Telecom
Key Trends in Sophos 2022 Threat Report
Sophos, a global leader in next-generation cybersecurity, on Wednesday published the Sophos 2022 Threat Report, which shows how the gravitational force of ransomware’s black hole is pulling in other cyberthreats to form one massive, interconnected ransomware delivery system – with significant implications for IT security.
The report, written by SophosLabs security researchers, Sophos Managed Threat Response threat hunters and rapid responders, and the Sophos AI team, provides a unique multi-dimensional perspective on security threats and trends facing organizations in 2022.
The Sophos 2022 Threat Report analyzes the following key trends:
1. Over the coming year, the ransomware landscape will become both more modular and more uniform, with attack “specialists” offering different elements of an attack “as-a-service” and providing playbooks with tools and techniques that enable different adversary groups to implement very similar attacks.
According to Sophos researchers, attacks by single ransomware groups gave way to more ransomware-as-a-service (RaaS) offerings during 2021, with specialist ransomware developers focused on hiring out malicious code and infrastructure to third-party affiliates.
Some of the most high profile ransomware attacks of the year involved RaaS, including an attack against Colonial Pipeline in the U.S. by a DarkSide affiliate.
An affiliate of Conti ransomware leaked the implementation guide provided by the operators, revealing the step-by-step tools and techniques that attackers could use to deploy the ransomware.
Once they have the malware they need, RaaS affiliates and other ransomware operators can turn to Initial Access Brokers and malware delivery platforms to find and target potential victims. This is fueling the second big trend anticipated by Sophos.
2. Established cyberthreats will continue to adapt to distribute and deliver ransomware. These include loaders, droppers and other commodity malware; increasingly advanced, human-operated Initial Access Brokers; spam; and adware. In 2021, Sophos reported on Gootloader operating novel hybrid attacks that combined mass campaigns with careful filtering to pinpoint targets for specific malware bundles.
3. The use of multiple forms of extortion by ransomware attackers to pressure victims into paying the ransom is expected to continue and increase in range and intensity. In 2021, Sophos incident responders catalogued 10 different types of pressure tactics, from data theft and exposure, to threatening phone calls, distributed denial of service (DDoS) attacks, and more.
4. Cryptocurrency will continue to fuel cybercrimes such as ransomware and malicious cryptomining, and Sophos expects the trend will continue until global cryptocurrencies are better regulated. During 2021, Sophos researchers uncovered cryptominers such as Lemon Duck and the less common, MrbMiner, taking advantage of the access provided by newly reported vulnerabilities and targets already breached by ransomware operators to install cryptominers on computers and servers.
“Ransomware thrives because of its ability to adapt and innovate,” said Chester Wisniewski, principal research scientist at Sophos. “For instance, while RaaS offerings are not new, in previous years their main contribution was to bring ransomware within the reach of lower-skilled or less well-funded attackers.
This has changed and, in 2021, RaaS developers are investing their time and energy in creating sophisticated code and determining how best to extract the largest payments from victims, insurance companies, and negotiators. They’re now offloading to others the tasks of finding victims, installing and executing the malware, and laundering the pilfered cryptocurrencies.
This is distorting the cyberthreat landscape, and common threats, such as loaders, droppers, and Initial Access Brokers that were around and causing disruption well before the ascendancy of ransomware, are being sucked into the seemingly all-consuming ‘black hole’ that is ransomware.
“It is no longer enough for organizations to assume they’re safe by simply monitoring security tools and ensuring they are detecting malicious code. Certain combinations of detections or even warnings are the modern equivalent of a burglar breaking a flower vase while climbing in through the back window.
“Defenders must investigate alerts, even ones which in the past may have been insignificant, as these common intrusions have blossomed into the foothold necessary to take control of entire networks.”
Additional trends Sophos analyzed include:
· After the ProxyLogon and ProxyShell vulnerabilities were discovered (and patched) in 2021, the speed at which they were seized upon by attackers was such that Sophos expects to see continued attempts to mass-abuse IT administration tools and exploitable internet facing services by both sophisticated attackers and run-of-the-mill cybercriminals
· Sophos also expects cybercriminals to increase their abuse of adversary simulation tools, such as Cobalt Strike Beacons, mimikatz and PowerSploit. Defenders should check every alert relating to abused legitimate tools or combination of tools, just as they would check a malicious detection, as it could indicate the presence of an intruder in the network
· In 2021, Sophos researchers detailed a number of new threats targeting Linux systems and expect to see a growing interest in Linux-based systems during 2022, both in the cloud and on web and virtual servers
· Mobile threats and social engineering scams, including Flubot and Joker, are expected to continue and diversify to target both individuals and organizations
· The application of artificial intelligence to cybersecurity will continue and accelerate, as powerful machine learning models prove their worth in threat detection and alert prioritization. At the same time, however, adversaries are expected to make increasing use of AI, progressing over the next few years from AI-enabled disinformation campaigns and spoof social media profiles to watering-hole attack web content, phishing emails and more as advanced deepfake video and voice synthesis technologies become available
To learn more about the threat landscape in 2021 and what this means for IT security in 2022, read the full Sophos 2022 Threat Report.
