E-Business
Cyber Attackers Getting More Undetected in Target Networks – Sophos Report
New report released by Sophos has revealed that Cyber attackers are not only becoming sophisticated now, they are even getting more time undetected in target networks.
John-Shier, Senior-Security-Advisor-at-Sophos
Sophos, a global leader in next-generation cybersecurity, which released the “Active Adversary Playbook 2021,” detailing attacker behaviors and the tools, techniques and procedures (TTPs) that Sophos’ frontline threat hunters and incident responders saw in the wild in 2020.
The TTP detection data also covers early 2021. The findings show that the median attacker dwell time before detection was 11 days – or 264 hours – with the longest undetected intrusion lasting 15 months.
Ransomware featured in 81% of incidents and 69% of attacks involved the use of the remote desktop protocol (RDP) for lateral movement inside the network.
The playbook is based on Sophos telemetry as well as 81 incident investigations and insight from the Sophos Managed Threat Response (MTR) team of threat hunters and analysts and the Sophos Rapid Response team of incident responders.
The aim is to help security teams understand what adversaries do during attacks and how to spot and defend against malicious activity on their network.
Key findings in the playbook include:
- The median attacker dwell time before detection was 11 days – To put this in context, 11 days potentially provide attackers with 264 hours for malicious activity, such as lateral movement, reconnaissance, credential dumping, data exfiltration, and more.
Considering that some of these activities can take just minutes or a few hours to implement – often taking place at night or outside standard working hours – 11 days offers attackers plenty of time to cause damage in an organization’s network.
It is also worth noting that ransomware attacks tend to have a shorter dwell time than “stealth” attacks, because they are all about destruction
- 90% of attacks seen involved the use of the Remote Desktop Protocol (RDP) – and in 69% of all cases, attackers used RDP for internal lateral movement – Security measures for RDP, such a VPNs and multi-factor authentication tend to focus on protecting external access.
However, these don’t work if the attacker is already inside the network. The use of RDP for internal lateral movement is increasingly common in active, hands-on-keyboard attacks such as those involving ransomware
- Interesting correlations emerge among the top five tools found in victim networks. For instance, when PowerShell is used in an attack, Cobalt Strike is seen in 58% of cases, PsExec in 49%, Mimikatz in 33%, and GMER in 19%.
Cobalt Strike and PsExec are used together in 27% of attacks, while Mimikatz and PsExec occur together in 31% of attacks. Lastly, the combination of Cobalt Strike, PowerShell and PsExec occurs in 12% of all attacks.
Such correlations are important because their detection can serve as an early warning of an impending attack or confirm the presence of an active attack
- Ransomware was involved in 81% of the attacks Sophos investigated. The release of ransomware is often the point at which an attack becomes visible to an IT security team. It is, therefore, not surprising that the vast majoirty of the incidents Sophos responded to involved ransomware.
Other attack types Sophos investigated included exfiltration only, cryptominers, banking trojans, wipers, droppers, pen test/attack tools, and more
“The threat landscape is becoming more crowded and complex, with attacks launched by adversaries with a wide range of skills and resources, from script kiddies to nation-state backed threat groups. This can make life challenging for defenders,” said the Senior Security Advisor at Sophos, John Shier. “Over the last year, our incident responders helped to neutralize attacks launched by more than 37 attack groups, using more than 400 different tools between them. Many of these tools are also used by IT administrators and security professionals for their everyday tasks and spotting the difference between benign and malicious activity isn’t always easy.
“With adversaries spending a median of 11 days in the network, implementing their attack while blending in with routine IT activity, it is critical that defenders understand the warning signs to look out for and investigate. One of the biggest red flags, for instance, is when a legitimate tool or activity is detected in an unexpected place. Most of all, defenders should remember that technology can do a great deal but, in today’s threat landscape, may not be enough by itself. Human experience and the ability to respond are a vital part of any security solution.”
Other topics covered in the playbook include the tactics and techniques most likely to signpost an active threat and warrant closer investigation, the earliest signs of attack, the most widely seen stagers, threat types and malicious artefacts, the most prevalent adversary groups seen, and more.
To learn more about attacker behaviors, tactics, techniques and procedures (TTPs) read the Sophos Active Adversary Playbook 2021 on Sophos News.
The federal government, in collaboration with the International Fund for Agricultural Development (IFAD), is building a digital registrar that will identify farmers, their farmlands, type of soil and the crops they grow for targeted services.
The information and the National Identification Number (NIN) will be integrated into a multipurpose identity card that farmers can use to access financial services, inputs and other forms of government assistance.
The digitisation is expected to harmonise farmers’ data across all the 36 states and the Federal Capital Territory.
Speaking at the national launch of the Policy Dialogue Initiative on the National Digital Farmers Registry (NDFR) recently in Abuja, Dr Marcus Ogunbiyi, permanent secretary, Federal Ministry of Agriculture and Food Security (FMAFS), said the new system would address the issue of portfolio farmers, whom he described as “farmers who have no farm.”
