Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

Telecom

Sophos Research Reveals that Attackers Are Using Log4Shell Vulnerability to Deliver Backdoors to Virtual Servers

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, has released findings on how attackers are using the Log4Shell vulnerability to deliver backdoors and profiling scripts to unpatched VMware Horizon servers, paving the way for persistent access and future ransomware attacks. A new technical paper, “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers,” details the tools and techniques used to compromise the servers and deliver three different backdoors and four cryptominers. The backdoors are possibly delivered by Initial Access Brokers.

Log4Shell is a remote code execution vulnerability in the Java logging component, Apache Log4J, which is embedded in hundreds of software products. It was reported and patched in December 2021.

“Widely used applications such as VMware Horizon that are exposed to the internet and need to be manually updated, are particularly vulnerable to exploitation at scale,” said Sean Gallagher, senior security researcher at Sophos. “Sophos detections reveal waves of attacks targeting Horizon servers, starting in January, and delivering a range of backdoors and cryptominers to unpatched servers, as well as scripts to collect some device information. Sophos believes that some of the backdoors may be delivered by Initial Access Brokers looking to secure persistent remote access to a high value target that they can sell on to other attackers, such as ransomware operators.”

The multiple attack payloads Sophos detected using Log4Shell to target vulnerable Horizon servers include:

·         Two legitimate remote monitoring and management tools, Atera agent and Splashtop Streamer, likely intended for malicious use as backdoors

·         The malicious Sliver backdoor

·         The cryptominers z0Miner, JavaX miner, Jin and Mimu

·         Several PowerShell-based reverse shells that collect device and backup information

Sophos’ analysis revealed that Sliver is sometimes delivered together with Atera and PowerShell profiling scripts and is used to deliver the Jin and Mimu variants of the XMrig Monero miner botnet.

According to Sophos, the attackers are using several different approaches to infect targets. While some of the earlier attacks used Cobalt Strike to stage and execute the cryptominer payloads, the largest wave of attacks that began in mid-January 2022, executed the cryptominer installer script directly from the Apache Tomcat component of the VMware Horizon server. This wave of attacks is ongoing.

“Sophos’ findings suggest that multiple adversaries are implementing these attacks, so the most important protective step is to upgrade all devices and applications that include Log4J with the patched version of the software. This includes patched versions of VMware Horizon if organizations use the application in their network,” said Gallagher.

“Log4J is installed in hundreds of software products and many organizations may be unaware of the vulnerability lurking in within their infrastructure, particularly in commercial, open-source or custom software that doesn’t have regular security support. And while patching is vital, it won’t be enough if attackers have already been able to install a web shell or backdoor in the network. Defense in depth and acting upon any detection of miners and other anomalous activity is critical to avoid falling victim to such attacks.”

For further information read the article “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers” on Sophos News.

Sophos has closely monitored attack activity related to the Log4Shell vulnerability and has published a number of in depth technical and advisory reports, including  Log4Shell Hell – Anatomy of an Exploit Outbreak, Log4Shell Response and Mitigation Recommendations, Inside the Code: How the Log4Shell Exploit Works, and Log4Shell: No Mass Abuse, But No Respite, What Happened?

Additional Resources

·  Sophos endpoint products, such as Intercept X, protect users by detecting the actions and behaviors of attackers

. Further details on the evolving cyberthreat landscape can be found in the Sophos 2022 Threat Report

. Tactics, techniques, and procedures (TTPs) and more for different types of threats are available on SophosLabs Uncut, which provides Sophos’ latest threat intelligence

. Information on attacker behaviors, incident reports and advice for security operations professionals is available on Sophos News SecOps

. Learn more about Sophos’ Rapid Response Service that contains, neutralizes and investigates attacks 24/7
The four top tips for responding to a security incident  from Sophos Rapid Response and the Managed Threat Response Team

 

 

 
 
 

Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Paradigm Initiative Warns of AI-Driven Hate Speech, Urges Global Tech Reform

Published

on

Kindly share this post

As the world commemorates the International Day for Countering Hate Speech, Paradigm Initiative (PIN) is calling on big tech companies to intensify their efforts in combating online hate speech and ensuring respect for fundamental human rights.

