Telecom
Sophos Research Reveals that Attackers Are Using Log4Shell Vulnerability to Deliver Backdoors to Virtual Servers

Sophos, a global leader in next-generation cybersecurity, has released findings on how attackers are using the Log4Shell vulnerability to deliver backdoors and profiling scripts to unpatched VMware Horizon servers, paving the way for persistent access and future ransomware attacks. A new technical paper, “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers,” details the tools and techniques used to compromise the servers and deliver three different backdoors and four cryptominers. The backdoors are possibly delivered by Initial Access Brokers.
Log4Shell is a remote code execution vulnerability in the Java logging component, Apache Log4J, which is embedded in hundreds of software products. It was reported and patched in December 2021.
“Widely used applications such as VMware Horizon that are exposed to the internet and need to be manually updated, are particularly vulnerable to exploitation at scale,” said Sean Gallagher, senior security researcher at Sophos. “Sophos detections reveal waves of attacks targeting Horizon servers, starting in January, and delivering a range of backdoors and cryptominers to unpatched servers, as well as scripts to collect some device information. Sophos believes that some of the backdoors may be delivered by Initial Access Brokers looking to secure persistent remote access to a high value target that they can sell on to other attackers, such as ransomware operators.”
The multiple attack payloads Sophos detected using Log4Shell to target vulnerable Horizon servers include:
· Two legitimate remote monitoring and management tools, Atera agent and Splashtop Streamer, likely intended for malicious use as backdoors
· The malicious Sliver backdoor
· The cryptominers z0Miner, JavaX miner, Jin and Mimu
· Several PowerShell-based reverse shells that collect device and backup information
Sophos’ analysis revealed that Sliver is sometimes delivered together with Atera and PowerShell profiling scripts and is used to deliver the Jin and Mimu variants of the XMrig Monero miner botnet.
According to Sophos, the attackers are using several different approaches to infect targets. While some of the earlier attacks used Cobalt Strike to stage and execute the cryptominer payloads, the largest wave of attacks that began in mid-January 2022, executed the cryptominer installer script directly from the Apache Tomcat component of the VMware Horizon server. This wave of attacks is ongoing.
“Sophos’ findings suggest that multiple adversaries are implementing these attacks, so the most important protective step is to upgrade all devices and applications that include Log4J with the patched version of the software. This includes patched versions of VMware Horizon if organizations use the application in their network,” said Gallagher.
“Log4J is installed in hundreds of software products and many organizations may be unaware of the vulnerability lurking in within their infrastructure, particularly in commercial, open-source or custom software that doesn’t have regular security support. And while patching is vital, it won’t be enough if attackers have already been able to install a web shell or backdoor in the network. Defense in depth and acting upon any detection of miners and other anomalous activity is critical to avoid falling victim to such attacks.”
For further information read the article “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers” on Sophos News.
Sophos has closely monitored attack activity related to the Log4Shell vulnerability and has published a number of in depth technical and advisory reports, including Log4Shell Hell – Anatomy of an Exploit Outbreak, Log4Shell Response and Mitigation Recommendations, Inside the Code: How the Log4Shell Exploit Works, and Log4Shell: No Mass Abuse, But No Respite, What Happened?
Additional Resources
· Sophos endpoint products, such as Intercept X, protect users by detecting the actions and behaviors of attackers
. Further details on the evolving cyberthreat landscape can be found in the Sophos 2022 Threat Report
. Tactics, techniques, and procedures (TTPs) and more for different types of threats are available on SophosLabs Uncut, which provides Sophos’ latest threat intelligence
. Information on attacker behaviors, incident reports and advice for security operations professionals is available on Sophos News SecOps
. Learn more about Sophos’ Rapid Response Service that contains, neutralizes and investigates attacks 24/7
The four top tips for responding to a security incident from Sophos Rapid Response and the Managed Threat Response Team
Telecom
Emerging Technologies, Cybersecurity, Others Form Key Focus of NCA 2003 Review

