General News
Preventing Your Network From Becoming a Botnet

By Harish Chib, vice president, Middle East & Africa, Sophos
“Not having sufficient network protection may allow your organization’s devices to be part of the next cyber-attack”
Botnets are large volumes of distributed networked computers and devices that have been taken over by a cybercriminal.
Botnets, also referred to as bots, are usually taken over by malicious software to enable remote control by a threat actor.
They are set up and developed by a hacker to provide a powerful and dark, cloud computing network to conduct cyberattacks of a criminal nature.
The growth in mobile and network devices has created large scale social and productivity benefits for us. We can now remotely access computers, security systems, cameras, appliances, and a growing list of devices, interconnected with cloud. Collectively this is referred to as the Internet of Things or IoT.
A worrying aspect of the growth of Internet-connected devices is the absence of basic security precautions.
Most end users rarely change factory defaults, which can be exploited by hackers to take control of the devices.
Another door for cybercriminals to take control of connected devices is called the back-door entry. This is a manufacturer’s access to the device through an undisclosed connection, used for remote testing and updates.
This large distributed, network of computers, under the control of threat actors, represents an aggregation of computing power that can be used for a devastating effect.
Inside the network
Malicious software designed to exploit IoT devices are usually not sophisticated. They operate by scanning network ports, looking for access opportunities, and gaining access through default credentials, or brute-force hacking to gain access.
This software is much easier to defend against, as it merely requires configuring the network firewall protection devices.
Similar to other malware, botnets can enter an organization through multiple points of entry. This includes email attachments, hacked web sites, connected sensors and other IoT devices, and USB sticks.
Once a malicious software has entered an organization, it will call home – the hackers command and control server – to register its success in gaining entry and to request further instructions.
It may be told to lie low and wait, or be instructed to move laterally on the network to infect other devices, or to participate in an attack.
This attempt by the malicious software to call-home represents an opportunity to detect infected systems on the network that are becoming part of a botnet.
Once an attack has got underway, the attack itself can be difficult to detect. From a network traffic point of view, the device will simply be sending emails out as spam, transferring data or mining bitcoins, or performing DNS lookups and a variety of other requests, usually seen in large scale attacks. In isolation, none of these types of activities are noteworthy.
Building protection
The most important ingredient for effective protection from botnets is the organization’s network firewall. The following can help to get best protection from the firewall.
· Advanced Threat Protection can identify botnets already operating on the network. Ensure the firewall has malicious traffic detection, botnet detection, and command and control, call-home traffic detection.
· Intrusion prevention can detect hackers attempting to penetrate and take over the network. Ensure the firewall has next-gen intrusion prevention system that is capable of identifying attack patterns inside the network.
· Sandboxing can pick up the latest malicious software before it reaches the organization’s computers. Ensure the organization firewall offers advanced sandboxing that can identify suspicious web or email files and activate them in a safe environment.
· Effective web and email protection can prevent malware from getting onto the network. Ensure the firewall has behavioral-based web protection that can simulate JavaScript code in web content to determine behavior before it reaches the browser.
· Ensure the firewall has top-shelf anti-spam and antivirus technology to detect malware in email attachments.
· Web Application Firewall can protect servers, devices, and business applications from being hacked. Ensure the firewall offers WAF protection for any system that requires remote access.
Best-practices
· Change the password for all your network devices to a unique complex password, and use a password manager if necessary.
· Minimize use of IoT devices and update all essential connected devices. Also disconnect unnecessary devices from the network and upgrade older devices to newer models.
· Avoid using IoT devices that require ports to opened in the network firewall or router to provide remote access. Instead, use cloud-based devices that connect only to the cloud provider’s servers and do not offer direct remote access.
· Do not enable UPnP on your firewall or router. This protocol enables devices to open ports on the firewall on demand without your knowledge increasing the surface area of attack.
· Use secure VPN technologies to manage your connected devices remotely.
Botnets have a massive slowdown effect on the global Internet traffic. They can also have a devastating impact on an organization, if the objective of the attack is to steal sensitive information. Even if the botnet operating on the organization’s network is not after its data, it could be using devices and network resources to cause devastating harm to another organization.
Do not let your network become part of the next global botnet attack.
General News
EFCC to Use Space Technology to Boost Asset Tracking, Investigations

Economic and Financial Crimes Commission (EFCC) has partnered with the National Space Research and Development Agency (NASRDA) to deploy advanced space and geospatial technologies in investigations and asset management.

