Telecom
Cybercriminals Are Doubling Down on Credential Theft, Launching More Innovative Ransomware Attacks – Sophos 2023 Threat Report Reveals
Sophos, a global leader in innovating and delivering cybersecurity as a service, has on Monday published its 2023 Threat Report.
The report details how the cyberthreat landscape has reached a new level of commercialization and convenience for would-be attackers, with nearly all barriers to entry for committing cybercrime removed through the expansion of cybercrime-as-a-service.
The report also addresses how ransomware remains one of the greatest cybercrime threats to organizations with operators innovating their extortion tactics, as well as how demand for stolen credentials continues to grow.
Criminal underground marketplaces like Genesis have long made it possible to buy malware and malware deployment services (“malware-as-a-service”), as well as to sell stolen credentials and other data in bulk. Over the last decade, with the increasing popularity of ransomware, an entire “ransomware-as-a-service” economy sprung up.
Now, in 2022, this “as-a-service” model has expanded, and nearly every aspect of the cybercrime toolkit—from initial infection to ways to avoid detection—is available for purchase.
“This isn’t just the usual fare, such as malware, scamming and phishing kits for sale,” said Sean Gallagher, principal threat researcher, Sophos. “Higher rung cybercriminals are now selling tools and capabilities that once were solely in the hands of some of the most sophisticated attackers as services to other actors.
“For example, this past year, we saw advertisements for OPSEC-as-a-service where the sellers offered to help attackers hide Cobalt Strike infections, and we saw scanning-a-service, which gives buyers access to legitimate commercial tools like Metasploit, so that they can find and then exploit vulnerabilities.
“The commoditization of nearly every component of cybercrime is impacting the threat landscape and opening up opportunities for any type of attacker with any type of skill level.”
With the expansion of the “as-a-service” economy, underground cybercriminal marketplaces are also becoming increasingly commodified and are operating like mainstream businesses. Cybercrime sellers are not just advertising their services but are also listing job offers to recruit attackers with distinct skills. Some marketplaces now have dedicated help-wanted pages and recruiting staff, while job seekers are posting summaries of their skills and qualifications.
“Early ransomware operators were rather limited in how much they could do because their operations were centralized; group members were carrying out every aspect of an attack. But as ransomware became hugely profitable, they looked for ways to scale their productions. So, they began outsourcing parts of their operations, creating an entire infrastructure to support ransomware. Now, other cybercriminals have taken a cue from the success of this infrastructure and are following suit,” said Gallagher.
Indeed, as the cybercrime infrastructure has expanded, ransomware has remained highly popular—and highly profitable. Over the past year, ransomware operators have worked on expanding their potential attack service by targeting platforms other than Windows while also adopting new languages like Rust and Go to avoid detection. Some groups, most notably Lockbit 3.0, have been diversifying their operations and creating more “innovative” ways to extort victims.
“When we talk about the growing sophistication of the criminal underground, this extends to the world of ransomware. For example, Lockbit 3.0 is now offering bug bounty programs for its malware and ‘crowd-sourcing’ ideas to improve its operations from the criminal community. Other groups have moved to a ‘subscription model’ for access to their leak data and others are auctioning it off. Ransomware has become, first and foremost, a business,” said Gallagher.
The evolving economics of the underground has not only incentivized the growth of ransomware and the “as-a-service” industry, but also increased the demand for credential theft. With the expansion of web services, various types of credentials, especially cookies, can be used in numerous ways to gain a deeper foothold in networks, even bypassing MFA. Credential theft also remains one of the easiest ways for novice criminals to gain access to underground marketplaces and begin their “career.”
Sophos also analyzed the following trends:
·The war in Ukraine had global repercussions for the cyberthreat landscape. Immediately following the invasion, there was an explosion of financially motivated scams, while nationalism led to a shake-up of criminal alliances between Ukrainians and Russians, particularly among ransomware affiliates.
· Criminals continue to exploit legitimate executables and utilize “living off the land binaries” (LOLBins) to launch various types of attacks, including ransomware. In some cases, attackers deploy legitimate but vulnerable system drivers in“bring your own driver” attacks to attempt to shut down endpoint detection and response products to evade detection.
