Telecom
Sophos “Pacific Rim” Report Details its Defensive and Counter-Offensive Operation with Multiple Interlinked Adversaries

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today released “Pacific Rim,” a report detailing its defensive and counter-offensive operation over the last five years with multiple interlinked nation-state adversaries based in China targeting perimeter devices, including Sophos Firewalls.
The attackers used a series of campaigns with novel exploits and customized malware to embed tools to conduct surveillance, sabotage and cyberespionage as well as overlapping tactics, tools and procedures (TTPs) with well-known Chinese nation-state groups including Volt Typhoon, APT31 and APT41.
The adversaries targeted both small and large critical infrastructure and government targets, primarily located in South and South-East Asia, including nuclear energy suppliers, a national capital’s airport, a military hospital, state security apparatus, and central government ministries.
Throughout Pacific Rim, Sophos X-Ops, the company’s cybersecurity and threat intelligence unit, worked to neutralize the adversaries’ moves and continuously evolved defenses and counter-offensives.
After Sophos successfully responded to the initial attacks, the adversaries escalated their efforts and brought in more experienced operators. Sophos subsequently uncovered a vast adversarial ecosystem.
While Sophos released details starting in 2020 on the campaigns associated, including Cloud Snooper and Asnarök, the company is sharing the overall investigation analysis to raise awareness of the persistence of Chinese nation-state adversaries and their hyperfocus to compromise perimeter, unpatched and end-of-life (EOL) devices, often via zero-day exploits they are creating for those devices.
Sophos is also encouraging all organizations to urgently apply patches for vulnerabilities discovered in any of their internet-facing devices and to migrate any older unsupported devices to current models.
Sophos regularly updates all of its supported products based on new threats and indicators of compromise (IoCs) to protect customers. Sophos Firewall customers are protected via rapid hotfixes that are now turned on by default.
“The reality is that edge devices have become highly attractive targets for Chinese nation-state groups like Volt Typhoon and others as they look to build operational relay boxes (ORBs) to obfuscate and support their activity.
“This includes directly targeting an organization for espionage, or indirectly leveraging any weak points for onward attacks – essentially becoming collateral damage. Even organizations that are not targets are getting hit.
“Network devices designed for businesses are natural targets for these purposes – they are powerful, always on, and have constant connectivity,” said Ross McKerchar, CISO at Sophos.
“When a group seeking to build a global network of ORBs targeted some of our devices, we responded by applying the same detection and response techniques we use to defend our corporate endpoints and network devices.
“This allowed us to burn multiple operations and tap into a valuable stream of threat intelligence that we applied to protect our customers from both future widespread attacks and highly targeted operations.”
Highlights of the Report
● On Dec. 4, 2018, a low-privileged computer connected to an overhead display began to scan the Sophos network—seemingly on its own—at the India headquarters of Cyberoam, a company Sophos acquired in 2014. Sophos found a payload quietly listening for specialized inbound internet traffic on the computer that contained a novel type of backdoor and a complex rootkit — “Cloud Snooper.”
● In April 2020, after several organizations reported a user interface pointing to a domain with “Sophos” in its name. Sophos worked with European law enforcement, which tracked down and confiscated the server the adversaries used to deploy malicious payloads in what Sophos later dubbed Asnarök. Sophos neutralized Asnarök, which the company was able to attribute to China, by taking over the malware’s command and control (C2) channel. It also allowed Sophos to neutralize a planned wave of botnet attacks.
● After Asnarök, Sophos advanced its intelligence operations by creating an additional threat actor tracking program focused on identifying and disrupting adversaries looking to exploit Sophos devices deployed in customer environments; the program was built using a combination of open-source intelligence, web analytics, telemetry monitoring, and targeted kernel implants deployed to the attackers’ research devices.
● Next, the attackers showed an increasing level of persistence, upleveling their tactics and deploying increasingly stealthy malware. However, using its threat actor tracking program and enhanced telemetry gathering capabilities, Sophos was able to pre-empt several attacks and obtain a copy of a UEFI bootkit and custom exploits before they could be deployed broadly.
● A few months later, Sophos tracked some of the attacks to an adversary who has demonstrated links to China and Sichuan Silence Information Technology’s Double Helix Research Institute in the country’s Chengdu region.
● In March 2022, an anonymous security researcher reported a zero-day remote code execution vulnerability, designated CVE-2022-1040, to Sophos as part of the company’s bug bounty program. Further investigation revealed that this CVE was already being exploited in the wild in multiple operations—operations that Sophos was then able to stop impacting customers. After deeper analysis, Sophos determined the person reporting the exploit may have had a connection to the adversaries.
