Telecom
Cybercriminals Are Doubling Down on Credential Theft, Launching More Innovative Ransomware Attacks – Sophos 2023 Threat Report Reveals
Sophos, a global leader in innovating and delivering cybersecurity as a service, has on Monday published its 2023 Threat Report.
The report details how the cyberthreat landscape has reached a new level of commercialization and convenience for would-be attackers, with nearly all barriers to entry for committing cybercrime removed through the expansion of cybercrime-as-a-service.
The report also addresses how ransomware remains one of the greatest cybercrime threats to organizations with operators innovating their extortion tactics, as well as how demand for stolen credentials continues to grow.
Criminal underground marketplaces like Genesis have long made it possible to buy malware and malware deployment services (“malware-as-a-service”), as well as to sell stolen credentials and other data in bulk. Over the last decade, with the increasing popularity of ransomware, an entire “ransomware-as-a-service” economy sprung up.
Now, in 2022, this “as-a-service” model has expanded, and nearly every aspect of the cybercrime toolkit—from initial infection to ways to avoid detection—is available for purchase.
“This isn’t just the usual fare, such as malware, scamming and phishing kits for sale,” said Sean Gallagher, principal threat researcher, Sophos. “Higher rung cybercriminals are now selling tools and capabilities that once were solely in the hands of some of the most sophisticated attackers as services to other actors.
“For example, this past year, we saw advertisements for OPSEC-as-a-service where the sellers offered to help attackers hide Cobalt Strike infections, and we saw scanning-a-service, which gives buyers access to legitimate commercial tools like Metasploit, so that they can find and then exploit vulnerabilities.
“The commoditization of nearly every component of cybercrime is impacting the threat landscape and opening up opportunities for any type of attacker with any type of skill level.”
With the expansion of the “as-a-service” economy, underground cybercriminal marketplaces are also becoming increasingly commodified and are operating like mainstream businesses. Cybercrime sellers are not just advertising their services but are also listing job offers to recruit attackers with distinct skills. Some marketplaces now have dedicated help-wanted pages and recruiting staff, while job seekers are posting summaries of their skills and qualifications.
“Early ransomware operators were rather limited in how much they could do because their operations were centralized; group members were carrying out every aspect of an attack. But as ransomware became hugely profitable, they looked for ways to scale their productions. So, they began outsourcing parts of their operations, creating an entire infrastructure to support ransomware. Now, other cybercriminals have taken a cue from the success of this infrastructure and are following suit,” said Gallagher.
Indeed, as the cybercrime infrastructure has expanded, ransomware has remained highly popular—and highly profitable. Over the past year, ransomware operators have worked on expanding their potential attack service by targeting platforms other than Windows while also adopting new languages like Rust and Go to avoid detection. Some groups, most notably Lockbit 3.0, have been diversifying their operations and creating more “innovative” ways to extort victims.
“When we talk about the growing sophistication of the criminal underground, this extends to the world of ransomware. For example, Lockbit 3.0 is now offering bug bounty programs for its malware and ‘crowd-sourcing’ ideas to improve its operations from the criminal community. Other groups have moved to a ‘subscription model’ for access to their leak data and others are auctioning it off. Ransomware has become, first and foremost, a business,” said Gallagher.
The evolving economics of the underground has not only incentivized the growth of ransomware and the “as-a-service” industry, but also increased the demand for credential theft. With the expansion of web services, various types of credentials, especially cookies, can be used in numerous ways to gain a deeper foothold in networks, even bypassing MFA. Credential theft also remains one of the easiest ways for novice criminals to gain access to underground marketplaces and begin their “career.”
Sophos also analyzed the following trends:
·The war in Ukraine had global repercussions for the cyberthreat landscape. Immediately following the invasion, there was an explosion of financially motivated scams, while nationalism led to a shake-up of criminal alliances between Ukrainians and Russians, particularly among ransomware affiliates.
· Criminals continue to exploit legitimate executables and utilize “living off the land binaries” (LOLBins) to launch various types of attacks, including ransomware. In some cases, attackers deploy legitimate but vulnerable system drivers in“bring your own driver” attacks to attempt to shut down endpoint detection and response products to evade detection.
· Mobile devices are now at the center of new types of cybercrimes. Not only are attackers still using fake applications to deliver malware injectors, spyware and banking-associated malware, but newer forms of cyberfraud have been growing in popularity, such as “pig butchering” schemes. And this crime is no longer just affecting Android users, but iOS users as well.
