Telecom
Sophos’ Incident Response Report Shows How Cybercriminals Abuse Remote Desktop Protocol in 90% of Attacks
Sophos, a global leader of innovative security solutions that defeat cyberattacks, today released the Active Adversary analysis, “It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024.”
John Shier, senior security advisor at Sophos
The report, which analyzes more than 150 incident response (IR) cases handled by the Sophos X-Ops IR team in 2023, found that cybercriminals abused remote desktop protocol (RDP)—a common method for establishing remote access on Windows systems—in 90% of attacks.
This was the highest incidence of RDP abuse since Sophos began releasing its Active Adversary reports in 2021, covering data from 2020.
In addition, external remote services such as RDP were the most common vector by which attackers initially breached networks; they were the method of initial access in 65% of IR cases in 2023.
External remote services have consistently been the most frequent source of initial access for cybercriminals since the Active Adversary reports were launched in 2020, and defenders should consider this a clear sign to prioritize the management of these services when assessing risk to the enterprise.
“External remote services are a necessary, but risky, requirement for many businesses. Attackers understand the risks these services pose and actively seek to subvert them due to the bounty that lies beyond. Exposing services without careful consideration and mitigation of their risks inevitably leads to compromise. It doesn’t take long for an attacker to find and breach an exposed RDP server, and without additional controls, neither does finding the Active Directory server that awaits on the other side,” said John Shier, field CTO, Sophos.
In one Sophos X-Ops customer case, attackers successfully compromised the victim four times within six months, each time gaining initial access through the customer’s exposed RDP ports.
Once inside, the attackers continued to move laterally throughout the customer’s networks, downloading malicious binaries, disabling endpoint protection, and establishing remote access.
Compromised credentials and exploiting vulnerabilities are still the two most common root causes of attacks. However, the 2023 Active Adversary Report for Tech Leaders, released last August, found that in the first half of that year, for the first time, compromised credentials surpassed vulnerabilities as the most frequent root cause of attacks. This trend continued through the rest of 2023, with compromised credentials representing the root cause of over 50% of IR cases for the entire year. When looking at Active Adversary data cumulatively over the years from 2020 through 2023, compromised credentials were also the number one “all-time” root cause of attacks, involved in nearly a third of all IR cases. Yet despite the historical prevalence of compromised credentials in cyberattacks, in 43% of IR cases in 2023, organizations did not have multi-factor-authentication configured.
Exploiting vulnerabilities was the second most common root cause of attacks, both in 2023 and when analyzing data cumulatively from 2020 through 2023, accounting for the root cause in 16% and 30% of IR cases, respectively.
“Managing risk is an active process. Organizations that do this well experience better security situations than those that don’t in the face of continuous threats from determined attackers. An important aspect of managing security risks, beyond identifying and prioritizing them, is acting on the information. Yet, for far too long, certain risks such as open RDP continue to plague organizations, to the delight of attackers who can walk right through the front door of an organization. Securing the network by reducing exposed and vulnerable services and hardening authentication will make organizations more secure overall and better able to defeat cyberattacks,” said Shier.
The Sophos Active Adversary Report for 1H 2024 is based on more than 150 incident response (IR) investigations spanning the globe across 26 sectors.
Targeted organizations are located in 23 different countries, including the United States, Canada, Mexico, Colombia, the United Kingdom, Sweden, Switzerland, Spain, Germany, Poland, Italy, Austria, Belgium, the Philippines, Singapore, Malaysia, India, Australia, Kuwait, the United Arab Emirates, Saudi Arabia, South Africa, and Botswana.
To learn more about the current adversary landscape, read It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024 on Sophos.com.
9 Payment Service Bank (9PSB), Nigeria’s digital payment service bank, focused on financial inclusion has reiterated its support to Nigerian women entrepreneurs and Small and Medium Scale Enterprises through its agent banking business opportunities that will scale up their revenue base and improve their standard of living at the 2024 South-West Women Chamber of Commerce and Industry, Emerging Market Emerging Market Summit and Expo.
