General News
Preventing Your Network From Becoming a Botnet
By Harish Chib, vice president, Middle East & Africa, Sophos
“Not having sufficient network protection may allow your organization’s devices to be part of the next cyber-attack”
Botnets are large volumes of distributed networked computers and devices that have been taken over by a cybercriminal.
Botnets, also referred to as bots, are usually taken over by malicious software to enable remote control by a threat actor.
They are set up and developed by a hacker to provide a powerful and dark, cloud computing network to conduct cyberattacks of a criminal nature.
The growth in mobile and network devices has created large scale social and productivity benefits for us. We can now remotely access computers, security systems, cameras, appliances, and a growing list of devices, interconnected with cloud. Collectively this is referred to as the Internet of Things or IoT.
A worrying aspect of the growth of Internet-connected devices is the absence of basic security precautions.
Most end users rarely change factory defaults, which can be exploited by hackers to take control of the devices.
Another door for cybercriminals to take control of connected devices is called the back-door entry. This is a manufacturer’s access to the device through an undisclosed connection, used for remote testing and updates.
This large distributed, network of computers, under the control of threat actors, represents an aggregation of computing power that can be used for a devastating effect.
Inside the network
Malicious software designed to exploit IoT devices are usually not sophisticated. They operate by scanning network ports, looking for access opportunities, and gaining access through default credentials, or brute-force hacking to gain access.
This software is much easier to defend against, as it merely requires configuring the network firewall protection devices.
Similar to other malware, botnets can enter an organization through multiple points of entry. This includes email attachments, hacked web sites, connected sensors and other IoT devices, and USB sticks.
Once a malicious software has entered an organization, it will call home – the hackers command and control server – to register its success in gaining entry and to request further instructions.
It may be told to lie low and wait, or be instructed to move laterally on the network to infect other devices, or to participate in an attack.
This attempt by the malicious software to call-home represents an opportunity to detect infected systems on the network that are becoming part of a botnet.
Once an attack has got underway, the attack itself can be difficult to detect. From a network traffic point of view, the device will simply be sending emails out as spam, transferring data or mining bitcoins, or performing DNS lookups and a variety of other requests, usually seen in large scale attacks. In isolation, none of these types of activities are noteworthy.
Building protection
The most important ingredient for effective protection from botnets is the organization’s network firewall. The following can help to get best protection from the firewall.
· Advanced Threat Protection can identify botnets already operating on the network. Ensure the firewall has malicious traffic detection, botnet detection, and command and control, call-home traffic detection.
· Intrusion prevention can detect hackers attempting to penetrate and take over the network. Ensure the firewall has next-gen intrusion prevention system that is capable of identifying attack patterns inside the network.
· Sandboxing can pick up the latest malicious software before it reaches the organization’s computers. Ensure the organization firewall offers advanced sandboxing that can identify suspicious web or email files and activate them in a safe environment.
· Effective web and email protection can prevent malware from getting onto the network. Ensure the firewall has behavioral-based web protection that can simulate JavaScript code in web content to determine behavior before it reaches the browser.
· Ensure the firewall has top-shelf anti-spam and antivirus technology to detect malware in email attachments.
· Web Application Firewall can protect servers, devices, and business applications from being hacked. Ensure the firewall offers WAF protection for any system that requires remote access.
Best-practices
· Change the password for all your network devices to a unique complex password, and use a password manager if necessary.
· Minimize use of IoT devices and update all essential connected devices. Also disconnect unnecessary devices from the network and upgrade older devices to newer models.
· Avoid using IoT devices that require ports to opened in the network firewall or router to provide remote access. Instead, use cloud-based devices that connect only to the cloud provider’s servers and do not offer direct remote access.
· Do not enable UPnP on your firewall or router. This protocol enables devices to open ports on the firewall on demand without your knowledge increasing the surface area of attack.
· Use secure VPN technologies to manage your connected devices remotely.
Botnets have a massive slowdown effect on the global Internet traffic. They can also have a devastating impact on an organization, if the objective of the attack is to steal sensitive information. Even if the botnet operating on the organization’s network is not after its data, it could be using devices and network resources to cause devastating harm to another organization.
Do not let your network become part of the next global botnet attack.
Payaza Africa, a payments infrastructure company in Africa, has strengthened its market position with two major rating milestones.
While rating firm, DataPro upgraded Payaza from A to AA-, Intelligent Africa upgraded the fintech firm to an A- investment-grade credit rating.
A statement by the company said the recognition, which marks its fourth credit rating, further validates Payaza’s financial strength, operational discipline, governance standards, and long-term strategic direction.
“The latest ratings build on Payaza’s growing track record of institutional credibility, reinforcing confidence in its business model, performance, and resilience. Together, they position the company as a stable, future-ready player within Africa’s financial services ecosystem and a brand with increasing relevance in the global fintech space,” the firm said.
Commenting on the feat, Seyi Ebenezer, chief executive officer of Payaza Africa, said: “This milestone is a strong affirmation of the work we have done to build Payaza on a foundation of discipline, trust, and long-term value creation. Receiving our latest rating sends a clear message that Payaza is not only growing, but growing with strength, structure, and sustainability.
“For us, this is bigger than recognition. It reflects our commitment to building a world-class institution that can compete globally while continuing to serve businesses and consumers across the continent with excellence.
“Over time, our ratings journey has reflected more than strong financial performance. It speaks to a business built on disciplined execution, prudent management, and the ability to scale responsibly in a dynamic market. This has helped us stand out not only as an innovator in digital payments but as a maturing financial institution with the operational depth to compete globally.
“These new ratings are expected to further strengthen Payaza’s standing with investors, regulators, partners, enterprise clients, and the wider financial community. In a sector where trust, resilience, and compliance are increasingly central to long-term success, independent ratings remain a powerful endorsement of a company’s ability to manage risk, meet obligations, and sustain growth,” he said.
