Internet of Things, and blockchain. These advancements promise unprecedented opportunities but also pose complex challenges.

“In Nigeria, while urban centres enjoy robust connectivity, rural and underservedcommunities still grapple with limited access, highlighting the persistent digital divide.

Infrastructure deficits, including inadequate power supply and the high cost of right-of way approvals, are hindering network expansion. Cybersecurity threats loom larger as our reliance on digital platforms grows, with Nigeria recording a significant uptick in cyber-attacks targeting critical sectors.

“Moreover, the economics of the telecommunications industry are under strain. Operators face rising operational costs, exacerbated by inflation, currency volatility, and the need for substantial capital investment to deploy next-generation technologies.

“Consumers, while demanding faster, cheaper, and more reliable services, often face affordability constraints, particularly in low-income communities. These challenges underscore a critical truth: while the Nigerian Communications Act of 2003 was visionary for its time, the realities of 2025 require us to re-examine its provisions to ensure they remain fit for purpose.

“This Colloquium, therefore, is both timely and strategic. It offers a rare opportunity to take stock of the Act’s strengths, address its gaps, and reimagine its role in powering Nigeria’s digital future”.

Also speaking at the occasion, HON. Peter Ohiozojeh Akpatason, chairman, House of Representatives Committee on Communications, said that the colloquium aims to among others; – Review the impact of the Nigerian Communication Act 2003 on our telecommunications sector.

– Identify challenges and opportunities arising from technological advancements and changing market dynamics.

– Discuss future directions for a Digital Nigeria, leveraging insights from industry experts and stakeholders.

He stated that it will explore key areas, such as: – Regulatory frameworks and their impact on competition and innovation.

– Emerging technologies and their potential applications in Nigeria.

– Digital inclusion and access to telecommunications services.

– Cybersecurity and data protection in the digital age.

“This event will provide a platform for stakeholders to share experiences, insights, and recommendations, with a view to: – Identifying areas for improvement in the Act.

– Develop strategies for promoting digital growth and innovation.

– Foster collaboration among industry stakeholders.

“As such, we must, consider strategies to bridge this divide, including infrastructure development and affordable access initiatives.

“Also, the sector faces increasing cybersecurity threats, which require robust measures to protect citizens and businesses.

“Therefore, we have to consider strengthening our cybersecurity frameworks, enhancing incident response capabilities, and promoting international cooperation to combat cyber threats.

“The Act’s regulatory framework has to be strengthened to promote innovation, competition, and investment. We therefore have to consider revising the Act to address emerging issues, such as 5G, artificial intelligence, and blockchain, and to ensure that our regulatory framework is flexible and adaptable to changing market conditions.

“We must consider strategies to promote digital entrepreneurship, innovation, and investment, including tax incentives, funding opportunities, and skills development programs. The new Act has to encourage measures for promoting innovation, including research and development initiatives, innovation hubs, and partnerships with international organizations,” he stated.


Kindly share this post
Continue Reading

Telecom

MTN’s Talent Hunt Returns: A Stage for Nigeria’s Next Creative Stars

Published

on

L-R: Mobolaji Ogunlende, Honourable Commissioner for Youth and Social Development, Lagos State; Dapo “D’Banj” Oyebanjo, Singer and Founder of C.R.E.A.M platform; Dandizzy, Rapper and Singer; A’isha Umar Mumuni, Chief Digital Officer, MTN Nigeria and Obi Asika, Nigerian music executive and Director-General, National Council for Arts and Culture, NCAC., at the Best of the Streets press briefing on Wednesday, April 23 held at the MTN Rooftop Events Centre, Ikoyi, Lagos.
Kindly share this post

MTN Nigeria is set to reignite the dreams of creatives with the launch of its Best of the Streets talent competition for the 2025 edition. This initiative aims to discover and nurture Nigeria’s next generation of creative talent.

L-R: Mobolaji Ogunlende, Honourable Commissioner for Youth and Social Development, Lagos State; Dapo “D’Banj” Oyebanjo, Singer and Founder of C.R.E.A.M platform; Dandizzy, Rapper and Singer; A’isha Umar Mumuni, Chief Digital Officer, MTN Nigeria and Obi Asika, Nigerian music executive and Director-General, National Council for Arts and Culture, NCAC., at the Best of the Streets press briefing on Wednesday, April 23 held at the MTN Rooftop Events Centre, Ikoyi, Lagos.

