E-Business
Ransomware Hit 71Per Cent of Nigerian Organizations – Sophos’ Annual State of Ransomware Survey Reveals
Sophos, a global leader in next-generation cybersecurity, has released its annual international survey and review of real-world ransomware experiences in the State of Ransomware 2022.
Chester Wisniewski, principal research scientist at Sophos.
The report shows that 71% of Nigerian organizations surveyed were hit with ransomware in 2021, up from 22% in 2020. Forty-four percent of the organizations that had data encrypted paid the ransom to get their data back, even if they had other means of data recovery, such as backups.
The report summarizes the impact of ransomware on 5,600 mid-sized organizations in 31 countries across Europe, the Americas, Asia-Pacific and Central Asia, the Middle East, and Africa.
“The survey shows that, globally, the proportion of victims paying the ransom continues to increase, even when they may have other options available,” said Chester Wisniewski, principal research scientist at Sophos.
“There could be several reasons for this, including incomplete backups or the desire to prevent stolen data from appearing on a public leak site. In the aftermath of a ransomware attack there is often intense pressure to get back up and running as soon as possible.
“Restoring encrypted data using backups can be a difficult and time-consuming process, so it can be tempting to think that paying a ransom for a decryption key is a faster option.
“It’s also an option fraught with risk. Organizations don’t know what the attackers might have done, such as adding backdoors, copying passwords and more. If organizations don’t thoroughly clean up the recovered data, they’ll end up with all that potentially toxic material in their network and potentially exposed to a repeat attack.”
The main findings of the State of Ransomware 2022 global survey from the Nigerian respondents, which covers ransomware incidents experienced during 2021, as well as related cyber insurance issues, include:
· More victims are paying the ransom – In 2021, 44% of organizations that had data encrypted in a ransomware attack paid the ransom
· The impact of a ransomware attack can be immense – The average cost to recover from the most recent ransomware attack in 2021 was US$3.43 million. It took on average one month to recover from the damage and disruption. Ninety-seven percent of organizations said the attack had impacted their ability to operate, and 96% of the victims said they had lost business and/or revenue because of the attack
· Many organizations rely on cyber insurance to help them recover from a ransomware attack – 81% of mid-sized organizations had cyber insurance that covers them in the event of a ransomware attack – and, in 97% of incidents, the insurer paid some or all the costs incurred
· Ninety-one percent of those with cyber insurance said that their experience of getting it has changed over the last 12 months, with higher demands for cybersecurity measures, more complex or expensive policies and fewer organizations offering insurance protection
“The findings suggest we may have reached a peak in the evolutionary journey of ransomware, where attackers’ greed for ever higher ransom payments is colliding head on with a hardening of the cyber insurance market as insurers increasingly seek to reduce their ransomware risk and exposure,” said Wisniewski.
“In recent years, it has become increasingly easy for cybercriminals to deploy ransomware, with almost everything available as-a-service. Second, many cyber insurance providers have covered a wide range of ransomware recovery costs, including the ransom, likely contributing to ever higher ransom demands.
“However, the results indicate that cyber insurance is getting tougher and in the future ransomware victims may become less willing or less able to pay sky high ransoms. Sadly, this is unlikely to reduce the overall risk of a ransomware attack.
“Ransomware attacks are not as resource intensive as some other, more hand-crafted cyberattacks, so any return is a return worth grabbing and cybercriminals will continue to go after the low hanging fruit.”
