General News
Preventing Your Network From Becoming a Botnet
By Harish Chib, vice president, Middle East & Africa, Sophos
“Not having sufficient network protection may allow your organization’s devices to be part of the next cyber-attack”
Botnets are large volumes of distributed networked computers and devices that have been taken over by a cybercriminal.
Botnets, also referred to as bots, are usually taken over by malicious software to enable remote control by a threat actor.
They are set up and developed by a hacker to provide a powerful and dark, cloud computing network to conduct cyberattacks of a criminal nature.
The growth in mobile and network devices has created large scale social and productivity benefits for us. We can now remotely access computers, security systems, cameras, appliances, and a growing list of devices, interconnected with cloud. Collectively this is referred to as the Internet of Things or IoT.
A worrying aspect of the growth of Internet-connected devices is the absence of basic security precautions.
Most end users rarely change factory defaults, which can be exploited by hackers to take control of the devices.
Another door for cybercriminals to take control of connected devices is called the back-door entry. This is a manufacturer’s access to the device through an undisclosed connection, used for remote testing and updates.
This large distributed, network of computers, under the control of threat actors, represents an aggregation of computing power that can be used for a devastating effect.
Inside the network
Malicious software designed to exploit IoT devices are usually not sophisticated. They operate by scanning network ports, looking for access opportunities, and gaining access through default credentials, or brute-force hacking to gain access.
This software is much easier to defend against, as it merely requires configuring the network firewall protection devices.
Similar to other malware, botnets can enter an organization through multiple points of entry. This includes email attachments, hacked web sites, connected sensors and other IoT devices, and USB sticks.
Once a malicious software has entered an organization, it will call home – the hackers command and control server – to register its success in gaining entry and to request further instructions.
It may be told to lie low and wait, or be instructed to move laterally on the network to infect other devices, or to participate in an attack.
This attempt by the malicious software to call-home represents an opportunity to detect infected systems on the network that are becoming part of a botnet.
Once an attack has got underway, the attack itself can be difficult to detect. From a network traffic point of view, the device will simply be sending emails out as spam, transferring data or mining bitcoins, or performing DNS lookups and a variety of other requests, usually seen in large scale attacks. In isolation, none of these types of activities are noteworthy.
Building protection
The most important ingredient for effective protection from botnets is the organization’s network firewall. The following can help to get best protection from the firewall.
· Advanced Threat Protection can identify botnets already operating on the network. Ensure the firewall has malicious traffic detection, botnet detection, and command and control, call-home traffic detection.
· Intrusion prevention can detect hackers attempting to penetrate and take over the network. Ensure the firewall has next-gen intrusion prevention system that is capable of identifying attack patterns inside the network.
· Sandboxing can pick up the latest malicious software before it reaches the organization’s computers. Ensure the organization firewall offers advanced sandboxing that can identify suspicious web or email files and activate them in a safe environment.
· Effective web and email protection can prevent malware from getting onto the network. Ensure the firewall has behavioral-based web protection that can simulate JavaScript code in web content to determine behavior before it reaches the browser.
· Ensure the firewall has top-shelf anti-spam and antivirus technology to detect malware in email attachments.
· Web Application Firewall can protect servers, devices, and business applications from being hacked. Ensure the firewall offers WAF protection for any system that requires remote access.
Best-practices
· Change the password for all your network devices to a unique complex password, and use a password manager if necessary.
· Minimize use of IoT devices and update all essential connected devices. Also disconnect unnecessary devices from the network and upgrade older devices to newer models.
· Avoid using IoT devices that require ports to opened in the network firewall or router to provide remote access. Instead, use cloud-based devices that connect only to the cloud provider’s servers and do not offer direct remote access.
· Do not enable UPnP on your firewall or router. This protocol enables devices to open ports on the firewall on demand without your knowledge increasing the surface area of attack.
· Use secure VPN technologies to manage your connected devices remotely.
Botnets have a massive slowdown effect on the global Internet traffic. They can also have a devastating impact on an organization, if the objective of the attack is to steal sensitive information. Even if the botnet operating on the organization’s network is not after its data, it could be using devices and network resources to cause devastating harm to another organization.
Do not let your network become part of the next global botnet attack.