· Mobile devices are now at the center of new types of cybercrimes. Not only are attackers still using fake applications to deliver malware injectors, spyware and banking-associated malware, but newer forms of cyberfraud have been growing in popularity, such as “pig butchering” schemes. And this crime is no longer just affecting Android users, but iOS users as well.
· The devaluation of Monero, one of the most popular cryptocurrencies for cryptominers, led to a decrease in one of the oldest and most popular types of cryptocrime—cryptomining. But mining malware continues to spread through automated “bots” on both Windows and Linux systems.
To learn more about the changing threat landscape in 2022 and what it means for security teams in 2023, read the full Sophos 2023 Threat Report.
Elon Musk’s X (formerly Twitter) has launched a new stand-alone messaging app on iOS devices, called XChat.
Elon Musk
This app will help users connect their existing X contacts for calling, chatting, and sharing files. This move shows how Musk’s previous idea of creating a single ‘everything app’ seems to shift to a different strategy now.
This newly launched app comes with features such as audio and video calling, text messaging, group chats, and file sharing.
Moreover, it features privacy-focused tools like disappearing messages, the option to delete and edit messages for everyone, and a feature that blocks screenshots.
Looking at these features, the XChat seems to take on WhatsApp and Messenger.
However, the tech firm said that the app has no tracking or ads.
In terms of privacy, X claimed that the instant messaging app is end-to-end encrypted and comes with a PIN.
This app is currently available to iOS users only, and more updates are expected in the near future, as teased by Benji Taylor, the X’s lead designer. The launch of this app reflects a shift in Musk’s strategy about turning X into an ‘everything’ app that will include payments, shopping, messaging, and more combined in one place.
However, the focus of xAI seems to be different now as the company seems to be developing several different apps instead of combining everything into one.
This approach may help X to reach users through their various services rather than a single platform.
While XChat focused on messaging currently, the tech firm is also reportedly testing a separate payments system, which is not available to the public so far.
More features and updates to the instant messaging app are likely to be arriving in the coming months as X continues to grow its ecosystem with more apps.
Technology Company, Globacom has unveiled two vibrant television commercials, “Road Trip” and “Department of Imagination,” reinforcing the telecommunications giant’s dedication to providing seamless, reliable connectivity for every lifestyle.
These engaging campaigns illustrate how Glo remains an essential partner in both our daily routines and our boldest future aspirations.
“Road Trip” captures a relatable family adventure filled with laughter and authentic moments. The story follows Toyin Abraham Ajeyemi as she experiences the frustration of poor signal—only to find that switching to Glo transforms the experience instantly. Whether it’s navigation, downloading content, or staying entertained, the difference is clear with Glo, which ensures you stay connected no matter where the road takes you.
Starring alongside Toyin Abraham Ajeyemi, the commercial featured Bolaji Ogunmola and others and their combination brought the best out of the TVC.
Users can easily access data plans by dialling *312#, ensuring smooth, uninterrupted service on the go.
Department, on the other hand transports viewers to a futuristic landscape where technology bridges the gap between creativity and reality.
Guided by the renowned Richard Mofe-Damijo (The Professor), the story explores how powerful ideas turn into extraordinary experiences. It showcases a smarter, more dynamic world—from real-time gaming to advanced culinary processes demonstrated by Hilda Baci and creative tech integration by Bamike Adenibuyan (Bam-Bam).
The unique feature of the story is each scene serving as a testament to how Glo is actively shaping a future where technological possibilities are infinite.
The Glo’s latest commercials carry a unified, powerful message: The future is here, and it is powered by Glo.
Young innovators and entrepreneurs from across Nigeria converged at the “Gathering on 100,” a 100-hour non-stop youth-focused experience powered by MTN, to showcase ideas, build networks, and compete for funding in a major startup pitch competition.
Pitchathon
The event, described by organisers as a convergence of creators, founders, and culture shapers, featured a Pitchathon segment that awarded a total of ₦45 million to eight outstanding startups selected from 30 participants spanning sectors such as Artificial Intelligence, FinTech, HealthTech, EdTech, Internet of Things (IoT), AgriTech, DefenceTech, and CreativeTech.
The competition underscored what participants called a “Gen Z approach to business,” combining innovation, speed, and community-driven growth models.
At the end of the contest, Hurpham Africa, led by Sesan Kareem, emerged overall winner, securing ₦15 million alongside enterprise partnership and co-development access from MTN.