Sophos recommends the following best practices to help defend against ransomware and related cyberattacks
1. Install and maintain high-quality defenses across all points in the organization’s environment. Review security controls regularly and make sure they continue to meet the organization’s needs
2. Proactively hunt for threats to identify and stop adversaries before they can execute their attack – if the team lacks the time or skills to do this in house, outsource to a Managed Detection and Response (MDR) specialist
3. Harden the IT environment by searching for and closing key security gaps: unpatched devices, unprotected machines, open RDP ports, etc. Extended Detection and Response (XDR) solutions are ideal for this purpose
4. Prepare for the worst. Know what to do if a cyber incident occurs and keep the plan updated
5. Make backups, and practice restoring from them so that the organization can get back up and running as soon as possible, with minimum disruption
The Central Bank of Nigeria (CBN) has affirmed the capitalisation of Alpha Morgan Bank, marking an important milestone in the bank’s growth journey and reinforcing its commitment to building a strong, resilient, and future-ready financial institution.
This affirmation reflects the bank’s adherence to regulatory requirements and its strategic focus on strengthening its capital base to support sustainable growth, innovation and improved service delivery to customers.
With this milestone, Alpha Morgan Bank is well positioned to continue expanding its footprint with its 14 approved branches across different states, while deepening inclusivity and enhancing the range of banking solutions available to individuals, businesses, and institutional clients nationwide.
Commenting on the development, the Managing Director of Alpha Morgan Bank, Mr. Ade Buraimo, expressed the readiness of the bank in ensuring compliance with regulatory requirement, good governance framework while delivering satisfying banking along the long-term vision of the bank to become the best bank to work and strong financial institution to reckon with.
He said: “Capitalisation is more than a regulatory requirement; it is an opportunity to strengthen the institution for the future. The affirmation of Alpha Morgan Bank capitalisation reflects the work we have done to build a solid capital foundation that allows us to support businesses more effectively, expand financial access and continue delivering the level of service our customers expect.’’
According to him, Alpha Morgan Bank remains committed to maintaining strong corporate governance standards, sound risk management practices, and prudent financial management as it continues to support economic development and create long-term value for stakeholders.
“As Alpha Morgan Bank enters the next phase of its journey, the institution will continue to scale its operation, invest in technology, expand its branch network and digital banking presence, whilst delivering reliable and satisfying banking experiences to its growing customer base,” Buraimo added.
Mr Uche Ifeanyi, commissioner of Police in charge of the Nigeria Police Force National Cyber Crime Centre (NPF-NCCC), said on Friday that most cyber attacks occur because victims act out of ignorance.
He spoke in Abuja at the opening of an online cybercrime awareness campaign themed “Odogwu No Dey Hide Him Face,” organised to educate and empower communities about online safety and cyber hygiene.
“Studies reveal that the majority of cyber attacks are initiated or enabled by victims due to lack of knowledge.
“Personal information is invaluable and must be protected at all times.
“Just as we maintain physical health, we must also maintain a healthy digital lifestyle,” he added, stressing that simple cyber hygiene practices could greatly reduce the risk of becoming a victim.
He urged the public not to disclose confidential information to unauthorised persons and to use strong, unique passwords, enable multi-factor authentication, and apply security safeguards on digital devices.
“Keep personal information private, avoid suspicious links, and regularly update software or system patches,” he said, adding that antivirus programmes and firewalls were essential for online safety.
Ifeanyi warned against falling for “free gifts” online.
“If it sounds too good to be true, it most likely is fraud,” he said, advising caution with urgent or suspicious messages.
He also urged internet users to verify information before sharing to avoid spreading fake news, emphasising that cybercriminals could exploit everyone regardless of age, occupation, or social class.
Vincent Olatunji, director-general, National Data Protection Commission (NDPC), commended NPF-NCCC for its efforts and said the campaign theme was commendable.
He noted the importance of educating people on legitimate wealth and safe internet use.
Olatunji said that the fight against cybercrime required collective effort, warning that the risks were increasing daily as more people connected to the internet across Nigeria.
Kaspersky has introduced an update to its Automated Security Awareness Platform, adding full support for PDF and SCORM (Sharable Content Object Reference Model) – the industry-standard protocol for deploying and managing e-learning content.
The enhancement enables organisations to build fully customised cybersecurity training programmes that reflect their infrastructure, risk profile, and internal policies, while continuing to benefit from Kaspersky’s expert-driven security content and phishing simulations.
