Connect with us

E-Business

Trusted Relationship and Exploits in Public-facing Applications Strengthen Position as the Main Attack Vectors

Published

on

Kindly share this post

Although the main initial vectors in 2025 remain similar to 2024, their combined share has grown to over 80%. Public-facing applications account for 43.7%, while trusted relationships have increased from 12.7% to 15.5%.

Valid accounts make up 25.4%. These insights are from the recent Global Report by Kaspersky Security Services.

The ‘Anatomy of a Cyber World’ is an in-depth global report based on incident data gathered in 2025 from Kaspersky Managed Detection and Response, Kaspersky Incident Response, Kaspersky Compromise Assessment and Kaspersky SOC Consulting.

It highlights the most common attacker tactics, techniques and tools, as well as the peculiarities of detected incidents and their distribution across regions and industries.

According to data derived from Kaspersky Incident Response, the top three initial attack vectors have remained relatively stable over the past seven years and have not changed significantly. Valid accounts and exploits in public-facing applications consistently represent the most common entry points.

The third position has periodically shifted: malicious emails, once a common initial vector, were replaced by trusted relationships, which first appeared in 2021 and entered the TOP-3 in 2023. By 2025, the distribution of main vectors looked as follows:

These attack vectors are often interconnected within the same chain, for example, organisations compromised through trusted relationships are frequently first breached via exploits in public-facing applications. Recent cases reveal attackers targeting service providers or IT integrators to then access their clients.

This problem is compounded by many small service providers lacking dedicated cybersecurity expertise and resources. As they manage accounting software or websites, breaches in these companies can lead to the compromise of their clients’ systems through exploited remote access.

When examining the investigated attacks in terms of duration and impact, the data shows that the majority (50.9%) of them were rapid in nature, typically lasting less than a day and most often resulting in file encryption.

A significant portion (33%) were long-lasting, with an average duration of 108 hours, during which attackers not only encrypted files but also installed persistence mechanisms, compromised Active Directory and caused data leakage.

The remaining 16.1% exhibited a hybrid pattern: they initially appeared as rapid attacks but involved a considerable delay between the initial breach and subsequent malicious activities, extending their overall duration to nearly 19 days.

“Given that attackers are increasingly orchestrating coordinated, multi-stage attacks, organisations cannot afford to rely on a reactive, “firefighting” approach. To counter this, a proactive security posture is essential, one that embeds real-time threat monitoring and continuous detection into everyday operations.

This enables defenders to respond swiftly to adversary activity before it escalates. Key measures for protecting digital assets against both rapid intrusions and long-term compromises include: timely patching, enforcement of multi-factor authentication and strict control of third-party access,” comments Konstantin Sapronov, Head of Global Emergency Response Team at Kaspersky.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

E-Business

FG Bans Use of Gmail, Other Personal Emails for Civil Service Operations

Published

on

Kindly share this post

Federal government has banned  the use of personal email accounts, such as Gmail, Yahoo Mail, or Hotmail, for official public-sector transactions, mandating that civil servants transition to a secure, institutional digital platform.

FG Bans Use of Gmail, Other Personal Emails for Civil Service Operations

This ban requires all government officials to use secure institutional platforms with the approved .gov.ng domain to safeguard sensitive data.

The announcement was made in Abuja by Didi Esther Walson-Jack, head, the Civil Service of the Federation, during a digital transformation summit held to celebrate the 20th anniversary of Galaxy Backbone.

According to Walson-Jack, the government has activated more than 115,000 official GovMail accounts to ensure that communication within the federal civil service remains secure, professional, and easy to track.

She said government activities should no longer rely on personal email services or informal channels that make record-keeping difficult.

The Head of service explained that official information must remain within government systems even when an officer leaves a position.

This, she said, will help preserve important records and prevent the loss of government information tied to individual workers.

The Head of Service also disclosed that the Federal Government achieved a major target by completing the digitalisation of work processes across all 38 federal ministries and extra-ministerial departments before the end of December 2025.

She described the development as proof that reforms can succeed when there is clear leadership and commitment from government institutions.

According to her, the achievement shows that the civil service is capable of adapting to modern methods of operation.

Walson-Jack recalled that in the past, government files could easily be delayed, misplaced, or trapped in lengthy approval processes.

She said the shift to digital systems now makes it easier to monitor documents, improve accountability, and measure progress in government operations.

Walson-Jack added that the paperless civil service initiative is aimed at making government work more efficient by cutting delays, reducing unnecessary bureaucracy, improving transparency, and allowing records to be retrieved and processed faster.

 


Kindly share this post
Continue Reading

E-Business

Payaza Launches AI-powered Storefront Platform to Drive Cross-border Commerce

Published

on

Kindly share this post

Payaza Africa Limited has launched Shopaza, an artificial intelligence-powered e-commerce platform designed to help African businesses and merchants sell products and receive payments more efficiently across multiple markets.