“We are going to register farmers and their farms. Not only that, farmers and the type of crop they grow, farmers and the locality they are, the type of soil they have on their farms. There is no farm that will not have a farmer. But there are many farmers who do not have farms. This is an encompassing package.
“When we register these farmers, we are going to provide a physical and digital card for them. With the card, many things can be done by the farmers. It can be used as a means of identification, an asset to some gateway – just anything. It is going to have a handshake with the database of the country, such that with that particular card, the farmer can enter any place and get things done. He or she can redeem inputs and even get a loan, depending on the financial entity,” Ogunbiyi explained.
He said that to accomplish this, the Federal Ministry of Agriculture and Food Security has taken decisive steps to transform their approach to farmer data management, adding, “Chief among these is our strategic partnership with the National Identity Management Commission (NIMC) to implement a far-reaching farmer registration and database project. At the heart of this initiative is the integration of the NIN, which ensures that every Nigerian farmer is uniquely identified and seamlessly integrated into a national agricultural system.”
Mrs Dede Ahoefa Ekoue, country director/representative of the IFAD in Nigeria, said the United Nations (UN) organisation was proud to be part of the initiative on the National Digital Farmer Registry in Nigeria.
“Our role is to convene all the partners, development partners from the public sector, private sector and the international community to put our resources together to support the effort of the government in establishing and enabling a digital farmer registry for the country,” she said.
Mrs Ekoue said that although there were previous efforts to have a national database of farmers, it had the issues of fragmentation and sustainability.
“The government is now providing us with a sense of direction and matching orders to all the actors to work together. This is what we are doing today with several partners, including the African Development Bank, FAO, the World Bank, the EU, the Islamic Development Bank and UK. Also, what is very key is farmers’ organisations because it is about them, it is for them, it must be with them,” she added.
The country director said the IFAD was happy to bring together the private sector and different ministries, departments and agencies, adding, “It will be a game changer for having a strong, updated and sustainable national digital farmer registry.”
Dr Lekan Tobe, the country director of Heifer International in Nigeria, in his remarks at the official launch of the Policy Dialogue Initiative on the National Digital Farmer Registry, emphasised the critical role of partnership and data in transforming Nigeria’s agricultural sector.
He said that this initiative, born from recommendations of previous policy dialogues organised in collaboration with the federal government, aimed to scale up innovative digital technology to enhance food systems across the country.
Dyna.Ai, a global leader in AI-as-a-Service (AIaaS), has launched its operations in Nigeria with an exclusive closed-door ‘Nigeria Dyna Day’ event in Lagos, which saw the introduction and orientation of its suite of AI-powered products and solutions to Nigeria’s emerging financial ecosystem.
The event, tagged ‘Nigeria Dyna Day’ and themed “AI Unleashed: Revolutionising Nigeria’s Financial Future,” brought together leading voices from the country’s AI, financial, fintech, telecom, and other key sectors, including representatives from government agencies and major enterprises.
In his opening remarks, Tomas Skoumal, chairman and co-president of Dyna.Ai, emphasized the strategic importance of Nigeria and the broader African market, stating, “For us, it makes sense to start in Nigeria.
There is no bigger country in Africa—this is where the momentum is.” He noted that Africa is no longer just “the future,” but is actively transforming today, driven by rapid digitalization and fintech innovation.
“This is the perfect time to be here,” he added, highlighting that Dyna.Ai sees technology as a vital bridge to financial inclusion and long-term growth across the region.
Skoumal introduced Dyna.Ai’s advanced Agentic AI solutions, including its proprietary Agent Studio and industry-specific language models, designed to power intelligent automation across customer service, marketing, collections, HR and more.
He also underscored the company’s long-term ambition to invest in local talent, stating, “We’re not just here to sell a product—we’re here to build infrastructure, create local jobs, and scale innovation from Nigeria to the rest of Africa.”
Dyna.Ai also showcased its advanced AI technologies at the event, including AvatarGPT, an AI digital human delivering interactive experiences; VoiceGPT, a voice agent featuring authentic local accents for seamless communication in Yoruba, Hausa, and Igbo; along with live demonstrations showing how these innovations empower customer engagement and employee experience.
Delivering the keynote address at the event, Tokoni Peter Igoin, Special Assistant to the President on ICT Development and Digital Innovation, underscored the Federal Government’s vision for a secure and forward-thinking digital ecosystem.
“The government of the Federal Republic of Nigeria, under the visionary leadership of His Excellency, President Bola Ahmed Tinubu, is fully committed to responsible innovation. Our approach to AI and financial technology is rooted in a positive framework. It encourages creativity while ensuring transparency, data protection, and digital security”, he said
Also in his remarks, Olatunbosun Alake, Lagos State Commissioner of Innovation, Science and Technology, gave insights from the government/regulatory perspective.
