Connect with us

Telecom

Attackers Exploit Stolen Session Cookies to Bypass Multi Factor Authentication and Gain Access to Corporate Resources – Sophos Report Reveals

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, today announced in the Sophos X-Ops report, “Cookie stealing: the new perimeter bypass,” that active adversaries are increasingly exploiting stolen session cookies to bypass Multi-Factor Authentication (MFA) and gain access to corporate resources.

In some cases, the cookie theft itself is a highly targeted attack, with adversaries scraping cookie data from compromised systems within a network and using legitimate executable to disguise the malicious activity.

Once the attackers obtain access to corporate web-based and cloud resources using the cookies, they can use them for further exploitation such as business email compromise, social engineering to gain additional system access, and even modification of data or source code repositories.

“Over the past year, we’ve seen attackers increasingly turn to cookie theft to work around the growing adoption of MFA. Attackers are turning to new and improved versions of information stealing malware like Raccoon Stealer to simplify the process of obtaining authentication cookies, also known as access tokens,” said Sean Gallagher, principal threat researcher, Sophos. “If attackers have session cookies, they can move freely around a network, impersonating legitimate users.”

Session, or authentication, cookies are a particular type of cookie stored by a web browser when a user logs into web resources. If attackers obtain them, then they can conduct a “pass-the-cookie” attack whereby they inject the access token into a new web session, tricking the browser into believing it is the authenticated user and nullifying the need for authentication.

Since a token is also created and stored on a web browser when using MFA, this same attack can be used to bypass this additional layer of authentication.

Compounding the issue is that many legitimate web-based applications have long-lasting cookies that rarely or never expire; other cookies only expire if the user specifically logs out of the service.

Thanks to the malware-as-a-service industry, it’s getting easier for entry-level attackers to get involved in credential theft. For example, all they need to do is buy a copy of an information-stealing Trojan like Raccoon Stealer to collect data like passwords and cookies in bulk and then sell them on criminal marketplaces, including Genesis.

Other criminals on the attack chain, such as ransomware operators, can then buy this data and sift through it to leverage anything they deem useful for their attacks.

Conversely, in two of the recent incidents that Sophos investigated, attackers took a more targeted approach. In one case, the attackers spent months inside a target’s network gathering cookies from the Microsoft Edge browser.

The initial compromise occurred via an exploit kit, and then the attackers used a combination of Cobalt Strike and Meterpreter activity to abuse a legitimate compiler tool to scrape access tokens. In another case, the attackers used a legitimate Microsoft Visual Studio component to drop a malicious payload that scraped cookie files for a week.

“While historically we’ve seen bulk cookie theft, attackers are now taking a targeted and precise approach to cookie stealing. Because so much of the workplace has become web-based, there really is no end to the types of malicious activity attackers can carry out with stolen session cookies. They can tamper with cloud infrastructures, compromise business email, and convince other employees to download malware or even rewrite code for products. The only limitation is their own creativity,” said Gallagher.

“Complicating matters is that there is no easy fix. For example, services can shorten the lifespan of cookies, but that means users must re-authenticate more often, and, as attackers turn to legitimate applications to scrape cookies, companies need to combine malware detection with behavioral analysis.”

To learn more about session cookie theft and how adversaries are exploiting the technique to carry out malicious activity, read the full report, “Cookie Stealing: the new perimeter bypass,” on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Nigerians Lose N12.5bBn to Telecom-Related Financial Crimes – PwC

Published

on

Kindly share this post

Nigerians lost about N12.5 billion to telecom-related financial crimes from 2019 to January 2023, underscoring the scale and persistence of this threat to the telecommunications industry, PwC Nigeria has said, citing data from the Nigerian Communications Commission (NCC).

Nigerians Lose N12.5bBn to Telecom-Related Financial Crimes - PwC

PwC, in its latest report, ‘AI’s Dual Role in Telecom Fraud: Why Artificial Intelligence is Both a Threat and a Shield for Telcos’, said the growing adoption of AI by fraudsters is amplifying the frequency and impact of fraud.

The report said fraud has long been a persistent challenge in the telecoms landscape, leading to substantial financial losses for customers and reputational damages for telecommunication companies (telcos).

PwC’s latest report, ‘AI’s dual role in telecom fraud’, highlights global trends in how AI is reshaping both the threats and defences in telecommunications.

The publication examined what these shifts mean for operators in the local market and how they can stay ahead by adopting proactive, AI driven fraud management strategies.

It offered insights into how AI is enabling more sophisticated fraud schemes, from deepfake social engineering to automated attacks; the emerging role of AI powered detection and monitoring tools in strengthening fraud prevention frameworks.

The report also gave practical steps for telecom operators to balance innovation, resilience, and customer trust in an AI driven fraud ecosystem.

PwC noted that the impact of fraud on telecommunications companies is far-reaching, resulting in financial losses, reputational damage, and compliance issues.

The report said for instance, that in 2023, global telecom fraud was estimated at $38.95 billion.

It, however, stated that in Nigeria, where telecom acts as a key gateway to financial services through Unstructured Supplementary Service Data (USSD) and some are moving into fintech, these evolving risks place added pressure on operators.

