Connect with us

E-Business

Firm Shares Insights into Ransomware Trends and Tactics @ International Anti-Ransomware Day-2026

Published

on

Kindly share this post

On International Anti-Ransomware Day, May 12, Kaspersky shares a report with an overview of ransomware trends that marked 2025 and insights into what the threat landscape holds in 2026.

According to Kaspersky Security Network, in 2025 Latin America had the highest share of organisations with ransomware attacks detected (8.13%), followed by the Asia-Pacific region (7.89%), Africa (7.62%), Middle East (7.27%), the Commonwealth of Independent States (CIS, 5.91%) and Europe (3.82%).

The report highlights the rise of “encryption-less” extortion attacks, the use of post-quantum cryptography by ransomware groups, and the persistent use of Telegram channels by cybercriminals to distribute compromised data sets and credentials.

Despite a slight decline in the overall share of organisations attacked by ransomware in 2025 compared to 2024, users remain at significant risk as attackers industrialise their operations, automate intrusion methods, and increasingly focus on stealing and leaking sensitive data rather than simply encrypting systems.

One of the trends in 2025 is the continued rise of endpoint detection and response (EDR) “killers” – tools specifically designed to disable endpoint security solutions before executing the malware itself. EDR killers have become a standard component of attacks, which means more deliberate and methodical intrusions.

Researchers also noted the emergence of ransomware families adopting post-quantum cryptography standards – this was predicted by Kaspersky previously. The development signals a concerning shift toward encryption methods that could resist future quantum computing decryption attempts.

The role of Initial Access Brokers (IABs) – cybercriminal intermediaries that sell pre-compromised corporate access through underground forums and messaging platforms – is growing. RDWeb portals (websites through which devices can be controlled remotely) are increasingly targeted as ransomware groups continue to industrialise attacks through “Access-as-a-Service” operations. As a result, the barrier to launching ransomware attacks declines.

Telegram channels and dark web forums continuously function as platforms for the distribution and for the sale of compromised data sets and accesses including those that were obtained as a result of ransomware attacks.

A major underground forum, RAMP, which also functioned as a platform through which threat actors advertised their ransomware services and published service‑related updates, got seized by authorities in January 2026.

Another underground forum, LeakBase, where malicious actors distributed exfiltrated and compromised data, was seized in March 2026. However, while law enforcement agencies are actively shutting down dark web platforms and ransomware data leak sites, similar portals may appear over time.

Active groups

Among the most active ransomware groups in 2025 based on data leak sites, Kaspersky identified Qilin as the dominant ransomware-as-a-service (RaaS) operator following RansomHub’s seizure of operations. Clop ranked as the second most active group, with Akira in the third place.

While several major ransomware groups stopped operation in 2025, new actors emerge. Looking at 2026, the Gentlemen is one of the most important new ransomware actors due to the group’s rapid growth, structured operations, and increasing focus on data-centric extortion. The group may include attackers formerly associated with other major ransomware operations.

The Gentlemen exemplify a broader shift in the ransomware ecosystem away from chaotic, high-noise campaigns toward scalable, business-like extortion models focused primarily on stealing sensitive data and leveraging reputational and regulatory pressure rather than relying solely on disruptive file encryption.

“Ransomware has evolved into a highly organised ecosystem focused on monetising stolen data, disabling defences, and scaling attacks with business-like efficiency. Threat actors are quickly adapting, weaponising legitimate tools, exploiting remote access infrastructure, and even adopting post-quantum cryptography years earlier than many expected.

“The purpose of Anti-Ransomware Day is to raise global awareness about the threats posed by ransomware and to promote best practices for prevention and response, and we urge all users to stay secure, set up layered defences, invest in backups and boost cyberliteracy levels to counter attacks,” comments Fabio Assolini, Lead Security Researcher at Kaspersky GReAT.

