Connect with us

E-Business

Cyberattacks: ‘56 Percent of Cases Stem from Existing Logins

Published

on

Kindly share this post

A new report by Sophos, ybersecurity firm, has said that attackers primarily gained initial network access—56 per cent of all MDR and IR cases—by exploiting external remote services like firewalls and VPNs using valid credentials.

Cyberattacks: ‘56 Percent of Cases Stem from Existing Logins

The 2025 Sophos Active Adversary Report details attacker behavior and techniques from over 400 Managed Detection and Response [MDR] and Incident Response [IR] cases in 2024.

According to the report, the combination of external remote services and valid accounts align with the top root causes of attacks.

For the second year in row, compromised credentials were the number one root cause of attacks [41% of cases]. This was followed by exploited vulnerabilities [21.79%] and brute force attacks [21.07%].

When analysing MDR and IR investigations, the Sophos X-Ops team looked specifically at ransomware, data exfiltration, and data extortion cases to identify how fast attackers progressed through the stages of an attack within an organisation.

In those three types of cases, the median time between the start of an attack and exfiltration was only 72.98 hours [3.04 days]. Furthermore, there was only a median of 2.7 hours from exfiltration to attack detection.

“Passive security is no longer enough. While prevention is essential, rapid response is critical. Organisations must actively monitor networks and act swiftly against observed telemetry.

Coordinated attacks by motivated adversaries require a coordinated defense. “For many organisations, that means combining business-specific knowledge with expert-led detection and response.

Our report confirms that organizations with proactive monitoring detect attacks faster and experience better outcomes,” said John Shier, field CISO.

The 2025 Sophos Active Adversary Report further reveals that attackers can move quickly, with a median of just 11 hours between initial access and a breach attempt on Active Directory, a critical asset in Windows environments.

Akira emerged as the most prevalent ransomware group in 2024, followed by Fog and LockBit, the latter still active despite a major takedown.

Attack detection has improved overall, with dwell time—the time attackers remain undetected—dropping from four days to just two, thanks largely to the inclusion of MDR (Managed Detection and Response) cases.

Dwell time varied depending on the type of case: it held steady at 4 days for ransomware and 11.5 days for non-ransomware cases in incident response (IR) investigations.

In contrast, MDR cases showed much faster response times—3 days for ransomware and just 1 day for non-ransom – ware attacks.

The report also highlights that 83% of ransomware deployments occurred outside local business hours, showing attackers favor overnight activity.

Additionally, Remote Desktop Protocol (RDP) was exploited in 84% of cases, making it the most commonly abused Microsoft tool.

To strengthen their cybersecurity posture, Sophos advises organizations to take several key steps.

First, they should close any exposed Remote Desktop Protocol (RDP) ports and implement phishing-resistant multifactor authentication (MFA) wherever feasible to reduce unauthorized access risks.

Additionally, companies should prioritize timely patching of vulnerable systems, especially those exposed to the internet. Deploying Endpoint Detection and Response (EDR) or Managed Detection and Response (MDR) solutions with 24/7 monitoring is crucial.

Finally, having a well-defined incident response plan—and regularly testing it through simulations or tabletop exercises—can greatly improve preparedness for potential attacks.


Kindly share this post

Ebere Melum-Nwogbo is a trained and practicing journalist. She is passionate about ICT and business journalism. She has over a decade experience spanning money and capital market as well as information technology

E-Business

NCC Vows to Tackle Online Infringement, Block Illegal Music Websites

Published

on

Kindly share this post

Nigerian Copyright Commission (NCC) has pledged to enforce its legal obligations to combat online intellectual property infringement and urged commercial music users to obtain proper licences from rights holders or their representatives.

NCC Vows to Tackle Online Infringement, Block Illegal Music Websites

The Commission stated that this ensures creators are fairly compensated, supporting the music industry’s sustainable growth.

In a statement commemorating the 2025 World Intellectual Property Day, themed “IP and Music: Feel the Best of IP,” the NCC announced plans to enforce the Copyright Act 2022, which allows for the takedown of infringing materials and blocking of websites hosting illegal content.

Signed by Mrs Ijeoma Egbunike, director of Public Affairs, the statement outlined an aggressive anti-piracy campaign in collaboration with the private sector, targeting the online environment.

Egbunike affirmed the NCC’s commitment to establishing enforceable standards for transparency, digital audits, and real-time royalty reporting to protect creators’ rights. She stated, “The NCC will continue to champion policies that support the growth of the music industry, improve the livelihoods of Nigerian musicians, and foster a culture of creativity and respect for intellectual property.”

Despite the global success of Afrobeats and other Nigerian genres, the NCC noted that many musicians face low royalty returns due to rampant digital piracy.

To address this, the Commission revised its Collective Management Regulations to enhance transparency and accountability among Collective Management Organisations (CMOs).

The NCC emphasised that proper licensing is a legal obligation and vital for Nigeria’s creative economy, stating, “Music must feel the beat of intellectual property for the full potential of creativity to be realised.”

The Commission highlighted that creators’ livelihoods depend on fair royalty compensation.

Recent enforcement measures include the NCC’s designation by the Attorney-General of the Federation as an authority under the Proceeds of Crime (Recovery and Management) Act 2022.

This, combined with the Copyright Act 2022, empowers the NCC to order takedowns and block illegal music distribution websites.