He announced that the Lagos State government is also taking steps towards the wide adoption and regulation of artificial intelligence in the state with the planned release of the first AI guidelines for the deployment and management of AI in the coming weeks.
A new global survey from the Internet Corporation for Assigned Names and Numbers (ICANN) reveals that 52% of marketing leaders believe generic top-level domains (gTLDs – the three characters or more that come after the dot in a URL) have strong potential for enhancing brand presence online; however, a knowledge gap is preventing many brands from taking advantage of the opportunities that a gTLD can bring.
The research surveyed over 2,000 marketing leaders across eight countries (Brazil, China, India, Mexico, Nigeria, South Africa, U.K., and U.S.) with the purpose of creating a picture of the evolving digital marketing landscape and understanding the levels of awareness around gTLDs.
It comes as ICANN prepares to open the next application window for new gTLDs in April 2026 the New gTLD Program: Next Round – the first opportunity in more than a decade for organizations to apply to operate their own gTLD.
Top-level domains are the letters found at the end of an Internet address (with gTLDs including .charity, .menu, .paris and .ceo). Brands can apply to run their own gTLD as a way to indicate the purpose of their organization or to clearly mark a website as being related to their brand.
The research shows that increasing brand awareness and visibility is the top priority for marketing leaders (54%) and that over half believe that gTLDs have strong potential for enhancing brand presence online.
However, the research also shows that almost a third (32%) of marketing leaders surveyed are unfamiliar with gTLDs, which suggests that operating a new gTLD may be a strategic opportunity that many organizations are currently overlooking.
Key findings from the research include:
- After defining a gTLD, 92% of marketing leaders responded that they could see the potential benefits to gTLDs, with enhanced brand differentiation (46%), improved customer trust (45%), better control over online presence (44%), and improved SEO (44%) topping the list.
- 19% of marketing leaders work for organizations that have previously applied for a gTLD.
- Cost concerns (31%), knowledge gaps (27%), and insufficient resources (24%) were identified as the main barriers to application.
- The research revealed notable regional variations, with Nigerian (74%) and Indian (61%) marketing leaders showing the strongest belief in gTLDs’ potential for branding and online presence. In contrast, marketers in China expressed more mixed views, with 50% seeing strong potential but 49% considering gTLDs an unnecessary investment with unclear Return On Investment.
The findings come at a time when marketing leaders are facing significant challenges in standing out from competitors (53%), attracting and engaging the right audience (52%), and keeping pace with digital trends (47%).
A new gTLD can be an innovative tool for commerce and communication. They allow businesses in specific countries, sectors, or niche markets to create an exclusive, descriptive, and memorable label on the Internet.
An entity operating a gTLD can provide its users and customers with an extra measure of confidence in its security and legitimacy online. This can be valuable in today’s environment, where users often don’t know whether they can trust the source on the Internet.
Theresa Swinehart, SVP, Global Domains & Strategy said: “The New gTLD Program: Next Round presents an opportunity for businesses, communities, governments, and others to apply to operate their own secure space online, tailored to fit their organization, community, culture, language, and customer interests.
Now is also the moment for brands to consider applying for a gTLD, and this research tells us there is still a lack of awareness. ICANN can help provide information and raise awareness of the Next Round and the opportunity it presents for global communities, organizations, and businesses, including brands.”
To help address the knowledge gap, ICANN is developing resources to help organizations understand the application process and potential opportunities for gTLDs ahead of the 2026 application window. ICANN also offers the Applicant Support Program (ASP), which provides financial and non-financial assistance to eligible applicants.
ARCON Probes 9mobile over Alleged N1Bn Advertising Debt
Farmers to Get Identity Card for Loans, Inputs
SERAP Sues NNPC over Alleged Missing ₦500Bn, Seeks Accountability
Dyna.Ai Launches Operations in Nigeria
Ikeja Computer Village Begins Biometrics Registration to Tackle Crime
General News2 days agoUche Uzoebo, SANEF CEO Makes Case for More Financial Inclusion Strategies Targeting Women
News2 days agoUK Minister for Africa Visits Nigeria to Deepen Strategic Partnership
General News2 days agoHydrogen, Lagos State Touch Thousands of Business Owners with “Healthy Heart, Healthy Business” Outreach
Broadcasting2 days agoACAMB Champions Bankers Wellness with Aerobics Fitness Session
E-Business2 days agoSurvey Reveals Marketing Leaders See Strong Potential in gTLDS Despite Knowledge Gap
News5 hours agoFirst Asset Management Receives 2024 Fund Manager Award
General News5 hours agoNigeria Relaunches National Talent Export Programme to Unlock $1 Trillion Global Outsourcing Market
Telecom5 hours agoNiRA Holds 17th AGM, Elects New Leadership to Propel .ng Domain Growth