E-Business
Cyber Attackers Getting More Undetected in Target Networks – Sophos Report
New report released by Sophos has revealed that Cyber attackers are not only becoming sophisticated now, they are even getting more time undetected in target networks.
John-Shier, Senior-Security-Advisor-at-Sophos
Sophos, a global leader in next-generation cybersecurity, which released the “Active Adversary Playbook 2021,” detailing attacker behaviors and the tools, techniques and procedures (TTPs) that Sophos’ frontline threat hunters and incident responders saw in the wild in 2020.
The TTP detection data also covers early 2021. The findings show that the median attacker dwell time before detection was 11 days – or 264 hours – with the longest undetected intrusion lasting 15 months.
Ransomware featured in 81% of incidents and 69% of attacks involved the use of the remote desktop protocol (RDP) for lateral movement inside the network.
The playbook is based on Sophos telemetry as well as 81 incident investigations and insight from the Sophos Managed Threat Response (MTR) team of threat hunters and analysts and the Sophos Rapid Response team of incident responders.
The aim is to help security teams understand what adversaries do during attacks and how to spot and defend against malicious activity on their network.
Key findings in the playbook include:
- The median attacker dwell time before detection was 11 days – To put this in context, 11 days potentially provide attackers with 264 hours for malicious activity, such as lateral movement, reconnaissance, credential dumping, data exfiltration, and more.
Considering that some of these activities can take just minutes or a few hours to implement – often taking place at night or outside standard working hours – 11 days offers attackers plenty of time to cause damage in an organization’s network.
It is also worth noting that ransomware attacks tend to have a shorter dwell time than “stealth” attacks, because they are all about destruction
- 90% of attacks seen involved the use of the Remote Desktop Protocol (RDP) – and in 69% of all cases, attackers used RDP for internal lateral movement – Security measures for RDP, such a VPNs and multi-factor authentication tend to focus on protecting external access.
However, these don’t work if the attacker is already inside the network. The use of RDP for internal lateral movement is increasingly common in active, hands-on-keyboard attacks such as those involving ransomware
- Interesting correlations emerge among the top five tools found in victim networks. For instance, when PowerShell is used in an attack, Cobalt Strike is seen in 58% of cases, PsExec in 49%, Mimikatz in 33%, and GMER in 19%.
Cobalt Strike and PsExec are used together in 27% of attacks, while Mimikatz and PsExec occur together in 31% of attacks. Lastly, the combination of Cobalt Strike, PowerShell and PsExec occurs in 12% of all attacks.
Such correlations are important because their detection can serve as an early warning of an impending attack or confirm the presence of an active attack
- Ransomware was involved in 81% of the attacks Sophos investigated. The release of ransomware is often the point at which an attack becomes visible to an IT security team. It is, therefore, not surprising that the vast majoirty of the incidents Sophos responded to involved ransomware.
Other attack types Sophos investigated included exfiltration only, cryptominers, banking trojans, wipers, droppers, pen test/attack tools, and more
“The threat landscape is becoming more crowded and complex, with attacks launched by adversaries with a wide range of skills and resources, from script kiddies to nation-state backed threat groups. This can make life challenging for defenders,” said the Senior Security Advisor at Sophos, John Shier. “Over the last year, our incident responders helped to neutralize attacks launched by more than 37 attack groups, using more than 400 different tools between them. Many of these tools are also used by IT administrators and security professionals for their everyday tasks and spotting the difference between benign and malicious activity isn’t always easy.
“With adversaries spending a median of 11 days in the network, implementing their attack while blending in with routine IT activity, it is critical that defenders understand the warning signs to look out for and investigate. One of the biggest red flags, for instance, is when a legitimate tool or activity is detected in an unexpected place. Most of all, defenders should remember that technology can do a great deal but, in today’s threat landscape, may not be enough by itself. Human experience and the ability to respond are a vital part of any security solution.”
Other topics covered in the playbook include the tactics and techniques most likely to signpost an active threat and warrant closer investigation, the earliest signs of attack, the most widely seen stagers, threat types and malicious artefacts, the most prevalent adversary groups seen, and more.
