E-Business
SophosLabs 2018 Malware Forecast Shows No Platform Immune from Ransomware
By peter oluka
Sophos, a global leader in network and endpoint security, today announced its SophosLabs 2018 Malware Forecast, a report that recaps ransomware and other cybersecurity trends based on data collected from Sophos customer computers worldwide during April 1 to Oct. 3, 2017.
One key finding shows that while ransomware predominately attacked Windows systems in the last six months, Android, Linux and MacOS platforms were not immune.
“Ransomware has become platform-agnostic. Ransomware mostly targets Windows computers, but this year, SophosLabs saw an increased amount of crypto-attacks on different devices and operating systems used by our customers worldwide,” said Dorka Palotay, SophosLabs security researcher and contributor to the ransomware analysis in the SophosLabs 2018 Malware Forecast.
The report also tracks ransomware growth patterns, indicating that WannaCry, unleashed in May 2017, was the number one ransomware intercepted from customer computers, dethroning longtime ransomware leader Cerber, which first appeared in early 2016. WannaCry accounted for 45.3 percent of all ransomware tracked through SophosLabs with Cerber accounting for 44.2 percent.
“For the first time we saw ransomware with worm-like characteristics, which contributed to the rapid expansion of WannaCry. This ransomware took advantage of a known Windows vulnerability to infect and spread to computers, making it hard to control,” said Palotay. “Even though our customers are protected against it and WannaCry has tapered off, we still see the threat because of its inherent nature to keep scanning and attacking computers. We’re expecting cyber criminals to build upon this ability to replicate seen in WannaCry and NotPetya, and this is already evident with Bad Rabbit ransomware, which shows many similarities to NotPetya.”
The SophosLabs 2018 Malware Forecast reports on the acute rise and fall of NotPetya, ransomware that wreaked havoc in June 2017.
NotPetya was initially distributed through a Ukranian accounting software package, limiting its geographic impact. It was able to spread via the EternalBlue exploit, just like WannaCry, but because WannaCry had already infected most exposed machines there were few left unpatched and vulnerable.
The motive behind NotPetya is still unclear because there were many missteps, cracks and faults with this attack. For instance, the email account that victims needed to contact attackers didn’t work and victims could not decrypt and recover their data, according to Palotay.
“NotPetya spiked fast and furiously, and did hurt businesses because it permanently destroyed data on the computers it hit. Luckily, NotPetya stopped almost as fast as it started,” said Palotay. “We suspect the cyber criminals were experimenting or their goal was not ransomware, but something more destructive like a data wiper. Regardless of intention, Sophos strongly advises against paying for ransomware and recommends best practices instead, including backing up data and keeping patches up to date.”
Cerber, sold as a ransomware kit on the Dark Web, remains a dangerous threat. The creators of Cerber continuously update the code and they charge a percentage of the ransom that the “middle-men” attackers receive from victims. Regular new features make Cerber not only an effective attack tool, but perennially available to cyber criminals. “This Dark Web business model is unfortunately working and similar to a legitimate company is likely funding the ongoing development of Cerber. We can assume the profits are motivating the authors to maintain the code,” said Palotay.
Android ransomware is also attracting cyber criminals. According to SophosLabs analysis, the number of attacks on Sophos customers using Android devices increased almost every month in 2017.
“In September alone, 30.4 percent of malicious Android malware processed by SophosLabs was ransomware. We’re expecting this to jump to approximately 45 percent in October,” said Rowland Yu, a SophosLabs security researcher and contributor to the SophosLabs 2018 Malware Forecast. “One reason we believe ransomware on Android is taking off is because it’s an easy way for cyber criminals to make money instead of stealing contacts and SMS, popping ups ads or bank phishing which requires sophisticated hacking techniques. It’s important to note that Android ransomware is mainly discovered in non-Google Play markets – another reason for users to be very cautious about where and what kinds of apps they download.”
The SophosLabs report further indicates two types of Android attack methods emerged: locking the phone without encrypting data, and locking the phone while encrypting the data. Most ransomware on Android doesn’t encrypt user data, but the sheer act of locking a screen in exchange for money is enough to cause people grief, especially considering how many times in a single day information is accessed on a personal device. “Sophos recommends backing up phones on a regular schedule, similar to a computer, to preserve data and avoid paying ransom just to regain access. We expect ransomware for Android to continue to increase and dominate as the leading type of malware on this mobile platform in the coming year,” said Yu.
The federal government and the United Kingdom signed an agreement Tuesday to combat the growing threat of cyber-crime. The Memorandum of Understanding was signed following a courtesy visit by David George Hanson, minister of the home office, UK, to the Nigeria Police Force headquarters, Louis Edet House in Abuja.
Transnational crime is a big problem for both the UK and Nigeria, so the governments intend to strengthen existing collaboration efforts to crack down on cyber-criminals and protect their industries from unlawful activities.
Offences such as online fraud, identity theft, digital extortion, and ransomware , operate across many jurisdictions, and frequently necessitate sophisticated cooperation efforts, according to the two governments during a press conference.
