Connect with us

E-Business

Firm Shares Insights into Ransomware Trends and Tactics @ International Anti-Ransomware Day-2026

Published

on

Kindly share this post

On International Anti-Ransomware Day, May 12, Kaspersky shares a report with an overview of ransomware trends that marked 2025 and insights into what the threat landscape holds in 2026.

According to Kaspersky Security Network, in 2025 Latin America had the highest share of organisations with ransomware attacks detected (8.13%), followed by the Asia-Pacific region (7.89%), Africa (7.62%), Middle East (7.27%), the Commonwealth of Independent States (CIS, 5.91%) and Europe (3.82%).

The report highlights the rise of “encryption-less” extortion attacks, the use of post-quantum cryptography by ransomware groups, and the persistent use of Telegram channels by cybercriminals to distribute compromised data sets and credentials.

Despite a slight decline in the overall share of organisations attacked by ransomware in 2025 compared to 2024, users remain at significant risk as attackers industrialise their operations, automate intrusion methods, and increasingly focus on stealing and leaking sensitive data rather than simply encrypting systems.

One of the trends in 2025 is the continued rise of endpoint detection and response (EDR) “killers” – tools specifically designed to disable endpoint security solutions before executing the malware itself. EDR killers have become a standard component of attacks, which means more deliberate and methodical intrusions.

Advertisement

Researchers also noted the emergence of ransomware families adopting post-quantum cryptography standards – this was predicted by Kaspersky previously. The development signals a concerning shift toward encryption methods that could resist future quantum computing decryption attempts.

The role of Initial Access Brokers (IABs) – cybercriminal intermediaries that sell pre-compromised corporate access through underground forums and messaging platforms – is growing. RDWeb portals (websites through which devices can be controlled remotely) are increasingly targeted as ransomware groups continue to industrialise attacks through “Access-as-a-Service” operations. As a result, the barrier to launching ransomware attacks declines.

Telegram channels and dark web forums continuously function as platforms for the distribution and for the sale of compromised data sets and accesses including those that were obtained as a result of ransomware attacks.

A major underground forum, RAMP, which also functioned as a platform through which threat actors advertised their ransomware services and published service‑related updates, got seized by authorities in January 2026.

Another underground forum, LeakBase, where malicious actors distributed exfiltrated and compromised data, was seized in March 2026. However, while law enforcement agencies are actively shutting down dark web platforms and ransomware data leak sites, similar portals may appear over time.

Advertisement

Active groups

Among the most active ransomware groups in 2025 based on data leak sites, Kaspersky identified Qilin as the dominant ransomware-as-a-service (RaaS) operator following RansomHub’s seizure of operations. Clop ranked as the second most active group, with Akira in the third place.

While several major ransomware groups stopped operation in 2025, new actors emerge. Looking at 2026, the Gentlemen is one of the most important new ransomware actors due to the group’s rapid growth, structured operations, and increasing focus on data-centric extortion. The group may include attackers formerly associated with other major ransomware operations.

The Gentlemen exemplify a broader shift in the ransomware ecosystem away from chaotic, high-noise campaigns toward scalable, business-like extortion models focused primarily on stealing sensitive data and leveraging reputational and regulatory pressure rather than relying solely on disruptive file encryption.

“Ransomware has evolved into a highly organised ecosystem focused on monetising stolen data, disabling defences, and scaling attacks with business-like efficiency. Threat actors are quickly adapting, weaponising legitimate tools, exploiting remote access infrastructure, and even adopting post-quantum cryptography years earlier than many expected.

Advertisement

“The purpose of Anti-Ransomware Day is to raise global awareness about the threats posed by ransomware and to promote best practices for prevention and response, and we urge all users to stay secure, set up layered defences, invest in backups and boost cyberliteracy levels to counter attacks,” comments Fabio Assolini, Lead Security Researcher at Kaspersky GReAT.