The event themed: Women Entrepreneur as Catalyst for Sustainable Development and Economic Growth held at Lagos State Co-operative Federation (LASCOFED) aimed at training and empowering over 500 women participants on entrepreneurship skills and fostering market link and economic growth, had in attendance women entrepreneurs and SMEs owners across South-West region who have been using their skills and resources to make purpose driven contributions to the society.
Speaking at the event, the Chief Executive Officer, and Managing Director, 9 Payment Service Bank, Branka Mracajac, represented by the Head of Sales Distribution and Strategic Partners, 9 Payment Service Bank (9PSB), Kunle Isiaka commended the women for their resilience and viable contributions to their communities through the various initiatives and businesses.
‘’I am indeed very thrilled to see these amazons who have been breaking all barriers without limitation in all strata of the society, women are truly the bedrock of the society, when a woman is trained, a nation is of course trained, we cannot over emphasize the need for the women the be financially included, empowered, and given the required support to thrive.
It is understood that a reasonable number of the women folks lack the basic financial knowledge, and many are financially excluded from the formal financial system, this has impacted to an extend their means of doing business.
A report by EFInA states that at least thirty-eight million (that is, 36%) Nigerian adults still do not have a bank account but majority of them have phones, it also shows that four out of every 10 Nigerians are financially excluded, and they are mostly females.
In Lagos State, there are at least eight million adults between the 18 years and above who live in Lagos and more influents daily. Out of this number, 54% of adults are business owners or traders and 28% of them receive payment digitally. With this statistics, 9 Payment Service Bank is working and consolidating on these areas.
“In addition, 91% of Lagos adult females are currently financially served, 6% of women in Lagos have access to credit facility, while we focus on the 8% excluded Lagosian, although our license does not permit us yet to give out loans, but we are doing everything possible to ensure we support the women through our agent banking training geared towards women empowerment,” Kunle added.
“As a bank providing services to the banked and underbanked, we dwell on strategic partnership with other players in the industry because we cannot do it all alone, we have the mandate to drive financial inclusion and ensure that every household is financially included. Also, a robust agent network spreading across the country to facilitate financial transactions have been of tremendous progress.
“We have empowered over 18,000 agents out of which over 45 per cent of them are women. As we make progress in this journey, our Service Location Partners will continue to engage you at your various locations with necessary support to thrive as a merchant in the payment services industry,” he remarked.
Nigerian Communications Commission (NCC) has urged telecommunications operators in the country to embrace infrastructure sharing to reduce their operating cost.
Aminu Maida, executive vice-chairman of NCC,
This is coming on the heels of calls by both Association of Licensed Telecom Operators of Nigeria (ALTON) and the Association of Telecommunication Companies of Nigeria (ATCON) for cost-reflective pricing model after 11 years.
But during the 2nd edition of the West African Telecoms Infrastructure Summit and Exhibition at the weekend in Lagos, Aminu Maida, executive vice-chairman, NCC, said operators in the telecommunications sector could reduce their cost and enhance service delivery through partnerships.
Maidan was represented by Mr Victor Adoga, head, Next Generation Technology and Standards at the NCC.
He said the short-term remedy is public-private partnerships, infrastructure funds, and innovative financing models like Infrastructure as a Service.
He said, “Today, we boast of over 219 million mobile subscribers and a burgeoning tech-savvy population eager to harness digital technologies.
“However, while our growth has been remarkable, it has not been without its challenges. Issues such as uneven service distribution, infrastructural deficits, and regulatory uncertainties have occasionally hindered our progress.
“Yet, each challenge also presented a unique opportunity for growth and innovation.”
The NCC boss also advised the operators to embrace Artificial Intelligence (AI) and machine learning to optimize network management, predict maintenance needs, and enhance customer service through automation, and advanced analytics is also necessary.
