Connect with us

Telecom

Sophos Releases 2017 Malware Trends, Prediction

Published

on

Kindly share this post

By peter oluka

From online gaming, to mobile apps and wearable tech, technology is used at almost every touch point in people’s day-to-day lives. However, the downside of living in this hyper-connected society means that people are also extremely vulnerable to cyber-attacks.

This year’s Malware Report from Sophos reveals just how malware is being weaved into this everyday technology, and how, year on year, we are seeing cybercriminals become more intelligent in their attacks, making it increasingly important for consumers to be wary of the dangers out there.

Whilst many consumers may live in denial that an attack like this will ever affect them, Sophos’ research revealed the opposite. Harish Chib, VP MEA at Sophos, reviews the most prominent risks from 2017, and what we can expect in 2018.

  • The extent of ransomware attacks from 2017
  • How online gaming was used to catch consumers off-guard
  • The level of malicious Android apps detected this year
  • 2018 thoughts and predictions

Sophos 2017 Malware trends and predictions 

  1. Ransomware is on every platform – don’t assume your mobile and tablets are safe

This year, WannaCry shook the world as the cyber hi-jack accounted for more than 45% of all ransomware tracked, closely followed by Cerber at 44.2%, according to Sophos’ most recent Malware Report.

In September alone, 30.4 percent of malicious Android malware processed by SophosLabs was ransomware. Sophos expects this to jump to approximately 45 percent in October. The majority of these attacks have targeted Windows users, but the number of attacks on other platforms is increasing, including those targeting Android, Macs and Linux.

Ransomware attacks have shifted in focus in the past two years, towards industries which are most likely to pay up, such as healthcare, government, critical infrastructure, and small businesses. Due to it being one of the most lucrative industries from ransomware payments or selling medical records, Healthcare has been a big target in 2017 and will without a doubt continue that way into 2018.

  1. Malware is hiding in Android Apps

When reviewing Google Play, Sophos found that the number of different threats had doubled since last year. One type of malware, dubbed ‘GhostClicker’, sat in Google Play for almost a year, disguising itself as part of the service library. It then request device administration permission, and actively simulated click-on advertisements as it delivered to earn revenue.

One of the more sobering finds was Lipizzan, spyware that infected up to 100 devices. Although this doesn’t sound like a large number, it seems this was a targeted, precision malware, which was designed to monitor phone activity and extracting data from popular apps including email, SMS, location, and voice calls, and media.

Malware such as this is showing no sign of reducing in the future, as cyber criminals know it works. Therefore, in order to combat being a victim of Android malware, Sophos would suggest consumers:

  • Stick to Google Play – Although it isn’t perfect, it puts plenty of effort into preventing malware arriving in the first place
  • Avoid apps with a low reputation – Be especially wary of this when using a work phone
  • Patch early, patch often – Check the vendors attitude to updates
  1. Online gaming is being used to spread Ransomware and Malware

In terms of online gaming, fake copies of the popular game, ‘King of Glory’ were used to spread ransomware this year. The warning screen used mimicked the one used during the WannaCry outbreak, directing individual to pay the ransom through the China-based Wechat, Alipay and QQ payment methods.

The number of malicious apps has risen steadily in the last four years, peaking at nearly 3.5 million in 2017, therefore we are likely to see this rise further in 2018, including more deceptive online gaming traps.

  1. Data breaches– they are not going away

The downside of living in this hyper-connected society means that people are extremely vulnerable to cyber-attacks, as shown in the past few weeks with the Uber Hack, which affected 2.7 million riders and drivers. Sadly, we don’t see these data breaches diminishing in 2018, and with GDPR coming into effect in May it will only continue to be a hot topic and something we are continuing to see.

  1. 2018 and beyond

It’s impossible to predict what will happen in 2018, however it’s a fair bet that Android and Windows will continue to be heavily targeted with ransomware and other Malware. Email will also remain the primary attack vector threatening corporate cyber security, especially in the case of targeted attacks.