Beyond the ratings, Payaza is also expanding its innovation footprint with the introduction of “Chat and Pay by Payaza,” a new payment feature that enables merchants accept payments and generate receipts for their customers directly from WhatsApp.
The company is also rolling out a new storefront solution for business owners, called Shopaza. The platform enables business owners and merchants to sell products and collect payments with greater ease. These additions reflect Payaza’s continued focus on building practical, accessible tools that simplify commerce for businesses and consumers alike.
With its latest ratings and new customer-focused solutions, Payaza is reinforcing its role as one of the brands helping shape the next chapter of trusted financial infrastructure in Africa and beyond.
Payaza is a leading payment infrastructure company providing seamless solutions for collections, payout, and embedded financial services. The company is focused on building reliable, scalable, and trusted payment systems that support businesses and drive financial access globally.
Economic and Financial Crimes Commission (EFCC,) has declared Halimat Adenike Tejuosho, a women leader of the City Boys Movement, wanted.
Halimat Adenike Tejuosho,
A notice issued by the EFCC on Monday via X said Tejuosho has been declared wanted over an alleged case of obtaining money by false pretence.
The notice was signed by Dele Oyewale, head of Media and Publicity for the EFCC.
The anti-graft agency called on members of the public with useful information about her whereabouts to contact any of its offices nationwide.
The Commission also urged the members of the public to reach out via its official phone lines or email, or report to the nearest police station or other security agencies.
Recall that the City Boy Movement recently appointed Tejuosho as the South-West Zonal Women Leader.
According to a statement signed by the Movement, Tejuosho is to provide strategic leadership and coordination for women-focused activities in the zone, driving political mobilization, civic engagement, and advocacy.
African Export-Import Bank (Afreximbank) has disclosed plans to finance three additional refineries in Nigeria as part of a broader push to reduce the country’s reliance on imported petroleum products and strengthen local refining capacity.
Denys Denya, senior executive vice president of the bank, made the disclosure on Monday during a virtual media briefing focused on the institution’s 2025 financial performance, crisis response initiatives, and long-term industrialisation strategy.
“We are also financing refining on the continent, which will alleviate the importation of refined products. We are not only supporting Dangote; we’re supporting three other refineries in Nigeria,” Denya said.
The briefing, which focused on the bank’s 2025 financial performance, crisis response initiatives, and industrialisation strategy, also featured a question-and-answer session with journalists across Africa.
Denya explained that the push into refining is driven by recent disruptions in global supply chains, particularly linked to tensions in the Middle East, which have raised the cost and complexity of fuel imports for African economies.
According to him, Afreximbank has adopted a dual approach of supporting immediate trade finance needs while investing in long-term productive capacity to reduce structural import dependence.
He said, “For import-dependent economies, the cost of import is very high… so we have taken a proactive approach of engaging with financial institutions on the continent to increase their facilities so they can issue high-value letters of credit.”
The bank’s intervention is backed by a $10bn Gulf Crisis Response Programme, designed to stabilise access to essential imports such as fuel, food, fertilisers, and pharmaceuticals, while also supporting sectors exposed to global shocks.
Denya noted that the facility is already seeing uptake from countries including Kenya, Ethiopia, and Tanzania, warning that demand could accelerate if geopolitical tensions persist.
Beyond short-term interventions, the Afreximbank executive stressed that financing refining projects across Nigeria and other African countries remains central to the bank’s long-term strategy of industrialisation and export development.
He said the bank’s support for large-scale industrial projects, including the Dangote Group refinery, reflects its commitment to reducing Africa’s reliance on imported refined products and strengthening regional value chains.
“Our support for industrialists who are making a difference on the continent is testimony to this approach. We will continue to champion projects that reduce Africa’s reliance on imported refined products,” he added.
Denya further disclosed that the bank is financing similar refining projects in Angola as part of a continent-wide push to achieve self-sufficiency in petroleum products.
The shift towards local refining, he explained, is also expected to improve macroeconomic stability by reducing foreign exchange pressures associated with fuel imports.
Data Privacy Ignorance Threatens National Security – DKIPPI
ALTON Urges Urgent Resolution of Regulatory Dispute over Airtime Loans
Court Strikes Out Suit against NCC over 50 Percent Tariff Hike
Despite Security Concerns, Reps Push for 18-Month Delay before Inactive Phone Numbers are Reassigned
UK Govt Launches Creative Fund to Boost Local Production in Nigeria’s Creative Industries
FG to Gift Nigerians over 100 Free TV Channels from May 15
Microsoft Revamps Copilot in Workplace AI Push
Dangote Refinery Debunks Speculations on IPO
What Adekunle Gold’s Support Means for ‘The Gathering on 100
NRS Takes Over Mineral Royalties Collection Under New Tax Laws
Telecom3 days agoElon Musk Launches XChat with Video Calling to Take on WhatsApp, Messenger
Telecom3 days agoMTN-Backed Pitchathon Awards ₦45m to Startups @‘Gathering on 100’ in Lagos
E-Financial3 days agoCRMI Backs CBN’s New Measures to Curb Fraud
Broadcasting3 days agoSERAP, NGE Sue NBC over Threat to Sanction Broadcasters
Telecom3 days agoHow NITDA Is Transforming Corps Members into Digital Millionaires
Telecom3 days agoGlobacom Unveils Two New TVCs Showcasing the Future of Connectivity
E-Financial3 days agoSystemically Weak Banks Put Nigeria’s $1Trillion Ambition at Risk
News3 days agoBOI MD, Olasupo Olusi, Charts Tech-Driven Path to Growth for Nigeria