PIN’s 2024 Londa report highlights the widespread prevalence of hate speech online. In Angola, for instance, at least 25 content removal requests were made in connection with hate speech, harassment, and political misinformation. Globally, the consequences of unchecked hate speech have been severe—ranging from incitement to violence and heightened ethnic tensions to the targeting of vulnerable communities, including minorities, women, and foreigners.

Nigeria witnessed a tragic example in 2018 when a Facebook post showing a massacre in Plateau State was viewed more than 11,000 times, triggering ethnic conflict and resulting in fatalities. In South Africa, inadequate content moderation has worsened the problem, while in Ethiopia in 2021, a false Facebook post led to the killing of a man wrongly implicated in a scandal. India saw a surge in hate speech during its elections.

PIN notes that actors behind hate speech are becoming increasingly sophisticated, often leveraging technologies like artificial intelligence to boost visibility. Meanwhile, existing moderation systems—especially for non-English content—struggle to keep up.

Bridgette Ndlovu, PIN’s Partnerships and Engagements Officer, said, “Hate speech online is a direct attack on the dignity and safety of individuals.” She urged technology companies to adopt transparent and effective moderation strategies and to prioritize human rights in their operations.

The spread of hate speech raises complex challenges for lawmakers. Governments are trying to regulate harmful content such as misinformation and harassment while protecting freedom of speech. However, PIN warns that hate speech laws should not be misused to arbitrarily detain human rights defenders or stifle dissenting voices.

To address these concerns, PIN recommends that tech companies invest more in moderating non-English content to reflect local nuances, improve transparency around government takedown requests, promote digital literacy—particularly in underserved regions—and conduct regular human rights due diligence, aligned with the United Nations Guiding Principles on Business and Human Rights.


Kindly share this post
Continue Reading

Telecom

Moniepoint Deepens Commitment to Africa’s Future Through Education and Innovation

Published

on

Kindly share this post

Moniepoint Inc, one of Africa’s leading financial institutions partnered with the Mega Impact Foundation to support the 5th edition of the NextGen Connect Interschool Oratory Competition in Asaba, Delta state. This collaboration showcases Moniepoint’s unwavering commitment to youth empowerment and human capital development across the African continent.

The competition, which was held commemoratively to celebrate this year’s International Day of the Boy Child, brought together SS2 students from across Delta State to address the critical theme: “The Role of Financial Inclusion and Technology in Shaping a Brighter Future for Young People in Africa.” Moniepont has received critical acclaim over its core mission of advancing financial inclusion through innovative digital financial technology solutions and payment services..

The oratory competition showcased exceptional talent among Nigeria’s youth, with Otovo Praise of Crystalloid International School emerging as the champion. His outstanding performance earned him a full-year scholarship through the Tosin Eniolorunda STEM Foundation, reflecting Moniepoint’s philosophy of investing in educational excellence. Second-place winner Audi Innocent of St Patrick’s College received ₦300,000, while third-place winner, Asher David of Glorious Kids Academy was awarded ₦200,000.

“At Moniepoint, we believe that driving sustainable innovation begins with future-proofing and expanding the talent pool by empowering the next generation with the tools that they need to succeed especially basic literacy skills which remain fundamental pillars in socio-economic development,” said Tosin Eniolorunda, CEO Moniepoint Inc.  “These young voices represent the future of African leadership, and their insights into financial inclusion and technology demonstrate the remarkable potential that exists within our communities. Through our various educational and developmental initiatives such as the CAD/CAM lab we donated to OAU last year or the Moniepoint DreamDevs programme, we are betting big on an investment in Africa’s future.”

The initiative extends beyond monetary rewards, creating meaningful platforms for young people to express their ideas on a global stage. Through its support of the NextGen Connect Conference and Tech-In-School conversations, Moniepoint is fostering an environment where youth can develop critical thinking skills, build confidence, and engage with pressing societal issues.

