Telecom
Sophos Detects How Cyberattackers Are Exploiting Apache Log4Shell Vulnerability to Exploit Unpatched Systems
Following the reporting of the Apache Log4Shell vulnerability, Sophos has provided new threat intelligence on how cyberattackers are already exploiting or attempting to exploit unpatched systems.
The threat intelligence as detailed in the SophosLabs Uncut report, Log4Shell Hell: Anatomy of an Exploit Outbreak, shows that Sophos is seeing a rapid uptick in attacks exploiting or attempting to exploit this vulnerability, with hundreds of thousands of attempts detected so far.
The report also indicated that Cryptomining botnets are among the earliest “attack” adopters; botnets focus on Linux server platforms, which are particularly exposed to this vulnerability.
Sophos has also seen attempts to extract information from services, including Amazon Web Services keys and other private data.
The company said it observed that attempts to exploit network services start by probing for different types.
Around 90 percent of the probes Sophos detected were focused on the Lightweight Directory Access Protocol (LDAP.) A smaller number of probes targeted Java’s Remote Interface (RMI,) but Sophos researchers noted that there seem to be a larger variety of unique RMI-related attempts
Sophos said it expects adversaries to intensify and diversify their attack methods and motivations in the coming days and weeks, including the possibility of leveraging for ransomware.
According to Sean Gallagher, senior threat researcher at Sophos, in the SophosLabs Uncut report issued on Dec. 9, Sophos has detected hundreds of thousands of attempts to remotely execute code using the Log4Shell vulnerability.
“Initially, these were Proof-of-Concept (PoC) exploit tests by security researchers and potential attackers, among others, as well as many online scans for the vulnerability. This was quickly followed by attempts to install coin miners, including the Kinsing miner botnet.
“The most recent intelligence suggest attackers are trying to exploit the vulnerability to expose the keys used by Amazon Web Service accounts.
“There are also signs of attackers trying to exploit the vulnerability to install remote access tools in victim networks, possibly Cobalt Strike, a key tool in many ransomware attacks.
“The Log4Shell vulnerability presents a different kind of challenge for defenders. Many software vulnerabilities are limited to a specific product or platform, such as the ProxyLogon and ProxyShell vulnerabilities in Microsoft Exchange. Once defenders know what software is vulnerable, they can check for and patch it.
“However, Log4Shell is a library that is used by many products. It can therefore be present in the darkest corners of an organization’s infrastructure, for example any software developed in-house. Finding all systems that are vulnerable because of Log4Shell should be a priority for IT security.
“Sophos expects the speed with which attackers are harnessing and using the vulnerability will only intensify and diversify over the coming days and weeks. Once an attacker has secured access to a network, then any infection can follow.
“Therefore, alongside the software update already released by Apache in Log4j 2.15.0, IT security teams need to do a thorough review of activity on the network to spot and remove any traces of intruders, even if it just looks like nuisance commodity malware”, Gallagher added,
New and additional information on how Log4Shell works is also available in the Sophos Naked Security article, Log4Shell Explained – How it Works, Why You Need to Know, and How to Fix It, by Paul Ducklin.
According to Paul Ducklin, principal research scientist at Sophos: “Technologies including IPS, WAF and intelligent network filtering are all helping to bring this global vulnerability under control.
“But the staggering number of different ways that the Log4Shell ‘trigger text’ can be encoded, the huge number of different places in your network traffic that these strings can appear, and the wide variety of servers and services that could be affected are collectively conspiring against all of us.
“The very best response is perfectly clear: patch or mitigate your own systems right now. Our article provides practical advice that explains how the vulnerability works, why it works, what it can do, and how to fix it.”
Sophos threat intelligence experts are continuing to monitor Log4Shell.
Telecoms giant, MTN Nigeria, has announced the disbursement of over ₦290 million to more than 1,500 winners in its ongoing Mega Billion Promo.
L-R: Deji Roberts, Assistant Director, Nigerian Communications Commission, Lagos Zonal Office; Ugonwa Nwoye, Chief Customer Relations and Experience Officer, MTN Nigeria; Femi Yusuf, 10 Million MTN Mega Billion Promo Jackpot Winner; Efe Kwado, MTN Mega Billion Promo Winner; Onyinye Ikenna-Emeka, Chief Marketing Officer, MTN Nigeria and Samuel Rowland, Chief Operations Officer, Lagos State Lotteries and Gaming Authority at the MTN Mega Billion Promo Media Parley held on Saturday, July 19, 2025 at the MTN Rooftop Events Centre Plaza, Ikoyi.
The update was shared during a live event held on July 19 at the company’s Rooftop Events Centre in Lagos. Representatives from the Nigerian Communications Commission (NCC), the Lagos State Lotteries and Gaming Authority, MTN executives, journalists and selected promo winners were in attendance.
Speaking at the event, Onyinye Ikenna-Emeka, MTN’s Chief Marketing Officer, stated that the initiative was launched to support loyal customers during difficult times. “In the last couple of years, it’s been a tough time for the average Nigerian. This promo is one of our ways of making life better for our customers,” she said.
