Telecom
Sophos Detects How Cyberattackers Are Exploiting Apache Log4Shell Vulnerability to Exploit Unpatched Systems
Following the reporting of the Apache Log4Shell vulnerability, Sophos has provided new threat intelligence on how cyberattackers are already exploiting or attempting to exploit unpatched systems.
The threat intelligence as detailed in the SophosLabs Uncut report, Log4Shell Hell: Anatomy of an Exploit Outbreak, shows that Sophos is seeing a rapid uptick in attacks exploiting or attempting to exploit this vulnerability, with hundreds of thousands of attempts detected so far.
The report also indicated that Cryptomining botnets are among the earliest “attack” adopters; botnets focus on Linux server platforms, which are particularly exposed to this vulnerability.
Sophos has also seen attempts to extract information from services, including Amazon Web Services keys and other private data.
The company said it observed that attempts to exploit network services start by probing for different types.
Around 90 percent of the probes Sophos detected were focused on the Lightweight Directory Access Protocol (LDAP.) A smaller number of probes targeted Java’s Remote Interface (RMI,) but Sophos researchers noted that there seem to be a larger variety of unique RMI-related attempts
Sophos said it expects adversaries to intensify and diversify their attack methods and motivations in the coming days and weeks, including the possibility of leveraging for ransomware.
According to Sean Gallagher, senior threat researcher at Sophos, in the SophosLabs Uncut report issued on Dec. 9, Sophos has detected hundreds of thousands of attempts to remotely execute code using the Log4Shell vulnerability.
“Initially, these were Proof-of-Concept (PoC) exploit tests by security researchers and potential attackers, among others, as well as many online scans for the vulnerability. This was quickly followed by attempts to install coin miners, including the Kinsing miner botnet.
“The most recent intelligence suggest attackers are trying to exploit the vulnerability to expose the keys used by Amazon Web Service accounts.
“There are also signs of attackers trying to exploit the vulnerability to install remote access tools in victim networks, possibly Cobalt Strike, a key tool in many ransomware attacks.
“The Log4Shell vulnerability presents a different kind of challenge for defenders. Many software vulnerabilities are limited to a specific product or platform, such as the ProxyLogon and ProxyShell vulnerabilities in Microsoft Exchange. Once defenders know what software is vulnerable, they can check for and patch it.
“However, Log4Shell is a library that is used by many products. It can therefore be present in the darkest corners of an organization’s infrastructure, for example any software developed in-house. Finding all systems that are vulnerable because of Log4Shell should be a priority for IT security.
“Sophos expects the speed with which attackers are harnessing and using the vulnerability will only intensify and diversify over the coming days and weeks. Once an attacker has secured access to a network, then any infection can follow.
“Therefore, alongside the software update already released by Apache in Log4j 2.15.0, IT security teams need to do a thorough review of activity on the network to spot and remove any traces of intruders, even if it just looks like nuisance commodity malware”, Gallagher added,
New and additional information on how Log4Shell works is also available in the Sophos Naked Security article, Log4Shell Explained – How it Works, Why You Need to Know, and How to Fix It, by Paul Ducklin.
According to Paul Ducklin, principal research scientist at Sophos: “Technologies including IPS, WAF and intelligent network filtering are all helping to bring this global vulnerability under control.
“But the staggering number of different ways that the Log4Shell ‘trigger text’ can be encoded, the huge number of different places in your network traffic that these strings can appear, and the wide variety of servers and services that could be affected are collectively conspiring against all of us.
“The very best response is perfectly clear: patch or mitigate your own systems right now. Our article provides practical advice that explains how the vulnerability works, why it works, what it can do, and how to fix it.”
Sophos threat intelligence experts are continuing to monitor Log4Shell.
Broadcasting
Global Telco, Pay-TV Spend Up 2.4 Percent in 2024- IDC
Global spending on telecommunications and pay-TV services will reach $1,544 billion in 2024, representing an increase of 2.4 per cent year-on-year, according to the Worldwide Semiannual Telecom Services Tracker published by International Data Corporation (IDC).
The latest prediction is 1.0 percentage points higher than the version published in the May edition of IDC’s Tracker.
If that forecast becomes reality, the above-mentioned annual growth rate would be the highest recorded in the last twelve years.
The above-average positive revisions of the forecast apply to the regions of the Middle East and Africa (MEA) and Latin America.
This is mainly a consequence of hyperinflation in countries such as Turkey, Egypt, Nigeria and Argentina, in which it has become usual to see average revenue per user (ARPU) figures growing by more than 50 per cent on a yearly basis.
Conversely, the outlook for the markets of Europe and Asia Pacific has been slightly downgraded, mainly due to the deteriorating economic climate in key countries such as Germany and China.
The expectations for the North America have not changed much between the two tracker updates, apart from a minor positive revision in Canada’s market.
The analysis by type of telecom services confirms that the well-known trends persist despite the changes in top-line forecasts.
