Broadcasting
Sophos Research Details How Conti Gang, Karma Dual Ransomware Attack Hold Businesses Hostage
Sophos, a global leader in next-generation cybersecurity, on Wednesday released findings of a dual ransomware attack where extortion notes left by Karma ransomware operators were encrypted 24 hours later by Conti, another ransomware gang that was in the target’s network at the same time.
Sophos details the dual attacks in the article, “Conti and Karma Actors Attack Healthcare Provider at Same Time Through ProxyShell Exploits,” explaining how both operators gained access to the network through an unpatched Microsoft Exchange Server, but then used different tactics to implement their attacks.
“To be hit by a dual ransomware attack is a nightmare scenario for any organization. Across the estimated timeline there was a period of around four days when the Conti and Karma attackers were simultaneously active in the target’s network, moving around each other, downloading and running scripts, installing Cobalt Strike beacons, collecting and exfiltrating data, and more,” said Sean Gallagher, senior threat researcher, Sophos.
“Karma deployed the final stage of its attack first, dropping an extortion notice on computers demanding a bitcoin payment in exchange for not publishing stolen data.
“Then Conti struck, encrypting the target’s data in a more traditional ransomware attack. In a strange twist, the Conti ransomware encrypted Karma’s extortion notes.
“We have seen several cases recently where ransomware affiliates, including affiliates of Conti, used ProxyShell exploits to penetrate targets’ networks.
“We have also seen examples of multiple actors exploiting the same vulnerability to gain access to a victim.
“However, very few of those cases involved two ransomware groups simultaneously attacking a target and it shows, literally, how crowded and competitive the ransomware landscape has become.”
The Dual Attack
Sophos believes that the first incident started on Aug. 10, 2021, when attackers, possibly Initial Access Brokers, used a ProxyShell exploit to gain access to the network and establish a foothold on the compromised server. The Sophos investigation showed that almost four months passed before Karma appeared on Nov. 30, 2021, and exfiltrated more than 52 gigabytes of data to the cloud.
On Dec. 3, 2021, three things happened:
· The Karma attackers dropped an extortion note on 20 computers, demanding a ransom and explaining that they did not encrypt the data because the target was a healthcare provider
· Conti was quietly operating in the background also exfiltrating data
· The target started onboarding Sophos’ incident response team to help with Karma
While Sophos was onboarding, Conti deployed its ransomware on Dec. 4, 2021. Sophos subsequently tracked the start of the Conti attack to another ProxyShell exploit leveraged on Nov. 25, 2021.
“Whether the initial access broker sold access to two different ransomware affiliates, or whether the vulnerable Exchange server was just an unlucky target for multiple ransomware operators, the fact that a dual attack was possible is a powerful reminder to patch widely known, internet-facing vulnerabilities at the earliest opportunity,” said Gallagher.
“Defense-in-depth is vital for identifying and blocking attackers at any stage of the attack chain, while proactive, human-led threat hunting should investigate all potentially suspicious behavior, such as unexpected remote access service logins or the use of legitimate tools outside the normal pattern, as these could be early warning signs of an imminent ransomware attack.”
Sophos endpoint products, such as Intercept X, protect users by detecting the actions and behaviors of ransomware and other attacks, such as those described in this Sophos research.
For further information read the article, “Conti and Karma Actors Attack Healthcare Provider at Same Time Through ProxyShell Exploits.”
Additional Resources
- Further details on the evolving cyberthreat landscape can be found in the Sophos 2022 Threat Report
- Tactics, techniques, and procedures (TTPs) and more for different types of threats are available on SophosLabs Uncut, which provides Sophos’ latest threat intelligence
- Information on attacker behaviors, incident reports and advice for security operations professionals is available on Sophos News SecOps
- Learn more about Sophos’ Rapid Response Service that contains, neutralizes and investigates attacks 24/7
- The four top tips for responding to a security incident from Sophos Rapid Response and the Managed Threat Response Team
- Read the latest security news and views on Sophos’ award-winning news website Naked Security and on Sophos News
Socio-Economic Rights and Accountability Project (SERAP) and the Nigerian Guild of Editors (NGE) have jointly sued the National Broadcasting Commission (NBC) over what they described as an “arbitrary, unconstitutional, and unlawful” threat to sanction broadcast stations and presenters.