“Another strategy is developing smart infrastructure, because as cities become smarter, telecom infrastructure must evolve to support an array of smart city applications, from traffic management systems to public safety solutions,” said the EVC.
Wale Owoeye, the Managing Director/CEO of Cedarview Communications Limited, a leading ICT firm based in Lagos State, has been honored as one of Nigeria’s 50 most influential personalities in the digital economy.
He received this prestigious recognition at the recent “50 Most Valuable Personalities in Nigeria’s Digital Economy” event held in Lagos.
Organised by IT Edge News Africa, the event brought together key stakeholders from various sectors, including prominent industry associations such as the Association of Telecommunications Companies of Nigeria (ATCON), Association of Licensed Telecoms Operators of Nigeria (ALTON), and the Association of Licensed Data Protection Organisations of Nigeria (ALDAPCON).
Dr. Vincent Olatunji, the National Commissioner/CEO of the Nigeria Data Protection Commission (NDPC), Ike Nnamani, CEO of Digital Realty Nigeria, and Prof. Nentawe Goshwe Yilwatda, a distinguished scholar and politician, delivered keynote presentations.
Olatunji emphasized the crucial role of data protection in the digital economy, while Yilwatda outlined essential steps for Nigeria to maximize opportunities in the digital economy and the Fourth Industrial Revolution (4IR).
Nnamani, whose presentation focused on the “Myths and Realities of the Nigerian Digital Economy,” underscored the accelerated digitization of both consumer and enterprise sectors in Nigeria, driving demand for digital skills and data center capacity.
Gathering recognizes Owoeye’s exceptional contributions to Nigeria’s digital economy
The gathering recognized Owoeye’s exceptional contributions to Nigeria’s digital economy. With a remarkable career in Nigeria’s ICT/telecoms sector, Owoeye has successfully steered Cedarview Communications to expand its presence to Port Harcourt and Abuja, offering a wide range of Value Added Services (VAS) in the telecoms market.
Cedarview has also established strategic alliances in Asia, Europe, and the US to facilitate growth in its operational areas. Additionally, Owoeye serves as the VAS Coordinator for the Association of Telecommunications Companies of Nigeria (ATCON), further solidifying his impact on Nigeria’s digital economy.
Published since 2009, IT Edge News Africa is one of Africa’s leading technology and business publications.
LG Electronics Brings the Rhythm to Nigeria with K-POP Fiesta
9PSB Empowering Women Entrepreneurs, SMEs Owners With Agent Banking Opportunities
CWG Board of Directors Approves 400% Increase in Dividend Payout
Why Multichoice Hiked Subscriptions for DStv and GOtv Packages- FCCPC
Nigerians Trust Bitcoin for Financial Security than Sanks – Report
See Full List of Fake Loan Apps Blacklisted By CBN
CBN Sacks another 50 Staff, 117 Disengaged in 20 Days
AfDB, AGF Partner on Female Entrepreneurs’ Access to Finance
Nigeria Plans AI Strategy Workshop for National Development
IMF says Rising Cyber Threats Pose Serious Concerns for Financial Stability
News3 days agoLegit.ng, Shade of Life Foundation Partner to Advance Autism Awareness in Nigeria
News3 days agoAs Nigeria Struggle, Tanzania Turns off Power Plants Due to Excess Supply
E-Business3 days agoFG to Fnalise National Intellectual Property Policy Soon– NCC Boss
E-Financial3 days agoCBN Licenses Unified Payments as Second Provider for PTSA Services for Nigeria
News1 day agoProf. Aliyu, AI Practitioner to Keynote ABoICT 2024
Telecom1 day agoThe NCC, Telcos and the Tariff Discourse
Broadcasting23 hours agoWhy Multichoice Hiked Subscriptions for DStv and GOtv Packages- FCCPC
Telecom1 day agoWale Owoeye Shines among Nigeria’s Top 50 Digital Economy Leaders