Additional content for the Sophos 2022 Threat Report:
· Video of the headline findings, presented by Chester Wisniewski, principal research scientist, Sophos
· An article on SophosLabs Uncut recapping the report sections
· A Sophos News opinion piece by Wisniewski on the ransomware turf wars
· A Naked Security article introducing the report
Telecom
GSMA, Mobile Industry Call for Strengthened Action to Advance Child Online Protection in Africa
The GSMA, in partnership with the mobile industry, is calling for strengthened collective action to protect children online across Africa. Building on insights from a high-level roundtable convened at the Ministerial Programme during MWC25 Barcelona, the GSMA yesterday released a new whitepaper, Enhancing Child Online Protection in Sub-Saharan Africa outlining key recommendations to guide governments, regulators, industry, civil society, and youth stakeholders as they work together to create a safer digital environment for children.
With Africa’s digital transformation accelerating, the number of children accessing the internet is rising rapidly – often through mobile devices, as the region remains mobile-first.
The UN Convention on the Rights of the Child (CRC) and the African Charter on the Rights and Welfare of the Child (ACRWC) set out the fundamental rights of all children, both of which provide a critical foundation for ensuring that children’s rights are fully respected, protected, and fulfilled in the digital age. Mobile technology holds enormous potential to help advance these rights, as explored in the GSMA-UNICEF report Enhancing Children’s Lives through Mobile.
While published in 2019, the report’s principles and mapping remain highly relevant today, reflecting the GSMA’s longstanding commitment to this area. We continue to work closely with UNICEF, and as a next step, GSMA and UNICEF will co-lead a new regional taskforce to help drive forward the recommendations from this whitepaper and strengthen cooperation across governments, industry, and civil society.
Mobile can open doors to education, social connection, and development. But as connectivity expands, so too do the risks: children are increasingly exposed to cyberbullying, harmful content, and online exploitation. Recognising both the opportunities and challenges of the digital environment, the African Committee of Experts on the Rights and Welfare of the Child dedicated the 2023 Day of the African Child (DAC) to this important theme – reinforcing the urgent need for cross-sector cooperation.
The GSMA and its members in Africa have worked together to highlight shared challenges, amplify the voices of young people, and identify areas where governments, industry, and civil society can strengthen coordinated efforts.
Key recommendations from the whitepaper include:
- Ensuring child- and youth-centred approaches in policy and programme development
- Strengthening national frameworks in line with the African Union Child Online Safety and Empowerment Strategy
- Expanding digital literacy and awareness initiatives for children, parents, and educators
- Building stronger public-private partnerships to scale resources, tools, and services across the region
Angela Wamola, Head of Sub-Saharan Africa at the GSMA, said: “Protecting children online is a responsibility shared across governments, industry, civil society, and families. By working together, we can ensure the digital environment becomes a place of opportunity – not risk – for Africa’s children. This whitepaper is an important step in supporting stakeholders across the region as they advance this urgent agenda.”
Nankali Maksud, Regional Advisor for Child Protection at UNICEF Eastern and Southern Africa, added: “Children and young people under 18 make up half of Africa’s population. Protecting their safety online is not only about safeguarding rights, but about investing in Africa’s human capital and future leadership.
This whitepaper helps elevate African voices, African leadership, and African solutions for protecting children in the digital space. We at UNICEF look forward to co-hosting a taskforce for GSMA to take forward the recommendations emerging from this whitepaper”.
The whitepaper integrates regional data, including findings from IPSOS research commissioned by MTN Group, as well as insights from youth advocate Jemima Kasongo, 19, from the Democratic Republic of Congo, who opened the roundtable during MWC25 with a powerful call to action on behalf of young people across the continent.
The GSMA reaffirms that child online protection is a global priority, with efforts underway worldwide to strengthen safer digital environments. Initiatives such as the GSMA Mobile Alliance to Combat Digital Child Sexual Exploitation bring together international mobile operators to drive good practice and coordinate global responses.
While this new whitepaper focuses on Africa, it builds on the GSMA’s broader global commitment, including newly published guidance on incorporating young voices into digital policy and solution design. The GSMA encourages all stakeholders to engage with the recommendations and join the ongoing dialogue to help ensure a safer digital future for Africa’s children.
In a strategic move to deepen its presence in emerging economies, global cryptocurrency exchange MEXC has launched peer-to-peer (P2P) trading support for three new fiat currencies — the Nigerian Naira (NGN), Ethiopian Birr (ETB), and Pakistani Rupee (PKR). This expansion reflects the company’s increasing focus on localising crypto access in high-growth, underbanked regions.
The addition of NGN, ETB, and PKR to MEXC’s P2P platform enables users in Nigeria, Ethiopia, and Pakistan to trade major cryptocurrencies including Bitcoin (BTC), Ethereum (ETH), Tether (USDT), and USD Coin (USDC) directly with their local currencies.
The trades come with zero transaction fees, in line with MEXC’s strategy to lower entry barriers for users and encourage grassroots participation in the digital asset economy.