Four trends that stood out in 2017, and will likely dominate 2018 are:

  1. A ransomware surge fueled by RaaS and amplified by the resurgence of worms;
  2. An explosion of Android malware on Google Play and elsewhere;
  3. Continued efforts to infect Mac computers; and
  4. Ongoing Windows threats, fueled by do-it-yourself exploit kits that make it easy to target Microsoft Office vulnerabilities.

Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University.

Continue Reading
Comments

Telecom

NCC Holds First Virtual Bi-Annual Meeting with Telcos

Published

on

Kindly share this post

Nigerian Communications Commission (NCC) and senior executives of telecommunication companies on complaints management recently held the regular bi-annual meeting, in compliance with COVID-19 management protocols instituted by the Federal Government.

NCC Holds First Virtual Bi-Annual Meeting with Telcos

Prof Umar Danbatta, EVC, NCC

At the meeting, which focused on consumer relations and complaint management processes, the NCC and the telecom service providers agreed that the compensation policy should be revisited and complied with at all times.

This is to ensure full compliance with the new Complaint Categories and Service Level Agreement (CC/SLA) consented to by the NCC and the service providers in the telecommunication ecosystem.

Additionally, it was decided that the Commission and telecom service providers will hold follow-up discussions on “Fair Usage Policy” on unlimited data bundles/data rollover, in order to provide a clearer explanation and better understanding of the processes and procedures of the policy for the benefit of the consumers.

The Commission hereby wishes to restate that its direction of June 2018 to service providers to commence implementation of data rollover from 26 June 2018, remains in force.

In other words, a subscriber’s unused data must be rolled over to his/her subsequent data subscription.

Therefore, the Commission urges service providers to continue to inform and educate subscribers on the procedures and processes for data rollover.

Service providers also agreed to ensure that senior-level customer relations officers support their respective complaints management teams, to resolve complaints that were not resolved to the satisfaction of the consumers when such complaints were first reported.

The service providers also promised to ensure that complaints are resolved in both the letter and spirit of the recently-reviewed Service Level Agreement (SLA).

With respect to services subscribed to through third parties (such as banks), which are not rendered, the meeting resolved that telecom service providers should explore initiating service level agreement with banks to ensure uniformity and speed in the resolution of complaints relating to billing.

All parties to the meeting equally agreed that telecom service providers will carry out pervasive consumer education and enlightenment campaigns about their products and services to ensure their subscribers have the information they require to make informed decisions and get value for money spent.

The commission wishes to state that it was very pleased with the impressive attendance, participation, and the quality of decisions taken at the bi-annual meeting.

The NCC is, therefore, determined to continue to work closely with the service providers and other stakeholders in the Nigerian telecom sector in order to improve on the quality of service, and by implication, the quality of consumer experience.

The bi-annual meeting, which has held regularly since 2018, focuses on ensuring improvement in Quality of Service (QoS) and Quality of Experience (QoE) in the telecom industry.

It has served as a veritable platform for the Commission and service providers to discuss and agree on measures that will enhance prompt and effective consumer complaint resolution in telecom service provision in Nigeria.

 


Kindly share this post
Continue Reading

Telecom

Ericsson Launches Integrated Packet Core Firewall to Boost 5G Core Security

Published

on

Kindly share this post

Ericsson is advancing 5G core network security for communications service providers (CSPs) through the launch of the cloud native Ericsson Packet Core Firewall.

Core network security is a key factor in CSPs’ forward business planning as they pursue innovative new business opportunities powered by 5G and emerging technologies.

Ericsson’s new solution, part of the Ericsson 5G platform, is aimed at enabling CSPs to pursue those opportunities not only through the best packet core network security capabilities, but also in the most cost-effective way for their business.

Powered by A10 Networks’ advanced security technology, the Ericsson Packet Core Firewall solution is already seamlessly integrated with Ericsson Packet Core Gateway in  Ericsson’s dual-mode 5G Core offering. The solution also supports end-to-end network slicing and edge computing.