The platform, unveiled in Lagos, is aimed at simplifying cross-border commerce by providing merchants with integrated payment infrastructure, AI-enabled business tools and access to international markets through a single platform.

According to the company, Shopaza is available across 23 countries in Africa, North America and Europe, where Payaza currently operates, offering businesses a scalable platform to manage online sales and payments.

Speaking at the launch, Seyi Ebenezer, Chief Executive Officer of Payaza Africa, described Shopaza as a major step toward unlocking Africa’s commerce potential.

“Africa’s commerce potential has always been there. What was missing was the infrastructure to unlock it.

“At Payaza, we have spent years building the payments backbone that businesses across this continent rely on. Shopaza is the natural next step, taking everything we have built and putting it directly in the hands of merchants who deserve better tools, better access, and better opportunities.

“Today, we are not just launching a product. We are making a statement that African businesses can compete and win on a global scale. Shopaza is live in 23 countries. The infrastructure is ready, the vision is clear, and we are just getting started,” he said.

Also speaking, Sola Ashiru, Group Head of Marketing and Communications at Payaza Africa, said the platform was developed after a comprehensive assessment of the African e-commerce landscape.

“We studied the African e-commerce ecosystem carefully and identified three critical gaps holding merchants back: limited access to AI-powered tools, weak payments infrastructure, and a broken settlement process. Shopaza was built specifically to close those gaps.

“This is not a rushed product; it is a well-thought-out solution to the most persistent pain points in African commerce today. While we are launching in Nigeria, our operational footprint already spans Africa, North America, and Europe.

“We have also established partnerships with local entities across key markets to drive grassroots adoption. Ultimately, we have solved an African problem, and Africans need to know about it,” he said.

Ashiru further explained that Shopaza offers an all-in-one solution designed to simplify selling and accelerate business growth for merchants.

“The platform features AI-powered onboarding and smart selling tools that enable users to set up quickly, manage storefronts with ease, and optimise pricing and product listings for improved performance.

“Shopaza also provides free, integrated marketing tools to boost visibility and help merchants attract and retain customers without additional costs,” Ashiru noted.


Kindly share this post
Continue Reading

E-Business

NIPOST Plans Digital Postcodes for Every Building in Nigeria

Published

on

Kindly share this post

Nigerian Postal Service (NIPOST) has reaffirmed its commitment to implementing a National Digital Postcode System to assign a unique digital address to every addressable building across the country.

NIPOST Plans Digital Postcodes for Every Building in Nigeria

Speaking at the unveiling of the Post Code Delineation Model Validation 2026 in Abuja, Tola Odeyemi, postmaster general and chief executive officer, NIPOST, said the initiative would establish a machine-readable standard location-address framework for buildings nationwide.

“Postcode is basically a framework used to have a machine-readable standard location address for every addressable building in Nigeria,” Odeyemi said.

She explained that the project would place Nigeria among the first countries in Africa to develop a postcode system down to the unit level, ensuring that each standing building is assigned a unique code.

According to her, the digital postcode system is expected to enhance service delivery, logistics operations, emergency response, and national planning by improving the identification of locations across the country.

Odeyemi noted that the diversity of Nigeria’s geography necessitated different approaches to address mapping and postcode allocation.

“Nigeria is a large country. We have all the way from the top of Nigeria, which is almost like the Sahel, to the Savannah, to the Middle Belt, to the tropical South and even to the riverine areas.

“The logic that will work for Jigawa is not the same logic that will work for Bayelsa because they have completely different geographical expressions, density of buildings, population distribution, and topography,” she said.

She said the postcode delineation process was designed to ensure that postcode boundaries align with existing administrative structures and do not overlap local government boundaries.

“Delineation has to make sure the postcode does not pass administrative boundaries, and it must not go across two local government areas,” Odeyemi stated.

The NIPOST boss further explained that the validation exercise involves testing aerially mapped polygons against actual settlement patterns and geographical realities in different parts of the country.

“To test the polygons we have drawn aerially, we must ensure they accurately reflect realities on the ground. For example, the density of buildings in Lagos, particularly in Mushin, is very different from the density of buildings in Abuja. We are making sure that density maps and topographical features are properly captured for each state in Nigeria,” she said.

She described the Post Code Delineation Model Validation exercise as a critical stage in the agency’s broader digital addressing initiative, which seeks to create a comprehensive and standardised postcode framework for the country.

Nigeria has long grappled with an inefficient addressing system, making it difficult to accurately identify locations for postal services, logistics, emergency response, and public planning.

NIPOST’s National Digital Postcode System is part of efforts to create a standardised and technology-driven addressing framework that assigns a unique code to every addressable building in the country.


Kindly share this post
Continue Reading

Trending