The House of Representatives Committee on Communications has commenced process to review the Nigerian Communications Act 2003, with Colloquium in Lagos, theme: ” The Nigerian Communications Act 2003, 22 Years After: Reassessing the Nigerian Communications Act, Challenges, Opportunities, and Future Directions for a Digital Nigeria”.
Dr. Aminu Maida, executive vice chairman, Nigerian Communications Commission (NCC) in his opening remarks, said that the Nigerian Communications Act of 2003 represents a cornerstone of Nigeria’s telecommunications momentous evolution, and today, we are tasked with evaluating its impact, confronting its challenges, and charting a bold path toward a digitally inclusive and globally competitive Nigeria.
According to him, “when the Nigerian Communications Act was enacted over two decades ago, it heralded a new era for our nation’s telecommunications sector. By dismantling monopolistic barriers and establishing a transparent, independent regulatory framework, the Act empowered the Commission to midwife a sector that has become a bedrock of Nigeria’s economic and social progress.
“The explosion in telecommunications services, its availability and enablement of transformational changes in the Sector, are fruits of this bold legislative initiative by the vibrant Nigerian legislature.
“The numbers speak for themselves: mobile subscriptions have grown from less than 300 thousand in 2001 to over 150 million today. Internet penetration has surged, connecting millions to the digital economy, while the telecommunications sector’s contribution to Nigeria’s Gross Domestic Product has risen to approximately 13.94% as of the 3rd quarter of 2024. Beyond statistics, the Act has enabled transformative innovations, mobile banking, e-commerce, digital communications and digital education—that have redefined how Nigerians live, work, and interact”.
Dr. Maida added that these milestones are a testament to the vision of the Act’s framers, the resilience of industry players, and the trust of Nigerian consumers.
“They reflect the power of collaboration between the legislature, regulator, operators, and stakeholders in building a sector that has become a global model for telecommunications liberalization in emerging markets.
“The global telecommunications industry is undergoing a seismic shift, driven by disruptive technologies such as 5G networks, artificial intelligence, quantum computing, the Internet of Things, and blockchain. These advancements promise unprecedented opportunities but also pose complex challenges.
“In Nigeria, while urban centres enjoy robust connectivity, rural and underservedcommunities still grapple with limited access, highlighting the persistent digital divide.
Infrastructure deficits, including inadequate power supply and the high cost of right-of way approvals, are hindering network expansion. Cybersecurity threats loom larger as our reliance on digital platforms grows, with Nigeria recording a significant uptick in cyber-attacks targeting critical sectors.
“Moreover, the economics of the telecommunications industry are under strain. Operators face rising operational costs, exacerbated by inflation, currency volatility, and the need for substantial capital investment to deploy next-generation technologies.
“Consumers, while demanding faster, cheaper, and more reliable services, often face affordability constraints, particularly in low-income communities. These challenges underscore a critical truth: while the Nigerian Communications Act of 2003 was visionary for its time, the realities of 2025 require us to re-examine its provisions to ensure they remain fit for purpose.
“This Colloquium, therefore, is both timely and strategic. It offers a rare opportunity to take stock of the Act’s strengths, address its gaps, and reimagine its role in powering Nigeria’s digital future”.
Also speaking at the occasion, HON. Peter Ohiozojeh Akpatason, chairman, House of Representatives Committee on Communications, said that the colloquium aims to among others; – Review the impact of the Nigerian Communication Act 2003 on our telecommunications sector.
– Identify challenges and opportunities arising from technological advancements and changing market dynamics.
– Discuss future directions for a Digital Nigeria, leveraging insights from industry experts and stakeholders.
He stated that it will explore key areas, such as: – Regulatory frameworks and their impact on competition and innovation.
– Emerging technologies and their potential applications in Nigeria.
– Digital inclusion and access to telecommunications services.
– Cybersecurity and data protection in the digital age.
“This event will provide a platform for stakeholders to share experiences, insights, and recommendations, with a view to: – Identifying areas for improvement in the Act.
– Develop strategies for promoting digital growth and innovation.
– Foster collaboration among industry stakeholders.
“As such, we must, consider strategies to bridge this divide, including infrastructure development and affordable access initiatives.
“Also, the sector faces increasing cybersecurity threats, which require robust measures to protect citizens and businesses.
“Therefore, we have to consider strengthening our cybersecurity frameworks, enhancing incident response capabilities, and promoting international cooperation to combat cyber threats.
“The Act’s regulatory framework has to be strengthened to promote innovation, competition, and investment. We therefore have to consider revising the Act to address emerging issues, such as 5G, artificial intelligence, and blockchain, and to ensure that our regulatory framework is flexible and adaptable to changing market conditions.
“We must consider strategies to promote digital entrepreneurship, innovation, and investment, including tax incentives, funding opportunities, and skills development programs. The new Act has to encourage measures for promoting innovation, including research and development initiatives, innovation hubs, and partnerships with international organizations,” he stated.
Telecom
MTN’s Talent Hunt Returns: A Stage for Nigeria’s Next Creative Stars

MTN Nigeria is set to reignite the dreams of creatives with the launch of its Best of the Streets talent competition for the 2025 edition. This initiative aims to discover and nurture Nigeria’s next generation of creative talent.