The update is more than a technical expansion — it underscores MEXC’s recognition of Africa and South Asia as rising crypto frontiers. Nigeria, often cited as one of the world’s fastest-growing crypto markets, and Ethiopia, where digital finance is beginning to surge amid reforms, represent key territories for crypto adoption. Similarly, Pakistan’s growing youth population and fintech appetite offer strong potential for crypto-enabled financial inclusion.
To support the rollout, MEXC is actively onboarding new merchants to its P2P platform. Merchants benefit from zero transaction fees, dedicated customer support, a special verification badge, and invitations to exclusive community events. The goal is to nurture a local network of verified sellers and buyers who can facilitate seamless and trusted crypto trades.
P2P trading — which allows users to transact directly without third-party intermediaries — is especially relevant in markets where banking infrastructure is either insufficient or heavily regulated. By bypassing traditional systems, P2P provides a lifeline for users seeking stablecoins, alternative stores of value, or more flexible remittance solutions.
This latest expansion signals MEXC’s intent to compete aggressively for market share in underserved territories while enabling more users to access and benefit from Web3 technologies. As global exchanges race to localise their services, MEXC’s early moves into fiat integration may prove pivotal in shaping the next wave of crypto adoption across the Global South.
At the recently concluded NextNow Business Forum in Victoria Island, MTN Nigeria electrified the business community with a live demonstration of its forthcoming Communication Platform as a Service (CPaaS), a solution engineered to redefine how Nigerian enterprises connect with their customers.
Unlike traditional communication systems, MTN’s CPaaS is built for the realities of a mobile-first market. The platform unifies SMS, voice, WhatsApp, email, and more into a single, intuitive interface. This approach is especially significant in Nigeria, with over 107 million internet users, 45.4% of the total population, according to Data Report. This figure underscores the necessity for businesses to meet customers where they are.
During the demo, attendees witnessed how CPaaS enables two-way, real-time conversations between brands and customers. The platform’s support for rich media, instant analytics, and seamless integration with business workflows drew particular attention. These features are designed to empower businesses with data-driven insights and the agility to personalise every interaction, whether it’s a service notification, marketing campaign, or customer support exchange.
Akinbulejo Onabolu, Head of Enterprise Segment at MTN Nigeria, articulated the vision: “CPaaS gives enterprises the flexibility to interact with their customers on their preferred platforms; whether it’s chat, voice, or messaging, in a way that feels personal and immediate. We’re looking forward to the value this will unlock for businesses across industries once it launches.”
The fireside chat added depth to the conversation, with Omowunmi Olatunbosun, Head of SME Segment at MTN Nigeria, and Stephen Agbi of Bayobab, highlighting how digital engagement bridges the gap between businesses and audiences.
They emphasised that today’s consumers demand immediacy, relevance, and ease, qualities that CPaaS is built to deliver.
The stakes for digital transformation in Nigeria are high. In a report by Punch, the country’s enterprise tech market is projected to reach $22 billion by 2027, reflecting a surge in demand for scalable, cloud-based solutions that drive efficiency and customer loyalty.
The CPAAS Acceleration Alliance have estimated that globally, the CPaaS market is expected to grow from $14.7 billion in 2025 to $72.4 billion by 2035, at a compound annual growth rate of 18.4%, a testament to the platform’s transformative potential.
The event’s closing keynote from META’s Korhan Yunak reinforced the strategic value of digital channels like WhatsApp, which are now indispensable for business communication and engagement at scale.
As MTN Nigeria prepares for the Q3 2025 launch, the anticipation is unmistakable. With its promise of flexibility, intelligence, and seamless integration, MTN’s CPaaS platform is set to become the backbone of next-generation business-customer engagement in Nigeria, enabling enterprises to not just communicate but to connect, adapt, and grow in a digital-first era.
Smartcash PSB Launches Access to Instant Motor Insurance via Leadway Assurance
GSMA, Mobile Industry Call for Strengthened Action to Advance Child Online Protection in Africa
Bolt Rewards Loyalty and Expands Branding at Lagos Family Fest
Fidelity Bank Refutes ₦5 Billion Bail Payment Claim, Labels Report “False”
TD Africa, HP Strengthen Partnership to Advance Africa’s Tech Ecosystem
E-Financial1 day agoFidelity Bank ED, Kevin Ugwuoke takes over as President of Risk Managers Association
Telecom1 day agoCrypto Exchange MEXC Rolls Out P2P Support for Naira, Birr, and Rupee
News1 day agoWhy I am vying for AFRINIC board seat in 2025 election – Terry Edet
General News1 day agoAirtel Concludes Nationwide Environment Week with Market Clean-Up by Employees
General News1 day agoCourt Orders Lawyer to Produce “Bail-Jumping” Client in MTN Cyber Fraud Case
News1 day agoElumelu, UBA Chair Seeks Digital Sovereignty for Africa
E-Financial1 day agoCBN Suspends Dividend, Bonus Payments for Banks under Forbearance
Broadcasting1 day agoMultichoice Nigeria Faces Revenue Decline Amid Economic Challenges