Slated to commence on May 1, 2025, the competition offers unsigned artists a transformative platform to compete for life-changing rewards, including a grand money prize, professional music video production, and an EP recording deal.

At the press briefing on Wednesday April 23, A’isha Umar Mumuni, Chief Digital Officer of MTN Nigeria, emphasized the initiative’s impact.

“The premise of Best of the Streets is that there’s talent in every street in Nigeria, whether it’s acting, singing, dancing, comedy or other performance arts.

“Best of the Streets seeks to bring out that talent, to show Nigerian youths that there are opportunities everywhere; and at MTN, we are very proud to take part in creating these opportunities.”

Best of the Streets is in collaboration with C.R.E.A.M (Creative Reality Entertainment Art and Music), founded by Nigerian rapper, Dapo “D’Banj” Oyebanjo is a platform which provides talent management, publishing, and funding support to grassroots artists.

“The C.R.E.A.M platform provides solutions and services for talents, creatives and entrepreneurs, by granting them convenient access to showcase their skills and monetize their content. With our newly launched distribution arm, we are not just discovering talent, we are giving them the tools to take them global,” D’banj explained.

Chris Anokute, Nigerian-born LA-based American Executive, known for discovering global superstar Katy Perry, commended the efforts of this initiative in pushing local Nigerian music to the international stage. “Best of the Streets is the greatest artiste discovery platform I’ve seen come out of Africa.

“The music industry is, as of last year, a 30-billion-dollar industry. Afrobeats is the fastest growing genre in the entire world, over 1.1 million hours of music streamed out of Nigeria on Spotify this year alone.”

On the importance of empowering the creative capacities of the youth, Mobolaji Ogunlende, Honourable Commissioner for Youth and Social Development in Lagos State. “As a government, we have vowed not to leave anybody behind in Lagos state, irrespective of their background.

“There are about 30 million citizens in Lagos, and 60% of the youth. Not every youth will be able to go to school, but we still have the creatives, digital, fashion icons, among others. This platform is an avenue to encourage them.”

To participate, aspiring contestants can dial *463# on their MTN line, upload original content via the official @creamplatform, and mobilise votes from the public. Over 2584 creatives are set to be showcased and rewarded this year. Entries into this competition continue up until December, with daily, weekly and monthly winners, with a final winner who will secure the grand prize.

The Best of the Streets initiative reinforces MTN’s commitment to youth empowerment and creative innovation, aligning with Nigeria’s growing entertainment industry demands.


Kindly share this post
Continue Reading

Telecom

Meta Challenges Nigerian Tribunal’s $220M Fine over Data Breaches

Published

on

Kindly share this post

Meta has announced its intention to appeal the decision of the Competition and Consumer Protection Tribunal (CCPT), which upheld a $220 million fine imposed by the Federal Competition and Consumer Protection Commission (FCCPC) over its data practices.

The penalty follows a 38-month investigation conducted by the FCCPC, in collaboration with the Nigeria Data Protection Commission (NDPC), which ran from 2021 to December 2023.

The investigation found evidence of unauthorised data sharing, insufficient user consent mechanisms, and discriminatory practices that treated Nigerian consumers differently from those in other regions.

In July 2024, the FCCPC imposed the $220 million fine on Meta and WhatsApp, citing violations of Nigeria’s data protection and consumer rights laws. Additionally, the ruling mandated corrective actions to ensure that Meta’s business practices comply with Nigerian regulations.

In a decision delivered on Friday, April 25, the tribunal upheld the fine, reaffirming the FCCPC’s authority and investigative processes. The tribunal also ordered Meta to pay an additional $35,000 to cover the costs incurred during the investigation.

However, Meta expressed disagreement with the tribunal’s ruling, stating in a statement on Saturday, April 26, that it would urgently seek to appeal the decision and apply for a stay of execution.

“We are urgently applying to stay the order and appeal today’s decision to avoid any impact to users,” WhatsApp said.

The company also contested the tribunal’s findings, claiming that the ruling misrepresented how WhatsApp operates and contained inaccuracies regarding its data practices.


Kindly share this post
Continue Reading

Trending