Connect with us

E-Business

SophosLabs Research Warns “Designer Cyber Threats on the Rise”

Published

on

sophos kash.jpg
Kindly share this post

Sophos, a global leader in network and endpoint security, today revealed SophosLabs research that indicates a growing trend among cybercriminals to target and even filter out specific countries when designing ransomware and other malicious cyberattacks.

The research includes information from millions of endpoints worldwide and is analyzed by the team at SophosLabs.

To lure more victims with their attacks, cybercriminals are now crafting customized spam to carry threats using regional vernacular, brands and payment methods for better cultural compatibility, according to Sophos.

Ransomware cleverly disguised as authentic email notifications, complete with counterfeit local logos, is more believable, highly clickable and therefore more financially rewarding to the criminal.

To be as effective as possible, these scam emails now impersonate local postal companies, tax and law enforcement agencies and utility firms, including phony shipping notices, refunds, speeding tickets and electricity bills.

SophosLabs has seen a rise in spam where the grammar is more often properly written and perfectly punctuated.

“You have to look harder to spot fake emails from real ones,” said Chester Wisniewski, senior security advisor at Sophos. “Being aware of the tactics used in your region is becoming an important aspect of security.”

Researchers also saw historic trends of different ransomware strains that targeted specific locations. Versions of CryptoWall predominantly hit victims in the U.S., U.K., Canada, Australia, Germany and France, TorrentLocker attacked primarily the U.K., Italy, Australia and Spain and TeslaCrypt honed in on the U.K., U.S., Canada, Singapore and Thailand.

The analysis also shows Threat Exposure Rates[1] (TER) for countries during the first three months of 2016. Although Western economies are more highly targeted, they typically have a lower TER. Nations ranked with the lowest TER include France at 5.2 percent, Canada at 4.6 percent, Australia at 4.1 percent, the U.S. at 3 percent, and the U.K. at 2.8 percent..

The African countries were at an average level, Tanzania – 11.1 percent Kenya – 11.5 percent South Africa – 11.6 percent Egypt – 12.4 percent Angola – 15.7 percent Nigeria – 15.7 percent Tunisia – 16.4 percent Morocco – 16.6 percent Uganda – 24.9 percent Ghana – 25.5 percent Mozambique – 28.3 percent Algeria – 30.7 percent Zambia – 35.5 percent and Malawi – 39.4 percent.

Algeria at 30.7 percent, Bolivia at 20.3 percent, Pakistan at 19.9 percent, China at 18.5 percent and India at 16.9 percent are among countries with the highest percentage of endpoints exposed to a malware attack

“Even money laundering is localized to be more lucrative. Credit card processing can be risky for criminals, so they started using anonymous Internet payment methods to extort money from ransomware victims,” said Wisniewski. “We have seen cybercrooks using local online cash-equivalent cards and purchasing locations, such as prepaid Green Dot MoneyPak cards from Walgreens in the U.S. and Ukash, which is now paysafecard, from various retail outlets in the U.K.”

Tweet This: “Designer” cyber threats on the rise with localized logos, language and payment methods, according to Sophos.

The concept of filtering out specific countries has also emerged as a trend.

“Cybercriminals are programming attacks to avoid certain countries or keyboards with a particular language,” said Wisniewski. “This could be happening for many reasons. Maybe the crooks don’t want attacks anywhere near their launch point to better avoid detection. It could be national pride or perhaps there’s a conspiratorial undertone to create suspicion about a country by omitting it from an attack.”

Banking is an example of how cybercriminals are using location-based malware to be more prosperous. Sophos research reveals historically how Trojans and malware used to infiltrate banks and financial institutions converges on specific regions:

Brazilian banker Trojans and variants pinpoint Brazil
Dridex is predominant in the U.S. and Germany
Trustezeb is most prevalent in German speaking counties
Yebot is popular in Hong Kong and Japan
Zbot is wider spread, but mostly in the U.S., U.K., Canada, Germany, Australia, Italy, Spain and Japan

“There is an entire cottage industry of uniquely-crafted Trojans just targeting banks in Brazil,” said Wisniewski.

With cybercriminals having a deliberate hand in creating threats that look authentic and are specifically targeted, it is more difficult to recognize malicious spam.