Mobile remains the largest segment, driven by the growth in mobile data usage and M2M applications, which is offsetting declines in spending on mobile voice and messaging services.
The fixed data services segment will continue growing, driven by the need for higher bandwidth. Spending on fixed voice services will be dropping over the forecast period as the rapidly declining TDM voice revenues are not being offset by the increase in IP voice.
The traditional pay-TV market will decline slightly over the forecast period due to the growing popularity of VoD and OTT, but these services will remain an important part of the multi-play offerings of telecom providers across the world.
The global connectivity services market is expected to maintain a positive outlook over the next five years, with a compound annual growth rate (CAGR) of 2 per cent.
The overall economic climate is expected to improve as the key central banks in the US and Europe will continue decreasing their reference interest rates.
Inflation will continue declining, which will have a positive impact on the purchasing power of the population.
The negative elements of the forecasting puzzle will include saturation of the telecom services markets in major countries, as well as the unstable political situation in some regions, particularly Eastern Europe and the Middle East.
Additional risks are related to the potential shifts of economic policies related to the new US government that might lead to the rebirth of protectionism.
IDC’s latest forecast is more optimistic than its previous one. However, even in this scenario, the growth of the connectivity services market is expected to remain sluggish, prompting operators to seek additional revenue streams.
“There are quite a few promising areas in which operators could expect solid returns. These include fibre optics, IoT, UCaaS, SD-WAN, digital services, LEO satellite services, cloud services, IT security services, network APIs and network sharing, and 5G-advanced,” commented Kresimir Alic, research director with Worldwide Telecom Services at IDC.
“These companies should also increase the pace of digitalisation and software-isation of their business processes, create new go-to-market strategies based on data and intelligence, and deploy innovative business models based on telco-as-a-platform and co-creation within ecosystems.
“Essentially, telecom operators should aim for a complete transformation — from traditional commodity service providers to modern, full-stack technology suppliers. This transformation should position them as leaders in the digital transformation revolution, potentially securing a central role in the new digitalised world,” Alic concluded.
Telecom
MTN Plans Satellite-Internet Rollout
MTN, Africa’s biggest mobile operator, is exploring partnerships with low-Earth-orbit satellite providers to bring internet connection to rural and remote customers in particular, according to Ralph Mupita, CEO of the group.
LEO satellites provide high-speed internet even in areas where terrestrial telecommunications infrastructure such as fibre and mobile broadband is difficult and expensive to deploy.
“To keep customers and businesses connected at all times, we’re going to have to embrace satellite as an additional technology form,” Mupita stated.
He said South Africa-based MTN was carrying out proof of concepts with several LEO satellite operators for possible partnerships.
“We are exploring several, and actually some of them we’re happy to be resellers through our enterprise business to some of our customers in specific countries,” Mupita said.
Reuters reported that MTN is not alone in seeking out partnership agreements. Smaller rival Cell C is doing the same.
South Africa’s biggest operator, Vodacom, majority owned by Britain’s Vodafone, announced a partnership with Amazon’s Project Kuiper LEO satellite last year.
“We’re very aware of the challenges of having to compete as a fixed and wireless operator with LEO satellites over time, so we’re arranging ourselves to be able to sure-proof our businesses in our key markets,” Mupita said.
Starlink operates in several African countries but has faced regulatory challenges in others, including South Africa, and resistance from state telecoms companies.
Telecom
UNDP and Anambra State Foster Innovation with New Marketplace
In the lead up to Anambra Innovation Week 2024, in a landmark collaboration poised to position Anambra State as Africa’s Silicon Valley, the United Nations Development Programme (UNDP) has partnered with the Anambra State Government through the Solution Innovation District (SID) to establish a cutting-edge Makerspace.
This event was officiated by the Governor of Anambra State, Professor Charles Chukwuma Soludo, CFR and the United Nations Development Programme Resident Representative in Nigeria, Ms. Elsie G Attafuah.
This initiative aligns with Governor Charles Chukwuma Soludo’s visionary agenda of “Everything Technology, Technology Everywhere” and aims to empower youth, drive innovation, and foster economic growth across the state.
The Makerspace in Awka is designed to democratize access to entrepreneurship and technological innovation. It will create pathways for improved livelihoods by providing young people with the resources, skills, and collaborative environments to bring their ideas to life.
The Anambra Makerspace, strategically located in Awka, will prioritize inclusivity, with special programs tailored for young women, persons with disabilities, individuals with low literacy skills, and youth in underserved areas.
Speaking during the launch of the Makerspace, His Excellency Professor Chukwuma Charles Soludo, the Executive Governor of Anambra State stated that, This Makerspace will unlock new opportunities, drive economic growth, and empower local talent. Through collaborative partnerships such as the UNDP, we will pave the way for innovation.
