Connect with us

Telecom

Cybercriminals Wiped Out Logs in 82% of Attacks – Sophos

Published

on

Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, has released its Active Adversary Report for Security Practitioners, which found that telemetry logs were missing in nearly 42% of the attack cases studied. In 82% of these cases, cybercriminals disabled or wiped out the telemetry to hide their tracks. The report covers Incident Response (IR) cases that Sophos analyzed from January 2022 through the first half of 2023.

Gaps in telemetry decrease much-needed visibility into organizations’ networks and systems, especially since attacker dwell time (the time from initial access to detection) continues to decline, shortening the time defenders have to effectively respond to an incident.

“Time is critical when responding to an active threat; the time between spotting the initial access event and full threat mitigation should be as short as possible.

“The farther along in the attack chain an attacker makes it, the bigger the headache for responders. Missing telemetry only adds time to remediations that most organizations can’t afford.

“This is why complete and accurate logging is essential, but we’re seeing that, all too frequently, organizations don’t have the data they need,” said John Shier, field CTO, Sophos.

Advertisement

In the report, Sophos classifies ransomware attacks with a dwell time of less than or equal to five days as “fast attacks,” which accounted for 38% of the cases studied. “Slow” ransomware attacks are those with a dwell time greater than five days, which accounted for 62% of the cases.

When examining these “fast” and “slow” ransomware attacks at a granular level, there was not much variation in the tools, techniques, and living-off-the-land binaries (LOLBins) that attackers deployed, suggesting defenders don’t need to reinvent their defensive strategies as dwell time shrinks.

However, defenders do need to be aware that fast attacks and the lack of telemetry can hinder fast response times, leading to more destruction.

“Cybercriminals only innovate when they must, and only to the extent that it gets them to their target. Attackers aren’t going to change what’s working, even if they’re moving faster from access to detection.

“This is good news for organizations because they don’t have to radically change their defensive strategy as attackers speed up their timelines.

Advertisement

“The same defenses that detect fast attacks will apply to all attacks, regardless of speed. This includes complete telemetry, robust protections across everything, and ubiquitous monitoring,” said Shier.

“The key is increasing friction whenever possible—if you make the attackers’ job harder, then you can add valuable time to respond, stretching out each stage of an attack.

“For example, in the case of a ransomware attack, if you have more friction, then you can delay the time until exfiltration; exfiltration often occurs just before detection and is often the costliest part of the attack.

“We saw this happen in two incidents of Cuba ransomware. One company (Company A) had continuous monitoring in place with MDR, so we were able to spot the malicious activity and halt the attack within hours to prevent any data from being stolen. Another company (Company B) didn’t have this friction; they didn’t spot the attack until a few weeks after initial access and after Cuba had already successfully exfiltrated 75 gigabytes of sensitive data.

“They then called in our IR team, and a month later, they were still trying to get back to business as usual.”

Advertisement

The Sophos Active Adversary Report for Security Practitioners is based on 232 Sophos Incident response (IR) cases across 25 sectors from Jan. 1, 2022, to June 30, 2023. Targeted organizations were located in 34 different countries across six continents. Eighty-three percent of cases came from organizations with fewer than 1,000 employees.

The Sophos Active Adversary Report for Security Practitioners provides actionable intelligence on how security practitioners should best shape their defensive strategy.

To learn more about attacker behaviors, tools and techniques, read the Active Adversary Report for Security Practitioners on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Surge in Fibre Cuts Hobbles Service Provisioning

Published

on

Kindly share this post

Nigeria’s telecom operators recorded 155, 397 fibre-cut incidents between April and May 2026, and these they blame on why  internet or calls suddenly stop working.

Surge in Fibre Cuts Hobbles Service Provisioning

 

Data from the Nigerian Communications Commission (NCC) showed fibre-cut incidents increased from 74 276 in April to a record 79 121 in May, bringing the two-month total to the highest level recorded by the industry.

This represents a 2 428% increase from the 5 934 incidents reported during the first quarter of 2026.

Vandalism remained the leading cause of fibre cuts, accounting for more than 54 000 incidents despite telecom infrastructure being designated as Critical National Information Infrastructure, a classification intended to strengthen protection of key digital assets.

Advertisement

Also road construction constantly damages fiber where iggers and machines tear up buried cables during road repairs or construction.

Even with all these, some state governments make it hard for companies to fix cables quickly across different areas with all manners of fees and levies.

