Telecom
Cybercriminals Are Doubling Down on Credential Theft, Launching More Innovative Ransomware Attacks – Sophos 2023 Threat Report Reveals
Sophos, a global leader in innovating and delivering cybersecurity as a service, has on Monday published its 2023 Threat Report.
The report details how the cyberthreat landscape has reached a new level of commercialization and convenience for would-be attackers, with nearly all barriers to entry for committing cybercrime removed through the expansion of cybercrime-as-a-service.
The report also addresses how ransomware remains one of the greatest cybercrime threats to organizations with operators innovating their extortion tactics, as well as how demand for stolen credentials continues to grow.
Criminal underground marketplaces like Genesis have long made it possible to buy malware and malware deployment services (“malware-as-a-service”), as well as to sell stolen credentials and other data in bulk. Over the last decade, with the increasing popularity of ransomware, an entire “ransomware-as-a-service” economy sprung up.
Now, in 2022, this “as-a-service” model has expanded, and nearly every aspect of the cybercrime toolkit—from initial infection to ways to avoid detection—is available for purchase.
“This isn’t just the usual fare, such as malware, scamming and phishing kits for sale,” said Sean Gallagher, principal threat researcher, Sophos. “Higher rung cybercriminals are now selling tools and capabilities that once were solely in the hands of some of the most sophisticated attackers as services to other actors.
“For example, this past year, we saw advertisements for OPSEC-as-a-service where the sellers offered to help attackers hide Cobalt Strike infections, and we saw scanning-a-service, which gives buyers access to legitimate commercial tools like Metasploit, so that they can find and then exploit vulnerabilities.
“The commoditization of nearly every component of cybercrime is impacting the threat landscape and opening up opportunities for any type of attacker with any type of skill level.”
With the expansion of the “as-a-service” economy, underground cybercriminal marketplaces are also becoming increasingly commodified and are operating like mainstream businesses. Cybercrime sellers are not just advertising their services but are also listing job offers to recruit attackers with distinct skills. Some marketplaces now have dedicated help-wanted pages and recruiting staff, while job seekers are posting summaries of their skills and qualifications.
“Early ransomware operators were rather limited in how much they could do because their operations were centralized; group members were carrying out every aspect of an attack. But as ransomware became hugely profitable, they looked for ways to scale their productions. So, they began outsourcing parts of their operations, creating an entire infrastructure to support ransomware. Now, other cybercriminals have taken a cue from the success of this infrastructure and are following suit,” said Gallagher.
Indeed, as the cybercrime infrastructure has expanded, ransomware has remained highly popular—and highly profitable. Over the past year, ransomware operators have worked on expanding their potential attack service by targeting platforms other than Windows while also adopting new languages like Rust and Go to avoid detection. Some groups, most notably Lockbit 3.0, have been diversifying their operations and creating more “innovative” ways to extort victims.
“When we talk about the growing sophistication of the criminal underground, this extends to the world of ransomware. For example, Lockbit 3.0 is now offering bug bounty programs for its malware and ‘crowd-sourcing’ ideas to improve its operations from the criminal community. Other groups have moved to a ‘subscription model’ for access to their leak data and others are auctioning it off. Ransomware has become, first and foremost, a business,” said Gallagher.
The evolving economics of the underground has not only incentivized the growth of ransomware and the “as-a-service” industry, but also increased the demand for credential theft. With the expansion of web services, various types of credentials, especially cookies, can be used in numerous ways to gain a deeper foothold in networks, even bypassing MFA. Credential theft also remains one of the easiest ways for novice criminals to gain access to underground marketplaces and begin their “career.”
Sophos also analyzed the following trends:
·The war in Ukraine had global repercussions for the cyberthreat landscape. Immediately following the invasion, there was an explosion of financially motivated scams, while nationalism led to a shake-up of criminal alliances between Ukrainians and Russians, particularly among ransomware affiliates.
· Criminals continue to exploit legitimate executables and utilize “living off the land binaries” (LOLBins) to launch various types of attacks, including ransomware. In some cases, attackers deploy legitimate but vulnerable system drivers in“bring your own driver” attacks to attempt to shut down endpoint detection and response products to evade detection.
