Connect with us

Telecom

Sophos’ Incident Response Report Shows How Cybercriminals Abuse Remote Desktop Protocol in 90% of Attacks

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions that defeat cyberattacks, today released the Active Adversary analysis, “It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024.”

John Shier, senior security advisor at Sophos

The report, which analyzes more than 150 incident response (IR) cases handled by the Sophos X-Ops IR team in 2023, found that cybercriminals abused remote desktop protocol (RDP)—a common method for establishing remote access on Windows systems—in 90% of attacks.

This was the highest incidence of RDP abuse since Sophos began releasing its Active Adversary reports in 2021, covering data from 2020.

In addition, external remote services such as RDP were the most common vector by which attackers initially breached networks; they were the method of initial access in 65% of IR cases in 2023.

External remote services have consistently been the most frequent source of initial access for cybercriminals since the Active Adversary reports were launched in 2020, and defenders should consider this a clear sign to prioritize the management of these services when assessing risk to the enterprise.

“External remote services are a necessary, but risky, requirement for many businesses. Attackers understand the risks these services pose and actively seek to subvert them due to the bounty that lies beyond. Exposing services without careful consideration and mitigation of their risks inevitably leads to compromise. It doesn’t take long for an attacker to find and breach an exposed RDP server, and without additional controls, neither does finding the Active Directory server that awaits on the other side,” said John Shier, field CTO, Sophos.

In one Sophos X-Ops customer case, attackers successfully compromised the victim four times within six months, each time gaining initial access through the customer’s exposed RDP ports.

Once inside, the attackers continued to move laterally throughout the customer’s networks, downloading malicious binaries, disabling endpoint protection, and establishing remote access.

Compromised credentials and exploiting vulnerabilities are still the two most common root causes of attacks. However, the 2023 Active Adversary Report for Tech Leaders, released last August, found that in the first half of that year, for the first time, compromised credentials surpassed vulnerabilities as the most frequent root cause of attacks. This trend continued through the rest of 2023, with compromised credentials representing the root cause of over 50% of IR cases for the entire year. When looking at Active Adversary data cumulatively over the years from 2020 through 2023, compromised credentials were also the number one “all-time” root cause of attacks, involved in nearly a third of all IR cases. Yet despite the historical prevalence of compromised credentials in cyberattacks, in 43% of IR cases in 2023, organizations did not have multi-factor-authentication configured.

Exploiting vulnerabilities was the second most common root cause of attacks, both in 2023 and when analyzing data cumulatively from 2020 through 2023, accounting for the root cause in 16% and 30% of IR cases, respectively.

“Managing risk is an active process. Organizations that do this well experience better security situations than those that don’t in the face of continuous threats from determined attackers. An important aspect of managing security risks, beyond identifying and prioritizing them, is acting on the information. Yet, for far too long, certain risks such as open RDP continue to plague organizations, to the delight of attackers who can walk right through the front door of an organization. Securing the network by reducing exposed and vulnerable services and hardening authentication will make organizations more secure overall and better able to defeat cyberattacks,” said Shier.

The Sophos Active Adversary Report for 1H 2024 is based on more than 150 incident response (IR) investigations spanning the globe across 26 sectors.

Targeted organizations are located in 23 different countries, including the United States, Canada, Mexico, Colombia, the United Kingdom, Sweden, Switzerland, Spain, Germany, Poland, Italy, Austria, Belgium, the Philippines, Singapore, Malaysia, India, Australia, Kuwait, the United Arab Emirates, Saudi Arabia, South Africa, and Botswana.

To learn more about the current adversary landscape, read It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024 on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

How Artificial Intelligence is Revolutionizing Business Plans for Entrepreneurs

Published

on

Kindly share this post

In today’s fast-paced business world, writing a comprehensive business plan can feel overwhelming for entrepreneurs. However, with the advancement of Artificial Intelligence (AI), this process is becoming more efficient and accessible. This guide shows how to use AI tools to create a business plan for your idea.

Think of AI as your digital assistant, speeding up the first draft so you have more time to make it better. AI gives you a structure, but your own ideas and understanding of your business makes the plan unique.

Embrace AI in Business Planning – Before you begin, you should know what goes into a business plan: a summary of your business, details about your company and offerings, and information about your market and competitors. You may also consider creating plans for your business sales, management, operations, and finances.

Gather all your business details first. This makes it easier for AI to help you turn them into a plan.

Feeding Information to AI – Start by providing a general overview of your business, including its name, target market, products or services, and financial projections. GoDaddy is sharing a prompt template below that can be used to provide information:

“I’m developing a business plan for my company, [company name], a [industry] startup offering [product/service]. Please accept the information below about my company as a basis for developing a strong business plan.”

Creating Sections with AI Help – Breaking your business plan into sections and using specific prompts for each can streamline the process. AI can generate initial drafts for each part, which you can then review and edit. Here are some prompts to help guide you:

1. Summary and Company Description:

  • “As a successful entrepreneur and seasoned strategist, draft an enticing executive summary and company description for [company name] in the [industry] sector.”

2. Products and Services:

  •  “As an innovative product developer, provide a comprehensive description of [product/service] offered by my company.”

3. Market Analysis:

  •  “As a market analyst, outline a detailed market analysis for [company name].”

4. Competitive Analysis:

  •  “Compile a concise competitive analysis for [company name], highlighting the strengths and weaknesses of key competitors.”

5. Marketing and Sales Plan:

  •  “Create a thorough sales and marketing plan for [company name], including a detailed growth strategy.”

