Telecom
Sophos Research Reveals that Attackers Are Using Log4Shell Vulnerability to Deliver Backdoors to Virtual Servers

Sophos, a global leader in next-generation cybersecurity, has released findings on how attackers are using the Log4Shell vulnerability to deliver backdoors and profiling scripts to unpatched VMware Horizon servers, paving the way for persistent access and future ransomware attacks. A new technical paper, “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers,” details the tools and techniques used to compromise the servers and deliver three different backdoors and four cryptominers. The backdoors are possibly delivered by Initial Access Brokers.

Log4Shell is a remote code execution vulnerability in the Java logging component, Apache Log4J, which is embedded in hundreds of software products. It was reported and patched in December 2021.
“Widely used applications such as VMware Horizon that are exposed to the internet and need to be manually updated, are particularly vulnerable to exploitation at scale,” said Sean Gallagher, senior security researcher at Sophos. “Sophos detections reveal waves of attacks targeting Horizon servers, starting in January, and delivering a range of backdoors and cryptominers to unpatched servers, as well as scripts to collect some device information. Sophos believes that some of the backdoors may be delivered by Initial Access Brokers looking to secure persistent remote access to a high value target that they can sell on to other attackers, such as ransomware operators.”
The multiple attack payloads Sophos detected using Log4Shell to target vulnerable Horizon servers include:
· Two legitimate remote monitoring and management tools, Atera agent and Splashtop Streamer, likely intended for malicious use as backdoors
· The malicious Sliver backdoor
· The cryptominers z0Miner, JavaX miner, Jin and Mimu
· Several PowerShell-based reverse shells that collect device and backup information
Sophos’ analysis revealed that Sliver is sometimes delivered together with Atera and PowerShell profiling scripts and is used to deliver the Jin and Mimu variants of the XMrig Monero miner botnet.
According to Sophos, the attackers are using several different approaches to infect targets. While some of the earlier attacks used Cobalt Strike to stage and execute the cryptominer payloads, the largest wave of attacks that began in mid-January 2022, executed the cryptominer installer script directly from the Apache Tomcat component of the VMware Horizon server. This wave of attacks is ongoing.
“Sophos’ findings suggest that multiple adversaries are implementing these attacks, so the most important protective step is to upgrade all devices and applications that include Log4J with the patched version of the software. This includes patched versions of VMware Horizon if organizations use the application in their network,” said Gallagher.
“Log4J is installed in hundreds of software products and many organizations may be unaware of the vulnerability lurking in within their infrastructure, particularly in commercial, open-source or custom software that doesn’t have regular security support. And while patching is vital, it won’t be enough if attackers have already been able to install a web shell or backdoor in the network. Defense in depth and acting upon any detection of miners and other anomalous activity is critical to avoid falling victim to such attacks.”

For further information read the article “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers” on Sophos News.
Sophos has closely monitored attack activity related to the Log4Shell vulnerability and has published a number of in depth technical and advisory reports, including Log4Shell Hell – Anatomy of an Exploit Outbreak, Log4Shell Response and Mitigation Recommendations, Inside the Code: How the Log4Shell Exploit Works, and Log4Shell: No Mass Abuse, But No Respite, What Happened?
Additional Resources
· Sophos endpoint products, such as Intercept X, protect users by detecting the actions and behaviors of attackers
. Further details on the evolving cyberthreat landscape can be found in the Sophos 2022 Threat Report
. Tactics, techniques, and procedures (TTPs) and more for different types of threats are available on SophosLabs Uncut, which provides Sophos’ latest threat intelligence
. Information on attacker behaviors, incident reports and advice for security operations professionals is available on Sophos News SecOps
. Learn more about Sophos’ Rapid Response Service that contains, neutralizes and investigates attacks 24/7
The four top tips for responding to a security incident from Sophos Rapid Response and the Managed Threat Response Team
Telecom
PAFON 3.0: Agency Banking Key to Reaching Millions of Unbanked Nigerians – AMMBAN

Dr. Obioha Oti, National President of the Association of Mobile Money and Bank Agents in Nigeria (AMMBAN), has described agency banking as Nigeria’s most critical last-mile channel for achieving meaningful financial inclusion, stressing that millions of Nigerians, particularly in rural and underserved communities, remain financially excluded despite notable progress in the sector.

