Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

Telecom

Sophos Research Reveals that Attackers Are Using Log4Shell Vulnerability to Deliver Backdoors to Virtual Servers

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, has released findings on how attackers are using the Log4Shell vulnerability to deliver backdoors and profiling scripts to unpatched VMware Horizon servers, paving the way for persistent access and future ransomware attacks. A new technical paper, “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers,” details the tools and techniques used to compromise the servers and deliver three different backdoors and four cryptominers. The backdoors are possibly delivered by Initial Access Brokers.

Log4Shell is a remote code execution vulnerability in the Java logging component, Apache Log4J, which is embedded in hundreds of software products. It was reported and patched in December 2021.

“Widely used applications such as VMware Horizon that are exposed to the internet and need to be manually updated, are particularly vulnerable to exploitation at scale,” said Sean Gallagher, senior security researcher at Sophos. “Sophos detections reveal waves of attacks targeting Horizon servers, starting in January, and delivering a range of backdoors and cryptominers to unpatched servers, as well as scripts to collect some device information. Sophos believes that some of the backdoors may be delivered by Initial Access Brokers looking to secure persistent remote access to a high value target that they can sell on to other attackers, such as ransomware operators.”

The multiple attack payloads Sophos detected using Log4Shell to target vulnerable Horizon servers include:

·         Two legitimate remote monitoring and management tools, Atera agent and Splashtop Streamer, likely intended for malicious use as backdoors

·         The malicious Sliver backdoor

·         The cryptominers z0Miner, JavaX miner, Jin and Mimu

·         Several PowerShell-based reverse shells that collect device and backup information

Sophos’ analysis revealed that Sliver is sometimes delivered together with Atera and PowerShell profiling scripts and is used to deliver the Jin and Mimu variants of the XMrig Monero miner botnet.

According to Sophos, the attackers are using several different approaches to infect targets. While some of the earlier attacks used Cobalt Strike to stage and execute the cryptominer payloads, the largest wave of attacks that began in mid-January 2022, executed the cryptominer installer script directly from the Apache Tomcat component of the VMware Horizon server. This wave of attacks is ongoing.

“Sophos’ findings suggest that multiple adversaries are implementing these attacks, so the most important protective step is to upgrade all devices and applications that include Log4J with the patched version of the software. This includes patched versions of VMware Horizon if organizations use the application in their network,” said Gallagher.

“Log4J is installed in hundreds of software products and many organizations may be unaware of the vulnerability lurking in within their infrastructure, particularly in commercial, open-source or custom software that doesn’t have regular security support. And while patching is vital, it won’t be enough if attackers have already been able to install a web shell or backdoor in the network. Defense in depth and acting upon any detection of miners and other anomalous activity is critical to avoid falling victim to such attacks.”

For further information read the article “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers” on Sophos News.

Sophos has closely monitored attack activity related to the Log4Shell vulnerability and has published a number of in depth technical and advisory reports, including  Log4Shell Hell – Anatomy of an Exploit Outbreak, Log4Shell Response and Mitigation Recommendations, Inside the Code: How the Log4Shell Exploit Works, and Log4Shell: No Mass Abuse, But No Respite, What Happened?

Additional Resources

·  Sophos endpoint products, such as Intercept X, protect users by detecting the actions and behaviors of attackers

. Further details on the evolving cyberthreat landscape can be found in the Sophos 2022 Threat Report

. Tactics, techniques, and procedures (TTPs) and more for different types of threats are available on SophosLabs Uncut, which provides Sophos’ latest threat intelligence

. Information on attacker behaviors, incident reports and advice for security operations professionals is available on Sophos News SecOps

. Learn more about Sophos’ Rapid Response Service that contains, neutralizes and investigates attacks 24/7
The four top tips for responding to a security incident  from Sophos Rapid Response and the Managed Threat Response Team

 

 

 
 
 

Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Airtel Introduces Full Shopping Experience Within My Airtel App

Published

on

Kindly share this post

Airtel Nigeria has upgraded its My Airtel App with a fully integrated eShop feature, transforming the platform into a complete digital shopping destination. With this update, customers can now enjoy a full retail experience directly within the existing subscriber app—beyond simply buying airtime or data.

The eShop feature offers a wide selection of products ranging from Airtel-branded items such as Home Broadband (HBB) devices and everyday retail items such as electronics, home appliances, fashion, and beauty products.

Speaking on the new feature, Director of Marketing at Airtel Nigeria, Ismail Adeshina, emphasized the brand’s ongoing focus on innovation and customer-centricity.

“At Airtel, we understand that today’s customers value convenience above all else. This update is part of our broader mission to simplify digital experiences and make everyday transactions easier and faster. By integrating the eShop directly into the My Airtel App, we’re eliminating unnecessary steps and giving users the freedom to do more within a single platform,” he said.

The update enhances the app’s functionality by allowing customers to access the eShop directly from the home screen, eliminating the need for external redirection to web browsers or third-party platforms.

“We’re moving beyond basic connectivity towards building a digital ecosystem that supports the lifestyle needs of our customers. Whether it’s purchasing a device, recharging, or shopping for everyday items, we’re putting more power and choice in the hands of our users,” Adeshina added.

The My Airtel App continues to serve as a key platform for Airtel subscribers, offering self-service options, quick access to bundles, account management tools, and now, a more robust digital shopping channel.


Kindly share this post
Continue Reading

Telecom

Nigerians May Pay More for Calls, Data as Senate Okays 5 Percent Excise Duty

Published

on

Kindly share this post

Telecommunications subscribers in the country could soon be paying 5 percent more for data and voice services if President Bola Tinubu signs  Nigeria Tax Bill 2024 into law.

