Telecom
Attackers Exploit Stolen Session Cookies to Bypass Multi Factor Authentication and Gain Access to Corporate Resources – Sophos Report Reveals
Sophos, a global leader in next-generation cybersecurity, today announced in the Sophos X-Ops report, “Cookie stealing: the new perimeter bypass,” that active adversaries are increasingly exploiting stolen session cookies to bypass Multi-Factor Authentication (MFA) and gain access to corporate resources.
In some cases, the cookie theft itself is a highly targeted attack, with adversaries scraping cookie data from compromised systems within a network and using legitimate executable to disguise the malicious activity.
Once the attackers obtain access to corporate web-based and cloud resources using the cookies, they can use them for further exploitation such as business email compromise, social engineering to gain additional system access, and even modification of data or source code repositories.
“Over the past year, we’ve seen attackers increasingly turn to cookie theft to work around the growing adoption of MFA. Attackers are turning to new and improved versions of information stealing malware like Raccoon Stealer to simplify the process of obtaining authentication cookies, also known as access tokens,” said Sean Gallagher, principal threat researcher, Sophos. “If attackers have session cookies, they can move freely around a network, impersonating legitimate users.”
Session, or authentication, cookies are a particular type of cookie stored by a web browser when a user logs into web resources. If attackers obtain them, then they can conduct a “pass-the-cookie” attack whereby they inject the access token into a new web session, tricking the browser into believing it is the authenticated user and nullifying the need for authentication.
Since a token is also created and stored on a web browser when using MFA, this same attack can be used to bypass this additional layer of authentication.
Compounding the issue is that many legitimate web-based applications have long-lasting cookies that rarely or never expire; other cookies only expire if the user specifically logs out of the service.
Thanks to the malware-as-a-service industry, it’s getting easier for entry-level attackers to get involved in credential theft. For example, all they need to do is buy a copy of an information-stealing Trojan like Raccoon Stealer to collect data like passwords and cookies in bulk and then sell them on criminal marketplaces, including Genesis.
Other criminals on the attack chain, such as ransomware operators, can then buy this data and sift through it to leverage anything they deem useful for their attacks.
Conversely, in two of the recent incidents that Sophos investigated, attackers took a more targeted approach. In one case, the attackers spent months inside a target’s network gathering cookies from the Microsoft Edge browser.
The initial compromise occurred via an exploit kit, and then the attackers used a combination of Cobalt Strike and Meterpreter activity to abuse a legitimate compiler tool to scrape access tokens. In another case, the attackers used a legitimate Microsoft Visual Studio component to drop a malicious payload that scraped cookie files for a week.
“While historically we’ve seen bulk cookie theft, attackers are now taking a targeted and precise approach to cookie stealing. Because so much of the workplace has become web-based, there really is no end to the types of malicious activity attackers can carry out with stolen session cookies. They can tamper with cloud infrastructures, compromise business email, and convince other employees to download malware or even rewrite code for products. The only limitation is their own creativity,” said Gallagher.
“Complicating matters is that there is no easy fix. For example, services can shorten the lifespan of cookies, but that means users must re-authenticate more often, and, as attackers turn to legitimate applications to scrape cookies, companies need to combine malware detection with behavioral analysis.”
To learn more about session cookie theft and how adversaries are exploiting the technique to carry out malicious activity, read the full report, “Cookie Stealing: the new perimeter bypass,” on Sophos.com.
The Nigerian Communications Satellite Limited (NIGCOMSAT) has unveiled Accelerator Cohort 3.0 as part of efforts to strengthen Nigeria’s space technology ecosystem and support the growth of local startups.
The initiative will be a major highlight of the 2026 Nigerian Satellite Week scheduled to hold on March 30 and 31 in Abuja, where key players in the satellite and digital infrastructure sectors are expected to converge.
In a statement signed by Stephen Kwande, the Head of Corporate Communications, the company described the new accelerator as its most direct investment in building long-term competitiveness within Nigeria’s space economy.
According to NIGCOMSAT, the programme is designed to support early-stage ventures working across satellite applications, last-mile connectivity, agriculture, logistics and other areas where space-based technology can drive impact.
The company said previous cohorts of the accelerator had already contributed to developing innovative solutions and building the human capacity needed to position Nigeria for the next phase of the global space industry.
“With Cohort 3.0, we are making it clear that the accelerator is not a pilot project but a permanent feature of how Nigeria develops its space-tech companies,” the statement said.
NIGCOMSAT noted that the Nigerian Satellite Week has grown into a major platform for policy discussions, partnerships and investment in the sector.
The 2026 edition is expected to attract top government officials, defence leaders, development finance institutions and technology entrepreneurs from across Africa.
Jane Egerton-Idehen, managing director of NIGCOMSAT, said the event also marks two decades of Nigeria’s journey in the space economy.
“Twenty years ago, Nigeria took a bold step to secure its place in space. What we are seeing today is the result of consistent effort and vision,” she said.
She added that the company is focused on shaping the next phase of growth through innovation, partnerships and investment in local talent.
NIGCOMSAT also highlighted recent milestones, including a Low Earth Orbit connectivity partnership with Eutelsat, improved revenue performance and increased global recognition in satellite operations.
Other activities lined up for the event include a Startup Demo Day, where selected African startups will pitch their ideas to investors, and a stakeholders’ forum to discuss policies and infrastructure needed to scale Nigeria’s satellite economy.
The company said the initiative reflects the growing role of satellite technology in national development, particularly in areas such as communications, security and digital services.
NIGCOMSAT, established in 2006 and wholly owned by the Federal Government, provides satellite-based services including telecommunications, broadcasting and broadband across Nigeria and parts of Africa.