The development was disclosed in a Sunday statement signed by Kolawole Oluwadare, deputy director, and Onuoha Ukeh, general secretary of the Nigerian Guild of Editors.
According to the statement, SERAP and NGE challenged a recent directive by NBC, warning presenters and journalists against “expressing personal opinions as facts,” “bullying or intimidating guests,” and failing to maintain neutrality.
The statement reads, “SERAP and the Nigerian Guild of Editors (NGE) have filed a lawsuit against the National Broadcasting Commission (NBC) over the arbitrary, unconstitutional, and unlawful ‘Formal Notice’, which threatens to sanction broadcast stations and presenters for allegedly ‘expressing personal opinions as facts, bullying or intimidating guests, or failing to maintain neutrality.’
“The NBC had recently threatened to sanction broadcast stations and presenters who ‘express personal opinions as facts’ or ‘bully and intimidate guests,’ claiming it had ‘identified a sustained increase in breaches of the 6th Edition of the Nigeria Broadcasting Code across news, current affairs, and political programmes.’”
In the suit marked FHC/L/CS/854/2026 filed last Friday at the Federal High Court in Lagos State, SERAP and NGE asked the court to determine whether the various provisions of the Nigeria Broadcasting Code relied upon by the NBC in the directive are inconsistent with the Nigerian Constitution 1999 (as amended) and the country’s international human rights obligations.
According to the statement, the groups disclosed that Femi Falana (SAN), human rights lawyer, would lead a team of senior lawyers to represent SERAP and NGE in the lawsuit.
SERAP and NGE asked the court to declare that the provisions of the 6th Edition of the Broadcasting Code used by the NBC are vague and constitute a fundamental breach of press freedom guaranteed by the Nigerian Constitution and international human rights standards.
The statement added, “SERAP and NGE are asking the court for a declaration that the provisions of the 6th Edition of the Broadcasting Code used by the NBC are vague and overly broad and constitute a fundamental breach of freedom of expression and media freedom guaranteed by the Nigerian Constitution and international human rights standards.”
The groups also sought an interim injunction to restrain the NBC, its agents and other authorities from imposing sanctions on broadcast stations and presenters based on what they described as “unlawful provisions of the 6th Edition of the Broadcasting Code”, pending the hearing and determination of the motion.
“SERAP and NGE are also seeking an order of interim injunction restraining the NBC, its agents or privies, whether jointly or severally or any other authority, from imposing sanctions on broadcast stations and presenters based on the patently unlawful provisions of the 6th Edition of the Broadcasting Code, pending the hearing and determination of the motion on notice filed simultaneously in this suit,” the statement concluded.
Globacom continues to celebrate African creativity as its sponsored programme African Voices on CNN International features London based photographer and multidisciplinary artist Ejatu Shaw this week. The episode highlights her journey, her art, and the stories behind her work.
Ejatu Shaw’s journey into photography began in 2013 during a family trip to Sierra Leone, a moment that sparked a passion which has since shaped her creative path. Born in 1996, the British Sierra Leonean artist later went on to earn a master’s degree in photography arts from the University of Westminster in 2020.
Her work explores identity in a personal and expressive way, drawing from her Islamic faith and African heritage. She is inspired by classic African studio photographers such as Malick Sidibé, Sory Sanlé, and Omar Yahia Barram. Through self-portraits and visual storytelling, she brings her memories and experiences to life.
Shaw’s talent continues to gain global recognition. In 2025, the British Fashion Council named her a New Wave Creative.
She has also photographed top names including Angela Bassett, Cynthia Erivo, and Usain Bolt, and worked on projects for major platforms like EBONY, The Guardian, The Sunday Times, and Vogue. She also designed the album cover for Craig David.
