Telecom
Sophos’ Incident Response Report Shows How Cybercriminals Abuse Remote Desktop Protocol in 90% of Attacks
Sophos, a global leader of innovative security solutions that defeat cyberattacks, today released the Active Adversary analysis, “It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024.”
John Shier, senior security advisor at Sophos
The report, which analyzes more than 150 incident response (IR) cases handled by the Sophos X-Ops IR team in 2023, found that cybercriminals abused remote desktop protocol (RDP)—a common method for establishing remote access on Windows systems—in 90% of attacks.
This was the highest incidence of RDP abuse since Sophos began releasing its Active Adversary reports in 2021, covering data from 2020.
In addition, external remote services such as RDP were the most common vector by which attackers initially breached networks; they were the method of initial access in 65% of IR cases in 2023.
External remote services have consistently been the most frequent source of initial access for cybercriminals since the Active Adversary reports were launched in 2020, and defenders should consider this a clear sign to prioritize the management of these services when assessing risk to the enterprise.
“External remote services are a necessary, but risky, requirement for many businesses. Attackers understand the risks these services pose and actively seek to subvert them due to the bounty that lies beyond. Exposing services without careful consideration and mitigation of their risks inevitably leads to compromise. It doesn’t take long for an attacker to find and breach an exposed RDP server, and without additional controls, neither does finding the Active Directory server that awaits on the other side,” said John Shier, field CTO, Sophos.
In one Sophos X-Ops customer case, attackers successfully compromised the victim four times within six months, each time gaining initial access through the customer’s exposed RDP ports.
Once inside, the attackers continued to move laterally throughout the customer’s networks, downloading malicious binaries, disabling endpoint protection, and establishing remote access.
Compromised credentials and exploiting vulnerabilities are still the two most common root causes of attacks. However, the 2023 Active Adversary Report for Tech Leaders, released last August, found that in the first half of that year, for the first time, compromised credentials surpassed vulnerabilities as the most frequent root cause of attacks. This trend continued through the rest of 2023, with compromised credentials representing the root cause of over 50% of IR cases for the entire year. When looking at Active Adversary data cumulatively over the years from 2020 through 2023, compromised credentials were also the number one “all-time” root cause of attacks, involved in nearly a third of all IR cases. Yet despite the historical prevalence of compromised credentials in cyberattacks, in 43% of IR cases in 2023, organizations did not have multi-factor-authentication configured.
Exploiting vulnerabilities was the second most common root cause of attacks, both in 2023 and when analyzing data cumulatively from 2020 through 2023, accounting for the root cause in 16% and 30% of IR cases, respectively.
“Managing risk is an active process. Organizations that do this well experience better security situations than those that don’t in the face of continuous threats from determined attackers. An important aspect of managing security risks, beyond identifying and prioritizing them, is acting on the information. Yet, for far too long, certain risks such as open RDP continue to plague organizations, to the delight of attackers who can walk right through the front door of an organization. Securing the network by reducing exposed and vulnerable services and hardening authentication will make organizations more secure overall and better able to defeat cyberattacks,” said Shier.
The Sophos Active Adversary Report for 1H 2024 is based on more than 150 incident response (IR) investigations spanning the globe across 26 sectors.
Targeted organizations are located in 23 different countries, including the United States, Canada, Mexico, Colombia, the United Kingdom, Sweden, Switzerland, Spain, Germany, Poland, Italy, Austria, Belgium, the Philippines, Singapore, Malaysia, India, Australia, Kuwait, the United Arab Emirates, Saudi Arabia, South Africa, and Botswana.
To learn more about the current adversary landscape, read It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024 on Sophos.com.
The 2024 V-Convention held in Penang, Malaysia has come and gone but its sights and sounds is still reverberating as Nigerian Journalists who had the rare opportunity of attending the event shared their experiences and the immense opportunities QNET is providing to people through direct selling.
The event, which brought together over 8,000 participants from 30 countries, showcased the global reach and cross-border partnerships, which are crucial for direct selling businesses to thrive, particularly in emerging markets like Nigeria.
While speaking at the 2nd VCON 2024 Media Experience webinar on Thursday, the two journalists that witnessed the event shared their personal experiences, insights and take away from the convention in Penang, Malaysia.
