Telecom
Sophos Detects How Cyberattackers Are Exploiting Apache Log4Shell Vulnerability to Exploit Unpatched Systems

Following the reporting of the Apache Log4Shell vulnerability, Sophos has provided new threat intelligence on how cyberattackers are already exploiting or attempting to exploit unpatched systems.

The threat intelligence as detailed in the SophosLabs Uncut report, Log4Shell Hell: Anatomy of an Exploit Outbreak, shows that Sophos is seeing a rapid uptick in attacks exploiting or attempting to exploit this vulnerability, with hundreds of thousands of attempts detected so far.
The report also indicated that Cryptomining botnets are among the earliest “attack” adopters; botnets focus on Linux server platforms, which are particularly exposed to this vulnerability.
Sophos has also seen attempts to extract information from services, including Amazon Web Services keys and other private data.
The company said it observed that attempts to exploit network services start by probing for different types.
Around 90 percent of the probes Sophos detected were focused on the Lightweight Directory Access Protocol (LDAP.) A smaller number of probes targeted Java’s Remote Interface (RMI,) but Sophos researchers noted that there seem to be a larger variety of unique RMI-related attempts
Sophos said it expects adversaries to intensify and diversify their attack methods and motivations in the coming days and weeks, including the possibility of leveraging for ransomware.
According to Sean Gallagher, senior threat researcher at Sophos, in the SophosLabs Uncut report issued on Dec. 9, Sophos has detected hundreds of thousands of attempts to remotely execute code using the Log4Shell vulnerability.
“Initially, these were Proof-of-Concept (PoC) exploit tests by security researchers and potential attackers, among others, as well as many online scans for the vulnerability. This was quickly followed by attempts to install coin miners, including the Kinsing miner botnet.
“The most recent intelligence suggest attackers are trying to exploit the vulnerability to expose the keys used by Amazon Web Service accounts.
“There are also signs of attackers trying to exploit the vulnerability to install remote access tools in victim networks, possibly Cobalt Strike, a key tool in many ransomware attacks.
“The Log4Shell vulnerability presents a different kind of challenge for defenders. Many software vulnerabilities are limited to a specific product or platform, such as the ProxyLogon and ProxyShell vulnerabilities in Microsoft Exchange. Once defenders know what software is vulnerable, they can check for and patch it.
“However, Log4Shell is a library that is used by many products. It can therefore be present in the darkest corners of an organization’s infrastructure, for example any software developed in-house. Finding all systems that are vulnerable because of Log4Shell should be a priority for IT security.
“Sophos expects the speed with which attackers are harnessing and using the vulnerability will only intensify and diversify over the coming days and weeks. Once an attacker has secured access to a network, then any infection can follow.
“Therefore, alongside the software update already released by Apache in Log4j 2.15.0, IT security teams need to do a thorough review of activity on the network to spot and remove any traces of intruders, even if it just looks like nuisance commodity malware”, Gallagher added,
New and additional information on how Log4Shell works is also available in the Sophos Naked Security article, Log4Shell Explained – How it Works, Why You Need to Know, and How to Fix It, by Paul Ducklin.
According to Paul Ducklin, principal research scientist at Sophos: “Technologies including IPS, WAF and intelligent network filtering are all helping to bring this global vulnerability under control.
“But the staggering number of different ways that the Log4Shell ‘trigger text’ can be encoded, the huge number of different places in your network traffic that these strings can appear, and the wide variety of servers and services that could be affected are collectively conspiring against all of us.
“The very best response is perfectly clear: patch or mitigate your own systems right now. Our article provides practical advice that explains how the vulnerability works, why it works, what it can do, and how to fix it.”
Sophos threat intelligence experts are continuing to monitor Log4Shell.
Telecom
MTN Nigeria Crowns Ayo Benzi Winner of Next Afrobeats Star

MTN Nigeria, in collaboration with ONErpm and Ultima Studios, has announced Ayodeji Benson, popularly known as Ayo Benzi, as the winner of the maiden edition of the Next Afrobeats Star reality show.

