Telecom
Cybercriminals Are Doubling Down on Credential Theft, Launching More Innovative Ransomware Attacks – Sophos 2023 Threat Report Reveals
Sophos, a global leader in innovating and delivering cybersecurity as a service, has on Monday published its 2023 Threat Report.
The report details how the cyberthreat landscape has reached a new level of commercialization and convenience for would-be attackers, with nearly all barriers to entry for committing cybercrime removed through the expansion of cybercrime-as-a-service.
The report also addresses how ransomware remains one of the greatest cybercrime threats to organizations with operators innovating their extortion tactics, as well as how demand for stolen credentials continues to grow.
Criminal underground marketplaces like Genesis have long made it possible to buy malware and malware deployment services (“malware-as-a-service”), as well as to sell stolen credentials and other data in bulk. Over the last decade, with the increasing popularity of ransomware, an entire “ransomware-as-a-service” economy sprung up.
Now, in 2022, this “as-a-service” model has expanded, and nearly every aspect of the cybercrime toolkit—from initial infection to ways to avoid detection—is available for purchase.
“This isn’t just the usual fare, such as malware, scamming and phishing kits for sale,” said Sean Gallagher, principal threat researcher, Sophos. “Higher rung cybercriminals are now selling tools and capabilities that once were solely in the hands of some of the most sophisticated attackers as services to other actors.
“For example, this past year, we saw advertisements for OPSEC-as-a-service where the sellers offered to help attackers hide Cobalt Strike infections, and we saw scanning-a-service, which gives buyers access to legitimate commercial tools like Metasploit, so that they can find and then exploit vulnerabilities.
“The commoditization of nearly every component of cybercrime is impacting the threat landscape and opening up opportunities for any type of attacker with any type of skill level.”
With the expansion of the “as-a-service” economy, underground cybercriminal marketplaces are also becoming increasingly commodified and are operating like mainstream businesses. Cybercrime sellers are not just advertising their services but are also listing job offers to recruit attackers with distinct skills. Some marketplaces now have dedicated help-wanted pages and recruiting staff, while job seekers are posting summaries of their skills and qualifications.
“Early ransomware operators were rather limited in how much they could do because their operations were centralized; group members were carrying out every aspect of an attack. But as ransomware became hugely profitable, they looked for ways to scale their productions. So, they began outsourcing parts of their operations, creating an entire infrastructure to support ransomware. Now, other cybercriminals have taken a cue from the success of this infrastructure and are following suit,” said Gallagher.
Indeed, as the cybercrime infrastructure has expanded, ransomware has remained highly popular—and highly profitable. Over the past year, ransomware operators have worked on expanding their potential attack service by targeting platforms other than Windows while also adopting new languages like Rust and Go to avoid detection. Some groups, most notably Lockbit 3.0, have been diversifying their operations and creating more “innovative” ways to extort victims.
“When we talk about the growing sophistication of the criminal underground, this extends to the world of ransomware. For example, Lockbit 3.0 is now offering bug bounty programs for its malware and ‘crowd-sourcing’ ideas to improve its operations from the criminal community. Other groups have moved to a ‘subscription model’ for access to their leak data and others are auctioning it off. Ransomware has become, first and foremost, a business,” said Gallagher.
The evolving economics of the underground has not only incentivized the growth of ransomware and the “as-a-service” industry, but also increased the demand for credential theft. With the expansion of web services, various types of credentials, especially cookies, can be used in numerous ways to gain a deeper foothold in networks, even bypassing MFA. Credential theft also remains one of the easiest ways for novice criminals to gain access to underground marketplaces and begin their “career.”
Sophos also analyzed the following trends:
·The war in Ukraine had global repercussions for the cyberthreat landscape. Immediately following the invasion, there was an explosion of financially motivated scams, while nationalism led to a shake-up of criminal alliances between Ukrainians and Russians, particularly among ransomware affiliates.
· Criminals continue to exploit legitimate executables and utilize “living off the land binaries” (LOLBins) to launch various types of attacks, including ransomware. In some cases, attackers deploy legitimate but vulnerable system drivers in“bring your own driver” attacks to attempt to shut down endpoint detection and response products to evade detection.