I believe that technology is the bridge to a prosperous future, and we are immensely delighted to embark on this journey with UNDP. Our long-term vision is to raise a powerful Anambra Digital Tribe who will drive economic transformation through innovation, position Anambra as Africa’s Silicon Valley and make a significant impact on the global stage.
The value of Anambra’s Makerspace’s in entrepreneurship development is multifaceted.
The Makerspace will provide young entrepreneurs with the tools and resources needed to turn ideas into tangible prototypes, facilitating the testing and refinement of products. Breaking barriers to innovation, the space enables entrepreneurs to experiment and iterate without significant upfront costs. Thus, entrepreneurs are equipped with the resources to ignite ideas, permitting prototyping, testing and refinement of products.
What’s more, the Makerspace is forward-looking and promotes technological know-how through offering trainings and workshops, enabling skill refinement and keeping entrepreneurs abreast with emerging technologies.
In her remarks, Ms. Elsie G. Attafuah, UNDP Resident Representative expressed that the groundbreaking ceremony was “A landmark for young entrepreneurs, artisans, and innovators of the state and region at large.” Furthermore, she reflected on the significance of Nigeria’s youthful population, expressing that its talented youth are an invaluable asset and “The ability to create and innovate locally is not just a matter of choice; it is essential for economic resilience and growth.” Ms. Attafuah acknowledged the support of the Anambra state government and private sector partners, dedicated to ensuring the Makerspace remains sustainable, accessible, and impactful.
She extended gratitude to the Mastercard Foundation for its support in the establishment of the Makerspaces. Redefining entrepreneurship, Ms. Attafuah stated that, “The Makerspace puts young women, persons with disabilities, persons with low literacy skills and those living in non-urban areas at the forefront, for economic growth synonymous with social progress – leaving no one behind.”
The Makerspace is a launchpad for ideas that address real-state challenges extending to wider challenges of the nation. As such this space will bridge the gap between education and employability, enhancing the quality of life for all who live in Anambra and Nigeria. Empowering communities and preserving Nigeria’s rich culture, the space blends art, technology, and local craftsmanship, igniting creative capabilities in the region.
The Special Adviser to Governor Soludo on Innovation and Business Incubation, Chinwe Okoli, expressed enthusiasm for the partnership:
“We are immensely delighted to have UNDP support Mr. Governor’s vision for the Solution Innovation District as we continue to build the Anambra Innovation Ecosystem. The Solution Innovation District is designed to attract opportunities like this from leading institutions, further cementing Anambra’s position as a hub for innovation and creativity.”
She highlighted the Makerspace’s cutting-edge features, stating, “The facility will be equipped for robotics, textiles, and electronics, with dedicated sections for design, prototyping, and advanced technological experimentation.
“It will also include collaborative zones for brainstorming, ideation, and project pitching. Importantly, the Makerspace will integrate designs that celebrate Anambra’s rich heritage while meeting global standards.”
The project stems from the UNDP-Anambra Stakeholders Meeting on Digital Transformation and Tech Development held in August 2024.
This strategic dialogue highlighted critical gaps in the state’s innovation ecosystem, particularly within tertiary institutions, and laid the foundation for this transformative partnership.
The Makerspace will bridge these gaps by fostering collaboration among academia, industry, and government while serving as a launchpad for the commercialization of groundbreaking ideas.
The Makerspace will incorporate green building materials, energy-efficient systems, and sustainable waste management practices. By involving local youth and artisans in its design, construction, and operations, the project not only nurtures local talent but also reinforces its commitment to environmental stewardship and community ownership.
The Makerspace is a highlight of the upcoming Anambra Innovation Week 2024, scheduled for November 25–29, 2024. This event celebrates the state’s remarkable strides in technology and innovation under the theme “Creating the Future of Africa Now” serving as a premier platform to showcase and celebrate Africa’s dynamic innovation ecosystem.
The Makerspace aligns seamlessly with the vision to position Anambra as a regional leader in technology, entrepreneurship, and creativity. Local firms will lead the remodeling, repurposing, and furnishing of the facility, which is set to become fully operational within six months.
- E-Financial2 days ago
CBN Orders Banks to Load ATMs, Warns Against Cash Disbursement to Naira Hawkers
- News2 days ago
Experts Highlight Blockchain, AI, eCommerce Potentials for Africa @ AfriTECH 4.0
- E-Financial2 days ago
Inuwa Tasked Fintech Stakeholders on Collaboration to Deepen Financial Literacy
- Telecom2 days ago
Karl Toriola Champions MTN’s Digital Transformation @TeXcellence 2024
- E-Financial1 day ago
NGX Proposes Amendment to Trading License Holders Rules
- Telecom2 days ago
EU Hits Meta with $840M Fine for Abusive Facebook Ad Practices
- E-Business2 days ago
Breaking Barriers: QNET’s Product Expo Opens Doors for Nigerian Entrepreneurs
- Telecom2 days ago
TD Africa Launches TecHERdemy to Empower 400 Nigerian Women in Tech