Connect with us

Telecom

Abuse of Trusted Applications Grows by 51% in Latest Sophos Report

Published

on

John Shier, field CTO, Sophos
Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, today released “The Bite from Inside: The Sophos Active Adversary Report,” an in-depth look at the changing behaviors and attack techniques that adversaries used in the first half of 2024.

John Shier, field CTO, Sophos

John Shier, field CTO, Sophos

The data, derived from nearly 200 incident response (IR) cases from across both the Sophos X-Ops IR team and Sophos X-Ops Managed Detection and Response (MDR) team, found that attackers are leveraging trusted applications and tools on Windows systems, commonly called “living off the land” binaries, to conduct discovery on systems and maintain persistence.

When compared to 2023, Sophos saw a 51% increase in abusing “Living off the Land” binaries or LOLbins; since 2021, it’s increased by 83%.

Among the 187 unique Microsoft LOLbins detected in the first half of the year, the most frequently abused trusted application was remote desktop protocol (RDP). Of the nearly 200 IR cases analyzed, attackers abused RDP in 89% of them.

This dominance continues a trend first observed in the 2023 Active Adversary report in which RDP abuse was prevalent in 90% of all IR cases investigated.

“Living-off-the-land not only offers stealth to an attacker’s activities but also provides a tacit endorsement of their activities. While abusing some legitimate tools might raise a few defenders’ eyebrows, and hopefully some alerts, abusing a Microsoft binary often has the opposite effect. Many of these abused Microsoft tools are integral to Windows and have legitimate uses, but it’s up to system administrators to understand how they are used in their environments and what constitutes abuse. Without nuanced and contextual awareness of the environment, including continuous vigilance to new and developing events within the network, today’s stretched IT teams risk missing key threat activity that often leads to ransomware,” says John Shier, field CTO, Sophos.

In addition, the report found that, despite the government disruption of LockBit’s main leak website and infrastructure in February, LockBit was the most frequently encountered ransomware group, accounting for approximately 21% of infections in the first half of 2024.

Other key findings from the latest Active Adversary Report:

· Root Cause of Attacks: Continuing a trend first noted in the Active Adversary Report for Tech Leaders, compromised credentials are still the number one root cause of attacks, accounting for the root cause in 39% of cases. This is, however, a decline from the 56% noted in 2023

· Network Breaches Dominate for MDR: When examining solely the cases from the Sophos MDR team, network breaches were the dominant incident the team encountered

· Dwell Times Are Shorter for MDR Teams: For cases from the Sophos IR team, dwell time (the time from when an attack starts to when it’s detected) has remained approximately eight days. However, with MDR, the median dwell time is just one day for all types of incidents and only three days for ransomware attacks

· The Most Frequently Compromised Active Directory Servers Are Nearing End of Life: Attackers most frequently compromised the 2019, 2016, and 2012 server versions of Active Directory (AD). All three of these versions are now out of mainstream Microsoft support—one step before they become end-of-life (EOL) and impossible to patch without paid support from Microsoft. In addition, a full 21% of the AD server versions compromised were already EOL

To learn more about attacker behaviors, tools and techniques, read “The Bite from Inside: The Sophos Active Adversary Report,” on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

NCC Insists Telcos Must Compensate Subscribers for Poor Quality of Service

Published

on

Kindly share this post

Dr. Aminu Maida, executive vice chairman, Nigerian Communications Commission  (NCC), has insisted that telecommunications operators must compensate subscriber for poor quality of service after a facility tour of major telecommunications operators in Lagos yesterday.

NCC Insists Telcos Must Compensate Subscribers for Poor Quality of Service

The team comprises of Chief Idris Olorunnimbe the Chairman of the Governing Board of the Nigerian Communications Commission (NCC), EVC, Engr. Gbenga Adebayo, chairman, Association of Licensed Telecommunications Operators of Nigeria (ALTON) and other stakeholders visited MTN Nigeria, Globacom and Airtel Nigeria.

Earlier this week, the commission directed Mobile Network Operators (MNOs) to provide compensation to subscribers whose network quality of service experience is below specified targets within certain locations.

In a statement signed by Nnenna Ukoha, head, Public Affairs Department, NCC, the commission noted that its position is that subscribers should not be made to bear the full burden of service disruptions where operators fail to meet prescribed standards of service delivery.

Speaking after the facility tour the EVC, said: “We are in a situation where Nigerians are yearning for better service, but better service requires infrastructure. We are not where we want to be or where we need to be, but from what I’ve seen today, I am reassured that the operators are continuing to invest. I urge Nigerians to be a little bit patient while these investments are made, so that we can address the infrastructure deficit that is required to improve service for Nigerians.