“This was the second time Sophos received a suspiciously timed “tip” about an exploit before it was used maliciously.
“Recent advisories from CISA have made it clear that Chinese nation-state groups have become a perennial threat to nations’ critical infrastructure,” McKerchar continued.
“What we tend to forget is that small- and medium-sized businesses—those that form the bulk of the supply chain for critical infrastructure—are targets since they are often the weak links in this supply chain.
“Unfortunately, these businesses often have fewer resources to defend against such sophisticated threats. Further complicating matters is the tendency for these adversaries to gain a foothold and dig in, making it hard to evict them.
“The modus operandi of China-based adversaries is creating long-term persistence and complex obfuscated attacks. They won’t stop until they’re disrupted.”
Industry Quotes About Sophos’ Pacific Rim Report
“Through the JCDC, CISA obtains and shares crucial intelligence on the cybersecurity challenges we face, including the advanced tactics and techniques used by People’s Republic of China (PRC) state-sponsored cyber actors.
“The expertise of partners like Sophos and reports like its Pacific Rim report, provides the global cyber community more insights into the PRC’s evolving behaviors.
“By working side-by-side, we are helping cyber defenders understand the scale and widespread exploitation of edge network devices and implement mitigation strategies,” said Jeff Greene, executive assistant director for cybersecurity at CISA. “CISA continues to highlight how classes of vulnerabilities, including SQL injections and memory safety vulnerabilities, continue to be exploited en masse.
“We urge software manufacturers to review our Secure by Design resources and, as Sophos has done in this case, put its principles into practice. We encourage others to take the pledge and to review our alerts on how to eliminate common classes of defects.”
“Many cybersecurity vendors conduct adversarial research operations, but few are able to successfully do so against such a challenging set of nation-state adversaries for such a long period of time,” said Eric Parizo, managing principal analyst with the cybersecurity research group at Omdia.
“Sophos made the most of a highly unique opportunity, and it should be lauded for delivering research and tactical takeaways that will help better defend its customers now and well into the future.”
“At NCSC-NL, one of our tasks is to share information and connect organisations.
“Facilitating communication and cooperation between national and international organisations is of great importance to improve cyber resilience.
“We are happy to have been able to make a contribution to this investigation with Sophos,” said Hielke Bontius, head of operations, NCSC-NL.
Advice for Defenders
Organizations should expect all internet-facing devices are prime targets for nation-state adversaries, especially those devices in critical infrastructure. Sophos encourages organizations to take the following actions to strengthen their security posture.
● Minimize internet-facing services and devices when possible
● Prioritize patching with urgency for internet-facing devices and monitor these devices
● Enable hotfixes for edge devices to be allowed and applied automatically
● Collaborate with law enforcement, public-private partners, and government to share and act on relevant IoCs
● Create a plan for how your organization deals with EOL devices
“We need to work collaboratively across the public and private sector, law enforcement and governments, and the security industry, to share what we know about these adversarial operations. Targeting the very same edge devices that are deployed to protect networks is a bold and clever tactic. Organizations, channel partners and Managed Service Providers need to understand that these devices are top targets for attackers and should ensure they are appropriately hardened, and critical patches are applied as soon as they are released.
In fact, we know that attackers are actively hunting for EOL devices. Vendors play a big part here, too. They need to help customers by supporting reliable and well-tested hot fixing, making it easy to upgrade from EOL platforms, systematically refactoring or removing legacy code that can harbor lingering vulnerabilities, continuously improving secure by default designs to offload the customer burden of hardening, and monitoring the integrity of our deployed devices,” concluded McKerchar.
Telecom
MTN Nigeria Debuts Game-Changing CPaaS Platform at NextNow Forum

At the recently concluded NextNow Business Forum in Victoria Island, MTN Nigeria electrified the business community with a live demonstration of its forthcoming Communication Platform as a Service (CPaaS), a solution engineered to redefine how Nigerian enterprises connect with their customers.

L-R: Febisola Oyeniyi, General Manager, Enterprise Sales, MTN Nigeria; Omotayo Ojutalayo, General Manager, Business Development, Enterprise Business, MTN Nigeria; Akinbulejo Onabolu, Head, Enterprise Segment, MTN Nigeria and Omowunmi Olatunbosun, Head, SME Segment, MTN Nigeria, during the MTN NextNow Business Forum.
