Connect with us

Telecom

Cybercriminals Are Doubling Down on Credential Theft, Launching More Innovative Ransomware Attacks – Sophos 2023 Threat Report Reveals

Published

on

Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, has on Monday published its 2023 Threat Report.

The report details how the cyberthreat landscape has reached a new level of commercialization and convenience for would-be attackers, with nearly all barriers to entry for committing cybercrime removed through the expansion of cybercrime-as-a-service.

The report also addresses how ransomware remains one of the greatest cybercrime threats to organizations with operators innovating their extortion tactics, as well as how demand for stolen credentials continues to grow.

Criminal underground marketplaces like Genesis have long made it possible to buy malware and malware deployment services (“malware-as-a-service”), as well as to sell stolen credentials and other data in bulk. Over the last decade, with the increasing popularity of ransomware, an entire “ransomware-as-a-service” economy sprung up.

Now, in 2022, this “as-a-service” model has expanded, and nearly every aspect of the cybercrime toolkit—from initial infection to ways to avoid detection—is available for purchase.

“This isn’t just the usual fare, such as malware, scamming and phishing kits for sale,” said Sean Gallagher, principal threat researcher, Sophos. “Higher rung cybercriminals are now selling tools and capabilities that once were solely in the hands of some of the most sophisticated attackers as services to other actors.

“For example, this past year, we saw advertisements for OPSEC-as-a-service where the sellers offered to help attackers hide Cobalt Strike infections, and we saw scanning-a-service, which gives buyers access to legitimate commercial tools like Metasploit, so that they can find and then exploit vulnerabilities.

“The commoditization of nearly every component of cybercrime is impacting the threat landscape and opening up opportunities for any type of attacker with any type of skill level.”

With the expansion of the “as-a-service” economy, underground cybercriminal marketplaces are also becoming increasingly commodified and are operating like mainstream businesses. Cybercrime sellers are not just advertising their services but are also listing job offers to recruit attackers with distinct skills. Some marketplaces now have dedicated help-wanted pages and recruiting staff, while job seekers are posting summaries of their skills and qualifications.

“Early ransomware operators were rather limited in how much they could do because their operations were centralized; group members were carrying out every aspect of an attack. But as ransomware became hugely profitable, they looked for ways to scale their productions. So, they began outsourcing parts of their operations, creating an entire infrastructure to support ransomware. Now, other cybercriminals have taken a cue from the success of this infrastructure and are following suit,” said Gallagher.

Indeed, as the cybercrime infrastructure has expanded, ransomware has remained highly popular—and highly profitable. Over the past year, ransomware operators have worked on expanding their potential attack service by targeting platforms other than Windows while also adopting new languages like Rust and Go to avoid detection. Some groups, most notably Lockbit 3.0, have been diversifying their operations and creating more “innovative” ways to extort victims.

“When we talk about the growing sophistication of the criminal underground, this extends to the world of ransomware. For example, Lockbit 3.0 is now offering bug bounty programs for its malware and ‘crowd-sourcing’ ideas to improve its operations from the criminal community. Other groups have moved to a ‘subscription model’ for access to their leak data and others are auctioning it off. Ransomware has become, first and foremost, a business,” said Gallagher.

The evolving economics of the underground has not only incentivized the growth of ransomware and the “as-a-service” industry, but also increased the demand for credential theft. With the expansion of web services, various types of credentials, especially cookies, can be used in numerous ways to gain a deeper foothold in networks, even bypassing MFA. Credential theft also remains one of the easiest ways for novice criminals to gain access to underground marketplaces and begin their “career.”

Sophos also analyzed the following trends:

·The war in Ukraine had global repercussions for the cyberthreat landscape. Immediately following the invasion, there was an explosion of financially motivated scams, while nationalism led to a shake-up of criminal alliances between Ukrainians and Russians, particularly among ransomware affiliates.

· Criminals continue to exploit legitimate executables and utilize “living off the land binaries” (LOLBins) to launch various types of attacks, including ransomware. In some cases, attackers deploy legitimate but vulnerable system drivers in“bring your own driver” attacks to attempt to shut down endpoint detection and response products to evade detection.

