Telecom
Sub-Saharan Africa Faces New APT, Cyber mercenary Risks
Cyber mercenaries have become the latest risk amid the main threat actors targeting organisations around the world. This is according to Maher Yamout, senior security researcher, Global Research & Analysis Team at Kaspersky, who was speaking during a Kaspersky webinar this week.
Yamout said Kaspersky researchers have detected an increase in cyber mercenary activity this year.
He explained that where cyber criminals usually want to steal data to immediately monetise it, cyber mercenaries typically take data on behalf of someone else, who then uses it to better understand the marketplace to gain a competitive advantage.
Outlining recent threat trends in sub-Saharan Africa, Yamout said there had been a decrease in certain types of attack, but an increase in others – indicating that cyber criminals were adapting to the changing conditions brought about by the COVID-19 pandemic.
In Nigeria, PornoBlocker dropped 72.8%, GandCrypt dropped 28.3%, but STOP increased 84%. In South Africa, for example, the incidence of WannaCry decreased by 87%, but PornoBlocker increased by 72% and STOP increased by 94%. STOP propagates using cracked software adware bundles, and its spread may be the result of remote workers using cracked software, he said.
In recent months, the top targeted sectors in SA, Nigeria and Kenya have been government, diplomatic, education, healthcare and the military – often with APT groups targeting one sector and pivoting to use the compromised sector to target another entity. “So sometimes you are the victim, and sometimes you are the target,” Yamout said.
Among the threat actors targeting these industries in sub-Saharan Africa are TransparentTribe, Oilrig, MuddyWater and Unknown. Yamout said: “TransparentTribe is an interesting APT group, presumed to be Asian, which steals targets’ information and data possibly to be used for national security purposes.”
He said this group’s tools, techniques and procedures include macro-based malicious documents, open source tools (Peppy RAT/CrimsonRAT), and they also have the capability to steal data from air gap networks using USBs.
Also a threat in these sectors are Oilrig, which steals sensitive information by exploiting server-based backdoor with stolen credentials and malicious documents with macros droppers; MuddyWater, which uses custom and in-house built toolsets, native Microsoft tools for stealth, and open source tools such as ‘secure socket funnelling’; and Unknown, which uses a shortcut-based dropper using a COVID-19 theme, delivery method over Telegram Messenger and delivery through compromising legitimate Web sites.
Artem Karasev, senior product marketing manager at Kaspersky, noted that endpoints are the most common entry points into an organisation’s infrastructure, with 68% of organisations having fallen victim to endpoint attacks.
“We have observed an overall decrease in the number of attacks, but they are becoming more sophisticated and devastating. At the same time, we see a growing gap in IT security expertise in the market,” he said. Kaspersky said as a result, organisations needed a comprehensive and adaptive cyber security strategy.
In the year ahead, Kaspersky expects to see an increase in cyber mercenaries and APT attacks. “We may see more use of cyber mercenaries to make attribution harder; as well as cyber criminals increasing targeted ransomware deployment through channels such as cracked software, or by exploiting the supply chain, IT or managed services,” Yamout said.
“Data breaches could become more common because everyone is rushing to expose their databases and servers to the Internet. In addition, remote services will remain a major weakness because everyone is exposing their services to the Internet and not everyone is able to cope with security and availability at the same time; while threat actors keep evolving with complex toolsets.”
With the introduction of Travel Saga, a premium, fast-paced gaming experience that is currently live and accessible to customers on its network, Globacom has lifted the bar for mobile entertainment in the country.
Travel Saga is a story-driven, intricately connected role-playing game designed to provide the thrill, complexity, and competitive intensity of some of the most well-known action games in the world.
The game, which has been painstakingly optimized for mobile devices, redefines mobile gaming as a full-fledged digital battlefield by translating a console-grade experience onto data-enabled handsets.
Fundamentally, Travel Saga takes users on quick virtual journeys against recognizable international landscapes. In a dynamic, ever-evolving gaming environment, players are thrown into furious missions, fierce fights, and ever-expanding tales where talent, strategy, and endurance determine who rises through the ranks to become a true war hero.
