Connect with us

E-Business

Two-Thirds of Healthcare Organisations were Hit by Ransomware in 2024: Sophos

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today released a sector survey report, “The State of Ransomware in Healthcare 2024,” which revealed that the rate of ransomware attacks against healthcare organizations has reached a four-year high since 2021. Of those organizations surveyed, two-thirds (67%) were impacted by ransomware attacks in the past year, up from 60% in 2023.

The rising rate of ransomware attacks against healthcare institutions contrasts with the declining rate of ransomware attacks across sectors; the overall rate of ransomware attacks fell from 66% in 2023 to 59% in 2024.

Alongside an increase in the rate of ransomware attacks, the healthcare sector reported increasingly longer recovery times. Only 22% of ransomware victims fully recovered in a week or less, a considerable drop from the 47% reported in 2023 and 54% in 2022.

In addition, 37% took more than a month to recover, up from 28% in 2023, reflecting the increased severity and complexity of attacks.

“While we’ve seen the rate of ransomware attacks reach a kind of “homeostasis” or even declining across industries, attacks against healthcare organizations continue to intensify, both in number and scope.

“The highly sensitive nature of healthcare information and need for accessibility will always place a bullseye on the healthcare industry from cybercriminals.

“Unfortunately, cybercriminals have learned that few healthcare organizations are prepared to respond to these attacks, demonstrated by increasingly longer recovery times.

“These attacks can have immense ripple effects, as we’ve seen this year with major ransomware attacks impacting the healthcare industry and impacting patient care,” said John Shier, field CTO, Sophos.

“To combat these determined adversaries, healthcare organizations must adopt a more proactive, human-led approach to threat detection and response, combining advanced technology with continuous monitoring to stay ahead of attackers.”

Additional findings from the report include:

·       Ransom Recovery Costs Surge: The mean cost of recovery in a healthcare ransomware attack was $2.57 million in 2024, up from $2.2 million in 2023 and double the 2021 cost

·       Ransom Demands vs Payments: 57% of healthcare institutions that paid the ransom ended up paying more than the original demand

·       Root Cause of Attack: Compromised credentials and exploited vulnerabilities were tied for the number one root cause of attack, each accounting for 34% of attacks

·       Backups Targeted: 95% of healthcare organizations hit by ransomware in the past year said that cybercriminals attempted to compromise their backups during the attack.

·       Increased Pressure: Organizations whose backups were compromised were more than twice as likely to pay the ransom to recover encrypted data (63% vs. 27%)

·       Who Pays the Ransom: Insurance providers are heavily involved in ransom payments, contributing in 77% of cases. 19% of total ransom payment funding comes from insurance providers.

The latest Sophos report on real-world ransomware experiences explores the full victim journey, from attack rate and root cause to operational impact and business outcomes, of 402 healthcare organizations.

The results for this sector survey report are part of a broader, vendor-agnostic survey of 5,000 cybersecurity/IT leaders conducted between January and February 2024 across 14 countries and 15 industry sectors.

Learn More About Ransomware

  • Turning the screws: The pressure tactics of ransomware gangs
  • The State of Ransomware 2024
  • The effect of cyber insurance on the ransomware landscape
  • The role of law enforcement in ransomware attacks
  • The role of unpatched vulnerabilities in ransomware attacks
  • How often companies’ backupsare compromised during ransomware attacks
  • The rise of remote encryption among ransomware groups
  • Ransomware attackers targeting managed service providers (MSPs) in the 2024 Sophos Threat Report: Cybercrime on Main Street
  • The latest techniques, tactics and procedures (TTPs) of cyber attackers in the Active Adversary Report for 1H 2024
  • The evolving ransomware business model in Junk Gun’ Ransomware: Peashooters Can Still Pack a Punch
  • Sophos X-Ops and its groundbreaking threat research by subscribing to the Sophos X-Ops blogs


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Kaspersky, AFRIPOL Strengthen Partnership in Combating Cybercrime

Published

on

Kindly share this post

To further enhance global efforts to combat cyber offenses, Kaspersky and AFRIPOL have signed a cooperation agreement in preventing and fighting cybercrime.

