Connect with us

Telecom

Ransomware Recovery Cost Reaches Nearly $2 Million- Sophos Survey Shows

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, today announced the findings of its global survey, “The State of Ransomware 2021,” which reveals that the average total cost of recovery from a ransomware attack has more than doubled in a year, increasing from $761,106 in 2020 to $1.85 million in 2021.

The average ransom paid is $170,404. The global findings also show that only 8% of organizations managed to get back all of their data after paying a ransom, with 29% getting back no more than half of their data.

The survey polled 5,400 IT decision makers in mid-sized organizations in 30 countries across Europe, the Americas, Asia-Pacific and Central Asia, the Middle East, and Africa.

While the number of organizations that experienced a ransomware attack fell from 51% of respondents surveyed in 2020 to 37% in 2021, and fewer organizations suffered data encryption as the result of a significant attack (54% in 2021 compared to 73% in 2020), the new survey results reveal worrying upward trends, particularly in terms of the impact of a ransomware attack.

“The apparent decline in the number of organizations being hit by ransomware is good news, but it is tempered by the fact that this is likely to reflect, at least in part, changes in attacker behaviors,” said Chester Wisniewski, principal research scientist, Sophos. “We’ve seen attackers move from larger scale, generic, automated attacks to more targeted attacks that include human hands-on-keyboard hacking. While the overall number of attacks is lower as a result, our experience shows that the potential for damage from these more advanced and complex targeted attacks is much higher. Such attacks are also harder to recover from, and we see this reflected in the survey in the doubling of overall remediation costs.”

The main findings of the State of Ransomware 2021 global survey include:

· The average cost of remediating a ransomware attack more than doubled in the last 12 months. Remediation costs, including business downtime, lost orders, operational costs, and more, grew from an average of $761,106 in 2020 to $1.85 million in 2021. This means that the average cost of recovering from a ransomware attack is now 10 times the size of the ransom payment, on average

· The average ransom paid was $170,404. While $3.2 million was the highest payment out of those surveyed, the most common payment was $10,000. Ten organizations paid ransoms of $1 million or more

· The number of organizations that paid the ransom increased from 26% in 2020 to 32% in 2021, although fewer than one in 10 (8%) managed to get back all of their data

“The findings confirm the brutal truth that when it comes to ransomware, it doesn’t pay to pay. Despite more organizations opting to pay a ransom, only a tiny minority of those who paid got back all their data,” said Wisniewski.

“This could be in part because using decryption keys to recover information can be complicated. What’s more, there’s no guarantee of success. For instance, as we saw recently with DearCry and Black Kingdom ransomware, attacks launched with low quality or hastily compiled code and techniques can make data recovery difficult, if not impossible.”

· More than half (54%) of respondents believe cyberattacks are now too advanced for their IT team to handle on their own

· Extortion without encryption is on the rise. A small, but important 7% said that their data was not encrypted, but they were held to ransom anyway, possibly because the attackers had managed to steal their information. In 2020, this figure was 3%

“Recovering from a ransomware attack can take years and is about so much more than just decrypting and restoring data,” said Wisniewski. “Whole systems need to be rebuilt from the ground up and then there is the operational downtime and customer impact to consider, and much more. Further, the definition of what constitutes a ‘ransomware’ attack is evolving. For a small, but significant minority of respondents, the attacks involved payment demands without data encryption.

“This could be because they had anti-ransomware technologies in place to block the encryption stage or because the attackers simply chose not to encrypt the data. It is likely that the attackers were demanding payment in return for not leaking stolen information online. A recent example of this approach involved the Clop ransomware gang and a known financially-motivated threat actor hitting around a dozen alleged victims with extortion-only attacks.

“In short, it is more important than ever to protect against adversaries at the door, before they get a chance to take hold and unfold their increasingly multi-faceted attacks. Fortunately, if organizations are attacked, they don’t have to face this challenge alone. Support is available 24/7 in the form of external security operations centers, human-led threat hunting and incident response services.”