On Anti-Ransomware Day and beyond, Kaspersky encourages organisations to follow these best practices to safeguard from ransomware:

  • Enable ransomware protection for all endpoints. There is a free Kaspersky Anti-Ransomware Tool for Business that shields computers and servers from ransomware and other types of malware, prevents exploits and is compatible with already installed security solutions.
  • Always keep software updated on all the devices you use to prevent attackers from exploiting vulnerabilities and infiltrating your network.
  • Focus your defence strategy on detecting lateral movements and data exfiltration to the Internet. Pay special attention to outgoing traffic to detect cybercriminals’ connections to your network. Set up offline backups that intruders cannot tamper with. Make sure you can access them quickly when needed or in an emergency.
  • Companies from non-industrial sector can protect themselves by installing anti-APT and EDR solutions that enable capabilities for advanced threat discovery and detection, investigation and timely remediation of incidents. Organizations can also provide their SOC teams with access to the latest threat intelligence and regularly upskill them with professional training.

Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

NOTAP to Commercialise University Research, Expands Patent Drive

Published

on

Kindly share this post

National Office for Technology Acquisition and Transfer (NOTAP), has commenced the process of patenting and commercialisation of research works by universities and other research institutions in the country.

NOTAP to Commercialise University Research, Expands Patent Drive

Dr. Obiageli Amadiobi, director general of NOTAP

Dr. Obiageli Amadiobi, director general of NOTAP, stated this in Abuja, during an interaction with journalists on her achievements since assuming office.

Speaking on the theme, “Strengthening Indigenous Capacity: NOTAP’s Drive for Technology Transfer, Local Content Development, and Innovative activities,” Amadiobi said the agency had involved both the academia and industry so that researchers can work on topics brought forward for commercialisation purpose.

“My minister is very intentional about this– very intentional about commercialisation of research results, which we have already submitted to him. They are meaningful researches, which we need to commercialise.

“We have established 69 intellectual property technology transfer offices in 69 universities that we are still counting. We have informed the vice chancellors of Nigerian universities to set up such offices and we will come and educate them on intellectual property and technology transfers.

“As we are doing this, we are also taking record of all the researchers of these universities and research centres and documenting them in a compendium.

“So, we have compendiums from the universities to us and we put them in a database. If you will recall, recently, the ministry, our supervising ministry, which is the Federal Ministry of Innovation, Science, and Technology, launched a programme titled Energise Commercialisation. This entirely was for commercialisation of all R&Ds,” she said.

On research Institutions carrying out research on areas of industry needs, she said, “NOTAP is bridging the gap between research and development with industry needs, “it is on our programme called the NITDF, NOTAP Industry Technology Transfer Fellowship. By this programme, we engage the universities and the industries, in what we call the triple helix. We liaise with the universities and the industries to sponsor, the industries will sponsor a Ph.D candidate in a Nigerian university to conduct relevant researches.

“They will provide the topics that they want researches for and such students will research on that with the assistance of the industries, because they wear the shoes, so they know where it pinches them. But usually, there are Ph.D candidates already established. This year alone, we certified about 15 of them to enter into this programme and they have gone into the various universities.

“And we are still looking for people to update some of the projects; the research topics we already have. But we are not getting enough persons to do the researches. So, we are going to do further advertisement to see if other candidates will come up.


Kindly share this post
Continue Reading

E-Business

FG Unveils Digital Postcode System for MDAs

Published

on

Kindly share this post

Federal government has launched a drive to standardise operations across all Ministries, Departments, and Agencies (MDAs) through the nationwide adoption of the new National Digital Alphanumeric Postcode System.

FG Unveils Digital Postcode System for MDAs

Dr Bosun Tijani, minister of Communications, Innovation and Digital Economy, launched the initiative at a high-level stakeholder workshop on Thursday in Abuja.

The conference, themed “Embedding the Nigerian Digital Postcode in Public Service Delivery,” brought together key stakeholders to discuss the adoption of the system across government institutions.

