Connect with us

E-Business

Sophos Identifies Top Ransomware Families in Africa

Published

on

Kindly share this post

Cyber security vendor Sophos has identified the top ransomware families that affected Africa in 2017.

According to Sophos, the Ceber ransomware accounted for 80% of attacks in Africa, followed by WannaCry (17%), and others like Jaff (1%), Locky (1%) and Petya (0.5%).

One of the most active kinds of ransomware out there, Cerber encrypts the files of infected users and demands money in exchange for enabling access to their files. It works even if a user is not connected to the Internet, so they can’t stop it by unplugging their PC.

Cerber, sold as a ransomware kit on the Dark Web, remains a dangerous threat, says Sophos, adding the creators of Cerber continuously update the code and charge a percentage of the ransom that the “middle-men” attackers receive from victims.

Regular new features make Cerber not only an effective attack tool, but perennially available to cyber criminals, the cyber security firm notes.

“This Dark Web business model is unfortunately working and, similar to a legitimate company, is likely funding the ongoing development of Cerber. We can assume the profits are motivating the authors to maintain the code,” says Dorka Palotay, SophosLabs security researcher and contributor to the ransomware analysis in the SophosLabs 2018 Malware Forecast.

The WannaCry ransomware attack was a May 2017 worldwide cyber attack by the WannaCry ransomware cryptoworm, which targeted computers running the Microsoft Windows operating system by encrypting data and demanding ransom payments in the Bitcoin crypto-currency.

“Looking at the whole world, WannaCry was responsible for 45.3% of the ransomware attacks, while in Africa this value is only 17%,” Palotay says.

“In Africa, clearly Cerber was the biggest ransomware threat this year, since 80% of the ransomware lookups was caused by Cerber, while this number is only 44.2% if we look at the whole world. Regarding the smaller families, the results are very similar.”

The SophosLabs 2018 Malware Forecast report recaps ransomware and other cyber security trends based on data collected from Sophos customer computers worldwide from 1 April to 3 October 2017.

One key finding shows that while ransomware predominately attacked Windows systems in the last six months, Android, Linux and MacOS platforms were not immune.

“Ransomware has become platform-agnostic. Ransomware mostly targets Windows computers, but this year, SophosLabs saw an increased amount of crypto-attacks on different devices and operating systems used by our customers worldwide,” says Palotay.

She notes that for the first time Sophos saw ransomware with worm-like characteristics, which contributed to the rapid expansion of WannaCry.

“This ransomware took advantage of a known Windows vulnerability to infect and spread to computers, making it hard to control.

“Even though our customers are protected against it and WannaCry has tapered off, we still see the threat because of its inherent nature to keep scanning and attacking computers. We’re expecting cyber criminals to build upon this ability to replicate as seen in WannaCry and NotPetya, and this is already evident with Bad Rabbit ransomware, which shows many similarities to NotPetya.”


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Nigerian Terra Industries Secures $11.8m for Expansion

Published

on

Kindly share this post

Terra Industries, a Nigerian defence technology startup, has raised $11.75 million to expand its development of defensive systems that protect critical facilities across Africa.

The fundraising round was led by Silicon Valley venture firm 8VC, which was founded by Palantir co-founder Joe Lonsdale.

Other investors in the round include Valour Equity Partners, Lux Capital, SV Angel, and Nova Global, as well as African-focused funds Tofino Capital, Kaleo Ventures, and DFS Lab.

Terra Industries, founded in Abuja by Nathan Nwachuku and Maxwell Maduka, provides multi-domain security solutions for both air and land. Its solutions are intended to detect and respond to threats including terrorism, sabotage, and armed attacks on infrastructure.

The company’s product portfolio includes surveillance drones, ground-based robotic systems, and fixed monitoring towers deployed around sensitive locations.

Co-founder and CEO Nathan Nwachuku said the company has now fully embraced its identity as a defence-focused startup, citing the growing urgency of security challenges across Africa.

He said safeguarding critical infrastructure from terrorist threats has become unavoidable.

Nwachuku argues that protecting Africa’s infrastructure requires a different approach, one that combines local manufacturing, end-to-end system control, and software capable of independently identifying and responding to threats over large areas.

The company aims to position itself as a defence prime, similar to the role played by firms such as Anduril Industries and Palantir in the United States.

Nwachuku also disclosed that the company had earlier raised $800,000 in pre-seed funding.

With the new funding, Terra plans to increase manufacturing capacity within Africa, establish additional defence production facilities, and expand its artificial intelligence and software teams.

