Connect with us

E-Business

Preventing, Mitigating Ransomware with Cyber Situational Awareness

Published

on

cyber attack.jpg
Kindly share this post

If you’re familiar with mafia movies then you’re familiar with extortion – the practice of obtaining something, especially money, through force or threats.

Extortion has been around for centuries – well before “The Godfather” or “Goodfellas.” Even cyber extortion, which extends this criminal activity into the digital world, isn’t new.

What is new, however, is the wide variety of methods that are used by the bad guys to get their money.

Three main tactics are behind cyber extortion: the threat of distributed denial of service (DDoS), the threat of data compromise and ransomware.

DDoS attacks are one of the most popular means to facilitate extortion. These types of attacks typically target business-critical websites in order to increase the likelihood of payment, usually via Bitcoin (BTC), and can have crippling effects on organizations.

In certain cases, such as when targeting hosting providers, the threat actor may add more pressure to pay by using the negative publicity associated with service downtime as a threat.

A second method of extortion involves the potential release of compromised data. This method is dependent on the fact that the target’s data has already been compromised.

The threat of its release to the public domain is used as blackmail in order to extort money from the affected entity.

A third type of extortion, and the one most often in the news as of late, is ransomware – malicious software (malware) that restricts access to the computer system it has infected.

The malware demands that a ransom be paid before restoring access to affected resources.

Ransomware can prevent access to many features of a victim’s machine, including files, applications and the operating system itself.

Because ransomware is an ever-evolving threat that can be more challenging to address than other cyber extortion tactics, let’s take a closer look at how it works and how to prevent and mitigate it.

At a high-level, the ransomware process is fairly standard. Files are encrypted and the attackers, who hold the decryption key, will only allow the target to decrypt the files after the required BTC ransom is paid. Specific details of the attack, however, will depend on the variant.

Until recently ransomware has been delivered most commonly via drive-by-downloads from exploit kits, or through spam emails that either contain malicious attachments or encourage recipients to visit websites hosting malicious content.

But we see that starting to change with threat actors using more targeted methods to achieve their objective, such as spear-phishing emails purporting to be from a job applicant or including the name, job title and job-relevant information of the recipient.

 The disclosure that some organizations are paying the fee to unencrypt data likely provides further motivation for these types of attacks. In fact, when the actor estimates there’s a high likelihood of payment of the ransom fee they invest in more reconnaissance which can further increase the likelihood of infection.

As ransomware becomes big business, research on the dark web reveals a number of services being advertised to make it easy for beginners with low technical understanding to execute ransomware attacks with success.

Everything they need is available on a USB stick for $1,200 or they can take advantage of a hosted service in return for 5 percent commission on the ransom payments received.

So how can you combat cyber extortion? Cyber situational awareness can give you greater insights into the tools and processes used by actors that employ DDoS-based extortion and compromised data release extortion.

Advanced knowledge of the typical demands of a threat actor and their capabilities can help you make difficult decisions if presented with such a scenario and help you prevent future attacks.

Mitigating ransomware threats is more complex. It requires a combination of technical and process controls and company-wide engagement – from employees, to executives, to IT security teams. Cyber situational awareness can help you understand the infection vectors of the malware and apply the appropriate security controls to mitigate the risk of infection.

This includes insights you can use to raise staff awareness of how ransomware attacks occur and help you devise technical and procedural controls to prevent infection and to develop ransomware response procedures in the case of infection.

Of course ensuring that backups are maintained and are separate from the network can increase resilience to such attacks. In addition, several decryption tools have been released but, in the cat and mouse game between ransomware and such tools, their effectiveness tends to be short-lived; ransomware developers are continuously developing encryption methods to evade them.

As defenders, staying up-to-date with the latest trends and innovation can be hard, but it is essential in order to effectively prevent and mitigate the effects of extortion on your business.

With cyber situational awareness you can learn about the actors involved in extortion and their tactics, tools and motivations. With this knowledge you can more effectively align your defenses and make better decisions in the face of an attack.