Coconoto Ltd, founded by Jacob Oluwayannife, clinched the second runner-up position with a prize of ₦10 million, while Rava Send, represented by Emmanuel Isaka, emerged third runner-up, receiving ₦5 million.
Five other startups — URI Social, Dulces Jams, Kindly Book, Africa Medical Marketplace, and MyFund — each received ₦3 million in recognition of their innovative solutions and growth potential.
Organisers said the initiative was designed not only to reward innovation but also to equip young founders with critical business skills through mentorship and real-time engagement with industry leaders.
The Pitchathon formed part of a broader industry showcase where emerging technology startups presented solutions aimed at deepening financial inclusion and accelerating e-commerce growth across Africa.
Among the presenters was a fintech platform led by Charles Dairo, which is focused on simplifying cross-border transactions. According to Dairo, the platform has recorded more than 10,000 user registrations, with about 30 per cent actively transacting.
He said the company is deploying a localized incentive system to drive user engagement and convert inactive users, noting that a referral programme already contributes roughly 15 per cent of organic growth.
The platform operates a 0.5 per cent transaction fee model and leverages strategic banking partnerships to ensure liquidity. It also integrates stablecoins such as USD Coin to enhance cross-border payment efficiency and expand interoperability across mobile money ecosystems.
Stakeholders noted that such innovations could help address long-standing challenges in Africa’s payments landscape, including high transaction costs and limited system integration.
In the e-commerce space, startups like Jakuta demonstrated the use of artificial intelligence to simplify purchasing decisions and improve operational efficiency.
The platform combines voice technology with mobile messaging tools such as WhatsApp to guide users through transactions, while also enabling device trade-ins through automated video analysis.
Developers said the system currently supports operations in about 20 countries and is capable of handling high volumes of daily interactions, including automated customer engagement processes.
They added that the solution automates routine merchant tasks such as inventory management and customer follow-ups, even in low-connectivity environments, thereby expanding access for small and medium-sized enterprises.
Founders also disclosed ongoing efforts to partner with telecommunications providers to reduce communication costs and scale adoption of their platforms.
Industry analysts at the event observed that many startups are increasingly prioritising customer lifetime value, reinvesting revenues into marketing, user acquisition, and product optimisation to build resilient and scalable business models.
They noted that such strategies are essential for navigating challenges including exchange rate volatility, infrastructure gaps, and regulatory complexities across African markets.
The “Gathering on 100” highlighted the growing influence of youth-led innovation in shaping Nigeria’s digital economy, with stakeholders expressing optimism that sustained collaboration between startups, financial institutions, and telecom operators would accelerate digital inclusion and unlock new economic opportunities.
SERAP, NGE Sue NBC over Threat to Sanction Broadcasters
CRMI Backs CBN’s New Measures to Curb Fraud
NRS Debunks Viral Claim of New Tax on Vehicle
NCC to Intensify Crackdown on Illicit Network to Protect Copyrights
Elon Musk Launches XChat with Video Calling to Take on WhatsApp, Messenger
FG to Gift Nigerians over 100 Free TV Channels from May 15
Microsoft Revamps Copilot in Workplace AI Push
Dangote Refinery Debunks Speculations on IPO
What Adekunle Gold’s Support Means for ‘The Gathering on 100
NRS Takes Over Mineral Royalties Collection Under New Tax Laws
Telecom3 days agoNCC Blames Growing Data Demand Network Quality Issues
E-Financial3 days agoBank Customers to Pay N1,500 for ATM Card Issuance, Replacement – CBN
E-Business3 days agoKaspersky Discovers Vulnerability in Qualcomm Snapdragon Chips that can Lead to Data Loss & Device Compromise
E-Financial3 days agoATM Card Fees Jump to ₦1,500 as CBN Scraps Maintenance Charges
News3 days agoCADEF, Stakeholders Push for Zero Added Sugar Standards in Infant Foods
E-Financial3 days agoProvidusBank Launches Ado-Ekiti Branch, Eyes Nationwide Rollout
Telecom3 days agoHow Nigerians Are Secretly Using AI to Master Creative Skills Fast
General News3 days agoSummit Factory Opens in Ogun, Targets Hygiene Market Expansion