Connect with us

Telecom

Matrix Deconstructed: Sophos Report Says the Trend for Targeted Ransomware Continues

Published

on

Kindly share this post

  • Sophos released a report that delves into Matrix ransomware
  • Primary means of access is through firewalls that have the Remote Desktop Protocol enabled
  • As highlighted in Sophos’ 2019 Threat report, targeted ransomware attacks are gaining in prominence

Sophos, a global leader in network and endpoint security, today released a new report about a ransomware family called Matrix. The malware has been operating since 2016 and Sophos has tracked 96 samples in the wild.

 

Like previous targeted ransomware, including BitPaymer, Dharma and SamSam, the attackers who are infecting computers with Matrix have been breaking in to enterprise networks and infecting those computers over Remote Desktop Protocol (RDP), a built-in remote access tool for Windows computers.

 

However, unlike these other ransomware families, Matrix only targets a single machine on the network, rather than spreading widely through an organization.

In its latest paper, SophosLabs reverse engineered the evolving code and techniques employed by the attackers, as well as the methods and ransom notes used to attempt to extract money from victims.

 

The Matrix criminals evolved their attack parameters over time, with new files and scripts added to deploy different tasks and payloads onto the network.

 

Matrix ransom notes are embedded in the attack code, but victims don’t know how much they must pay until they contact the attackers. For most of Matrix’s existence, the authors used a cryptographically-protected anonymous instant messaging service, called bitmsg.me, but that service has now been discontinued and the authors have reverted to using normal email accounts.

 

The threat actors behind Matrix make their demand for cryptocurrency ransom in the form of a U.S. dollar value equivalent. This is unusual as demands for cryptocurrency normally come as a specific value in cryptocurrency, not the dollar equivalent.

 

It’s unclear whether the ransom demand is a deliberate attempt at misdirection, or just an attempt to surf wildly fluctuating cryptocurrency exchange rates.

Based on the communications SophosLabs had with the attackers, ransom demands were for US$2,500, but the attackers eventually reduced the ransom when researchers stopped responding to demands.

 

Matrix is very much the Swiss Army Knife of the ransomware world, with newer variants able to scan and find potential computer victims once inserted into the network.

 

While sample volumes are small, that doesn’t make it any less dangerous; Matrix is evolving and newer versions are appearing as the attacker are improving on lessons learned from each attack.

In  Sophos’ 2019 Threat Report the team highlighted that targeted ransomware will be driving hacker behavior, and organizations need to remain vigilant and work to ensure they are not an easy target.

 

Sophos recommends implementing the following four security measures immediately:

  • Restrict access to remote control applications such as Remote Desktop (RDP) and VNC
  • Complete, regular vulnerability scans and penetration tests across the network; if you haven’t followed through on recent pen-testing reports, do it now. If you don’t heed the advice of your pentesters, the cybercriminals will win
  • Multi-factor authentication for sensitive internal systems, even for employees on the LAN or VPN
  • Create back-ups that are offline and offsite, and develop a disaster recovery plan that covers the restoration of data and systems for whole organizations, all at once

For additional information and fact checking, please refer to Matrix: A Low-Key Targeted Ransomware report by Sophos.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

New Gmail Scam Mimics Security Alerts to Steal User Data

Published

on

Kindly share this post

Cybersecurity researchers at Malwarebytes Labs have exposed a sophisticated new Gmail scam where fraudsters send fake Google security alerts via phishing emails, texts, and pop-ups, tricking users into a deceptive four-step verification process that harvests login credentials, GPS locations, contacts, and other sensitive data for account takeovers.

New Gmail Scam Mimics Security Alerts to Steal User Data

Gmail

Disguised as routine checkups, these alerts mimic Google’s official pages to create urgency, prompting victims to install malicious “security tools” that grant hackers real-time access to Gmail and linked services—Corey Donovan, president of Alta Technologies, warns legitimate checks never come unsolicited or demand downloads, urging users to close suspicious prompts immediately and verify via official Google account pages instead.

The scam’s rise amplifies risks during travel, where public Wi-Fi hotspots—especially “evil twin” fakes like slight misspellings of “Airport_Free_WiFi”—enable interception of banking details, emails, and malware installs; Donovan advises disabling auto-connect, using VPNs for HTTPS sites only, avoiding logins altogether, and crafting strong passwords with mixed characters plus two-factor authentication.

Shoulder surfing on public transport and outdated devices compound threats, as fraudsters glimpse screens or exploit unpatched vulnerabilities—keeping phones updated with post-update privacy reviews limits app access to location or commutes, while skipping work emails in view maintains confidentiality on the go.

Nigeria’s heavy reliance on digital banking and crypto heightens vulnerability, as scammers exploit rushed travellers; Donovan stresses: “Cybercriminals target busy airports and stations knowing guards drop—stay cautious, update devices, lock privacy, and never rush links to protect against these advanced breaches.”


Kindly share this post
Continue Reading

Telecom

Vitel Wireless Lures Subscribers with “Data that Never Expires” Campaign

Published

on

Kindly share this post

Vitel Wireless, pioneer Mobile Virtual Network Operator (MVNO) licensed by the Nigerian Communications Commission (NCC), has launched an audacious “data that never expires” campaign designed to address consumer pain points in the market.

Vitel Wireless Lures Subscribers with “Data that Never Expires” Campaign

Kenneth Nwabueze, Chairman and CEO of Vitel Wireless

Fast-depleting data is a major issue for mobile users, particularly in Nigeria, with numerous complaints against network providers alleging that data plans exhaust prematurely.

But Vitel Wireless said it is now addressing the situation after extensive engagement with Nigerian consumers, particularly young people and small businesses.

