Telecom
Cybercriminals Are Doubling Down on Credential Theft, Launching More Innovative Ransomware Attacks – Sophos 2023 Threat Report Reveals
Sophos, a global leader in innovating and delivering cybersecurity as a service, has on Monday published its 2023 Threat Report.
The report details how the cyberthreat landscape has reached a new level of commercialization and convenience for would-be attackers, with nearly all barriers to entry for committing cybercrime removed through the expansion of cybercrime-as-a-service.
The report also addresses how ransomware remains one of the greatest cybercrime threats to organizations with operators innovating their extortion tactics, as well as how demand for stolen credentials continues to grow.
Criminal underground marketplaces like Genesis have long made it possible to buy malware and malware deployment services (“malware-as-a-service”), as well as to sell stolen credentials and other data in bulk. Over the last decade, with the increasing popularity of ransomware, an entire “ransomware-as-a-service” economy sprung up.
Now, in 2022, this “as-a-service” model has expanded, and nearly every aspect of the cybercrime toolkit—from initial infection to ways to avoid detection—is available for purchase.
“This isn’t just the usual fare, such as malware, scamming and phishing kits for sale,” said Sean Gallagher, principal threat researcher, Sophos. “Higher rung cybercriminals are now selling tools and capabilities that once were solely in the hands of some of the most sophisticated attackers as services to other actors.
“For example, this past year, we saw advertisements for OPSEC-as-a-service where the sellers offered to help attackers hide Cobalt Strike infections, and we saw scanning-a-service, which gives buyers access to legitimate commercial tools like Metasploit, so that they can find and then exploit vulnerabilities.
“The commoditization of nearly every component of cybercrime is impacting the threat landscape and opening up opportunities for any type of attacker with any type of skill level.”
With the expansion of the “as-a-service” economy, underground cybercriminal marketplaces are also becoming increasingly commodified and are operating like mainstream businesses. Cybercrime sellers are not just advertising their services but are also listing job offers to recruit attackers with distinct skills. Some marketplaces now have dedicated help-wanted pages and recruiting staff, while job seekers are posting summaries of their skills and qualifications.
“Early ransomware operators were rather limited in how much they could do because their operations were centralized; group members were carrying out every aspect of an attack. But as ransomware became hugely profitable, they looked for ways to scale their productions. So, they began outsourcing parts of their operations, creating an entire infrastructure to support ransomware. Now, other cybercriminals have taken a cue from the success of this infrastructure and are following suit,” said Gallagher.
Indeed, as the cybercrime infrastructure has expanded, ransomware has remained highly popular—and highly profitable. Over the past year, ransomware operators have worked on expanding their potential attack service by targeting platforms other than Windows while also adopting new languages like Rust and Go to avoid detection. Some groups, most notably Lockbit 3.0, have been diversifying their operations and creating more “innovative” ways to extort victims.
“When we talk about the growing sophistication of the criminal underground, this extends to the world of ransomware. For example, Lockbit 3.0 is now offering bug bounty programs for its malware and ‘crowd-sourcing’ ideas to improve its operations from the criminal community. Other groups have moved to a ‘subscription model’ for access to their leak data and others are auctioning it off. Ransomware has become, first and foremost, a business,” said Gallagher.
The evolving economics of the underground has not only incentivized the growth of ransomware and the “as-a-service” industry, but also increased the demand for credential theft. With the expansion of web services, various types of credentials, especially cookies, can be used in numerous ways to gain a deeper foothold in networks, even bypassing MFA. Credential theft also remains one of the easiest ways for novice criminals to gain access to underground marketplaces and begin their “career.”
Sophos also analyzed the following trends:
·The war in Ukraine had global repercussions for the cyberthreat landscape. Immediately following the invasion, there was an explosion of financially motivated scams, while nationalism led to a shake-up of criminal alliances between Ukrainians and Russians, particularly among ransomware affiliates.
· Criminals continue to exploit legitimate executables and utilize “living off the land binaries” (LOLBins) to launch various types of attacks, including ransomware. In some cases, attackers deploy legitimate but vulnerable system drivers in“bring your own driver” attacks to attempt to shut down endpoint detection and response products to evade detection.
· Mobile devices are now at the center of new types of cybercrimes. Not only are attackers still using fake applications to deliver malware injectors, spyware and banking-associated malware, but newer forms of cyberfraud have been growing in popularity, such as “pig butchering” schemes. And this crime is no longer just affecting Android users, but iOS users as well.