In her remarks, Founder, Mega Impact Foundation, Florence Ogonegbu said that “we reaffirm our commitment to building an Africa where every young person has simplified access to sustainable education, capacity building, and empowerment. By leveraging technology and local initiatives, we are creating platforms that enable our youth to thrive and transform their communities.

“Together with partners like Moniepoint, we are not just shaping futures—we are driving a movement for social development that will resonate globally. Every boy, every young person, deserves the opportunity to unlock their full potential and drive lasting impact across our continent.”

The competition received additional support from the Ministry of Women Affairs and Social Development, Delta State, highlighting the collaborative approach required to nurture young talent effectively.


Kindly share this post
Continue Reading

Telecom

Zoho Unveils Zia Hubs to Harness AI Insights from Unstructured Business Data

Published

on

Kindly share this post

Zoho, a global technology company, today launched Zia Hubs, a solution within Zoho WorkDrive that brings new forms of unstructured business data into the company’s broad portfolio of applications and AI services. Using Zia Hubs, organisations can now present any type of business content to Zoho’s powerful capabilities and services—including agentic AI, comprehensive analysis, and accurate, unified search—regardless of file format or structure.

“According to IDC, 80 percent of business data is unstructured,” said Kehinde Ogundare, Country Head, Zoho Nigeria. “Most unstructured data is text-based, meaning pertinent information lives within email conversations, social media posts, word processor documents, or audio and video transcripts. With Zia Hubs built into the full product suite, Zoho can provide customers with a deeper integration than any comparable software platform and nearly limitless potential uses for their data.”

Deeper Intelligence Accessing More Customer Data

Launching as part of Zoho WorkDrive, Zia Hubs brings content intelligence to the company’s unified content management and collaboration platform. Designed with a high level of user control over what content AI is allowed to access, Zia Hubs enables users to organise project or task-specific content into dedicated hubs within WorkDrive. Each hub serves as a focused space where Zia, Zoho’s flagship AI, can understand and act on the content stored within. This includes a wide range of formats such as PDFs, documents, videos, and audio files.

Zia Hubs automatically organises uploaded content by grouping related information—such as section headings, supporting text, and visuals—to preserve context. For video and audio files, Zia generates transcripts and links key moments to relevant topics, making it easier to pinpoint exactly where something was said.

With Zia Hubs, users can surface the most relevant answers when asked a question, even across different content formats. Each response includes clear citations that link back to the original content, whether it is a document, spreadsheet, image, or a specific moment in an audio or video file.

Organisations can also create custom workflows with Zoho Flow, automating document storage processes for particular projects or specific teams. This ensures that Zia always has access to the latest necessary documents automatically.

Furthermore, content from third-party software—such as Docusign PDFs, RingCentral call logs, Zoom video files—are all readable by Zia, and can be automatically placed into a hub by building a workflow with Zoho Flow.

From Intelligent Content to Intelligent Action with Zia

Zia Hubs is a foundational element of Zoho’s long-term AI strategy. It lays the groundwork for a future where intelligent agents can act contextually on content across the company’s entire product suite. With full ownership of its technology stack spanning more than 55 products, Zoho is uniquely positioned to help organisations unlock deeper value from their business content compared to competitors.

Potential use cases for Zia Hubs include: a legal team’s content hub hosting a case’s relevant files: court files, correspondence, and research, allowing a lawyer to have Zia provide summaries with citations without having to manually scan lengthy files to gain insights; a company’s support center placing call logs into a hub, then querying Zia to identify trends, like, “Have we received an increase in calls regarding specific issues?”

Future updates to Zia Hubs will enable it to identify structured information within unstructured files and trigger specialised agents tailored to specific business needs. This will further establish Zia Hubs as the central content intelligence layer that activates AI-native workflows across the full Zoho ecosystem.


Kindly share this post
Continue Reading

Trending