General News
PalmPay Strengthens Data Protection Culture with Employee Privacy Workshop and Privacy Champions Programme
PalmPay has reinforced its commitment to responsible data governance and customer information protection through a specialised two-day data protection workshop for employees and the launch of its internal Privacy Champions Programme, an initiative designed to strengthen awareness, accountability, and responsible data handling across the organisation.
The initiative comes at a time when data protection is increasingly critical following recent reports of recorded 281,500 compromised user accounts in the first quarter of 2026, ranking 34th among the world’s most breached countries, according to a new quarterly data breach analysis by cybersecurity firm, Surfshark.
Facilitated by the Nigeria Data Protection Commission (NDPC) and leading Data Protection Compliance Organisation (DPCO) TechHive Advisory, the two-day workshop equipped employees with practical knowledge on privacy governance and data protection obligations, incident awareness, and the role each employee plays in protecting personal data.
The initiative forms part of PalmPay’s ongoing efforts to advance compliance with the Nigeria Data Protection Act (NDPA) 2023. It also reflects the company’s continued investment in safeguarding customer information and fostering a culture where privacy remains everyone’s responsibility.
The Privacy Champions Programme establishes a network of employee representatives across business functions who will support awareness, promote best practices and help strengthen the organisation’s privacy culture. By integrating privacy considerations into day-to–day activities the initiative aims to further enhance accountability and reinforces customer trust.
Speaking on the initiative, Managing Director of PalmPay, Chika Nwosu, stated: “At PalmPay, protecting customer information is fundamental to maintaining the trust our customers place in us everyday, and remains central to our operations. Statistically, 10 out of 100 Nigerians have been affected by data breaches.
Hence, we have a greater responsibility to ensure that personal information is collected, processed, stored, and protected responsibly. This specialised training reflects our continued investment in strengthening internal awareness and ensuring our teams remain equipped to uphold the highest standards of data privacy and protection.”
As a digital financial services platform serving millions of users, PalmPay reaffirmed that privacy and data protection remain embedded in its operational culture, with continuous investments in data governance practices.
PalmPay also encourages customers to remain vigilant and adopt safe digital practices, including protecting account credentials, exercising caution when sharing personal information online, and reporting suspicious activities promptly. The company maintains that building a secure digital ecosystem requires a shared commitment from organisations, regulators, and users alike.
President Bola Tinubu has appointed Dr Obi Adigwe as the National Coordinator of the newly established National Health Technology and Data Analytics Office (NHTDAO).
President Bola Tinubu
The appointment was announced in a statement issued on Friday.
The office, which will be domiciled in the Office of the Coordinating Minister of Health and Social Welfare, is expected to serve as the national coordination platform for Nigeria’s digital health system.
According to the statement, the NHTDAO will complement the work of existing health institutions by promoting coordination and interoperability across public and private healthcare systems, rather than replacing existing agencies.
It said the office would also drive the implementation of the National Digital Health Architecture approved by the National Council on Health in November 2025.
The statement said the initiative formed part of the Federal Government’s efforts to strengthen a secure, technology-driven and data-enabled healthcare system capable of improving service delivery nationwide.
Adigwe, who currently serves as the Director-General of the National Institute for Pharmaceutical Research and Development (NIPRD), has led several initiatives in science, pharmaceutical research, technology transfer and artificial intelligence.
He also coordinated major research funding initiatives, including a ¥300 million nanotechnology grant and an €18 million European Union research grant, while supporting the establishment of Africa’s first Active Pharmaceutical Ingredient (API) training facility through support from Afreximbank.
The statement said the new office would be guided by a steering committee co-chaired by the Coordinating Minister of Health and Social Welfare, Prof. Muhammad Ali Pate, and the Chairman of the Nigerian Economic Summit Group, Mr Olaniyi Yusuf.
Other members of the committee include the Minister of State for Health, Dr Iziaq Adekunle Salako; senior officials of the Federal Ministry of Health and Social Welfare; representatives of the National Information Technology Development Agency (NITDA); and heads of key health agencies, including the National Primary Health Care Development Agency (NPHCDA) and the National Health Insurance Authority (NHIA).
The committee will also include representatives of state commissioners for health from the six geopolitical zones, as well as industry and community stakeholders.
The Federal Government expressed optimism that the office would strengthen coordination across the health sector, accelerate digital transformation and improve healthcare delivery in line with the Renewed Hope Agenda.