L-R: Onyinye Ikenna-Emeka, Chief Marketing Officer, MTN Nigeria; Ayodeji Benson, Winner, Next Afrobeats Star Reality Show (Season 1) and Emamoke Ogoro, General Manager, Brand and Communication, MTN Nigeria, at the grand finale of the Next Afrobeats Star Reality Show (Season 1), held at the Ultima Studios, Lekki, Lagos on Saturday, December 13, 2025.
The grand finale, held on Sunday night at Ultima Studios in Lekki, Lagos, marked the climax of a nationwide talent search that began in September with over 15,000 aspiring musicians.
After weeks of auditions, mentorship, and rigorous training, five finalists – Ayo Benzi, Dave Cash, Kaeko, Somto O’Laker, and Lucky Yay – battled for the top prize in a high-energy showcase of performance and artistry.
At the end of the electrifying contest, Ayo Benzi emerged victorious, securing a ₦150 million music deal. Dave Cash was named first runner-up with ₦100 million, while Kaeko, Somto O’Laker, and Lucky Yay received ₦75 million, ₦50 million, and ₦25 million respectively.
Throughout the season, contestants were mentored by leading Afrobeats producers Sarz, Puffy Tee, P Prime, and Andre Vibez. Benzi, who was part of Puffy Tee’s team, credited the mentorship programme for sharpening his craft and stage presence.
Speaking at the event, Onyinye Ikenna-Emeka, Chief Marketing Officer of MTN Nigeria, said the initiative reflects the company’s commitment to youth empowerment and cultural expression.
“The Next Afrobeats Star platform is about creating real opportunities for young Nigerians and giving their talent the structure, visibility, and support it deserves.
“Afrobeats continues to place Nigeria on the global cultural map, and MTN is proud to be enabling the next generation of artists who will take this sound even further,” she said.
She added that the finale was not just a competition but a celebration of growth and readiness for the global stage.
In his acceptance speech, Ayo Benzi described the victory as a defining moment in his career.
“A big thank you to MTN. From the audition days, the treatment MTN has given us has been amazing. God bless the brand,” he said.
The finale also featured guest performances by Afrobeats stars Iyanya and Bella Shmurda, adding glamour to the night and reinforcing the show’s connection to the wider music ecosystem.
With the successful conclusion of the season, MTN Nigeria and its partners reaffirmed their role in championing youth ambition, supporting creative industries, and shaping the future of Nigerian music through platforms that turn potential into opportunity.
Telecom
T2 Faces NCC Probe in Benue Over Major Service Outage in 9 LGAs

T2, formerly known as 9mobile, is under investigation by the Nigerian Communications Commission (NCC) in Benue State for an undisclosed incident disrupting USSD, SMS, voice, and data services across nine local government areas.

T2
The affected areas include Ado, Agatu, Gwer East, Gwer West, Konshisha, Obi, Ohimini, Okpokwu, and Otukpo, as detailed in an advisory on the NCC Major Outages Portal, which tracks significant disruptions reported by Mobile Network Operators (MNOs) and Internet Service Providers (ISPs).
Neither T2 nor its public relations firm, Chain Reactions, has responded to inquiries on the outage’s cause or restoration efforts as of this report.
The NCC’s continued reference to the operator as 9mobile, months after its public rebranding to T2 in August 2025, has sparked questions about whether the name change was formally notified to the regulator.
This probe aligns with NCC mandates requiring operators to disclose major outages, their impacts, and timelines for fixes, with compensation obligatory for disruptions exceeding 24 hours under the Consumer Code of Practice Regulations.
Industry watchers note that such incidents, often linked to fibre cuts, power failures, or infrastructure faults, underscore ongoing challenges in Nigeria’s telecoms sector, particularly amid T2’s subscriber losses post-rebrand. NCC vows transparency via its portal to hold operators accountable and protect consumers.
Telecom
NCC Grants 45 Days for Telecoms Firms to Fix Unapproved Shareholding Changes

Nigerian Communications Commission (NCC) has issued a public notice directing all its licensees that have effected changes exceeding ten percent (10%) in their shareholding structures without prior regulatory approval to immediately regularise such infractions.

NCC
In the notice published on the Commission’s website, www.ncc.gov.ng, the NCC said the directive was issued in exercise of its statutory powers under the Nigerian Communications Act, 2003.
According to the Commission, affected licensees are granted a 45-day grace period from the date of publication to regularise any unapproved changes in their shareholding structures that exceed the 10 per cent threshold.
The NCC clarified that no sanctions will be imposed during the 45-day window for any previous infractions relating to unapproved shareholding changes above the prescribed limit. However, it warned that appropriate sanctions will be enforced immediately after the expiration of the grace period against defaulting operators.
The sanctions, the Commission stated, will be applied in line with the Nigerian Communications (Enforcement Processes, etc.) Regulations, 2019.
The regulator further emphasised that the notice is issued pursuant to Regulations 41, 42 and 43 of the Licensing Regulations, 2019, which require licensees to obtain prior approval from the Commission before effecting significant changes in ownership or control.
Industry observers note that the directive underscores the NCC’s renewed focus on regulatory compliance, transparency, and corporate governance within Nigeria’s telecommunications sector.
Licensees have therefore been advised to promptly engage with the Commission to regularise their shareholding structures and avoid penalties once the grace period lapses.
E-Financial2 days agoBanks to Impose N50 Stamp Duty on Transfers of N10,000 and Above from January 1
E-Financial2 days agoFIRS Rebrands as Nigeria Revenue Service, as New Tax Laws Take Effect
E-Financial2 days agoHow Nigeria’s New Tax Law Could Redefine Risk in the Banking Sector
Broadcasting2 days agoHow to Use the Correlation of Gold with Other Trading Assets in the Forex Market
E-Business2 days agoGalaxy Backbone Celebrates the Federal Government’s Paperless Civil Service Milestone
General News1 day agoNigeria Police suspends tinted glass permit enforcement over court injunction
E-Financial8 hours agoFidelity Bank Appoints Onwughalu as New Chairman After Chike-Obi’s Tenure
Broadcasting8 hours agoDStv Offers Instant Package Upgrade for Customers from January to February
