Kenneth Neabueze, chairman of Vitel Wireless, said “What we’re saying to Nigerians is this, you buy the data, and you keep the data for as long as you want. There’s no more. You bought 2GB for two days, and it expires. If you buy that data under our scheme, it stays with you forever,” he said.

He added that the model promotes transparency and cost efficiency. “So it’s saving us money, it’s giving us transparency, and it’s giving us the ability to have control over how we spend and use our data,” he stated.

He noted that the concept was inspired by research into the everyday challenges Nigerians face.

“We talked to students who would tell us that in the middle of doing a project, they would be told that the data had expired, and we asked, ‘ How do we innovate?” We have analysed it, and we know, given the current economic conditions in Nigeria, you should buy the data with discounts of almost 40 per cent, and that’s why we are transparent”

The company has also unveiled a suite of products and services aimed at redefining connectivity, including its flagship Vitel Xphone.

The company explained that its services are available via both physical SIMs and eSIMs, with the 0712 number offering global use.

According to the firm, users can retain existing mobile numbers or migrate seamlessly, while enjoying nationwide coverage across all 36 states and the Federal Capital Territory with full GSM services including voice, SMS, USSD, and mobile data.

Chudi Nwabueze, chief operating officer of Vitel Wireless, described the firm as a technology telecom focused on innovation beyond traditional voice and data services.

“We’re coming in with a lot of innovation to activate applications and create tools that people can use in their businesses, homes, and daily lives,” he said.

He added that eSIM technology allows users to operate multiple lines on compatible devices, while introducing a range of digital solutions aimed at enhancing communication, safety, and business operations, anchored by its flagship Xphone.

Hence, the platform combines GSM and VoIP technologies to deliver seamless voice, video, and messaging services, along with cost-saving benefits and nationwide connectivity.

It is complemented by the Oga App, which enables real-time staff monitoring, automated payroll, and performance tracking to improve organisational efficiency.

Similarly, the network also rolled out SecureMe and Asset Tracker to address security and asset management needs.

While SecureMe provides GPS tracking and emergency alerts for personal and workplace safety, Asset Tracker helps businesses monitor and manage physical assets in real time.

Vitel Wireless noted that on pricing, challenged consumers to compare daily data costs across operators, while adding that the network offers discounts for higher volumes without imposing expiry limits.

Also speaking, Chinenye Adebayo,  relationship partnership manager, outlined opportunities for Nigerians to join the company’s distribution network by visiting the website and becoming a mobile agent or sun-agents in any state.

The company noted that its offerings, including Close User Group (CUG) services and high-speed wireless network, are designed to provide integrated digital solutions for individuals and enterprises, as it seeks to position itself as a disruptive force in Nigeria’s telecom sector.


Kindly share this post
Continue Reading

Telecom

Nigeria, Ghana Trigger Stunning 45 Percent Surge in MTN Dividends

Published

on

Kindly share this post

MTN Group delivered impressive financial and operational achievements for 2025, boosted by strong performances in MTN Nigeria and MTN Ghana, as well as solid earnings from MTN South Africa.

Nigeria, Ghana Trigger Stunning 45 Percent Surge in MTN Dividends

The three core markets of Africa’s largest mobile provider enhanced profitability, free cash flow, and shareholder dividends by 45%.

IT Web Africa reported that Ralph Mupita, group CEO and president, MTN, highlighted that the telecoms giant’s robust commercial momentum across key markets capped the final year of its Ambition 2025 strategy, while laying the foundation for a new long-term growth phase under Ambition 2030.

“The Group’s overall performance in 2025 was excellent. In the final year of our Ambition 2025 strategy, we were proud to have exceeded the 300 million customers milestone,” he said.

MTN revealed that it now serves more than 307 million voice subscribers, 172 million data users, and 70 million Mobile Money customers across 16 African markets, reflecting the continent’s growing demand for digital connectivity and financial services.

The operator credited its results to disciplined commercial execution and sustained investment in network infrastructure, with R38 billion spent during the year to expand capacity, improve coverage and enhance service quality.

The group reported that data traffic surged 27%, while average monthly data consumption per user climbed to 12.5GB, up from 10.8GB a year earlier, reflecting Africa’s fast-growing appetite for digital services.

Financially, the performance was driven by MTN’s largest markets.

In constant currency terms, MTN Nigeria grew service revenue by 54.9%, while MTN Ghana increased service revenue by 35.9%.

Meanwhile, MTN South Africa recorded 2% growth, demonstrating operational resilience in one of the continent’s most mature and competitive telecom markets.

MTN Group service revenue rose nearly a quarter to R218 billion, while earnings before interest, tax, depreciation and amortisation climbed to R98.5 billion, supported by R3.6 billion in expense efficiencies.

Mupita stressed that the strong results translated into robust free cash flow and improved return generation, allowing the board to declare a dividend of 500 cents per share, up from 345 cents the previous year.

“This comfortably exceeds the minimum dividend of 370 cents we had previously guided,” he said.

The group also announced a R6 billion share buyback programme as part of an enhanced shareholder remuneration framework aimed at delivering stronger long-term returns.

Alongside its results, MTN unveiled Ambition 2030, a strategy centred on three platforms, connectivity, fintech and digital infrastructure, as it seeks to capture the next wave of growth driven by data adoption and financial inclusion across Africa.

“We are hugely excited about Africa’s potential. We are well positioned to leverage our scale, footprint and brand leadership to capture the significant structural growth opportunities identified,” said Mupita.

 

Source: IT Web Africa


Kindly share this post
Continue Reading

Trending