Telecom
Sophos Reveals Key Findings: 56% of Cyberattacks Exploit Valid Credentials

Sophos, a global leader of innovative security solutions for defeating cyberattacks, has released the 2025 Sophos Active Adversary Report, which details attacker behaviour and techniques from over 400 Managed Detection and Response (MDR) and Incident Response (IR) cases in 2024.

The report found that the primary way attackers gained initial access to networks (56% of all cases across MDR and IR) was by exploiting external remote services, which includes edge devices such as firewalls and VPNs, by leveraging valid accounts.
The combination of external remote services and valid accounts aligns with the top root causes of attacks. For the second year in row, compromised credentials were the number one root cause of attacks (41% of cases). This was followed by exploited vulnerabilities (21.79%) and brute force attacks (21.07%).
Understanding The Speed of Attacks
When analyzing MDR and IR investigations, the Sophos X-Ops team looked specifically at ransomware, data exfiltration, and data extortion cases to identify how fast attackers progressed through the stages of an attack within an organization. In those three types of cases, the median time between the start of an attack and exfiltration was only 72.98 hours (3.04 days). Furthermore, there was only a median of 2.7 hours from exfiltration to attack detection.
“Passive security is no longer enough. While prevention is essential, rapid response is critical. Organizations must actively monitor networks and act swiftly against observed telemetry. Coordinated attacks by motivated adversaries require a coordinated defense. For many organizations, that means combining business-specific knowledge with expert-led detection and response. Our report confirms that organizations with proactive monitoring detect attacks faster and experience better outcomes,” said John Shier, field CISO.
Other Key Findings from the 2025 Sophos Active Adversary Report:
· Attackers Can Take Control of a System in Just 11 Hours: The median time between attackers’ initial action and their first (often successful) attempt to breach Active Directory (AD) – arguably one of the most important assets in any Windows network – was just 11 hours. If successful, attackers can more easily take control of the organization.
· Top Ransomware Groups in Sophos Cases: Akira was the most frequently encountered ransomware group in 2024, followed by Fog and LockBit (despite a multi-government takedown of LockBit earlier in the year).
· Dwell Time is Down to Just 2 Days: Overall, dwell time – the time from the start of an attack to when it is detected – decreased from 4 days to just 2 in 2024, largely due to the addition of MDR cases to the dataset.
· Dwell Time in IR Cases: Dwell time remained stable at 4 days for ransomware attacks and 11.5 days for non-ransomware cases.
· Dwell Time in MDR Cases: In MDR investigations, dwell time was only 3 days for ransomware cases and just 1 day for non-ransomware cases, suggesting MDR teams are able to more quickly detect and respond to attacks.
Ransomware Groups Work Overnight: In 2024, 83% of ransomware binaries were dropped outside of the targets’ local business hours.
· Remote Desktop Protocol Continues to Dominate: RDP was involved in 84% of MDR/IR cases, making it the most frequently abused Microsoft tool.
To shore up their defenses, Sophos recommends that companies do the following:
· Close exposed RDP ports
· Use phishing-resistant multifactor authentication (MFA) wherever possible
· Patch vulnerable systems in a timely manner, with a particular focus on internet-facing devices and services
· Deploy EDR or MDR and ensure it is proactively monitored 24/7
· Establish a comprehensive incident response plan and test it regularly through simulations or tabletop exercises
Read the full It Takes Two: The 2025 Sophos Active Adversary Report on Sophos.com.
Telecom
Study Shows Blocks in Telegram are Pushing the Underground Out

Modern messengers, such as WhatsApp, Telegram, Signal and others, are often used for illicit purposes. Kaspersky Digital Footprint Intelligence has conducted an in-depth monitoring of over 800 blocked cybercriminal Telegram channels between 2021 and 2024.

While a range of illegal activities continues to be hosted on the platform, its environment has become noticeably more challenging for sustained underground operations.
Telegram’s bot framework and other built-in features make for a low-effort ecosystem for the underworld.
A single bot can simultaneously manage queries, process cryptocurrency payments, and instantly deliver stolen bank cards, info-stealer logs, phishing kits, or DDoS attacks to hundreds of buyers per day, often without operator involvement.
Unlimited, non-expiring file storage eliminates the need for external hosting when distributing multi-gigabyte database dumps or stolen corporate documents. This frictionless automation naturally favours high-volume, low-price, low-skill offerings, such as leaked bank cards or other data, hosting malware, etc.
High-value, trust-dependent deals (for instance, zero-day vulnerability information) still remain on reputation-gated dark-web forums.
Kaspersky researchers found two clear trends related to illegal activities on Telegram. The average lifespan of shadow channels has increased, with the proportion of channels surviving over nine months more than tripling in 2023-2024 compared to 2021–2022. At the same time, Telegram’s blocking activity has risen significantly.
Monthly takedown figures recorded since October 2024 – even at their lowest – are comparable to the peak levels seen throughout 2023, and the overall pace continued to accelerate in 2025. This impedes malicious activities.
Other disadvantages of Telegram for cybercriminals include the lack of default end-to-end (E2E) encryption for chats, the inability to use their own servers for communication (due to the messenger’s centralised infrastructure), and closed server-side code, which makes it impossible to verify its functionality.
As a result, several established underground communities, including the nearly 9,000-member BFRepo group and the Angel Drainer malware-as-a-service operation, have already begun shifting primary activity to other platforms or proprietary messengers, citing repeated disruptions of their activities on Telegram.
“Fraudsters find Telegram a convenient tool for many malicious activities, but the risk-reward balance is clearly shifting. Channels are managing to stay online longer than a couple of years ago, yet the dramatically higher volume of blocks means operators can no longer count on long-term stability.
“When a storefront or service disappears overnight – and sometimes reappears only to be removed again weeks later – building a reliable business becomes much harder. We’re starting to see the early stages of migration as a direct consequence,” comments Vladislav Belousov, Digital Footprint Analyst at Kaspersky.
Telecom
Galaxy Backbone Marks Two Decades of Powering Nigeria’s Digital Evolution

Galaxy Backbone Limited (GBB), the Federal Government’s leading ICT infrastructure and shared services provider, will mark its 20th anniversary in June 2026 with a grand celebration that reflects two decades of innovation, resilience, and national impact.