“I wasn’t expecting that a tour like this would change that directive. We looked at it and we said the fairest thing to do was for subscribers to be compensated. This is not to say that the operators have not tried. Service has improved. The data shows that our demand is also increasing at a rate faster than the infrastructure is being built. So Nigerians have to be a little bit patient. From what I’ve seen today and all the work that has been done, I’m confident that gap will be close shortly”.

Chief Idris Olorunnimbe, chairman of the Governing Board of the Nigerian Communications Commission (NCC), added: “From what we have seen, and what has been done. We have been told in detail what is to come. And I mean, just like the EVC said, all we need is a bit more patience, better service, deeper penetration is assured based on everything that we’ve seen, and everything we have heard.

“It’s also important to commend our operators. The infrastructure that we’ve seen is comparable with any infrastructure from any telecom operator anywhere in the world, and Nigeria is not behind, and based on what we’ve also seen in terms of their plans for expansion, Nigeria will always be able to compete with any other country in the world.

” More so, drop calls are not deliberate. They are caused by a few things. One of it is fiber cut and attacks or vandalization of towers and other infrastructure. But now, it has reduced. We have seen they’ve shown us data today that shows a significant reduction. It will continue to reduce. As the critical national infrastructure program deepens and we’re also about to introduce an accountability framework of “when fiber is damaged, you must fix it”. That way we think that people will be more responsible with their constructions that breach telecom infrastructure. Then we can keep those incidents to the barest minimum, drop calls would also reduce.

“However, when calls drop, the networks also lose so it’s not in their interest for your calls to drop or for you to experience frustration when you use the service, because the more reliable it is, the longer you spend on it, the longer you spend on it, the more money they’re able to make. So, they are also doing their best in terms of ensuring that these incidents are reduced to the barest minimum”.


Kindly share this post
Continue Reading

Telecom

NITDA Urges Joint Action to Drive Nigeria’s Digital Innovation

Published

on

Kindly share this post

Kashifu Inuwa, the Director General of the National Information Technology Development Agency (NITDA), has underscored the importance of collaboration between government institutions and emerging startups as a catalyst for Nigeria’s digital transformation and national development.

Speaking at the Nigerian Satellite Week 2026 in Abuja, themed “Harnessing Space Technology for an Extraordinary Nigeria,” Inuwa urged stakeholders to embrace partnerships as a pathway to innovation and impact.

“Take a good step, and you can make a difference,” he said, emphasizing the need to translate ideas into tangible outcomes through collective effort.

The NITDA boss, represented by the Director of Stakeholder Management and Partnerships, Aristotle Onumo, during his presentation on “Enhancing collaboration between government agencies and emerging start-ups”, outlined four guiding principles for driving transformation: enabling the ecosystem rather than controlling it; prioritising networks over institutions; developing talent while supporting innovation and adopting practical solutions; and focusing on platforms rather than isolated projects.

To illustrate the power of digital innovation, Inuwa shared the story of a rural farmer whose productivity challenges ranging from unstable rents to failed loans were overcome through access to digital tools and networks. He explained that such incremental interventions can scale into broader economic gains, ultimately contributing to national infrastructure like satellite systems.

“This is the power of space technology, and it shows why events like this are so important,” he noted.

Highlighting the evolving role of space technology, Inuwa observed that startups are increasingly driving innovation across telecommunications, navigation, security, and cloud services. Once dominated by global superpowers, the sector is now emerging as a key economic driver, with Nigeria’s “Sunrise Packet” projected to contribute over $1.5 billion to the economy by 2030.

“Innovation without adoption is wasted,” he added, stressing the critical role of government in enabling start-ups to scale through supportive policies, infrastructure, and incentives.

According to him, developmental regulation should focus on creating markets, orchestrating ecosystems, and delivering public value rather than stifling innovation. He pointed to several initiatives supporting the growth of Nigeria’s innovation ecosystem, including the Digital Start-Up Act, Idea Hatch, and the National Digital Leadership Programme, all designed to empower young innovators and connect them to global opportunities.

He further highlighted platforms such as GITEX Africa, GITEX Nigeria, and Digital Nigeria, which provide visibility for start-ups and attract investment, partnerships, and mentorship.

Inuwa concluded with a strong call for collaboration among government, start-ups, non-governmental organisations, and investors, describing Nigeria’s youth as the country’s greatest asset.

