General News
Preventing Your Network From Becoming a Botnet

By Harish Chib, vice president, Middle East & Africa, Sophos
“Not having sufficient network protection may allow your organization’s devices to be part of the next cyber-attack”
Botnets are large volumes of distributed networked computers and devices that have been taken over by a cybercriminal.
Botnets, also referred to as bots, are usually taken over by malicious software to enable remote control by a threat actor.
They are set up and developed by a hacker to provide a powerful and dark, cloud computing network to conduct cyberattacks of a criminal nature.
The growth in mobile and network devices has created large scale social and productivity benefits for us. We can now remotely access computers, security systems, cameras, appliances, and a growing list of devices, interconnected with cloud. Collectively this is referred to as the Internet of Things or IoT.
A worrying aspect of the growth of Internet-connected devices is the absence of basic security precautions.
Most end users rarely change factory defaults, which can be exploited by hackers to take control of the devices.
Another door for cybercriminals to take control of connected devices is called the back-door entry. This is a manufacturer’s access to the device through an undisclosed connection, used for remote testing and updates.
This large distributed, network of computers, under the control of threat actors, represents an aggregation of computing power that can be used for a devastating effect.
Inside the network
Malicious software designed to exploit IoT devices are usually not sophisticated. They operate by scanning network ports, looking for access opportunities, and gaining access through default credentials, or brute-force hacking to gain access.
This software is much easier to defend against, as it merely requires configuring the network firewall protection devices.
Similar to other malware, botnets can enter an organization through multiple points of entry. This includes email attachments, hacked web sites, connected sensors and other IoT devices, and USB sticks.
Once a malicious software has entered an organization, it will call home – the hackers command and control server – to register its success in gaining entry and to request further instructions.
It may be told to lie low and wait, or be instructed to move laterally on the network to infect other devices, or to participate in an attack.
This attempt by the malicious software to call-home represents an opportunity to detect infected systems on the network that are becoming part of a botnet.
Once an attack has got underway, the attack itself can be difficult to detect. From a network traffic point of view, the device will simply be sending emails out as spam, transferring data or mining bitcoins, or performing DNS lookups and a variety of other requests, usually seen in large scale attacks. In isolation, none of these types of activities are noteworthy.
Building protection
The most important ingredient for effective protection from botnets is the organization’s network firewall. The following can help to get best protection from the firewall.
· Advanced Threat Protection can identify botnets already operating on the network. Ensure the firewall has malicious traffic detection, botnet detection, and command and control, call-home traffic detection.
· Intrusion prevention can detect hackers attempting to penetrate and take over the network. Ensure the firewall has next-gen intrusion prevention system that is capable of identifying attack patterns inside the network.
· Sandboxing can pick up the latest malicious software before it reaches the organization’s computers. Ensure the organization firewall offers advanced sandboxing that can identify suspicious web or email files and activate them in a safe environment.
· Effective web and email protection can prevent malware from getting onto the network. Ensure the firewall has behavioral-based web protection that can simulate JavaScript code in web content to determine behavior before it reaches the browser.
· Ensure the firewall has top-shelf anti-spam and antivirus technology to detect malware in email attachments.
· Web Application Firewall can protect servers, devices, and business applications from being hacked. Ensure the firewall offers WAF protection for any system that requires remote access.
Best-practices
· Change the password for all your network devices to a unique complex password, and use a password manager if necessary.
· Minimize use of IoT devices and update all essential connected devices. Also disconnect unnecessary devices from the network and upgrade older devices to newer models.
· Avoid using IoT devices that require ports to opened in the network firewall or router to provide remote access. Instead, use cloud-based devices that connect only to the cloud provider’s servers and do not offer direct remote access.
· Do not enable UPnP on your firewall or router. This protocol enables devices to open ports on the firewall on demand without your knowledge increasing the surface area of attack.
· Use secure VPN technologies to manage your connected devices remotely.
Botnets have a massive slowdown effect on the global Internet traffic. They can also have a devastating impact on an organization, if the objective of the attack is to steal sensitive information. Even if the botnet operating on the organization’s network is not after its data, it could be using devices and network resources to cause devastating harm to another organization.
Do not let your network become part of the next global botnet attack.
General News
EFCC Tells Nigerians to Shun Ponzi Schemes Like CBEX, Others

Economic and Financial Crimes Commission (EFCC) has charged Nigerians to shun Ponzi schemes as many of such schemes have destroyed lives, eroded trust and undermined national development.
Aisha Abubakar, acting zonal director, Enugu Zonal Directorate and assistant commander of the EFCC, gave this charge during the 2025 Annual Management Retreat of the Nigeria Security and Civil Defence Corps which was held at Jubilee Hall, Holy-ghost Cathedral, Ogbete, Enugu State.
