Telecom
Cybercriminals Are Doubling Down on Credential Theft, Launching More Innovative Ransomware Attacks – Sophos 2023 Threat Report Reveals
Sophos, a global leader in innovating and delivering cybersecurity as a service, has on Monday published its 2023 Threat Report.
The report details how the cyberthreat landscape has reached a new level of commercialization and convenience for would-be attackers, with nearly all barriers to entry for committing cybercrime removed through the expansion of cybercrime-as-a-service.
The report also addresses how ransomware remains one of the greatest cybercrime threats to organizations with operators innovating their extortion tactics, as well as how demand for stolen credentials continues to grow.
Criminal underground marketplaces like Genesis have long made it possible to buy malware and malware deployment services (“malware-as-a-service”), as well as to sell stolen credentials and other data in bulk. Over the last decade, with the increasing popularity of ransomware, an entire “ransomware-as-a-service” economy sprung up.
Now, in 2022, this “as-a-service” model has expanded, and nearly every aspect of the cybercrime toolkit—from initial infection to ways to avoid detection—is available for purchase.
“This isn’t just the usual fare, such as malware, scamming and phishing kits for sale,” said Sean Gallagher, principal threat researcher, Sophos. “Higher rung cybercriminals are now selling tools and capabilities that once were solely in the hands of some of the most sophisticated attackers as services to other actors.
“For example, this past year, we saw advertisements for OPSEC-as-a-service where the sellers offered to help attackers hide Cobalt Strike infections, and we saw scanning-a-service, which gives buyers access to legitimate commercial tools like Metasploit, so that they can find and then exploit vulnerabilities.
“The commoditization of nearly every component of cybercrime is impacting the threat landscape and opening up opportunities for any type of attacker with any type of skill level.”
With the expansion of the “as-a-service” economy, underground cybercriminal marketplaces are also becoming increasingly commodified and are operating like mainstream businesses. Cybercrime sellers are not just advertising their services but are also listing job offers to recruit attackers with distinct skills. Some marketplaces now have dedicated help-wanted pages and recruiting staff, while job seekers are posting summaries of their skills and qualifications.
“Early ransomware operators were rather limited in how much they could do because their operations were centralized; group members were carrying out every aspect of an attack. But as ransomware became hugely profitable, they looked for ways to scale their productions. So, they began outsourcing parts of their operations, creating an entire infrastructure to support ransomware. Now, other cybercriminals have taken a cue from the success of this infrastructure and are following suit,” said Gallagher.
Indeed, as the cybercrime infrastructure has expanded, ransomware has remained highly popular—and highly profitable. Over the past year, ransomware operators have worked on expanding their potential attack service by targeting platforms other than Windows while also adopting new languages like Rust and Go to avoid detection. Some groups, most notably Lockbit 3.0, have been diversifying their operations and creating more “innovative” ways to extort victims.
“When we talk about the growing sophistication of the criminal underground, this extends to the world of ransomware. For example, Lockbit 3.0 is now offering bug bounty programs for its malware and ‘crowd-sourcing’ ideas to improve its operations from the criminal community. Other groups have moved to a ‘subscription model’ for access to their leak data and others are auctioning it off. Ransomware has become, first and foremost, a business,” said Gallagher.
The evolving economics of the underground has not only incentivized the growth of ransomware and the “as-a-service” industry, but also increased the demand for credential theft. With the expansion of web services, various types of credentials, especially cookies, can be used in numerous ways to gain a deeper foothold in networks, even bypassing MFA. Credential theft also remains one of the easiest ways for novice criminals to gain access to underground marketplaces and begin their “career.”
Sophos also analyzed the following trends:
·The war in Ukraine had global repercussions for the cyberthreat landscape. Immediately following the invasion, there was an explosion of financially motivated scams, while nationalism led to a shake-up of criminal alliances between Ukrainians and Russians, particularly among ransomware affiliates.
· Criminals continue to exploit legitimate executables and utilize “living off the land binaries” (LOLBins) to launch various types of attacks, including ransomware. In some cases, attackers deploy legitimate but vulnerable system drivers in“bring your own driver” attacks to attempt to shut down endpoint detection and response products to evade detection.
· Mobile devices are now at the center of new types of cybercrimes. Not only are attackers still using fake applications to deliver malware injectors, spyware and banking-associated malware, but newer forms of cyberfraud have been growing in popularity, such as “pig butchering” schemes. And this crime is no longer just affecting Android users, but iOS users as well.
· The devaluation of Monero, one of the most popular cryptocurrencies for cryptominers, led to a decrease in one of the oldest and most popular types of cryptocrime—cryptomining. But mining malware continues to spread through automated “bots” on both Windows and Linux systems.
To learn more about the changing threat landscape in 2022 and what it means for security teams in 2023, read the full Sophos 2023 Threat Report.
Nigerian Communication Commission (NCC) has said that mobile network operators (MNOs) have been directed to audit their billing systems, to address consumer complaints about data depletion.
The commission made this known in a statement on Friday.
“Quality of experience takes into account all touch points along the consumers’ journey in using telecom services from selection, through onboarding, usage, support and even off-boarding,” NCC said.
