Telecom
Matrix Deconstructed: Sophos Report Says the Trend for Targeted Ransomware Continues
- Sophos released a report that delves into Matrix ransomware
- Primary means of access is through firewalls that have the Remote Desktop Protocol enabled
- As highlighted in Sophos’ 2019 Threat report, targeted ransomware attacks are gaining in prominence
Sophos, a global leader in network and endpoint security, today released a new report about a ransomware family called Matrix. The malware has been operating since 2016 and Sophos has tracked 96 samples in the wild.
Like previous targeted ransomware, including BitPaymer, Dharma and SamSam, the attackers who are infecting computers with Matrix have been breaking in to enterprise networks and infecting those computers over Remote Desktop Protocol (RDP), a built-in remote access tool for Windows computers.
However, unlike these other ransomware families, Matrix only targets a single machine on the network, rather than spreading widely through an organization.
In its latest paper, SophosLabs reverse engineered the evolving code and techniques employed by the attackers, as well as the methods and ransom notes used to attempt to extract money from victims.
The Matrix criminals evolved their attack parameters over time, with new files and scripts added to deploy different tasks and payloads onto the network.
Matrix ransom notes are embedded in the attack code, but victims don’t know how much they must pay until they contact the attackers. For most of Matrix’s existence, the authors used a cryptographically-protected anonymous instant messaging service, called bitmsg.me, but that service has now been discontinued and the authors have reverted to using normal email accounts.
The threat actors behind Matrix make their demand for cryptocurrency ransom in the form of a U.S. dollar value equivalent. This is unusual as demands for cryptocurrency normally come as a specific value in cryptocurrency, not the dollar equivalent.
It’s unclear whether the ransom demand is a deliberate attempt at misdirection, or just an attempt to surf wildly fluctuating cryptocurrency exchange rates.
Based on the communications SophosLabs had with the attackers, ransom demands were for US$2,500, but the attackers eventually reduced the ransom when researchers stopped responding to demands.
Matrix is very much the Swiss Army Knife of the ransomware world, with newer variants able to scan and find potential computer victims once inserted into the network.
While sample volumes are small, that doesn’t make it any less dangerous; Matrix is evolving and newer versions are appearing as the attacker are improving on lessons learned from each attack.
In Sophos’ 2019 Threat Report the team highlighted that targeted ransomware will be driving hacker behavior, and organizations need to remain vigilant and work to ensure they are not an easy target.
Sophos recommends implementing the following four security measures immediately:
- Restrict access to remote control applications such as Remote Desktop (RDP) and VNC
- Complete, regular vulnerability scans and penetration tests across the network; if you haven’t followed through on recent pen-testing reports, do it now. If you don’t heed the advice of your pentesters, the cybercriminals will win
- Multi-factor authentication for sensitive internal systems, even for employees on the LAN or VPN
- Create back-ups that are offline and offsite, and develop a disaster recovery plan that covers the restoration of data and systems for whole organizations, all at once
For additional information and fact checking, please refer to Matrix: A Low-Key Targeted Ransomware report by Sophos.
MTN Nigeria is accelerating investments in network expansion and modernization to address rising demand for mobile and data services across the country.
The operator is deploying additional base stations, upgrading existing infrastructure, and expanding fiber connectivity to improve network capacity, coverage, and service quality.
The investments are designed to support increasing smartphone adoption, higher data consumption, and the growing use of digital services by consumers and businesses.
MTN said the expansion aligns with its long-term strategy to enhance customer experience while strengthening Nigeria’s digital infrastructure.
The company expects the ongoing upgrades to improve connectivity, support economic growth, and enable broader access to reliable telecommunications services as demand for high-speed broadband continues to increase.
Airtel Africa’s CEO, Sunil Taldar, has announced the telco’s commitment to connecting 5,000 schools across its operating countries in Africa to the internet by 2027 through its philanthropic arm, Airtel Africa Foundation, in partnership with the United Nations Children’s Fund (UNICEF).
So far, the $57m partnership, which was launched in 2021, has cumulatively connected 3,296 schools and provided access to over 2 million learners and about 40,000 teachers. 64 digital learning platforms have been zero-rated thereby enabling more than 11m users to access educational content at no cost.
Speaking during a visit to St. Monica’s Girls School in Lusaka, which is one of the 300 schools already connected to the internet in Zambia, the Airtel Africa CEO stated that the initiative is having a profound impact on the quality of education by expanding access to digital learning resources for African children, in collaboration with governments.
Mr Taldar added: “Students are accessing best-in-class education from the curriculum developed by UNICEF in partnership with various Ministries of Education and provided through Airtel’s connectivity.
“We are also training teachers, so that they deliver digital education effectively. We aim to continue deepening meaningful connectivity in schools by providing free internet access, zero‑rated platforms and training teachers across the continent”.
Expressing her appreciation, the Headmistress of St. Monica’s Girls’ School, Sr Matilda Soloko said: “Being among the first schools connected in the initial stage, our learners have been able to study using the learning portal and their studies have been intensified. We remain grateful to Airtel and UNICEF.”
