Connect with us

News

Report Shows Small Businesses in Nigeria Facing 89% Increase in Remote Desktop Protocol Attacks in 2022

Published

on

Kindly share this post

When a small business owner is faced with the responsibilities of production economics, financial reports and marketing all at the same time, cybersecurity can often appear complicated and, at times, unnecessary. However, this disregard for IT security is being exploited by cybercriminals.

Kaspersky researchers assessed the dynamics of attacks on small and medium-sized businesses between January and April 2022 and the same period in 2021, to identify which threats pose an increasing danger to entrepreneurs.

In 2022, the number of Trojan-PSW (Password Stealing Ware) detections in Nigeria more than doubled when compared to the same period in 2021 – 2654 detections in 2022 compared to 1076 in 2021. Trojan-PSW is a malware that steals passwords, along with other account information, which then allows attackers to gain access to the corporate network and steal sensitive information.

Another popular attack tool used on small businesses is Internet attacks, specifically, web pages with redirects to exploits, sites containing exploits and other malicious programs, botnet C&C centers, etc.

While the number of these attacks decreased in the first four months of 2022 in Nigeria (56 836 infections in 2022 compared to 99 146 infections in 2021), Internet attacks are still a concern and need to be protected against.

With the shift towards remote working, many companies have introduced the Remote Desktop Protocol (RDP), a technology that enables computers on the same corporate network to be linked together and accessed remotely, even when the employees are at home.

The number of attacks on RDP has increased significantly in Nigeria, by 89%. In the first four months of 2021, there were 161 000 RDP attacks detected and blocked by Kaspersky in the country. For the same period in 2022 the number has risen to 303 500 attacks.

Having a special security solution enables attack visualisation and provides IT administrators with a convenient tool for incident analysis. The faster they can analyse where and how a leak occurred, the better they will be able to solve any negative consequences.

The new edition of Kaspersky Endpoint Security Cloud, dubbed Kaspersky Endpoint Security Cloud Pro, contains advanced new capabilities, including automated response options and an extended set of security controls in a single solution.

The Pro version also includes built-in training for IT workers seeking to boost their cybersecurity skills and make the most out of their specialised security products.

Even small businesses with limited IT resources still need to protect all their working devices, including computers and mobile phones, from cyberthreats.

The updated Kaspersky Small Office Security is a key tool for startups, small online-stores and local businesses to keep all of their work devices protected, safely transfer any valuable business-related files and avoid falling victim to ransomware.

“With the shift to remote working and the introduction of numerous advanced technologies in the daily operations of even small companies, security measures need to evolve to support these sophisticated setups.

“Cybercriminals are already way ahead of the curve, so much so that virtually every organisation will experience a breach attempt at some point. For small companies today, it’s not a matter of whether a cybersecurity incident will happen but when.

“Having trained staff and an educated IT-specialist is no longer a luxury but a must-have part of your business development,” comments Denis Parinov, security researcher at Kaspersky.

To protect your business, Kaspersky recommends:

–  Providing your staff with basic cybersecurity hygiene training (https://bit.ly/3N2SdxR) as many targeted attacks start with phishing or other social engineering techniques.

–   Using a protection solution for endpoints and mail servers with anti-phishing capabilities to decrease the chance of infection through phishing emails.

–   Taking key data protection measures. Always safeguard corporate data and devices, including by using password protection, encrypting work devices and ensuring data is backed up.

–   Keeping work devices physically safe – do not leave them unattended in public, always lock them and use strong passwords and encryption software.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

News

Experts Reveal a Steady Decline of High-severity Incidents Over the Years

Published

on

Kindly share this post

According to the ‘Anatomy of a Cyber World: Global Report by Kaspersky Security Services’, there has been a noticeable decline in the percentage of high-severity incidents over the past few years.

While 2021 recorded the highest proportion at 14.3%, 2025 experienced the lowest in six years at just 3.8%. This trend indicates that many attack attempts were quickly detected and effectively mitigated by Kaspersky MDR experts, preventing their severity from escalating beyond medium levels.

High-severity incidents are defined as attacks involving direct human involvement that result in a significant impact on the customer’s IT infrastructure. In 2025, the number of such incidents detected by Kaspersky MDR decreased by 19% compared to 2024, highlighting improvements in early detection capabilities and more effective remediation efforts among Kaspersky MDR clients.

A detailed analysis of the root causes of these incidents in 2025 reveals the following insights:

Human-driven attacks accounted for approximately 23% of high-severity incidents. Although this represents a slight decrease from 2024, they continue to be the primary cause of serious breaches.

Kaspersky detected such attacks in nearly 21% of customers, demonstrating that motivated adversaries persist in bypassing automated defences. Despite advancements in automated detection tools, these highly skilled attackers still find ways to evade security measures.