Speaking on the topic, “Get-Rich-Quick Syndrome and the Youth Vulnerability: The Case Study of Ponzi scheme-The Role of Law Enforcement in Prevention and Disruption”, Abubakar said that the get-rich-quick syndrome has become a serious economic and security threat in Nigeria, with the youths bearing the brunt.
She said that the get-rich-quick syndrome is a mindset characterized by the desire to attain wealth without legitimate, gradual effort, adding that the craving is often fueled by social media portrayals of instant riches and social pressure.
“In Nigeria today, the aspiration for wealth has grown increasingly urgent among the youth, leading to vulnerability to financial frauds such as Ponzi schemes. They often fall victim to enticing schemes that offer double returns within short timeframes, despite the absence of legitimate business operations. The desperation to escape poverty and fund small projects pushes many into high-risk unregulated investments”, she said.
While citing the causes of get-rich-quick syndromes among the youths, Abubakar said that greed, financial illiteracy, peer pressure, social pressure, digital and technological exposure, drugs, disappearance of cherished family and societal values, extravagant lifestyle, depression, unproductive lodging in hotels, impatience, frustration with traditional systems and psychological factors are some of the things that cause many to fall prey to schemes “even when they suspect it’s too good to be true”.
“Notable examples in Nigeria include, MMM Nigeria, MBA Forex, Chinmark Group and CBEX. In April 2025, Nigeria witnessed one of its most devastating financial scams with the collapse of CBEX, a digital asset trading platform that operated as a Ponzi scheme. It promised investors a 100% return on investment within 30 days, leveraging on the allure of cryptocurrency trading and artificial intelligence-driven strategies”, she said.
Abubakar listed types of get-rich-quick syndromes which include advance fee fraud, fake jobs and scholarship schemes, online loan and grant scams, fake forex and crypto currency platforms, amongst others.
She said that cybercrimes, which she identified as an activity of get-rich-quick syndrome, have adverse effects on the country’s economy. She lamented that cybercrime has earned the nation a bad reputation in the global world, thereby reducing foreign investments in Nigeria, which has affected in totality, the growth of our economy.
She said that the reputational damage affects even individuals in Nigeria, as the global world has no confidence in Nigerians, within and outside the borders of the country.
“Cybercrime has created a market system where fraudsters obtain competitive advantage and drive out legitimate business. A lot of funds are lost to internet fraud, some of which are eventually used to fund organized crime groups and terrorism, potentially leading to further crime and terrorist attacks. I am sure you will agree with me that it has also undermined national defence and security in Nigeria and this has contributed to negative output in the economy”, she said.
She thereafter discussed the roles the Commission has played in the prevention and disruption of these schemes.
“Through roadshows, social media campaigns and partnerships with youth-focused institutions, the EFCC has raised awareness of fraudulent investment scheme. We partner with the Central Bank of Nigeria, the Security and Exchange Commission, Banks and global bodies like the INTERPOL to trace funds, monitor financial flows and disrupt scam networks”, she said.
General News
Cyberattacks Using Family-favourite Brands Rise by 38% Over Past Year

Ahead of the International Day of Families, observed on May 15, Kaspersky experts analysed cyberthreats that use popular family-focused brands, such as Disney, LEGO, Toca Boca and others as bait. The research, based on selected keywords monitoring, revealed a steady rise in attack attempts, which increased by 38% from Q2 2024 to Q1 2025.
Kaspersky telemetry shows a consistent upward trend in the number of attempted attacks exploiting children – and family-related brands. Starting from just 89,000 in Q2 2024, the number of attacks has increased quarter by quarter, reaching almost 123,000 in Q1 2025. Throughout the reported period, Kaspersky detected over 432,000 such attempts.
Among the most frequently exploited brands throughout the reported period were LEGO, Disney and Toca Boca — all widely recognised and trusted by children and parents alike. LEGO-themed content accounted for the overwhelming majority of attacks, with over 306,000 attempts, followed by Disney (62,000) and Toca Boca (45,000).
Paw Patrol and Peppa Pig were also used as popular lures, though to a lesser extent — 12,500 and 4,900 attempted attacks. Cybercriminals exploit the popularity and emotional familiarity of these brands to trick users into downloading malicious files, often disguised as cartoons or games. The more popular the brand is, the more attractive it becomes as a hook for threat actors.
Kaspersky’s analysis shows that the most common threats targeting children and families are not always the most obvious ones. Throughout the reported period, nearly 400,000 infection attempts were linked to Downloaders — software that may appear harmless but is often used to silently deliver other potentially dangerous applications. These downloaders are frequently disguised as games, videos, or installers related to popular brands, making them especially effective at tricking users.
Furthermore, over 7,800 cases involved Trojans, which can steal sensitive data, monitor activity or grant remote access to attackers. These are particularly dangerous when hiding inside seemingly innocent files, such as cheats or fan-made apps.
Meanwhile, adware accounted for over 6,400 attempted attacks, typically appearing as flashy games or video apps that bombard users with unwanted ads, slowing down devices and potentially opening the door to additional threats.
