Connect with us

GRTech

Sophos Threat Report Flags Cyberattack Trends Expected To Shape IT Security In 2021

Published

on

Sophos, a global leader in next-generation cybersecurity, today published the Sophos 2021 Threat Report, which flags how ransomware and fast-changing attacker behaviors, from advanced to entry level, will shape the threat landscape and IT security in 2021.

The report, written by SophosLabs security researchers, as well as Sophos’ threat hunters, rapid responders, and cloud security and AI experts, provides a three-dimensional perspective on security threats and trends, from their inception to real-world impact.

Three key trends analyzed in the Sophos 2021 Threat Report include: 

1.       The gap between ransomware operators at different ends of the skills and resource spectrum will increase. At the high end, the big-game hunting ransomware families will continue to refine and change their tactics, techniques and procedures (TTPs) to become more evasive and nation-state-like in sophistication, targeting larger organizations with multimillion-dollar ransom demands. In 2020, such families included Ryuk and RagnarLocker.

At the other end of the spectrum, Sophos anticipates an increase in the number of entry level, apprentice-type attackers looking for menu-driven, ransomware-for-rent, such as Dharma, that allows them to target high volumes of smaller prey. 

Another ransomware trend is “secondary extortion,” where alongside the data encryption the attackers steal and threaten to publish sensitive or confidential information, if their demands are not met. In 2020, Sophos reported on Maze, RagnarLocker, NetwalkerREvil, and others using this approach. 

“The ransomware business model is dynamic and complex. During 2020, Sophos saw a clear trend towards adversaries differentiating themselves in terms of their skills and targets. However, we’ve also seen ransomware families sharing best-of-breed tools and forming self-styled collaborative ‘cartels,’” said Chester Wisniewski, principal research scientist, Sophos.

“Some, like Maze, appeared to pack their bags and head for a life of leisure, except that some of their tools and techniques have resurfaced under the guise of a newcomer, Egregor. The cyberthreat landscape abhors a vacuum.

If one threat disappears another one will quickly take its place. In many ways, it is almost impossible to predict where ransomware will go next, but the attack trends discussed in Sophos’ threat report this year are likely to continue into 2021.”

2.       Everyday threats such as commodity malware, including loaders and botnets, or human-operated Initial Access Brokers, will demand serious security attention. Such threats can seem like low level malware noise, but they are designed to secure a foothold in a target, gather essential data and share data back to a command-and-control network that will provide further instructions.

If human operators are behind these types of threats, they’ll review every compromised machine for its geolocation and other signs of high value, and then sell access to the most lucrative targets to the highest bidder, such as a major ransomware operation. For instance, in 2020, Ryuk used Buer Loader to deliver its ransomware.

“Commodity malware can seem like a sandstorm of low-level noise clogging up the security alert system. From what Sophos analyzed, it is clear that defenders need to take these attacks seriously, because of where they might lead.

Any infection can lead to every infection. Many security teams will feel that once malware has been blocked or removed and the compromised machine cleaned, the incident has been prevented,” said Wisniewski.

“They may not realize that the attack was likely against more than one machine and that seemingly common malware like Emotet and Buer Loader can lead to Ryuk, Netwalker and other advanced attacks, which IT may not notice until the ransomware deploys, possibly in the middle of the night or on the weekend. Underestimating ‘minor’ infections could prove very costly.” 

3.       All ranks of adversaries will increasingly abuse legitimate tools, well known utilities and common network destinations to evade detection and security measures and thwart analysis and attribution.

The abuse of legitimate tools enables adversaries to stay under the radar while they move around the network until they are ready to launch the main part of the attack, such as ransomware. For nation-state-sponsored attackers, there is the additional benefit that using common tools makes attribution harder. In 2020, Sophos reported on the wide range of standard attack tools now being used by adversaries.

“The abuse of everyday tools and techniques to disguise an active attack featured prominently in Sophos’ review of the threat landscape during 2020. This technique challenges traditional security approaches because the appearance of known tools doesn’t automatically trigger a red flag.

