Telecom
Abuse of Trusted Applications Grows by 51% in Latest Sophos Report
Sophos, a global leader in innovating and delivering cybersecurity as a service, today released “The Bite from Inside: The Sophos Active Adversary Report,” an in-depth look at the changing behaviors and attack techniques that adversaries used in the first half of 2024.
John Shier, field CTO, Sophos
The data, derived from nearly 200 incident response (IR) cases from across both the Sophos X-Ops IR team and Sophos X-Ops Managed Detection and Response (MDR) team, found that attackers are leveraging trusted applications and tools on Windows systems, commonly called “living off the land” binaries, to conduct discovery on systems and maintain persistence.
When compared to 2023, Sophos saw a 51% increase in abusing “Living off the Land” binaries or LOLbins; since 2021, it’s increased by 83%.
Among the 187 unique Microsoft LOLbins detected in the first half of the year, the most frequently abused trusted application was remote desktop protocol (RDP). Of the nearly 200 IR cases analyzed, attackers abused RDP in 89% of them.
This dominance continues a trend first observed in the 2023 Active Adversary report in which RDP abuse was prevalent in 90% of all IR cases investigated.
“Living-off-the-land not only offers stealth to an attacker’s activities but also provides a tacit endorsement of their activities. While abusing some legitimate tools might raise a few defenders’ eyebrows, and hopefully some alerts, abusing a Microsoft binary often has the opposite effect. Many of these abused Microsoft tools are integral to Windows and have legitimate uses, but it’s up to system administrators to understand how they are used in their environments and what constitutes abuse. Without nuanced and contextual awareness of the environment, including continuous vigilance to new and developing events within the network, today’s stretched IT teams risk missing key threat activity that often leads to ransomware,” says John Shier, field CTO, Sophos.
In addition, the report found that, despite the government disruption of LockBit’s main leak website and infrastructure in February, LockBit was the most frequently encountered ransomware group, accounting for approximately 21% of infections in the first half of 2024.
Other key findings from the latest Active Adversary Report:
· Root Cause of Attacks: Continuing a trend first noted in the Active Adversary Report for Tech Leaders, compromised credentials are still the number one root cause of attacks, accounting for the root cause in 39% of cases. This is, however, a decline from the 56% noted in 2023
· Network Breaches Dominate for MDR: When examining solely the cases from the Sophos MDR team, network breaches were the dominant incident the team encountered
· Dwell Times Are Shorter for MDR Teams: For cases from the Sophos IR team, dwell time (the time from when an attack starts to when it’s detected) has remained approximately eight days. However, with MDR, the median dwell time is just one day for all types of incidents and only three days for ransomware attacks
· The Most Frequently Compromised Active Directory Servers Are Nearing End of Life: Attackers most frequently compromised the 2019, 2016, and 2012 server versions of Active Directory (AD). All three of these versions are now out of mainstream Microsoft support—one step before they become end-of-life (EOL) and impossible to patch without paid support from Microsoft. In addition, a full 21% of the AD server versions compromised were already EOL
To learn more about attacker behaviors, tools and techniques, read “The Bite from Inside: The Sophos Active Adversary Report,” on Sophos.com.
With the introduction of Travel Saga, a premium, fast-paced gaming experience that is currently live and accessible to customers on its network, Globacom has lifted the bar for mobile entertainment in the country.
Travel Saga is a story-driven, intricately connected role-playing game designed to provide the thrill, complexity, and competitive intensity of some of the most well-known action games in the world.
The game, which has been painstakingly optimized for mobile devices, redefines mobile gaming as a full-fledged digital battlefield by translating a console-grade experience onto data-enabled handsets.
Fundamentally, Travel Saga takes users on quick virtual journeys against recognizable international landscapes. In a dynamic, ever-evolving gaming environment, players are thrown into furious missions, fierce fights, and ever-expanding tales where talent, strategy, and endurance determine who rises through the ranks to become a true war hero.
In addition to the excitement of fighting, users are encouraged to go to various locations, take part in thrilling challenges, and participate in intense competition for in-app rewards like points and victory badges. With each encounter and accomplishment, the immersion increases with each level, maintaining momentum and excitement.
