Telecom
Sophos’ Incident Response Report Shows How Cybercriminals Abuse Remote Desktop Protocol in 90% of Attacks
Sophos, a global leader of innovative security solutions that defeat cyberattacks, today released the Active Adversary analysis, “It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024.”
John Shier, senior security advisor at Sophos
The report, which analyzes more than 150 incident response (IR) cases handled by the Sophos X-Ops IR team in 2023, found that cybercriminals abused remote desktop protocol (RDP)—a common method for establishing remote access on Windows systems—in 90% of attacks.
This was the highest incidence of RDP abuse since Sophos began releasing its Active Adversary reports in 2021, covering data from 2020.
In addition, external remote services such as RDP were the most common vector by which attackers initially breached networks; they were the method of initial access in 65% of IR cases in 2023.
External remote services have consistently been the most frequent source of initial access for cybercriminals since the Active Adversary reports were launched in 2020, and defenders should consider this a clear sign to prioritize the management of these services when assessing risk to the enterprise.
“External remote services are a necessary, but risky, requirement for many businesses. Attackers understand the risks these services pose and actively seek to subvert them due to the bounty that lies beyond. Exposing services without careful consideration and mitigation of their risks inevitably leads to compromise. It doesn’t take long for an attacker to find and breach an exposed RDP server, and without additional controls, neither does finding the Active Directory server that awaits on the other side,” said John Shier, field CTO, Sophos.
In one Sophos X-Ops customer case, attackers successfully compromised the victim four times within six months, each time gaining initial access through the customer’s exposed RDP ports.
Once inside, the attackers continued to move laterally throughout the customer’s networks, downloading malicious binaries, disabling endpoint protection, and establishing remote access.
Compromised credentials and exploiting vulnerabilities are still the two most common root causes of attacks. However, the 2023 Active Adversary Report for Tech Leaders, released last August, found that in the first half of that year, for the first time, compromised credentials surpassed vulnerabilities as the most frequent root cause of attacks. This trend continued through the rest of 2023, with compromised credentials representing the root cause of over 50% of IR cases for the entire year. When looking at Active Adversary data cumulatively over the years from 2020 through 2023, compromised credentials were also the number one “all-time” root cause of attacks, involved in nearly a third of all IR cases. Yet despite the historical prevalence of compromised credentials in cyberattacks, in 43% of IR cases in 2023, organizations did not have multi-factor-authentication configured.
Exploiting vulnerabilities was the second most common root cause of attacks, both in 2023 and when analyzing data cumulatively from 2020 through 2023, accounting for the root cause in 16% and 30% of IR cases, respectively.
“Managing risk is an active process. Organizations that do this well experience better security situations than those that don’t in the face of continuous threats from determined attackers. An important aspect of managing security risks, beyond identifying and prioritizing them, is acting on the information. Yet, for far too long, certain risks such as open RDP continue to plague organizations, to the delight of attackers who can walk right through the front door of an organization. Securing the network by reducing exposed and vulnerable services and hardening authentication will make organizations more secure overall and better able to defeat cyberattacks,” said Shier.
The Sophos Active Adversary Report for 1H 2024 is based on more than 150 incident response (IR) investigations spanning the globe across 26 sectors.
Targeted organizations are located in 23 different countries, including the United States, Canada, Mexico, Colombia, the United Kingdom, Sweden, Switzerland, Spain, Germany, Poland, Italy, Austria, Belgium, the Philippines, Singapore, Malaysia, India, Australia, Kuwait, the United Arab Emirates, Saudi Arabia, South Africa, and Botswana.
To learn more about the current adversary landscape, read It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024 on Sophos.com.
MoMo Payment Service Bank (MoMo PSB), a fintech subsidiary of MTN Nigeria, has announced a partnership with Ogata Electric Vehicles to provide subsidised bus rides of ₦10 per fare to students of the University of Lagos (UNILAG).
MoMo PSB
The initiative, unveiled on Thursday in Lagos, is aimed at easing transportation costs for young Nigerians, particularly students, as part of MoMo PSB’s broader commitment to financial inclusion and digital accessibility.
MoMo PSB, which provides millions of Nigerians with secure financial services including transfers, savings, card services, bill payments and wallet solutions, said the transport subsidy reflects its mission to improve everyday life by reducing the cost of essential services.
The company explained that the partnership with Ogata Electric Vehicles would not only make commuting more affordable for students but also promote sustainable mobility through the use of electric buses.
Officials of MoMo PSB noted that the initiative is designed to bring “good cheer” to the UNILAG community, ensuring students can access safe, reliable and cost-effective transport while focusing on their education.
MTN Nigeria has launched its Unlimited Broadband Data plans powered by 5G technology, a move the telecoms giant says will tackle long-standing challenges of capped data limits, high costs and unstable connectivity faced by internet users across the country.
