GRTech
DDoS attacks via IoT devices threaten the ongoing development of Fourth Industrial Revolution
Distributed Denial of Service (DDoS) attacks that use Internet of Things devices are a significant threat to the Fourth Industrial Revolution, and the potential it brings to revolutionise productivity and people’s lives in general.
This was proven during the late 2016 DDoS attack largely ascribed to the Mirai botnet, which, unlike other botnets that are typically made of up computers, was composed largely of weaponised Internet of Things (IoT) devices such as DVR players, home routers, air quality monitors and personal surveillance cameras.
This is according to Bryan Hamman, territory manager for sub-Saharan Africa at NETSCOUT Arbor, which specialises in advanced DDoS protection solutions. “The internet is an integral part of life and infrastructure in most countries around the world today,” Hamman says. “A successful DDoS attack aims to disrupt or cause the denial of an online service by overwhelming it with traffic from multiple sources. The DDoS attacks of 21 October 2016, for example, showed just how vulnerable sections of the internet and its global operability are to attack by those of ill intent.
“These attacks, which are largely ascribed to the Mirai botnet and have entered recent history due to the involvement of IoT devices, involved multiple DDoS attacks targeting domain name system (DNS) provider Dyn, whose business ensures that information requests via the internet are delivered to the correct address. The knock-on effect was that major internet platforms and services linked to Dyn – including Twitter, GitHub, Reddit, Pinterest, Etsy, Tumblr, Spotify, PayPal and the PlayStation network – were unavailable to millions of users in Europe and North America for some hours. Consumers were unable to carry out activities like online shopping, social media interaction or listen to music during this enforced downtime – examples which showcase exactly what the Fourth Industrial Revolution is all about, namely the interaction of the physical and digital worlds.”
The Fourth Industrial Revolution is generally understood to be the coming together of physical and digital technologies. It builds on the previous industrial revolutions which each, in their own way and their own times, were seen to increase production of processed items during their eras. In the process, each industrial revolution changed the ways that humans operated in particular spheres, arguably bringing in opportunities for improvements in efficiencies in general, and in some cases even poverty alleviation through the creation of jobs and new systems. The First Industrial Revolution began in the 18th century with the invention of the steam engine; the Second used electricity to create mass production; the Third used electronics and information technology to automate production; and the Fourth is leapfrogging on top of the relatively recent Third to close the gap between our use of the physical and digital world.
Hamman explains, “People are aware that the Fourth Industrial Revolution is bringing change at a rate never seen before. The pace and scale of disruption brought about by connected technology is incredible; almost every industry you can think of is being transformed at an unprecedented speed. While it is true at a societal level that this global-scale of change will likely render some jobs obsolete, it will also create other new jobs during the disruption.
“As with most things, the powers inherent in the Fourth Industrial Revolution can be used for the greater good, or alternatively abused – this is human nature. But on the positive side, the possibilities being brought by the closing of the gap between the physical and digital worlds include changes in commerce, education and healthcare – for example, advances in biomedical sciences can lead to healthier lives and longer life spans https://trailhead.salesforce.com/en/modules/impacts-of-the-fourth-industrial-revolution/units/understand-the-impact-of-the-fourth-industrial-revolution-on-society-and-individuals. I prefer to focus on the ways in which the Fourth Industrial Revolution can be used for positive change.”
NETSCOUT Arbor notes in its 13th Annual Worldwide Infrastructure Security Report (WISR), released earlier this year, that the use of compromised IoT devices to launch DDoS attacks has helped cybercriminals increase the complexity of their assaults. The WISR is based on 390 responses from network operators globally, with more than half of the respondents headquartered and operational in North America. The 13th WISR showed that 33 percent of surveyed organisations had suffered a DDoS attack during 2017 (up from the previous year’s 17 percent). The report notes in its conclusion: “…attackers continue to build and weaponize massive IoT botnets of unprecedented size and capability…. This year, we’ve seen increasing sophistication of IoT-based botnet attack capabilities. These modern botnets are capable of delivering attacks that include application-layer, volumetric and complex multi-vector DDoS attacks.”
In a white paper, ‘IoT DDoS attacks show the stakes have changed’, NETSCOUT Arbor recommends a multi-layered approach to DDoS attack detection and mitigation, to counter-act the multi-vector layering inherent in botnets that are similar to the Mirai botnet, which began operating on 1 August 2016.
Additionally, the paper notes the need for IoT makers to insert some basic security requirements into devices; for IoT operators in enterprises to improve and maintain visibility; for IoT users to take more responsibility for their devices; and for security operators to make sure that security and employee policies reflect and cater for the reality of the widespread use of IoT devices in today’s workplace.