6. Value Proposition:

  •  “Assume the perspective of a potential customer and identify the unique selling proposition of [company name].”

7. Ownership and Management Plan:

  •  “Outline the optimal structure, ownership, and management roles for [company name].”

8. Operating Plan:

  •  “Craft an efficient operating plan for [company name], detailing infrastructure and risk management.”

9. Financial Plan:

  •  “Develop a comprehensive financial overview and funding request for [company name], including income statements and sales forecasts.”

10. Extra Information:

  •  This is where you can add any extra details like research or visuals.

Finalizing Your Plan – Once you have drafts for each part, it’s time to make it all fit together nicely. Your business plan should clearly show what your business is about and its path to success.

Getting Feedback from AI – After refining your draft, ask AI to check for any missing parts, mistakes or inconsistencies. This is a good time for AI to help create a summary, mission statement, vision, values, and value proposition to ensure alignment with your business goals.

Make a One-Page Plan – Lastly, create a simple one-page version of your business plan. It should include all the important points and be easy to understand. This step ensures clarity and focus, making it easier to communicate your business strategy to stakeholders. Remember, while AI helps a lot, it does not replace the ingenuity and oversight of human input to help ensure your unique business ideas are being reflected in your plan.

AI can be a helpful tool for creating and growing your business’ digital presence.  With GoDaddy Airo, an AI powered experience, you can embrace AI to streamline your business planning and operations, allowing you more time to focus on turning your entrepreneurial dreams into reality.


Kindly share this post
Continue Reading

Telecom

Group Advocates for Digital Rights at 2024 Internet Governance Forum

Published

on

Kindly share this post

Paradigm Initiative (PIN), a leading pan-African organisation dedicated to advancing digital rights and inclusion in the Global South, has made significant contributions to the just-concluded 2024 Internet Governance Forum (IGF) in Riyadh, Saudi Arabia.

PIN’s participation in the prestigious global event underscores the organisation’s commitment to fostering inclusive digital policies and ensuring that Africa’s voices are central in global discussions about the future of the internet.

During the week-long forum, PIN team members played key roles in numerous sessions, emphasising the importance of a digital rights perspective in the development of emerging technologies, advocating for a more inclusive digital future, and addressing the specific challenges the African continent faces in terms of digital access and inclusion.

PIN Executive Director, ‘Gbenga Sesan, spoke at high-profile sessions, including the Leadership Panel on ‘The Internet We Want’, which outlined the vision for a global internet that is accessible, secure, and inclusive.

At the Africa Youth IGF Parley, ‘Gbenga provided a platform for young Africans to address pressing issues such as internet restrictions, the digital divide, and digital rights violations.

Adeboye Adegoke, Senior Manager for Grants and Programmes Strategy at Paradigm Initiative, contributed to Open Forum #12, advocating for policies that ensure a rights-respecting and inclusive digital future. His discussions highlighted the importance of policies that place human rights at the core of technological advancements.

Ihueze Nwobilor, Senior Programmes Officer, spoke at the session, ‘A Rights-Respecting Approach to Emerging Tech Development,’ where he called for the prioritisation of human rights in the development and deployment of emerging technologies across Africa and beyond.

The organisation’s Senior Manager for Partnerships and Engagements, Thobekile Matimbe, shared valuable insights during the ‘Better Products and Policies Through Stakeholder Engagement’ session.

She emphasized the role of the private sector in engaging with local communities to ensure that digital products and policies are inclusive and meet the needs of vulnerable groups across Africa.

Bridgette Ndlovu, PIN Partnerships and Engagements Officer, moderated a session on ‘Implementation of the USF in 26 African Countries,’ where she and other speakers, including ‘Gbenga Sesan, discussed the crucial role of Universal Service Funds (USF) in advancing digital inclusion, particularly in underserved and rural areas.

PIN’s participation at IGF 2024 has been an important moment for advocating digital rights in Africa. “Paradigm Initiative’s participation was a powerful reminder that Africa’s digital future must be shaped by inclusive, rights-respecting policies.

“Our participation at the IGF is a continuous demonstration of the need for all stakeholders to collaborate in building a more inclusive and accessible internet for everyone, especially those in under-served communities,” PIN Executive Director, ‘Gbenga Sesan stated.


Kindly share this post
Continue Reading

Telecom

Patricia Technologies Begins Repayments to Customers Affected by 2022 Security Breach

Published

on

Kindly share this post

Lagos-based financial technology firm Patricia Technologies has commenced repayments to customers impacted by a 2022 security breach. This follows a two-year period where the company focused on recovering funds and rebuilding trust.

In 2022, Patricia experienced a significant cyberattack, resulting in the loss of over 600 million Naira from customer accounts. Following the breach, the company temporarily restricted withdrawals and collaborated with law enforcement, leading to the arrest of several suspects, including a prominent politician.

Patricia had previously requested a two-to-five-year repayment window, a plan that has now begun to be implemented. The company has started disbursing funds to affected customers in phases, with the first batch of payments initiated on December 10, 2024.

CEO Hanu Fejiro emphasized the company’s commitment to its customers, stating, “This repayment process represents a milestone in fulfilling our promise to make things right.”

He encouraged customers to update their information on the Patricia platform and monitor official channels for further updates on their individual repayment timelines.

Subscribers who are getting paid in this phase have since been officially notified by email. One of the subscribers, with initials BP (for purposes of confidentiality), expressed appreciation and satisfaction with being paid by Patricia via an email reaction: “I really appreciate your effort. Though it took a long time, I’m satisfied with what I’ve received. Thank you for keeping to your words.”


Kindly share this post
Continue Reading

Trending