Connect with us

Telecom

Sophos CryptoGuard Technology Reveals How Attackers Increased Their Use of Remote Ransomware by 62% Annually

Published

on

Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, has released a report, titled “CryptoGuard: An Asymmetric Approach to the Ransomware Battle,” which found that some of the most prolific and active ransomware groups, including Akira, ALPHV/BlackCat, LockBit, Royal, Black Basta, are deliberately switching on remote encryption for their attacks.

In remote encryption attacks, also known as remote ransomware, adversaries leverage a compromised and often underprotected endpoint to encrypt data on other devices connected to the same network.

Sophos CryptoGuard is the anti-ransomware technology that Sophos acquired in 2015* and is included in all Sophos Endpoint licenses. CryptoGuard monitors the malicious encryption of files and provides immediate protection and rollback capabilities, including when the ransomware itself never appears on a protected host.

The unique anti-ransomware technology is a last line of defense in Sophos’ layered endpoint protection, only activating if an adversary triggers it later in the attack chain.

CryptoGuard detected a 62% year-over-year increase in intentional remote encryption attacks since 2022.

Advertisement

“Companies can have thousands of computers connected to their network, and with remote ransomware, all it takes is one underprotected device to compromise the entire network. Attackers know this, so they hunt for that one ‘weak spot’—and most companies have at least one. Remote encryption is going to stay a perennial problem for defenders, and based, on the alerts we’ve seen, the attack method is steadily increasing,” said Mark Loman, vice president, threat research at Sophos, and the co-creator of CryptoGuard.

Since this type of attack involves encrypting files remotely, traditional anti-ransomware protection methods deployed on remote devices don’t “see” the malicious files or their activity, failing to protect them from unauthorized encryption and potential data loss. Sophos CryptoGuard technology, however, takes an innovative approach to stopping remote ransomware, as explained in the Sophos X-Ops article: analyzing the contents of files to see if any data became encrypted to detect ransomware activity on any device in a network, even if there is no malware on the device.

In 2013, CryptoLocker was the first prolific ransomware to utilize remote encryption with asymmetric encryption, also known as public-key cryptography. Since then, adversaries have been able to escalate the use of ransomware, due to ubiquitous, ongoing security gaps at organizations worldwide and the advent of cryptocurrency.

“When we first noticed CryptoLocker taking advantage of remote encryption ten years ago, we foresaw that this tactic was going to become a challenge for defenders. Other solutions focus on detecting malicious binaries or execution. In the case of remote encryption, the malware and execution reside on a different computer (unprotected) than the one having the files encrypted. The only way to stop it is watching the files and protecting them. That’s why we innovated CryptoGuard,” said Loman.

“CryptoGuard does not hunt for ransomware; instead, it zeroes in on the primary targets—the files. It applies mathematical scrutiny to documents, detecting signs of manipulation and encryption. Notably, this autonomous strategy deliberately does not depend on indicators of breach, threat signatures, artificial intelligence, cloud lookups, or prior knowledge to be effective. By focusing on the files, we can change the power balance between the attackers and the defenders. We’re increasing the cost and complexity for the attackers to successfully encrypt data, so that they will abandon their objectives. This is a part of our asymmetric defense approach strategy.

Advertisement

“Remote ransomware is a prominent problem for organizations, and it is contributing to the longevity of ransomware in general. Given that reading data over a network connection is slower than from a local disk, we have seen attackers, like LockBit and Akira, strategically encrypt only a fraction of each file. This approach aims to maximize impact in minimal time, further reducing the window for defenders to notice the attack and respond. Sophos’ approach to anti-ransomware technology stops both remote attacks and those that encrypt just 3% of a file. We’re hoping to inform defenders about this persistent attack method, so they can properly protect devices.”

For more information, read “CryptoGuard: An Asymmetric Approach to the Ransomware Battle” on Sophos.com.

Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Fact-Check: Elon Musk’s “Tesla Pi Phone” is Internet Rumor

Published

on

Kindly share this post

Viral rumors about a “Tesla Pi Phone” a  new phone, being developed by Elon Musk,  CEO and largest shareholder of Tesla and SpaceX, are entirely fake.

Fact-Check:  Elon Musk’s "Tesla Pi Phone" is Internet Rumor

AI Generated Tesla Pi Phone and Elon Musk

Instead, the tech giant said on Monday it has filed an application with the US Federal Communications Commission for permission to deploy the constellation by 2028.

It said the system would provide voice, messaging, data and emergency services.

A quick fact-check revealed that Tesla Inc. has never manufactured, developed, or released a smartphone.

Videos and articles claiming a release (often priced between $150 and $800 with solar charging or satellite-only connections) rely on AI-generated concept art and recycled internet hoaxes dating back to 2021.

Musk has only mentioned a phone in hypothetical remarks, stating Tesla would build one only if major app stores completely blocked or censored essential apps like X (formerly Twitter).

Advertisement

On Monday however, his company said that “Amazon looks forward to delivering on the promise of D2D [direct-to-device] connectivity, including to the millions of people living, travelling and working in places beyond the reach of existing networks today,”

The filing is the first step from Amazon into satellite mobile connections, which has until now been dominated by SpaceX’s Starlink service.

Musk’s group has signed partnerships with existing operators such as T-Mobile US and the UK’s Virgin Media O2 to provide phone services for customers where their conventional networks do not reach.

Starlink operates across more than 150 countries, offering high-speed internet connections through its constellation of satellites.

 

Advertisement

 

Kindly share this post
Continue Reading

Telecom

How and Why Apps Deplete Data – ALTON

Published

on

Kindly share this post

Association of Licensed Telecommunications Operators of Nigeria (ALTON) has attributed rising mobile data consumption to increased use of smartphone applications, cloud services and emerging digital technologies.

How and Why Apps Deplete Data - ALTON

Mr Gbenga Adebayo, chairman, ALTON

Mr Gbenga Adebayo, chairman, ALTON, disclosed this on Tuesday at the Lagos Chamber of Commerce and Industry (LCCI) conference in Lagos.

Adebayo said smartphones had transformed access to digital services, with many applications consuming data continuously, even when users were not actively browsing the internet.

He explained that automatic software updates, cloud backups, application synchronisation, video streaming, social media autoplay and location services significantly increased data consumption.

According to him, internet usage had changed considerably from a decade ago when consumers mainly relied on direct browsing with fewer digital applications running simultaneously.

He said growing adoption of artificial intelligence, cloud computing and other emerging technologies would further increase demand for reliable connectivity and greater network capacity.

Advertisement

“The evolution of smartphones has fundamentally changed how consumers access digital services, with many applications now consuming data continuously,” Adebayo said.

He stressed that digital literacy had become increasingly important because consumers needed to understand how their devices and applications consumed mobile data.

He advised subscribers to monitor application activity, adjust device settings and use built-in data management tools to better control their data consumption.

Adebayo said greater understanding of digital tools would help dispel misconceptions about data usage and strengthen public confidence in Nigeria’s telecommunications industry.

Responding to allegations that operators deliberately depleted customers’ data, Adebayo dismissed the claims, insisting telecommunications companies had no commercial incentive to engage in such practices.

Advertisement

He said every megabyte consumed on telecom networks was recorded through internationally standardised billing systems supplied by recognised technology vendors and regulated by authorities.

“Such a practice would be unlawful, unethical, commercially self-defeating and subject to stringent regulatory oversight by the Nigerian Communications Commission,” he said.

Adebayo explained that operators’ billing systems were designed to guarantee accuracy, transparency and verification, while genuine consumer complaints were investigated through established protection channels.

He added that the Nigerian Communications Commission’s complaint resolution mechanisms and technical audits provided consumers with credible avenues for seeking redress over billing concerns.

According to him, trust remains essential to expanding Nigeria’s digital economy because telecommunications infrastructure supported banking, healthcare, education, commerce and government services.

