Connect with us

News

Nigeria’s Financial, Telecoms’ Firms Hit by 586,130 Cyber Attacks in Six Months

Published

on

Kindly share this post

Cybervergent, a cybersecurity-focused technology company, at the weekend released its half year cyber threat report on the activities of hackers that focus their attacks on Nigeria’s financial institutions and telecoms companies, revealing how it detected 586,130 attacks on organisations that it manages in Nigeria.

Nigeria’s Financial, Telecoms Firms Hit by 586,130 Cyber Attacks in Six Months

The attacks mostly external, were monitored from January to June 2024.

Among the 586,130 attacks launched on various organisations, Cybervergent was able to resolve 226,103 of the attacks by automation, while 19,920 endpoints were protected by Cybervergent.

According to the report, events analysed by Cybervergent’s Security Operations Centre (SOC), reached 304,522, while all potentially malicious events analysed by Cybervergent within the same six months period, reached 42,200.

Analysing the report, Mr. Gbolabo Awelewa, chief solutions officer at Cybervergent, said with the increasing threat in cyberspace, organisations must ensure that regular application and systems updates are carried out on existing applications and systems to prevent the attacks at scale.

“As we move forward, our Cyber Operations Centre remains steadfast in its mission to anticipate, detect, and thwart evolving threats that seek to compromise the integrity of digital assets. With a deep understanding of the threat landscape and a relentless pursuit of innovative security solutions, we are poised to continue our unwavering defense of the financial sector and other industries’ digital landscape, safeguarding organisations’ trust and confidence in the face of ever-changing cybersecurity challenges,” Awelewa said.

Highlighting the threat actors that targeted Nigeria in the first half of the year, Awelwewa listed them to include: Gelsemium, Equation Group, Lyceum, Gamaredon, Circus Spider, Mirage, Common Raven, Bronze Highland, Earth Krahang, as well as Insider Threat Syndrome.

According to him, Gelsemium is a sophisticated cyber espionage group known for its targeted attacks on high profile organisations across various sectors.

“They use custom malware and advanced techniques to evade detection, and their target is on public administration, educational services and national security,” he said.

Awelewa described the different types of insider threats to include: Disgruntled Employees, Accidental Insiders and Negligent Insiders. He explained that motivated by anger, financial gain, or a feeling of being benched, the disgruntled employee could inflict serious damage, while accidental insiders are those that capitalise on mistakes of others to launch an attack on the organisation.

He said the negligent insiders are those that reveal their credentials to others or forget to lock their laptops when leaving the office, advising on staff duty rotation and compulsory leave for all staff.

The report highlighted cybersecurity trends that organisations and institutions must tackle in the second quarter of 2024 as Zero-Day Exploits, where hackers exploit unknown vulnerabilities before anyone can patch them; Cloud Security Focus, since every organisation and institution is moving to the cloud; Cybercrime as-a-service, which allows hackers to launch frequent attacks; and Ransomware Surge, with attackers likely to use more sophisticated encryption and sneaky tactics to avoid detection and maximise the impact, including insider threats.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

News

IEEE CTU-EMEA Summit Organizers Hold Strategic Meeting with Baze University Management

Published

on

Kindly share this post

The Local Organising Committee of the IEEE Connecting the Unconnected Europe, Middle East, and Africa (CTU-EMEA) Summit 2025 on Wednesday paid a courtesy visit to the management of Baze University, Abuja, in preparation for the international conference scheduled to hold from Nov. 27 to 28.

The visit, which brought together top officials from IEEE Nigeria Section and senior management of Baze University, focused on finalising arrangements for the summit themed “Bridging Digital Frontiers: African Solutions for Universal Connectivity.”

Speaking during the meeting, Mr. Chukwuemeka Gerald Okafor, General Conference Chair, described the summit as a historic milestone for Nigeria’s digital transformation agenda.

“This is the first time Nigeria is hosting an IEEE CTU international summit of this magnitude. Over 200 global leaders—ministers, regulators, CEOs, and innovators—will converge in Abuja to address the challenge of connecting 2.9 billion unconnected people worldwide,” Okafor said.

He disclosed that high-profile speakers had confirmed participation, including government ministers, representatives of the World Bank and International Telecommunication Union (ITU), telecom executives, and researchers from across the EMEA region.

Also speaking, Prof. Osita, Deputy Vice Chancellor (Academics), who represented the Vice Chancellor of Baze University, expressed the institution’s readiness to host the summit.

“We are honoured that IEEE selected Baze University as the venue for this prestigious event. It aligns with our vision of becoming a hub for technology innovation and global academic collaboration,” Osita said.

The summit programme includes an opening ceremony with ministerial presence, eight technical tracks, panel discussions, paper presentations, workshops, and an exhibition area for technology companies and startups.

Social events such as a Welcome Cocktail on Nov. 26 and a Gala Dinner on Nov. 28 are also planned to foster networking and collaboration.

Ms. Nneoma Offodile, Chair of the Local Organising Committee, said the summit would leave a lasting legacy for Nigerian students, especially those at Baze University.

“There will be volunteer opportunities, discounted registration, and exposure to global experts. We want students to benefit directly from this gathering,” she said.

The meeting also addressed logistical arrangements including venue setup, technology infrastructure, catering, accommodation, and security for international delegates.

IEEE, founded in 1884, is the world’s largest technical professional organisation with over 423,000 members globally. Its CTU programme focuses on bridging the digital divide through research, innovation, and stakeholder engagement.

Engr. Abdulateef Aliyu, IEEE Region 8 Representative, said the summit affirms Nigeria’s capacity to host world-class events and positions the country as a strategic hub for technology discourse in Africa.