According to the Kaspersky report titled “Redefining the Human Factor in Cybersecurity”, employees responding to phishing attacks was one of the main causes of cyber incidents in companies worldwide, accounting for 21% of cases among other reasons.
At the same time, additional Kaspersky research reveals that social engineering attacks are predicted to increase more than any other type in the nearest future, with 87% of respondents believing that social engineering attacks will become even more effective due to the use of AI tools.
The new Kaspersky Automated Security Awareness Platform (Kaspersky ASAP) update directly addresses several persistent challenges such as reducing the number of human-related incidents, cutting time spent on managing training programmes, decreasing regulatory and compliance risks, and minimising potential legal or reputational damage stemming from cybersecurity breaches.
With the new SCORM support, the platform becomes even more flexible: companies can now upload, track, and manage their own SCORM-based learning materials directly within the system. In addition, companies can accelerate their programmes by using easier-to-create PDF-formats.
This allows organisations to tailor training to their specific technology stacks and emerging threats targeting their industry or region. Businesses that have already invested in third-party SCORM courses or internal learning development can now seamlessly reuse their existing modules, protecting their prior investments while strengthening their cybersecurity posture.
The combination of Kaspersky’s embedded content built on real cases uncovered by the company’s world-class experts with customers’ PDF materials or SCORM modules enables a true best-of-breed approach to human risk management.
Organisations can supplement Kaspersky’s up-to-date cyberattack scenarios with internal policies, unique workflows, and industry-specific lessons, ensuring training resonates with employees and reflects real operational challenges.
“Human behaviour remains one of the most unpredictable elements in cybersecurity and also one of the easiest for attackers to exploit. By adding SCORM support to Kaspersky Automated Security Awareness Platform, we’re giving organisations the flexibility to build training programmes that truly match their internal realities.
“Combined with Kaspersky’s expert-driven content and real-world attack data, this update empowers companies to create more adaptive, relevant, and impactful awareness programmes than ever before,” comments Svetlana Kalashnikova, Security Awareness expert at Kaspersky.
Africa Startups Raised $272m in Funding in February
First Asset Management Secures Ratings Upgrade
NICA Confers Professional Fellowship on Uche Uzoebo
Starlink Rolls Out V2 Satellites for Direct 5G Connectivity to Smartphones, Eyes Nigeria’s Rural Gaps
Madonna University Taps Tech Guru Adote for Strategic Board Role
Dr. Cairo Ojougboh Foundation Bolsters Nigeria’s Education Drive with ₦2.7m Student Support
Kaspersky Brings more Transparency to Threat Detection with New Hunt Hub
Kaspersky Discovers New Phishing Campaign Exploiting Google Tasks Notifications to Steal Corporate Credentials
esentry 2025 Report Shows Healthcare, Financial Services and Telecoms as Staging Grounds for Increased Cyberattacks in Africa
AfDB, UNDP Launch $10Bn AI Initiative for Africa
Telecom2 days agoDimension Data Nigeria Seals N20bn Bond Deal to Bridge Digital Infrastructure Gap
Telecom2 days agoFirst Batch of Nigerian Undergraduates Emerged in Airtel Africa Foundation Scholarships Programme
E-Business2 days agoCBN Affirms Alpha Morgan Bank’s Capitalisation
E-Financial2 days agoPolaris Bank Marks IWD2026 with Renewed Pledge to Women’s Empowerment
General News2 days agoMojisola Sayo-Kazeem Reflects on Leadership, Opportunity, Women in Tech @ IWD
General News2 days agoExperts Weigh Blockchain Option for Nigeria’s Elections Process
News2 days agoEFCC Seals Anti-Corruption Alliance with Anambra Security Chiefs, Traditional Rulers
General News14 hours agoZedvance Hits ₦96bn Lending Milestone, Eyes ₦250bn Target in 2026