Ola Olukoyede, executive chairman of the EFCC,
The move is expected to deepen transparency, strengthen asset recovery and curb economic sabotage according to a statement by Dele Oyewale, head, Media and Publicity, EFCC.
He said that the partnership was formalised through the signing of a Memorandum of Understanding (MoU) on Thursday in Abuja
The agreement is aimed at strengthening inter-agency collaboration, particularly in the areas of investigations, asset tracking and fraud risk assessment, marking a new phase of cooperation between the anti-graft agency and Nigeria’s space research and regulatory authority.
Speaking at the signing ceremony, Ola Olukoyede, executive chairman of the EFCC, described the agreement as a practical demonstration of the power of collaboration among government agencies.
He noted that closer cooperation would make it easier for institutions to effectively deliver on their statutory mandates.
According to Olukoyede, the MoU clearly defines the responsibilities of both agencies and establishes a framework for sustained cooperation.
He disclosed that a special monitoring and implementation team would be constituted to ensure the effective operationalisation of the agreement and to periodically review its impact.
“We will put a team together that will monitor the operationalisation of this MoU and also review the effectiveness of the platform from time to time.
“When agencies work together in the spirit of collaboration, it not only enhances efficiency but also encourages other ministries, departments and agencies to explore similar partnerships in the overall interest of national development”, he said.
Explaining the specifics of the partnership, the EFCC chairman said NASRDA would provide advanced technological tools to boost the Commission’s investigative capacity and asset tracking, while the EFCC would deploy its expertise to support the agency in fraud risk assessment.
“We will support you in the area of fraud risk assessment, and you will support us in promoting our investigative capacity.
“Where our eyes cannot get to, with the aid of your technology, we will be able to get there”, Olukoyede said.
He noted that the collaboration would be particularly beneficial to investigations into illegal mining activities, which have been linked to economic sabotage and rising insecurity in parts of the country.
“With the technology you are going to support us with, we will be able to identify some of these areas,” he added.
Olukoyede further expressed optimism that the partnership would significantly enhance the EFCC’s asset management processes, stressing that asset recovery remains one of the core pillars of the Commission’s mandate.
He explained that recovered assets are scattered across the country and exist under different legal statuses, including interim and final forfeiture.
“In some of these places, we may not have enough personnel to physically secure the assets. But with your support, we will be able to deploy geospatial technology and asset tagging devices to monitor both movable and immovable assets in a transparent and accountable manner”, he said
In his remarks, Matthew Adepoju, director-general and chief executive officer of NASRDA, welcomed the partnership, describing the MoU as a major milestone in the pursuit of justice and regulatory compliance within Nigeria’s space ecosystem.
Adepoju stressed that space-related activities are strictly regulated in developed economies and should be treated with similar seriousness in Nigeria, particularly in view of the potential misuse of satellite assets.
“You cannot go anywhere in Europe, continental America or the Far East and be doing business in the space ecosystem without the country ensuring that you are doing the right thing.
“We know for a fact that some satellite assets are being used negatively in driving insecurity in the country”, he said.
He also raised concerns over the use of satellite-mapped data on Nigeria’s natural resources to aid illegal activities, especially illegal mining, which he identified as one of the drivers of insecurity.
General News
DalaHill, BoA Partner on $100,000 ACF Climate Finance Initiative

DalaHill Law Practice and the Bank of Agriculture (BoA) have signed a Mutual Accountability Framework (MAF), marking a milestone in the launch of a climate finance initiative funded by the African Climate Foundation (ACF) and valued at US$100,000.

According to a statement by the firm, the signing took place during a kickoff ceremony at the BoA headquarters in Abuja and formalised the roles, responsibilities and shared commitments of both institutions in delivering the project. The framework was signed by Ayo Sotinrin, BoA Managing Director, and Mohammed Hamza, Managing Associate at DalaHill.
The ACF-funded initiative is designed to support BoA’s institutional transition towards climate-aligned agricultural finance. Central to the programme is the establishment of a Clean Energy Delivery and Innovation Unit (CEDIU), a dedicated function that will integrate climate risk considerations, environmental data and sustainability principles into the bank’s strategy, operations and investment decision-making.
Under the initiative, BoA will also be supported to develop Clean Energy Access Systems and Climate Finance Development Frameworks, alongside a pipeline of bankable, climate-aligned agricultural projects.
These projects are expected to attract domestic and international capital into the sector, contributing to efforts to bridge Nigeria’s estimated $247.3 billion financing gap for its green energy transition.
Speaking on behalf of DalaHill, Mohammed Hamza described the initiative as a pivotal intervention in Nigeria’s agricultural and climate finance landscape. He said the firm is acting as a trusted adviser, working with institutions to deliver catalytic and transformative solutions.
According to him, DalaHill is deploying a multidisciplinary technical team to support BoA’s transition into a climate-aligned institution capable of attracting finance for scalable, investment-ready agricultural projects.
He highlighted the strategic importance of the project, noting that while ACF has traditionally focused on renewable energy, climate alignment within the agricultural sector is critical to driving Nigeria’s broader energy transition. He added that the initiative represents ACF’s first climate finance grant promoting agriculture in Nigeria.
In his remarks, Sotinrin expressed appreciation to the project partners and acknowledged longstanding gaps within Nigeria’s agricultural finance ecosystem. He reaffirmed BoA’s commitment to driving systemic change by attracting climate-aligned expertise, strategic funding and increased national and international attention to the sector.
Sotinrin also noted that the initiative aligns with the Federal Government’s climate and sustainability agenda, referencing Nigeria’s participation at an ongoing global climate sustainability conference in Abu Dhabi.
He further highlighted strong government backing for BoA’s transformation, including presidential approval in October 2024 of a US$1 billion recapitalisation plan aimed at strengthening the bank’s capacity to support national development.
DalaHill Law Practice is a full-service commercial law firm headquartered in Abuja, with a strong track record in advising on economically catalytic projects across sectors including energy, infrastructure, finance, trade and emerging markets.
The firm is known for structuring complex transactions, managing regulatory risk and supporting projects that promote sustainable growth and long-term economic impact in Nigeria and beyond.
General News
How to Stay Safe Online During Sales Periods

