Telecom
Sophos Research Reveals that Attackers Are Using Log4Shell Vulnerability to Deliver Backdoors to Virtual Servers

Sophos, a global leader in next-generation cybersecurity, has released findings on how attackers are using the Log4Shell vulnerability to deliver backdoors and profiling scripts to unpatched VMware Horizon servers, paving the way for persistent access and future ransomware attacks. A new technical paper, “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers,” details the tools and techniques used to compromise the servers and deliver three different backdoors and four cryptominers. The backdoors are possibly delivered by Initial Access Brokers.
Log4Shell is a remote code execution vulnerability in the Java logging component, Apache Log4J, which is embedded in hundreds of software products. It was reported and patched in December 2021.
“Widely used applications such as VMware Horizon that are exposed to the internet and need to be manually updated, are particularly vulnerable to exploitation at scale,” said Sean Gallagher, senior security researcher at Sophos. “Sophos detections reveal waves of attacks targeting Horizon servers, starting in January, and delivering a range of backdoors and cryptominers to unpatched servers, as well as scripts to collect some device information. Sophos believes that some of the backdoors may be delivered by Initial Access Brokers looking to secure persistent remote access to a high value target that they can sell on to other attackers, such as ransomware operators.”
The multiple attack payloads Sophos detected using Log4Shell to target vulnerable Horizon servers include:
· Two legitimate remote monitoring and management tools, Atera agent and Splashtop Streamer, likely intended for malicious use as backdoors
· The malicious Sliver backdoor
· The cryptominers z0Miner, JavaX miner, Jin and Mimu
· Several PowerShell-based reverse shells that collect device and backup information
Sophos’ analysis revealed that Sliver is sometimes delivered together with Atera and PowerShell profiling scripts and is used to deliver the Jin and Mimu variants of the XMrig Monero miner botnet.
According to Sophos, the attackers are using several different approaches to infect targets. While some of the earlier attacks used Cobalt Strike to stage and execute the cryptominer payloads, the largest wave of attacks that began in mid-January 2022, executed the cryptominer installer script directly from the Apache Tomcat component of the VMware Horizon server. This wave of attacks is ongoing.
“Sophos’ findings suggest that multiple adversaries are implementing these attacks, so the most important protective step is to upgrade all devices and applications that include Log4J with the patched version of the software. This includes patched versions of VMware Horizon if organizations use the application in their network,” said Gallagher.
“Log4J is installed in hundreds of software products and many organizations may be unaware of the vulnerability lurking in within their infrastructure, particularly in commercial, open-source or custom software that doesn’t have regular security support. And while patching is vital, it won’t be enough if attackers have already been able to install a web shell or backdoor in the network. Defense in depth and acting upon any detection of miners and other anomalous activity is critical to avoid falling victim to such attacks.”
For further information read the article “Horde of Miner Bots and Backdoors Leveraged Log4J to Attack VMware Horizon Servers” on Sophos News.
Sophos has closely monitored attack activity related to the Log4Shell vulnerability and has published a number of in depth technical and advisory reports, including Log4Shell Hell – Anatomy of an Exploit Outbreak, Log4Shell Response and Mitigation Recommendations, Inside the Code: How the Log4Shell Exploit Works, and Log4Shell: No Mass Abuse, But No Respite, What Happened?
Additional Resources
· Sophos endpoint products, such as Intercept X, protect users by detecting the actions and behaviors of attackers
. Further details on the evolving cyberthreat landscape can be found in the Sophos 2022 Threat Report
. Tactics, techniques, and procedures (TTPs) and more for different types of threats are available on SophosLabs Uncut, which provides Sophos’ latest threat intelligence
. Information on attacker behaviors, incident reports and advice for security operations professionals is available on Sophos News SecOps
. Learn more about Sophos’ Rapid Response Service that contains, neutralizes and investigates attacks 24/7
The four top tips for responding to a security incident from Sophos Rapid Response and the Managed Threat Response Team
Telecom
Paradigm Initiative Warns of AI-Driven Hate Speech, Urges Global Tech Reform

As the world commemorates the International Day for Countering Hate Speech, Paradigm Initiative (PIN) is calling on big tech companies to intensify their efforts in combating online hate speech and ensuring respect for fundamental human rights.
