Telecom
How Sophos Uncovered ‘Black Kingdom’ Ransomware Taking Advantage of ProxyLogon Vulnerabilities
Following the reporting of the Microsoft Exchange vulnerabilities and the out-of-band release of security patches on March 2, a growing number of new adversaries are exploiting these bugs to launch attacks, a global cyber security company, Sophos, has discovered.
Last week Sophos reported on attacks by DearCry ransomware.
To this end, Sophos has published “Black Kingdom Ransomware Begins Appearing on Exchange Servers,” detailing Black Kingdom ransomware that has been targeting Exchange servers that remain unpatched against the ProxyLogon vulnerabilities.
In the report, Sophos said that the Black KingDom ransomware is far from the most sophisticated payload we’ve seen. In fact, the early analysis by Sophos reveals that it is somewhat rudimentary and amateurish in its composition, but it can still cause a great deal of damage.
“It may be related to a ransomware of the same name that appeared last year on machines that, at the time, were running a vulnerable version of the Pulse Secure VPN concentrator software”, Sophos said.
Delivered through a webshell that was sent over Tor
The delivery of Black KingDom was orchestrated from a remote server with an IP address that geolocates to Germany, 185.220.101.204, while the attacker operated from 185.220.101.216.
Unfortunately, because both IP addresses belong to a Tor exit node, it’s impossible to know where the attackers are physically located.
The threat actor exploited the on-premises versions of Microsoft Exchange Server, abusing the remote code execution (RCE) vulnerability also known as ProxyLogon (CVE-2021-27065).
After successfully breaching the Exchange server, the adversary delivered a webshell. This webshell offers remote access to the server and allows the execution of arbitrary commands.
Some of the key findings are summarized in the following commentary from Mark Loman, a ransomware expert at Sophos and director, engineering technology office, thus:
“It’s been three weeks since the release of security patches for the ProxyLogon vulnerabilities, and adversaries are racing against time to target still unpatched Exchange servers. As we saw with DearCry ransomware, this can lead to the release of prototype, rushed or poor quality code created by less experienced developers. Today we report on another example of this, perpetrated by the operators behind Black Kingdom ransomware.
“The Black Kingdom ransomware targeting unpatched Exchange servers has all the hallmarks of being created by a motivated script-kiddie. The encryption tools and techniques are imperfect but the ransom of $10,000 in bitcoin is low enough to be successful. Every threat should be taken seriously, even seemingly low-quality ones.
“Defenders should take urgent steps to install Microsoft’s patches to prevent exploitation of their Exchange Server. In addition, the Exchange server should be scanned for web shells that allow attackers to run commands on the server. If this is not possible, the server should be disconnected from the internet or closely monitored by a threat response team.” – Mark Loman, director, engineering technology office, Sophos
Sophos Intercept X and Sophos Intercept X with EDR against threats attempting to exploit the ProxyLogon Exchange vulnerabilities.
MTN Nigeria, in collaboration with ONErpm and Ultima Studios, has announced Ayodeji Benson, popularly known as Ayo Benzi, as the winner of the maiden edition of the Next Afrobeats Star reality show.
L-R: Onyinye Ikenna-Emeka, Chief Marketing Officer, MTN Nigeria; Ayodeji Benson, Winner, Next Afrobeats Star Reality Show (Season 1) and Emamoke Ogoro, General Manager, Brand and Communication, MTN Nigeria, at the grand finale of the Next Afrobeats Star Reality Show (Season 1), held at the Ultima Studios, Lekki, Lagos on Saturday, December 13, 2025.
The grand finale, held on Sunday night at Ultima Studios in Lekki, Lagos, marked the climax of a nationwide talent search that began in September with over 15,000 aspiring musicians.
After weeks of auditions, mentorship, and rigorous training, five finalists – Ayo Benzi, Dave Cash, Kaeko, Somto O’Laker, and Lucky Yay – battled for the top prize in a high-energy showcase of performance and artistry.
At the end of the electrifying contest, Ayo Benzi emerged victorious, securing a ₦150 million music deal. Dave Cash was named first runner-up with ₦100 million, while Kaeko, Somto O’Laker, and Lucky Yay received ₦75 million, ₦50 million, and ₦25 million respectively.
Throughout the season, contestants were mentored by leading Afrobeats producers Sarz, Puffy Tee, P Prime, and Andre Vibez. Benzi, who was part of Puffy Tee’s team, credited the mentorship programme for sharpening his craft and stage presence.
Speaking at the event, Onyinye Ikenna-Emeka, Chief Marketing Officer of MTN Nigeria, said the initiative reflects the company’s commitment to youth empowerment and cultural expression.
“The Next Afrobeats Star platform is about creating real opportunities for young Nigerians and giving their talent the structure, visibility, and support it deserves.
“Afrobeats continues to place Nigeria on the global cultural map, and MTN is proud to be enabling the next generation of artists who will take this sound even further,” she said.
She added that the finale was not just a competition but a celebration of growth and readiness for the global stage.
In his acceptance speech, Ayo Benzi described the victory as a defining moment in his career.
“A big thank you to MTN. From the audition days, the treatment MTN has given us has been amazing. God bless the brand,” he said.
The finale also featured guest performances by Afrobeats stars Iyanya and Bella Shmurda, adding glamour to the night and reinforcing the show’s connection to the wider music ecosystem.