“I view DDoS attacks, such as the 21 October 2016 attacks and the largest DDoS attack ever seen – namely the 1.7 Tbps attack on an American-based service provider during the first week of March 2018, which was foiled by NETSCOUT Arbor – as a threat to the positive possibilities that the Fourth Industrial Revolution could bring about. I therefore urge companies to remain aware of the damage that can be wrought by an undefended DDoS attack, and to get their defences in order,” Hamman concludes.
GRTech
Identity Management Day: Sophos Warns Against Data Breaches Linked to Identity Theft
REPORTER: Sandra Ani
79% of data breaches are linked to identity theft and cost businesses an average of $4.5 million, according to reports from the Identity Defined Security Alliance (IDSA) and the Ponemon Institute.
Additionally, the 2025 edition of the Sophos Active Adversary Report reveals that the average time between the start of an attack and data exfiltration is only 72.98 hours (3.04 days), while the average time between exfiltration and attack detection is just 2.7 hours.
Cyberattacks are becoming increasingly fast, and the longer a compromised identity remains active, the greater the potential damage.
In light of this, Sophos, one of the world’s leading providers of innovative security solutions designed to neutralize cyberattacks, is taking advantage of Identity Management Day, which takes place on Tuesday, April 8, 2025, to remind businesses of the best practices they should follow to manage and secure digital identities.
Cybercriminals can use a compromised identity to access confidential information, steal data, move laterally within the organization, and launch further attacks.
It is therefore crucial to take immediate action to contain breaches and minimize their consequences.
In this context, automation plays a key role by enabling organizations to respond quickly and effectively to identity-related threats.
Five Automated Measures to Protect Against Identity Theft
1. Disable the User
When an identity breach is detected, one of the first steps is to disable the compromised user account. By preventing the attacker from using the stolen identity to access company systems and data, this measure outpaces the hacker and helps contain the breach.
Automation significantly speeds up this process. With automated response tools, businesses can quickly identify compromised accounts and disable them in real-time. This reduces the attack window and minimizes potential damage.
2. Force Password Reset
Passwords are often the first line of defense against unauthorized access attempts. In the event of an identity breach, it is essential to immediately force a password reset for the compromised account to prevent hackers from using stolen credentials.
Automated rules can be set up to trigger an instant password reset as soon as a breach is detected. This saves time and ensures that the reset process is initiated without delay, reducing the risk of further unauthorized access attempts.
3. Force Multi-Factor Authentication (MFA) Reset
Multi-factor authentication (MFA) adds an extra layer of security by requiring users to enter a verification code in addition to their password. If an identity breach occurs, it is crucial to reset MFA for the compromised account. This means that the user will have to re-authenticate using their MFA tool, which automatically invalidates any stolen authentication tokens the attacker may have acquired.
Automated rules can trigger the refresh of MFA tokens, ensuring that compromised accounts are quickly reauthenticated. This prevents cybercriminals from using stolen authentication tokens to access company systems.
4. Lock the Account
Locking a compromised account prevents hackers from attempting to use it until the issue is resolved. This also gives the organization time to investigate the breach and apply the necessary corrective measures.
Automation streamlines the account locking process, allowing businesses to lock compromised accounts as soon as a breach is detected. This immediate response helps contain the breach and blocks further unauthorized access attempts.
5. Revoke Active Sessions
In addition to disabling the user account and forcing a password reset, it is essential to revoke all active sessions associated with the compromised identity. This ensures that the attacker is immediately logged out of all systems they accessed using stolen credentials.
Automated actions can be configured to revoke active sessions in real-time, instantly disrupting any unauthorized access. This is a critical measure to neutralize the breach and prevent further malicious activity.
For more information, please visit: https://www.secureworks.com/blog/5-critical-response-actions-for-an-identity-breach
GRTech
Samsung Expands Accessibility with Local Language Integration on Galaxy S25, A56, A36, and A26 Devices
By SANDRA ANI
Samsung Electronics has taken a bold step in enhancing user experience and inclusivity by introducing Hausa, Igbo, and Yoruba as official language options on selected Samsung Galaxy devices.
The feature, which is now available on the Galaxy S25, A56, A36, and A26 devices, reaffirms Samsung’s commitment to delivering innovative technology that speaks the language of its users.
With this groundbreaking update, Samsung users across Nigeria can now navigate their smartphones in their preferred local language, making technology more accessible, while also upholding our cultural heritage.
A Celebration of Culture and Technology
To mark the launch, Samsung hosted a cultural-themed press briefing featuring traditional music, local cuisine, and a showcase of the new language feature. Employees and guests attended in traditional Yoruba, Igbo, and Hausa attires, celebrating Nigeria’s rich cultural diversity.