Furthermore, Lateef Fagbemi, Nigeria’s attorney-general and minister of justice, established the Joint Case Team on Cybercrime, which aims to address the need for a coordinated and robust approach to combating cybercrime, as stated in the Cybercrimes Act of 2015, which criminalises cyber-related offences.
Hanson underlined the importance of ongoing cooperation efforts to combat international crime in a number of areas, affecting vulnerable individuals.
He said: “We need to look again at how we can build cooperation between the Federal Government, the federal police, and our police forces and National Crime Agency to take action against these international criminals, who are exploiting vulnerable people in a whole range of areas. The National Crime Agency, the Home Office Fraud Department, and the High Commission need to make sure we make a big impact on this transnational crime.”
“The collaboration between the Nigerian Police Force and National Crime Agency continues to serve as a model in international law enforcement cooperation. We have successfully conducted joint operations into many cases of cybercrimes and online fraud. With your [UK government] cooperation, we have continued to bust other criminal networks around the world,” added inspector-general of Nigerian Police Force, Kayode Adeolu Egbetokun.
Corporate Affairs Commission (CAC) has reaffirmed its commitment to enforcing business registration laws in Nigeria, warning that individuals and organizations operating unregistered businesses will face prosecution.
In a statement, the CAC emphasized that conducting business without proper registration violates the Companies and Allied Matters Act (CAMA) 2020, undermining transparency and accountability in the corporate sector.
The commission stressed that registration is not only a legal requirement but also a gateway to formal business opportunities, including access to bank loans, government grants, and partnerships.
The enforcement drive will be nationwide, targeting small and medium-sized enterprises (SMEs), online vendors, and informal traders who have failed to comply despite previous awareness campaigns and registration amnesty windows.
The CAC disclosed that enforcement teams, in collaboration with security agencies, will be deployed to identify and prosecute defaulters.
The commission urged business owners to take advantage of its simplified registration platform to regularize their status, noting that compliance will boost investor confidence and improve Nigeria’s ease of doing business. It warned that ignorance of the law will not be accepted as an excuse.
Business owners are advised to act promptly to avoid legal consequences, as the CAC moves to ensure a more structured and regulated business environment in Nigeria.
Nigerian Copyright Commission (NCC) has pledged to enforce its legal obligations to combat online intellectual property infringement and urged commercial music users to obtain proper licences from rights holders or their representatives.
The Commission stated that this ensures creators are fairly compensated, supporting the music industry’s sustainable growth.
In a statement commemorating the 2025 World Intellectual Property Day, themed “IP and Music: Feel the Best of IP,” the NCC announced plans to enforce the Copyright Act 2022, which allows for the takedown of infringing materials and blocking of websites hosting illegal content.
Signed by Mrs Ijeoma Egbunike, director of Public Affairs, the statement outlined an aggressive anti-piracy campaign in collaboration with the private sector, targeting the online environment.
Egbunike affirmed the NCC’s commitment to establishing enforceable standards for transparency, digital audits, and real-time royalty reporting to protect creators’ rights. She stated, “The NCC will continue to champion policies that support the growth of the music industry, improve the livelihoods of Nigerian musicians, and foster a culture of creativity and respect for intellectual property.”
Despite the global success of Afrobeats and other Nigerian genres, the NCC noted that many musicians face low royalty returns due to rampant digital piracy.
To address this, the Commission revised its Collective Management Regulations to enhance transparency and accountability among Collective Management Organisations (CMOs).
The NCC emphasised that proper licensing is a legal obligation and vital for Nigeria’s creative economy, stating, “Music must feel the beat of intellectual property for the full potential of creativity to be realised.”
The Commission highlighted that creators’ livelihoods depend on fair royalty compensation.
Recent enforcement measures include the NCC’s designation by the Attorney-General of the Federation as an authority under the Proceeds of Crime (Recovery and Management) Act 2022.
This, combined with the Copyright Act 2022, empowers the NCC to order takedowns and block illegal music distribution websites.
NITDA Inaugurates Start-up Consultative Forum
NFIU Alerts Nigerians of Rising Ponzi Schemes, Unregulated Crowdfunding Scams
Firm Warns Against AI Password Generation @ World Password Day
FG Partners UK to Combat Cross-border Cyber-crime
CBN Slams ₦250m Fine on Paystack Over Zap Wallet Operations
News3 days agoNBC Loses Appeal as Tribunal Upholds ₦190m Fine for Misleading Packaging
Telecom3 days agoMTN’s Talent Hunt Returns: A Stage for Nigeria’s Next Creative Stars
Telecom2 days agoEmerging Technologies, Cybersecurity, Others Form Key Focus of NCA 2003 Review
E-Business2 days agoCAC to Prosecute Business Owners Operating Without Registration
E-Financial3 days agoCBN Urges Banks to Source FX for PAPSS Settlement Through NFEM
News3 days agoUS Identifies Corruption as Key Barrier to Trade and Investment in Nigeria
General News3 days agoWanted CBEX Promoter Surrenders to EFCC Amid $1 Billion Fraud Probe
Telecom2 days agoMTN Nigeria Reports N1 Trillion Revenue