Alastair Paterson, CEO and Co-Founder of Digital Shadows

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Mobile App Usage to Drop By 25 Percent on AI Assistants- Study

Published

on

Kindly share this post

By 2027 mobile app usage will decrease by 25 per cent due to AI assistants, according to Gartner, Inc. Smartphone users will turn to AI assistants, such as Apple Intelligence, ChatGPT, Google Gemini, Meta AI, and others to replace apps for many functions.

Mobile App Usage to Drop By 25 Percent on AI Assistants- Study

In addition to the impact of AI assistants, apps will be consolidated across separate brands and companies, creating mobile app partnerships or consortiums to reach more users per app at scale and defray the cost of creation and maintenance.

“CMOs should begin scenario planning for the impacts of decreased mobile app usage,” said Emily Weiss, senior principal for the Gartner Marketing Practice.

“Brands with low app engagement and retention will likely be first impacted – this will be a positive development for brands that are not overly reliant on driving revenue via apps as app development costs will decrease.

Other brands may be severely impacted by the disintermediation of users turning to AI assistants for services.

The loss of app users will also result in the loss of first-party data collection and the ability to reach fewer users via mobile push notifications,” she added.

By 2026, over 1/3 of web content will be created for the purposes of Gen-AI powered search.

According to Gartner’s 2024 CMO Spend Survey of 395 respondents between February and March 2024, the average CMO allocated almost a quarter of their digital marketing budget to search.

Other than end users directly visiting a website, search currently drives more traffic to the average commercial enterprise website than any other referral source.

Given this, a loss of search driven traffic due to algorithmic shifts by major search engines would result in tangible, negative commercial impact to any organisation.

“CMOs will need to direct their teams to hire talent with a strong understanding of how GenAI, and broader AI influences, impacts the performance of their content in search algorithms,” said Weiss.

“It will be important to upskill the function by investing in search and content talent with AI skillsets. These associates will need to have familiarity with creating or optimising content to train and rank within evolving search algorithms,” Weiss added.

By 2028 digital marketers will move 30 per cent of their paid social budget to support advertising and partnerships on subscription-based channels.

It is becoming more challenging for CMOs to maintain, let alone grow, their reach and engagement among consumers.

This is especially true as consumers shift their tech and media behaviors away from social media, to other platforms and subscription based channels.

Gartner’s 2024 CMO Spend survey found that since 2022, paid social has maintained the highest budget allocation for all digital media spend.

In 2024, B2C Marketing leaders reported allocating 14.3 per cent for their digital channel budget to social media advertising (an increase from 12.3% in 2023).

“Closed group communities and subscription channels offer a potential alternative for social media weary consumers and content creators who want to do more than feed the algorithm,” said Weiss.

“Brands can leverage closed-group subscription channels – such as Substack, Patreon, and Discord – and the professional creators on them to reach relevant target audiences who are already engaging with content they self-selected into consuming.”

By 2027, 85 per cent of customer data will be xollected from automated interactions or those led by AI agents. Current AI models, such as large language models (LLMs), lack the agency to autonomously execute tasks and adapt in complex environments.

However, as new levels of intelligence are added, new AI agents are poised to quickly become more capable and reliable as brands seek to address customer facing use cases.

“There will be more AI agents than people, so while current approaches require humans in the loop, this idea will quickly become antiquated.

“Marketers will need to determine when and how they can trust AI agents to act on behalf of the brand and customers across key areas,” said Weiss.

 

 


Kindly share this post
Continue Reading

E-Business

NIMC Trains 388 Personnel to Boost NIN Enrolment

Published

on

Kindly share this post

National Identity Management Commission (NIMC) has kicked off a three-day training program for 388 personnel aimed at enhancing the National Identification Number (NIN) enrolment process across the country.

NIMC Trains 388 Personnel to Boost NIN Enrolment

The training, tagged “Refresher Training of Trainers on NIN Integration to the National Social Register: Technical and hands-on devices and field operations and procedures”, is in collaboration with the National Social Safety-Net Coordinating Office.

