Connect with us

Telecom

Sophos Reveals Key Findings: 56% of Cyberattacks Exploit Valid Credentials

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions for defeating cyberattacks, has released the 2025 Sophos Active Adversary Report, which details attacker behaviour and techniques from over 400 Managed Detection and Response (MDR) and Incident Response (IR) cases in 2024.

Sophos logo

The report found that the primary way attackers gained initial access to networks (56% of all cases across MDR and IR) was by exploiting external remote services, which includes edge devices such as firewalls and VPNs, by leveraging valid accounts.

The combination of external remote services and valid accounts aligns with the top root causes of attacks. For the second year in row, compromised credentials were the number one root cause of attacks (41% of cases). This was followed by exploited vulnerabilities (21.79%) and brute force attacks (21.07%).

Understanding The Speed of Attacks

When analyzing MDR and IR investigations, the Sophos X-Ops team looked specifically at ransomware, data exfiltration, and data extortion cases to identify how fast attackers progressed through the stages of an attack within an organization. In those three types of cases, the median time between the start of an attack and exfiltration was only 72.98 hours (3.04 days). Furthermore, there was only a median of 2.7 hours from exfiltration to attack detection.

“Passive security is no longer enough. While prevention is essential, rapid response is critical. Organizations must actively monitor networks and act swiftly against observed telemetry. Coordinated attacks by motivated adversaries require a coordinated defense. For many organizations, that means combining business-specific knowledge with expert-led detection and response. Our report confirms that organizations with proactive monitoring detect attacks faster and experience better outcomes,” said John Shier, field CISO.

Other Key Findings from the 2025 Sophos Active Adversary Report:

· Attackers Can Take Control of a System in Just 11 Hours: The median time between attackers’ initial action and their first (often successful) attempt to breach Active Directory (AD) – arguably one of the most important assets in any Windows network – was just 11 hours. If successful, attackers can more easily take control of the organization.

· Top Ransomware Groups in Sophos Cases: Akira was the most frequently encountered ransomware group in 2024, followed by Fog and LockBit (despite a multi-government takedown of LockBit earlier in the year).

· Dwell Time is Down to Just 2 Days: Overall, dwell time – the time from the start of an attack to when it is detected – decreased from 4 days to just 2 in 2024, largely due to the addition of MDR cases to the dataset.

· Dwell Time in IR Cases: Dwell time remained stable at 4 days for ransomware attacks and 11.5 days for non-ransomware cases.

· Dwell Time in MDR Cases: In MDR investigations, dwell time was only 3 days for ransomware cases and just 1 day for non-ransomware cases, suggesting MDR teams are able to more quickly detect and respond to attacks.

Ransomware Groups Work Overnight: In 2024, 83% of ransomware binaries were dropped outside of the targets’ local business hours.

· Remote Desktop Protocol Continues to Dominate: RDP was involved in 84% of MDR/IR cases, making it the most frequently abused Microsoft tool.

To shore up their defenses, Sophos recommends that companies do the following:

· Close exposed RDP ports

· Use phishing-resistant multifactor authentication (MFA) wherever possible

· Patch vulnerable systems in a timely manner, with a particular focus on internet-facing devices and services

· Deploy EDR or MDR and ensure it is proactively monitored 24/7

· Establish a comprehensive incident response plan and test it regularly through simulations or tabletop exercises

Read the full It Takes Two: The 2025 Sophos Active Adversary Report on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

GSMA Urges Import Duties Exemption for Smartphones

Published

on

Kindly share this post

Global System for Mobile Communications Association (GSMA) has urged African governments to recognise telecommunications as a core economic pillar and implement specific tax reforms that could dramatically accelerate digital inclusion across the continent.

GSMA Urges Import Duties Exemption for Smartphones

Mr. Daddy Mukadi, chair of GSMA Africa’s Policy Group, proposed a two-to-three-year exemption on import duties and taxes for entry-level smartphones priced between $40 and $150 to help bridge the usage gap.

He also called for the removal of entry duties on telecommunications equipment for at least three years to support the expansion of network coverage.

“These measures would help deliver inclusive and sustainable digital technology for economic and social progress. They would also support faster connectivity, improved access and the ability to connect more people, businesses and communities to the digital economy,” he said.

Mukadi who is also the chief regulatory officer of Airtel Africa, spoke at the first edition of the États Généraux du Secteur des Postes et Télécommunications in Kinshasa, DRC, an event convened to support the development of a strategic roadmap for the country’s digital and telecommunications sector and attended President Félix Tshisekedi.

He urged government and industry stakeholders to rethink the role of telecommunications in national development, arguing that it should be framed not as a sector specific concern, but as a continent-wide imperative.

“The telecoms sector can no longer be considered merely as a support sector. It is now a core sector. Both are vital, and every other sector, from security and finance to transport and health, depends on digital technology for growth,” Mukadi said.

His remarks come at a critical moment for Africa’s digital economy. According to the GSMA’s Mobile Economy Africa 2025 report, the mobile sector contributed $220 billion to the continent’s economy in 2024.

This is equivalent to 7.7per cent of GDP and is projected to reach $270 billion by 2030. Yet despite mobile networks now covering 95per cent of Africa’s population, nearly 75per cent of people across the continent remain offline.

The GSMA identifies this gap as Africa’s greatest connectivity challenge, driven above all by the unaffordability of devices.