PIN’s 2024 Londa report highlights the widespread prevalence of hate speech online. In Angola, for instance, at least 25 content removal requests were made in connection with hate speech, harassment, and political misinformation. Globally, the consequences of unchecked hate speech have been severe—ranging from incitement to violence and heightened ethnic tensions to the targeting of vulnerable communities, including minorities, women, and foreigners.
Nigeria witnessed a tragic example in 2018 when a Facebook post showing a massacre in Plateau State was viewed more than 11,000 times, triggering ethnic conflict and resulting in fatalities. In South Africa, inadequate content moderation has worsened the problem, while in Ethiopia in 2021, a false Facebook post led to the killing of a man wrongly implicated in a scandal. India saw a surge in hate speech during its elections.
PIN notes that actors behind hate speech are becoming increasingly sophisticated, often leveraging technologies like artificial intelligence to boost visibility. Meanwhile, existing moderation systems—especially for non-English content—struggle to keep up.
Bridgette Ndlovu, PIN’s Partnerships and Engagements Officer, said, “Hate speech online is a direct attack on the dignity and safety of individuals.” She urged technology companies to adopt transparent and effective moderation strategies and to prioritize human rights in their operations.
The spread of hate speech raises complex challenges for lawmakers. Governments are trying to regulate harmful content such as misinformation and harassment while protecting freedom of speech. However, PIN warns that hate speech laws should not be misused to arbitrarily detain human rights defenders or stifle dissenting voices.
To address these concerns, PIN recommends that tech companies invest more in moderating non-English content to reflect local nuances, improve transparency around government takedown requests, promote digital literacy—particularly in underserved regions—and conduct regular human rights due diligence, aligned with the United Nations Guiding Principles on Business and Human Rights.
Telecom
Moniepoint Deepens Commitment to Africa’s Future Through Education and Innovation

Moniepoint Inc, one of Africa’s leading financial institutions partnered with the Mega Impact Foundation to support the 5th edition of the NextGen Connect Interschool Oratory Competition in Asaba, Delta state. This collaboration showcases Moniepoint’s unwavering commitment to youth empowerment and human capital development across the African continent.
The competition, which was held commemoratively to celebrate this year’s International Day of the Boy Child, brought together SS2 students from across Delta State to address the critical theme: “The Role of Financial Inclusion and Technology in Shaping a Brighter Future for Young People in Africa.” Moniepont has received critical acclaim over its core mission of advancing financial inclusion through innovative digital financial technology solutions and payment services..
The oratory competition showcased exceptional talent among Nigeria’s youth, with Otovo Praise of Crystalloid International School emerging as the champion. His outstanding performance earned him a full-year scholarship through the Tosin Eniolorunda STEM Foundation, reflecting Moniepoint’s philosophy of investing in educational excellence. Second-place winner Audi Innocent of St Patrick’s College received ₦300,000, while third-place winner, Asher David of Glorious Kids Academy was awarded ₦200,000.
“At Moniepoint, we believe that driving sustainable innovation begins with future-proofing and expanding the talent pool by empowering the next generation with the tools that they need to succeed especially basic literacy skills which remain fundamental pillars in socio-economic development,” said Tosin Eniolorunda, CEO Moniepoint Inc. “These young voices represent the future of African leadership, and their insights into financial inclusion and technology demonstrate the remarkable potential that exists within our communities. Through our various educational and developmental initiatives such as the CAD/CAM lab we donated to OAU last year or the Moniepoint DreamDevs programme, we are betting big on an investment in Africa’s future.”
The initiative extends beyond monetary rewards, creating meaningful platforms for young people to express their ideas on a global stage. Through its support of the NextGen Connect Conference and Tech-In-School conversations, Moniepoint is fostering an environment where youth can develop critical thinking skills, build confidence, and engage with pressing societal issues.
In her remarks, Founder, Mega Impact Foundation, Florence Ogonegbu said that “we reaffirm our commitment to building an Africa where every young person has simplified access to sustainable education, capacity building, and empowerment. By leveraging technology and local initiatives, we are creating platforms that enable our youth to thrive and transform their communities.