Nigerians May Pay More for Calls, Data as Senate Okays 5 Percent Excise Duty

Passed in the Senate on May 8, 2025, the bill reintroduces a controversial 5 percent excise tax on telecom services, a move telecom operators, subscribers and consumer rights groups have strongly opposed.

The bill revived the excise tax first introduced in the Finance Act of 2020 during the administration of former President Muhammadu Buhari.

President Bola Ahmed Tinubu had suspended the tax in July 2023, citing concerns that it could exacerbate inflation and hinder access to digital services, especially for low-income Nigerians.

The 2020 Finance Act had expanded the list of goods and services subject to excise duty, including telecom services.

However, the measure drew immediate and widespread criticism from telecom operators and consumer advocacy groups, who argued that the additional cost would burden citizens and increase the price of essential services in an already fragile economy.

Excise duty is a tax on certain goods produced or sold within a country and other activities as may be specified in the enabling law, including services.

As contained in the 2022 Finance Act, the tax is chargeable on all services regulated by the Nigerian Communications Commission (“NCC”) listed as postpaid and prepaid services at the rate of 5% for 2022, 2023 & 2024.

According to a report by PWC at the time, prior to the suspension of excise duty on certain goods in 2009, excise duty was applicable on recharge cards/vouchers.

The telecommunication companies are to pay the tax based on the excisable value of postpaid and prepaid services.

In July 2023, President Tinubu signed an Executive Order suspending the “5% Excise Tax on telecommunication services as well as the Excise Duties escalation on locally manufactured products.”

 

 

 

 


Kindly share this post
Continue Reading

Telecom

Mastercard Report Reveals Top Travel Trends Shaping Africa in 2025

Published

on

Kindly share this post

Mastercard Economics Institute (MEI) has released its annual Travel Trends 2025 report, revealing the latest consumer spending insights and motivation when it comes to travel.

Cross-border movement is often influenced by the most pressing economic factors of the moment, such as exchange rates and geopolitical tensions. However, these are not the only factors driving consumers’ travel spending decisions, including those in Africa. Personal and purpose-driven factors remain powerful even when economic uncertainty looms.

Building on the resilience of the global travel sector seen last year, the 2025 report highlights how destinations across the African continent are increasingly appealing to tourists and, creating additional opportunities for local markets to develop tourism.

 “Africa is emerging as a global leader in purpose-driven travel, where nature, wellness, and culinary experiences are redefining the continent’s tourism landscape. These trends present a powerful opportunity to drive inclusive growth, support local economies, and position Africa as a key player in the future of global tourism,” said Mark Elliot, division president, Africa, Mastercard.

 Whether drawn by Namibia’s wellness retreats, South Africa’s wilderness experiences or Morocco’s vibrant culinary scene, travelers are expanding their horizons beyond traditional hotspots.

 Tourism is playing an important role in Africa’s growth story. Travelers are increasingly drawn to the continent’s natural beauty, culinary diversity, and wellness experiences. While economic and geopolitical factors matter, the pursuit of meaningful, purpose-driven travel remains strong. The Mastercard Economics Institute’s report sheds light on how countries are tapping into this trend to attract visitors and boost local economies,” said Khatija Haque, chief economist EEMEA, Mastercard Economics Institute.

By exploring a full range of travel motivations, the report identifies the main themes shaping travel today:

 Africa trends:

  • Nature-fueled adventures: South Africa and Zambia dominate cross-border spending around national park areas. Spending around South Africa’s major national parks far outpaced that of other countries, with nearly a quarter of the cross-border spending occurring within these zones. Zambia is also highly ranked as an outdoor adventure destination.
  • Culinary crossroads: Marrakech ranks highly on the foodie list with its median restaurant hosting tourists from many different countries, often to enjoy meals of tagine and b’stilla. Cape Town is also on the list, with its bobotie dish proving popular with visitors.
  • Wellness in the wild: Africa is establishing itself as a global leader in wellness-centered travel as consumers prioritize rejuvenation and self-care. Namibia, South Africa and Botswana are among the top destinations for travelers seeking spa-style and nature-based retreats and immersive eco lodges. Kenya is also ranked among the top 20 destinations for wellness In the Mastercard Wellness Index 2025.

 Other global trends:

  • Spa, summit and savor: Personal passions and goals motivate travel choices. Adventure-seekers are heading to the Nordics, where Finland’s national parks account for 7.1% of cross-border spending in the country.
  • Summer destination draws: The Asia-Pacific region commands the list of trending summer destinations. Flight booking data reveals the top global destinations gaining most momentum for June-September travel, relative to last year. Tokyo is the number one trending spot for summer 2025, followed by Osaka and then Paris.
  • Fuelled by fans: Fans travel internationally to see their favorite teams and athletes play. Case in point? During Shohei Ohtani’s World Series debut, spending by Japanese visitors in Los Angeles surged by 91%, six times the broader cross-border boost. 
  • Money matters: Despite geopolitical tensions and fluctuating prices, the factors that motivate consumers to travel are often more complex than just economic. But currency depreciation can make certain destinations, like Japan, more attractive due to their better value for money.
  • Wheeling and dealing closer to home: In general, business travelers favor longer trips within their own regions, driven by hybrid work models and geopolitical uncertainty. However, there are exceptions, with UK businesses spending a growing share of their travel budgets in Asia, Europe, the Middle East and Africa.

Mastercard is dedicated to helping the global tourism sector grow through market analysis and high-frequency, data-driven insights that enhance the travel experience. By empowering destinations and businesses to better understand evolving consumer trends, Mastercard is helping to shape a more connected and resilient future for travel across Africa.

You can view the full “Travel Trends 2025: Purpose-driven journeys” and other reports and insights from the Mastercard Economics Institute can be found here.


Kindly share this post
Continue Reading

Trending