Connect with us

Telecom

Attackers Exploit Stolen Session Cookies to Bypass Multi Factor Authentication and Gain Access to Corporate Resources – Sophos Report Reveals

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, today announced in the Sophos X-Ops report, “Cookie stealing: the new perimeter bypass,” that active adversaries are increasingly exploiting stolen session cookies to bypass Multi-Factor Authentication (MFA) and gain access to corporate resources.

In some cases, the cookie theft itself is a highly targeted attack, with adversaries scraping cookie data from compromised systems within a network and using legitimate executable to disguise the malicious activity.

Once the attackers obtain access to corporate web-based and cloud resources using the cookies, they can use them for further exploitation such as business email compromise, social engineering to gain additional system access, and even modification of data or source code repositories.

“Over the past year, we’ve seen attackers increasingly turn to cookie theft to work around the growing adoption of MFA. Attackers are turning to new and improved versions of information stealing malware like Raccoon Stealer to simplify the process of obtaining authentication cookies, also known as access tokens,” said Sean Gallagher, principal threat researcher, Sophos. “If attackers have session cookies, they can move freely around a network, impersonating legitimate users.”

Session, or authentication, cookies are a particular type of cookie stored by a web browser when a user logs into web resources. If attackers obtain them, then they can conduct a “pass-the-cookie” attack whereby they inject the access token into a new web session, tricking the browser into believing it is the authenticated user and nullifying the need for authentication.

Since a token is also created and stored on a web browser when using MFA, this same attack can be used to bypass this additional layer of authentication.

Compounding the issue is that many legitimate web-based applications have long-lasting cookies that rarely or never expire; other cookies only expire if the user specifically logs out of the service.

Thanks to the malware-as-a-service industry, it’s getting easier for entry-level attackers to get involved in credential theft. For example, all they need to do is buy a copy of an information-stealing Trojan like Raccoon Stealer to collect data like passwords and cookies in bulk and then sell them on criminal marketplaces, including Genesis.

Other criminals on the attack chain, such as ransomware operators, can then buy this data and sift through it to leverage anything they deem useful for their attacks.

Conversely, in two of the recent incidents that Sophos investigated, attackers took a more targeted approach. In one case, the attackers spent months inside a target’s network gathering cookies from the Microsoft Edge browser.

The initial compromise occurred via an exploit kit, and then the attackers used a combination of Cobalt Strike and Meterpreter activity to abuse a legitimate compiler tool to scrape access tokens. In another case, the attackers used a legitimate Microsoft Visual Studio component to drop a malicious payload that scraped cookie files for a week.

“While historically we’ve seen bulk cookie theft, attackers are now taking a targeted and precise approach to cookie stealing. Because so much of the workplace has become web-based, there really is no end to the types of malicious activity attackers can carry out with stolen session cookies. They can tamper with cloud infrastructures, compromise business email, and convince other employees to download malware or even rewrite code for products. The only limitation is their own creativity,” said Gallagher.

“Complicating matters is that there is no easy fix. For example, services can shorten the lifespan of cookies, but that means users must re-authenticate more often, and, as attackers turn to legitimate applications to scrape cookies, companies need to combine malware detection with behavioral analysis.”

To learn more about session cookie theft and how adversaries are exploiting the technique to carry out malicious activity, read the full report, “Cookie Stealing: the new perimeter bypass,” on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Airtel Africa Records $586m Rise in Profit on FX Gains, Tariff Hike

Published

on

Kindly share this post

Airtel Africa’s profit after tax grew to $586 million in the nine months ended December 31, 2025, up from $248 million in the corresponding period of 2024.

According to the company’s nine-month financial results released on Friday, the higher profit after tax in the current period was driven by higher operating profit and derivative and foreign exchange gains of $99 million, as compared to $153 million in derivative and foreign exchange losses in the prior period.