Kaspersky’s new global research reveals that 65% of online shoppers believe they can detect fraud on their own, while only 42% actually use security software to protect their payments and block malicious links.

Experts consider this a major risk for online buyers. Over the past year Kaspersky identified nearly 6.7 million phishing attacks globally impersonating online stores, payment systems, and banks, with 55.6% targeting online shoppers.
As the post-holiday and summer sales season kicks off, Kaspersky conducted a survey to examine consumer cybersecurity practices employed during online shopping. The findings show that 97% of respondents demonstrate a substantial level of awareness of online security risks and implement at least some measures to safeguard their digital transactions.
However, the survey found that fewer than half the participants use dedicated security software to block phishing attempts and protect payment transactions. This concerning trend is particularly pronounced among the 55+ year old generation, with only 32% of respondents in this age group actually using security software when making online purchases.
The most commonly adopted security protocols include being vigilant about potential warning signs, such as suspicious hyperlinks or unusual website design (65%) and verifying seller authenticity (62%).
Kaspersky experts emphasise that while these practices are essential protective measures for online shopping, they constitute only foundational protection strategies rather than the comprehensive fraud prevention provided by a security solution.
Other steps that could protect online shoppers, like using a separate credit card for digital purchases or using a separate email address to register with unfamiliar online shops, were chosen by 33% and 26% of survey participants, respectively.
Meanwhile, 30% claimed to consult with friends and relatives before making a purchase. Interestingly, this option is highly popular among the younger generation, with 37% opting for it, while it is less common among older people (21%).
“Throughout the year, we’ve observed that online shoppers have consistently been one of the most desirable targets for scammers. During sales periods, their scams can become even more pervasive. Staying vigilant is crucial, but protecting yourself requires more than just awareness.
It is particularly concerning how scammers are now using AI to craft more sophisticated, targeted phishing attempts that are increasingly difficult for regular users to recognise,” comments Olga Altukhova, Senior Web Content Analyst at Kaspersky.
Sales seasons are peak times for scammers. To protect yourself against emerging threats, implement the following security practices:
– Don’t save your full credit card details on websites unless absolutely necessary.
– Consider using a separate debit card specifically for online purchases and set up transaction alerts on your bank and credit card accounts.
– Be extra cautious of “flash sales” that seem too good to be true. Watch out for websites that pressure you into making quick decisions, and be wary of sellers who refuse returns or exchanges.
– Use different passwords for each online account and enable two-factor authentication wherever possible.
– Apply a security solution with a strong anti-phishing component. For instance, Kaspersky Premium received the annual ‘Approved’ certification from the leading testing lab AV-Comparatives in 2025 for detecting 93% of phishing URLs, demonstrating outstanding anti-phishing capabilities, powered by AI technology.
– Scammers constantly evolve their methods, so staying informed about new phishing techniques can help you recognise and avoid them. The Kaspersky Security blog will help you keep your finger on the pulse of emerging cyberthreats.
The study was conducted by Kaspersky’s market research center in November 2025. A total of 3000 respondents from 15 countries (Argentina, Chile, China, Germany, India, Indonesia, Italy, Malaysia, Mexico, Saudi Arabia, South Africa, Spain, Turkey, the United Kingdom, and the United Arab Emirates) took part in the survey.
E-Financial2 days agoAngst as FG Demands 7.5 Percent VAT on Mobile Bank Transfers, USSD
News2 days agoMoniepoint Launches Second Cohort of DreamDevs Initiative to Double Down on Africa’s Tech Talent Pipeline
E-Financial2 days agoNGX lists 3.156bn UBA shares, boosting capital to N513Bn
E-Financial2 days agoThe Missing Pieces in Nigeria’s Banking Recapitalisation
Telecom2 days agoGlo Unveils Immersive Gaming Experience, Travel Saga
E-Business2 days agoHalf of Global Companies Build SOCs to Enhance Cybersecurity, with a Focus on Human Expertise
General News2 days agoNITDA DG Reaffirms Nigeria–U.S. Partnership on Data Privacy, AI and Cybersecurity
General News2 days agoParadigm Initiative Condemns the Internet Shutdown and Media Restrictions in Uganda Ahead of the 2026 General Election



















