Connect with us

General News

Preventing Your Network From Becoming a Botnet

Published

on

Kindly share this post

By Harish Chib, vice president, Middle East & Africa, Sophos

 

“Not having sufficient network protection may allow your organization’s devices to be part of the next cyber-attack”

Botnets are large volumes of distributed networked computers and devices that have been taken over by a cybercriminal.

Botnets, also referred to as bots, are usually taken over by malicious software to enable remote control by a threat actor.

They are set up and developed by a hacker to provide a powerful and dark, cloud computing network to conduct cyberattacks of a criminal nature.

The growth in mobile and network devices has created large scale social and productivity benefits for us. We can now remotely access computers, security systems, cameras, appliances, and a growing list of devices, interconnected with cloud. Collectively this is referred to as the Internet of Things or IoT.

 A worrying aspect of the growth of Internet-connected devices is the absence of basic security precautions.

Most end users rarely change factory defaults, which can be exploited by hackers to take control of the devices.

Another door for cybercriminals to take control of connected devices is called the back-door entry. This is a manufacturer’s access to the device through an undisclosed connection, used for remote testing and updates.

This large distributed, network of computers, under the control of threat actors, represents an aggregation of computing power that can be used for a devastating effect.

 

Inside the network

Malicious software designed to exploit IoT devices are usually not sophisticated. They operate by scanning network ports, looking for access opportunities, and gaining access through default credentials, or brute-force hacking to gain access.

This software is much easier to defend against, as it merely requires configuring the network firewall protection devices.

Similar to other malware, botnets can enter an organization through multiple points of entry. This includes email attachments, hacked web sites, connected sensors and other IoT devices, and USB sticks.

Once a malicious software has entered an organization, it will call home – the hackers command and control server – to register its success in gaining entry and to request further instructions.

It may be told to lie low and wait, or be instructed to move laterally on the network to infect other devices, or to participate in an attack.

This attempt by the malicious software to call-home represents an opportunity to detect infected systems on the network that are becoming part of a botnet.

 

Once an attack has got underway, the attack itself can be difficult to detect. From a network traffic point of view, the device will simply be sending emails out as spam, transferring data or mining bitcoins, or performing DNS lookups and a variety of other requests, usually seen in large scale attacks. In isolation, none of these types of activities are noteworthy.

 

Building protection

The most important ingredient for effective protection from botnets is the organization’s network firewall. The following can help to get best protection from the firewall.

 

· Advanced Threat Protection can identify botnets already operating on the network. Ensure the firewall has malicious traffic detection, botnet detection, and command and control, call-home traffic detection.

· Intrusion prevention can detect hackers attempting to penetrate and take over the network. Ensure the firewall has next-gen intrusion prevention system that is capable of identifying attack patterns inside the network.

· Sandboxing can pick up the latest malicious software before it reaches the organization’s computers. Ensure the organization firewall offers advanced sandboxing that can identify suspicious web or email files and activate them in a safe environment.

· Effective web and email protection can prevent malware from getting onto the network. Ensure the firewall has behavioral-based web protection that can simulate JavaScript code in web content to determine behavior before it reaches the browser.

· Ensure the firewall has top-shelf anti-spam and antivirus technology to detect malware in email attachments.

· Web Application Firewall can protect servers, devices, and business applications from being hacked. Ensure the firewall offers WAF protection for any system that requires remote access.

Best-practices

· Change the password for all your network devices to a unique complex password, and use a password manager if necessary.

·  Minimize use of IoT devices and update all essential connected devices. Also disconnect unnecessary devices from the network and upgrade older devices to newer models.

·  Avoid using IoT devices that require ports to opened in the network firewall or router to provide remote access. Instead, use cloud-based devices that connect only to the cloud provider’s servers and do not offer direct remote access.

·  Do not enable UPnP on your firewall or router. This protocol enables devices to open ports on the firewall on demand without your knowledge increasing the surface area of attack.

· Use secure VPN technologies to manage your connected devices remotely.