Covering a period of five years, the document formalises and facilitates cooperation between the company and the law enforcement agency in sharing threat intelligence data on the latest cybercriminal activities.

The landscape of cyberthreats in Africa has constantly been evolving, with the continent having been especially susceptible to industrial threats. The region, in particular, has the highest share of Industrial Control Systems (ICS) computers on which malicious objects were blocked by Kaspersky solutions, compared to other regions.

Africa’s vigorous cyberthreat environment requires enhanced collaboration of the parties concerned to safeguard against potential risks.

Strengthening the existing relationship between the two organisations, the agreement provides for enhanced data exchange on cyberthreats and cybercrime trends, with Kaspersky handing over such data to AFRIPOL for the further criminal intelligence analysis by the organisation.

Another aspect of collaboration includes the provision of assistance, know-how and technical knowledge in information security analysis by Kaspersky’s vastly experienced teams of experts.

The official signing ceremony took place at AFRIPOL’s headquarters in Algiers on November 18, with the agreement signed by Kaspersky founder and CEO, Eugene Kaspersky and AFRIPOL’s Acting Executive Director, Ambassador Jalel Chelba.

Kaspersky founder and CEO, Eugene Kaspersky, noted: “An effective fight against cybercrime is inconceivable without cooperation. Our company has always put collaborative effort first – sharing its expertise with the widest range of stakeholders: the security expert community, law enforcement agencies, and also the general public to empower them with knowledge about acute cyberthreats.

“Hence, by advancing our cooperation with AFRIPOL and by equipping the agency with both the information and technology required for responding to emerging cyberthreats, we hope to enhance our contribution in fostering greater cyber-resilience and a safer cyberspace for all.”

AFRIPOL Acting Executive Director Ambassador Jalel Chelba stated: “This agreement with Kaspersky represents a major step forward in strengthening Africa’s digital defenses.

By leveraging Kaspersky’s expertise and resources, we are not only enhancing AFRIPOL’s ability to counter cyber threats, but also contributing to the protection of a secure digital space for all African citizens.

This collaboration brings substantial added value to both our organisations: it strengthens AFRIPOL’s operational framework in combating cybercrime, while allowing Kaspersky to play a key role in the digital security of a strategically important continent in terms of cybersecurity. Together, we are taking a significant step towards resilience and digital trust in Africa, by mobilising the best of both partners.”

Kaspersky and AFRIPOL have a long record of joint cooperation projects. The two organisations have been active contributors to the assessment of the African threat landscape, while also being active participants in INTERPOL-led actions to disrupt cybercrime on the African continent, namely Africa Cyber Surge Operation and Africa Cyber Surge Operation II.

The two organisations have also been advocating for greater digital trust, with AFRIPOL having endorsed Kaspersky’s first Transparency Center in the African region in Rwanda. Learn more at the website.

 


Kindly share this post
Continue Reading

E-Business

CNCF, Andela Partner to Train Over 20,000 African Tech Professionals

Published

on

Kindly share this post

The Cloud Native Computing Foundation® (CNCF®), which builds sustainable ecosystems for cloud-native software, along with Linux Foundation Education, the training and certification arm of the Linux Foundation, has partnered with Andela, home to the world’s largest private tech talent marketplace, to train 20,000 to 30,000 African technologists in cloud native basics to enable them to excel in jobs globally as cloud-native development grows.

The training—done at no cost to the participants—will begin next year and unfold over two to three years. Participants will have the opportunity to train for the Kubernetes and Cloud Native associate (KCNA) certification, which demonstrates a user’s foundational knowledge and skills in Kubernetes and the wider cloud native ecosystem, and the Certified Kubernetes Application Developer (CKAD), which certifies that users can design, build, configure, and expose cloud native applications for Kubernetes.