· The devaluation of Monero, one of the most popular cryptocurrencies for cryptominers, led to a decrease in one of the oldest and most popular types of cryptocrime—cryptomining. But mining malware continues to spread through automated “bots” on both Windows and Linux systems.
To learn more about the changing threat landscape in 2022 and what it means for security teams in 2023, read the full Sophos 2023 Threat Report.
Nigerian Communications Commission (NCC) has said that Nigeria’s internet usage reached a record 1.24 million terabytes in November 2025.
According to the latest data from the NCC, the figure rose modestly from 1.235 million terabytes in October, reflecting steady growth in digital activity across the country.
Broadband penetration in Nigeria crossed the halfway mark in November 2025, reaching 50.58 per cent, up from 45.61 per cent in January, the telecoms regulator reported.
The figure, however, falls short of the 70 per cent coverage target outlined in the National Broadband Plan 2020–2025, which expires this month.
The country had roughly 109 million broadband subscriptions by November. Growth has been uneven, hindered by infrastructure and regulatory constraints, including frequent fibre-optic vandalism that triggers 30 to 43 network cuts daily, high right-of-way fees, and declining subscriber numbers earlier in the year.
Expansion of mobile networks, particularly 3G and 4G services, alongside limited 5G rollouts in urban centres, affordable smartphones, and competitive data plans, has driven uptake.
Investments in the National Communications Backbone and private-sector initiatives have also improved access, especially in underserved areas.
While Nigeria is gradually improving digital inclusion, achieving the original broadband plan remains challenging due to high infrastructure costs, coverage limitations, and deployment hurdles.
The NCC maintains that continued investment in mobile networks and broadband infrastructure will sustain gradual growth in the sector.
Commenting on the development, some Nigerian analysts attributed the surge to the broader mobile and broadband adoption and the growing appetite for streaming, online learning and other digital services.
According to the analysts, the figures suggest that internet connectivity is no longer a luxury but a necessity for both business and leisure, underscoring the slow but steady expansion of Nigeria’s digital economy.
Bureau of Public Service Reforms (BPSR) has named the Nigerian Communications Commission (NCC) among the top three Ministries, Departments and Agencies (MDAs) of the Federal Government with the Best Ranking in Website Performance for 2025.
L-R: Head Special Projects, Nigerian Export Promotion Council (NEPC), Salamatu Andu; Executive Commissioner, Technical Services, Nigerian Communication Commission (NCC), Engr. Abaraham Oshadame; Director General Bureau of Public Service Reforms (BPSR), Head Customer Support Service, Galaxy Backbone, Rosemary Ehize; Secretary to the ES. Nigerian Content Development and Monitoring Board, Tahir Aminu at the BPSR award ceremony for top four MDAs in BPSR Website Performance and Ranking 2025 at the BPSR office on Tuesday, 23rd December, 2025.
This is coming barely three weeks after the telecom regulator was recognized as one of the top five best-performing Federal Government agencies for 2025 by the Presidential Enabling Business Environment Council (PEBEC) – a testament to the Commission’s consistency in investment in technology for ensuring efficient service delivery.
In the BPSR 2024/2025 scorecard ranking of agencies’ websites, the NCC came second in the ranking, trailing behind Galaxy Backbone Limited, which came first while the Nigeria Export Promotion Council (NEPC) clinched the third position, from a pool of 235 MDAs, whose website were evaluated.
BPSR deployed 14 evaluation criteria in include MDA’s website compliance with .gov.ng domain name, appearance and aesthetics (look and feel) of the website, content, relevance to MDAs mandate/government policy and the website’ structure.
Others include website’s responsiveness (device compatibility), security, load time, usability/ease of navigation, availability/uptime, functionality, interactivity, accessibility and capacity building.
The recognition was announced at the official release of Federal Government 2024/2025 Scorecard Ranking for MDAs’ Website held at the Federal Ministry of Finance Auditorium in Abuja on Monday (December 22, 2025) while the award presentation took place at BPSR’s Office on Tuesday (December 23, 2025).
The award, which is an important index metric of the National e-Government Masterplan for determining the Nigeria e-Government Status, was received by the Commission in recognition of its commitment to maintaining a world-class website that enhances service delivery to the citizens.