The Federal Government has unveiled a N12bn Digital Economy Research Fund aimed at strengthening evidence-based policymaking and supporting Nigeria’s long-term digital transformation agenda.
Dr. Bosun Tijani, the Minister of Communications, Innovation, and Digital Economy, disclosed this in a statement issued on Saturday, announcing the launch of an expression of interest for the National Digital Economy Research Clusters.
“Today my heart is filled with deep joy as we announce the Expression of Interest for the National Digital Economy Research Clusters, a N12bn research funding scheme designed to place ideas, evidence, and research at the centre of Nigeria’s digital transformation,” the minister said.
According to him, the programme is being funded under Project BRIDGE, a federal initiative to deploy 90,000 kilometres of fibre optic backbone infrastructure across Nigeria to expand connectivity and enable a modern digital economy.
“This programme is being funded under Project BRIDGE, our initiative to deploy 90,000km of fibre optic backbone infrastructure across Nigeria to expand connectivity and enable a modern digital economy,” he said.
The minister noted that as the government expands digital infrastructure nationwide, research-backed approaches are required to ensure inclusive benefits.
“As we deepen our digital infrastructure coverage, thoughtful, evidence-based approaches are required to be deployed in society to ensure everyone benefits from this significant investment,” he added.
He observed that digital policy decisions are often shaped by market forces and political cycles rather than rigorous research and long-term thinking. “Too often, the ideas shaping digital policy come predominantly from markets and political cycles rather than from research, evidence, and long-term thinking,” the statement said.
Under the initiative, six national research clusters will be established across key pillars of the digital economy, including connectivity and meaningful use; digital public infrastructure and government services; digital skills and human capital development; digital economy and jobs; online trust and consumer protection; as well as artificial intelligence and emerging technologies.
The clusters will be led by up to 36 professors drawn from Nigerian universities, working alongside international academic partners, with more than 200 researchers, including postdoctoral fellows and PhD candidates, expected to generate policy-relevant research.
“For me, the goal goes beyond research output. We are looking for better policies that lead to stronger institutions and a more prosperous society,” the minister said.
He described the initiative as one of the ministry’s most meaningful programmes, noting that it is intended to produce ideas that will outlast any single administration. “Because nations that lead the future are not simply those that deploy infrastructure; they are the ones that cultivate ideas,” he said.
The ministry invited academic and research institutions interested in participating to review the Terms of Reference released alongside the EOI and submit proposals to lead or collaborate within the national research clusters.
It added that a press conference would be held in the coming week to provide further details and engagement opportunities for vice-chancellors and research institutions across the country.
Nigerian Communications Commission (NCC) has directed Mobile Network Operators (MNOs) to compensate subscribers experiencing poor network service across the country.
The Commission said the directive was part of efforts to ensure that consumers are not made to bear the burden of service failures when operators fall short of required standards.
Under the new regulation, telecom operators will be required to provide compensation directly to affected subscribers for breaches of Quality of Service (QoS) Key Performance Indicators (KPIs).
According to the NCC, the compensation will be issued in the form of airtime credits, calculated based on subscribers’ average usage and their presence within specific Local Government Areas where service disruptions occur.
The Commission emphasised that telecommunications services remain critical to economic activities, social interactions, and access to digital opportunities, noting that poor service delivery negatively impacts productivity and public confidence.
It explained that while regulatory fines have traditionally been used to sanction operators, the new approach prioritises consumer protection and strengthens accountability within the telecommunications sector.
The NCC added that the measure would complement existing efforts to monitor service quality and enforce compliance with performance standards.
In addition, the Commission directed tower companies responsible for telecom infrastructure, such as network masts, to reinvest fines imposed on them into infrastructure upgrades with measurable outcomes.
The regulator reiterated its commitment to ensuring that operators invest in network resilience, expand capacity, and improve infrastructure to meet growing demand.
It also pledged to continue deploying regulatory mechanisms that promote fairness, transparency, and accountability across the industry, while ensuring that subscribers receive the quality of service they deserve.
ARN Rejects Medical Bill over Attempt to ‘Scrap’ Profession
Meningitis Kills a Quarter Million People a Year -Study
NIGCOMSAT Supports Startups Growth with the Launch of Accelerator 3.0
Stakeholder says AI is Crucial to Nigerian Data Centres Amid Persistent Grid Collapse
NFVCB Boss Urges Stronger Distribution Channels @ Coal City Film Festival 2026
Spotify’s Loud & Clear Report Reveals Over ₦60Bn Revenue for Nigerian Artists in 2025
Madonna University Taps Tech Guru Adote for Strategic Board Role
China Threatens to Shut Nigeria’s Satellite Over $11.44m Unpaid Debt
Jumia Tech Week 2026 Begins with Tech Deals on Smartphones, Electronics, and Everyday Technology
FCCPC Bans Lagos ‘No Refund’ Policy, Vows Fines and Shutdowns for Traders
E-Financial2 days agoBreaking…..Kuda Lays Off Many Employees in Broad Restructuring
Telecom2 days agoGoogle Rolls Out Search Live AI to 200+ Countries, Including Nigeria
E-Financial2 days agoCBN Bars Chronic Loan Defaulters from Accessing Loans
E-Financial2 days agoNDIC Insures 99 Percent of Bank Customers
E-Business2 days agoFG Shifting Focus to “Meaningful Connectivity” to Drive Inclusion – Minister
General News2 days agoAnti Graft Agencies Raise Alarm over Rising Crypto-Linked Financial Crimes
E-Business2 days agoNITDA Takes Over National Digital Architecture System
E-Financial2 hours agoCBN bars large‑ticket loan defaulters from banking services in tough new crackdown