L-R: Mobolaji Ogunlende, Honourable Commissioner for Youth and Social Development, Lagos State; Dapo “D’Banj” Oyebanjo, Singer and Founder of C.R.E.A.M platform; Dandizzy, Rapper and Singer; A’isha Umar Mumuni, Chief Digital Officer, MTN Nigeria and Obi Asika, Nigerian music executive and Director-General, National Council for Arts and Culture, NCAC., at the Best of the Streets press briefing on Wednesday, April 23 held at the MTN Rooftop Events Centre, Ikoyi, Lagos.
Slated to commence on May 1, 2025, the competition offers unsigned artists a transformative platform to compete for life-changing rewards, including a grand money prize, professional music video production, and an EP recording deal.
At the press briefing on Wednesday April 23, A’isha Umar Mumuni, Chief Digital Officer of MTN Nigeria, emphasized the initiative’s impact.
“The premise of Best of the Streets is that there’s talent in every street in Nigeria, whether it’s acting, singing, dancing, comedy or other performance arts.
“Best of the Streets seeks to bring out that talent, to show Nigerian youths that there are opportunities everywhere; and at MTN, we are very proud to take part in creating these opportunities.”
Best of the Streets is in collaboration with C.R.E.A.M (Creative Reality Entertainment Art and Music), founded by Nigerian rapper, Dapo “D’Banj” Oyebanjo is a platform which provides talent management, publishing, and funding support to grassroots artists.
“The C.R.E.A.M platform provides solutions and services for talents, creatives and entrepreneurs, by granting them convenient access to showcase their skills and monetize their content. With our newly launched distribution arm, we are not just discovering talent, we are giving them the tools to take them global,” D’banj explained.
Chris Anokute, Nigerian-born LA-based American Executive, known for discovering global superstar Katy Perry, commended the efforts of this initiative in pushing local Nigerian music to the international stage. “Best of the Streets is the greatest artiste discovery platform I’ve seen come out of Africa.
“The music industry is, as of last year, a 30-billion-dollar industry. Afrobeats is the fastest growing genre in the entire world, over 1.1 million hours of music streamed out of Nigeria on Spotify this year alone.”
On the importance of empowering the creative capacities of the youth, Mobolaji Ogunlende, Honourable Commissioner for Youth and Social Development in Lagos State. “As a government, we have vowed not to leave anybody behind in Lagos state, irrespective of their background.
“There are about 30 million citizens in Lagos, and 60% of the youth. Not every youth will be able to go to school, but we still have the creatives, digital, fashion icons, among others. This platform is an avenue to encourage them.”
To participate, aspiring contestants can dial *463# on their MTN line, upload original content via the official @creamplatform, and mobilise votes from the public. Over 2584 creatives are set to be showcased and rewarded this year. Entries into this competition continue up until December, with daily, weekly and monthly winners, with a final winner who will secure the grand prize.
The Best of the Streets initiative reinforces MTN’s commitment to youth empowerment and creative innovation, aligning with Nigeria’s growing entertainment industry demands.
Telecom
Meta Challenges Nigerian Tribunal’s $220M Fine over Data Breaches

Meta has announced its intention to appeal the decision of the Competition and Consumer Protection Tribunal (CCPT), which upheld a $220 million fine imposed by the Federal Competition and Consumer Protection Commission (FCCPC) over its data practices.
The penalty follows a 38-month investigation conducted by the FCCPC, in collaboration with the Nigeria Data Protection Commission (NDPC), which ran from 2021 to December 2023.
The investigation found evidence of unauthorised data sharing, insufficient user consent mechanisms, and discriminatory practices that treated Nigerian consumers differently from those in other regions.
In July 2024, the FCCPC imposed the $220 million fine on Meta and WhatsApp, citing violations of Nigeria’s data protection and consumer rights laws. Additionally, the ruling mandated corrective actions to ensure that Meta’s business practices comply with Nigerian regulations.
In a decision delivered on Friday, April 25, the tribunal upheld the fine, reaffirming the FCCPC’s authority and investigative processes. The tribunal also ordered Meta to pay an additional $35,000 to cover the costs incurred during the investigation.
However, Meta expressed disagreement with the tribunal’s ruling, stating in a statement on Saturday, April 26, that it would urgently seek to appeal the decision and apply for a stay of execution.
“We are urgently applying to stay the order and appeal today’s decision to avoid any impact to users,” WhatsApp said.
The company also contested the tribunal’s findings, claiming that the ruling misrepresented how WhatsApp operates and contained inaccuracies regarding its data practices.
- Telecom1 day ago
MTN’s Talent Hunt Returns: A Stage for Nigeria’s Next Creative Stars
- Telecom2 days ago
Meta Challenges Nigerian Tribunal’s $220M Fine over Data Breaches
- Broadcasting2 days ago
AI and Cybersecurity: Balancing Innovation with Caution
- News1 day ago
NBC Loses Appeal as Tribunal Upholds ₦190m Fine for Misleading Packaging
- E-Financial2 days ago
Supreme Court Sets Aside N22 Trillion Judgement against Union Bank
- E-Business2 days ago
FG Warns Nigerians Against Growing Threat of Cyber Slavery in West Africa
- News2 days ago
EFCC Bans Cash above $10,000 from Leaving Nigeria without Declaration
- E-Financial1 day ago
CBN Urges Banks to Source FX for PAPSS Settlement Through NFEM