Recounting his experience at the event, Sulaiman Aledeh, A TV journalist with Arise, described the experience as thrilling. “The V-Convention was more than a business event,” he remarked.
“It was a gathering of individuals united by their passion for personal growth, entrepreneurship, and wellness. The energy and enthusiasm were unmistakable, and it was inspiring to witness so many people coming together to support one another’s goals.”
He further highlighted QNET’s business strategies while lauding their efforts in supporting education and law enforcement partnerships.
Aledeh added, “One of the things that struck me most about the V-Convention was the sense of community and camaraderie among the attendees. Everyone was there to learn, grow, and support each other, and it created a truly inspiring atmosphere.”
Peter Oluka, Editor of TechEconomy and another attendee of VCON 2004, echoed similar sentiments, describing the event as more than just a business convention.
For him, the gathering of entrepreneurs from diverse backgrounds created a powerful network of like-minded individuals passionate about innovation and entrepreneurship.
He was particularly impressed by QNET’s focus on environmentally friendly products, signaling that the direct selling industry has much to offer in terms of sustainable development.
He praised the diversity of the attendees, the informative workshops, and the focus on innovation and sustainability, and highlighted the opportunity to explore Penang and experience Malaysian culture.
According to Oluka, “The V-Convention was a life-changing experience for me. It opened my eyes to the possibilities of direct selling and entrepreneurship, and I am now more motivated than ever to pursue my own business goals.”
Earlier, Theodocia Quartey, QNET’s Senior Legal Counsel for Sub-Saharan Africa, highlighted the importance of the VCON media webinar, noting that “The event offered participants a chance to expand their product knowledge, interact with experts, and take advantage of vibrant networking opportunities. It reflects QNET’s steadfast commitment to innovation and sustainability.”
“Twice yearly, we brings together a diverse assembly of marketing professionals, experienced business leaders, and global entrepreneurs associated with the QI Group’s flagship business in Penang, Malaysia.
“During V-Conventions, QNET extends invitations to selected journalists from media outlets in Nigeria to experience this important event.
“The just-concluded V-Convention in September 2024 brought together over 8,000 attendees from over 30 countries. The theme of the event was “Unstoppable,” emphasizing QNET’s unwavering commitment to innovation and sustainability.
“V-Convention continues to provide a platform to empower individuals and communities worldwide and champion innovation and sustainability through deepening product knowledge, engaging with experts, and experiencing dynamic demonstrations.
“Attendees benefit from business training sessions, motivational speeches, and product exhibitions, providing them with invaluable personal and professional growth opportunities”.
Mr. Akeem Ajisafe, Managing Director of Transblue Limited, QNET’s legal partner in Nigeria, emphasized the significant potential of the direct selling industry for Nigerian entrepreneurs during the second VCON 2024 Media Experience sharing webinar.
Ajisafe emphasized the importance of direct selling as a path to personal and financial empowerment, and pointed out the industry’s rapid expansion, with the global market expected to reach $204.89 billion by 2032.
“Direct selling provides entrepreneurs with a unique opportunity to harness their skills and build successful businesses with minimal investment,” he stated.
Ajisafe also discussed the misconceptions about direct selling in Nigeria, stressing the need to differentiate between legitimate direct selling companies and pyramid schemes. “QNET is dedicated to ethical practices and transparency,” he affirmed.
“We are working to educate the public about the benefits of direct selling and to dispel negative stereotypes. We believe that Nigeria has a bright future in the direct selling industry. By embracing this model, entrepreneurs can create jobs, generate wealth, and contribute to the country’s economic growth.”
MTN Nigeria, a leading ICT company, has partnered with Audiomack, a renowned music streaming platform, to introduce the Audiomack+ subscription program.
This strategic collaboration provides MTN subscribers with seamless access to premium Audiomack content, uninterrupted streaming, offline downloads, and exclusive features through convenient mobile payment options.
Audiomack+ offers three flexible subscription plans, enabling subscribers to discover emerging artists, underground music, and community-driven playlists. Music lovers can enjoy, Month Pass (N900/month): 30-day free trial + uninterrupted streaming, Week Pass (N400/week): Affordable weekly subscription and Day Pass (N100/day): Daily access to premium content.
“This partnership with Audiomack reinforces our commitment to delivering value-added services to our customers,” said A’isha Mumuni, Chief Digital Officer of MTN Nigeria.
