Connect with us

Telecom

Sophos’ Incident Response Report Shows How Cybercriminals Abuse Remote Desktop Protocol in 90% of Attacks

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions that defeat cyberattacks, today released the Active Adversary analysis, “It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024.”

John Shier, senior security advisor at Sophos

The report, which analyzes more than 150 incident response (IR) cases handled by the Sophos X-Ops IR team in 2023, found that cybercriminals abused remote desktop protocol (RDP)—a common method for establishing remote access on Windows systems—in 90% of attacks.

This was the highest incidence of RDP abuse since Sophos began releasing its Active Adversary reports in 2021, covering data from 2020.

In addition, external remote services such as RDP were the most common vector by which attackers initially breached networks; they were the method of initial access in 65% of IR cases in 2023.

External remote services have consistently been the most frequent source of initial access for cybercriminals since the Active Adversary reports were launched in 2020, and defenders should consider this a clear sign to prioritize the management of these services when assessing risk to the enterprise.

“External remote services are a necessary, but risky, requirement for many businesses. Attackers understand the risks these services pose and actively seek to subvert them due to the bounty that lies beyond. Exposing services without careful consideration and mitigation of their risks inevitably leads to compromise. It doesn’t take long for an attacker to find and breach an exposed RDP server, and without additional controls, neither does finding the Active Directory server that awaits on the other side,” said John Shier, field CTO, Sophos.

In one Sophos X-Ops customer case, attackers successfully compromised the victim four times within six months, each time gaining initial access through the customer’s exposed RDP ports.

Once inside, the attackers continued to move laterally throughout the customer’s networks, downloading malicious binaries, disabling endpoint protection, and establishing remote access.

Compromised credentials and exploiting vulnerabilities are still the two most common root causes of attacks. However, the 2023 Active Adversary Report for Tech Leaders, released last August, found that in the first half of that year, for the first time, compromised credentials surpassed vulnerabilities as the most frequent root cause of attacks. This trend continued through the rest of 2023, with compromised credentials representing the root cause of over 50% of IR cases for the entire year. When looking at Active Adversary data cumulatively over the years from 2020 through 2023, compromised credentials were also the number one “all-time” root cause of attacks, involved in nearly a third of all IR cases. Yet despite the historical prevalence of compromised credentials in cyberattacks, in 43% of IR cases in 2023, organizations did not have multi-factor-authentication configured.

Exploiting vulnerabilities was the second most common root cause of attacks, both in 2023 and when analyzing data cumulatively from 2020 through 2023, accounting for the root cause in 16% and 30% of IR cases, respectively.

“Managing risk is an active process. Organizations that do this well experience better security situations than those that don’t in the face of continuous threats from determined attackers. An important aspect of managing security risks, beyond identifying and prioritizing them, is acting on the information. Yet, for far too long, certain risks such as open RDP continue to plague organizations, to the delight of attackers who can walk right through the front door of an organization. Securing the network by reducing exposed and vulnerable services and hardening authentication will make organizations more secure overall and better able to defeat cyberattacks,” said Shier.

The Sophos Active Adversary Report for 1H 2024 is based on more than 150 incident response (IR) investigations spanning the globe across 26 sectors.

Targeted organizations are located in 23 different countries, including the United States, Canada, Mexico, Colombia, the United Kingdom, Sweden, Switzerland, Spain, Germany, Poland, Italy, Austria, Belgium, the Philippines, Singapore, Malaysia, India, Australia, Kuwait, the United Arab Emirates, Saudi Arabia, South Africa, and Botswana.

To learn more about the current adversary landscape, read It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024 on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Nigeria Moves to End Solar Imports as NASENI, REA Seal Major Renewable Energy Deal

Published

on

Kindly share this post

National Agency for Science and Engineering Infrastructure (NASENI) has signed a Memorandum of Understanding (MoU) with the Rural Electrification Agency (REA) to promote locally manufactured renewable energy technologies under the Federal Government’s ‘Nigeria First Policy’.

Nigeria Moves to End Solar Imports as NASENI, REA Seal Major Renewable Energy Deal

L-R: EVC/CEO, National Agency for Science and Engineering Infrastructure, Mr. Khalil Suleiman Halilu; Director-General of the Bureau of Public Procurement (BPP), Dr. Adebowale Abraham Adedokun; and Dr. Abba Abubakar Aliyu, Managing Director and Chief Executive Officer of the Rural Electrification Agency (REA), at the signing of the MoU on implementation of Nigeria First Policy for offtake of NSSENI’s renewable energy products for rural electrification projects held on Friday, June 19, 2026 at BPP’s office in Abuja.

