E-Business
Cyber Attackers Getting More Undetected in Target Networks – Sophos Report
New report released by Sophos has revealed that Cyber attackers are not only becoming sophisticated now, they are even getting more time undetected in target networks.
John-Shier, Senior-Security-Advisor-at-Sophos
Sophos, a global leader in next-generation cybersecurity, which released the “Active Adversary Playbook 2021,” detailing attacker behaviors and the tools, techniques and procedures (TTPs) that Sophos’ frontline threat hunters and incident responders saw in the wild in 2020.
The TTP detection data also covers early 2021. The findings show that the median attacker dwell time before detection was 11 days – or 264 hours – with the longest undetected intrusion lasting 15 months.
Ransomware featured in 81% of incidents and 69% of attacks involved the use of the remote desktop protocol (RDP) for lateral movement inside the network.
The playbook is based on Sophos telemetry as well as 81 incident investigations and insight from the Sophos Managed Threat Response (MTR) team of threat hunters and analysts and the Sophos Rapid Response team of incident responders.
The aim is to help security teams understand what adversaries do during attacks and how to spot and defend against malicious activity on their network.
Key findings in the playbook include:
- The median attacker dwell time before detection was 11 days – To put this in context, 11 days potentially provide attackers with 264 hours for malicious activity, such as lateral movement, reconnaissance, credential dumping, data exfiltration, and more.
Considering that some of these activities can take just minutes or a few hours to implement – often taking place at night or outside standard working hours – 11 days offers attackers plenty of time to cause damage in an organization’s network.
It is also worth noting that ransomware attacks tend to have a shorter dwell time than “stealth” attacks, because they are all about destruction
- 90% of attacks seen involved the use of the Remote Desktop Protocol (RDP) – and in 69% of all cases, attackers used RDP for internal lateral movement – Security measures for RDP, such a VPNs and multi-factor authentication tend to focus on protecting external access.
However, these don’t work if the attacker is already inside the network. The use of RDP for internal lateral movement is increasingly common in active, hands-on-keyboard attacks such as those involving ransomware
- Interesting correlations emerge among the top five tools found in victim networks. For instance, when PowerShell is used in an attack, Cobalt Strike is seen in 58% of cases, PsExec in 49%, Mimikatz in 33%, and GMER in 19%.
Cobalt Strike and PsExec are used together in 27% of attacks, while Mimikatz and PsExec occur together in 31% of attacks. Lastly, the combination of Cobalt Strike, PowerShell and PsExec occurs in 12% of all attacks.
Such correlations are important because their detection can serve as an early warning of an impending attack or confirm the presence of an active attack
- Ransomware was involved in 81% of the attacks Sophos investigated. The release of ransomware is often the point at which an attack becomes visible to an IT security team. It is, therefore, not surprising that the vast majoirty of the incidents Sophos responded to involved ransomware.
Other attack types Sophos investigated included exfiltration only, cryptominers, banking trojans, wipers, droppers, pen test/attack tools, and more
“The threat landscape is becoming more crowded and complex, with attacks launched by adversaries with a wide range of skills and resources, from script kiddies to nation-state backed threat groups. This can make life challenging for defenders,” said the Senior Security Advisor at Sophos, John Shier. “Over the last year, our incident responders helped to neutralize attacks launched by more than 37 attack groups, using more than 400 different tools between them. Many of these tools are also used by IT administrators and security professionals for their everyday tasks and spotting the difference between benign and malicious activity isn’t always easy.
“With adversaries spending a median of 11 days in the network, implementing their attack while blending in with routine IT activity, it is critical that defenders understand the warning signs to look out for and investigate. One of the biggest red flags, for instance, is when a legitimate tool or activity is detected in an unexpected place. Most of all, defenders should remember that technology can do a great deal but, in today’s threat landscape, may not be enough by itself. Human experience and the ability to respond are a vital part of any security solution.”
Other topics covered in the playbook include the tactics and techniques most likely to signpost an active threat and warrant closer investigation, the earliest signs of attack, the most widely seen stagers, threat types and malicious artefacts, the most prevalent adversary groups seen, and more.
To learn more about attacker behaviors, tactics, techniques and procedures (TTPs) read the Sophos Active Adversary Playbook 2021 on Sophos News.
By Reuben Kalu.
In the vast expanse of the digital realm, Google looms large, an omnipresent force shaping the way we navigate, search, and conduct business online.
From its humble beginnings as a search engine to its current status as a multifaceted tech behemoth, Google has entrenched itself deeply into the fabric of the internet.
Its influence is undeniable, its reach unparalleled, and its ubiquity seemingly inescapable. But can you truly run an online business without Google?
The answer, in today’s digital landscape, is a resounding no. You have no choice.
Google’s dominance extends across multiple facets of the online world, making it virtually impossible for businesses to thrive without engaging with its ecosystem.