“Together with partners like Moniepoint, we are not just shaping futures—we are driving a movement for social development that will resonate globally. Every boy, every young person, deserves the opportunity to unlock their full potential and drive lasting impact across our continent.”
The competition received additional support from the Ministry of Women Affairs and Social Development, Delta State, highlighting the collaborative approach required to nurture young talent effectively.
Telecom
Zoho Unveils Zia Hubs to Harness AI Insights from Unstructured Business Data

Zoho, a global technology company, today launched Zia Hubs, a solution within Zoho WorkDrive that brings new forms of unstructured business data into the company’s broad portfolio of applications and AI services. Using Zia Hubs, organisations can now present any type of business content to Zoho’s powerful capabilities and services—including agentic AI, comprehensive analysis, and accurate, unified search—regardless of file format or structure.
“According to IDC, 80 percent of business data is unstructured,” said Kehinde Ogundare, Country Head, Zoho Nigeria. “Most unstructured data is text-based, meaning pertinent information lives within email conversations, social media posts, word processor documents, or audio and video transcripts. With Zia Hubs built into the full product suite, Zoho can provide customers with a deeper integration than any comparable software platform and nearly limitless potential uses for their data.”
Deeper Intelligence Accessing More Customer Data
Launching as part of Zoho WorkDrive, Zia Hubs brings content intelligence to the company’s unified content management and collaboration platform. Designed with a high level of user control over what content AI is allowed to access, Zia Hubs enables users to organise project or task-specific content into dedicated hubs within WorkDrive. Each hub serves as a focused space where Zia, Zoho’s flagship AI, can understand and act on the content stored within. This includes a wide range of formats such as PDFs, documents, videos, and audio files.
Zia Hubs automatically organises uploaded content by grouping related information—such as section headings, supporting text, and visuals—to preserve context. For video and audio files, Zia generates transcripts and links key moments to relevant topics, making it easier to pinpoint exactly where something was said.
With Zia Hubs, users can surface the most relevant answers when asked a question, even across different content formats. Each response includes clear citations that link back to the original content, whether it is a document, spreadsheet, image, or a specific moment in an audio or video file.
Organisations can also create custom workflows with Zoho Flow, automating document storage processes for particular projects or specific teams. This ensures that Zia always has access to the latest necessary documents automatically.
Furthermore, content from third-party software—such as Docusign PDFs, RingCentral call logs, Zoom video files—are all readable by Zia, and can be automatically placed into a hub by building a workflow with Zoho Flow.
From Intelligent Content to Intelligent Action with Zia
Zia Hubs is a foundational element of Zoho’s long-term AI strategy. It lays the groundwork for a future where intelligent agents can act contextually on content across the company’s entire product suite. With full ownership of its technology stack spanning more than 55 products, Zoho is uniquely positioned to help organisations unlock deeper value from their business content compared to competitors.
Potential use cases for Zia Hubs include: a legal team’s content hub hosting a case’s relevant files: court files, correspondence, and research, allowing a lawyer to have Zia provide summaries with citations without having to manually scan lengthy files to gain insights; a company’s support center placing call logs into a hub, then querying Zia to identify trends, like, “Have we received an increase in calls regarding specific issues?”
Future updates to Zia Hubs will enable it to identify structured information within unstructured files and trigger specialised agents tailored to specific business needs. This will further establish Zia Hubs as the central content intelligence layer that activates AI-native workflows across the full Zoho ecosystem.
- Telecom2 days ago
GSMA, Mobile Industry Call for Strengthened Action to Advance Child Online Protection in Africa
- Telecom1 day ago
ALTON Clarifies on Migration to End-User Billing for USSD Services
- News2 days ago
Digital Africa Global Consult, NDPC Partner on Ground-Breaking “Nigeria Data Challenge” Initiative
- General News2 days ago
TD Africa, HP Strengthen Partnership to Advance Africa’s Tech Ecosystem
- News1 day ago
DStv Rewards Loyal Customers with Free Package Upgrades
- General News1 day ago
African Parliamentarians Seek Answers from Telcos on Quality of Service
- Telecom1 day ago
Lagos Future Conference 2025: Stakeholders Call for Digital Responsibility and Grassroots Innovation
- E-Financial1 day ago
Nigerian Stock Market Suffers ₦183 Billion Loss Amid Profit-Taking