 

Botnets have a massive slowdown effect on the global Internet traffic. They can also have a devastating impact on an organization, if the objective of the attack is to steal sensitive information. Even if the botnet operating on the organization’s network is not after its data, it could be using devices and network resources to cause devastating harm to another organization.

 

Do not let your network become part of the next global botnet attack.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

General News

IHS Nigeria, Osun State partner to transform technical education

Published

on

Kindly share this post

IHS Nigeria has partnered with the Osun State Government on Osun Teacher-Shift 2025, a programme aimed at transforming technical and vocational school teachers into digital-ready educators capable of driving innovation in classrooms.

The IHS Nigeria sponsored initiative, implemented by Focus Teens Foundation in collaboration with the Osun State Board of Technical and Vocational Education, targets about 200 teachers across the State’s nine technical colleges. The training will run in batches over a two-day period, with participants expected to acquire modern skills, and innovative teaching techniques.

Speaking at the opening ceremony which held in Osogbo yesterday, Titilope Oguntuga, Director of Sustainability at IHS Nigeria, explained that the project was developed to prepare teachers for the opportunities and challenges of a fast-evolving world.

She said, “Today is not just the launch of a programme — it is the beginning of a movement. This is more than training, it is a mindset shift. It is about rethinking how we prepare teachers, students, and our communities for the opportunities and challenges of a fast-evolving world.”

Oguntuga emphasised that teachers remain at the centre of national development but face increasing demands to inspire creativity, nurture innovation, and equip young people with practical and technology-driven skills.

She noted that the initiative also reflects IHS Nigeria’s four sustainability pillars — ethics and governance, environment and climate change, people and communities, and education and economic growth.

The IHS official said, “education remains the strongest catalyst for national development. But we cannot achieve this without empowering the people who will empower the next generation. With this programme, teachers and beneficiaries from the nine technical colleges will begin to think more innovatively and incorporate new systems that support STEM for the advancement of our nation.”

Oguntuga added that each school would be given routers with one year subscription.

Adedapo Ademola-Adesina, Special Adviser to the Governor on Technical and Vocational Education, noted that the State Government believes in private sector collaboration to achieve its goals for technical and vocational education, leading to the partnership with IHS Nigeria.

“We must begin by changing the mindset of our teachers. They are the ones who shape future leaders. That is why we tagged the program “Osun Teacher-Shift 2025” — shifting from the old ways to new digital teaching”, he said.

Also speaking, Sunday Eluwole, the Osun State Commissioner for Education, acknowledged that the training was both timely and necessary, saying; “this is the 21st century, and Nigeria cannot be left behind. Our schools, teachers, and classrooms must be digitalised. Teachers must first be trained in digital methods before they can pass the knowledge on to students.”

Eluwole added that Osun State, which has the highest number of technical colleges in the Country, is committed to making its schools models of digital and vocational learning.

Earlier, Muritala Jimoh, Permanent Secretary, Ministry of Education, said that Osun State teachers are ready to shift. Jimoh noted that Governor Ademola Adeleke is prioritising teachers’ welfare in the state, hence their readiness to embrace the shift.

He called on teachers to reciprocate government’s efforts by making their minds flexible to change.


Kindly share this post
Continue Reading

General News

Passengers Must Switch Off Phones during Flights — NCAA

Published

on

Kindly share this post

Nigeria Civil Aviation Authority (NCAA) has directed all airlines operating in the country to ensure that passengers completely switch off their mobile phones during aircraft take-off and landing.

Passengers Must Switch Off Phones during Flights — NCAA

Michael Achimugu, director of Public Affairs and Consumer Protection, NCCA, disclosed the directive in a post on X on Tuesday.

He said the measure was part of a harmonisation of existing rules on the use of electronic devices onboard.

“Henceforth, the regulation per phones and other electronic devices in Nigeria has been unified: ALL PHONES MUST BE SWITCHED OFF DURING THE CRITICAL ASPECTS OF TAKE-OFF AND LANDING,” Achimugu wrote.

“All airlines must amend their security programmes to reflect this if different in their current programmes. No more airplane mode until regulations are reviewed to reflect evolving technological situations.”

