News
Report Shows Small Businesses in Nigeria Facing 89% Increase in Remote Desktop Protocol Attacks in 2022
When a small business owner is faced with the responsibilities of production economics, financial reports and marketing all at the same time, cybersecurity can often appear complicated and, at times, unnecessary. However, this disregard for IT security is being exploited by cybercriminals.
Kaspersky researchers assessed the dynamics of attacks on small and medium-sized businesses between January and April 2022 and the same period in 2021, to identify which threats pose an increasing danger to entrepreneurs.
In 2022, the number of Trojan-PSW (Password Stealing Ware) detections in Nigeria more than doubled when compared to the same period in 2021 – 2654 detections in 2022 compared to 1076 in 2021. Trojan-PSW is a malware that steals passwords, along with other account information, which then allows attackers to gain access to the corporate network and steal sensitive information.
Another popular attack tool used on small businesses is Internet attacks, specifically, web pages with redirects to exploits, sites containing exploits and other malicious programs, botnet C&C centers, etc.
While the number of these attacks decreased in the first four months of 2022 in Nigeria (56 836 infections in 2022 compared to 99 146 infections in 2021), Internet attacks are still a concern and need to be protected against.
With the shift towards remote working, many companies have introduced the Remote Desktop Protocol (RDP), a technology that enables computers on the same corporate network to be linked together and accessed remotely, even when the employees are at home.
The number of attacks on RDP has increased significantly in Nigeria, by 89%. In the first four months of 2021, there were 161 000 RDP attacks detected and blocked by Kaspersky in the country. For the same period in 2022 the number has risen to 303 500 attacks.
Having a special security solution enables attack visualisation and provides IT administrators with a convenient tool for incident analysis. The faster they can analyse where and how a leak occurred, the better they will be able to solve any negative consequences.
The new edition of Kaspersky Endpoint Security Cloud, dubbed Kaspersky Endpoint Security Cloud Pro, contains advanced new capabilities, including automated response options and an extended set of security controls in a single solution.
The Pro version also includes built-in training for IT workers seeking to boost their cybersecurity skills and make the most out of their specialised security products.
Even small businesses with limited IT resources still need to protect all their working devices, including computers and mobile phones, from cyberthreats.
The updated Kaspersky Small Office Security is a key tool for startups, small online-stores and local businesses to keep all of their work devices protected, safely transfer any valuable business-related files and avoid falling victim to ransomware.
“With the shift to remote working and the introduction of numerous advanced technologies in the daily operations of even small companies, security measures need to evolve to support these sophisticated setups.
“Cybercriminals are already way ahead of the curve, so much so that virtually every organisation will experience a breach attempt at some point. For small companies today, it’s not a matter of whether a cybersecurity incident will happen but when.
“Having trained staff and an educated IT-specialist is no longer a luxury but a must-have part of your business development,” comments Denis Parinov, security researcher at Kaspersky.
To protect your business, Kaspersky recommends:
– Providing your staff with basic cybersecurity hygiene training (https://bit.ly/3N2SdxR) as many targeted attacks start with phishing or other social engineering techniques.
– Using a protection solution for endpoints and mail servers with anti-phishing capabilities to decrease the chance of infection through phishing emails.
– Taking key data protection measures. Always safeguard corporate data and devices, including by using password protection, encrypting work devices and ensuring data is backed up.
– Keeping work devices physically safe – do not leave them unattended in public, always lock them and use strong passwords and encryption software.
Presidents John Dramani Mahama of Ghana and Bola Ahmed Tinubu of Nigeria have celebrated the Chairman of Globacom, Dr. Mike Adenuga Jr., on the occasion of his 72nd birthday.
In congratulatory messages, both leaders praised Dr. Adenuga’s outstanding contributions to the economic development and growth of both Ghana and Nigeria. They commended his remarkable entrepreneurial spirit, resilience, and commitment to excellence.
President Mahama described Dr. Adenuga’s life as “a shining example of vision, resilience, and extraordinary accomplishment.” He noted that through his entrepreneurial endeavors, Dr. Adenuga has not only built enduring businesses but also contributed significantly to the socio-economic advancement of the African continent.
He noted that Dr. Adenuga’s leadership and philanthropic endeavour remain a beacon of inspiration for generations across Africa.
Also President Tinubu stated that Dr. Adenuga’s humility and diligence have enabled him to succeed in various sectors, including banking, telecommunications, oil, and gas. He praised Dr. Adenuga’s innovative approach to business, citing Globacom’s pioneering per-second billing, which expanded telephony and digital access to millions of Nigerians.
“In addition, Conoil has proven that an indigenous firm can compete with international oil companies, fostering energy independence and security for our country.” He added.
President Tinubu who expressed the gratitude of Nigerians to Dr. Adenuga for his immense contributions to the country’s progress and prosperity, also commended him for extending his investments to other African countries and Europe, “a bold effort which earned you well-deserved honours as Commander of the Legion of Honour (France) and Ghana’s Companion of the Star of Ghana”.
Most online services and apps require the user to create a password. Chances are many of those passwords are not being used daily and due to this overabundance, there’s a high probability that many of the passwords are being reused.