· Mobile devices are now at the center of new types of cybercrimes. Not only are attackers still using fake applications to deliver malware injectors, spyware and banking-associated malware, but newer forms of cyberfraud have been growing in popularity, such as “pig butchering” schemes. And this crime is no longer just affecting Android users, but iOS users as well.
· The devaluation of Monero, one of the most popular cryptocurrencies for cryptominers, led to a decrease in one of the oldest and most popular types of cryptocrime—cryptomining. But mining malware continues to spread through automated “bots” on both Windows and Linux systems.
To learn more about the changing threat landscape in 2022 and what it means for security teams in 2023, read the full Sophos 2023 Threat Report.
Irvine Partners, the woman-led, African-born creative communications agency operating across Nigeria, has cemented its position as a disruptive force on the global stage following a landmark week of international industry recognition for its CEO and founder, Rachel Irvine.
Rachel-Irvine-CEO-Irvine-Partners
Irvine has been named to Campaign UK’s prestigious 40 over 40 list for 2026, while simultaneously earning a place on PRovoke Media’s Innovator 25 EMEA index – two of the communications industry’s most closely watched honours, secured in the same week. The achievement places her among the most influential and progressive communications leaders across Europe, the Middle East, and Africa.
For Nigeria – Africa’s largest economy and one of its most competitive and complex communications environments – the recognition speaks directly to something the local industry has long understood: that the strategic thinking, cultural intelligence and executional precision forged in African markets is not a regional advantage. It is a global one.
Irvine Partners brings this philosophy to some of the world’s most prominent digital and consumer brands in the Nigerian market, including TikTok, Spotify, Uber and Google – organisations that demand communications work of the highest international calibre, delivered with genuine local understanding.
An African agency rewriting the global narrative
Campaign UK’s 40 over 40 celebrates individual excellence, leadership and lasting impact within the British media and marketing landscape. PRovoke Media’s Innovator 25 spotlights those who are dismantling traditional PR structures, advancing data-led practice, and reshaping how the industry operates. To earn both in a single week is rare by any measure.
What underpins both honours is a story that begins not in London but in Africa – in the dynamic, high-stakes communications environments of markets like Nigeria, where agencies must be sharper, faster and more culturally precise than anywhere else in the world.
“These accolades are less about my own journey and far more about where Irvine Partners is going as a collective,” says Rachel Irvine. “For a long time, the global communications industry treated African agencies as local executors of global strategies. What we’ve proven over the past few years is that the technical craft, cultural capital, and data frameworks built within our agency are not just scalable for the continent; they are world-class.”
Built on the same ethos that works in Lagos
The recognition follows the agency’s strong performance at the IN2 SABRE Awards EMEA, where Irvine Partners took major wins for Unicorn School – its proprietary internal talent development programme – and for its advanced data analytics capability, alongside notable shortlists for global clients including Spotify and Uber.
Nigeria’s communications market is one of the most demanding in the world. Consumer audiences are sophisticated and discerning. The media environment is layered, fast-moving and deeply attuned to authenticity. Brands that succeed here do not do so through generic messaging – they do so through precision, cultural credibility and strategic consistency. These are precisely the competencies that Irvine Partners has built its international reputation on.
“The PR landscape has fundamentally shifted,” Irvine adds. “Clients no longer want siloed regional strategies; they want intelligent, culturally intuitive storytelling backed by bulletproof analytics that move the business needle. We built our foundations on that exact ethos in highly dynamic markets, and bringing that specific DNA to the UK and EMEA regions is why we are winning.”
The agency’s agile, borderless model – deliberately structured to move at the speed of modern brands rather than the pace of legacy networks- is one that Nigerian communications professionals will recognise as a natural evolution of how the best African agencies have always operated: lean, sharp and built for impact.
Underlying both honours is Irvine’s sustained commitment to talent development and cultural diversity across all of the agency’s wholly owned offices – a principle as central to its Lagos work as to any other market in its growing global footprint.
Mark Zuckerberg, Meta Chief Executive Officer, has announced a major leadership change at WhatsApp, confirming that Will Cathcart will step down as head of the messaging service after seven years in office.
Zuckerberg made the announcement in a post shared on Facebook on Monday, June 22, 2026, praising Cathcart’s contributions to the growth of the platform.
According to him, Cathcart played a key role in expanding WhatsApp’s global user base to over three billion people while promoting privacy-focused communication across its services.