The training is also to equip personnel with the necessary skills to efficiently handle the complexities of enrolment processes

In her address at the event held in Port Harcourt on Monday, Abisoye Coker-Odusote, director-general and chief executive officer, NIMC, noted that the initiative aligns with the commission’s overarching goal of achieving secured and great success for the Renewed Hope social initiatives.

Represented by Adedapo Adedoyin, her technical advisor on ICT, the NIMC DG said the event is a pivotal initiative that marks a significant step forward in our mission to enhance and modernize the National Identification Number enrolment process across Nigeria.

She stated, “Today, I am pleased to announce the launch of a comprehensive training program aimed at refreshing the technical and operational skills of the National Social Safety-Net Coordinating Office State Operations Coordinating Unit and NIMC staff.

“This initiative focuses on practical and field-based exercises, ensuring that our teams are well-equipped to handle the complexities of enrolment processes with precision and efficiency.

“This initiative aligns with our overarching goal of achieving secured and great success for the Renewed Hope social initiatives. Through verified digital identification, we aim to improve the lives of Nigerians by providing them with access to essential services and opportunities that require a reliable and secure identity verification system”.

Coker-Odusote explained that the training program will be conducted in two batches, encompassing four states: Kwara, Nasarawa, Kano, and Rivers. A total of 388 attendees will participate in this initiative, including 225 NASSCO State Operations Coordinating Unit representatives, 35 NIMC facilitators, and 128 State support staff.

She added, “The sessions are meticulously designed to foster knowledge sharing and hands-on experience with NIMC’s enrolment device and software, ensuring that our personnel are adept at using these tools to their full potential.

“By empowering our teams with enhanced skills and practical experience, we are setting the stage for more efficient and accurate NIN enrolment processes across the nation”.

Coker-Odusote further said the training program “is a crucial step toward achieving the World Bank’s Identification for Development Initiative target of enrolling 180 million Nigerians with secure digital IDs.

“By bolstering our technical and operational capabilities, we are ensuring that NIMC is well-positioned to meet and exceed this target, thereby contributing to the global vision of inclusive and accessible digital identification for all”.

The NIMC boss8 called for collaboration between all stakeholders saying, “As we embark on this journey, I urge all participants to embrace this opportunity for growth and development.

“Together, we can build a robust and efficient National Identification System that will serve as the cornerstone for Nigeria’s social and economic progress.”

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media

Published

on

Kindly share this post

Kaspersky experts have uncovered a new phishing scam targeting businesses that promote their pages on Facebook. Scammers send emails allegedly on behalf of Meta for Business – Facebook’s platform for businesses – claiming the recipient’s page contains prohibited content.

The email suggests users provide explanations in order for their account and page to be unblocked. The goal of the attackers is likely to get access to users’ business accounts.

Kaspersky’s anonymised data shows that such emails started reaching users on 14 December 2024, with complaints coming from organisations all over the world, including the Middle East, Turkiye and Africa.

By examining the “From” field in the email it can be seen that the domain does not belong to Facebook. According to Kaspersky data the emails that this campaign used were sent from different domains.

The link in the email redirects users to Facebook Messenger. On Messenger, the account posing as Facebook’s support team appears legitimate, creating a false sense of trust.

There is an indication that this is a fan page, but it is easy to miss in a situation of high stress after being accused of spreading illegitimate content.

This scheme stands out for its sophistication. Unlike earlier scams that accused users of copyright violations and directed them to respond via email, this approach simulates internal communication on the Facebook platform itself.

“In 2025, we anticipate a rise in attacks leveraging social engineering and user trust in major platforms. Scams like this are becoming more sophisticated as attackers strive to mimic official services closely.

“Users must remain vigilant, verify the authenticity of messages, and avoid clicking on suspicious links. We strongly advise users not to engage with suspicious accounts and to activate additional security measures, such as two-factor authentication.

“If you receive such an email, report the incident to Facebook’s support team and update your passwords immediately if any information has been compromised,” comments Andrey Kovtun, Email Threats Protection Group Manager at Kaspersky.

 

 


Kindly share this post
Continue Reading

Trending