Kindly share this post
Continue Reading

E-Business

FG Warns Nigerians Against Growing Threat of Cyber Slavery in West Africa

Published

on

Kindly share this post

The Federal Government, has warned Nigerians against the growing threat of cyber slavery within the West African sub-region.

The Ministry of Foreign Affairs, in a statement issued in Abuja by Kimiebi Imomotimi Ebienfa, acting spokesperson, noted with grave concern the alarming rise of cyber slavery across parts of West Africa, targeting Nigerian citizens, particularly vulnerable youths.

The government said many young Nigerians, including underage teenagers, were lured out of the country under the false promise of lucrative employment opportunities abroad, particularly in crypto-related operations.

According to the government, “In reality, these individuals are trafficked into sophisticated scam operations and enslaved to work in criminal “call centres” — often referred to as “419 cyber-scam factories.” There, they are forced under coercive and inhumane conditions to send thousands of fraudulent emails, text messages, and calls aimed at defrauding victims worldwide.”

The government also noted with dismay, a recent incident where the Economic and Organised Crimes Office (EOCO) in Accra, Ghana, rescued and detained a group of Nigerians forced to engage in cybercrime activities under inhumane conditions.

“This incident highlights the severe exploitation and abuse associated with cybercrime operations. It also underscores the need for enhanced efforts to combat such multibillion-dollar criminal networks and mitigate the susceptibility of victims.

“The Ministry strongly warns all Nigerians, especially the youths and parents, to exercise the utmost caution when presented with job offers, particularly those promising easy money, overseas travel, or remote work involving cryptocurrencies.

“Nigerians are therefore advised to verify all employment offers through official channels and report suspicious cases to relevant authorities for necessary investigation and action to curtail the activities of the perpetrators.

“The Ministry wishes to assure the general public that, as a precautionary measure to address this unfortunate situation, the Federal Government is working closely with regional partners, law enforcement agencies, and international organizations to tackle this heinous crime, rescue victims, and bring perpetrators to justice.

“The Ministry remains committed to protecting Nigerian citizens at home and abroad and will continue to raise awareness about emerging threats to the welfare and dignity of our people,” the statement read.


Kindly share this post
Continue Reading

E-Business

ALX Nigeria Launches 2025 Ventures Incubator, Premieres Pan-African “Do Hard Things” Finale

Published

on

L-r: ALX Ventures Country Entrepreneurship Development Manager, Joshua War Ebinabo; ALX Learning Associate, Ridwan Adepegba; ALX Country General Manager, Ruby Igwe; ALX Country Recruitment and Activation Specialist, Oluwatoni Ajewole; and ALX Learning Community Experience Specialist, Oluwapelumi Thomas at the Exclusive Mixer Party organised by ALX Nigeria in Lagos, recently.
Kindly share this post

ALX Nigeria is once again proving that when African talent meets the right opportunity, magic happens. In a celebration of innovation, grit, and ambition, ALX officially launched its 2025 Ventures Incubator Cohort, an elite group of startup founders handpicked from across the country, while simultaneously premiering the grand finale of the pan-African “Do Hard Things Challenge” at its Lagos hub.

From tech founders solving community challenges to creatives turning ideas into global solutions, ALX is backing the bold and building the infrastructure to help them scale. The ALX Ventures Incubator is the next big leap for graduates of the Founder Academy, providing them with hands-on mentorship, investor access, and the resources to grow sustainable businesses that shape the future of the continent.

“The launch of the ALX Ventures Incubator is proof of our unwavering commitment to building the infrastructure for African innovation to thrive,” said Ruby Igwe, Country General Manager at ALX Nigeria. “We witnessed incredible potential at our Founder Academy, and this next step ensures that these promising startups receive the support they need to grow into high-impact ventures. It’s about translating potential into lasting impact.”

These new ventures are powered by the same spirit that drove the Do Hard Things Challenge—a bold initiative that saw ALX travel to eight African cities in search of the continent’s most inspiring entrepreneurs. The final stop? Mauritius, where top finalists pitched in a high-stakes finale, now screened live for the Lagos tech and media community.

The challenge took ALX across Lagos, Nairobi, Johannesburg, Kigali, Accra, Cairo, Casablanca, and Addis Ababa, shining a spotlight on resilience, creativity, and unstoppable drive.

“The ‘Do Hard Things Challenge’ embodies the spirit we cultivate at ALX: resilience, ambition, and the courage to tackle complex problems,” said Joshua Ebinabo, ALX Ventures Country Entrepreneurship Development Manager.

“Showcasing the finale from Mauritius here in Lagos connects our local innovators to the broader African story. It inspires our learners, reassures parents about the future of tech, and shows business leaders the investment-ready talent right here in our ecosystem.”

The event brought together founders, business leaders, creators, and media influencers—all gathered to witness what happens when African talent is seen, celebrated, and supported. The energy was electric, the vision was bold, and the mission was clear: empower Africa’s brightest minds to build global solutions from right here on the continent.

Whether you’re a startup founder looking to scale or a dreamer looking for your big break, ALX continues to be the launchpad for Africa’s digital and entrepreneurial revolution.

Learn more about ALX’s tech and business programmes at alxafrica.ng, and follow the movement on YouTube, TikTok, LinkedIn, and Instagram via @alxnigeria.


Kindly share this post
Continue Reading

Trending