The main findings of the State of Ransomware 2021 for Nigeria:

· 22% of respondents from Nigeria had experienced a ransomware attack in the last 12 months, compared to 53% in 2020

· 39% of respondents from Nigeria that weren’t hit by ransomware in the last 12 months but expect to be hit in the future, believe that ransomware attacks are getting increasingly hard to stop due to their sophistication

· 26% of respondents from Nigeria that weren’t hit by ransomware in the last 12 months but expect to be hit in the future, say it is hard to stop their users from compromising the organization’s security

Sophos recommends the following six best practices to help defend against ransomware and related cyberattacks:

1. Assume you will be hit. Ransomware remains highly prevalent. No sector, country or organization size is immune from the risk. It’s better to be prepared, but not hit, rather than the other way round

2. Make backups and keep a copy offline. Backups are the main method organizations surveyed used to recover their data after an attack. Opt for the industry standard approach of 3:2:1 (three sets of backups, using two different media, one of which is kept offline)

3. Deploy layered protection. As more ransomware attacks also involve extortion, it is more important than ever to keep adversaries out in the first place. Use layered protection to block attackers at as many points as possible across an estate

4. Combine human experts and anti-ransomware technology. The key to stopping ransomware is defense in depth that combines dedicated anti-ransomware technology and human-led threat hunting. Technology provides the scale and automation an organization needs, while human experts are best able to detect the tell-tale tactics, techniques and procedures that indicate an attacker is attempting to get into the environment. If you don’t have the skills in house, look at enlisting the support of a specialist cybersecurity company – Security Operation Centers (SOCs) are now realistic options for organizations of all sizes

5. Don’t pay the ransom. Easy to say, but far less easy to do when an organization has ground to a halt due to a ransomware attack. Independent of any ethical considerations, paying the ransom is an ineffective way to get data back. If you do decide to pay, bear in mind that the adversaries will restore, on average, only two-thirds of your files

6. Have a malware recovery plan. The best way to stop a cyberattack from turning into a full breach is to prepare in advance. Organizations that fall victim to an attack often realize they could have avoided significant financial loss and disruption, if they had an incident response plan in place

The State of Ransomware 2021 survey report is available in full on Sophos.com.

The State of Ransomware 2021 survey was conducted by Vanson Bourne, an independent specialist in market research, in January and February 2021. The survey interviewed 5,400 IT decision makers in 30 countries, in the US, Canada, Brazil, Chile, Colombia, Mexico, Austria, France, Germany, the UK, Italy, the Netherlands, Belgium, Spain, Sweden, Switzerland, Poland, the Czech Republic, Turkey, Israel, UAE, Saudi Arabia, India, Nigeria, South Africa, Australia, Japan, Singapore, Malaysia, and the Philippines. All respondents were from organizations with between 100 and 5,000 employees.

Sophos Intercept X protects users by detecting the actions and behaviors of ransomware and other attacks.

 


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

X Suspends Twitter Account for Rules Violation

Published

on

Kindly share this post

X, the social media platform formerly known as Twitter, has suspended the @Twitter account, replacing its profile with a standard notice citing violation of platform rules.

X Suspends Twitter Account for Rules Violation

Musk

The action, which occurred on Sunday, January 11, left users encountering the handle greeted by a bold “Account Suspended” message on a black screen, with no details provided on the specific rules broken or the duration of the suspension.

The development has sparked widespread confusion and nostalgia among users, given that Elon Musk rebranded Twitter to X in July 2023, approximately six months after acquiring the platform for $44 billion in late 2022.

The @Twitter handle had remained dormant since before Musk’s takeover, serving as a legacy remnant of the platform’s original branding, and its suspension appears to mark the final erasure of the Twitter name amid X’s ongoing efforts to combat spam, impersonation, and rule violations.

X’s official statement on the suspended page simply reads: “X suspends accounts that violate our rules,” without offering an appeal process or further explanation, unlike standard user suspensions.