The Gathering on 100 made its latest stop in Enugu over the weekend, bringing together hundreds of young Nigerians for a day of networking, fun, entertainment, and business opportunities.
The event, previously held in Lagos and Aba, arrived in Enugu as the city gains recognition as one of Nigeria’s emerging innovation and startup hubs. Recent ecosystem reports rank Enugu among the country’s leading startup cities. The South-East region now accounts for more than half of identified startups across the South-East and South-South, highlighting the region’s growing role in Nigeria’s entrepreneurial landscape.
A major highlight of the Enugu edition was the Pitch-a-thon competition, where three entrepreneurs received a combined ₦5 million in grants to support their business growth. More than 100 entrepreneurs applied for the competition, with 10 finalists selected to pitch before a panel of judges. At the end of the contest, Velas Global Nutrition Limited emerged as the overall winner, securing ₦2.5 million. Werxio, founded by Donatus Prince, received ₦1.5 million, while Whipcare Company was awarded ₦1 million.
These grants address a persistent funding challenge. According to the Small and Medium Enterprises Development Agency of Nigeria (SMEDAN), the country is home to over 39 million MSMEs, contributing nearly half of Nigeria’s Gross Domestic Product and accounting for about 84 per cent of employment nationwide. Despite this, access to finance remains a significant obstacle to business growth.
For Chizoba Osuji, founder of Velas Global Nutrition Limited, the funding facilitates the expansion of a business built on years of research. Her company processes indigenous crops into shelf-stable blends, supporting nutrition and local women smallholder farmers. “This is motivation to keep making Nigerians healthier through better food,” she remarked, noting the grant will fund semi-automated equipment to increase production capacity to 20 tonnes monthly.
She added that the ₦2.5 million grant would be used to acquire semi-automated equipment capable of increasing production capacity to about 20 tonnes monthly. Beyond increasing output, the expansion is expected to create additional opportunities for women smallholder farmers across the South-East who supply many of the raw materials used by the company.
Speaking on the initiative, MTN’s Regional General Manager (Sales), Callima Inino, represented by Peter Kajovo, said The Gathering on 100 was designed to provide young Nigerians with platforms to connect, learn, showcase their talents and access opportunities that can help them grow.“We want to encourage youths to live their best lives and have fuller expressions of themselves,” he said.
As the Enugu edition concludes, the energy of the South-East’s startup scene remains evident. The Gathering on 100 continues its nationwide tour, connecting more young founders with the visibility and support they need. Stay tuned to discover where the tour will land next as it moves to its next exciting location.
FCMB Turns Normal Banking into Rewards with New Mobile App Upgrade
Despite Warnings, FG Draws Down $1.5Bn as First Tranche of FAB $5Bn Loan Deal
PalmPay Strengthens Data Protection Culture with Employee Privacy Workshop and Privacy Champions Programme
Paystack Unveils AI-powered Payments Tools
NRS, CITN Deepen Partnership to Strengthen Tax Awareness
CBN Extends PoS Geo-Fencing Enforcement Deadline to August 2026
London Strengthens Global Investment Ties with Africa @ First Ever London-Africa Business Summit
FG Targets Alleged N3tn Capital Flight, Opens Airtime Credit Market to Nigerian Fintechs
Mobile Internet Gender Gap Widest in Africa – GSMA
Japan, UNESCO Boost Digital Learning in 15 CoEs with Donation of ICT Equipment
Telecom3 days ago6 Easy Ways to Enjoy the 2026 World Cup with Google and Gemini
News3 days agoMTN ASAP Enugu Stakeholders’ Conference Rallies More Action Against Youth Drug Abuse, Unveils N33Bn ASAP Impact
E-Financial3 days agoEFCC, CAC Raise Concerns over Unregistered PoS Operators
General News2 days agoTinubu appoints Adigwe to head National Health Technology, Data Analytics Office
E-Financial2 days agoNRS, CITN Deepen Partnership to Strengthen Tax Awareness
E-Financial3 days agoFG Proposes Africa-Wide Payment Card without Conversion through US Dollar
E-Financial3 days agoProvidus, Unity Bank Begin Integration Phase after Supreme Court Nod
E-Financial2 days agoPaystack Unveils AI-powered Payments Tools