Receiving the award on behalf of the Executive Vice Chairman of the NCC, Dr. Aminu Maida, the NCC’s Executive Commissioner, Technical Services, Abraham Oshadami, appreciated the BPSR for the recognition, describing the award as “another encouragement for the Commission to be a better public service institution leveraging digital platforms such as our web presence to enhance public service delivery to our various stakeholders, thereby implementing the Federal Government’s Ease of Doing Business policy direction.”
While presenting the award to the NCC, alongside other two agencies, BPSR’s Director-General, Mr. Dasuki Arabi, commended the top three for their proactive decisions in maintaining world-class websites, which are compliant with the Federal Government’s policy direction in effective and efficient service delivery to the citizens.
According to the DG, the 2024/2025 MDA’s websites’ ranking represents a collective effort of federal public institutions in Nigeria to be transparent, accountable and open in governance, as well as a confirmation to align with global best practices in service delivery to the citizens.
Developed about six years ago, Arabi said as a result of the annual ranking, more public institutions have indicated readiness to embrace reforms, and align with the policy direction of the current administration’s Renewed Hope agenda on improve governance for effective service delivery, as introduced by His Excellency President Bola Ahmed Tinubu.
“The ideals of harnessing and deploying technological tools for service delivery has become imperative following the COVID pandemic, and distortions of socio-economic system of nations, culminating in the evolution of competitiveness, cost effectiveness, and agile governance.
“As engine room of governance, it behoves on us in the public service to perform our statutory duties and we must put in place technological innovations and standardized websites to operate services as well as deliver service needs to citizens,” he said.
The Scorecard exercise, he said, is part of the BPSR reform broader function of conducting research on reform implementation efforts and presenting ‘best practice’ models to the entire Public Service, and to among others, improve access to government information, facilitate seamless financial transaction, eliminate corruption and cyber theft, as well as facilitate access to government services.
Speaking on the rigorous nature of the exercise that produced the top three winners, the DG said “in the past few weeks members of the Scorecard Jury drawn from inter-Ministerial Agencies, had worked tirelessly to mill websites of selected MDAs through a rigorous process of enduring criteria for the ranking and the outcome had also passed through a quality assurance mechanism to validate the outcome.”
Taiwo Oyedele, Chairman of the Presidential Committee on Fiscal Policy and Tax Reforms, has dismissed reports that bank accounts not linked to a Tax Identification Number (TIN) will be frozen or automatically debited from January 1, 2026.
Taiwo Oyedele
Oyedele described the claims as false and misleading, warning Nigerians against panic over misinformation surrounding recent tax and financial reforms.
In a post on his X handle Tuesday morning, he wrote: “Don’t let anyone manipulate you. Your bank account is safe. Misinformation makes you panic and fear a reform that is designed to help you.
“When they tell you that your account will be frozen or automatically debited from January 2026, ask them for the evidence in the new law. Be wise.”
He stressed that no provision in the new tax laws authorises the freezing of bank accounts, adding that the rumours are part of widespread misrepresentation of the reforms.
The committee chairman reiterated that the reforms are intended to simplify Nigeria’s tax system and ease the burden on ordinary citizens, not to impose punitive measures on bank customers.
How Moniepoint’s Founders, Tosin Eniolorunda and Felix Ike are Redefining African Tech and Finance
Ecobank Guarantees Seamless Digital Banking Services Throughout the Christmas and Year-End Period
Banks quietly move to enforce new ₦50 transfer levy from Jan. 1
Nigeria’s Internet Usage Hits 1.24m Terabytes – NCC
World Bank Reveals Obstacles to Growth of Mobile Money Accounts in Sub-Saharan Africa
Nigeria Records Highest Weekly Cyberattacks in Africa — Report
Cyber Tsunami Hits Nigeria as Breaches Surge 1,047%, esentry Q3 Report Reveals
Minister Claims Bandits Exploit Poor Network, Bounce Calls Off Multiple Towers
Financial Sector Faced AI, Blockchain and Organised Crime Threats in 2025 – Report
GenAI Adoption Among African workers Outpace Global Peers
E-Financial2 days agoBanks quietly move to enforce new ₦50 transfer levy from Jan. 1
Telecom3 days agoNigeria’s Internet Usage Hits 1.24m Terabytes – NCC
General News2 days agoEcobank Guarantees Seamless Digital Banking Services Throughout the Christmas and Year-End Period
News1 day agoHow Moniepoint’s Founders, Tosin Eniolorunda and Felix Ike are Redefining African Tech and Finance