· Mobile devices are now at the center of new types of cybercrimes. Not only are attackers still using fake applications to deliver malware injectors, spyware and banking-associated malware, but newer forms of cyberfraud have been growing in popularity, such as “pig butchering” schemes. And this crime is no longer just affecting Android users, but iOS users as well.

· The devaluation of Monero, one of the most popular cryptocurrencies for cryptominers, led to a decrease in one of the oldest and most popular types of cryptocrime—cryptomining. But mining malware continues to spread through automated “bots” on both Windows and Linux systems.

To learn more about the changing threat landscape in 2022 and what it means for security teams in 2023, read the full Sophos 2023 Threat Report.

The Sophos 2023 Threat Report consists of research and insights from Sophos X-Ops, a new, cross-operational unit that links three established teams of cybersecurity experts at Sophos (SophosLabs, Sophos SecOps, and Sophos AI).
Sophos X-Ops includes more than 500 cybersecurity experts worldwide uniquely equipped to offer a complete, multi-disciplinary picture of an increasingly complex threat landscape. To learn more about daily cyberattacks and TTPs, follow Sophos X-Ops on Twitter and subscribe to receive current threat research and security operations articles and reports from the frontlines of cybersecurity.

Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Dimension Data Nigeria Secures ₦20Billion Funding to Strengthen Digital Infrastructure

Published

on

Kindly share this post

Dimension Data Nigeria has raised ₦20 billion (approximately $13.7 million) through a bond programme under Dimension Data SPV Funding Plc, following approval from the Securities and Exchange Commission of Nigeria.

This initiative aims to strengthen Nigeria’s digital infrastructure by addressing gaps in fibre coverage, limited enterprise connectivity, and increasing demand for cloud, fintech, digital services, and Artificial Intelligence.

The integrated IT solutions provider stated that the capital will be used to fund long-term investments in expanding network capacity, enhancing resilience, and supporting carrier-grade and enterprise services as data consumption continues to accelerate nationwide.

Speaking at a documentation and regulatory clearances event in Lagos, managing director, Gbenga Olabiyi, said sustained infrastructure investment is critical to maintaining competitiveness and enabling future growth.

He noted that strategic upgrades would help future-proof operations, reduce service disruptions, and allow the company to scale efficiently as business and consumer demand for cloud, fintech, and other digital services intensifies.

The bond programme is backed by private equity firm Mbavaa Partners Limited, whose managing partner, Shatse Kakwagh, described the transaction as a milestone that unlocks long-term capital for expansion.

He highlighted that strong ratings and an oversubscribed first issuance show investor confidence in Dimension Data’s execution and growth potential.

The fundraising comes as Nigeria confronts persistent infrastructure gaps, including limited metro and last-mile fibre coverage and rising enterprise connectivity needs.

Government intends to deploy 90,000 kilometres of fibre nationwide under Project Bridge aim to expand internet penetration and lower access costs.

 


Kindly share this post
Continue Reading

Telecom

MTN Nigeria Posts Record N1.70 Trillion Pre‑Tax Profit, Declares N20 Dividend for 2025

Published

on

Kindly share this post

MTN Nigeria Communications Plc has recorded a landmark turnaround in 2025, posting a pre‑tax profit of N1.70 trillion, reversing a loss of N550.3 billion in 2024 as the company emerged from a rough patch driven largely by foreign exchange volatility.

MTN Nigeria Posts Record N1.70 Trillion Pre‑Tax Profit, Declares N20 Dividend for 2025

MTN Nigeria

The telecom giant said the performance reflects a “significant turning point” in its corporate and financial trajectory, underpinned by improved macroeconomic conditions, strong service‑revenue growth, and tightening operational efficiency.

Profitability, Revenue, and Dividend

For the full year 2025, MTN Nigeria reported profit after tax of N1.11 trillion, compared with a loss after tax of N400.4 billion in 2024, while earnings per share rose to N53.07 from a negative N19.05 a year earlier.

Total revenue grew 54.9% year‑on‑year to N5.20 trillion, with service revenue up 55.1% to N5.17 trillion, driven mainly by data, voice, and fintech services.