This is where the rapidly growing field of human-led threat hunting and managed threat response really comes into its own,” said Wisniewski. “Human experts know the subtle anomalies and traces to look for, such as a legitimate tool being used at the wrong time or in the wrong place.

To trained threat hunters or IT managers using endpoint detection and response (EDR) features, these signs are valuable tripwires that can alert security teams to a potential intruder and an attack underway.” 

Additional trends analyzed in the Sophos 2021 Threat Report include:

·         Attacks on servers: adversaries have targeted server platforms running both Windows and Linux, and leveraged these platforms to attack organizations from within

·         The impact of the COVID 19 pandemic on IT security, such as the security challenges of working from home using personal networks protected by widely varying levels of security

·         The security challenges facing cloud environments: cloud computing has successfully borne the brunt of a lot of the enterprise needs for secure computing environments, but faces challenges different to those of a traditional enterprise network

·         Common services like RDP and VPN concentrators, which remain a focus for attacks on the network perimeter. Attackers also use RDP to move laterally within breached networks

·         Software applications traditionally flagged as “potentially unwanted” because they delivered a plethora of advertisements, but engaged in tactics that are increasingly indistinguishable from overt malware

·         The surprising reappearance of an old bug, VelvetSweatshop – a default password feature for earlier versions of Microsoft Excel – used to conceal macros or other malicious content in documents and evade advanced threat detection

·         The need to apply approaches from epidemiology to quantify unseen, undetected and unknown cyberthreats in order to better bridge gaps in detection, assess risk and define priorities

Sophos’ Wisniewski provides an overview of the Sophos 2021 Threat Report in the video below:

Continue Reading

GRTech

Refurbished tech: Making a smart choice for a greener future

By Qrent Managing Executive Kwirirai Rukowo

Published

on

Kwirirai Rukowo + Refurbished Tech
Kwirirai Rukowo

Consumers and businesses are constantly striving for the latest and greatest technology. However, behind the pursuit of cutting-edge devices lies a significant environmental toll – one that often goes unnoticed. The production of new technology requires vast amounts of natural resources, energy, and labour, contributing to both environmental degradation and significant carbon emissions.

With concerns about sustainability at an all-time high, companies are now looking for ways to reduce their environmental impact without compromising on performance or innovation. Refurbished tech, such as the solutions offered by Qrent, presents an effective, affordable, and eco-friendly alternative.

The refurbished computers and laptops market is set for remarkable expansion, driven by both cost-effectiveness and a growing commitment to sustainability. According to Credence Research, the market is projected to surge from USD 17,856.6 million in 2024 to USD 39,405 million by 2032, achieving a compound annual growth rate (CAGR) of 10.4% during the forecast period.

This growth underlines the increasing adoption of refurbished IT equipment by businesses, educational institutions, and individual consumers as they seek to balance performance with environmental responsibility. The rising trend not only helps organisations reduce capital expenditures but also supports circular economy initiatives by extending the lifecycle of electronic products

As businesses face increasing pressure to meet environmental, social, and governance (ESG) goals, refurbished tech is fast becoming a preferred choice for companies looking to cut costs while reducing their carbon footprints.

At Qrent, businesses can access high-quality, refurbished IT equipment that meets the demands of modern enterprises while simultaneously supporting sustainability initiatives. The company provides a range of refurbished devices including computers, laptops, and servers, ensuring that businesses can operate efficiently while minimising their environmental impact.

These devices are thoroughly tested and restored to like-new condition, offering the same reliability and performance as their brand-new counterparts but with a fraction of the carbon footprint.

Refurbished tech and the circular economy

The transition to a circular economy – a system that emphasises reusing, recycling, and remanufacturing – has become a critical strategy in tackling the world’s waste crisis. The electronics industry is one of the largest contributors to this crisis, with e-waste being the fastest-growing waste stream globally.

By choosing refurbished technology from Qrent, businesses contribute directly to the circular economy. When companies choose to refurbish and extend the lifecycle of their IT devices, they prevent valuable resources from ending up in landfills and reduce the demand for new products, thereby conserving raw materials and decreasing pollution.