Ikenna-Emeka revealed that the promo has produced over 1,500 winners, including three jackpot winners, 20 winners of ₦5 million each, and more than 100 winners of ₦100,000. She added that the company remains committed to rewarding customers transparently.
One of the jackpot winners, Femi Yusuf, who won ₦10 million, shared his excitement. “I thought it was one of those promos where nothing comes out of it. My wife was the one who spotted my number during the live draw,” he said. When asked about the delivery of his prize, he replied, “Fast and fast. MTN, no scam.”
The event also featured live calls to new winners, including a woman identified as Motunrayo, who won ₦2 million. She expressed joy over the unexpected win, saying, “I’m so grateful. Thanks so much.”
Debo Agun, Senior Manager, Consumer Segment (Mass Market), explained the mechanics of the promo. He said participation is free and open to MTN subscribers who dial *900# to opt in. Airtime purchases serve as entries—₦100 worth of airtime equals one entry, and customers can win multiple times.
Agun stated that 63 winners are selected daily from Monday to Friday, while Saturdays feature 104 winners, including a ₦10 million jackpot. Other prizes range from ₦25,000 to ₦2 million and are paid into customers’ MoMo wallets. Those without wallets can create one by dialing *671#.
Promo draws are conducted and streamed live on MTN’s Instagram, YouTube, and Facebook channels. Independent partners oversee the process to maintain credibility and fairness.
The promo began on June 23 and runs for 90 days.
MENXTT Technology NG has introduced a fresh lineup of USA-specification smartphones alongside its existing range of laptops, accessories, and software tools in a major move to redefine tech quality and customer satisfaction in Nigeria.
The firm, which operates as a fully online IT service provider, is focused on bridging the gap between businesses and customers by offering seamless tech procurement, deployment, and after-sales support.
According to Anthony Emeka Nwosu, Director of Communication and Customer Retention, the company is committed to restoring consumer trust in tech purchases through guaranteed quality, extended warranties, and structured support.
Nwosu stated that the decision to supply USA-grade devices was borne out of frustration with substandard options in the market and zero accountability.
He said MENXTT was built to be responsive, dependable, and quality-driven, assuring customers that they would not be left alone after purchase.
With services covering laptops, accessories, website development, software deployment, and IT support, MENXTT promises to take technology directly to the client with less stress.
The company, located at 8a Oje Imeviani Street, Julie Estate, Oregun, Ikeja, Lagos, is also noted for its tech-enabled structure that allows users to access solutions from anywhere in Nigeria through its online platform.
Customers can reach MENXTT Technology NG via email: info@menxtt.com.ng or website: menxtt.ng.
Telecoms giant MTN Group has partnered with MTV Base to launch the Room of Safety campaign, a youth-led movement aimed at raising awareness on internet safety and digital wellbeing for children and young people across Africa.
The initiative, a major part of MTN’s Help Children Be Children campaign, seeks to address growing concerns around cyberbullying, grooming, misinformation, and other forms of online harm. Through this collaboration, MTN will leverage MTV Base’s extensive reach across youth audiences to drive impactful change.
Central to the campaign is the premiere of a 10-part short-form docu-series titled Room of Safety, which kicks off on July 20, 2025, at 16:00 on MTV Base (DStv channel 322). Episodes will also stream on MTV Base South’s digital platforms including Instagram, YouTube, and TikTok.
Each episode will feature real-life stories, expert interviews, and practical resources to help young viewers identify digital threats and take proactive steps. The series also encourages youth to speak up about negative experiences online and shows them how to report abuse.
A statement from MTN Group emphasized the importance of equipping young Africans with the knowledge and confidence to navigate digital spaces safely, adding that the campaign aims to normalize conversations around digital ethics and mental health within families, schools and peer groups.
The launch is backed by social media engagement and outreach activities targeted at schools, creators, and community organizations across multiple African countries.
Microsoft Server Hack Likely Solo Actor, Thousands at Risk
CSCS Inaugurates Custodian Portal to Enhance Digital Access, Operational Efficiency
Reps Investigate 25 Insurance Firms for Financial Infractions
Flaw in Microsoft SharePoint Sparks Global Cybersecurity Concern
Naira Slides Again, Hits ₦1,532.34/$ Despite CBN’s Dollar Push
General News2 days agoPrateek Suri CEO Maser Meets Zambia’s Education Minister to Propel Student Housing and Education Projects
News1 day agoUN Appoints Sa’id, Nigerian to Nuclear Panel
E-Financial1 day agoUBA’s LEO Becomes Africa’s First Chatbot to Enable Cross-Border Payments
E-Business1 day agoNIMC Enrolls 122m for NIN, Cuts Extortion by 40 Percent
Telecom1 day agoMTN Urges Nigerian to Regards Telecom Infrastructure as National Assets
General News1 day agoAppeal Court Nullifies Registration of ‘KPMG Professional Services’
E-Financial1 day agoSEC to Introduce USSD Codes to Fight Ponzi Schemes
E-Financial1 day agoPolaris Bank Equips 500+ Journalists with Digital Tools for Modern Storytelling