Advertisement

He said the telecommunications sector had evolved beyond basic communication services into a critical driver of productivity, investment, innovation and national economic growth.

Adebayo noted that emerging technologies, including artificial intelligence, financial technology, smart manufacturing and digital agriculture, depended on resilient telecommunications infrastructure.

He said Nigeria could only maximise these opportunities through sustained collaboration among government, regulators, telecommunications operators and consumers.

Adebayo reaffirmed operators’ commitment to improving customer experience, strengthening network resilience and promoting transparency in telecommunications service delivery.

He urged stakeholders to encourage evidence-based discussions on digital services, stressing that public trust remained indispensable for the sustained growth of Nigeria’s digital economy.

Advertisement

(NAN)

Kindly share this post
Continue Reading

Telecom

Galaxy Backbone Soft Launches Government Service Portal to Simplify Access to Public Services

Published

on

Kindly share this post

Galaxy Backbone (GBB), in partnership with the Federal Ministry of Communications, Innovation & Digital Economy (FMCIDE) and the Korea International Cooperation Agency (KOICA), officially conducted the soft launch of the Government Service Portal (GSP), a groundbreaking digital platform designed to transform how citizens, businesses and government institutions interact.

The event, held at the Galaxy Backbone National Shared Services Centre (NSSC) Headquarters in Abuja, brought together senior government officials, development partners, technology stakeholders and members of the media to unveil services.gov.ng—Nigeria’s new one-stop digital gateway for accessing government services.

The Government Service Portal is designed to provide a single, trusted platform through which Nigerians can easily discover, access and interact with digital services offered by Ministries, Departments and Agencies (MDAs). By consolidating government services into one unified portal, the initiative aims to improve accessibility, enhance service delivery and create a more seamless citizen experience.

Speaking at the event, the Managing Director/Chief Executive Officer of Galaxy Backbone. Professor Ibrahim Adeyanju, stated that the launch represents another significant milestone in Nigeria’s digital transformation journey and reflects the Federal Government’s commitment to building a more connected, efficient, transparent and citizen-centred public service.

He emphasized that the Portal is more than a website; it is the foundation of a unified digital gateway that places the needs of citizens and businesses at the centre of government service delivery.

Advertisement

He further noted that while the event marks the beginning of the Portal’s journey, the soft launch provides an opportunity to onboard pioneer MDAs, gather user feedback, strengthen system integrations and continuously improve the platform ahead of a wider national rollout.

Representing key stakeholder institutions at the launch were the Deputy Director of KOICA Nigeria, Mr. Ki Yun Baik; the Permanent Secretary of the Federal Ministry of Communications, Innovation & Digital Economy, represented by Mr. Joseph Bareiye, Director of e-Government; the Permanent Secretary, State House, represented by Mr. Oguntuyi Olusegun, Head of ICT; and the Executive Director, Digital Exploration and Technical Services, Galaxy Backbone,  Olumbe Akinkugbe.

The Government Service Portal aligns with the Renewed Hope Agenda of President Bola Ahmed Tinubu, GCFR, and supports Nigeria’s broader Digital Public Infrastructure (DPI) agenda by creating a citizen-facing gateway that complements existing investments in digital identity, secure infrastructure, cloud services, cybersecurity and digital government platforms. It can be accessed using the link: services.gov.ng .  The initiative is expected to strengthen public service delivery, increase transparency, improve operational efficiency and foster greater trust between government and citizens.

Galaxy Backbone reaffirmed its commitment to supporting all Ministries, Departments and Agencies in integrating their digital services into the Portal, noting that collaboration across government will be critical to building an inclusive, interoperable and efficient digital ecosystem that benefits every Nigerian.

The Government Service Portal is expected to evolve into Nigeria’s central digital gateway for public services, making government services simpler, faster and more accessible for citizens and businesses alike.

Advertisement

Kindly share this post
Continue Reading

Trending