Home computer users are often a target of these attacks and should protect their systems from sophisticated malware threats. Free enterprise-grade security software that can detect threats and protect both Mac and PC for the home user is available from Sophos Home.

This research and analysis is from SophosLabs, a network of security experts across the world who detect and track all types of Internet breaches 24/7/365 worldwide, including computer viruses, advanced malware and Trojans, spam, web threats, hack attacks and more.

SophosLabs receives and investigates millions of emails, URLs, files and other data points daily and leverages its extensive expertise within the group to develop new definitions that detect entire classes of threats and new variants.

With facilities strategically located in Australia, Hungary, U.K. and Canada, SophosLabs experts also monitor and determine threat trends and maintain malware, spam and web threat dashboards in real time.

More than 100 million users in 150 countries rely on Sophos’ complete security solutions as the best protection against complex threats and data loss.

Simple to deploy, manage, and use, Sophos’ award-winning encryption, endpoint security, web, email, mobile and network security solutions are backed by SophosLabs – a global network of threat intelligence centers.

Sophos is headquartered in Oxford, U.K., and is publicly traded on the London Stock Exchange under the symbol “SOPH.” More information is available at www.sophos.com.

 
#

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

NITDA DG Reaffirms FG Commitment to Responsible and Inclusive AI

Published

on

Kindly share this post

The Federal Government of Nigeria has reaffirmed its commitment to building a responsible, inclusive, and sovereign artificial intelligence ecosystem to enable Nigeria to transition from being a passive consumer of AI technologies to an architect and builder of indigenous AI systems.

This was said by the Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa Abdullahi CCIE, while delivering a virtual address at the InnovateAI Conference held in Lagos.

The conference brought together policymakers, technology leaders, innovators, and stakeholders to discuss the future of artificial intelligence and its role in driving Nigeria’s digital economy and national development agenda.

Inuwa outlined Nigeria’s ambition to transition from being a consumer of artificial intelligence technologies to becoming a builder and owner of AI systems that reflect national values and priorities, in line with the National AI Strategy.

“Our goal is not just to use AI, but to architect and build our own AI systems in Nigeria,” he said, stressing that the country must take ownership of its AI future.

He noted that Nigeria’s approach to artificial intelligence extends beyond innovation to include governance, infrastructure, data sovereignty, and policy evolution.

According to him, “Responsible AI is never a finished job; it is an iterative journey. Our policies must evolve as the technology evolves, and we must avoid frozen laws by adopting living policies that adapt over time.”

He cited the implementation of the Digital Economy and E-Governance Bill as a key mechanism for generating insights that will help refine AI regulations and governance frameworks.

Inuwa also highlighted the challenge of data representation in global AI systems, noting that most models are trained on non-African datasets, which often results in bias against local dialects, cultures, and demographics.

“If a model shows bias against a local dialect or demographic, we cannot just patch it. We must reinvest in infrastructure to retrain it with inclusive and representative local datasets,” he stated.

He added that building national AI infrastructure is critical to achieving data sovereignty and ensuring that Nigeria is not merely an end user of foreign AI systems.

He further called for strategic partnerships with global technology companies and hyperscalers to build AI infrastructure in Nigeria while aligning with local values and national priorities.

“The world today is a global village. We need to work with global players, but they must understand our local nuances and help us build the infrastructure to retrain and develop AI models that reflect our context,” he said.

The NITDA Director General explained that adopting a comprehensive AI lifecycle approach, from responsible data collection and governance to deployment and continuous feedback, will enable Nigeria to move from reacting to AI developments to proactively designing indigenous AI systems.

“Without understanding how AI models are trained, how decisions are made, and how models are retrained, it will be difficult to build a responsible and trustworthy AI system,” he warned.

He reaffirmed that the Federal Government is intentional about promoting responsible AI and is working closely with the technology ecosystem to co-design national AI guardrails. He described platforms such as the InnovateAI Conference and other national AI dialogues as critical to shaping Nigeria’s AI future.