Since its inception in 2006, Galaxy Backbone has been at the heart of Nigeria’s digital transformation journey; building the technological foundation that supports modern government operations and public service delivery. What began as a bold vision to connect government has grown into a critical national platform that drives efficiency, transparency, collaboration and innovation across the public sector.
Over the last 20 years, GBB has helped redefine how government works. By providing secure connectivity, enterprise-grade data centre services, cloud platforms, and digital collaboration tools, Galaxy Backbone has enabled Ministries, Departments and Agencies (MDAs) to move from fragmented, paper-based processes to more integrated, technology-driven systems.
This transformation has improved government-to-government coordination, strengthened engagement with businesses, and enhanced the delivery of services to citizens. Today, the digital infrastructure powered by Galaxy Backbone supports thousands of government users, hundreds of institutions, and critical national platforms that Nigerians rely on daily.
A key part of this journey has been the Federal Government of Nigeria’s investment, managed by GBB in robust national infrastructure, high-capacity and world class data centres, fibre-optic connectivity across multiple states, secure hosting services, and shared platforms that have helped government operate more efficiently and responsively. These contributions have played a pivotal role in Nigeria’s progress toward a more digital, agile and citizen-centered public service.
Galaxy Backbone’s impact has earned both national and global recognition. In 2025, the organisation was ranked first overall in the Federal Government Website Performance Scorecard, reflecting its commitment to excellence in digital service delivery. Internationally, GBB, a couple of years ago, received the prestigious United Nations Public Service Award, a testament to its leadership in promoting a whole-of-government approach to digital transformation.
As GBB celebrates two decades of service, this milestone is more than an organisational anniversary; it is a celebration of Nigeria’s digital evolution. It is an opportunity to appreciate how collaboration between government, industry partners, technology providers, and dedicated public servants has helped build a stronger, more connected nation.
The June 2026 anniversary celebration will bring together stakeholders from across the public and private sectors to reflect on the journey so far, acknowledge the partnerships that have shaped this success, and chart an ambitious course for the future. It will highlight how collective effort, shared vision, and innovation have positioned Galaxy Backbone as a strategic national asset.
Looking ahead, Galaxy Backbone remains committed to deepening digital transformation across the country; expanding infrastructure, strengthening cybersecurity, enhancing service delivery, and supporting the Federal Government’s drive for a smarter, more efficient and digitally empowered Nigeria.
At 20 years, Galaxy Backbone stands proud of its past, confident in its present, and inspired by the limitless possibilities ahead.
Telecom
Galaxy Backbone Marks 20 Years, Tops FG Website Scorecard

Galaxy Backbone Limited (GBB), Nigeria’s leading federal ICT infrastructure provider, has announced its 20th-anniversary celebration for June 2026, marking two decades since unifying government’s fragmented digital landscape into a secure national platform.

Galaxy Backbone
The announcement by Head of Media and Corporate Communications Chidi Okpala follows GBB’s top ranking in the 2025 Federal Government Website Performance Scorecard by the Bureau of Public Service Reforms, cementing its leadership in digital service delivery and transparency.
Managing Director Professor Ibrahim Adepoju Adeyanju described the milestone as celebrating Nigeria’s shift from paper-based silos to a cloud-first, integrated government. Achievements include the UN Public Service Award for 1-GOV.net, high-speed fiber deployment for G2G and G2B interactions, IPPIS payroll rollout, and pandemic-era digital support.
The June event will gather public-private stakeholders, global tech partners, and policymakers to unveil GBB’s next-decade roadmap emphasising cybersecurity, AI in public service, and rural connectivity.
GBB positions itself at the forefront of Nigeria’s 2030 digital nation drive, with 20 years of innovation signaling a smarter, connected future.
E-Financial2 days agoAngst as FG Demands 7.5 Percent VAT on Mobile Bank Transfers, USSD
News2 days agoMoniepoint Launches Second Cohort of DreamDevs Initiative to Double Down on Africa’s Tech Talent Pipeline
E-Financial2 days agoNGX lists 3.156bn UBA shares, boosting capital to N513Bn
E-Financial2 days agoThe Missing Pieces in Nigeria’s Banking Recapitalisation
Telecom2 days agoGlo Unveils Immersive Gaming Experience, Travel Saga
E-Business2 days agoHalf of Global Companies Build SOCs to Enhance Cybersecurity, with a Focus on Human Expertise
General News2 days agoNITDA DG Reaffirms Nigeria–U.S. Partnership on Data Privacy, AI and Cybersecurity
General News2 days agoParadigm Initiative Condemns the Internet Shutdown and Media Restrictions in Uganda Ahead of the 2026 General Election



