To learn more about attacker behaviors, tactics, techniques and procedures (TTPs) read the Sophos Active Adversary Playbook 2021 on Sophos News.
Federal government has inaugurated the Electronic Pharmacy Regulation Platform (E-Pharmacy) to enhance the safety of online healthcare services.
Pic credit….healthreporters.info
The platform, championed by the Pharmacy Council of Nigeria (PCN), is designed to regulate digital pharmaceutical services and improve public health outcomes.
Inaugurating the platform, Prof. Ali Pate, coordinating minister of Health and Social Welfare, said the initiative signified Nigeria’s commitment to building a world-class regulatory environment.
Pate noted that pharmacy regulation had faced significant challenges for over three decades but expressed optimism that the new platform would strengthen oversight and accountability.
He said the initiative would enable evidence-based monitoring of pharmaceutical practices while supporting innovation and investment in the health sector.
“This launch is a testament to our collective commitment to advancing technology in the service of health, safety and human dignity.
“It is a decisive step to ensure that pharmaceutical practice in Nigeria aligns with national and global health priorities, reflecting the realities of the 21st century.
“It enables the country to adopt evidence-based approaches to monitoring and protecting public health while supporting innovation and investment,” he said.
The minister added that the platform would help establish a safe, accessible and well-regulated national e-pharmacy ecosystem driven by digital technology.
Earlier, Alhaji Ibrahim Ahmed, registrar/chief executive officer of PCN, said the need to regulate online pharmacy operations became more urgent during the COVID-19 pandemic.
Ahmed said the pandemic accelerated the adoption of digital tools and e-commerce in healthcare, exposing longstanding inefficiencies in pharmaceutical supply chains, particularly in Africa and Nigeria.
“This has led to the increasing adoption of digitised distribution of essential medicines through cost-effective and technology-enabled models.
“For decades, PCN has regulated pharmacy education, training, practice and business in Nigeria. However, as the world shifts towards digital solutions, access to medicines has evolved.
“The Electronic Pharmacy Regulations 2026 provide a comprehensive legal and technical framework for the registration, licensing, operation and oversight of digital pharmaceutical services,” he said.
He added that the framework would ensure that ethical standards and patient safety are not compromised in the delivery of online pharmaceutical services.
Olugbenga Agboola, CEO, Flutterwave, has announced plans to establish Anambra State as the company’s hub for Nigeria’s South East, leveraging a fresh banking license from the Central Bank of Nigeria (CBN) to boost local fintech and businesses.
Flutterwave
Agboola made the disclosure yesterday in Awka during a meeting with Anambra tech community leaders, hosted alongside Dr. Stanley Uzochukwu, CEO, Stanel Group and proprietor, Delborough Hotel.
He highlighted Flutterwave’s status as Africa’s leading payment system, born in Nigeria, with infrastructure powering companies nationwide.
“We want Anambra to be our hub for the entire South East,” Agboola said. “We’ll deploy our systems, fees, infrastructure, and POS terminals to every small business and large firm here, making our services the top consumer choice.”
Agboola pledged a massive impact program for Anambra entrepreneurs to foster global platforms from the state, enabled by the new license for faster growth.
For a decade, Flutterwave has facilitated payments, but now aims to empower South East businesses through partnerships, POS access, loans, and value for SMEs.
“We’re partnering on a huge impact program launching soon—impacting the tech community with technology, financing, and lending to create more millionaires from this city,” he added.
The National Environmental Standards and Regulations Enforcement Agency (NESREA), in collaboration with the Africa Carbon Management Technology & Innovation (ACMTI) and the Clean Energy Ministerial Carbon Capture, Utilisation and Storage Initiative (CEM-CCUS), has launched a Carbon Capture, Utilisation and Storage (CCUS) Initiative Platform in Nigeria.