· Mobile devices are now at the center of new types of cybercrimes. Not only are attackers still using fake applications to deliver malware injectors, spyware and banking-associated malware, but newer forms of cyberfraud have been growing in popularity, such as “pig butchering” schemes. And this crime is no longer just affecting Android users, but iOS users as well.
· The devaluation of Monero, one of the most popular cryptocurrencies for cryptominers, led to a decrease in one of the oldest and most popular types of cryptocrime—cryptomining. But mining malware continues to spread through automated “bots” on both Windows and Linux systems.
To learn more about the changing threat landscape in 2022 and what it means for security teams in 2023, read the full Sophos 2023 Threat Report.
Airtel Africa Plc released its full-year financial statement for the year ending March 31, 2024. The company posted a loss after tax of $89 million during the fiscal year, a significant decline from the $750 million profit after tax recorded in the previous fiscal year.
The company’s financial performance was mainly hit by the Naira’s instability over the fiscal year. As Airtel recorded FX losses of $770 million due to the devaluation of the Naira from N463/$ as of June 2023 to N1303/$ as of March 2024. The Naira devaluation also affected the company’s revenue baseline.
In reported currency, the USD, Airtel Africa posted a revenue of $4.98 billion in FY ‘23/24, representing a 5.3% decline from the $5.26 billion posted in FY ‘22/23. However, in constant currency, Airtel’s revenue grew by 20.9% over the course of the fiscal year.
However, Airtel Nigeria posted a revenue of $1.50 billion during the fiscal year, representing a 29.4% decline from the $2.13 billion revenue posted in FY ‘22/23. More so, in Naira terms, the group’s revenue appreciated by 25.8%.
Airtel Nigeria posted $711 million and $654 million in voice and data revenue respectively. Airtel customer base in Nigeria also increased to 50.9 million, representing a 5.3% growth from the 48.9 million customers posted in the previous fiscal year.
During the year, the group’s voice revenue constituted the bulk of its total revenue with $2.18 billion. Data revenue constituted $1.73 billion of its revenue.
In constant currency terms, Airtel Africa’s mobile services revenue experienced a significant increase of 19.4%. This growth was primarily driven by an 11.9% increase in voice revenue and a 29.2% growth in data revenues, as the group’s 4G customers increased by 42.3% during the fiscal year.
Airtel’s mobile money, SmartcashPSB recorded a 20.7% growth in customers as well as a 21.1% growth in revenue, hitting 38 million customers and $837 million.
Despite inflationary headwinds and currency devaluation across the group’s operational markets, Airtel Africa displayed resilience in its financial performance as it generated a net cash of $2.26 billion from its operations during the fiscal year.
Also, in terms of constant currency, Airtel maintained a double-digit growth across its revenue, pre-tax profit, EBITDA, and operating profit profiles.
Commenting on the results, Olusegun Ogunsanya, the group’s CEO, said: “This strong revenue performance is a reflection not only of the opportunity that is inherent across our markets, but also the resilience of our affordable offerings despite the inflationary pressure many of our customers have experienced.
“Furthermore, our rigorous approach to de-risking our balance sheet and our capital allocation priorities has materially reduced the risks that the currency devaluation has had on our business. Key initiatives include the reduction of US dollar debt across the business and the accumulation of cash at the [holding company] level to fully cover the outstanding debt due. We will continue to focus on reducing our exposure to currency volatility. At the beginning of March, we launched our first buyback programme reflecting the strength of our financial position.”
Airtel declared a 3.57 cents final dividend, a rise of 9.2% on-year from 3.27 cents. Its total dividend amounted to 5.95 cents, also up 9.2%, from 5.45 cents.
The CEO added: “The growth opportunity that exists across our markets remains compelling, and we are well positioned to deliver against this opportunity. We will continue to focus on margin improvement from the recent level as we progress through the year.”
Google has announced the opening of applications for the 2024 cohort of its Hustle Academy, a program dedicated to accelerating the growth of small and medium-sized businesses (SMBs) in Sub-Saharan Africa. This year, the program introduces a significant upgrade: business-focused AI training integrated directly into the curriculum.
SMBs are the backbone of Africa’s economy, yet many face challenges accessing funding and developing the essential skills needed to grow their businesses. According to the International Finance Corporation (IFC), 40% of formal SMBs in developing countries have an unmet funding need of $5.2 trillion annually.