The agreement signing was facilitated by the Director-General of the Bureau of Public Procurement (BPP), Dr. Adebowale Abraham Adedokun at the BPP headquarters in Abuja on Friday, June 19, 2026.

Speaking at the event, the Executive Vice Chairman/CEO of NASENI, Mr. Khalil Suleiman Halilu, said the Agency is focused on linking research, production, and commercialization to ensure that innovations are translated into market-ready products.

He said “NASENI would scale up renewable energy production, including solar panels and streetlights, through initiatives such as DefFrontier, to strengthen local manufacturing and reduce import dependence, adding that the Agency will meet the renewable energy requirements of REA.”

Instead of continuous importation of technologies, machines and equipment for producing renewable energy solutions, NASENI by this MoU will be committed to local manufacturing and domestication of the technologies, equipment and other ways and means of proliferation of renewable resource in the country and to increase the nation’s off-grid energy solutions.

The Managing Director/CEO of REA, Dr. Abba Abubakar Aliyu, described the relationship with NASENI as a strategic partnership aimed at building Nigeria’s renewable energy ecosystem through local production and deployment.

He stated that “while NASENI provides the manufacturing and technological capacity for renewable equipment, REA will focus on deploying solutions to expand electricity across rural areas.”

Meanwhile, the Director-General of BPP, Dr. Adebowale Abraham Adedokun, said the Nigeria First Policy, exemplified by this agreement, is aimed at strengthening local content, ensuring value for money, and promoting accountability in public procurement.

He emphasized that implementation of the agreement will be performance-based, with strict monitoring to ensure compliance and measurable outcome. He added that the MoU is expected to deepen collaboration between NASENI and REA in expanding renewable energy and reducing dependence on imported technologies.

The MoU will be implemented through NASENI’s  subsidiary company, NASENI Devfrontier Green Energy FZE and REA limited liability company, RAMco.The two Federal Government agencies seek to establish a strategic collaboration under which REA shall offtake PV modules, inverters, energy storage batteries of NASENI-Devfrontier Green Energy FZE directly or through its approved distribution companies/assembly and manufacturing factory.

As part of the agreement, REA shall provide institutional visibility to enable NASENI participate in electrification projects; facilitate opportunities for engagements between NASENI and eligible developers/contractors under REA programs; ensure that such facilitation is consistent with applicable procurement, local content, and transparency requirements; and  also collaborate with NASENI in promoting standardized, high-quality PV technologies across its programme portfolio.


Kindly share this post
Continue Reading

Telecom

TikTok, ICC Gather Nigeria’s Entrepreneurs to Drive Small Business Growth and Digital Transformation

Published

on

Kindly share this post

TikTok, in collaboration with the International Chamber of Commerce (ICC), on Thursday convened hundreds of entrepreneurs, small business owners, digital creators and industry stakeholders in Lagos for a flagship Digital Commerce Labs (DCL) event aimed at accelerating digital skills development and economic inclusion across Sub-Saharan Africa.

TikTok, ICC Gather Nigeria’s Entrepreneurs to Drive Small Business Growth and Digital Transformation

TikTok

The event, supported by the National Information Technology Development Agency (NITDA) and the Lagos State Employment Trust Fund (LSETF), brought together participants from across Nigeria’s business and technology ecosystem to explore how digital platforms can be leveraged to scale enterprises, improve market access and drive job creation.

Speaking at the event, organisers said the initiative marks the beginning of a broader programme designed to train thousands of small and medium-sized enterprises (SMEs) across the region in digital commerce skills through both online and physical learning platforms.

According to TikTok, the partnership reflects its commitment to supporting small businesses and strengthening Africa’s growing digital economy.

“Digital commerce is reshaping how businesses grow across Sub-Saharan Africa, and Nigerian entrepreneurs are at the heart of that shift,” said Tokunbo Ibrahim, Acting Head of Government Relations and Public Policy, Sub-Saharan Africa, TikTok.

He said the initiative would ensure that small businesses benefit from emerging opportunities in social commerce and digital trade.

The Director-General of NITDA, Kashifu Inuwa Abdullahi, said digital platforms have evolved beyond entertainment and are now key drivers of economic growth and innovation.

He noted that Nigeria’s youth population and growing digital adoption position the country to benefit significantly from the expansion of online commerce and creator-led businesses.

“At NITDA, our vision is to make Nigeria a digitally enabled nation, fostering inclusive economic development through technological innovation,” he said.

The ICC Deputy Secretary General, Julian Kassum, described the programme as a strategic effort to equip small businesses with tools needed to compete in the global digital economy.

He said the Digital Commerce Labs initiative would help expand opportunities for trade, entrepreneurship and employment.