“Will’s been one of Meta’s most important and effective leaders, helping to bring WhatsApp to over 3 billion people and championing privacy for our community,” Zuckerberg stated.
The Meta CEO also announced that Kunal Shal will take over leadership of WhatsApp.
He described Shal as a “builder” with strong international experience, adding that his leadership style aligns with Meta’s long-term vision for the messaging platform.
Meta said the transition is aimed at strengthening WhatsApp’s role in both personal and business communication globally, as the platform continues to expand its services across markets.
Industry observers say the leadership change marks a significant transition for WhatsApp, which has grown rapidly under Cathcart’s stewardship, particularly in areas of privacy, encryption, and enterprise messaging solutions.
However, Meta has not disclosed the exact timeline for the leadership handover or further structural changes within the messaging division.
The company reaffirmed its commitment to maintaining WhatsApp’s security standards and continued innovation under the new leadership.
MTN Nigeria has raised the bar for corporate disclosure in Africa after publishing its 2025 sustainability report in full compliance with International Financial Reporting Standards S1 and S2.
Dr. Karl Toriola, CEO of MTN Nigeria,
The report, independently assured by Ernst & Young, marks the telecom operator’s seventh consecutive annual sustainability publication and third year as an early adopter of the global framework ahead of its mandatory implementation.
Dr. Karl Toriola, CEO of MTN Nigeria, said, “strong governance and ethical conduct are foundational to our sustainability strategy. We reinforced compliance through our Conduct Passport Framework and robust internal controls.”
He added that “in May 2025, we became the first telecommunications company in Nigeria to publicly present a sustainability report on the Nigerian Exchange Group platform, an important milestone in our commitment to IFRS S1 and S2- aligned disclosure and accountability.”
The company also secured Carbon Disclosure Project ratings of ‘B-’ for climate change and ‘C’ for water security.
Under the IFRS S2 framework, the telecoms operator disclosed climate-related risks linked to flooding, heat stress, regulatory changes and possible future taxes or charges on carbon emissions, following a climate scenario analysis completed in 2024.
The report also showed that MTN Nigeria now uses a digital reporting format – XBRL. This makes its sustainability and governance data easier for investors and ESG rating agencies to access and analyse through automated systems.
The Company also carried out assessments to understand how sustainability issues affect both its business operations and society at large, while measuring its overall economic, environmental and social impact from 2021 to 2024.
In addition, over one-third of MTN Nigeria’s biggest suppliers (based on spending) have committed to supporting the company’s net-zero emissions goals, although these commitments have not yet gone through an independent audit or verification process.
CredibleVoteNG Opens Free Access to all Polling Units in Nigeria after INEC Demanded N1.Bn for Register
NESREA Defends Plastic Waste Rules, Says Policy Targets Pollution
FG Engages Banks on RevOp, New Digital Platform for Revenue Generation
Kaspersky Discovered a Malware Campaign Targeting Steam Users Through Infected Wallpaper
Fiona Ahimie Launches LEADHER Mentorship Session to Inspire the Next Generation of Female Leaders
CBN Extends PoS Geo-Fencing Enforcement Deadline to August 2026
London Strengthens Global Investment Ties with Africa @ First Ever London-Africa Business Summit
FG Targets Alleged N3tn Capital Flight, Opens Airtime Credit Market to Nigerian Fintechs
Japan, UNESCO Boost Digital Learning in 15 CoEs with Donation of ICT Equipment
Mobile Internet Gender Gap Widest in Africa – GSMA
Telecom2 days agoMTN Nigeria Commits to Ethical Conduct with IFRS S1, S2 Compliance
E-Financial2 days agoFG Moves to End Double Taxation
News2 days agoBoI’s EIB-Backed Financing Accelerates Fidson’s Pharmaceutical Manufacturing Growth
General News2 days agoALTON Backs CBN on Local Data Hosting Rule for Banks, Fintechs
E-Business2 days agoNDPC to Review Data Law to Address AI, Privacy Concerns
Telecom2 days agoNCC, CAC Move to Block Unapproved Ownership Changes in Telecom Sector
E-Business2 days agoGalaxy Backbone @ 20, Unveils New Identity
General News2 days agoNwanegbo Bags Africa Digital Award in Applied Artificial Intelligence and Data Science