“This partnership showcases the global impact of CNCF’s education programs. By standardizing cloud native knowledge, developers across the globe can confidently work toward certifications that will enable them to land developer positions both within their own countries and globally,” said Chris Aniszczyk, CTO at the CNCF.

“By partnering with Andela, which has a long history of training technologists in Africa, we see great opportunity in providing our training to communities that may otherwise not have access. Together, we can create a win-win for companies that need workers and workers that need opportunities.”

According to Google’s Africa Developer Ecosystem Report 2021, the increased global demand for remote tech talent, which was accelerated by the pandemic, created more remote employment opportunities for African developers. Now, 38% of African software developers work for at least one company based outside the continent.

“We are excited to partner with CNCF to extend training and, ultimately, enhance job opportunities for African workers. The continent is emerging as one of the most important markets in the world.

“It has the fastest-growing population of developers, and its young workforce will be key to solving the tech talent shortage,” said Carrol Chang, Andela CEO. “Organizations are looking for talent with advanced skill sets like AI and cloud-native, and this particular skill set is a perfect addition to the Andela marketplace.”

Training participants will take six to nine months to achieve the KCNA and CKAD certifications and will be selected from Andela’s talent marketplace, which includes 150,000 technology professionals globally, with a large percentage from Africa. Andela’s talent marketplace in Africa spans 49 countries, including Nigeria, Kenya and Ghana.

The company fosters an active community for marketplace participants and has worked with numerous companies, including Google, Meta, Microsoft, AWS, and Nvidia, to train talent in technologies that offer vast workplace opportunities.

The need for cloud-native developers continues to increase and a recent study by CNCF revealed that almost 55% of developers landed a new job as a result of training and certification courses.

Almost 7 in 10 (67%) said it made them feel more engaged and fulfilled in their work. However, 8 in 10 (81%) also said cost prevented them from completing certifications.

“As a non-profit focused on growing open source and cultivating the IT talent needed to sustain it, partnerships – like this one with Andela – help us train and certify underrepresented groups, which is crucial to both our long-term success and amplify our impact,” said Clyde Seepersad, Senior Vice President and General Manager of Linux Foundation Education.


Kindly share this post
Continue Reading

E-Business

Breaking Barriers: QNET’s Product Expo Opens Doors for Nigerian Entrepreneurs

Published

on

Kindly share this post

QNET, a global lifestyle and wellness-focused direct-selling company, in partnership with Transblue Nigeria Ltd, hosted a successful Product Expo at Anchor Events Place, Ikeja, Lagos.

The event showcased QNET’s diverse product line, addressing misconceptions and empowering Nigerian entrepreneurs.

Mr. Akeem Ajisafe, Managing Director of Transblue Nigeria Ltd, emphasized the expo’s significance: “This is our opportunity to showcase our products, tackle misconceptions, and educate people about QNET’s direct-selling approach.”

QNET’s partnership with Transblue has yielded multiple workshops and exhibitions, promoting economic viability and youth empowerment.

Ajisafe highlighted the benefits: “QNET has contributed significantly to Nigeria’s tax revenue, and our programs teach entrepreneurship skills, enabling individuals to build their own businesses.”

Commander Mitchell Ofoyeju, Tincan Island Port Strategic Command, Lagos, praised QNET’s potential: “The product line is amazing, people-centric, and has great potential in Nigeria. It’s impressive, and I recommend it to young Nigerians.”

Ofoyeju emphasized QNET’s capacity-building opportunities: “This can generate wealth, increase productivity, and engage youth meaningfully, keeping them away from crime and illicit activities.”

The expo featured health products, luxury watches, jewelry, and educational materials, demonstrating QNET’s commitment to enhancing lives through innovative products.

As QNET continues to expand its presence in Nigeria, the partnership with Transblue is poised to empower entrepreneurs, promote economic growth, and foster a positive impact on Nigerian youth.


Kindly share this post
Continue Reading

Trending