MTN Nigeria
Egerton Idehen, Chief Broadband Officer of MTN Nigeria, said the new product was designed to support high-demand users including streamers, gamers, households and businesses requiring uninterrupted connectivity.
“We’re building a broadband experience for everyday life. For content creators, remote workers, gamers, students and households. Our focus is on speed, reliability, low latency, and affordability.
“Broadband is designed to deliver seamless connectivity that empowers Nigerians to thrive in the digital economy,” Idehen said.
The plans, available in speed-based variants of 50Mbps and 100Mbps, promise lightning-fast speeds and ultra-low latency to address issues of lag and buffering. MTN said the packages would also provide affordable and flexible options to cater to diverse economic segments.
New customers who purchase a 5G router will enjoy a welcome bonus of unlimited data for the first 30 days, allowing them to experience the service before committing to long-term use.
The company explained that the initiative was part of its broader commitment to digital inclusion, enabling Nigerians to access stable connections for virtual meetings, large file transfers, online learning, high-definition streaming and professional gaming.
Customers can subscribe to the Unlimited Broadband Plans by dialling 4611#, using the MyMTN app, MTN eShop, MTN website, or visiting authorised retail outlets nationwide.
The Airtel Africa Foundation has opened applications for its Undergraduate Tech Scholarship in Nigeria, inviting first-year university students with strong academic potential to apply for financial support aimed at accelerating their studies in technology and related fields.
The scheme provides full tuition, accommodation support, and essential study materials for eligible 100-level students. It forms part of the Foundation’s F.E.E.D. agenda, which promotes Financial Empowerment, Education, Environmental Protection, and Digital Inclusion, with a focus on creating pathways for talented young people who face financial barriers.
Airtel Nigeria CEO, Dinesh Balsingh, encouraged students to take advantage of the opportunity. He noted that, “Education is one of the most powerful tools for national development,” adding that “as an organisation, Airtel is determined to build a platform for aspiring young Nigerians to learn, innovate and lead in the country’s expanding technology landscape.”
Applications are open to students pursuing courses such as Information Technology, Computer Science, Software Engineering, Data Science, Cyber Security, Artificial Intelligence, and other ICT-related disciplines at participating universities: University of Lagos, University of Nigeria Nsukka, Ahmadu Bello University, University of Benin, Obafemi Awolowo University, University of Ilorin, and Tai Solarin University of Education.
Dr Segun Ogunsanya, Chairman of the Airtel Africa Foundation, said the scholarship demonstrates the organisation’s commitment to nurturing Africa’s next generation of digital leaders. “Young Africans are brimming with talent and ambition. What many need is a fair chance to pursue their education without financial pressure. This scholarship reflects our belief that investing in their growth will strengthen communities, empower families, and expand the continent’s digital future,” he said.
Applicants must be enrolled in 100-level, have scored at least 230 in JAMB, and hold a minimum of five credits in WAEC, including English and Mathematics, in a single sitting. Required documents include Joint Admissions and Matriculation Board (JAMB) results, university admission letter, West African Examination Council (WAEC) certificate, student identity card, and academic transcript or university results.
The Foundation encourages qualified students across the listed institutions to apply and position themselves for a stronger start in the technology sector. Applications can be submitted at candidate.scholastica.ng/schemes/airtelfellowship2025.
FRC, ICPC Seal Anti-corruption Alliance
Debt Rises in AI Data Centre Boom
MoMo PSB Brings Relief to UNILAG Students with Ultra-Cheap Bus Fares
Young Africans Hit Hardest by Online Gender Violence, Paradigm Initiative Reports
Sterling Bank, Pan-Atlantic University Partner to Certify Non-Oil Export Academy Graduates
Kaspersky Introduces Cyber Pathways to Support Career Development in Cybersecurity
NITDA DG Tasks Youths to Drive Africa’s Digital Transformation
Firm Urges Organizations to Check Protection of their Websites Amid Search Engine Optimisation Attack Schemes
FCCPC Sets Deadline for Digital Lending Regulatory Compliance
Hackers Breach Phones of Dangote and Otedola, Demand Ransom
E-Financial2 days agoCBN Rejigs Financial Inclusion Strategy to Boost Economic Growth
E-Financial2 days agoSEC Urges IST to Freeze all CBEX Bank Accounts in Nigeria
News2 days agoFG to Use Digital Economy Initiatives to Curb Corruption Among Youth
E-Business2 days agoFinancial Sector Faced AI, Blockchain and Organised Crime Threats in 2025 – Report
Broadcasting2 days agoEnd of an Era as Multichoice Delists from JSE After Canal+ Takeover
Broadcasting2 days agoGlobal South Alliance Launches $72,000 Datafication and Democracy Fund to Support 2026 Research Projects
Telecom2 days agoCOUCH 2025 Grand Finale Highlights Student Breakthroughs, Secures Government Pledge for University Research Commercialization
Telecom2 days agoGoogle Invests $2.1m to Boost Nigeria’s AI Development