As part of the analysis, Kaspersky researchers identified multiple scam and phishing websites mimicking the design and branding of popular among family companies. One notable example was a phishing page crafted to resemble the official Tokyo Disney Resort website.
Such scams are often indistinguishable from legitimate pages at first glance, with the only difference being the URL of the website. The fraudulent site offered users the chance to “buy” park tickets, just like the real one, and prompted them to enter their personal and payment information. However, instead of securing a magical day at the theme park, victims could have their bank card details stolen.
Another discovery made by Kaspersky researchers involved scams exploiting the name of MrBeast — a YouTube celebrity widely followed by children and teens, and well-known for giving away expensive prizes like gadgets, money and even houses. Cybercriminals created phishing pages promising “free gifts from MrBeast,” including digital gift cards for platforms such as Roblox, Xbox and PlayStation.
The site prompted users to choose their prize and complete a seemingly harmless task to claim it. To increase urgency, a countdown timer was displayed, urging visitors to “complete a sponsored activity” within a limited time to unlock the final reward code.
The entire process is a tactic designed to redirect victims to increasingly deceptive scam pages. Eventually, users are asked to pay a small commission fee to claim their “gift”. However, after submitting the payment, the victim may be left with no reward and may have lost money.
“Cybercriminals are masters of emotional manipulation — and there is hardly anything more emotionally charged than content children trust and love. By imitating popular brands or influencers like MrBeast, attackers create a sense of familiarity and excitement that lowers users’ guard. That’s why it’s essential for parents to stay informed and teach kids how to question ‘too-good-to-be-true’ offers before clicking,” comments Evgeny Kuskov, Security Expert at Kaspersky.
General News
Airtel Money Plans IPO to Compete in Fintech Space

Airtel Africa is positioning its mobile money platform, Airtel Money, to challenge Africa’s fintech giants through a planned initial public offering set for the first half of 2026, Sunil Taldar, chief executive officer said in the company’s latest financial results.
The IPO will bolster Airtel Money’s ability to compete with dominant players like Safaricom’s M-Pesa and MTN’s MoMo in the continent’s rapidly growing fintech market.
The operator’s fintech unit, operating across 14 African countries including Nigeria, has grown its subscriber base by 17.3 per cent year-on-year to 44.6 million active users as of early 2025, according to the company’s first-quarter financial results.
The mobile money platform provides critical financial services to millions of unbanked users, enabling digital transactions, credit access, and remittances via mobile phones.
This focus on financial inclusion aligns with Airtel Africa’s mission to drive economic prosperity and transform lives across its markets.
“We are making significant progress in our preparations for the Airtel Money IPO and remain committed to this objective,” Taldar said, underscoring the strategic importance of the listing.
He cautioned that the IPO remains subject to market conditions, adding, “Therefore, subject to these conditions, we anticipate a listing event in the first half of the calendar year 2026.”
The IPO is expected to raise capital to scale Airtel Money’s operations and sharpen its competitive edge.
Safaricom’s M-Pesa, with 70 million users across Africa and a stronghold in Kenya, remains the market leader, while MTN’s MoMo commands 65 million active users, particularly in West and Central Africa.
However, MoMo’s Nigerian arm, MoMo PSB, saw a 55.6 per cent year-on-year decline in active wallets, dropping to 2.1 million in Q1 2025, a vulnerability Airtel’s fintech unit could capitalise on.
Airtel Money’s growth strategy hinges on leveraging its expanding user base and innovative services to close the gap with its rivals.
The platform’s ability to empower underserved communities through accessible financial tools positions it as a key player in Africa’s fintech frontier.
Taldar emphasised the company’s broader vision, stating, “We will remain focused on delivering our strategy to transform the lives of our customers and support economic prosperity across our markets.”
Expressing gratitude to stakeholders, Taldar noted, “I want to say a particular thank-you to our customers, partners, governments, and regulators for their support and our employees for their unrelenting contribution to the business.” This collaborative effort underpins Airtel Africa’s confidence as it advances toward the 2026 IPO.
- E-Business3 days ago
NIN: FG Increases DoB Update Fee by 75Percent to N28,574
- Broadcasting3 days ago
Afreximbank Unveils Third Edition of Short Film Competition ‘Creative Africa Nexus’
- General News3 days ago
NIMASA Embraces Technology to Strengthen Regulatory Mandate
- E-Business3 days ago
10 Percent of Nigerians Affected by Data Breaches since 2004
- Telecom3 days ago
MTN Commits $10Bn to Nigeria’s Digital Infrastructure
- News3 days ago
SERAP Challenges CBN to Publish Local Government Allocations
- E-Financial3 days ago
SEC Intensifies Fight Against Ponzi Schemes With Market
- Telecom2 days ago
Nigeria to Receive $3Bn Telecoms Infrastructure in June – Minister