PAFON 3.0
Speaking at the third edition of the Payments Forum Nigeria (PAFON 3.0), themed “Fair Digital Payments as a Catalyst for Deepening Financial Inclusion in Nigeria,” Oti, represented by Alhaji Yusuf Adeyemo, vice president of the Association of Mobile Money and Bank Agents in Nigeria (AMMBAN), said agency banking has become Nigeria’s most practical and scalable solution for bridging the persistent financial access gap caused by poor infrastructure, low financial literacy, trust deficits, and high service delivery costs.
According to him, without effective last-mile financial access, Nigeria’s financial inclusion ambitions may remain unattainable.
Oti noted that through extensive agent networks, Nigerians now enjoy convenient access to critical financial services including cash deposits, withdrawals, transfers, bill payments, account opening, and other essential banking products, adding that beyond transactional services, agency banking offers trust, human interaction, and proximity-factors that purely digital channels cannot fully replicate.
“Agency banking has emerged as the most practical, scalable, and human-centred solution,” he stated, adding that agents serve as trusted financial intermediaries within local communities.
Highlighting AMMBAN’s contributions, Oti said the association has played a central role in strengthening Nigeria’s financial inclusion ecosystem through policy advocacy, professional training, rural agent expansion, fraud awareness campaigns, consumer protection initiatives, and strategic collaborations involving banks, fintechs, telecom operators, and mobile money providers.
He further noted that the agency banking sector has created millions of jobs and unlocked significant economic opportunities nationwide.
Oti acknowledged the contributions of major ecosystem drivers, including the Central Bank of Nigeria (CBN), which he said continues to provide regulatory support through financial inclusion frameworks, consumer protection policies, and interoperability initiatives.
He also credited the Shared Agent Network Expansion Facilities (SANEF) for accelerating agent expansion across the country, while Enhancing Financial Innovation and Access (EFInA) was recognized for its support through research, innovation funding, and data-driven insights.
Despite these achievements, Oti warned that the sector continues to grapple with significant obstacles such as liquidity shortages, network instability, fraud risks, poor agent profitability, infrastructure deficits, and overlapping regulations.
He stressed that these challenges must be urgently addressed to sustain growth and deepen inclusion. “For inclusion to truly deepen, digital payments must be affordable, reliable, transparent, and accessible to all Nigerians,” he said, insisting that fairness in digital payments is essential to closing the financial inclusion gap.
He warned that unfair pricing structures, unstable systems, and exclusionary payment models could further marginalize vulnerable populations.
Looking ahead, Oti urged stakeholders across the financial ecosystem to prioritize stronger collaboration, improved agent profitability, infrastructure development, enhanced financial literacy, increased financing access for agents, and supportive regulatory frameworks.
He projected that Nigeria’s financial inclusion future will be “phygital,” combining physical agent networks with digital platforms to create seamless financial access.
According to him, agents are rapidly evolving beyond transaction points into community-based financial service hubs capable of driving grassroots economic development. “Agency banking is no longer just a distribution channel; it is the backbone of financial inclusion in Nigeria,” Oti declared.
He reaffirmed AMMBAN’s commitment to working with regulators, financial institutions, and technology providers to strengthen the ecosystem, empower underserved populations, and build a more inclusive national financial system.
Telecom
ATCON Seeks Stiffer Penalities to Deter Infrastructure Attacks, Vandalism

Association of Telecommunications Companies of Nigeria (ATCON) has warned that weak penalties under Nigeria’s Critical National Information Infrastructure (CNII) policy are undermining efforts to protect telecoms assets.

Tony Emoekpere, president, ATCON, made this known in an interview with the News Agency of Nigeria (NAN) in Lagos while calling for urgent legal reforms to strengthen enforcement.
Emoekpere said that although offenders are being apprehended and prosecuted, the current framework was failing to serve as a deterrent.
NAN reports that Nigeria’s Designation and Protection of Critical National Information Infrastructure (CNII) Order 2024, signed by President Bola Ahmed Tinubu, provides the country’s main legal framework for safeguarding critical Information and Communication Technology (ICT) infrastructure against vandalism, sabotage and theft.
The Order, anchored on the Cybercrimes (Prohibition, Prevention, etc.) Act 2015, classifies assets such as telecom towers, fibre-optic cables and data centres as critical national infrastructure requiring enhanced protection.
“People are being caught, but the offences are still treated as petty crimes.
“That limits the impact. CNII needs stronger legal backing such as an Act or executive order to give it more teeth,” the ATCON president said.
He said that the group was actively supporting the implementation of the CNII policy in collaboration with security agencies, stressing that telecom infrastructure remained critical to national security and economic growth.
The ATCON president also reaffirmed support for the Federal Government’s “Project Bridge,” aimed at expanding connectivity across the country, but identified right-of-way approvals across states as a major bottleneck.
According to him, because telcos have to engage multiple states, it is slowing things down but efforts are ongoing to address it.
On service quality, he said operators are struggling to keep pace with rising subscriber numbers and increasing data demand, despite recent tariff adjustments.
“The challenge is not that nothing is being done—investments are ongoing. But demand is growing even faster, and operators are constantly trying to catch up,” he said.
Emoekpere added that subscriber migration between networks and shifting usage patterns are placing additional pressure on certain operators, contributing to service fluctuations.
He, however, assured customers that efforts are ongoing to improve network performance.
“We value our subscribers, and everything is being done not just to maintain, but to improve service delivery,” he said.
The telecommunications sector has consistently identified infrastructure vandalism as a major challenge affecting service delivery and operational costs.
Industry stakeholders say the CNII Order is expected to strengthen the protection of telecom assets and improve quality of service for consumers, following years of rising attacks on infrastructure across the country.
Data from operators show that fibre-optic cable cuts remain one of the biggest threats to telecom operations.
However, in spite of the Order, Nigeria recorded 1,883 fibre cuts in the first quarter of 2026, while between January and August 2025, about 19,384 incidents were reported nationwide, averaging more than 2,400 monthly cases.
MTN Nigeria alone reported 9,218 fibre cuts in 2025, compared with 9,000 in 2024 and 6,000 in 2023, highlighting the increasing scale of the problem.
The sector has also faced widespread theft of generators, batteries and other power assets used to keep telecoms sites operational.
In 2025, criminals reportedly stole 656 critical power assets, including 152 generators and 504 batteries, while telecom operators lost an estimated ₦27 billion nationwide within a 12-month period due to infrastructure damage.
Industry reports further indicated that 577 network outages recorded in the first quarter of 2026 were directly linked to vandalism of telecoms infrastructure.
(NAN)
Telecom
Airtel Africa Profits Hit $813m on Strong Nigerian Operations Performance