“This means that consumers are empowered to make the right network selection, enjoy a seamless onboarding into the network of their choice, enjoy quality service at fair costs, receive responsive customer service and enjoy protected off-boarding where they choose to leave the ntwork.
“To address consumer complaints on data depletion, the commission has directed mobile network operators (MNOs) to conduct an independent audit of their billing systems and is concluding a consultation process to simplify tariff plans.
“These initiatives would provide enhanced transparency to the consumer.”
elsewhere, the NCC said it is committed to tackling industry debt issues more seriously.
The commission said it has also embarked on critical advocacy initiatives to address long-term challenges in the sector, “including advocacy for designating telecom infrastructure as critical national infrastructure, as well as successfully persuading over six states to waive right of way (RoW) fees, even as he initiates discussions with more states”.
NCC said engagement is ongoing with the presidential committee on fiscal policy and tax reforms towards addressing multiple taxation issues in the telecoms sector.
Google for Startups has announced 24 startups selected for the 2024 cohort of the Growth Academy: AI for Health program. The program is designed to support high-potential startups across Europe, the Middle East, and Africa (EMEA) that are leveraging artificial intelligence (AI) to revolutionise healthcare and medical research.
Among the selected startups are Nigeria’s Healthtracka, Kenya’s Thalia Psychotherapy and TibuHealth, and South Africa’s Zoie Health. These companies exemplify the potential of AI to address pressing healthcare challenges in Sub-Saharan Africa, advancing mental health integration, providing accessible outpatient services, and delivering affordable healthcare to underserved populations.
According to the World Health Organization, more than 116 million people across Africa were already estimated to be living with mental health conditions pre-pandemic and as things stand, there are fewer than two mental health workers for every 100 000 people. Thalia Psychotherapy’s AI-powered chatbot provides initial assessments and therapy sessions, increasing access to mental health support in a region with a critical shortage of mental health professionals. TibuHealth, on the other hand, delivers affordable outpatient services via “minute clinics” in partner pharmacies in high-density neighbourhoods.
Dorothy Ooko, Head of Communications and Public Affairs, Google, Africa, said: “We are committed to supporting the growth of innovative startups, particularly those that are leveraging AI to address critical healthcare challenges. The Growth Academy: AI for Health program is a testament to this commitment, and we are excited to see the impact these startups will have on the future of healthcare.”
The three-month program will provide participants with intensive training, mentorship, and networking opportunities. Startups will benefit from workshops on best practices for AI, leadership development, responsible innovation, product design, and customer acquisition. Additionally, Google experts from Research, Health, Verily, Fitbit, and DeepMind will offer one-on-one mentorship sessions and technical project support.
Below are the participating startups, representing 13 countries from across Europe, the Middle East and Africa, and how they’re using AI models and technology to improve patient care and advance medical research:
Aide (United Kingdom) is a digital service that helps patients and clinicians better understand and manage chronic disease, specifically comorbidity.
AmplifAI (Saudi Arabia) combines AI driven thermography and computer vision to create a standardised and objective assessment for diabetic foot ulcers.
Biorce (Portugal) is developing solutions to enhance clinical trials through the power of AI, having created Jarvis, a clinical AI assistant.
C the Signs (United Kingdom) is an AI cancer prediction platform that helps identify patients at risk of cancer at its earliest and most curable stages.
Callyope (France) develops speech-based remote patient monitoring solutions that help caretakers assess treatment efficacy and detect relapses in serious mental illnesses such as depression, bipolar disorder and schizophrenia.
Clear.bio (Netherlands) works to reverse diabetes type 2 by precision nutrition, providing best in class digital therapeutic based on real-time glucometry.
Ephion Health (Spain) develops digital biomarkers to ensure accurate disease monitoring and therapy assessment, through wearables data, clinical reports and AI for precise patient assessment.
Exakt Health (Germany) is a certified medical app for physiotherapy and evidence-based training with hyper-personalised treatment plans.
FiveLives (France) is a digital brain health platform for people aged 50+ to take control of their cognitive health, through combining clinically-validated brain health assessment and an engaging coaching program.
Healthtracka (Nigeria) is decentralising access to healthcare in Africa through remote medical diagnostics, connecting users with a seamless way to access at-home lab tests, receive clear results and doctors consultations.
HearMe (Poland) supports employees’ mental health through anonymous and secure 1:1 sessions with mental health professionals.
Juniver (United Kingdom) delivers on-demand help for eating disorders, with AI-powered interventions for urges, evidence-based education, personalised tools, peer support and telemedicine.
Mindgram (Poland) is a platform offering a holistic solution providing employees and their relatives with psychological and self-development support around the clock.
Motherbeing (Egypt) is a digital solution dedicated to Arab women’s sexual and reproductive health. The platform connects users with doctors, experts, personalised health education and an AI-powered health assistant.
Noah Labs (Germany) develops a voice-based machine learning software for the early detection of decompensated heart failure.
Nui (Germany) is an app providing family caregivers with support through an intelligent chatbot that provides guidance to find answers to the most pressing questions.