The organising committee called on Nigerian ICT professionals, telecom operators, corporate sponsors, researchers, and students to participate actively in the summit.

Prof. Ifeayinwa Achumba, IEEE Nigeria Section Chair, said the summit would showcase scalable African solutions to global connectivity challenges.

Follow-up meetings are scheduled to finalise technical details and coordinate logistics ahead of the November event.


Kindly share this post
Continue Reading

News

65m Nigerians Pushed into Poverty as GDP Per Capita Falls 66% – Report

Published

on

Kindly share this post

Over 65 million Nigerians were reportedly pushed into poverty in 2024 following a 66 per cent decline in the country’s gross domestic product (GDP) per capita, according to a new report by Quartus Economics.

The report, titled “Forty Years of Structural Adjustment: Is Africa’s Eagle Stuck or Soaring Back to Life?”, examined Nigeria’s economic trajectory since the introduction of the Structural Adjustment Programme (SAP) in 1986.

Quartus noted that while the reforms helped grow Nigeria’s GDP from $87.5 billion in 1990 to $252 billion in 2024, the country’s economic structure remained fragile, with the naira losing 99.7 per cent of its value over the same period.

The report stated that liberalisation, privatisation, and banking reforms initially boosted private investment and manufacturing, but policy reversals and weak implementation undermined progress.

“Policy inconsistencies and weak implementation led to a recurring cycle of mixed results and missed opportunities,” the report said. “The goal of inclusive, export-led growth has remained elusive.”

Between 2014 and 2023, Nigeria experienced its worst growth slowdown in a generation, driven by falling oil prices, population pressures, restrictive fiscal and monetary policies, and governance lapses. Inflation rose above 30 per cent, capital inflows declined, and economic stagnation persisted.

However, the report praised the 2023–2024 reforms, including the removal of petrol and foreign exchange subsidies, as decisive measures that began correcting structural distortions.

By late 2024, GDP growth rebounded to nearly 4 per cent, with renewed strength in the manufacturing and mining sectors. Foreign reserves rose to $42 billion by October 2025, and inflation began to ease slightly.

Despite these improvements, Quartus warned that per capita income remains far below pre-crisis levels and that Nigeria’s export base and governance systems still face deep inefficiencies.

“The recovery is real, but lasting transformation will depend on discipline, continuity, and collective commitment to reform,” the report concluded.


Kindly share this post
Continue Reading

News

BlueNoroff Targets Eecutives on Windows and MacOS Using AI-driven Tools

Published

on

Kindly share this post

At the Security Analyst Summit in Thailand, Kaspersky’s Global Research and Analysis Team (GReAT) unveiled the latest BlueNoroff APT activity through two highly targeted malicious campaigns ‘GhostCall’ and ‘GhostHire’. The ongoing operations have been targeting Web3 and cryptocurrency organisations across India, Turkiye, Australia and other countries in Europe and Asia since at least April 2025.

BlueNoroff, a subdivision of the notorious Lazarus group, continues to expand its signature ‘SnatchCrypto’ campaign, a financially motivated operation which targets crypto industries worldwide. The newly described GhostCall and GhostHire campaigns employ new infiltration techniques and customised malware to compromise blockchain developers and executives. These attacks affect macOS and Windows systems as primary targets and are managed through a unified command-and-control infrastructure.

The GhostCall campaign focuses on macOS devices, beginning with a highly sophisticated and personalised social engineering attack. The attackers reach out via Telegram, impersonating venture capitalists and in some cases using compromised accounts of real entrepreneurs and startup founders to promote investment or partnership opportunities. The victims are invited to fake investment meetings on phishing sites mimicking Zoom or Microsoft Teams during which they are prompted to “update” their client to fix an audio issue, this action downloads a malicious script and deploys a malware infection on the device.

“This campaign relied on deliberate and carefully planned deception. Attackers replayed videos of previous victims during staged meetings to make the interaction appear like a real call and manipulate new targets. The data collected in this process is then used not only against the initial victim but also exploited to enable subsequent and supply-chain attacks, leveraging established trust relationships to compromise a broader range of organisations and users,” comments Sojun Ryu, security researcher at Kaspersky GReAT.

Attackers deployed seven multi-stage execution chains, four which were previously unseen, to distribute a range of new customised payloads, including crypto stealers, browser credential stealers, secrets stealer, and Telegram credential stealers.

In the GhostHire campaign the APT targets blockchain developers by posing as recruiters. Victims are tricked into downloading and running a GitHub repository containing malware, presented as a skill assessment. GhostHire shares its infrastructure and tools with the GhostCall campaign, but instead of using video calls, it focuses on approaching hands-on developers and engineers through fake recruitment. After initial contact, victims are added to a Telegram bot that delivers either a ZIP file or a GitHub link, along with a short deadline to complete the task. Once executed, the malware installs itself on the victim’s machine, customised for the operating system.

The use of generative AI has enabled BlueNoroff to accelerate malware development and refine its attack techniques. The attackers introduced new programming languages and added additional features, complicating detection and analysis tasks. It further enables the actor to manage and expand its operations, increasing both the complexity and scale of attacks.

“Since its previous campaigns, the threat actor’s targeting strategy has evolved beyond simple cryptocurrency and browser credential theft. The use of generative AI has significantly accelerated this process, enabling easier malware development with reduced operational overhead.

“This AI-driven approach helps to fill the gaps in available information, enabling more focused targeting. By combining compromised data with AI’s analytical capabilities, the scope of these attacks has expanded. We hope our research will contribute to preventing further harm,” comments Omar Amin, senior security researcher at Kaspersky GReAT.

 


Kindly share this post
Continue Reading

Trending