The programme will air on Saturday at 7:30 a.m. and 11:00 a.m. On Sunday, it will show at 3:30 a.m. and 6:00 p.m., with repeats on Monday at 3:00 a.m. and 5:45 p.m.
QEDNG Creative Powerhouse Summit will hold its second edition on August 11 in Lagos, bringing together leaders across the creative, business and policy spaces.
Convened by Mighty Media Plus, publishers of online newspaper QEDNG, the summit brings together conversations at the intersection of creativity, enterprise and influence, with a focus on strengthening Nigeria’s creative economy.
Reflecting on the inaugural edition, Iyanda said the summit drew participation from respected figures across sectors, including group managing director of SO&U Udeme Ufot as chairman and founder of The Africa Soft Power Group Dr Nkiru Balonwu as keynote speaker, alongside panellists such as filmmaker Kunle Afolayan, All Africa Music Awards (AFRIMA) founder Mike Dada and executive director of the National Film and Video Censors Board (NFVCB) Dr Shaibu Husseini who contributed to discussions on the direction of the creative economy.
“The first edition showed that there is a strong interest in serious engagement around the creative economy. We had contributions from experienced voices who helped set the tone for the kind of platform we are building,” Iyanda said.
Building on the success of its inaugural edition, the summit continues to expand its scope, attracting a diverse mix of industry leaders, entrepreneurs, policymakers and emerging talents.
“This summit is designed as a meeting point for ideas, influence and execution. It is not just about conversations, but about outcomes that strengthen the creative economy,” Iyanda added.
He noted that the timing of the summit is significant as the country’s creative sector continues to evolve.
“Nigeria’s creative sector has grown in visibility, but the structures that support it are still evolving. The QEDNG Creative Powerhouse Summit is part of the effort to bring clarity, direction and serious engagement to that growth,” he said.
The 2026 edition will feature keynote addresses, panel discussions and curated sessions addressing themes around innovation, growth, funding and the global positioning of Nigerian creative talent.
According to Iyanda, the long-term goal is to build a platform that remains relevant across generations.
“Our goal is to build a platform that remains useful over time, one that documents progress, connects stakeholders and contributes meaningfully to policy and practice,” he said.
Further details on speakers, partners and the full programme will be announced in the coming weeks.
Data Privacy Ignorance Threatens National Security – DKIPPI
ALTON Urges Urgent Resolution of Regulatory Dispute over Airtime Loans
Court Strikes Out Suit against NCC over 50 Percent Tariff Hike
Despite Security Concerns, Reps Push for 18-Month Delay before Inactive Phone Numbers are Reassigned
UK Govt Launches Creative Fund to Boost Local Production in Nigeria’s Creative Industries
FG to Gift Nigerians over 100 Free TV Channels from May 15
Microsoft Revamps Copilot in Workplace AI Push
Dangote Refinery Debunks Speculations on IPO
What Adekunle Gold’s Support Means for ‘The Gathering on 100
NRS Takes Over Mineral Royalties Collection Under New Tax Laws
Telecom2 days agoElon Musk Launches XChat with Video Calling to Take on WhatsApp, Messenger
Telecom2 days agoMTN-Backed Pitchathon Awards ₦45m to Startups @‘Gathering on 100’ in Lagos
E-Financial2 days agoCRMI Backs CBN’s New Measures to Curb Fraud
Broadcasting2 days agoSERAP, NGE Sue NBC over Threat to Sanction Broadcasters
Telecom2 days agoHow NITDA Is Transforming Corps Members into Digital Millionaires
Telecom2 days agoGlobacom Unveils Two New TVCs Showcasing the Future of Connectivity
E-Financial2 days agoSystemically Weak Banks Put Nigeria’s $1Trillion Ambition at Risk
News2 days agoBOI MD, Olasupo Olusi, Charts Tech-Driven Path to Growth for Nigeria