Unlike traditional communication systems, MTN’s CPaaS is built for the realities of a mobile-first market. The platform unifies SMS, voice, WhatsApp, email, and more into a single, intuitive interface.
This approach is especially significant in Nigeria, with over 107 million internet users, 45.4% of the total population, according to Data Report. This figure underscores the necessity for businesses to meet customers where they are.
During the demo, attendees witnessed how CPaaS enables two-way, real-time conversations between brands and customers. The platform’s support for rich media, instant analytics, and seamless integration with business workflows drew particular attention.
These features are designed to empower businesses with data-driven insights and the agility to personalise every interaction, whether it’s a service notification, marketing campaign, or customer support exchange.
Akinbulejo Onabolu, Head of Enterprise Segment at MTN Nigeria, articulated the vision: “CPaaS gives enterprises the flexibility to interact with their customers on their preferred platforms; whether it’s chat, voice, or messaging, in a way that feels personal and immediate. We’re looking forward to the value this will unlock for businesses across industries once it launches.”
The fireside chat added depth to the conversation, with Omowunmi Olatunbosun, Head of SME Segment at MTN Nigeria, and Stephen Agbi of Bayobab, highlighting how digital engagement bridges the gap between businesses and audiences. They emphasised that today’s consumers demand immediacy, relevance, and ease, qualities that CPaaS is built to deliver.
The stakes for digital transformation in Nigeria are high. In a report by Punch, the country’s enterprise tech market is projected to reach $22 billion by 2027, reflecting a surge in demand for scalable, cloud-based solutions that drive efficiency and customer loyalty.
The CPAAS Acceleration Alliance have estimated that globally, the CPaaS market is expected to grow from $14.7 billion in 2025 to $72.4 billion by 2035, at a compound annual growth rate of 18.4%, a testament to the platform’s transformative potential.
The event’s closing keynote from META’s Korhan Yunak reinforced the strategic value of digital channels like WhatsApp, which are now indispensable for business communication and engagement at scale.
As MTN Nigeria prepares for the Q3 2025 launch, the anticipation is unmistakable. With its promise of flexibility, intelligence, and seamless integration, MTN’s CPaaS platform is set to become the backbone of next-generation business-customer engagement in Nigeria, enabling enterprises to not just communicate but to connect, adapt, and grow in a digital-first era.
Telecom
NCC, REA Move to Power Telecoms with Renewable Energy

Nigerian Communications Commission (NCC) and Rural Electrification Agency (REA) have teamed up to develop an initiative that will reduce the $350 million annual spending on diesel by telecom operators in Nigeria.
According to a press statement by Nnenna Ukoha, acting had of Public Affairs, NCC, this collaboration will focus on deploying renewable energy solutions to support telecom infrastructure, particularly in rural and underserved areas.
To that end, the two agencies have inaugurated what they called NCC–REA Collaboration Committee, aimed at deploying renewable energy solutions to power telecom infrastructure across the country.
According to the State of Africa’s Infrastructure Report 2025 by the Africa Finance Corporation, telecom operators in Nigeria consume more than 40 million litres of diesel every month, costing them over $350 million annually.
The statement read, “The Nigerian Communications Commission has formally inaugurated the NCC–REA Collaboration Committee, marking a pivotal step towards advancing Nigeria’s digital and energy inclusion objectives by developing modalities for the deployment of renewable energy to support telecom infrastructure in Nigeria.”
The inauguration ceremony, held on Friday, at the NCC Headquarters in Abuja, was presided over by Dr Aminu Maida, executive vice chairman and chief executive officer, NCC.
Maida was joined by Abba Aliyu, managing director of the REA, along with senior executives and committee members from both organisations.
Speaking at the event, Maida described the collaboration as a timely and strategic alignment of national priorities.
He noted that bridging the connectivity and power gaps in rural areas remains critical for Nigeria’s growth and development.
He highlighted that the demand for digital services and connected communities creates an opportunity for renewable energy to play a crucial role.
Maida further emphasised that the partnership goes beyond infrastructure; it is aimed at driving inclusion, reducing inequalities, and fostering shared prosperity.
“Whether it is powering a base station or enabling a child to access digital learning, this partnership has the potential to transform realities and bring opportunity closer to the people.
“This initiative is about more than infrastructure, it is about driving inclusion, bridging inequalities and creating the conditions for shared prosperity,” he was quoted in the statement.
He also noted that the initiative aligns with President Bola Tinubu’s Renewed Hope Agenda, which aims to ensure no community is left behind in Nigeria’s energy and digital transformation.