In addition to the excitement of fighting, users are encouraged to go to various locations, take part in thrilling challenges, and participate in intense competition for in-app rewards like points and victory badges. With each encounter and accomplishment, the immersion increases with each level, maintaining momentum and excitement.
Flexible subscription plans with one-time or auto-renewal choices are available to subscribers for the service, which costs ₦100 per day and ₦250 per week. By dialing *70021#, customers can quickly subscribe and gain instant access to the action.
With Travel Saga, Glo reaffirms its dedication to innovation and high-end digital experiences, making top-notch gaming easily accessible to its customers. The game offers uninterrupted action, adventure, and competition, all smoothly supported by the Glo network.
SHELT, a leading cybersecurity-as-a-service provider, has earned inclusion in the 2025 MSSP 250, the annual ranking of the world’s top 250 Managed Security Service Providers (MSSPs) by MSSP Alert, a CyberRisk Alliance publication.
SHELT
The list evaluates firms on business performance, service breadth, and industry impact, spotlighting those excelling in growth, operational excellence, and advanced managed security amid rising cyber threats. Selection criteria include annual recurring revenue, profitability, workforce expansion, business growth, and the depth of managed security offerings.
SHELT’s recognition underscores its investments in scalable security operations, threat intelligence, and tailored managed services across multiple regions, enabling clients to navigate complex risk landscapes effectively.
“Being recognised in the MSSP 250 is a meaningful milestone for our team,” stated Youssef Abillama, CEO of SHELT. “It validates our focus on building practical, resilient security services that help organisations manage risk and respond effectively to today’s evolving cyber threats.”
The company hailed the honour as testament to its teams’ dedication and expertise worldwide, reaffirming commitment to enhancing capabilities and delivering trusted cybersecurity solutions.
Meta Platforms, owner of Facebook, has appointed Dina Powell McCormick, a former adviser to President Donald Trump, as its new president and vice chairman, bolstering its leadership amid aggressive AI and infrastructure expansion.
Dina Powell McCormick
The announcement, made on Monday, positions Powell McCormick – who recently stepped down from Meta’s board after eight months – to guide overall strategy, including multi-billion-dollar investments in data centres and global partnerships.
A Goldman Sachs veteran with 16 years in senior roles and prior stints as deputy national security adviser under Trump and in the Bush administration, she brings deep finance and international ties to the role.
Meta CEO Mark Zuckerberg hailed her as “uniquely qualified” for the company’s next growth phase, while President Trump praised the move on Truth Social as a “fantastic choice”.
The hire signals Meta’s efforts to strengthen White House relations, following recent dinners with Trump and U.S. investment pledges worth hundreds of billions
EFCC to Use Space Technology to Boost Asset Tracking, Investigations
SEC Partners Police in Nationwide Crackdown on Ponzi Schemes, Crypto Frauds
Paystack Expands Beyond Payments into Banking
DalaHill, BoA Partner on $100,000 ACF Climate Finance Initiative
How to Stay Safe Online During Sales Periods
Banks quietly move to enforce new ₦50 transfer levy from Jan. 1
FIRS says NIN, CAC Numbers to Serve as Tax IDs from 2026
Nigeria Takes the Lead in the Global WSIS+20 Digital Agenda
Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack
PalmPay Launches N400 Million World Travel Carnival, Rewarding Users with Free Global Trips
General News3 days agoPalmPay, Premier Cool to Reward 10,000 Nigerians with ₦100m in “10k for 10k Campaign”
E-Financial3 days agoEcobank Joins Trillion-naira Club for the First Time in 20 Years
E-Business3 days agoKaspersky Warns Telecom Threats from 2025 will Carry into 2026 as New Technology Adds New Risk
E-Financial2 days agoAngst as FG Demands 7.5 Percent VAT on Mobile Bank Transfers, USSD
E-Business3 days agoNigerian Terra Industries Secures $11.8m for Expansion
Telecom3 days agoSHELT Named in Prestigious 2025 MSSP 250 List for Cybersecurity Excellence
News2 days agoMoniepoint Launches Second Cohort of DreamDevs Initiative to Double Down on Africa’s Tech Talent Pipeline
E-Financial2 days agoNGX lists 3.156bn UBA shares, boosting capital to N513Bn