Poor password management is compounded by a reliance on common combinations of names, dictionary words and numerals. Not only are these passwords relatively easy to decipher, but if a cybercriminal gains access to a password on one site, that could result in access to a plethora of other sites.
People are urged to create unique, random passwords to counter the vulnerability posed by using the same password multiple times. However, password creation and management can be an arduous task.
To tackle the burden of password creation and management, people might be tempted to use large language models (LLMs) like ChatGPT, Llama or DeepSeek to generate their passwords.
The appeal is clear. Rather than struggling to come up with a strong password, users can simply ask AI, “Generate a secure password” and get an instant result.
AI produces strings that look random, which helps avoid the human tendency to create predictable, dictionary-based passwords. But appearances can be deceptive, AI-generated passwords may not be as secure as they appear.
Alexey Antonov, Data Science Team Lead at Kaspersky, tested this by generating 1,000 passwords using some of the more prominent and trusted LLMs including ChatGPT (from OpenAI), Llama (model from Meta group), DeepSeek (newcomer from China).
“All of the models are aware that a good password consists of at least 12 characters, including uppercase and lowercase letters, numbers and symbols. They report this when generating passwords,” says Antonov.
“In practice, though, the algorithms often neglected to insert a special character or digits into the password: 26% of passwords for ChatGPT, 32% for Llama and 29% for DeepSeek. While DeepSeek and Llama sometimes generated passwords shorter than 12 characters.”
In 2024, Alexey Antonov developed a machine learning algorithm to test password strength and found that almost 60% of passwords can be cracked in under an hour using modern GPUs or cloud-based cracking tools.
When applied to AI-generated passwords, the results were alarming, they were far less secure than they appeared: 88% of DeepSeek and 87% of Llama generated passwords were not strong enough to withstand attack from sophisticated cyber criminals. While ChatGPT did a little better with 33% of passwords not strong enough to pass the Kaspersky test.
“The problem is LLMs don’t create true randomness. Instead, they mimic patterns from existing data, making their outputs predictable to attackers who understand how these models work,” notes Antonov.
National Bureau of Statistics (NBS) has introduced a crowd-sourcing initiative aimed at providing more accurate statistical information and data to policymakers and the general public.
According to a statement issued by Folorunso Alesanmi, head of Public Relations, the initiative, which commenced several months ago, involves compiling daily price data from a wide range of sources.
These include open markets, supermarkets, neighbourhood shops, bulk and discount stores, street outlets, and large retail shops.
Data collection has been conducted across all 36 States, the Federal Capital Territory (FCT), and every senatorial district.
However, the Bureau clarified that price data gathered through crowd-sourcing differs from the data used in computing the Consumer Price Index (CPI).
While CPI data is collected at specific, pre-determined outlets during the second and third weeks of each month, crowd-sourced price data is gathered randomly from different respondents daily.
By leveraging the power of crowd-sourcing, the Bureau has been able to gather a vast amount of data that offers a more nuanced picture of price trends in the economy.
“We are thrilled to release our first price data compiled through crowd-sourcing. This initiative represents a major step forward in our efforts to harness the power of technology and innovation to improve the quality and timeliness of our statistical data,” said Prince Semiu Adeyemi Adeniran, Statistician-General of the Federation and NBS CEO.
The newly released data offers insights into the prices of essential food items commonly consumed by Nigerians, such as local rice, white beans, white maize, garri, yam, and more. It provides a daily snapshot of food costs.
The NBS plans to update this data on a daily basis, offering entrepreneurs, policymakers, and researchers a valuable tool for monitoring price fluctuations and making informed decisions.
The data is accessible to the public through a dedicated dashboard, where users can view, analyze, and download it in real-time—enhancing transparency and accessibility.
“To this end, the agency has implemented a range of quality control measures, including data validation and verification processes, to ensure that the data is reliable and trustworthy,” the statement added.
The release of this crowd-sourced price data underscores the NBS’s commitment to innovation and collaboration.
By working with citizens and embracing technology, the Bureau aims to provide more timely and accurate statistics to drive economic growth and development
Court Affirms ARCON’s Power to Regulate Ads on Social Media, Others
Fidelity Bank’s Gross Earnings Hit N315Bn
SEC Uncovers Tofro, another Suspected Ponzi Scheme
Zoho Suspends $700m Chipmaking Plan
Telecoms Services Resume in Kogi State as Telcos, Govt Resolve Dispute
E-Financial1 day agoCBN Slams ₦250m Fine on Paystack Over Zap Wallet Operations
E-Business2 days agoCAC to Prosecute Business Owners Operating Without Registration
General News1 day agoNITDA Inaugurates Start-up Consultative Forum
Telecom2 days agoEmerging Technologies, Cybersecurity, Others Form Key Focus of NCA 2003 Review
E-Financial2 days agoPanic as Hackers Allegedly Steal N9.3Bn Customers’ Fund from Union Bank
General News2 days agoUK’s Manufacturing Africa and TLG Capital Join Forces to Boost Nigerian Manufacturing
Telecom2 days agoMTN Nigeria Reports N1 Trillion Revenue
Telecom1 day agoGBB Reaffirms Commitment to Driving Public Sector Innovation @ the 5th Public Service Innovation Competition Awards