Samsung also announced plans to expand local language support to more devices in the near future, reinforcing its dedication to making technology more inclusive for African users.
Empowering Users Through Language
The integration of Hausa, Igbo and Yoruba on Samsung devices reflects the brand’s mission to bridge the digital gap and enhance user engagement. Speaking at the press conference, Oge Maduagwu, Head of Marketing, Samsung Electronics West Africa, said, “At Samsung, we understand that technology is most powerful when it is accessible to all. By incorporating our local Nigerian languages, we are making our devices more intuitive and relatable, ensuring that millions of Nigerians can interact with their smartphones in the language they love and understand best”.
Seamless Language Transition on Galaxy Devices
Stephen Okwara, Head of Product Management, Samsung Electronics West Africa added, “The new local language feature is designed to deliver a seamless user experience, allowing customers to easily switch between languages. Users can activate Hausa, Igbo, or Yoruba on the Galaxy S25, A26, A36, and A56 by navigating to:
Settings > Language & Input > Select Language
“This update enhances smartphone usability, particularly for those who prefer their native language over English, ensuring greater digital inclusivity, enhancing digital literacy and encouraging more users to engage with technology in their native tongues”, he concluded.
Availability
Customers can visit all Samsung Experience Stores or authorized retailers in Nigeria to learn more and experience the feature firsthand.
TechNews
NITDA DG Inaugurates National Technical Working Group on Cloud Infrastructure
REPORTER: Sandra Ani
In a significant move to bolster Nigeria’s digital infrastructure, the National Information Technology Development Agency (NITDA) has inaugurated the Technical Working Group (TWG) on National Cloud Infrastructure.
This initiative aims to enhance local cloud capabilities, attract hyper-scale investments, and position Nigeria as a leading technology hub in Africa.
Speaking at the inauguration, NITDA’s Director-General, Kashifu Inuwa, CCIE, emphasised the need for accurate data and regulatory frameworks to support these initiatives, necessary for Nigeria to control its digital infrastructure, data, and technological future noting that,
“Without this foundation, we cannot achieve true digital sovereignty. Our goal is to build an ecosystem where both local data centre providers can scale, and global hyper-scalers see Nigeria as a viable investment destination.”
While identifying lack of accurate data on Nigeria’s IT infrastructure as significant challenge, Inuwa noted that while Africa comprises nearly 19% of the world’s population, it hosts less than 1% of global data centres.
“This disparity, coupled with limited insights into Nigeria’s existing IT capacity, hampers investment efforts and without clear data on our infrastructure, attracting investment becomes challenging,” he said.
The NITDA boss maintained that, to address this, NITDA commissioned comprehensive research to assess Nigeria’s digital landscape which findings have highlighted the need for improved regulatory frameworks, clearer investment incentives, and stronger public-private collaboration. He added that subsequently upon this, NITDA has engaged global consultants to redefine strategies for cloud development.
As the TWG embarks on its mission, NITDA urges industry experts, policymakers, and stakeholders to contribute their expertise and resources. “With collective effort, Nigeria can emerge as the premier digital hub for West and Central Africa,” Inuwa concluded.
While corroborating the Director General’s point of views, Acting Director of Regulation and Compliance, Barrister Emmanuel Edet, underscored the importance of regulatory intervention in fostering a robust digital economy.
“Our objective is to establish policies and legal frameworks that support cloud development, enabling us to securely host and manage our data. This is crucial for the growth of our digital economy, he said.”
He also highlights the necessity of capacity building, stating that, “Equipping ourselves with top-tier training and expertise is essential to fully leverage digital technologies.” Barrister Edet called on all stakeholders to actively participate in shaping Nigeria’s digital future.
“Collaboratively, we must develop a framework that reflects our national interests, and it should be widely accepted. This effort will define Nigeria’s role in the global digital arena, he observed.
The TWG will help in the drive to attract hyperscale investments and enhance local cloud capabilities by proffering measures to encourage the use of accurate data, recommend the enactment and compliance to enabling policies.
Members of the TWG which includes Google, AWS, IBM, Oracle, Microsoft, HUAWEI Cloud, Equinix, Kasi, Rack Centre, Africa Data Centres, several other data centre operators and the Nigeria Data Protection Commission expressed support and readiness to volunteer and contribute resources.
The LOGIC Church Debuts “Jesus + Nothing Worship” on Good Friday
2027: Nsukka Leaders Endorse Gov Mbah Over Massive Projects in the Zone
MTN Nigeria Excites Fans with The Manchester Derby
LASG Acquires New Outboard Engines For Optimum Boat Performance
Elon Musk builds Hotel in Mars, Sets to launch soon at $5million per night – Photos