Aliyu, representing REA, expressed confidence in the transformative potential of the collaboration.
“This partnership will unlock sustainable development opportunities for millions of Nigerians, especially those in areas lacking traditional infrastructure,” he said.
He further emphasised that the collaboration would address both energy and connectivity gaps, benefiting those who are currently underserved.
The newly established NCC-REA Collaboration Committee will work to co-develop and implement integrated solutions that leverage renewable energy to power telecom sites.
The statement noted that the committee will also focus on sharing geospatial data to improve planning, aligning funding frameworks, and tracking the socio-economic impact of the project through clear performance indicators.
Telecom
NCC Approves MTN, 9Mobile Roaming Collaboration Deal

MTN Nigeria Communications Plc has announced the execution of a national roaming agreement with Emerging Markets Telecommunications Services Limited (9Mobile), a move that signals a major milestone in Nigeria’s telecommunications landscape.
The Nigerian Communications Commission (NCC), the industry’s regulatory authority, has approved the three-year deal, which allows 9Mobile subscribers to roam seamlessly on MTN Nigeria’s extensive network infrastructure across the country.
The agreement, effective immediately, will significantly enhance connectivity and user experience for 9Mobile customers, particularly in areas where its network coverage is limited.
By leveraging MTN’s expansive infrastructure, 9Mobile can now offer improved service reach and reliability, without duplicating capital-intensive investments in network deployment.
In a notice to the Nigerian Exchange Limited and the investing public, MTN Nigeria described the arrangement as a strategic collaboration that underscores its leadership in fostering innovation, industry cooperation, and operational efficiency.
The company emphasized that the initiative aligns with the NCC’s broader objective of promoting infrastructure sharing to improve telecommunications services nationwide.
“This agreement represents a significant step in our commitment to driving industry collaboration, improving customer experience, and supporting the NCC’s vision of a fully connected Nigeria,” said Karl Toriola, chief executive officer, MTN Nigeria.
“Delivering the scale required for telecommunications services in Nigeria requires strong collaboration between the private sector, public sector, and long-term investors. This agreement demonstrates what we can achieve when we collaborate, and we are delighted to announce it today after months of groundwork.”The national roaming deal enables subscribers from 9Mobile to access voice and data services through MTN’s network in areas where the former lacks adequate coverage.
This marks the first such large-scale, cross-network roaming arrangement between two major operators in Nigeria, setting a precedent for future cooperative efforts in the telecom industry.
MTN Nigeria highlighted that the agreement contributes to more effective use of telecommunications resources, reduces infrastructure duplication, and accelerates the expansion of mobile broadband access across underserved regions.
It also supports both operators’ sustainability objectives by maximizing existing investments and reducing the environmental impact of deploying overlapping network facilities.
“This strategic collaboration is yet another first in the country by MTN Nigeria and marks a significant milestone for the sustainability of the telecommunications industry,” the company stated.
“By enabling national roaming, MTN Nigeria is contributing to a more effective use of telecommunications resources and accelerating efforts to expand connectivity across the country.”
The agreement is expected to benefit not just subscribers and operators but also regulators and investors who have consistently advocated for policies that promote shared infrastructure and efficient capital utilization in Nigeria’s digital economy.
Uto Ukpanah, company secretary, MTN Nigeria, affirmed the company’s ongoing dedication to initiatives that create shared value.
“MTN remains committed to fostering innovation and partnerships that create sustainable value for all stakeholders while promoting digital and financial inclusion nationwide,” she noted.
With the successful rollout of this agreement, the telecoms industry is expected to see improved service delivery and expanded access to quality mobile services, especially in rural and semi-urban communities. The collaboration sets a benchmark for future inter-operator partnerships and reinforces the importance of regulatory support in advancing national connectivity goals.
- Telecom2 days ago
AVEVA Highlights Climate Impact Gains in 2024 Sustainability Report
- General News2 days ago
AfCFTA Opens Opportunity for Logistics Sector
- Telecom2 days ago
ALTON Explains SIM-related Services Disruption Across Mobile Networks
- Telecom1 day ago
NCC Approves MTN, 9Mobile Roaming Collaboration Deal
- Telecom2 days ago
MTN Foundation, NDLEA, UNODC Unite in Abuja Against Substance Abuse
- E-Financial1 day ago
World Bank Approves Extra $65m for Nigeria’s SPESSE
- E-Financial1 day ago
Ecobank Taps Google Cloud to Deepen Financial Inclusion
- E-Business1 day ago
CAC Launches AI-powered Business Registration Portal