Connect with us

Telecom

Most Educational Organizations Paid More Than the Original Ransom Demand – Sophos Survey

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions that defeat cyberattacks, on Thursday released findings from its annual sector survey report, “The State of Ransomware in Education 2024.”

According to the report, the median ransom payment was $6.6 million for lower education and $4.4 million for higher education organizations.

In addition, the survey states that 55% of lower education respondents and 67% of higher education respondents paid more than the initial demand.

Ransomware attacks are causing more of a strain as only 30% of ransomware victims surveyed in both lower and higher education were able to fully recover in a week or less, down from last year’s 33% (lower education) and 40% (higher education).

This slowing recovery rate is likely due to education organizations operating with limited teams and resources, making it harder for them to coordinate recovery efforts.

“Unfortunately, schools, universities and other educational institutions are targets that are beholden to municipalities, communities and the students themselves, which inherently creates high pressure situations if they are hit and destabilized by ransomware.

“Educational institutions feel a sense of responsibility to remain open and continue providing their services to their communities.

“These two factors could be contributing to why victims feel so much pressure to pay,” said Chester Wisniewski, director, field CTO, Sophos.

“We also know that ransomware attackers have upped the ante when it comes to getting paid. Compromising their victims’ backups is now a mainstream element of ransomware attacks, giving adversaries the opportunity to subsequently increase the ransom demand when it is clear that the data cannot be recovered without the decryption key.”

In fact, 95% of respondents said that cybercriminals tried to compromise their backups during the attack, with 71% being successful – the second highest backup compromise rate across all industry sectors. Having backups compromised also considerably increases recovery costs, with the total bill coming in five times higher in lower education and four times higher in higher education.

Despite difficult dealings with ransomware, the overall attack rate dropped over the last year. Sixty-three percent of lower education organizations and 66% of higher education organizations were hit by ransomware attacks – down from 80% and 79%, respectively.

At the same time, the rate of data encryption has increased slightly, with eighty-five percent of attacks on lower education and 77% of attacks on higher education organizations resulting in data encryption, slightly up from the 81% and 73%, respectively, reported in the 2023 survey.

Unfortunately, cybercriminals are not only encrypting data, they’re also stealing it, using it as leverage to further monetize the attack. Twenty-two percent of lower education organizations that had data encrypted said the data was also stolen, together with 18% in higher education.

The survey reveals that exploited vulnerabilities were the leading root cause of attacks in education, providing cybercriminals with a way into the network for 44% of lower education and 42% of higher education ransomware attacks.

Based on this Sophos survey data, schools and other educational organizations could benefit from a layered security approach that includes vulnerability scanning and patching prioritization guidance to reduce their attack surface, endpoint protection with anti-ransomware capabilities that automatically detect and stop attacks, and 24/7 human-led managed detection and response (MDR) services to neutralize advanced human-led attacks, ideally leveraging telemetry from backup solutions to detect and stop adversaries before they can cause damage.

“While there appears to be some positive progress towards combatting ransomware in the education sector, it’s concerning that the rate of data encryption continues to increase year after year, which suggests educational organizations need to continue working towards improving their ransomware resilience.

“With stretched resources and limited budgets, education organizations need to focus on the controls that will have the greatest impact. With the median ransomware recovery cost for education now hitting $3 million, it’s clear that investing in strong prevention and protection solution can considerably reduce the overall financial impact of cyber to educational organizations,” said Wisniewski.

Sophos’ report this year incorporates new areas of study: insight into the role of law enforcement in ransomware remediation for education providers.

Ninety-nine percent of lower education and 98% of higher education organizations engaged with law enforcement and/or official government bodies following a ransomware attack. As a result, 64% of lower education organizations and 66% of higher education organizations benefitted from advice about dealing with the attack. Sixty-one percent of lower and higher education organizations received help and support investigating the attack, and nearly 49% of lower education organizations and 48% of higher education organizations sought law enforcement’s help recovering data encrypted in the attack.

Data for the State of Ransomware in Education 2024 report comes from a vendor-agnostic survey of 600 cybersecurity/IT leaders working in the education sector conducted between January and February 2024.

Respondents were based in 14 countries across the Americas, EMEA, and Asia Pacific. All respondents represent organizations with between 100 and 5,000 employees.

Read the full State of Ransomware in Education 2024 report on Sophos.com for additional global findings and data by sector.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Moody Says MTN, LIT Exposed to Currency Volatility, Inflation Risks in Nigeria, Others

Published

on

Kindly share this post

MTN and Liquid Intelligent Technologies (LIT) are exposed to inflation and currency depreciation in their South Africa, Zimbabwe and Nigerian markets, said Moody’s Ratings, adding though that regional telecoms operators stood to benefit from booming population and increased uptake of mobile services.

Moody Says MTN, LIT Exposed to Currency Volatility, Inflation Risks in Nigeria, Others

South African telecoms groups have forayed into regional markets, including MTN and Vodacom, where they are also running broadband and setting up mobile money services to broaden revenues and earnings.

However, for operators like MTN, exposure to exchange rates mainly comes from translating results into its rand reporting currency and from the dollar indexation element on its tower leases, especially in Nigeria, said Moody’s senior analyst, Lisa Jaeger.

It is less exposed to a currency mismatch between earnings and debt because it has shifted debt from dollars into rand and naira over the past two to three years and continues to raise debt in local currency at its subsidiaries,” noted Jaeger and other analysts in a new report by Moody’s on the Sub Saharan African telecommunications sector.