With the successful conclusion of the season, MTN Nigeria and its partners reaffirmed their role in championing youth ambition, supporting creative industries, and shaping the future of Nigerian music through platforms that turn potential into opportunity.
T2, formerly known as 9mobile, is under investigation by the Nigerian Communications Commission (NCC) in Benue State for an undisclosed incident disrupting USSD, SMS, voice, and data services across nine local government areas.
T2
The affected areas include Ado, Agatu, Gwer East, Gwer West, Konshisha, Obi, Ohimini, Okpokwu, and Otukpo, as detailed in an advisory on the NCC Major Outages Portal, which tracks significant disruptions reported by Mobile Network Operators (MNOs) and Internet Service Providers (ISPs).
Neither T2 nor its public relations firm, Chain Reactions, has responded to inquiries on the outage’s cause or restoration efforts as of this report.
The NCC’s continued reference to the operator as 9mobile, months after its public rebranding to T2 in August 2025, has sparked questions about whether the name change was formally notified to the regulator.
This probe aligns with NCC mandates requiring operators to disclose major outages, their impacts, and timelines for fixes, with compensation obligatory for disruptions exceeding 24 hours under the Consumer Code of Practice Regulations.
Industry watchers note that such incidents, often linked to fibre cuts, power failures, or infrastructure faults, underscore ongoing challenges in Nigeria’s telecoms sector, particularly amid T2’s subscriber losses post-rebrand. NCC vows transparency via its portal to hold operators accountable and protect consumers.
Telecom
NCC Unveils Draft 5-Year Spectrum Roadmap, 60 GHz License-Exempt Guidelines to Boost Broadband, Innovation
Nigerian Communications Commission (NCC) has unveiled two pivotal regulatory draft documents aimed at reshaping Nigeria’s communications sector over the next five years and fast-tracking deployment of ultra-high-speed wireless technologies.
NCC
In a public notice dated December 19, 2025, and issued pursuant to its mandate under the Nigerian Communications Act (NCA) 2003, the Commission published the Draft 5-Year Spectrum Roadmap for the Communications Sector (2025–2030) and Draft Guidelines for the Use of the 60 GHz License-Exempt Band for Multi-Gigabit Wireless Systems.
Both documents are accessible on the NCC website for stakeholder review, with the roadmap outlining strategic spectrum planning, allocation, and management to optimise utilisation, support emerging technologies like 5G and IoT, expand broadband access, and align with global best practices.
The Spectrum Roadmap emphasises four core pillars: bridging the digital divide through low-band spectrum and satellite services, attracting investments via flexible licensing models, enhancing service quality with mid-band optimisation, and fostering innovation in areas such as direct-to-device connectivity and secondary spectrum trading.
It sets ambitious targets including universal 4G coverage nationwide, 50 per cent 5G penetration in state capitals, and average broadband speeds of 100 Mbps by 2030, while addressing rising data demand through band refarming and efficient management.
Complementing this, the 60 GHz Guidelines establish a license-exempt framework for the 57–66 GHz band, enabling multi-gigabit speeds up to 10 Gbps for short-range applications like WiGig, fixed wireless access, enterprise connectivity, urban broadband, and backhaul solutions.
The rules mandate NCC type approval for equipment, site registration for outdoor use, and interference mitigation measures, while prohibiting wide-area networks to safeguard primary users.
In line with Section 58 of the NCA 2003, NCC invites comments from industry operators, equipment manufacturers, consumer groups, and the public, with submissions due by Friday, January 16, 2025, via email to [email protected], [email protected], and [email protected].
The notice, signed by Mrs Nnenna Ukoha, Head of Public Affairs, stresses that stakeholder inputs will refine the frameworks to drive innovation, investment, competition, and sustainable growth in Nigeria’s telecoms ecosystem.
NDIC Reinforces Full Oversight Compliance to Safeguard Depositors
GTCO Secures Regulatory Approvals to Raise N10bn in Private Placement
Jumia CEO says Black Friday Signals Nigeria’s E-Commerce Maturity
MTN Nigeria Crowns Ayo Benzi Winner of Next Afrobeats Star
T2 Faces NCC Probe in Benue Over Major Service Outage in 9 LGAs
Nigeria Records Highest Weekly Cyberattacks in Africa — Report
Cyber Tsunami Hits Nigeria as Breaches Surge 1,047%, esentry Q3 Report Reveals
Financial Sector Faced AI, Blockchain and Organised Crime Threats in 2025 – Report
Minister Claims Bandits Exploit Poor Network, Bounce Calls Off Multiple Towers
Report Reveals Half of 2025’s Compromised Passwords were Already Leaked
Telecom3 days agoGoogle Finally Allows Users to Change Gmail Address, Keeps Data and Services Intact
News2 days agoInsomniaQ Spotlights African Creativity in Lagos
General News3 days agoT2 Backs Youth Excellence as NCBC Wins Bosun Tijani Foundation Basketball Tournament
E-Financial2 days agoNigeria’s N58.18trn Budget and Rising Cost of Deficit Governance
Telecom2 days agoNnaemeka Ani – The Architect of ‘Code and Courage’
Telecom2 days agoMTN Nigeria Appreciates Partners, Customers at Lagos Prestige Experience
Telecom13 hours agoNCC Grants 45 Days for Telecoms Firms to Fix Unapproved Shareholding Changes
Telecom13 hours agoMTN Nigeria Crowns Ayo Benzi Winner of Next Afrobeats Star