The directive means that all airlines will have to adjust their operational manuals and cabin crew instructions to enforce the policy.

Reactions to the announcement have been mixed on social media, with some Nigerians questioning the relevance of the rule in light of advances in aircraft technology and onboard connectivity.

 

 

 


Kindly share this post
Continue Reading

General News

TETFUND Tasks Tertiary Institutions on Use of ICT for Teaching

Published

on

Kindly share this post

Sonny Echono, executive secretary, Tertiary Education Trust Fund (TETFund), has called on Nigerian tertiary institutions to urgently embrace technology in teaching, research, and administration, warning that billions of naira already invested in ICT infrastructure risk being wasted due to underutilization.

TETFUND Tasks Tertiary Institutions on Use of ICT for Teaching

Echono made the call in Abuja, Nigeria while delivering remarks at a 2-Day Workshop on Blackboard/TERAS Adoption and Usage in Beneficiary Institutions, organized by TETFund for Registrars, Bursars, Directors of Academic Planning and ICT and Thesis Project Repository Managers of beneficiary institutions.

He lamented that despite TETFund’s early investment in digital learning platforms such as the Tertiary Education, Research, Applications and Services, TERAS, many universities, polytechnics, and colleges of education were still lagging behind in ICT adoption.

According to him, Nigeria’s rapidly growing population and limited availability of classrooms make technology the only viable pathway to expanding access to quality education.

“We are no longer confined to the four walls of classrooms. With just an android phone or a device, students should be able to access content, participate in learning, and acquire skills. There is no alternative to technology if we must prepare our youths for the opportunities ahead,” Echono said.

He decried the slow pace of transition to digital platforms in many institutions, some of which still send hardcopy requests to TETFund despite clear directives for e-submissions.

The TETFund boss stressed that robust and regularly updated institutional websites should be a minimum requirement in the digital age, describing many schools’ online presence as “embarrassingly outdated.”

Echono also cited the successes recorded during the COVID-19 lockdown when TETFund partnered states, the Nigeria Television Authority, NTA, and radio stations to broadcast WAEC syllabus-based lessons.

According to him, that year produced one of Nigeria’s best WAEC results, indicating the potential of technology to revolutionise learning.

He expressed concern that Nigeria now ranks 189th globally and 25th in Africa in education competitiveness, behind smaller countries like Rwanda and Mauritius that have leveraged ICT to transform their systems.

“Government has done its part by providing the infrastructure. But when equipment is procured and platforms created and they are not being used, that is the very definition of waste,” he warned.

The TETFund boss urged heads of institutions to champion the use of digital platforms like TERAS by lecturers and students, stressing that over time, more than half of TETFund’s education investments would have to go into ICT rather than physical infrastructure.

Echono also linked Nigeria’s underdevelopment to its failure to leverage technology in sectors such as oil, agriculture, and manufacturing, contrasting the country’s struggles with China’s rapid transformation through deliberate investment in knowledge and innovation.

“We can do the same if we decide to do the right thing. The right thing starts with our education system. The building block of every nation is knowledge,” he said.

He appealed to tertiary institutions to seize the opportunity, populate their websites with relevant data, and ensure students and staff are fully onboarded onto TERAS platform.

Earlier, Mr. Joseph Odo, director of ICT, TETFund, said interactive sessions at the workshop were designed to deepen understanding of the Fund’s digital platforms and improve collaboration among beneficiary institutions.

“This is part of our engagements with key stakeholders, registrars, librarians, ICT directors, repository managers, and academic planners, to ensure that everyone understands the interventions we are providing. The world is moving fast technology-wise, and we cannot afford to be left behind,” Odo said.

He explained that the sessions, which will hold across all six geopolitical zones, are focused on strengthening the use of TETFund-funded learning platforms, which aggregate data for planning and improve teaching, research, and learning outcomes.

Odo added that TERAS is evolving into “an educational lifestyle” that caters to students, lecturers, administrators, and even government planners.

 


Kindly share this post
Continue Reading

Trending