Public reactions on social media ranged from humorous laments of “RIP Twitter” to speculation that the move resulted from automated moderation or a deliberate cleanup of legacy trademarks.

xAI’s Grok AI described it as a purposeful retirement of outdated elements rather than a genuine infraction, while neither Elon Musk nor X spokespeople issued any comment as of Monday morning.

This incident underscores the evolving identity of the platform under Musk’s ownership, which also saw a domain shift to x.com in 2024, further distancing it from its Twitter roots.

Industry observers note that while the suspension aligns with X’s stricter enforcement policies, the lack of transparency has fueled debates on consistency in applying rules to high-profile legacy accounts.


Kindly share this post
Continue Reading

Telecom

FG Plans to Invest $460m World Bank Loan in Fibre Infrastructure

Published

on

Kindly share this post

Federal Government plans to channel $460m World bank loan, representing about 92 per cent of a $500m, into the proposed fibre infrastructure company set up to deploy 90,000 kilometres of climate-resilient broadband fibre across the country.

This is contained in the Financing Agreement for the Building Resilient Digital Infrastructure for Growth project between the Federal Government and the International Development Association, the concessional lending arm of the World Bank.

Under the agreement, the World Bank approved a $500m concessional credit to support Nigeria’s drive to expand access to high-quality and climate-resilient broadband internet in unserved and underserved areas.

Of this amount, $460m is earmarked specifically for equity financing and capitalisation of a new Project Company that will drive the fibre rollout. The remaining $40m will cover goods, works, consulting and non-consulting services, training, operating costs, and the refund of a preparation advance used to develop the project framework.

According to the document, the proposed Project Company will be established “as an independent, majority privately-owned and managed special purpose vehicle-joint venture with the objective of the deployment of 90,000 kilometres of climate-resilient fibre infrastructure following a phased approach, limited to provision of wholesale, open access services to licensed telecommunications operators, and management of associated investments, including the carrying out of preparatory activities and provision of transaction advisory services, and provision of equity financing in and capitalization of the Project Company.”

The Federal Government will participate in the company as a shareholder through the Ministry of Finance Incorporated, which manages the government’s investment interests. However, the agreement explicitly caps the government’s shareholding at a maximum of 49 per cent, ensuring that the company remains majority privately owned.

The $460m equity injection is broken into four tranches, tied to strict performance and operational milestones. The first tranche of $150m will be released once the Project Company is incorporated as a joint venture with private partners selected through a process acceptable to the World Bank, and after its memorandum, articles of association, and shareholding agreement are approved.

A second tranche of $100m will only be disbursed after the company adopts fiduciary and administrative procedures approved by the lender and completes at least 5,000 kilometres of fibre deployment. The third tranche of $100m is linked to the completion of an additional 20,000 kilometres of network construction.

The final tranche of $110m will be released after the company launches wholesale open-access services through a published reference offer and completes a further 40,000 kilometres of fibre deployment, bringing the total rollout to at least 65,000 kilometres before the final equity drawdown.

Once each tranche is withdrawn, the agreement requires that the funds be transferred to the Project Company’s dedicated account within five working days, showing the equity nature of the financing rather than traditional budgetary spending.

The project will be implemented under the oversight of the Federal Ministry of Communications, Innovation and Digital Economy, and the Federal Ministry of Finance will receive semi-annual progress updates.

A dedicated Project Implementation Unit will manage day-to-day execution, with overall financial management handled by the Federal Project Financial Management Department in the Office of the Accountant General of the Federation.

Beyond the fibre rollout, the project also includes technical assistance to federal government agencies to support the use of high-quality broadband in targeted areas, as well as funding for project management, monitoring and evaluation, environmental and social safeguards, grievance redress mechanisms and independent audits.

The agreement places strong emphasis on environmental and social standards, requiring compliance with an Environmental and Social Commitment Plan. It also mandates the establishment of an accessible grievance mechanism for affected communities and strict reporting obligations to the World Bank.