The report stated that while operators have developed systems and controls to manage these risks, the sector’s expansion into adjacent domains (such as mobile money and payment service banking) is blurring the traditional boundaries of telecom fraud.

“The result is a more complex and interconnected risk environment, where both the frequency and impact of fraud are escalating. Adding to this complexity is the rapid pace of technological advancement.

For instance, Russian cybersecurity firm F6 reported a rise in SIM swapping incidents, particularly related to the shift to eSIM technology. These fraudsters are hijacking phone numbers and bypassing security measures to access bank accounts,” the report said.

The report, authored by Udochi Muogilim, Partner and Technology, Media and Telecommunications Leader,  PwC Nigeria, and Adeola Adekunle, associate director, Forensic Services,  however, said as AI continues to mature, it is reshaping the fraud landscape—introducing heightened threats and powerful new tools.

“On one hand, AI can be exploited to scale and automate fraud schemes with unprecedented sophistication. On the other, it equips telcos with advanced capabilities for fraud detection, prevention, and response.

“This dual role—AI as both a tool and a target—underscores the urgent need for Nigerian telecom players to adopt AI thoughtfully and strategically.

“Navigating this evolving landscape requires more than just investment in technology; it demands a deep understanding of what’s happening today in the world of technological disruption, and what’s to come,” the experts stated.

The report reiterated that telecom fraud affects a wide range of stakeholders, from individual consumers facing unauthorised charges to large corporations suffering reputation damage.

“The combination of AI and various fraud types significantly increases the success rate of these schemes.

“Furthermore, the global nature of telecommunications networks allows fraud to swiftly cross borders, complicating efforts to investigate and prosecute offenders, thus presenting a pressing concern for telecom companies and their regulators,” PwC said.

The firm, however, emphasised that AI has the potential to revolutionise how telecom companies and regulators combat fraud while enhancing the quality of service, ultimately fostering greater trust among consumers.

To fully harness this potential, PwC said it is crucial for industry players to stay informed about evolving technology trends and anticipate future challenges.

This awareness, it added, will empower them to leverage AI’s capabilities for more effective fraud prevention and the proactive management of emerging fraud types, all while adhering to responsible AI principles.

“A well-coordinated combination of the right resources and strategic alliances will enable the industry to make a significant impact in the fight against telecom fraud and build a safer, more efficient telecommunications ecosystem,” PwC affirmed.

The firm even went a notch higher by offering to help industry players and stakeholders turn fraud-related friction into forward movement, powered by the right technology.

“We bring trust and transparency to the heart of your decision-making, helping you use AI, data and tech to reduce the risk of fraud, respond swiftly to breaches, and emerge stronger—so you can prepare your business for what’s next,” PwC offered.

 


Kindly share this post
Continue Reading

Telecom

NITDA Showcases Nigeria’s Startup Framework as Model for Angola

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) has reaffirmed its commitment to building a coordinated and inclusive digital ecosystem in Nigeria, further strengthening its role as an ecosystem orchestrator.

NITDA Showcases Nigeria’s Startup Framework as Model for Angola

NITDA

This was disclosed during a working visit centred on Nigeria’s startup ecosystem framework, where the Director General of NITDA, Kashifu Inuwa, was represented by the Director of Stakeholders Management and Partnerships, Dr Aristotle Onumo.

Speaking during the visit, the DG said NITDA was established to drive coordinated and sustainable information technology development in Nigeria, leveraging both its regulatory and developmental mandates, serving as an ecosystem orchestrator that fosters collaboration, innovation, and growth across the digital economy.

He stated that these reforms are aligned with the Federal Government’s Eight-Point Agenda and reflected in NITDA’s Strategic Roadmap and Action Plan (SRAP 2.0), which is built around eight strategic pillars designed to accelerate the growth of Nigeria’s digital economy.

According to him, a key objective of the roadmap is to position Nigeria as a technologically driven nation that promotes inclusive economic development through innovation. He highlighted digital literacy as a major priority, with NITDA targeting 70 percent digital literacy by 2027 under the National Digital Literacy Framework, with a long-term goal of achieving 95 percent by 2030.

Other priority areas, he said, include ecosystem development, IT talent advancement, expansion of digital infrastructure, policy implementation, and research-driven innovation.

The visiting delegation from Angola’s National Institute of Support for Micro, Small and Medium Enterprises (INAPEM), led by Chairman of the Board of Directors (PCA) and Chief Executive Officer, Bráulio Augusto, commended Nigeria’s progress in implementing the Nigeria Startup Act and described the country as a valuable model for shaping Angola’s own startup legislation.

Augusto disclosed that Angola’s Startup Law has received initial parliamentary approval and is now entering the implementation stage. He expressed interest in understanding how Nigeria transitioned from legal adoption to practical execution, particularly in areas such as startup labelling, incentive management, ecosystem mapping, investor registration, and the operation of the Nigeria Startup Portal.

According to him, Angola is currently developing the Startup Angola Programme under its Digital Entrepreneurship Support Programme, aimed at building a structured and integrated startup ecosystem rather than isolated interventions.