“If we are going to create a digital Nigeria, we must collaborate,” he said.

Also speaking at the event, the Minister of Communications, Innovation and Digital Economy,  Tijani, described Nigeria’s satellite infrastructure as central to the nation’s digital future.

“Nigeria is the only West African country with its own satellite. NigComSat provides critical connectivity and resilience, benefiting not just Nigeria but the entire region,” he said.

Tijani disclosed that President Bola Ahmed Tinubu has approved the acquisition of NigComSat-2A and NigComSat-2B, a move expected to significantly enhance the country’s space capabilities.

He stressed, however, that infrastructure alone is not sufficient.

“What truly matters is how we leverage this technology to improve agriculture, education, security, and business operations,” he said.

The Minister also highlighted key government investments, including a ₦12 billion digital economy research cluster fund under Project Bridge, which will support academics and researchers nationwide. He added that Nigeria is expanding its digital backbone through 90,000 kilometres of fibre optic cables, nearly 4,000 telecom towers in underserved communities, and new satellite deployments to strengthen regional connectivity across countries such as Cameroon, Niger, Chad, Burkina Faso, and the Republic of Benin.

“The talent, ideas, and energy are all here in Nigeria. It is up to us to turn them into real outcomes for our people and the economy,” Tijani added.

The Nigerian Satellite Week continues to provide a strategic platform for collaboration among government, start-ups, academia, and the private sector, fostering innovation and reinforcing Nigeria’s leadership in Africa’s digital and space economy.

Welcoming participants, the Managing Director of Nigerian Communications Satellite Limited (NIGCOMSAT), Jane Nkechi Egerton-Ideyen, said Nigeria’s space programme is entering a new phase marked by deliberate and focused growth.

She pointed to strengthened institutional capacity, expanding partnerships, and clear economic gains, noting that the agency’s revenue grew from less than $650 million in 2023 to over $2 billion in 2025. She attributed this surge to key reforms, new commercial deals, and increasing demand for satellite broadband services across the African continent.

Egerton-Ideyen also disclosed that Nigeria has launched seven space assets in just over two decades, adding that the country is shifting its focus from prestige-driven initiatives to practical outcomes—enhancing connectivity, improving livelihoods, and promoting inclusive development.

She further revealed that more than 500 young Nigerians received training in satellite technology within the past year, while over 50 startups have benefited from NIGCOMSAT’s accelerator programme.


Kindly share this post
Continue Reading

Telecom

Oracle Corporation Axes 30,000 Workers in Brutal AI Shake-Up

Published

on

Kindly share this post

Oracle Corporation has begun laying off more than 30,000 employees worldwide as the software giant accelerates its shift toward artificial intelligence (AI) and cost optimisation, according to reports.
Oracle Corporation Axes 30,000 Workers in Brutal AI Shake-Up

Oracle Corporation

The layoffs, which started on Tuesday, have affected workers across multiple regions, including the United States, India, Canada and Mexico. Employees ranging from software engineers to account executives and program managers disclosed on LinkedIn that they had received termination notices.

Sources indicate that dismissal emails, sent from “Oracle Leadership” early in the morning, cited “broader organisational change” as the reason for the job cuts—widely interpreted as part of the company’s restructuring to prioritise AI-driven operations.

Local reports suggest that about 12,000 employees in India alone have been impacted, making the development one of the largest workforce reductions in the company’s history.

With a global workforce of approximately 162,000 as of May 2025, the layoffs could affect about 18 per cent of Oracle’s staff.

In its communication to affected workers, the company stated that roles were being eliminated after a review of “current business needs,” adding that impacted employees would receive severance packages in line with company policy.

The move positions Oracle among a growing list of global technology firms downsizing traditional roles while ramping up investments in artificial intelligence infrastructure.

As part of this transition, Oracle Corporation, alongside OpenAI and SoftBank Group, last year announced a $500 billion AI infrastructure initiative known as Stargate.

The initiative is aimed at expanding data centre capacity to support the massive computing requirements of AI systems, which rely heavily on large-scale data processing and storage.

Oracle has also strengthened its position in the AI ecosystem through collaboration with Nvidia, a leading manufacturer of AI chips.

Industry analysts say the development underscores a broader transformation within the tech sector, where companies are reallocating resources from legacy operations to AI-focused innovation.

They note that while the shift is expected to enhance long-term competitiveness, it also raises concerns about job displacement and the future of work in the global technology industry.


Kindly share this post
Continue Reading

Trending