On Anti-Ransomware Day and beyond, Kaspersky encourages organisations to follow these best practices to safeguard from ransomware:

  • Enable ransomware protection for all endpoints. There is a free Kaspersky Anti-Ransomware Tool for Business that shields computers and servers from ransomware and other types of malware, prevents exploits and is compatible with already installed security solutions.
  • Always keep software updated on all the devices you use to prevent attackers from exploiting vulnerabilities and infiltrating your network.
  • Focus your defence strategy on detecting lateral movements and data exfiltration to the Internet. Pay special attention to outgoing traffic to detect cybercriminals’ connections to your network. Set up offline backups that intruders cannot tamper with. Make sure you can access them quickly when needed or in an emergency.
  • Companies from non-industrial sector can protect themselves by installing anti-APT and EDR solutions that enable capabilities for advanced threat discovery and detection, investigation and timely remediation of incidents. Organizations can also provide their SOC teams with access to the latest threat intelligence and regularly upskill them with professional training.

Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

New NIMC Act Strengthens Data Protection, Privacy – Director

Published

on

Kindly share this post

Uche Chigbo, coordinating director of Operations, National Identity Management Commission, (NIMC), has said the newly enacted NIMC Act strengthens data protection and privacy, expands identity coverage to include everyone in Nigeria and Nigerians in the diaspora, and provides the legal framework for a secure and trusted digital identity ecosystem.

New NIMC Act Strengthens Data Protection, Privacy - Director

She said the new law replaces the 2007 NIMC Act, which had become outdated due to rapid technological advancements, evolving cybersecurity threats, the growth of the digital economy, and the enactment of the Nigeria Data Protection Act.

According to her, the updated legislation better positions the Commission to deliver Nigeria’s digital identity agenda and improve access to government and private sector services.

“The Act itself has taken in a whole lot of things to make sure that NIMC is well-positioned to be able to deliver on the identity agenda and program of Nigeria. The area of universal coverage was expanded within the Act so that NIMC can enroll everybody that is within the soil of Nigeria—male, female, children, whether they are IDPs or orphans or whatever it is, and even Nigerians in diaspora.

“There is quite a lot within the Act that over the few days and weeks, even with my Director-General’s courtesy visit, we are trying to sensitize and educate the general public, and also bring awareness to this new Act so that people will know what are the rights that exist within it, what are the obligations, what are the stronger enforcement and penalties that has also been expanded within the Act, and then what are also the regulatory autonomy that has been given to NIMC to make sure that they drive the digital identity ecosystem in Nigeria,” she explained.

Advertisement

“There’s a lot of provisions and changes with the new Act. Um, the NIMC 2007 Act has been operating for close to 19 years now. So, we can see that, um, you can actually say it’s almost obsolete. And then with a lot of technological advancements in the world now, with the enactment of the Nigeria Data Protection Act, and then with also a lot of evolving security challenges, cybersecurity challenges, as well as the ever-growing digital economy, it became very necessary that a comprehensive review of the NIMC Act should be done.

So, that 2007 Act has been repealed and a new NIMC 2026 Act is in place,” she explained.

Chigbo clarified that the National Identification Number (NIN) is Nigeria’s unique identifier and the only valid means of identification for accessing government services.

She added that it enables secure identity verification and improves access to services.

“NIN has been designated as the unique identifier in Nigeria and then by the government of Nigeria establishing it as the only valid means of identification for assessing government services. So, NIN, it’s positioned to be a valuable tool for empowering citizens and legal residents to facilitate access to service delivery in Nigeria. And it’s also a tool for people to be able to prove their identity as they go about their daily businesses,” she said.

Advertisement

Speaking on identity harmonisation across government agencies, Chigbo said NIMC is integrating identity databases to enable Nigerians to access services seamlessly using the National Identification Number (NIN), while other agencies continue to issue functional identities for specific purposes.