Speaking at the launch in Port Harcourt, Rivers State, Prof. Innocent Barikor, the Director-General of NESREA, described the project as a major milestone in Nigeria’s journey toward environmental sustainability, climate resilience, and industrial transformation.
Barikor explained that the CCUS solution provides an economically viable pathway for industrial decarbonisation by enabling the capture, storage, and utilisation of carbon in sectors such as beverage production, cement manufacturing, chemicals and fuels, enhanced oil recovery, and agriculture.
“We need to reduce carbon in the atmosphere to acceptable levels. Its utilisation offers opportunities to capture and store carbon and deploy it for industrial purposes. We are building a circular economy—turning environmental challenges into economic opportunities in line with regulatory provisions,” he said.
He noted that the CCUS Platform is a collaborative ecosystem designed to bring together key stakeholders, including government institutions, industry leaders, academia, technology developers, development partners, and investors.
Also speaking, the Vice-Chancellor of the University of Port Harcourt, Prof. Owunari Georgewill, commended NESREA for the initiative, describing it as a practical mechanism for coordination, innovation, and action toward Nigeria’s 2035 climate targets and broader energy transition goals.
He added that the university is well-positioned to host the CCUS initiative, noting that its Energy Technology Institute has developed credible expertise in energy transition-related fields critical to the success of CCUS in Nigeria.
On his part, the Coordinator of ACMTI and Facilitator of the Carbon Technology Innovation Platform (CTIP), Dr. Richard Victor Osu, said the vision is to position Nigeria as a regional leader in carbon management technologies while contributing meaningfully to Africa’s climate commitments and global decarbonisation efforts.
Osu explained that Port Harcourt was selected due to its potential as a CCUS hub, adding that the platform will focus on advancing research and innovation, building technical capacity, promoting public-private partnerships, attracting investment, and fostering collaboration with international research and technology partners.
Juho Lipponen of the CEM-CCUS Initiative assured that the organisation would support Nigeria in prioritising CCUS in clean energy discussions, strengthening carbon management deployment programmes, boosting partnerships, facilitating financing solutions, and promoting positive narratives around carbon utilisation.
The event attracted participants from the United States, France, Brazil, Canada, the United Arab Emirates, and the United Kingdom, who shared insights on the initiative.
Also in attendance were representatives of the National Oil Spill Detection and Response Agency (NOSDRA), the National Council on Climate Change (NCCC), the Nigeria Upstream Petroleum Regulatory Commission (NUPRC), the Rivers State Ministry of Environment, as well as private sector stakeholders and development partners.
Meta Files Appeal over $25,000 Damages Awarded to Falana
Teenager Hacks Celebrities Whatsapps, Sells Adult Content in Delta
FG Unveils ePharmacy Platform to Regulate Digital Pharmaceutical Services
Elon Musk Accuses South Africa of Racism over Starlink Licence Block
SERAP Asks Tinubu to Probe Alleged N2.9Bn Fraud In NIGCOMSAT, NNRA
Spotify’s Loud & Clear Report Reveals Over ₦60Bn Revenue for Nigerian Artists in 2025
Kuda MFB Increases Kuda for Her Business Grants to ₦10 Million
Canal+ to Cut Jobs as Part Sweeping Restructuring
Nigeria tops global rankings for USDT, USDC ownership
NBC Boss Urges Content Ceators to Participate in DSO
Broadcasting2 days agoFG to Gift Nigerians over 100 Free TV Channels from May 15
E-Financial2 days agoAfDB Okays $200m for Nigeria’s Digital Backbone, Others
E-Financial2 days agoCBN Dismisses Polaris Bank Liquidation Claim
General News2 days agoFG New Approves Biometric Passenger Verification System for Airports Security
E-Financial2 days agoNigeria’s Growth under Threat as Poverty Deepens, World Bank Warns
News2 days agoExperts Reveal a Steady Decline of High-severity Incidents Over the Years
E-Business2 days agoNESREA, ACMTI, Others Launch Carbon Utilisation Initiative in Nigeria
General News2 days agoBreaking Barriers: Cassava Technologies Expands Digital Access Across Africa