· The devaluation of Monero, one of the most popular cryptocurrencies for cryptominers, led to a decrease in one of the oldest and most popular types of cryptocrime—cryptomining. But mining malware continues to spread through automated “bots” on both Windows and Linux systems.
To learn more about the changing threat landscape in 2022 and what it means for security teams in 2023, read the full Sophos 2023 Threat Report.
Nigerian Communications Commission (NCC) has linked Quality of Service (QoS) challenges across telecom networks to rising data consumption, stating that operators are ramping up efforts to sustain investments to improve coverage and capacity.
Dr Aminu Maida, executive vice chairman, NCC,
Dr Aminu Maida, executive vice chairman, NCC, stated this during a breakfast meeting with the media in Abuja on Friday, where he noted that while service quality is improving, it is yet to meet regulatory expectations.
He said recent data shows positive signals from independent user-based measurements, indicating that network performance is getting better rather than deteriorating.
However, he explained that increased usage is offsetting gains, creating a cycle where improved services trigger higher demand, which in turn puts fresh pressure on infrastructure.
“We’re still not where we want to be, but are we satisfied as a regulator? I would say within the context for which we operate, I think the area of satisfaction is the fact that we’re beginning to see the right signals. But at the same time, we also see a rise in consumption. So it’s like a cycle. As they’re making investments and making upgrades, people are consuming more,” he said.
Maida disclosed that data consumption has risen by about 170 per cent in the last two years, describing the surge as a major factor behind network strain.
The EVC added that operators are responding with increased investments, with site upgrades expected to rise significantly this year to expand both coverage and capacity.
He also highlighted regulatory efforts to improve industry sustainability, including ongoing policy reviews, cybersecurity framework implementation, and collaboration with security agencies to protect telecom infrastructure.
Nigeria’s drive toward a fully digital economy is gathering pace as the Federal Government intensifies work on e-governance and digital economy bill to strengthen the regulatory framework for emerging technologies and boost public sector innovation.
The Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa Abdullahi, CCIE, represented the Minister of Communications, Innovation and Digital Economy, Dr. Bosun Tijani, at the Global Partnership for Human-Centric ICT Standardisation (GIST) Nigeria Introductory Stakeholder Workshop in Abuja.
At the Global Partnership for Human-Centric ICT Standardisation (GIST) Nigeria Introductory Stakeholder Workshop in Abuja, the Director-General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa representing the Minister of Communications, Innovation and Digital Economy, Bosun Tijani said the country has moved beyond strategy design to implementation of its national Artificial Intelligence (AI) roadmap.
He noted that the current phase focuses on developing clear guidelines and regulatory frameworks to ensure AI deployment aligns with ethical standards, accountability, and strong safeguards.
As part of the broader digital transformation agenda, the government is also advancing data classification efforts to ensure the availability of clean, reliable datasets for AI training. In parallel, it is promoting cloud adoption across public institutions to enhance efficiency, scalability, and service delivery.
Inuwa stressed the importance of a “cloud-first” policy, warning that continued dependence on premise systems could slow large scale digital transformation. However, he added that cloud integration would be approached cautiously to safeguard Nigeria’s digital sovereignty and protect critical national data.
Progress is also being recorded in the e-governance space, with the development of an interoperability framework and the Nigerian Government Enterprise Architecture. Additionally, work is ongoing on a data exchange platform to support Government Statistics Digital Public Infrastructure (DPI), aimed at improving data sharing and coordination among Ministries, Departments, and Agencies (MDAs).
The initiative is expected to harmonise public sector digital projects while creating opportunities for private sector participation.
Inuwa stressed the need for stronger collaboration among government, industry, and other stakeholders to build resilient digital infrastructure. He expressed confidence that the proposed legislation and related initiatives would enhance Nigeria’s standing in digital governance while promoting innovation, transparency, and inclusive growth.
Earlier, the European Commission’s Team Leader for Digital Governance, Peter Marien DG INTPA, highlighted the role of international cooperation in shaping global digital standards. He said the European Union’s digital strategy prioritises partnerships and ecosystem alignment across regions, including Nigeria and the United Kingdom.
Marien referenced a recent engagement in Brussels on e-governance, organised with Smart Africa, which included participation from NITDA. He described Nigeria’s involvement in the GIST initiative as a strong signal of its commitment to global digital governance.
He emphasised the EU’s focus on a human-centric digital ecosystem that prioritises inclusivity, privacy, and security, noting that its 27 member states have, over two decades, built a cohesive digital framework centred on citizens.
Marien also identified Nigeria as a strategic player in Africa’s quest for a unified digital market, highlighting its role in advancing cross-border digital integration.