Qrent’s refurbishment process includes the responsible recycling of old components and ensures that all equipment is brought back to life in an eco-friendly manner. This not only helps in reducing waste but also plays a significant role in limiting the environmental impact of tech manufacturing.

Embracing circular economy strategies not only prolongs the lifespan of IT assets but also significantly cuts down the need for new manufacturing – thereby reducing carbon emissions. The 2024 Forrester Report on The Circular Economy & Sustainable Manufacturing reveals that a substantial share of firms are already reaping sustainability benefits: 38% have adopted innovative delivery and fulfilment options that minimise waste, 32% are improving waste management practices, and 28% are focusing on more efficient material sourcing.

By opting for refurbished technology, companies can leverage these practices to lower reliance on virgin materials and the high emissions associated with producing new devices, marking a crucial step toward a greener, more sustainable IT procurement model.

Attaining your sustainability goals

Qrent provides businesses with sustainable IT solutions. The company not only supplies refurbished technology but also offers a comprehensive range of services that include equipment leasing, IT asset management, and secure data destruction. Businesses can now gain access to a scalable solution that meets their IT needs while simultaneously supporting their ESG initiatives.

The company’s commitment to reducing e-waste is evident in its emphasis on responsible recycling and disposal practices. When companies dispose their old IT equipment with Qrent through their IT Asset Disposal Solution, they can be confident that their devices will be decommissioned properly and reused, ensuring that valuable materials like metals, plastics, and glass are recovered and re-entered into the manufacturing cycle.

This process prevents toxic substances from polluting the environment and ensures that e-waste is managed in a safe, responsible manner.

Continue Reading

GRTech

Anambra State Government Launches SolutionLens to Drive Transparency and Citizen Engagement

Reporter: SANDRA ANI

Published

on

SolutionLens launch
Officials at the SolutionLens launch

In a bold step towards deepening transparency, accountability, and citizen participation in governance, the Anambra State Government has officially launched SolutionLens, a tech-driven platform designed to track government projects and strengthen engagement between citizens and the state.

The launch event, which was held on Thursday 15th May, 2025 at the SID  Building in Awka, brought together key stakeholders, including government officials, civil society groups, community representatives, development partners, and the media.

The platform was developed through a collaborative effort by the Ministry of Budget and Economic Planning, the Ministry of Information, and the Anambra State ICT Agency.

Representing the Governor, Mrs. Chiamaka Nnake, the commissioner for Budget and Economic Planning, described SolutionLens as “OGP made easy and a democratic tool.” She emphasized its value in planning, budgeting, and fostering investor confidence, thanks to its community-based feedback mechanisms.

In her welcome remarks, Mrs. Ogochukwu Orji, the State Coordinator of the Open Government Partnership (OGP), noted that SolutionLens is “built to shine a light on public projects and empower citizens to ask questions, hold government accountable, and ensure our shared resources are used for the common good.”

Key features of the platform include:

  • A centralized digital hub for government projects
  • Interactive maps and a user-friendly interface
  • A live chat feature to connect citizens directly with MDAs

Speaking during the event, Dr. Law Mefor affirmed that the platform will help Ndi Anambra “access real-time information on what government is doing,” while CFA highlighted its ability to “capture and preserve moments,” underscoring the value of technology in governance.

SolutionLens launch
Government officials present at the SolutionLens launch

One of the key highlights of the launch was a live demonstration of the SolutionLens platform, followed by the formal inauguration of MDA focal persons who will serve as key liaison officers in ensuring the platform remains updated and responsive.

Participants at the launch commended Governor Charles Chukwuma Soludo, for this forward-thinking initiative, describing SolutionLens as a game-changer in how government connects with its people.

As part of its next steps, the government urged all citizens to actively engage with the platform and help spread awareness. This, they emphasized, will not only benefit Ndi Anambra today but safeguard the integrity and prosperity of the state for generations to come.