The programme will focus on institutional strengthening, startup funding, support for business development service providers, expansion of innovation hubs, and partnerships with international accelerators.

He added that Nigeria’s experience is especially relevant as Angola seeks solutions to challenges including informality, limited access to finance, youth unemployment, digital inclusion gaps, and restricted market access for small and medium-sized enterprises.

The INAPEM chief also requested further technical insights into Nigeria’s National Startup Council, its member selection process, and the governance structure of the Nigeria Startup Portal.

The visit highlights growing collaboration among African nations in digital policy development and further reinforces Nigeria’s position as a reference point in shaping startup ecosystem frameworks across the continent.


Kindly share this post
Continue Reading

Telecom

NITDA, FMCIDE Deepen Collaboration on Nigeria’s Digital Transformation

Published

on

Kindly share this post

Kashifu Inuwa, National Information Technology Development Agency (NITDA), has reaffirmed the Agency’s commitment to deepening collaboration with the Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE) to accelerate Nigeria’s digital transformation and strengthen policy alignment across the sector.

NITDA, FMCIDE Deepen Collaboration on Nigeria’s Digital Transformation

The Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa, taking the Permanent Secretary of the Federal Ministry of Communications, Innovation and Digital Economy, Mr. Nadungu Gagare, on a tour of the newly commissioned Innovation Space during the Permanent Secretary’s working visit to the Agency’s corporate headquarters.

Speaking during a courtesy visit by the Permanent Secretary of the Ministry of Communications, Innovationand Digital Economy, Mr. Nadungu Gagare, to NITDA headquarters, Inuwa described the engagement as a significant demonstration of the Ministry’s support and leadership, noting that sustained collaboration between both institutions is essential to delivering Nigeria’s digital economy agenda.

The NITDA Director General recalled previous engagements with the Ministry, including a familiarisation visit during which the Agency shared its strategic roadmap and ongoing initiatives, noting that continuous dialogue has strengthened alignment between both institutions.

He highlighted key policy areas requiring continued collaboration, including the development of a national sovereign cloud infrastructure and a comprehensive cybersecurity policy framework.

“We are awaiting the Ministry’s guidance on how to move forward, particularly on the national cloud and cybersecurity policies,” he said, while emphasising the importance of clear institutional boundaries and mutual respect in enhancing operational effectiveness and inter-agency cooperation.

Inuwa also revealed that NITDA has been at the forefront of implementing the Performance Management System (PMS), having introduced the framework internally several years before its adoption across the Federal Civil Service.

“We started PMS about four years ago. What we have now at the national level actually originated from our internal reforms,” he disclosed, adding that initiatives such as Project NEXT have strengthened accountability, role clarity, and measurable outcomes across the Agency.

“If you perform well, you are rewarded. If not, there are consequences. Even promotions are tied to performance,” he added.

The Director General further highlighted NITDA’s transformation from a traditional regulatory institution into a dynamic ecosystem enabler focused on innovation, inclusion, and national development.

“We are building a high-velocity organisation—one that is agile, inclusive, and driven by innovation,” he said, explaining that the Agency is embracing a more flexible and entrepreneurial culture that empowers staff to contribute ideas and drive institutional growth.

In his remarks, the Permanent Secretary of the FMCIDE, Mr. Nadungu Gagare, reaffirmed the Ministry’s commitment to strengthening collaboration with its agencies, describing partnership as fundamental to achieving sustainable progress in Nigeria’s digital transformation journey.

“If there is no partnership, there is nothing that can be achieved. But with partnership and collaboration, a lot can be accomplished, and that is exactly what we are seeing now,” he stated.

Gagare explained that the visit forms part of the Ministry’s ongoing engagement with agencies under its supervision to strengthen policy coordination, assess progress, and address operational challenges requiring higher-level intervention.

He commended the management and staff of NITDA for their dedication to advancing Nigeria’s digital innovation ecosystem, acknowledging the Agency’s contributions to digital literacy, innovation, cybersecurity awareness, and the creation of opportunities for startups and young innovators.

“NITDA has continued to play a pivotal role in shaping Nigeria’s digital future through the promotion of information technology development, digital literacy, innovation, and regulatory standards,” he said.

The Permanent Secretary also stressed the importance of policy coherence among institutions within the Ministry, noting that agency mandates are interconnected and must be implemented seamlessly.

“Your mandates are inputs into one another. That is why we need tight collaboration so implementation can go smoothly,” he said, while assuring NITDA of the Ministry’s continued guidance and institutional support.

He further highlighted ongoing Federal Civil Service reforms, particularly the adoption of the Performance Management System, which promotes accountability, clear target-setting, and measurable performance outcomes.

“When everything needed for performance is made available and targets are not met, consequence management follows. Where targets are exceeded, there is reward. This is how we drive performance in the service,” he noted.

The visit showcases the shared commitment of both FMCIDE and NITDA to advancing Nigeria’s digital economy through stronger collaboration, innovation, and effective governance, with the strengthened partnership expected to play a critical role in delivering inclusive growth, improved service delivery, and sustainable national development.


Kindly share this post
Continue Reading

Trending