According to him, standards serve as the “invisible backbone” of modern societies, supporting critical systems across sectors. He said the GIST platform enables alignment of technical standards and fosters knowledge exchange between regions.
Google has revealed new insights showing that Nigerians are increasingly leveraging Search and artificial intelligence tools to develop creative skills and explore artistic pursuits in 2026.
Google AI
According to the latest trends for March, there is a growing shift toward using technology as a practical assistant for personal growth, learning and creative expression across the country.
Nigeria’s longstanding reputation as a creative powerhouse continues to shape this trend. From the global dominance of Afrobeats to the rise of Nollywood—now ranked as the fifth-largest film industry globally—the country’s cultural influence remains strong. Industry data shows Nollywood’s value is approaching $8 billion, with over 70 per cent of viewership for Nigerian-produced content coming from international audiences. Similarly, Afrobeats continues its global surge, recording more than 13 billion streams annually on platforms like Spotify.
Google’s data indicates that Nigerians are deliberately using digital tools to sharpen their creative abilities. Interest in learning painting has surged by 90 per cent over the past year, while calligraphy has emerged as a breakout trend, reflecting new forms of artistic exploration.
Music-related learning is also on the rise, with searches for guitar lessons increasing by 80 per cent. At the same time, users are exploring emerging AI-powered tools such as Lyria 3, highlighting a blend of creativity and advanced technology.
Beyond the arts, Nigerians are turning to digital tools to broaden global connections. Interest in learning Italian has jumped by 130 per cent, while searches for Japanese language learning have doubled within the past year.
This growing appetite for digital learning is supported by Nigeria’s expanding tech-driven economy. Research by Public First suggests that every dollar invested in digital technology generates more than eight dollars in economic value. The ICT sector has also emerged as a key contributor, accounting for over 16 per cent of the country’s real GDP.
Students and families are equally tapping into AI-powered tools for education. Searches for AI tutors have become a breakout trend, while interest in combining AI with subjects like chemistry has doubled over the past year. Homework-related searches have also risen by 70 per cent.
These developments are being bolstered by improved digital infrastructure, including projects such as the Equiano subsea cable, which significantly increases internet capacity and connectivity across the region.
Commenting on the trend, Taiwo Kola-Ogunlade said it is encouraging to see Nigerians using AI creatively to unlock new opportunities.
He noted that the rise in creative arts and language learning reflects a population actively shaping its future with technology, using AI tools as “24/7 tutors” to build skills and connect globally.
Google added that tools such as Search and Workspace are already delivering measurable productivity gains, with Nigerian knowledge workers saving over 22 million hours weekly—equivalent to an estimated $4.7 billion boost in productivity.
The surge in AI literacy, which has grown by 840 per cent, further underscores a broader shift as Nigerians increasingly integrate technology into their creative, academic and professional lives.
NCC Blames Growing Data Demand Network Quality Issues
EFCC Detains Ayeni, Ex-Skye Bank Chairman over Alleged N36.5Bn, $30m Fraud
Bank Customers to Pay N1,500 for ATM Card Issuance, Replacement – CBN
Summit Factory Opens in Ogun, Targets Hygiene Market Expansion
Kaspersky Discovers Vulnerability in Qualcomm Snapdragon Chips that can Lead to Data Loss & Device Compromise
NBC Boss Urges Content Ceators to Participate in DSO
NITDA Takes Over National Digital Architecture System
FG Shifting Focus to “Meaningful Connectivity” to Drive Inclusion – Minister
FG to Gift Nigerians over 100 Free TV Channels from May 15
Jury Finds Meta, Google Liable for Woman’s Social Media Addiction
E-Business3 days agoFCCPC Licenses 5 Firms for Airtime, Data Lending as Telcos Step Aside
E-Financial3 days agoCBN Warns of Cyber Hack Attempt Days after CAC Attack
E-Financial3 days agoEcobank in Talks with Bank of China for Direct Yuan Settlement
Telecom3 days agoDeadline Extended! MTN Nigeria Offers More Time for Media Innovation Programme
E-Financial2 days agoEXPLOSIVE: How Titan Trust Bank Allegedly Used Union Bank’s Own Assets to Fund Its Takeover
Telecom2 days agoMTN to Pay Subscribers After NCC Cracks Down on Service Failures
Telecom3 days agoPayments Forum Nigeria (PAFON 3.0) Holds This Friday in Lagos
E-Business3 days agoGovernment, Industrial Sectors became the Primary Targets for Cybercriminals in 2025 – Report