While software offices are planned for San Francisco and London, the company said manufacturing operations will remain on the continent.

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Warns Telecom Threats from 2025 will Carry into 2026 as New Technology Adds New Risk

Published

on

Kindly share this post

Kaspersky Security Bulletin reviews what shaped telecom cybersecurity in 2025 and what is likely to persist in 2026. Advanced Persistent Threat (APT) activity, supply-chain compromise, DDoS disruption and SIM-enabled fraud continued to pressure operators in 2025, while newer technology deployments introduce additional operational risk.

In 2025, telecom operators faced four broad threat categories. Targeted intrusions (APTs) continued to focus on gaining stealthy access to operator environments for long-term espionage and leverage through privileged network positioning.

Supply chain vulnerabilities remained an entry point: telecom ecosystems rely on many vendors, contractors and tightly integrated platforms, so weaknesses in widely used software and services can provide a path into operator networks. Finally, DDoS remained a practical availability and capacity problem.

Kaspersky Security Network showed that last year, between November 2024 and October 2025, 12,79% of users in the telecommunications sector encountered web threats and 20,76% faced on-device threats. 9,86% of telecom organisations worldwide experienced ransomware.

At the same time, the telecommunications sector is moving from rapid technological development to broad implementation — and the report argues that this shift creates new opportunities and new operational risks for 2026.

Kaspersky highlights three areas where technology transitions could introduce disruption if rolled out unevenly or without strong controls: AI-assisted network management, where automation can amplify configuration errors or act on misleading data; post-quantum cryptography transitions, where rushed deployment of hybrid and post-quantum approaches could cause interoperability and performance issues across IT, management and interconnect environments; and 5G-to-satellite integration (NTN), where expanding service footprints and partner dependencies introduce new integration points and potential failure modes.

“The threats that dominated 2025 — APT campaigns, supply chain attacks, DDoS floods — aren’t going away. But now they intersect with operational risks from AI automation, quantum-ready cryptography, and satellite integration.

Telecom operators need visibility across both dimensions: maintaining strong defences against known threats while building security into these new technologies from day one. The key is continuous threat intelligence that spans from endpoint to edge to orbit,” said Leonid Bezvershenko, senior security researcher at Kaspersky Global Research & Analysis Team.

 


Kindly share this post
Continue Reading

E-Business

Study Reveals 88.5% of Phishing Attacks Focus on Stealing Account Credentials

Published

on

Kindly share this post

Kaspersky analysed phishing and scam campaigns observed from January through September 2025 and found that 88.5% of attacks globally sought credentials for various online accounts.

Another 9.5% targeted personal data such as names, addresses, and dates of birth, while 2% focused on bank card details.

According to data from Kaspersky, over 38 million phishing links were clicked in Africa in the previous year (from November 2024 to October 2025) – all of which were detected and blocked by Kaspersky solutions.

Not everyone uses protective solutions on their devices however, and phishing remains one of the most prevalent cyber threats, with attackers luring users to fake websites where they unwittingly surrender their login credentials, personal information, or bank card details.

Kaspersky research shows that most phishing pages transmit stolen information via email, Telegram bots, or attacker-controlled panels, before it enters underground resale channels.

Data stolen through phishing is rarely used only once: credentials from multiple campaigns are consolidated into data dumps and sold on dark web markets, in some cases for as little as $50. Buyers sort and verify the data to check whether accounts remain active and reusable across different services.

According to Kaspersky Digital Footprint Intelligence, average 2025 prices ranged from $0.90 for global Internet portals to $105 for crypto platforms and $350 for online banking access. Personal documents such as passports or ID cards sold for about $15 on average, with pricing influenced by account age, balance, linked payment methods, and security settings.

As datasets are enriched and combined, attackers can build detailed digital profiles that may later support targeted attacks on executives, finance staff, IT-administrators or individuals with valuable assets or personal documents.

“Our analysis shows that credentials account for nearly 90% of phishing attempts. Once collected, logins, passwords, phone numbers, and personal details are aggregated, checked, and resold, sometimes years after the initial theft.

Combined with new information, even old credentials can enable account takeovers and targeted attacks against both individuals and organisations.

By leveraging open-source intelligence and old breach data, attackers can craft highly personalised scams, turning one-time victims into long-term targets for identity theft, blackmail, or financial fraud,” said Olga Altukhova, senior web content analyst at Kaspersky.


Kindly share this post
Continue Reading

Trending