Airtel Africa has delivered a landmark financial performance for the 2026 fiscal year, characterized by record-breaking customer acquisitions, a massive leap in profitability, and a definitive shift toward a data-centric business model.

Driven by disciplined execution, and a robust digital strategy, the Group saw its Profit After Tax skyrocket to $813 million, up from $328 million in the previous year. This surge was underpinned by a 29.5 per cent increase in reported revenue to $6.4 billion, fueled largely by a 47.5 per cent growth explosion in the Nigerian market following strategic tariff adjustments.
Airtel Africa in its financial result for the year March 31, 2026, noted that the year was defined by a shift in how consumers interact with the network. Expectedly, data revenues have become the largest component of Group revenue, growing by 35.2 per cent in constant currency, which further lifted the firm’s performance. The customer base grew by 10.5 per cent to 183.5 million, the highest net additions in the company’s history.
On the network, smartphone penetration hit nearly 50 per cent, with 91 million users now utilizing high-speed data.
The mobile money ecosystem handled an annualised transaction value of over $215 billion in Q4’26. Customer engagement surged as the platform evolved into a primary financial hub for 54 million users.
Despite global inflationary pressures, Airtel’s cost-efficiency programmes pushed EBITDA margins to an all-time high of 50.3 per cent in the final quarter. This operational strength allowed the company to accelerate its infrastructure rollout, adding over 3,250 new sites and expanding its fiber network to nearly 82,000 km.
“This year delivered a very strong performance across both operating and financial metrics,” said Chief Executive Officer, Sunil Taldar, adding, “Adoption of new digital technologies and AI has been pivotal in unlocking growth opportunities and driving efficiencies, enhancing customer experience through site-level network optimization and streamlined onboarding.”
Airtel’s balance sheet has significantly de-leveraged, with leverage improving to 1.8x. This financial health has translated directly into shareholder value. The Board recommended a final dividend of 4.26 cents, bringing the full-year total to 7.1 cents, a 9.2 per cent increase.
While geopolitical developments have shifted the timeline, the company remains committed to an IPO for Airtel Money in the second half of 2026.
On future investment, the firm’s Capex guidance for FY’27 has been raised to $1.1 billion, focusing on 5G readiness, home broadband, and data centers.
While the outlook remains bullish, Taldar noted that rising energy costs due to geopolitical events may create near-term margin pressure. However, the Group intends to offset these through intensified cost-management and the continued scaling of its digital infrastructure.
Telecom2 days agoUnity Bank Disburses N500m Loan Facility to Support Small Traders
Telecom2 days agoAirtel Africa Profits Hit $813m on Strong Nigerian Operations Performance
E-Financial2 days agoMasterCard, BMONI Partner to Improve Digital Payments
E-Financial2 days agoIMF Fears AI-Powered Cyberattack Could Spark Global Financial Crisis
Telecom2 days agoATCON Seeks Stiffer Penalities to Deter Infrastructure Attacks, Vandalism
E-Financial2 days agoFidelity Bank Provides Critical Funding Support to Abuja Special Needs Orphanage
E-Business2 days agoCPN Begins Crackdown on Quack IT Professionals, Vows Tougher Action against Cybercrime
News2 days agoJoshua Ichor, Nigerian Innovator Bags Europe’s €60m Fellowship

