From search engine optimization (SEO) to online advertising, email services to analytics, Google’s suite of products and services permeates every aspect of the online business landscape.
Attempting to operate without Google is akin to swimming against a relentless tide, fighting an uphill battle fraught with obstacles and limitations.
At the heart of Google’s influence lies its search engine, the gateway through which billions of internet users navigate the vast expanse of online content. .
Google’s search algorithms wield immense power, determining which websites rank prominently in search results and which languish in obscurity.
For businesses seeking to attract organic traffic and expand their online presence, optimizing for Google’s search algorithms is not merely advisable—it’s imperative.
But Google’s influence extends far beyond search. Consider Google Ads, the company’s advertising platform that enables businesses to reach targeted audiences through paid search, display, and video advertising.
With billions of searches conducted on Google each day, Google Ads provides unparalleled reach and visibility, allowing businesses to target potential customers with pinpoint accuracy.
Attempting to compete in the online advertising arena without leveraging Google Ads is akin to entering a battle unarmed—a futile endeavor destined for failure.
Moreover, Google’s suite of productivity tools, including Gmail, Google Drive, and Google Workspace, has become indispensable for businesses seeking to streamline their operations and enhance collaboration.
With seamless integration across devices and platforms, Google’s productivity tools offer unparalleled convenience and efficiency, empowering businesses to work smarter, not harder.
Attempting to eschew Google’s productivity suite in favor of alternative solutions is not only impractical but also unwise, depriving businesses of the tools they need to succeed in today’s fast-paced digital landscape.
Furthermore, Google Analytics stands as the gold standard for web analytics, providing businesses with invaluable insights into their online performance and audience behavior.
From tracking website traffic and user engagement to analyzing conversion metrics and customer demographics, Google Analytics offers a comprehensive toolkit for optimizing online marketing strategies and driving business growth.
Attempting to gauge online performance without leveraging Google Analytics is akin to flying blind, devoid of the critical data needed to make informed decisions and drive meaningful results.
But perhaps the most formidable aspect of Google’s influence lies in its role as a gatekeeper of information and access.
With billions of users relying on Google’s platforms and services each day, the company wields immense control over the flow of online traffic and the dissemination of information.
For businesses seeking to connect with customers and expand their reach, Google’s dominance presents both a tremendous opportunity and a formidable challenge.
Attempting to circumvent Google’s influence and establish an online presence independent of its ecosystem is a Herculean task, fraught with uncertainty and risk.
In essence, attempting to run an online business without engaging with Google is akin to swimming against a relentless tide, fighting an uphill battle fraught with obstacles and limitations.
While alternative platforms and solutions exist, none possess the ubiquity, reach, and influence of Google’s ecosystem.
To thrive in today’s digital landscape, businesses must embrace Google’s dominance and leverage its suite of products and services to their advantage. You have no choice.
In conclusion, Google’s pervasive influence permeates every aspect of the online business landscape, making it virtually impossible to escape its grasp.
From search engine optimization to online advertising, productivity tools to web analytics, Google’s ecosystem encompasses a vast array of products and services that have become indispensable for businesses seeking to succeed in the digital age.
While alternative solutions may exist, none possess the ubiquity, reach, and influence of Google’s ecosystem.
To thrive in today’s digital landscape, businesses must embrace Google’s dominance and leverage its suite of products and services to their advantage.
You have no choice.
E-Business
Hydrogen Hosts Catalyst Workshop, Highlights Resilient Business Models for Fintech Startups
As part of its mission to empower African businesses with tools needed to thrive, garner admiration, and foster global acclaim, leading payment solution company, Hydrogen Payment Services Company Limited (Hydrogen), recently partnered with the Co Creation Hub (CcHub), to host the latest edition of the Catalyst workshop in Lagos.
The discourse addressed the potential risks and opportunities for startups and saw experts advise participants on the need to develop resilient business models that would scale across different economic climes.
Moderated by Miracle Ezechi, Digital Marketing Manager, Hydrogen, the panel session addressed dominant issues about the theme: ‘Adapting Fintech Business Models to Economic Climes: Flexibility, Agility and Customer-centricity’.
Mr. Emeka Awagu, Chief Technology Officer, Hydrogen, who spoke as a panellist, addressed the issue of customer-centricity, which according to him, is key to Fintech growth.
He advised startups to listen to customer demands and understand their needs in order to develop the right solutions that will lead to long term market viability.
“Innovation is key for startup growth. However, understanding customers’ needs and change in behaviour will help any startup to innovate better.
“Startups must be flexible and agile to develop solutions with high interoperability and processing speed, and they must be ready to learn from startups that have failed,” Awagu said.
With an estimated 61.07 percent of startups failing, the participants stressed the need for prudence.