Confirmed cyber exercises like Red Teaming made up over 23% of incidents. When activity is verified as part of security testing, it’s often classified as infrastructure false positives, though customers frequently report them as incidents.

Social engineering ranked third, responsible for over 15% of high-severity attacks and affecting nearly 18% of organisations. These are classified as high-severity when successful and not automatically remediated, often leading to security awareness recommendations.

Security policy violations constituted just under 14% of all cases, involving legitimate accounts performing suspicious actions like data exfiltration. Malware incidents represented less than 12%, while artifacts from past attacks, or APT traces, were found in over 7% of cases. Vulnerability detection, though not core focus for Kaspersky MDR, was reported in fewer than 5% of incidents.

“The decline in high-severity incidents highlights the critical importance of adopting a proactive cybersecurity strategy. Human-led solutions such as Managed Detection and Response (MDR) and Incident Response remain essential in combating sophisticated, human-driven threats.

To further enhance the effectiveness and efficiency of in-house security teams, organisations should incorporate advanced, automated solutions like Extended Detection and Response (XDR), which provide improved visibility and enable faster responses.

Additionally, leveraging SOC consulting services can assist in building a robust Security Operations Center from the ground up or optimising an existing one for maximum performance.

An integrated approach to hybrid security operations empowers organisations to detect threats early, contain them swiftly, and ultimately prevent severe breaches from occurring,” comments Sergey Soldatov, Head of Security Operations at Kaspersky.

 

 

 

 

 


Kindly share this post
Continue Reading

News

Google, UpSkill Universe Relaunch Hustle Academy to Bring Free AI Skills to Africans

Published

on

Kindly share this post

Google and UpSkill Universe, Sub-Saharan Africa’s leading AI and business skills training partner, have announced a major redesign of the Google Hustle Academy programme.

For the first time, the free training initiative is open to everyone, not just business owners. The new curriculum is focused on equipping individuals and entrepreneurs with practical AI skills.

Small businesses are the engine of Africa’s economy, creating over 80% of jobs on the continent. To help them grow, the Hustle Academy was launched in 2022, providing bootcamp-style training on business strategy, digital skills, AI, and leadership. The program has since trained over 18,000 SMEs, with many reporting increased revenue and job creation.

Now, as AI reshapes the job market, the program is evolving. The 2026 edition is built for anyone in Sub-Saharan Africa, including employees, students, and jobseekers, who wants to use AI to advance their career.

To meet the needs of a diverse audience, the new format includes short, 60-minute webinars and more immersive, high-impact bootcamps. These sessions are laser-focused on putting AI to work immediately in areas like digital commerce, marketing, and growth strategy.

Speaking about the academy, Gori Yahaya, Founder & CEO UpSkill Universe said “The 2026 Hustle Academy is designed to close the AI Skills gap with hands-on training that is short, focused, and immediately useful. AI is reshaping how businesses win and how careers are built, right across this continent.

“We’re excited to renew our partnership, now in its fifth year with Google, combining their global AI leadership with our deep regional AI expertise. The next wave of AI leaders will come from this continent. We are making sure they are ready.”

The Hustle Academy initiative has strengthened digital competitiveness across emerging African economies by enabling SMEs to move beyond AI awareness to practical implementation, positioning them for sustained growth in an increasingly AI-driven business environment.

“We believe that the future of Africa’s digital economy lies in the hands of individuals and entrepreneurs alike. Our new strategy focuses on scaling reach by training individuals in the latest AI-centered tools and techniques,” said a Google representative.

 


Kindly share this post
Continue Reading

News

Lagos Govt Drags Top Firms to Court Over Billion-Naira Tax Debts

Published

on

Kindly share this post

Lagos State has dragged 45 individuals and firms, including Bi-Courtney Aviation, DAAR Communications and Leaders & Company, to revenue court for tax debts running into billions of naira.

Lagos Govt Drags Top Firms to Court Over Billion-Naira Tax Debts

Lagos Govt

Bi-Courtney, operators of Murtala Muhammed Airport Terminal Two, faces N38.7 million claim; DAAR, behind Africa Independent Television, owes N22.4 million; ThisDay publishers Leaders & Company allegedly skip N67.1 million.

GMT Energy Resources tops corporates at N145.8 million, followed by Sheriff Deputies at N132.1 million; others like Heyden Petroleum, AA Rescue, BRT operator Primero also listed.

Individuals owe N13.5 million to N35 million each.

Attorney-General Lawal Pedro said suits followed ignored notices, aiming to enforce laws and fund infrastructure.

More defendants: IENG Nigeria, James Fisher, V Care Diagnostics, Venture Garden, Saro Africa, Barry Callebaut, Native Media, First Consulting, Eyowo Payments.

Compliant taxpayers post-notice escaped prosecution; defaulters risk penalties, interest, jail.

Pedro urged prompt filings and payments.


Kindly share this post
Continue Reading

Trending