Kindly share this post
Continue Reading

Telecom

Court Dismisses N1Bn Suit against MTN, Awards N3m Costs

Published

on

Kindly share this post

A Federal High Court in Lagos has dismissed a N1 billion lawsuit filed against MTN Nigeria Communications Plc by Walls and Gates Ltd and Okechukwu Udeichi, its managing director, over alleged copyright infringement, breach of confidentiality, and trademark violations arising from MTN’s 20th anniversary promotional campaign.

Court Dismisses N1Bn Suit against MTN, Awards N3m Costs

Delivering judgement on Tuesday, Justice Ayokunle Faji held that the plaintiffs failed to establish any legally protectable right in their proposal titled “20 for 20”, describing the action as frivolous, speculative, and vexatious.

The court dismissed the suit in its entirety and awarded N3m in costs against the plaintiffs.

The plaintiffs instituted the action under Suit No. FHC/L/CS/1935/2021, alleging that MTN unlawfully used their “20 for 20” proposal, which they claimed to have submitted to the telecoms company on 17 September 2019, ahead of MTN’s 20th anniversary celebration in 2021.

They argued that MTN’s anniversary promotion, in which 20 sport utility vehicles were given out to subscribers, emanated from their proposal and amounted to infringement of their copyright, confidential information, and trademark.

Based on those claims, the plaintiffs sought N1bn in damages or, alternatively, an order directing MTN to render an account of revenue generated from the promotion and remit 50 per cent of it to them.

MTN denied the allegations, contending that the proposal was an unsolicited business idea that imposed no contractual or confidential obligation on the company.

The telecoms firm maintained that its 20th anniversary programme was independently developed and that the plaintiffs’ document was merely a general business concept not protected under Nigerian copyright law.

MTN further argued that the plaintiffs lacked a valid registered trademark and failed to demonstrate access to or copying of any protected expression.

In resolving the dispute, Justice Faji noted that the plaintiffs conceded during oral submissions that they failed to prove their claim of trademark infringement, leaving only the issues of alleged breach of confidentiality and copyright infringement for determination.

On confidentiality, the court held that no confidential relationship existed between the parties.

Justice Faji observed that before sending the proposal to MTN, the plaintiffs had already submitted it to the Nigerian Copyright Commission and relied on it for a trademark application, thereby placing the document in the public domain.

The judge further noted that after transmitting the proposal to MTN, the plaintiffs admitted circulating it to other organisations, which extinguished any claim to confidentiality.

According to the court, MTN had no obligation to respond to an unsolicited proposal in the absence of a contractual, fiduciary, or business relationship, or a non-disclosure agreement.

On the allegation of copyright infringement, the court held that registration with the Nigerian Copyright Commission does not confer copyright, stressing that Nigerian law protects expressions, not ideas or business concepts.

Justice Faji ruled that the plaintiffs’ “20 for 20 Millennium Promotion” amounted to no more than an idea of rewarding customers during an anniversary celebration and lacked the originality and intellectual effort required for copyright protection.

He described the proposal as a bare business concept devoid of original qualities capable of attracting copyright. The judge also held that MTN’s use of the phrase “MTN 20th Anniversary” was a natural description of an anniversary event and did not originate from any protectable work of the plaintiffs.

He further relied on evidence showing that MTN affiliates in other jurisdictions had implemented similar anniversary reward ideas before the plaintiffs’ proposal.

Justice Faji characterised the suit as a “gold-digging exercise” aimed at forcing a commercial relationship on MTN. He criticised the plaintiffs for using MTN’s trademark in their proposal without authorisation and then seeking to ground a billion-naira claim on the same document, adding that the case wasted valuable judicial time.

While affirming that citizens should have access to the courts, the judge stressed that such access must be limited to suits with prima facie merit.

He therefore awarded N3m in costs in favour of MTN, holding that costs must follow the event.

The court accordingly dismissed the suit in its entirety and ordered the plaintiffs to pay the awarded costs to the defendant.

Credit: Punch


Kindly share this post
Continue Reading

Trending