“There’s a distinction between a foundational identity and a functional identity. NIMC provides the foundational identity, which answers the question, ‘Who are you?’ Are you a Nigerian or a legal resident? Who are you? That’s what NIMC is providing. All these other agencies that you have mentioned, they provide functional ID, which is an ID that relies on the foundational ID, where they have established who you are and then they are now trying to answer the question, ‘Are you now eligible to have these services? Are you now eligible to benefit from this transaction or scheme?’ So, those are two different distinctions.”

However, Chigbo said NIMC’s mandate is to harmonise and integrate identity systems across government, with the amended Act designating the Commission as the sole repository for biometric data.

“However, NIMC mandate is to make sure that we harmonize and integrate with all these agencies so that you’re one and the same person in any of the databases or registries that you have. The Act that has been expanded and amended also positions NIMC as the only repository for biometric data capture so that we can have effective identity management and coordination in Nigeria.

“So, that harmonization is already happening, the integration is already happening,” she stated.

Advertisement

She also disclosed that NIMC has introduced an online modification portal that allows Nigerians to begin the process of correcting or updating their personal information from the comfort of their homes or offices.

“But also, NIMC we have a modification portal that enables you to sit in the comfort of your home or office to be able to start the process of correction or updates of your data. We already have a self-service modification portal that allows you to make corrections,” she disclosed.

On the cost of obtaining a NIN, Chigbo clarified that enrolment and issuance of the National Identification Number are free.

She, however, noted that some other identity-related services attract approved fees, which are published on the NIMC website and paid electronically through the government Remita platform.

“Enrollment for the issuance of the National Identification Number, NIN, is free. There are other services, identity services that NIMC provide. Those ones have their charges, and those fees and charges are publicized on the NIMC website so that people can see what those charges are. And NIMC does not collect cash. Our transactions and the charges are paid electronically through the government Remita platform,” she said.

Advertisement

 

Kindly share this post
Continue Reading

E-Business

IMF Keeps Nigeria’s Growth Forecast at 4.1%, Raises Alarm Over Food Inflation

Published

on

Kindly share this post

International Monetary Fund (IMF) has retained Nigeria’s economic growth forecast at 4.1 per cent for 2026, while warning that rising prices of essential goods could worsen poverty and food insecurity in the country.

IMF Keeps Nigeria's Growth Forecast at 4.1%, Raises Alarm Over Food Inflation

IMF

The IMF made the projection in its July 2026 World Economic Outlook (WEO) Update, released on Wednesday.

According to the report, Nigeria’s Gross Domestic Product (GDP) is projected to grow by 4.1 per cent in 2026 and improve to 4.3 per cent in 2027, with both forecasts unchanged from the Fund’s April outlook.

The IMF also maintained its growth projections for sub-Saharan Africa at 4.3 per cent in 2026 and 4.5 per cent in 2027.

The Fund said Nigeria’s economic outlook continued to benefit from improved macroeconomic stability and favourable terms of trade but cautioned that the rising cost of essential commodities remained a major concern.

“Nigeria is supported by improved macroeconomic stability and favourable terms-of-trade effects, though higher prices for essentials are expected to further aggravate poverty and food insecurity,” the report stated.

Advertisement

The IMF noted that economic performance across sub-Saharan Africa would remain uneven, reflecting differences in policy implementation, reform progress and countries’ exposure to external shocks.

It added that oil-importing and non-resource-intensive economies would likely face increased pressure from rising food and energy prices, while some larger economies continued to benefit from earlier macroeconomic reforms.

Globally, the IMF revised its 2026 growth forecast downward to 3.0 per cent from the 3.1 per cent projected in April but raised its 2027 forecast to 3.4 per cent.

According to the Fund, the downgrade for 2026 reflects the impact of the ongoing conflict in the Middle East, although stronger demand driven by advances in artificial intelligence and technology adoption has helped cushion some of the adverse effects.