Continue Reading

GRTech

Nigeria’s Biggest Tech Conference Opens in Enugu

Minister Bosun: I’ve never seen anything so big | Mbah: We’re driven by the knowledge that the future is technology, reports SANDRA ANI

Published

on

Enugu Tech Festival
L-R: Minister of Youth Development, Ayodele Olawande; Minister of Communications, Innovation, and Digital Economy, Dr. Bosun Tjinani; and the Governor of Enugu State, Dr. Peter Mbah, during the opening of the 2025 Enugu Tech Festival at the International Conference Centre, Enugu, Wednesday.

The 2025 Enugu Tech Festival being organised by the Enugu State Government kicked off on Wednesday with the Minister of Communications, Innovation, and Digital Economy, Dr. Bosun Tijani, describing it as the biggest technology conference that has ever happened in Nigeria.

Tijani said the Tech Festival, which attracted thousands of youths from within and outside the state, was a major leap for Nigeria’s determination to build a robust digital economy, noting that Enugu State under Governor Peter Mbah, had moved from policy to progress to lead the tech revolution in Nigeria.

This was even as Governor Peter Mbah urged the youths to embrace technology, insisting that the future is technology.

Speaking, the Minister said that the Tech Festival, tagged Coal to Code, fitted into the agenda and activities of the Federal Ministry of Communications, Innovation and Digital Economy, having recognised that the future of digital economy in Nigeria would not only be built in Abuja, but would instead be co-created across all states.

“Enugu is showing how this should and will be done. I have never, never been to a conference on technology in Nigeria that is this big. I founded the first technology hub in Nigeria, the very first in Nigeria. So, I know a thing or two when technology people gather. I can assure you that today, you are part of history because we have never seen anything this big in Nigeria before.

“There is something powerful about your state: the energy, the ambition, the possibilities. Just two years ago, only a few people could imagine this kind of tech momentum. But today, Enugu has not just imagined, Enugu is building it. Under two years, we have seen investment in digital infrastructure, and the innovation ecosystem of the state.

“What is happening today in Enugu is part of something bigger. We are now witnessing a generational rise, not one where people complain and protest, but one where creativity is used to shape the future. Not just with passion, but with precision,” he stated.

While commending the participants for rising to “create the kind of Nigeria the world will pay attention to,” Tijani called for collaboration, commitment, and hard work by all stakeholders to make it happen.

“Progress is not automatic, but needs all of us. It needs the government to continue to be brave. It needs the private sector to invest deeper. It needs mentors, builders, teachers, and it needs leaders,” he concluded.

Speaking, Governor Mbah, while highlighting how his administration had invested in technology to dramatically revolutionise security, land administration, education, among others, noted that the Enugu Tech Festival was part of his government’s wider efforts to build the youth of the state into wealth creators and highly sought-after workforce of tomorrow’s workplace.

“The power of technology and innovation and what we can accomplish is something that I want the youths to be mindful of. If you look at the way things are being done in the world today, we are now talking about an era where people just sit down with great ideas, create platforms where they begin to essentially benefit from that platform.

“An example is the Uber that came and disrupted the city taxi without owning a key. Today, they provide by far the largest traffic just by creating a platform. You can extend that to Airbnb. Without owning a key, these guys have disrupted the business of those who own several brick and mortar houses. You can also extend that to Tesla. That is the power of technology. This shows essentially that technology is where the future is,” he emphasised.

In his remark, the Commissioner for Innovation, Science and Technology, Dr. Lawrence Ezeh, said the Enugu Tech Festival, which would now become an annual event, underscored a paradigm shift from the old Enugu known for coal to one that has become a rising force in Nigeria’s tech-driven future, a beacon of innovation, intellectual capital, digital enterprise, and endless possibilities.

“For decades, our identity was built on coal, a resource that powered Nigeria’s industrial rise. But today, we stand in a different kind of power—the power of knowledge, innovation, and technology,” he stated.

Also at the event were the Minister of Youth Development, Ayodele Olawande; Speaker, Enugu State House of Assembly, Hon. Uchenna Ugwu; former Minister of Science and Technology, Prof. Barth Nnaji; Chairman of Zinox Technical, Leo Stan Ejeh; and the Group Managing Director, Afrinvest, Dr. Ike Chioke, among a host of others.

Continue Reading

Trending