Flexible subscription plans with one-time or auto-renewal choices are available to subscribers for the service, which costs ₦100 per day and ₦250 per week. By dialing *70021#, customers can quickly subscribe and gain instant access to the action.
With Travel Saga, Glo reaffirms its dedication to innovation and high-end digital experiences, making top-notch gaming easily accessible to its customers. The game offers uninterrupted action, adventure, and competition, all smoothly supported by the Glo network.
SHELT, a leading cybersecurity-as-a-service provider, has earned inclusion in the 2025 MSSP 250, the annual ranking of the world’s top 250 Managed Security Service Providers (MSSPs) by MSSP Alert, a CyberRisk Alliance publication.
SHELT
The list evaluates firms on business performance, service breadth, and industry impact, spotlighting those excelling in growth, operational excellence, and advanced managed security amid rising cyber threats. Selection criteria include annual recurring revenue, profitability, workforce expansion, business growth, and the depth of managed security offerings.
SHELT’s recognition underscores its investments in scalable security operations, threat intelligence, and tailored managed services across multiple regions, enabling clients to navigate complex risk landscapes effectively.
“Being recognised in the MSSP 250 is a meaningful milestone for our team,” stated Youssef Abillama, CEO of SHELT. “It validates our focus on building practical, resilient security services that help organisations manage risk and respond effectively to today’s evolving cyber threats.”
The company hailed the honour as testament to its teams’ dedication and expertise worldwide, reaffirming commitment to enhancing capabilities and delivering trusted cybersecurity solutions.
Meta Platforms, owner of Facebook, has appointed Dina Powell McCormick, a former adviser to President Donald Trump, as its new president and vice chairman, bolstering its leadership amid aggressive AI and infrastructure expansion.
Dina Powell McCormick
The announcement, made on Monday, positions Powell McCormick – who recently stepped down from Meta’s board after eight months – to guide overall strategy, including multi-billion-dollar investments in data centres and global partnerships.
A Goldman Sachs veteran with 16 years in senior roles and prior stints as deputy national security adviser under Trump and in the Bush administration, she brings deep finance and international ties to the role.
Meta CEO Mark Zuckerberg hailed her as “uniquely qualified” for the company’s next growth phase, while President Trump praised the move on Truth Social as a “fantastic choice”.
The hire signals Meta’s efforts to strengthen White House relations, following recent dinners with Trump and U.S. investment pledges worth hundreds of billions
Angst as FG Demands 7.5 Percent VAT on Mobile Bank Transfers, USSD
Glo Unveils Immersive Gaming Experience, Travel Saga
Half of Global Companies Build SOCs to Enhance Cybersecurity, with a Focus on Human Expertise
Moniepoint Launches Second Cohort of DreamDevs Initiative to Double Down on Africa’s Tech Talent Pipeline
NITDA DG Reaffirms Nigeria–U.S. Partnership on Data Privacy, AI and Cybersecurity
Banks quietly move to enforce new ₦50 transfer levy from Jan. 1
FIRS says NIN, CAC Numbers to Serve as Tax IDs from 2026
Nigeria Takes the Lead in the Global WSIS+20 Digital Agenda
Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack
PalmPay Launches N400 Million World Travel Carnival, Rewarding Users with Free Global Trips
E-Financial3 days agoWema Bank Upgrades ALAT Banking App
Telecom3 days agoX Suspends Twitter Account for Rules Violation
General News3 days agoFirm Launches AI-powered Platform to Simplify New Tax Laws
General News2 days agoPalmPay, Premier Cool to Reward 10,000 Nigerians with ₦100m in “10k for 10k Campaign”
E-Business3 days agoStudy Reveals 88.5% of Phishing Attacks Focus on Stealing Account Credentials
News3 days agoNigeria, Others Lag Behind as Egypt Tops Africa in AI Readiness
E-Financial2 days agoEcobank Joins Trillion-naira Club for the First Time in 20 Years
E-Business2 days agoKaspersky Warns Telecom Threats from 2025 will Carry into 2026 as New Technology Adds New Risk