Mukadi therefore called for strategic adjustments to public policy, as well as legal and regulatory frameworks, to support wider access to digital services. He said the telecommunications sector should be treated as a foundational pillar of economic development, with stakeholders working together to accelerate investment, expand coverage and close the usage gap across the continent.

The Chief Regulatory Officer of Airtel Africa also highlighted key barriers to digital inclusion, including the affordability of smartphones and the impact of import duties on telecommunications infrastructure.

He added that government and the private sector must work closely to create a regulatory environment that encourages innovation, protects consumer interests and supports long-term investment.


Kindly share this post
Continue Reading

Telecom

Court Blocks Telcos from Cutting Nairtime’s Credit Services

Published

on

Kindly share this post

Federal High Court in Abuja has issued an interim injunction restraining MTN Nigeria and Airtel Networks from suspending or interfering with Nairtime Nigeria’s access to critical telecommunications platforms including short codes, SMS, USSD, and billing services, following a directive by the Federal Competition and Consumer Protection Commission (FCCPC) that left Nigerians without a safety net.

Court Blocks Telcos from Cutting Nairtime’s Credit Services

The order, granted on April 24, 2026 in Suit No: FHC/ABJ/CS/779/2026, ensures that millions of consumers, particularly those without access to traditional banking, can continue to access airtime and data on credit, services increasingly vital for daily communication, work, education, and digital participation.

Nairtime, part of the Optasia Group, is a leading provider of airtime and data credit services in Africa and the Middle East, facilitating micro-lending for mobile users.

According to Nairtime, the court’s intervention provides policy certainty and reinforces the legitimacy of its operations, which are conducted under a valid Value-Added Service licence issued by the Nigerian Communications Commission (NCC).

The company noted that the suspension linked to the Digital, Electronic, Online or Non-Traditional Consumer Lending Regulations 2025 risked disrupting services relied upon daily by ordinary Nigerians.

Ms Uchenna Agbo, chief commercial officer of Optasia and chief executive officer of Nairtime Nigeria Limited, said: “This decision is ultimately about protecting underserved Nigerian consumers.

It ensures that millions of people, many of whom are underserved by traditional financial systems, retain uninterrupted access to essential digital services. Over time, using these services responsibly can help them prove reliability and improve their chances of accessing bigger financial opportunities in the future.

“Our platform enables responsible, data-driven lending that keeps people connected when they need it most and we look forward to working with our partners to restore services in a manner that resumes full service value to the Nigerian consumers without further delay.”

Nairtime reaffirmed its commitment to consumer and data protection through stringent governance frameworks and ethical use of artificial intelligence, and emphasised that it shares the broader consumer protection objectives of the Federal Government while remaining open to constructive engagement with regulators and industry partners.

Agbo added: “We have built a system that supports inclusion at scale, while maintaining strong risk controls for industry stability and economic impact. This ruling allows us to continue delivering safe, reliable services that Nigerians depend on every day.

“We remain focused on ensuring that the Nigerian consumer stays at the centre of innovation and will continue working with regulators and our partners, including MTN and Airtel, to promote a fair, transparent, and inclusive digital ecosystem that benefits Nigeria and all Nigerians.”

Optasia, which listed on the Johannesburg Stock Exchange in late 2025 and was founded in Nigeria 14 years ago, provides the infrastructure layer connecting mobile network operators and banks to millions of underserved customers.

Through global partnerships with 50 distribution partners and 17 financial institutions, including some of Africa’s largest MNOs and tier-one banks, the platform uses proprietary AI that processes credit decisions in under one second, using alternative data to assess risk for customers who have never held a formal credit product.

Beyond telcos, the company is also developing new propositions including SME and merchant finance, longer-term and higher-value credit, telco BNPL and revolving credit lines, and embedding its platform across adjacent ecosystems and verticals.

 


Kindly share this post
Continue Reading

Telecom

Truecaller Tags Nigeria as Africa’s Spam Call Capital

Published

on

Kindly share this post

Nigeria has been ranked the most spammed country in Africa, according to a new report by Truecaller has shown. The report showed that more than half of all unknown calls received by Nigerians in 2025 were identified as spam or fraudulent.

About 51 per cent of unknown calls were flagged as spam, placing Nigeria eighth in the world and ahead of African countries like South Africa, Kenya, Ghana and Ethiopia.

According to the report, most spam calls in Nigeria are linked to telecom companies and network-related promotions. Telecom-related calls made up 35 per cent of spam calls, while sales and telemarketing accounted for 10 per cent. Scam calls represented six per cent.

Truecaller said many Nigerians now struggle to know whether an unknown caller is a real network provider, a marketer, or a fraudster pretending to be from a trusted company.

The report also noted that Brazil faces a similar problem, with telecom-related calls dominating spam activities.

Globally, Indonesia ranked as the most spammed country in the world, with 79 per cent of unknown calls marked as spam. Chile came second with 70 per cent, while Vietnam, Brazil and India completed the top five.

The company added that the Middle East and Africa region passed 100 million monthly active users in late 2025, making Africa one of its fastest-growing markets.

Chief Executive Officer of Truecaller, Rishit Jhunjhunwala, said fraud and impersonation calls have become a serious global concern.

He said the company plans to focus more on stopping fraudulent calls before they reach users in 2026.

Truecaller also announced that it surpassed 500 million monthly active users worldwide as of March 31, 2026, with more than 150 million users outside India.


Kindly share this post
Continue Reading

Trending