O7 Therapy (Egypt) bridges the treatment gap with cutting-edge tech and top-tier mental health professionals. The O7 Therapy app offers instant, anonymous support via encrypted Chat, Audio and Video Sessions.
Powerful Medical (Slovakia) revolutionises cardiovascular diagnostics with its AI-driven platform, enabling healthcare professionals across the EU and beyond to diagnose and manage 39 cardiovascular conditions.
Research Grid (United Kingdom) is an automation engine enabling faster, more successful clinical trials by engineering smart software that safely automates back office admin across the full lifecycle.
Rofim (France) specialises in developing telemedicine software. The Rofim platform is a telemedicine platform designed to connect patients with healthcare professionals, enable diagnosis and improve access to care.
SYCAI Medical (Spain) develops medical device software with the aim of preventing the appearance of cancer in the abdomen non-invasively.
Thalia Psychotherapy (Kenya) is a mental health startup focused on integrating mental health services into primary healthcare systems.
TibuHealth (Kenya) delivers affordable outpatient services via “minute clinics” in partner pharmacies in high-density neighbourhoods.
Zoie Health (South Africa) is a digital health platform focused on providing underserved, high-need populations with affordable, accessible and healthcare.
In a move set to boost the country’s tech sector, the Federal Government, through NITDA, has signed a Memorandum of Understanding (MOU) to host the world’s largest technology fair, GITEX, for the first time in 2025.
The agreement was signed by Kashifu Inuwa Abdullahi, Director General and CEO of the National Information Technology Development Agency (NITDA), and Trixie LohMirmand, CEO of KAOUN International, the organisers of GITEX.
Speaking on the significance of signing the MOU, Inuwa said, “Bringing GITEX to Nigeria will introduce the experience of the best tech conference to our country.”
He further emphasised that this strategic initiative aligns with President Bola Ahmed Tinubu’s Renewed Agenda to reform the economy to deliver sustained growth.
“President Tinubu is big and loud on trade and economic diversification, and you cannot trade in isolation. The President has mandated us to facilitate parts of this diversification,” said Inuwa.
The NITDA Boss recognises that in today’s interconnected world, no country can thrive in isolation. Economic prosperity is increasingly tied to the ability to engage with global markets and integrate into the international trade ecosystem.
In line with this vision, President Tinubu has given a clear mandate to MDAs to actively facilitate and support initiatives that contribute to economic diversification in line with this administration’s redefined priority areas. This includes fostering the development of new industries, promoting innovation, and creating an environment conducive to technological advancement.
“The President’s directive is clear: we must build bridges with the rest of the world and leverage these connections to boost our economic growth. Through initiatives like GITEX Nigeria, we are creating platforms for our tech ecosystem to shine, demonstrating that Nigeria is not only open for business but is also a hub of innovation and creativity,” he added.
Trixie LohMirmand expressed her excitement about the partnership, citing the impressive track record of Nigerian teams at GITEX pitch competitions. She said Nigeria has positioned itself as the fastest-growing country for developers in Africa, with vast potential for untapped talent.
“By bringing GITEX to Nigeria, we aim to explore the country’s potential in sectors like AI, digital health, and fintech. The initiative aims to not only showcase local advancements but also integrate the Nigerian tech scene with the wider GITEX network, providing Nigerian startups with a platform to connect with new markets,” she said.
While a date for GITEX Nigeria has not been announced yet, this agreement marks a significant step forward in positioning Nigeria as a key player in the global tech scene and affirming President Tinubu’s strong stance on economic diversification and international trade integration to drive a comprehensive strategy to transform Nigeria’s economy.
AEDC to Disconnect Nigerian Police, Army Headquarters, Others Over Unpaid Debts – See List Below
First Bank Employee on the Run after Allegedly Diverting N40Bn
NCC Directs Telcos to Audit Billings to Address Data Depletion Complaints
Baobab Launches New App to Promote Financial Inclusion
MMS Africa Transforms African Broadcasting for the Digital Age with inq.
INTERPOL Appoints Uche, Nigerian CP as Chairman, African Heads of Cybercrime Units
SLTV Breaks Pay TV Monopoly, Offers Affordable Alternatives to Nigerians
Airtel Hosts Interactive Knowledge Session for Secondary School Girls
Binance Alleges Request of $150m Bribe by Some Nigerian Officials
NAN, SLTV to Partner on Local TV Content Promotion
Telecom2 days agoOADC achieves Tier-III certification in Johannesburg
E-Business3 days agoNDPC Investigates 40 Financial Sector Operators over Data Breach
Telecom2 days agoNCC: A Digital Enabler of the Renewed Hope Agenda
Telecom2 days agoMastercard, AfDB Partner to Accelerate Digital Transformation in Africa
News3 days agoNDDC Receives $142m from Shell Nigeria, Partners in 2023
Telecom2 days agoDavido’s ‘$Davido’ Meme Coin Is A ‘Crypto Scam’ Buy at Your Peril – Rume Ophi Warns
Telecom2 days agoQNET’s First Annual Convention of the Year Concludes with Resounding Success in Malaysia
E-Financial2 days agoPalmPay Honoured with ‘Customer Focused Digital Bank of the Year’ Award