It disclosed that the group’s revenues in reported currency increased by 28.3 percent to $4,667 million, with constant currency growth of 24.6 percent. Reported currency revenue growth at a premium to constant currency growth reflects currency appreciation in key markets. In Q3’26, constant currency revenue growth improved to 24.7 percent from 24.2 percent in the previous quarter (Q2’26).

“Constant currency revenue growth was supported by tariff adjustments driving a 50.6 percent growth in Nigeria and a strong performance in Francophone Africa, which saw revenues accelerate to 17.0 percent in the nine months.”

In Nigeria, revenue grew by 50.4 percent in constant currency, largely driven by continued strength in the demand for data services, further supported by the tariff adjustments. The constant currency revenue growth was driven by ARPU growth of 39.6 percent and customer base growth of 7.8 percent.

“In reported currency, revenue grew by 52.1 percent to $1,123 million, with Q3’26 revenue growth accelerating to 70.9 percent compared to constant currency growth of 52.9 percent.

“Significantly higher reported currency growth during the quarter compared to constant currency growth was due to the appreciation in Nigerian naira from a weighted average NGN/USD rate of 1,627 in Q3’25 to NGN/USD 1,456 in the current quarter,” it disclosed.

Insights from Airtel’s financials revealed that voice revenue in Nigeria grew by 35.8 percent in constant currency, driven by voice ARPU growth of 26.0 percent, reflecting the tariff adjustments earlier in the year.

Data revenue also grew by 65.4 percent in constant currency as a function of both data customer and data ARPU growth of 8.0 percent and 49.7 percent, respectively. Data usage per customer increased by 26.2 percent to 10.7 GB per month (from 8.4 GB in the prior period), with smartphone penetration increasing 4.6 percent to reach 54.1 percent. Smartphone data usage per customer reached 13.4 GB per month compared to 11.2 GB per month in the prior period.

Sunil Taldar, chief executive officer, said these results highlight the strength of our strategy, with strong operating and financial trends across the business.

He added that “During the quarter, we accelerated investment to enhance coverage and data capacity while also expanding our fibre network. Coupling this investment with innovative partnerships strengthens our customer proposition and positions us to capture the considerable growth opportunity across our markets.

Digitisation, technology innovation, and embedding AI in our processes will also optimise the customer experience with increased digital offerings and closer integration of GSM and Airtel Money services, allowing us to unlock the strong demand across our markets.

Smartphone adoption continues to increase with a penetration of 48.1 percent, and we are seeing solid progress in the development of our home broadband business, reflecting the need for reliable, high-speed connectivity across our markets.

“Our push to enhance financial inclusion across the continent continues to gain momentum with our Mobile Money customer base expanding to 52 million, surpassing the 50 million milestone.

Annualised total processed value of over $210 billion in Q3’26 underscores the depth of our merchants, agents, and partner ecosystem and remains a key player in driving improved access to financial services across Africa. We remain on track for the listing of Airtel Money in the first half of 2026.

“Disciplined execution on cost efficiency, alongside accelerating revenue growth, has enabled another sequential improvement in our quarterly EBITDA margin to 49.6 percent, underpinning constant currency EBITDA growth of 31 percent, and we remain focused on driving further incremental margin improvements.

“Our strategic priorities remain clear: to continue investing in best-in-class connectivity, accelerate financial inclusion through our mobile money platform, and deliver an exceptional customer experience. These results reinforce our confidence in the long-term potential of our markets and our ability to create value for all our stakeholders,” he added.


Kindly share this post
Continue Reading

Telecom

Africa’s AI Guru Abodunrin Charts Path to Continent’s Digital Dominance

Published

on

Kindly share this post

David Adeoye Abodunrin, Africa’s foremost AI transformations coach and internationally recognised futurist, has declared that the continent’s immense potential can only be unlocked when purpose is aligned with strategic intelligence.

Africa's AI Guru Abodunrin Charts Path to Continent's Digital Dominance

David Adeoye Abodunrin

Speaking to ICT editors in Lagos, Abodunrin—renowned for nearly three decades of multidisciplinary expertise spanning artificial intelligence disruption, digital governance, behavioural intelligence, cybersecurity, and human capital transformation—said Africa must embrace AI as a transformational frontier rather than a mere tool.