The cloud native offering is optimized to scale with user plane to the edge of the network to cater for secure core network 5G use cases. By protecting a communications service provider’s core network – including sensitive service provider data and customer data – the all-in-one solution secures 5G service availability.

The solution delivers more than 50 percent total cost of ownership reduction over dedicated user plane security solutions, while maintaining 5G latency. This is enabled through a single CNF (Cloud Native Network Function) solution with simplified maintenance and orchestration.

Folke Anger, Head of Packet Core Solutions, Ericsson, says: “Securing service availability in 5G requires a holistic view beyond dedicated security solutions.

“We are now launching the Ericsson Packet Core Firewall seamlessly integrated into our Packet Core Gateway. This will provide our customers with substantial total cost of ownership improvements while ensuring their 5G services to the edge.”

Patrick Donegan, Founder and Principal Analyst, HardenStance, says: “Telecom operators need to think differently about how they implement security with a 5G Core. Ericsson’s Packet Core Gateway together with Packet Core Firewall integrates user plane and security functions in a single Cloud native Network Function (CNF).

“This allows significant TCO savings and is well optimized for edge use cases. It also enables automated, closed-loop, threat mitigation independent of transport equipment vendor.”

Dhrupad Trivedi, CEO and Board Chair, A10 Networks, says: “Mobile operators are transitioning to more cloud native and distributed architectures to support 5G. This increases the critical need for security and network availability.

“A10 is excited to expand our partnership with Ericsson to enable current and emerging 5G use cases. The Ericsson Packet Core Firewall powered by A10 Networks is ready for cloud native deployments and addresses the evolving business needs for operators.”


Kindly share this post
Continue Reading

Telecom

Anambra Indicates Interest to Host NITDA’s South-East Zonal Office

Published

on

Kindly share this post

The Anambra State Government has indicated interest to provide enabling environment for the National Information Technology Development Agency, (NITDA) to situate its South-East Zonal Office in the State.

The State, also among other requests, expressed willingness to host some of NITDA’s events, programmes and establishment of information Technology hub in the State.

The State made the requests during a working visit to NITDA by Mr Theo Manfa, managing director/chief executive officer, Anambra State Information and Communication Technology Agency, (ANSICTA).

Mr Manfa in his address,  expressed that the call for special requests by the state is necessitated by the fact that the state “has long been known as a home of innovation and entrepreneurship, through the various markets like Onitsha and Nnewi and the plethora of locally produced goods they spawned over time.”

He said that innovation and entrepreneurship are important elements to drive the digital economy which the nation is striving to create adding that the state has been watching with keen interest the activities of Federal Ministry of Communications and Digital Economy and NITDA which necessitated the intended partnership.

While itemizing the identified possible areas of collaboration, Mr Manfa said that the state would like to partner NITDA on the newly launched Nigeria Government Enterprise Architecture, (NGEA), training of youths in hardware and software skills, entrenchment of e-Government culture and learning interventions for secondary school students with the aid of Unity Board.

In his remark, Dr Vincent Olatunji, director, e-Government Development and Regulations, who represented Mallam Inuwa Kashifu Abdullahi, director general, National Information Technology Development Agency (NITDA) at the meeting said it is gratifying to know that the state is keenly following the activities of the Agency in its drive to achieving digital economy for the nation.

He commended the state for developing its ICT policy to serve as road map on how the state would execute its IT plans adding that ANSICTA should ensure it drives the policy for the state.

While assuring the state that all its requests are not beyond what the Agency could provide, he enjoined it to formally write to the Agency by itemizing and prioritizing the area of collaborations.

The highlight of the meeting was the presentation of Award of Appreciation for his outstanding achievements in driving the digital economy.


Kindly share this post
Continue Reading
Advertisement

Social

Advertisement
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement

Trending