On the other hand, LIT – the independent fibre network operator – earns around 75% of its revenue in local currencies such as the Zimbabwe Gold South African rand. Most of LIT’s customer contracts “do not include any price escalation mechanisms, exposing LIT to inflation and currency depreciation” risks.

LIT’s contracts, however, leaves some room for price increases to cover for this as they can be renegotiated periodically, usually on an annual basis while in some countries these have to be approved by the local regulator, adding some regulatory risks and volatility to earnings.

In the case of MTN, in the 18 months to June 2024, the operator’s financial performance suffered significantly from depreciation in Nigeria’s naira.

MTN’s “naira earnings became worth less” when translated into rand, significantly contributing to its 20% drop in group revenue over the half-year period to the end of June.

To offset currency depreciation, mobile network operators operating in volatile markets such as in the case of MTN are resorting to raising tariffs in line with inflation, which is usually correlated to depreciation.

LIT’s strategy to reduce exposure to currency depreciation comes in the form of matching its rand earnings with rand-denominated debt.

However, there remains a mismatch between revenue earned in other local African currencies and its dollar-denominated debt for around 45% of earnings before interest, taxes, depreciation, and amortization (Ebitda) including Zimbabwe and around 20% of Ebitda when excluding Zimbabwe.

“Zimbabwe continues to experience high inflation and a weakening currency, even after the introduction of the new currency Zimbabwe gold (ZiG) in April 2024. Even though dollar availability has improved, there remain limitations on converting any cash generated in Zimbabwe into dollars and on moving it out of the country,” notes the Moody’s report on the regional telecoms sector.

 


Kindly share this post
Continue Reading

Telecom

NCC Berates Starlink for Unauthorized Data Tariff Increase

Published

on

Kindly share this post

Nigerian Communications Commission (NCC) has refuted report by an online platform that it gave approval to Starlink to hike its Data tariff.

The commission in a statement released on Tuesday by Reuben Muoka, director, Public Affairs stated that the tariff hike did not receive the blessing of the commission, noting that the decision was unilaterally taken without its consent.

The statement reads, “The decision by Starlink to unilaterally review its subscription packages upwards did not receive the approval of the Nigerian Communications Commission (NCC).

“We were surprised that the company jumped the gun by announcing price changes after filing a request to the Commission seeking approval for price adjustment for which the Commission was yet to communicate a decision.

“The action of the company appears to be a contravention of Sections 108 and 111 of the Nigerian Communications Act (NCA) 2003, and Starlink’s Licence Conditions regarding tariffs.

“The Commission will, therefore, take appropriate enforcement measures against any action by a licensee that is capable of eroding the regulatory stability of the telecommunications industry”.


Kindly share this post
Continue Reading

News

NASENI Trains Procurement Officers, Others on Global Best Practices

Published

on

Kindly share this post

National Agency for Science and Engineering Infrastructure (NASENI) is organizing a 3-day procurement in-house training for all procurement and other relevant officers in NASENI system -wide to acquaint them with best procurement operations and in line with global practices.

The training will take place at the NASENI Headquarters, beginning from Tuesday 8th  to 10th October, 2024, targeted at building the capacity of procurement officers, and other select staff from Accounts, Audit, legal, Media, Planning and other officers involved in procurement activities in NASENI System-wide.

The Executive Vice Chairman/Chief Executive Officer, NASENI, Mr. Khalil Suleiman Halilu will deliver the keynote address while Olusegun Omotola, Ag. Director General/CEO, Bureau of Public Procurement will declare the in-house training officially open.

The training amongst other things aims at ensuring that NASENI is doing the right thing and adhering to 2007 Procurement Act, Manual and other vital information that will enable the Agency to continue on the right track and to utilize the right information at every given time, as far as procurement matters are concerned.

Speaking on the upcoming training, the Director of Procurement, Dr. Mohammed A. Mohammed said that the training is based on NASENI needs and to enable officers meet up with changes in technology and practices which are global phenomenon, especially against the backdrop of on-going transformation in the NASENI system.

He said, “Things are changing, and you need to change with time, technology is changing globally, you need to build your capacity. This training is based on NASENI Needs on procurement which is slightly different from other sectors.

“Almost 75-80 per cent of NASENI activities is based on science and engineering, our method of procurement, is a little different, from the ministry of works, raw materials, etc.  Again, you must build your capacity to be able to cope, which is why we are having this training, to build capacity in line with NASENI needs and mandate.”

According to him, building capacity is a continuous exercise and procurement is all about law end to end, adding that the officers working in procurement must be trained from time to time to equip them with new trends.

He also noted that with the Standard Operation Procedure globally and the World Bank new version on procurement, NASENI cannot work differently, it must key into global practices. He stated that 95 per cent of the resource persons for this training are from the Bureau of Public Procurement (BPP) as NASENI has an agreement with it, to assist in building the capacity of procurement and relevant officers in NASENI system-wide.

Also speaking on the upcoming in-house procurement training, Mr. Adekoya Olatunji, BPP consultant, said, that “the In-house training that is coming up in NASENI is very good, it will enable the officers to adhere strictly to procurement Act. What NASENI is doing is very good, so that the officers will do what they need to do very well”.

Highlights on some of the topics of the training with the theme: “Building the Best Procurement Operations in NASENI System-Wide” includes, Effective Procurement Practices & PPA, 2007, Procurement Planning, Procurement Record Keeping Procedures, Contract Agreement and Implications amongst others.


Kindly share this post
Continue Reading

Trending