The Lagos State Employment Trust Fund (LSETF) also announced support for the programme through capacity-building training in financial literacy, business structuring, record keeping, taxation and legal advisory services. It said participating businesses would gain access to funding opportunities after completing the programme.

Data presented at the event showed that Nigeria’s social commerce sector is projected to reach $2.04 billion in 2025 and nearly $4 billion by 2030, while Africa’s wider market is expected to grow to $9.43 billion within the same period.

Speakers at the event noted that social media platforms have become central to business growth in Nigeria, with many SMEs relying exclusively on digital channels to reach customers and drive sales.

The programme also featured keynote presentations, business training sessions, and a creator economy spotlight where Nigerian entrepreneurs shared experiences on building brands and scaling businesses through digital platforms such as TikTok.

Organisers said the initiative is expected to strengthen digital literacy, expand market access for SMEs, and deepen Nigeria’s participation in the global digital economy.


Kindly share this post
Continue Reading

Telecom

How a New NITDA-TikTok Partnership Could Transform Thousands of Nigerian Businesses

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) and TikTok have launched a strategic partnership aimed at equipping Nigerian Small and Medium Enterprises (SMEs) with digital commerce skills, tools, and opportunities to compete effectively in the digital economy.

How a New NITDA-TikTok Partnership Could Transform Thousands of Nigerian Businesses

NITDA

The partnership was unveiled at the launch of the TikTok Digital Commerce Labs Programme for SMEs, held in Lagos, where stakeholders from government, the private sector, entrepreneurship support organisations, and the digital ecosystem gathered to explore innovative pathways for empowering Nigerian businesses through technology.

Speaking at the event, the Director-General and Chief Executive Officer of NITDA, Kashifu Inuwa Abdullahi, CCIE, represent at the event by Dr Aristotle Onumo, Director Stakeholder Management and Partnerships,  described digital commerce as one of the most powerful drivers of economic inclusion and business growth in the modern economy, noting that access to digital skills has become increasingly critical for the survival and competitiveness of businesses.

According to the NITDA boss, the future of commerce is increasingly digital, and entrepreneurs who embrace technology will be better positioned to access larger markets, increase productivity, and create sustainable wealth.

He observed that while Nigeria is blessed with millions of hardworking and innovative entrepreneurs, many small businesses still lack the digital capabilities required to fully participate in the opportunities offered by the digital economy.

“Today, a young entrepreneur with a smartphone can reach customers beyond geographical boundaries, build a brand, market products globally, and create economic opportunities that were previously unimaginable. Our responsibility is to ensure that every entrepreneur, regardless of location, has access to the digital skills and tools needed to succeed in this new economy,” he said.

A major highlight of the event was the announcement of a collaborative programme between NITDA and TikTok designed to extend digital commerce training to SMEs across the country.

As part of the initiative, TikTok has committed an initial investment of approximately US$20,000 to support a pilot Train-the-Trainer Programme, which will leverage NITDA’s Digital Literacy for All (DL4ALL) networks to deliver digital commerce training to entrepreneurs, particularly those in remote and underserved communities.

Inuwa commended TikTok for its commitment to supporting entrepreneurship and digital inclusion in Nigeria, describing the initiative as a practical example of how technology platforms can contribute meaningfully to economic empowerment and national development.

He noted that the collaboration aligns with NITDA’s Strategic Roadmap and Action Plan (SRAP 2.0), particularly the Agency’s commitment to achieving widespread digital literacy, promoting innovation, supporting entrepreneurship, and fostering inclusive economic growth.

The DG stressed that technology should not merely be viewed as a tool for communication and entertainment but as a platform for creating opportunities, generating income, and transforming lives.

“Technology is most powerful when it empowers the least connected, creates opportunities for the underserved, and transforms potential into prosperity,” he stated.

Industry stakeholders at the event described the initiative as timely, especially at a period when businesses are increasingly leveraging digital platforms to connect with customers, expand operations, and access new markets.

The TikTok Digital Commerce Labs Programme is expected to strengthen digital capabilities among SMEs, improve access to digital opportunities, and contribute to the growth of Nigeria’s digital economy by enabling entrepreneurs to harness the power of technology for business development.

The launch reinforces NITDA’s vision to building a digitally empowered Nation fostering inclusive economic development through technological innovation where individuals, startups, and businesses can leverage technology to create value, generate employment, and contribute to national prosperity.

As Nigeria continues its journey towards becoming a leading digital economy in Africa, collaborations such as the NITDA-TikTok partnership are expected to play a significant role in empowering citizens, fostering innovation, and expanding economic opportunities for millions of Nigerians.


Kindly share this post
Continue Reading

Trending