The company’s board proposed a final cash dividend of N15 per share, bringing the total dividend for the 2025 financial year to N20 per share. Dividends will be paid electronically to shareholders on the register as of April 8, 2026, subject to completed e‑dividend mandates.

This payout is one of the largest single‑year dividends in Nigerian corporate history, signalling strong cash‑flow generation and management confidence in the company’s earnings quality.

Fourth‑Quarter Momentum and Customer Base

MTN Nigeria’s fourth‑quarter performance was particularly robust, with pre‑tax profit surging 248.8% year‑on‑year to N569.6 billion, compared with N163.3 billion in Q4 2024.

The company’s mobile subscriber base reached 87.3 million at year‑end, up 7.9% from the previous year, reinforcing its position as Nigeria’s largest telecom operator by subscribers.

Active data users grew by 11.6% to 53.2 million, and smartphone penetration rose to 66.1%, reflecting the deepening shift toward data‑driven services and digital lifestyles among Nigerians.

Data, Fintech, and Voice Growth

Data was the biggest growth driver, with data revenue up 74.5% to N2.78 trillion and data traffic increasing 34.0%, amid rising demand for mobile broadband and video streaming.

Voice revenue also climbed strongly, rising 42.1% to N1.85 trillion as tariffs and usage patterns adjusted to more stable exchange‑rate conditions.

Fintech revenue surged 79.7% to N191.3 billion, underscoring the rapid expansion of MTN Nigeria’s mobile money ecosystem and the growing role of digital financial inclusion in the country’s economy.

Cost Management and EBITDA Leap

Operating leverage improved markedly, with cost of sales rising 30.3% and operating expenses up 16.7%, both growth rates below the 55% revenue expansion.

EBITDA jumped 108.9% to N2.74 trillion, lifting the company’s EBITDA margin into the mid‑to‑high 50% range, ahead of its prior guidance.

Management attributed the improvement to a more stable foreign‑exchange market, moderated inflation, and sustained demand for data and digital services, as well as disciplined cost control.

FX Recovery and Capital Expenditure

Foreign exchange performance was a major swing factor: MTN Nigeria recorded a net FX gain of N90.3 billion in 2025, compared with a N925.4 billion FX loss in 2024.

The turnaround followed settlement of outstanding letters of credit and a deliberate reduction in dollar‑denominated exposure, which helped insulate earnings from earlier currency shocks.

Capital expenditure excluding leases rose 126.2% to N1.00 trillion, as the company invested heavily in network capacity, coverage, and digital infrastructure, including fibre rollout and 4G/LTE upgrades.

Despite the higher capex, free cash flow soared 215.5% to N1.2 trillion, indicating that the expansion is being funded internally without straining the balance sheet.

Balance Sheet and Shareholder Value

The company’s balance sheet strengthened materially, with total assets up 28.7% to N5.40 trillion and shareholders’ equity turning positive after several years in deficit.

Shareholders’ funds rose 219.8% to N548.7 billion, while retained earnings closed at N400.4 billion, compared with negative N607.5 billion in December 2024.

In the stock market, MTN Nigeria’s shares recently traded around N760, making it the most capitalised company on the Nigerian Exchange with a market valuation of about N16 trillion.

The stock has gained 33% in February 2026 alone, taking year‑to‑date returns to 49%, following a 155.5% rally in 2025, which investors see as a vote of confidence in the company’s turnaround story.

Outlook and Strategic Guidance

Management maintains a medium‑term service‑revenue growth guidance of at least low‑20% annually, underpinned by ongoing data and fintech expansion as well as gradual price adjustments.

The group has also revised its EBITDA margin guidance upward to the mid‑to‑high 50% range, signalling sustained profitability even as the company continues to invest in network and digital infrastructure.

Analysts note that MTN Nigeria’s 2025 performance not only restores investor confidence but also sets a benchmark for other Nigerian corporates navigating FX‑linked risks and regulatory uncertainty.


