Telecom
Sophos Uncovers How Ransomware Groups Weaponize Stolen Data to Increase Pressure on Targets Who Refuse to Pay
Sophos, a global leader of innovative security solutions for defeating cyberattacks, Tuesday released a new dark web report, “Turning the Screws: The Pressure Tactics of Ransomware Gangs,” which details how cybercriminals are weaponizing stolen data to increase pressure on targets who refuse to pay.
Christopher Budd, director, threat research, Sophos
This includes sharing the contact details or doxing the family members of targeted CEOs and business owners, as well as threatening to report any information about illegal business activities uncovered in stolen data to the authorities.
In the report, Sophos X-Ops shares posts found on the dark web that show how ransomware gangs refer to their targets as “irresponsible and negligent,” and in some cases, encourage individual victims whose personal information was stolen to pursue litigation against their employer.
“In December 2023, in the wake of the MGM casino breach, Sophos began taking note of ransomware gangs’ propensity to turn the media into a tool they can use to not only increase pressure on their victims but take control of the narrative and shift the blame. We are also seeing gangs singling out the business leaders they deem ‘responsible’ for the ransomware attack at the companies they target.
“In one post we found, the attackers published a photo of a business owner with devil horns, along with their social security number. In a different post, the attackers encouraged employees to seek ‘compensation’ from their company, and, in other cases, the attackers threatened to notify customers, partners and competitors about data breaches.
“These efforts create a lightning rod for blame, increasing the pressure on businesses to pay up and potentially exacerbating the reputational damage from an attack,” said Christopher Budd, director, threat research, Sophos.
Sophos X-Ops also found multiple posts by ransomware attackers detailing their plans to search for information within stolen data that could be used as leverage if companies don’t pay.
For example, in one post, the WereWolves ransomware actor notes that any stolen data is subject to “a criminal legal assessment, a commercial assessment and an assessment in terms of insider information for competitors.” In another example, the ransomware group Monti noted that it found an employee at a targeted company searching for child sexual abuse material and threatened to go to the police with the information if the company didn’t pay the ransom.
These posts align with a broader trend of criminals seeking to extort companies with increasingly sensitive data relating to employees, clients or patients, including mental health records, the medical records of children, “information about patients’ sexual problems” and “images of nude patients.” In one ransomware case, the Qiulong ransomware group posted the personal data of a CEO’s daughter, as well as a link to her Instagram profile.
“Ransomware gangs are becoming increasingly invasive and bold about how and what they weaponize. Compounding pressure for companies, they’re not just stealing data and threatening to leak it, but they’re actively analyzing it for ways to maximize damage and create new opportunities for extortion.
“This means that organizations have to not only worry about corporate espionage and loss of trade secrets or illegal activity by employees, but also about these issues in conjunction with cyberattacks,” said Budd.
Read the full report “Turning the Screws: The Pressure Tactics of Ransomware Gangs” on Sophos.com.
Lynda Saint-Nwafor, chief Enterprise business officer, MTN Nigeria, has assured the network subscribers that the new end-user billing system for the use of USSD services will jot affect them.
USSD, otherwise Unstructured Supplementary Service Data codes are commonly used for banking transactions, airtime recharges, and other mobile services.
The telco said that there is no significant impact or change other than the fact that they will now pay the same N6.98 per session (120 seconds) with their airtime instead of direct bank debit.
Saint-Nwafor, said this during a chat with MTN MIP fellows, explaining that the Central Bank of Nigeria (CBN) and the Nigerian Communications Commission (NCC) have ordered telecom operators to ensure that the new billing model resolves trust issues and ensures transparency in the billing process.
“Our regulator insisted that at the end of every month, we are going to be providing history and statistics on the performance of the service across the board”, she explained.
Saint-Nwafor added that the new billing model has standardized messaging across all operators and ensures consistent communication with customers.