The Hustle Academy aims to address this gap by providing comprehensive business education, mentorship, and networking opportunities. Since its launch in 2022, over 10,000 businesses have benefited from the program. Participants who received grants nearly doubled their success rate in accessing new funding sources beyond friends and family, increasing from 11% to 20%. The program has also spurred job creation, with an average of 4 new jobs for every 10 businesses that graduated.
Kristy Grant, Head of B2B Marketing, SSA commented, “Artificial intelligence (AI) holds immense potential for African small and medium-sized businesses (SMBs), enabling them to drive innovation, increase efficiency, and unlock new levels of economic growth. The Hustle Academy has supported over 10,000 businesses who have gone ahead to raise funding and create jobs since inception. By incorporating AI into our curriculum, we aim to further amplify this impact, equipping SMBs to harness AI technologies for improved business performance and economic progress.”
The new AI modules focus on data-driven decisions, optimising operations, and building AI-powered marketing strategies. Participants will explore practical applications through modules like “Boost Your Productivity with AI” and “Marketing Strategy and AI,” learning how to save time and supercharge digital outreach.
Applications for the 2024 Hustle Academy cohort are open to SMBs in Kenya, Nigeria, and South Africa, and the program will run through the end of the year. For more information and to apply, visit g.co/hustleacademy.
Most Reverend Lucius Ugorji, president of the Catholic Bishops’ Conference of Nigeria (CBCN), the Archbishop of Owerri has raised caution on the deployment of Artificial Intelligence.
Catholic Bishops’ Conference of Nigeria
Ugorji called for a balance that prioritises human welfare alongside technological progress, mindful of ethics and morals, as well as risks such as job displacement, threat to world peace, spread of falsehood through propaganda, manipulation of the human person, and privacy concerns through advanced hacking and deepfakes.
The clergyman raised the concern during the ComWeek Public Lecture in Abuja on Artificial Intelligence, noting that the exclusive use of technology in religious formation, pastoral care, and education has enhanced theological knowledge, accessibility and mission of the universal church.
Keynote Speaker at the event, Father Anthony Akinwale, deputy vice chancellor of Augustine University Lagos, dismissed the speculations that the intellectual roles of humans will be replaced by Artificial Intelligence, explaining that AI relied on humans to function and did not have a mind of its own to choose to or not to obey commands with which it was programmed.
Akinwale further cautioned that AI should be solely used for the common good of mankind and not for destructive purposes.
Most Reverend David Ajang, chairman on Social communication of the Catholic Bishops Conference, called for a reflection on the power of communication as a divine gift, “one that holds the potential to bridge divides, enlighten minds and unite hearts in the pursuit of truth and common good”.
Kaspersky Reports Show Every Third Cyber Incident was Due to Ransomware
Airtel Africa Records Loss as Revenue Falls on Naira Devaluation
Brands Jostle for CVA 2024 as Consumers Vote
FBNQuest Merchant Bank Reports Strong Financial Performance and Strategic Growth Initiatives in 2023
PalmPay Bolsters Lagos Agriculture Initiative with Effortless Payment Solutions
CBN Sacks another 50 Staff, 117 Disengaged in 20 Days
AfDB, AGF Partner on Female Entrepreneurs’ Access to Finance
IMF says Rising Cyber Threats Pose Serious Concerns for Financial Stability
Sun International Finalizes $14.4M Exit from Nigeria, Sells Interests to RFC
Financial Firms Lost $2.5Bn To Cyberattacks in 4 Years – IMF
News2 days agoBinance Alleges Request of $150m Bribe by Some Nigerian Officials
News2 days agoWhat We Can Learn from Africa’s Small Business Success Stories
News2 days agoShell Nigeria Paid $1.09Bn in Taxes, Royalties in 2023
Telecom2 days agoSIM Boxing, And the Unboxing of Crime Syndicate
E-Business2 days agoGlobal Mobile Banking Malware Grows 32% in 2023
Telecom2 days agoSHELT SI Achieves Cisco Select Partner Certification
E-Financial2 days agoAMMBAN Decries CBN Directive on CAC Registration of PoS Operators
E-Financial2 days agoNigerians Pay Five Levies for Electronic Transactions