Represented by Nadungu Gagare, permanent secretary of the Ministry,  declared that the initiative was a critical pillar for the country’s economic and security framework.

“The Nigerian Digital Postcode represents far more than an improvement to postal services. It is a strategic national asset. Without accurate location intelligence, governments struggle to plan effectively, emergency responders lose valuable time, and financial institutions face verification challenges,” he said.

Tijani said the Alphanumeric digital postcode system was a pathway and a defining moment for Nigeria’s digital transformation under the Renewed Hope Agenda of President Bola Tinubu.

He said an accurate national addressing system would enable government agencies to plan better, improve emergency response, support credible census and elections, expand financial inclusion and ensure citizens were not excluded from essential services because of poor location data.

The Minister commended NIPOST for leading the initiative and urged MDAs and state governments to integrate the system into their operations, stressing that its success would depend on collaboration, interoperability, and nationwide adoption.

Omotola Odeyemi, postmaster general and chief executive officer, Nigerian Postal Service (NIPOST), explained that the digital postcode system creates a “common language of location” for the entire government.

She urged federal and subnational entities to integrate the infrastructure into their daily operations to maximise its value.

“Just as digital identity has helped to establish who a citizen is, this National Digital Postcode helps us to determine where services, opportunities, and interventions should be delivered. Its success will not be measured by the number of postcodes that we generate but by the lives that we improve,” the NIPOST boss explained.

Mrs Didi Esther Walson-Jack, head of the Civil Service of the Federation, represented by Dr Abdul Sule Garba, permanent Secretary of the Service Welfare Office, pledged full administrative backing for the rollout.

She noted that the civil service would be properly equipped to adapt to the data-driven system.

“The operationalisation of the Nigerian digital postcode is a strategic initiative that has the potential to significantly improve public administration, service delivery, and digital governance across the country,” Mrs Walson-Jack added.

The workshop featured live demonstrations and technical panel sessions focused on linking the new digital postcode system directly into national healthcare, social protection, education, and electoral planning.

 

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Warns of a Large-scale Campaign using Fake Free Software to Deploy a RAT via ScreenConnect

Published

on

Kindly share this post

A remote admin tool ScreenConnect is being distributed through fake websites designed to mimic the official pages of well-known software products.

In total, researchers identified more than 90 domains spanning 10 languages, including English, Arabic, Spanish, Chinese, German, Portuguese, and Russian, enabling the attackers to reach a wide range of victims worldwide. The campaign targets both individual users and organisations using Windows.

After detecting an incident through its Managed Detection and Response, Kaspersky uncovered a large-scale campaign in which attackers used fake websites to spread installer archives disguised as popular software, including OBS Studio, DNS Jumper, DS4Windows, Glary Utilities and Bandicam.

To drive traffic to these pages, the threat actor also used search engine optimisation techniques to place them high in search results.

Across more than 90 identified fraudulent software sites, the same tactic was observed: victims who downloaded what appeared to be legitimate software instead received a hidden ScreenConnect remote administration tool, which gave the attackers persistent access to compromised devices and allowed them to deploy AsyncRAT, an open-source trojan capable of giving them full control over infected systems.

Domain registrations linked to this campaign peaked in February 2026; in 2025, the same attacker had used fake websites to disguise malicious installers as games.

Infection occurs through malicious archives containing a legitimate, signed Microsoft file, install.exe, alongside the install.res.1033.dll library. The DLL is loaded onto the device via a DLL sideloading technique and deploys a ScreenConnect service that awaits further instructions from the attackers.

“The campaign targets both users downloading free utilities from the Internet and corporate networks, where remote access tools are often allowlisted and granted elevated privileges.

“Its danger lies in its potential to facilitate large-scale credential theft and unauthorised access to systems, with the stolen data typically later resold on dark web forums,” says Denis Kulik, lead SOC Analyst at Kaspersky.

 


Kindly share this post
Continue Reading

Trending