The NCC designation provides for penalties of up to 10 years’ imprisonment for offenders, but operators continue to face widespread infrastructure damage.

Proposed solutions, including Nigeria’s Dig-Once policy and AI-powered fibre sensing technologies, have yet to achieve widespread adoption.

The NCC is developing a cost-based framework for shared underground duct infrastructure, while operators are exploring AI-powered fibre sensing technologies that can detect cable damage in real time and improve network resilience.

Advertisement

Nigeria is pursuing ambitious broadband targets under its National Broadband Plan and has expanded fibre deployment to about 35 000 kilometres.

However, infrastructure protection has not kept pace with network expansion, leaving subscribers vulnerable to unreliable connectivity despite continued operator investment.

 

Kindly share this post
Continue Reading

Telecom

Helios Towers Secures $29m Facility to Expand Across Africa

Published

on

Kindly share this post

Standard Bank has partnered with Helios Towers to provide a $29 million Social Documentary Credit Facility. According to the financial services company, this transaction marks Standard Bank’s first Documentary Credit Facility structured in a Sustainable Finance format.

It notes that the facility will support the procurement and importation of telecommunications infrastructure and related services across Africa.

It will also provide payment certainty to suppliers, while supporting Helios Towers’ working capital requirements and infrastructure expansion programme, the bank adds.

Structured in accordance with the Loan Market Association’s Social Loan Principles, the financing is designed to promote digital connectivity and telecommunications infrastructure development in underserved markets.

This will help Helios Towers further expand its footprint and enhance mobile network coverage and connectivity across the continent.

Advertisement

Helios Towers operates one of Africa’s independent telecommunications tower platforms, enabling mobile network operators to extend coverage across multiple markets.

Standard Bank notes that the facility supports the expansion of tower infrastructure and services, increased network densification and improved connectivity in underserved markets and remote regions across the African continent.

It will also drive digital inclusion and tackle the digital divide while supporting economic growth and socio-economic development.

“This transaction demonstrates the power of innovation in trade finance. By combining a first-to-market Social Documentary Credit Facility with a cross-border funding solution, Standard Bank has supported Helios Towers’ growth ambitions while helping extend digital connectivity to underserved communities across Africa,” says Benoit Samouilhan, global transaction banker at Standard Bank Corporate and Investment Banking.

According to the bank, this facility enables positive social impact by increasing and improving network coverage and connectivity in some of the world’s most remote regions.

Advertisement

“Reliable digital infrastructure is fundamental to Africa’s future growth and development,” says Alex Carter, group finance director at Helios Towers.

“This facility provides us with the flexibility and certainty needed to support our ongoing infrastructure investments while advancing our mission of expanding connectivity across the continent. We value our longstanding relationship with Standard Bank and look forward to building on this partnership.”

Kindly share this post
Continue Reading

Telecom

NCC Begins Stakeholder Consultation on MVNO Business Rules

Published

on

Kindly share this post

Nigerian Communications Commission (NCC) will on Thursday convene a stakeholders’ consultative forum to review the draft business rules for Mobile Virtual Network Operators (MVNOs) in Nigeria.

NCC Begins Stakeholder Consultation on MVNO Business Rules

NCC

The forum, scheduled to hold at 10 a.m. at the NCC Annex Office, Mbora, Abuja, is expected to bring together telecommunications operators, industry associations and other stakeholders to provide input on the proposed regulatory framework before its finalisation.

The commission announced the event on its official social media platforms, inviting interested stakeholders to participate in the consultation process.

The engagement is part of the NCC’s efforts to strengthen the regulatory framework for MVNO operations and promote greater competition, innovation and consumer choice in Nigeria’s telecommunications sector.

Mobile Virtual Network Operators are telecommunications service providers that offer mobile services by leasing network capacity from licensed Mobile Network Operators (MNOs), rather than owning spectrum licences or telecommunications infrastructure.

The NCC has identified the MVNO licensing framework as one of its initiatives aimed at deepening competition, expanding access to telecommunications services and driving digital inclusion across the country.

Advertisement

The consultative forum is expected to provide stakeholders with the opportunity to review the draft business rules, make recommendations and contribute to the development of a robust operational framework for the emerging MVNO segment.

The commission is expected to issue further details on the outcome of the consultation after the meeting.

Kindly share this post
Continue Reading

Trending