Despite the resilience of the global economy, the IMF warned that risks remained tilted to the downside.

Advertisement

It identified renewed trade tensions, geopolitical conflicts and tighter global financial conditions as key threats to economic growth.

The Fund urged governments to rebuild fiscal buffers through credible fiscal consolidation, improved revenue mobilisation, stronger tax administration, efficient public spending and increased investment in infrastructure, skills development and targeted social protection programmes.

It also advised commodity-exporting countries to avoid excessive public spending during periods of high commodity prices.

“Economies benefiting from commodity windfalls and the upturn in the global technology cycle should avoid procyclical spending and save or redeploy gains within a credible medium-term fiscal framework anchored in debt sustainability,” the report stated.

The IMF further called on policymakers to accelerate structural reforms aimed at boosting productivity, strengthening labour markets, expanding digital and physical infrastructure, promoting predictable trade policies and enhancing international cooperation to support sustainable economic growth.

Advertisement

Kindly share this post
Continue Reading

E-Business

Data Protection Industry Hits N16.3Bn in 3 Years- NDPC

Published

on

Kindly share this post

Nigeria’s data protection industry has grown into a N16.3 billion ecosystem within three years of formal regulation, according to the Nigeria Data Protection Commission (NDPC).

Data Protection Industry Hits N16.3Bn in 3 Years- NDPC

Olufemi Ibitayo, head of Finance Management and Control, NDPC, announced the milestone at the Regional Data Governance Exchange in Nairobi, Kenya, where he represented Dr Vincent Olatunji, national commissioner and chief executive officer, NDPC.

Presenting Nigeria’s progress, Ibitayo said the country’s strong regulatory framework and the establishment of an independent data protection authority have strengthened confidence in the digital economy and enhanced Nigeria’s reputation as a destination for foreign investment.

The Regional Data Governance Exchange, organised by the Data Governance in Africa Initiative and hosted by the Office of the Data Protection Commissioner in Nairobi, brought together African data protection authorities to strengthen institutional capacity, deepen collaboration and promote peer learning on data governance. Photo: NDPC

He said the Commission’s “Compliance First, Not Punishment” approach encourages organisations to meet their obligations through dialogue and voluntary compliance, while ensuring effective regulatory oversight.

Advertisement

Ibitayo added that the NDPC is developing regulatory technology solutions, a regulatory sandbox and a data privacy innovation laboratory to further strengthen Nigeria’s data governance ecosystem and support future growth.

United Nations Commission on International Trade Law (UNCITRAL)

The ongoing UNCITRAL session has brought together delegates from Nigeria, Australia, China, Ghana, France, the United States and other member states to develop harmonised legal frameworks aimed at facilitating secure, trusted and efficient cross-border digital commerce. Photo: NDPC

Meanwhile, Olatunji reaffirmed Nigeria’s commitment to global data governance during a meeting with Nigeria’s Permanent Representative to the United Nations, Ambassador Jimoh Ibrahim.

He made the remark on the sidelines of the ongoing United Nations Commission on International Trade Law (UNCITRAL), where Nigeria is participating alongside delegates from several member states to advance harmonised legal frameworks for secure and trusted cross-border digital commerce.

Advertisement

The NDPC boss highlighted the Commission’s achievements since its establishment, noting that strategic institutional reforms have positioned Nigeria as a leading voice in the global data protection ecosystem.

He said the country’s data protection framework has continued to earn international recognition, adding that the Commission remains committed to promoting trusted data governance as a driver of digital transformation, economic growth, innovation and sustainable development in line with the Renewed Hope Agenda of President Bola Ahmed Tinubu.

During the meeting, Ambassador Ibrahim commended the Commission’s progress since the enactment of the Nigeria Data Protection Act 2023 and called for the establishment of a comprehensive national data bank to support evidence-based policymaking, research and national development.

 

Advertisement

Kindly share this post
Continue Reading

Trending