UNICEF’s Country Representative for Zambia, Dr Saja Farooq Abdullah said: “What this partnership has brought is really bridging the equality gap and the digital divide. It is making sure that every child learns wherever they are. It was exciting and interesting to see and hear from the girls how they can learn at their own pace, how they can review the materials, and how they do their homework with comfort.
The Director of Secondary Education in Zambia’s Ministry of Education, Yvonne Mwemba Chuulu lauded UNICEF and Airtel for the partnership saying: “At the Ministry of Education, we cannot do it alone, and we are grateful for the partnership that we have today.
“Our children are able to learn in a blended fashion, where we have a teacher who is also employing digital devices. We have also heard from the learners that they are able to access the portal when they are at home, which is a good thing because our learners continue to learn in the comfort of their homes”.
The School Connection programme is expanding digital learning to learners in 13 countries: Chad, Congo, Democratic Republic of Congo, Gabon, Kenya, Madagascar, Malawi, Niger, Nigeria, Rwanda, Tanzania, Uganda, and Zambia. By equipping these schools with internet connectivity and training teachers on using the digital tools, it is providing children, particularly in underserved and remote regions, with the digital tools and skills they need to thrive.
Airtel Africa Foundation is advancing inclusive development across four strategic pillars, Financial Inclusion, Education, Environmental Sustainability and Digital Inclusion.
MultiChoice has officially become a wholly owned subsidiary of French media company Canal+, marking the completion of one of the largest acquisitions in Africa’s media and entertainment industry.
The integration brings the South Africa-based pay television operator under the full ownership of Canal+, a global media group with operations in 70 countries.
Announcing the completion of the transaction on Thursday, Chief Executive Officer of Canal+ Africa and MultiChoice, David Mignot, described the development as the beginning of a new phase of growth for the broadcaster.
“MultiChoice is now a full subsidiary of a truly international media group operating in 70 countries.
“The group was founded in France, is listed in London and Johannesburg, and has a strong African presence with operations in more than 45 countries,” Mignot said.
The acquisition combines Canal+’s international operations with MultiChoice’s extensive footprint across sub-Saharan Africa, where it serves millions of households through its DStv and GOtv platforms, as well as the Showmax streaming service.
According to Canal+, the integration will strengthen MultiChoice’s competitive position by giving it access to broader financial resources, technology, content partnerships and operational expertise.
The company said the combined business would increase investment in local content production, sports broadcasting and streaming services as competition intensifies from global platforms such as Netflix, Amazon Prime Video and Disney+.
The transaction is also expected to provide MultiChoice with greater access to international markets at a time when traditional pay television operators are adapting to changing consumer viewing habits and the rapid growth of digital streaming platforms.
Canal+ has expanded steadily across Africa over the past decade and now assumes full control of a business operating in more than 45 African countries, further strengthening its position in the continent’s media and entertainment sector.
The acquisition followed Canal+’s gradual increase in its shareholding in MultiChoice, which began in 2024.
After exceeding the regulatory threshold, the company launched a mandatory offer in April 2024 to acquire the remaining shares of the Johannesburg-listed broadcaster.
Following regulatory approvals and shareholder acceptance, Canal+ secured control of MultiChoice in 2025 before completing the process that has now made the company a wholly owned subsidiary.
Industry observers describe the acquisition as one of the most significant media transactions involving an African company, reflecting a broader trend of consolidation as global entertainment firms seek greater scale to compete in the streaming era.
Police Busts Syndicate Who Allegedly Stole N3Bn from Financial Institution
MTN Accelerates Network Expansion to Meet Surging Telecom Demand
Court Remands Akujobi, Ex Access over alleged Theft of N294.5m
TeKnowledge, Equinix Partner to Advance Nigerian Digital Infrastructure
NSIB Faults Runway Identification, Reveals Cockpit Disagreement in Asaba Jet Incident
Nigeria Launches FreeTV Nationwide
NASENI Moves to Digitize CCB’s 5m Assets Declaration and Operations
NRC, Ponzi Scheme Collapses Resulting Loss of Billions of Naira
Lebara Nigeria Launches Lebara Play, Africa’s First Telecom-Owned Micro-Drama Platform
CANAL+ Partners Samsung to Pre-Load DStv Stream on New Samsung TVs In Nigeria, Other African Countries
Telecom3 days agoFixed Wired Internet Market Lags as Mobile Gains Ground
News3 days agoStudy Reveals How Moniepoint is Powering Nigeria’s $11Bn Food Service Sector
Broadcasting3 days agoBON Establishes Six Ad Hoc Committees to Modernize Broadcasting
Telecom2 days agoDStv, GOtv Owner MultiChoice Officially Joins Canal+ Group
News2 days agoPolice Busts Syndicate Who Allegedly Stole N3Bn from Financial Institution
E-Business3 days agoNew NIMC Act Strengthens Data Protection, Privacy – Director
General News3 days agoCourt Adjourns Alleged Binance Tax Evasion Case over Settlement Talks
E-Financial2 days agoSEC Unveils Plans to Enforce Mandatory ESG Reporting for Large Firms Next Year