Kindly share this post
Continue Reading

E-Business

Mutual Benefits Assurance Settles ₦5.9bn Claims in January 2026

Published

on

Kindly share this post

Mutual Benefits Assurance, a leading Nigerian insurance company, has paid a total of ₦5,937,665,353.57 in claims to policyholders in January 2026 alone, underlining its strong financial capacity and unwavering commitment to prompt claims settlement.

Mutual Benefits Assurance Settles ₦5.9bn Claims in January 2026

Mutual Benefits Assurance

A breakdown of the figures shows that ₦3,426,602,834.28 was paid under its General (Non-Life) Insurance portfolio, while ₦2,511,062,519.29 was paid across its Life businesses, including Group Life and Retail Life policies.

The significant payout within a single month reinforces Mutual Benefits’ reputation as a dependable insurer that honors its obligations swiftly and responsibly.

Commenting on the development, Olufemi Asenuga, Managing Director, Mutual Benefits Assurance Plc stated that claims settlement remains the core promise of insurance and the ultimate test of an insurer’s credibility.

“Insurance is built on trust. Our ability to settle over ₦5.9 billion in claims in one month demonstrates not only our financial strength, but also our deep commitment to our policyholders. At Mutual Benefits, we do not just sell policies. We stand by our promises,” he said.

With over three decades of operations, Mutual Benefits has consistently positioned itself as a strong and well-capitalised insurer.

The company operates both Life and General Insurance businesses and remains fully compliant with regulatory capital requirements as stipulated by the National Insurance Commission (NAICOM).

The January payout reflects Mutual Benefit’s robust underwriting standards, prudent risk management practices and efficient claims administration framework.

It also aligns with the company’s broader record of substantial claims settlement in recent years, reinforcing its standing as a trusted brand in the Nigerian insurance industry.

Mutual Benefits employs over 5,000 staff, managed by seasoned management team and an experienced Board of Directors. Industry observers note that prompt claims payment remains one of the most critical differentiators in Nigeria’s competitive insurance landscape.

By consistently settling valid claims without delay, Mutual Benefits continues to strengthen customer confidence, deepen market trust and expand its footprint across retail and corporate segments.

As the company begins 2026 on a strong footing, it reiterates its commitment to innovation, service excellence and delivering value to policyholders and stakeholders alike. Mutual Benefits Assurance focused on its mission to provide reliable risk protection solutions while maintaining the highest standards of professionalism and integrity.


Kindly share this post
Continue Reading

E-Business

NITDA Warns Nigerians of Actively Exploited Microsoft Office Vulnerability

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) has issued an urgent cybersecurity warning about a serious Microsoft Office vulnerability (CVE-2026-21509) that attackers are actively exploiting.

NITDA Warns Nigerians of Actively Exploited Microsoft Office Vulnerability

This advisory, shared through Nigeria’s Computer Emergency Response Team (CERRT.NG), highlights the risks of this flaw and recommends immediate action to protect systems.

Microsoft has released quick security updates to fix this vulnerability, which has a severity score of 7.8, showing it is a serious risk. Attackers have already used it in targeted attacks.

CVE-2026-21509 affects multiple versions of Microsoft Office, including Office 2016, Office 2019, Microsoft 365 Apps, Office 2021, and later versions.

This flaw allows attackers to bypass security features meant to stop harmful Object Linking and Embedding (OLE) controls. OLE is an older Microsoft technology that can be used to embed links or content, but it has often been exploited by malware.

By exploiting this flaw, attackers can create specially designed Office documents.

When a user opens these documents, they can run malicious code or gain further access to the system.

Exploitation requires user interaction, meaning attackers often trick people into opening harmful Word, Excel, or other Office documents. Common methods include using email attachments or files from untrusted sources.

Because Microsoft confirmed that the vulnerability is being actively exploited, they have made emergency security updates available outside their usual schedule. Users and organisations should:

  1. Install the latest Microsoft Office security updates for all affected versions.
  2. Restart Office applications for Office 2021 and later to ensure that the updates take effect.
  3. Use registry-based settings for protection if updates can’t be applied right away.
  4. Follow good cybersecurity practices, like using endpoint protection and filtering emails.

Microsoft’s updates for Office 2021 and newer versions are automatically applied, but need a restart of the applications to be active.


Kindly share this post
Continue Reading

Trending