“Statistically, a staggering number of startups fail, often due to financial mismanagement. Hence, founders must prioritise understanding and maintaining a healthy the Cost-to-Earnings ratio.
“It is not just a number, but a pivotal indicator of a company’s financial health as well as being a key attractiveness determinant for investors,” Awagu added.
On his part, Ina Alogwu, the Group Director, Digital Transformation, ARM HOLDCO, who also spoke as a panellist at the session, stressed the need for startups to develop sustainable products and solutions that will help them remain competitive in an environment that is faced with harsh economic realities.
“Many startup businesses fail within their first five years, however upcoming startups should not be discouraged, rather develop a culture that will encourage them to understand the reasons for failure and learn from mistakes.
“Startups should not be too rigid with their solutions and should be ready to accept changes that will drive innovation,” Alogwu stated.
Hydrogen will be deepening its economic impact series with a webinar planned for Thursday, April 25, even as businesses across Africa continue to face an array of challenges, ranging from inflation and currency fluctuations to rising operating costs.
Themed ‘Navigating Economic Challenges: Strategies for Sustainable Growth,’ the webinar will delve into key areas critical for businesses to not only survive but thrive in the face of economic adversity. Register using this link – https://bit.ly/Hydrogenwebinar.
Esteemed panellists for this event include Taofik Odukoya, CEO, Vanguard Pharmacy, and Okechukwu Odimgbe, Chief Financial Officer, Hydrogen. The session will be moderated by Nnenna Sam-Obioha, Ecosystem Orchestrator, Hydrogen.
Dexude, a leading edtech platform with operations in Nigeria, has announced that it has been awarded the prestigious Business Finland TEMPO funding.
Charles Emembolu, founder of Dexude,
This significant funding injection marks a pivotal moment in Dexude’s journey towards transforming education through its AI-powered, live-first, expert-led, and community-driven platform.
The Business Finland TEMPO funding is specifically designed to support startups and SMEs aiming for international growth by building their expertise and solutions into international success stories in innovative ways.
Dexude’s commitment to innovation, coupled with its vision to enable a billion learners worldwide, aligns perfectly with the objectives of the TEMPO funding.
Commenting on this milestone achievement, Charles Emembolu, founder of Dexude, remarked, “We are incredibly honored and excited to receive the Business Finland TEMPO funding. This funding is not only a validation of Dexude’s mission to reinvent education but also a testament to the hard work and dedication of our team. With this support, we are poised to accelerate our efforts in democratizing access to quality education and empowering learners across Nigeria and beyond.”
L-r; Kelvin Chikezie, co-founder of Dexude; Kashifu Inuwa Abdullahi, Director-General/CEO of the National Information Technology Development Agency (NITDA); and Charles Emembolu, founder of Dexude
Kelvin Chikezie, co-founder of Dexude, added, “Securing the Business Finland TEMPO funding is a significant milestone for Dexude. It underscores our commitment to leveraging technology and innovation to revolutionize the way people learn and grow. We are grateful to Business Finland for believing in our vision, and we are excited to embark on this next chapter of Dexude’s journey.”
Dexude is on a mission to redefine education by providing learners with access to influential experts and thought leaders, live interactions, and a vibrant community-driven learning experience.
Through its platform, Dexude aims to break down barriers to learning and empower individuals to pursue their passions and unlock their full potential.
Telcos Ask NCC to Allow Them Hike Tariff
UK Pledges €1Bn to Fight against Malaria in Nigeria
OJI Demands Ban on Netflix, TikTok, Others over Same-Sex Content
FCCPC to Review Multichoice’s Tariff Hike
Airtel Boosts NIPR Public Relations Week with Onsite Unlimited Data Connection
See Full List of Fake Loan Apps Blacklisted By CBN
AXA Mansard Empowers Female SMEs with Financial, Digital Skills
CBN Sacks another 50 Staff, 117 Disengaged in 20 Days
Nigerian Business Leaders Partner Google for Strategic Advantage, Seeks Competitive Edge in Privacy-First Era
New CAMON Device Set to Redefine Mobile Content Creation
Telecom2 days agoSecure Identity Alliance: OSIA Becomes Official ITU Standard
News2 days agoNigerian Banks Lost over N8Bn to Internet Fraudsters in 2022- EFCC
Telecom2 days agoZipline Achieves One Millionth Delivery Milestone
E-Business2 days agoDexude Secures Funding to Revolutionize Education in Nigeria, Beyond
E-Business2 days agoSOPHiA GENETICS Announces Syndicate Bio as First Liquid Biopsy Customer in Africa
Telecom1 day agoQualcomm Shortlists Startups for Qualcomm Make in Africa 2024 and Awards 2023 Wireless Reach Social Impact Fund
News1 day ago9mobile Partners Microsoft to Host Impactful Training Session for Journalists
Telecom1 day agoALTON, ATCON Urge FG to Address Telecoms Industry Challenges