Telecom
Abuse of Trusted Applications Grows by 51% in Latest Sophos Report
Sophos, a global leader in innovating and delivering cybersecurity as a service, today released “The Bite from Inside: The Sophos Active Adversary Report,” an in-depth look at the changing behaviors and attack techniques that adversaries used in the first half of 2024.
John Shier, field CTO, Sophos
The data, derived from nearly 200 incident response (IR) cases from across both the Sophos X-Ops IR team and Sophos X-Ops Managed Detection and Response (MDR) team, found that attackers are leveraging trusted applications and tools on Windows systems, commonly called “living off the land” binaries, to conduct discovery on systems and maintain persistence.
When compared to 2023, Sophos saw a 51% increase in abusing “Living off the Land” binaries or LOLbins; since 2021, it’s increased by 83%.
Among the 187 unique Microsoft LOLbins detected in the first half of the year, the most frequently abused trusted application was remote desktop protocol (RDP). Of the nearly 200 IR cases analyzed, attackers abused RDP in 89% of them.
This dominance continues a trend first observed in the 2023 Active Adversary report in which RDP abuse was prevalent in 90% of all IR cases investigated.
“Living-off-the-land not only offers stealth to an attacker’s activities but also provides a tacit endorsement of their activities. While abusing some legitimate tools might raise a few defenders’ eyebrows, and hopefully some alerts, abusing a Microsoft binary often has the opposite effect. Many of these abused Microsoft tools are integral to Windows and have legitimate uses, but it’s up to system administrators to understand how they are used in their environments and what constitutes abuse. Without nuanced and contextual awareness of the environment, including continuous vigilance to new and developing events within the network, today’s stretched IT teams risk missing key threat activity that often leads to ransomware,” says John Shier, field CTO, Sophos.
In addition, the report found that, despite the government disruption of LockBit’s main leak website and infrastructure in February, LockBit was the most frequently encountered ransomware group, accounting for approximately 21% of infections in the first half of 2024.
Other key findings from the latest Active Adversary Report:
· Root Cause of Attacks: Continuing a trend first noted in the Active Adversary Report for Tech Leaders, compromised credentials are still the number one root cause of attacks, accounting for the root cause in 39% of cases. This is, however, a decline from the 56% noted in 2023
· Network Breaches Dominate for MDR: When examining solely the cases from the Sophos MDR team, network breaches were the dominant incident the team encountered
· Dwell Times Are Shorter for MDR Teams: For cases from the Sophos IR team, dwell time (the time from when an attack starts to when it’s detected) has remained approximately eight days. However, with MDR, the median dwell time is just one day for all types of incidents and only three days for ransomware attacks
· The Most Frequently Compromised Active Directory Servers Are Nearing End of Life: Attackers most frequently compromised the 2019, 2016, and 2012 server versions of Active Directory (AD). All three of these versions are now out of mainstream Microsoft support—one step before they become end-of-life (EOL) and impossible to patch without paid support from Microsoft. In addition, a full 21% of the AD server versions compromised were already EOL
To learn more about attacker behaviors, tools and techniques, read “The Bite from Inside: The Sophos Active Adversary Report,” on Sophos.com.
Mart Networks, a leading cybersecurity distributor across Africa and the Middle East, has unveiled a specialized cybersecurity package tailored for fintech firms.
The solution, powered by Invinsense, Infopercept’s unified cybersecurity platform, aims to address the growing security needs of fintechs operating in highly regulated environments.
According to Moiz Maloo, Managing Director at Mart Networks, fintech companies face unique security challenges due to stringent regulatory requirements and increasing threats. “Most fintechs don’t have the luxury of multiple internal security teams or system integrators. With this focused offering, we’re providing an all-in-one platform with managed services built specifically for the fintech environment,” he said.
The offering integrates four key components: Invinsense XDR and Managed Detection & Response for real-time monitoring, Exposure Management for vulnerability detection, Security Compliance Management to support fintechs in meeting regulatory standards, and Cybersecurity Awareness Programs to empower teams against cyber threats.
Furthermore, the package includes deep application visibility, ensuring fintech-specific applications remain secure through Invinsense SIEM’s custom log ingestion capabilities. To reinforce protection, Infopercept’s engineering team will provide code-level fixes, patches, and infrastructure security enhancements.
With the rise of cloud-based fintech operations, the solution also incorporates full-stack cloud security, including API security, Cloud Infrastructure Entitlement Management (CIEM), and Application Security Posture Management (ASPM).
Mart Networks’ move underscores the growing importance of cybersecurity in Africa’s fintech sector, as financial services become increasingly digital and susceptible to evolving cyber threats.
Equinix, Inc. the world’s digital infrastructure company™, has officially opened its latest data center expansion in Lagos. Called LG2.3, the facility will support Nigeria’s growing digital transformation efforts, providing state-of-the-art colocation and secure interconnection solutions which will empower businesses across the region.