“We will take all the error codes and map them into messages that are standardised across the board. So, if you initiate a transaction, you will know if it is failing. And, when the transaction fails, you will know if it is from your bank or the telco,” she explained.
The U.S. government has recovered $225 million in what is now the largest seizure of funds linked to a cryptocurrency investment scam.
In a statement released Wednesday, June 18, the U.S. Attorney’s Office said the recovery followed an extensive investigation by the FBI and the U.S. Secret Service, using blockchain analysis and other forensic tools. The statement did not confirm whether any arrests had been made.
According to the authorities, the stolen funds originated from fraudulent cryptocurrency investment schemes that tricked victims into believing they were making legitimate investments. More than 400 individuals around the world, including dozens in the United States, were reportedly affected.
The operation involved a sophisticated money laundering network that carried out hundreds of thousands of blockchain transactions to obscure the source and ownership of the stolen assets.
“These scams prey on trust, often resulting in extreme financial hardship for the victims,” said Shawn Bradstreet, Special Agent in Charge at the U.S. Secret Service office in San Francisco.
Bradstreet added that U.S. officials hope the recovered funds can eventually be returned to the rightful victims.
Cryptocurrency investment fraud accounted for over $5.8 billion in reported losses in 2024 alone, according to the statement.
In a rousing declaration that is electrifying minds across the continent, Hon. Nnaemeka Ani, Special Adviser on ICT to Enugu State Governor, Dr. Peter Mbah, has called for a homegrown digital revolution under the banner “Africa Will Rise: By Code, By Courage, By Us.”
Hon. Nnaemeka Ani
The message, part challenge, part philosophical—seeks to galvanize African innovators to move beyond buzzwords and build technology with impact and legacy in mind.
“Let’s stop building for hype. Let’s start building for legacy,” Ani urged while speaking to ICT journalists over the weekend. “Let’s stop waiting for someone else. Let’s start creating the future—on our own terms.”
At the heart of Ani’s vision is a shift from tech consumerism to tech authorship. With innovation hubs sprouting across cities like Enugu, Lagos, Kigali, Jo’Burg, and Nairobi, and a growing community of developers, engineers, and entrepreneurs determined to solve Africa’s unique challenges, the movement is already taking shape.
Ani emphasized that Africa’s future lies not in flashy apps or international admiration but in persistent, intentional solutions that uplift communities—solutions that digitize public services, bridge rural-urban divides, empower women and youth, and build resilience in food and climate systems.
“We have the talent,” he said. “Now it’s time to harness it—to stop building for likes and start building for lasting impact.”
With support from leaders like Ani and rising momentum in Africa’s tech corridors, it seems that a new chapter is being written—one line of code at a time.
MTN Says New N6.98 USSD Charge Won’t Affect Airtime Recharge
Sofri Rejigs Digital Platforms for Better Customer Experience
DLM Group Unveils Innovative Sovereign Bond Backed Composite Notes
Study Reveals 7% of Industrial Organizations Tackle Vulnerabilities Only When Necessary
NITDA, NCFRMI Forge Strategic Alliance for Inclusive Digital Transformation of Displaced Nigerians
General News3 days agoNASRDA, Galaxy Space Firm Sign MoU on Satellite Connectivity
Telecom3 days agoOver 1m Nigerians Reached through MTN Staff’s Digital and Community Outreach
Telecom3 days agoMafab Gets 0724 Number Series, Launches Mcom 5G Brand
News3 days agoDBN Awards N13m in Grants to Tech Startups
Telecom3 days agoNCC to Name, Shame Telecom Infrastructure Vandals
News3 days agoFCCPC Shuts France, Belgium, and Italy Visa Centres in Abuja Over Alleged Consumer Rights Violations
Telecom3 days agoWSIS Review: Nigerian ICT Leaders Urged to Shape Global Digital Future
E-Financial3 days agoBank Customers Petition CBN over Illegal Deductions, Demand Action