“AI is not merely a tool, it is a transformational frontier that can unlock prosperity, resilience and leadership for Africans in the global digital era,” Abodunrin stated.

Abodunrin, widely sought after by C-suite executives, policymakers, founders and institutional boards, is recognised internationally as a foresight architect and strategic transformation coach. His mission, he explained, is to help individuals, governments and organisations engineer strategic advantage through anticipatory intelligence and ethically aligned innovation.

His work focuses on decoding emergent AI and intelligence systems that reshape markets, redefine competitive advantage, and enable sovereign digital ecosystems.

He is also a 14-time international bestselling author whose frameworks integrate behavioural psychology, foresight strategy and digital sovereignty to prepare leaders for future complexities. Through his organisations, including Cubed Integrated Consulting and Cyberfore Consulting, Abodunrin equips governments, boards, and enterprises with tools to build secure, future-ready institutions that thrive amid volatility.

He stressed that Africa’s transformation must be rooted in local contexts and values, not imported wholesale from global models.

“In Africa, transformation must not just follow global models, it must reflect our cultures, our challenges and our collective aspirations,” he emphasised. “This continent holds immense potential; we simply need to align purpose with strategic intelligence to unlock it.”

His coaching and advisory services emphasise strategic AI governance tailored for African economies, executive and leadership transformation for sustained institutional resilience, digital and cyber intelligence frameworks to protect sovereign infrastructure, and behavioural intelligence and insights for inclusive growth and innovation.

Despite his international recognition, Abodunrin insists that his philosophy centres on African solutions for African realities—developing local talent, embedding ethical AI adoption, and fostering foresight strategies that account for Africa’s unique socio-economic ecosystems.


Kindly share this post
Continue Reading

Telecom

NCC Unveils Q4 2025 Network Performance Report, Pledges Transparency and Accountability

Published

on

Kindly share this post

Nigerian Communications Commission (NCC) has reaffirmed its commitment to transparency, accountability, and consumer protection with the release of its Q4 2025 Network Performance Report.

NCC Unveils Q4 2025 Network Performance Report, Pledges Transparency and Accountability

NCC

Speaking at a media engagement in Abuja, the Executive Commissioner, Technical Services, Engr. Abraham Oshadami, said the Commission’s proactive disclosure of industry data is designed to strengthen public trust and ensure service providers remain accountable to consumers.

“Transparency for us has become a guiding principle that underpins our regulatory approach. Open access to information strengthens the industry, builds public trust, and reinforces accountability among operators,” Oshadami stated.

He recalled that in 2025, the NCC partnered with Ookla to develop nationwide Network Coverage Maps, giving consumers objective tools to compare network quality across locations and operators. The Commission also began publishing quarterly performance reports, with the Q3 2025 edition released in October.

Oshadami noted that the Q4 2025 report shows measurable improvements in network performance and in the quality of experience delivered to consumers. He urged the media to critically engage with the data and help amplify stories of progress, accountability, and reform.

In her remarks, the Head of Public Affairs Department, Mrs. Nnenna Ukoha, described the media as indispensable partners in shaping public understanding of the telecommunications sector.

“Your reporting shapes the national narrative around telecommunications. It affects investor confidence, consumer trust, and policy direction. It influences how Nigerians understand the technologies that power their daily lives,” she said.

Ukoha stressed that the Commission’s quarterly reports provide rich material for news coverage, investigative reporting, and sector monitoring. She encouraged journalists to adopt constructive framing in their reporting—highlighting progress alongside challenges, and reflecting the investments and innovations driving industry resilience.

The engagement session, held at the Commission’s headquarters, provided journalists with access to the Q4 2025 data and contextual insights to aid accurate reporting. Both officials reiterated that the NCC’s goal is to ensure that reforms, accountability measures, and improvements in service delivery are widely understood and properly communicated to the Nigerian public.


Kindly share this post
Continue Reading

Trending