It also signifies Equinix’s unwavering dedication to advancing Nigeria’s position in the global digital economy, reinforcing the company’s commitment to the region.
As part of the inauguration, Bruce Owen, President of EMEA at Equinix, along with other Equinix executives, led the ribbon-cutting ceremony at the newly expanded site. In addition to an official visit to the Governor of Lagos State, Equinix hosted an exclusive customer engagement event, bringing together key customers and partners from Nigeria’s business and technology sectors.
Attendees discussed shared successes and Equinix’s role in facilitating digital transformation, while also connecting directly with Bruce Owen for insights into how Equinix’s solutions drive innovation and business agility in the region.
Equinix executives also took part in a tree-planting ceremony, symbolising Equinix’s continued investment in sustainable initiatives across the globe and highlighting the company’s broader goal of reducing its carbon footprint while supporting greener practices across its operations worldwide.
Speaking about the expansion, Bruce Owen, President of EMEA at Equinix said “Nigeria is a crucial market for Equinix. Today’s opening is a clear demonstration of our continued commitments to invest and grow digital infrastructure that will benefit the many thousands of businesses in Nigeria and on the continent as a whole.
“I am deeply encouraged by the enthusiastic partnerships and innovations emerging from this dynamic region, which continue to inspire our commitment to Nigeria’s digital and sustainable future.”
Adding to this, Wole Abu, Managing Director of Equinix West Africa, highlighted the critical role of data centers in driving economic growth stating “Data centers continue to play a pivotal role in driving economic development in Nigeria, serving as critical infrastructure that supports digital transformation and economic growth.
“As governments and enterprises increasingly acknowledge their significance, global demand for data center capacity is poised to rise. While Africa’s demand for data solutions is still evolving compared to more mature markets, the continent is demonstrating strong potential for digital adoption and innovation.
“To meet this growing need, Equinix is actively advancing three major data center projects in Nigeria, with future expansion plans for Ghana, Côte d’Ivoire, and South Africa.”
Equinix remains steadfast in its mission to enable secure, scalable, and sustainable digital growth for economies across the world.
African women remain among the most digitally excluded globally, with smartphone affordability and digital literacy among the key barriers. New data from the 2025 GSMA Mobile Gender Gap Report, launched recently, reveals a persistent global gender gap in mobile internet use across low- and middle-income countries (LMICs).
It further notes that literacy, digital skills, safety, and affordability of data also remain critical barriers. The report highlights that 885 million women across these regions still do not use mobile internet, with nearly 60% of them living in Sub-Saharan Africa and South Asia.
While mobile internet is the primary way women in LMICs access the internet, offering critical lifelines to health, education, and financial services, the pace of female adoption has stalled, leaving 235 million fewer women than men connected.
Claire Sibthorpe, head of digital inclusion at GSMA, highlighted that the gender gap had narrowed significantly between 2017 and 2020, but progress flatlined in recent years.
Although 2023 brought a slight improvement, restoring the gap to 15%, 2024 saw minimal change, with the gap settling at 14%.
The disparity is most severe in Sub-Saharan Africa, where women are 29% less likely than men to use mobile internet.
“It’s disheartening that progress in reducing the mobile internet gender gap has stalled. The digital divide is driven by deep-rooted socio-economic and cultural factors that disproportionately impact women,” said Sibthorpe.
GSMA projects that closing the gender gap by 2030 could add $1.3 trillion to GDP across LMICs and deliver $230 billion in revenue to the mobile industry.
The report, funded by the UK FCDO, Sida, and the Gates Foundation, stresses the urgent need for targeted investment and policy action to bridge the digital divide and ensure that no woman is left offline.
“The mobile internet gender gap is not going to close on its own. It is driven by deep-rooted social, economic, and cultural factors that disproportionately impact women,” said Sibthorpe.
Access Bank Faces Charges over Alleged Diversion of N826m
Court to Hear NIBSS Suit Seeking Exclusive Power to Manage BVN Database
Nigeria to Launch 4 Satellites for Surveillance, Others
Shell Reports 122 Percent Surge in Oil Spills from Nigerian Operations in 2024
Nigeria’s Digital Economy Sector Attracts $191m FDI
E-Financial1 day agoAccess Holdings Sets Benchmark in Fraud Prevention With ₦193.5Bn Tech Investment
E-Financial1 day agoMTN’s Digital Lending Arm Disburses $592m Loans in Q1
E-Financial1 day agoAccess Bank, Deloitte Partner to Equip SMEs with Tools for Growth
News1 day agoSERAP Asks Ojulari, NNPC CEO to Account for Missing N500Bn or Face Legal Action
E-Financial1 day agoFG Verifies 2m Households for Cash Transfer
E-Business1 day agoFG Launches Online Citizenship, Business Management Platform
General News1 day agoFG Launches Online Citizenship, Business Management Portal to Enhance Transparency, Service Delivery
General News1 day agoNOTAP Urges South Eastern Entrepreneurs to Embrace Franchising as Business Model