“We’re excited to offer our subscribers an easy and affordable way to access premium music content, empowering them to explore new music and support their favorite artists.”
David Ponte, Audiomack Co-Founder and CMO, added, “Our partnership with MTN Nigeria brings us closer to making music accessible to everyone.
“With Audiomack+, we’re proud to offer affordable premium streaming options, providing users in Nigeria with the best music experience possible.”
To subscribe to the Audiomack+ monthly plan, text APM to 3134 or visit Audiomack+ Month Pass. Alternatively, customers can text APW to 3134 or text APD to 3134 for weekly or daily subscriptions.
Through its strategic partnership with music streaming platforms, MTN Nigeria reinforces its commitment to providing enhanced and innovative digital experiences to customers.
Telecom
Elon Musk’s X Slammed with $418,000 Fine in Australia for Failing to Provide Child Protection Data
An Australian court has upheld a decision requiring X, formerly known as Twitter, to pay A$610,500 ($418,000) fine after failing to cooperate with a request from the nation’s eSafety Commissioner.
The request was for detailed information about the platform’s efforts to tackle child sexual exploitation material.
X initially contested the fine, arguing that a corporate restructuring in 2022, when Elon Musk took Twitter private and merged it into a new entity, freed the company from having to comply with the request issued in early 2023. However, the Federal Court of Australia disagreed, ruling that the platform was still bound to provide the information.
Julie Inman Grant, the eSafety Commissioner, noted that if accepted, it could have set a dangerous precedent. She stated that such corporate mergers could allow international companies to sidestep regulatory obligations in Australia, undermining internet safety efforts.
The penalty relates to a current inquiry into how tech companies, including X, are managing harmful content, particularly involving child protection. The eSafety Commissioner had requested specific details on the platform’s anti-child abuse strategies, which X failed to provide. In addition to the fine, civil proceedings have also been initiated against the company due to its noncompliance.
Musk’s X has faced previous clashes with the Australian internet safety regulator. Earlier this year, the eSafety office ordered the platform to remove content showing a violent incident involving a bishop being attacked during a sermon.
X challenged that directive, arguing that regulators in one nation should not dictate what content is visible worldwide. The Australian regulator eventually dropped the case, and X kept the posts online. Musk criticised the order, labelling it as an act of censorship and linked it to a larger agenda by international bodies like the World Economic Forum.
This latest legal setback adds to Musk’s growing list of challenges in managing the platform since his takeover, particularly as it continues to face questions from regulators around the world.
Cybercriminals Using “Joker: Folie à Deux” Release to Scam Fans
New Cloud Service to Minimise Banks’ Exposure To Risks
Nigerian Journalists Recount Experiences @QNET’s 2024 V-Convention
NDPC Extends Deadline for DCPMIS Registration, Warns Against Engaging Unregistered Data Processors
MTN Nigeria Expands Digital Offerings with Audiomack+ Music Subscription
NCAIR Launches ₦100m AI Fund Supported by Google to Empower Local Startups
Breaking…. Fraudsters Steal N6.Bn from Hope PS Bank
SEC Says 50 Crypto Exchanges have Applied for Licenses
BBNaija: The Final Showdown Begins, Explosive Evictions, Toke Spills the Tea, and Kelly Rae Grabs Head of House
Coker Urges Africa to Close Digital Infrastructure Gap for Prosperity
E-Financial3 days agoZenith Bank Assures Customers on Seamless Transactions, Apologizes for Disruptions During Infrastructure Upgrade
E-Financial2 days agoCBN Introduces EFEMS to Enhance Transparency in Forex Market
E-Business1 day agoCybercriminals Using “Joker: Folie à Deux” Release to Scam Fans
E-Business2 days agoKaspersky Reveals Half of Dark Web Exploit Listings Target Zero-day Vulnerabilities
Telecom2 days agoFG Hopeful Thuraya’s Relaunch in Nigeria Will Boost Fight against Insecurity, Others
News2 days agoNigeria Police Charge 4 Journalists with Cybercrimes for Corruption Reporting
E-Financial2 days agoFG to Rename FIRS, Plans Tax Tribunal
E-Business2 days agoSpotify Launches Offline Backup for Premium Users