Kindly share this post
Continue Reading

Telecom

Alerzo Liquidates Delivery Fleet as N4.38bn Moniepoint Loan Row Deepens

Published

on

Kindly share this post

Nigerian B2B e‑commerce platform Alerzo is disposing of large parts of its delivery fleet, including buses, motorcycles, and operational vehicles, as it contends with a N4.38 billion debt owed to Moniepoint Microfinance Bank.

Alerzo Liquidates Delivery Fleet as N4.38bn Moniepoint Loan Row Deepens

Alerzo

Footage of the company’s facility in Ibadan, packed with dusty Alerzo‑branded motorcycles and buses, circulated on social media on Thursday, with a background voice inviting buyers to purchase the vehicles in bulk. The asset sale follows a Federal High Court order in Lagos that froze Alerzo’s accounts and assets after the company defaulted on a N5 billion working‑capital loan obtained in January 2025 from Moniepoint.

By December 2025, the outstanding balance on the loan reached N4.38 billion, with interest still accruing.

While Alerzo has not issued an official public statement, insiders close to the company attribute the business downturn to the harsh macroeconomic conditions in Nigeria, including rising fuel and logistics costs, inflation‑driven price pressures, and tight credit. “They tried their best. They did everything to stay afloat and keep several young Nigerians under their employment, but several economic factors were against them,” said a source close to the company.

Facing severe financial strain, Alerzo reportedly turned to Moniepoint in early 2025 for emergency funding to stabilise operations and maintain inventory supply to retailers. The facility was initially structured as an 18‑month loan, with a clause allowing Moniepoint to recall it immediately in case of default. Despite a demand letter issued on November 18, 2025, Alerzo allegedly failed to fully repay the debt, triggering the bank’s legal action.

In January 2026, the Federal High Court in Lagos granted Moniepoint Microfinance Bank Limited a Mareva injunction against Alerzo Limited and its associates, directing all financial institutions to freeze accounts and assets linked to the defendants pending the resolution of the case. The bank’s suit names Alerzo Limited, its Managing Director Adewale Opaleye Adesina, three guarantors – Opaleye Bukola Modinat, Dauda Hakeem Omotayo Taiwo, and the Singapore‑based Alerzo PTE Limited – as defendants. Court documents show that Alerzo sought the N5 billion facility through a board resolution dated January 20, 2025, to meet working capital and inventory supply needs.

Moniepoint argued that despite the demand notice, the defendants did not liquidate their obligation, leaving a N4.38 billion balance as of December 3, 2025. The bank also complained of difficulties in serving court processes on some guarantors at their known addresses, with the Singapore‑registered entity requiring substituted service via courier.

Alerzo’s Chief Executive Officer, Adewale Opaleye, has since clarified that the company is only selling scrap vehicles and not its core operational fleet. He stated that Alerzo still operates over 400 active delivery vehicles, and the sale of the idle and damaged units does not signify a full shutdown of logistics operations. According to Opaleye, the disposed assets were mainly old or non‑functional units withdrawn from service, and the exercise forms part of an internal asset‑optimisation drive unrelated to the Moniepoint loan dispute.

Founded as a B2B e‑commerce and distribution platform, Alerzo developed a network that supplied fast‑moving consumer goods directly to neighbourhood retailers, cutting out middlemen and promising lower prices, faster delivery, and improved stock efficiency for small shops. At its peak, the company raised about $20 million in venture funding and expanded across Lagos, Oyo, Ogun, and other southwestern states, employing hundreds of staff and building a large fleet of delivery vehicles.

However, the capital‑intensive logistics and low‑margin nature of the business began to weigh heavily on the balance sheet, especially as fuel, maintenance, driver salaries, and warehousing costs surged. By 2023, Alerzo had initiated layoffs to cut costs and restructure operations, reflecting the broader pressure on Nigerian startups that scaled up during the 2020–2022 venture‑capital boom but now struggle with tighter funding, higher operating costs, and slower growth.

Alerzo’s situation echoes wider challenges facing the Nigerian tech ecosystem, where several once‑promising startups have shut down or scaled back operations since 2023, underscoring the risks of high‑burn logistics models in a difficult macro environment and the need for tighter alignment between unit economics, funding runway, and real‑market conditions.


Kindly share this post
Continue Reading

Trending