TechNews

Sophos publishes 2022 Threat Report: What we learned about Ransomware

….In-depth Report Identifies Trends in Ransomware Services, Commodity Malware, Attack Tools, Cryptominers, and More That Are Impacting IT Security, reports SANDRA ANI

Published

4 years ago

November 10, 2021

grassroots

Sophos, a global leader in next-generation cybersecurity, today published the Sophos 2022 Threat Report, which shows how the gravitational force of ransomware’s black hole is pulling in other cyberthreats to form one massive, interconnected ransomware delivery system – with significant implications for IT security.

The report, written by SophosLabs security researchers, Sophos Managed Threat Response threat hunters and rapid responders, and the Sophos AI team, provides a unique multi-dimensional perspective on security threats and trends facing organizations in 2022.

The Sophos 2022 Threat Report analyzes the following key trends:

1. Over the coming year, the ransomware landscape will become both more modular and more uniform, with attack “specialists” offering different elements of an attack “as-a-service” and providing playbooks with tools and techniques that enable different adversary groups to implement very similar attacks.

According to Sophos researchers, attacks by single ransomware groups gave way to more ransomware-as-a-service (RaaS) offerings during 2021, with specialist ransomware developers focused on hiring out malicious code and infrastructure to third-party affiliates.

Some of the most high profile ransomware attacks of the year involved RaaS, including an attack against Colonial Pipeline in the U.S. by a DarkSide affiliate.

An affiliate of Conti ransomware leaked the implementation guide provided by the operators, revealing the step-by-step tools and techniques that attackers could use to deploy the ransomware.

Once they have the malware they need, RaaS affiliates and other ransomware operators can turn to Initial Access Brokers and malware delivery platforms to find and target potential victims. This is fueling the second big trend anticipated by Sophos.

2. Established cyberthreats will continue to adapt to distribute and deliver ransomware. These include loaders, droppers and other commodity malware; increasingly advanced, human-operated Initial Access Brokers; spam; and adware. In 2021, Sophos reported on Gootloader operating novel hybrid attacks that combined mass campaigns with careful filtering to pinpoint targets for specific malware bundles.

3. The use of multiple forms of extortion by ransomware attackers to pressure victims into paying the ransom is expected to continue and increase in range and intensity.

In 2021, Sophos incident responders catalogued 10 different types of pressure tactics, from data theft and exposure, to threatening phone calls, distributed denial of service (DDoS) attacks, and more.

4. Cryptocurrency will continue to fuel cybercrimes such as ransomware and malicious cryptomining, and Sophos expects the trend will continue until global cryptocurrencies are better regulated.

During 2021, Sophos researchers uncovered cryptominers such as Lemon Duck and the less common, MrbMiner, taking advantage of the access provided by newly reported vulnerabilities and targets already breached by ransomware operators to install cryptominers on computers and servers.

Chester Wisniewski, principal research scientist at Sophos

“Ransomware thrives because of its ability to adapt and innovate,” said Chester Wisniewski, principal research scientist at Sophos. “For instance, while RaaS offerings are not new, in previous years their main contribution was to bring ransomware within the reach of lower-skilled or less well-funded attackers. This has changed and, in 2021, RaaS developers are investing their time and energy in creating sophisticated code and determining how best to extract the largest payments from victims, insurance companies, and negotiators. They’re now offloading to others the tasks of finding victims, installing and executing the malware, and laundering the pilfered cryptocurrencies. This is distorting the cyberthreat landscape, and common threats, such as loaders, droppers, and Initial Access Brokers that were around and causing disruption well before the ascendancy of ransomware, are being sucked into the seemingly all-consuming ‘black hole’ that is ransomware.

“It is no longer enough for organizations to assume they’re safe by simply monitoring security tools and ensuring they are detecting malicious code. Certain combinations of detections or even warnings are the modern equivalent of a burglar breaking a flower vase while climbing in through the back window. Defenders must investigate alerts, even ones which in the past may have been insignificant, as these common intrusions have blossomed into the foothold necessary to take control of entire networks.”

Additional trends Sophos analyzed include:

After the ProxyLogon and ProxyShell vulnerabilities were discovered (and patched) in 2021, the speed at which they were seized upon by attackers was such that Sophos expects to see continued attempts to mass-abuse IT administration tools and exploitable internet facing services by both sophisticated attackers and run-of-the-mill cybercriminals

Sophos also expects cybercriminals to increase their abuse of adversary simulation tools, such as Cobalt Strike Beacons, mimikatz and PowerSploit. Defenders should check every alert relating to abused legitimate tools or combination of tools, just as they would check a malicious detection, as it could indicate the presence of an intruder in the network

In 2021, Sophos researchers detailed a number of new threats targeting Linux systems and expect to see a growing interest in Linux-based systems during 2022, both in the cloud and on web and virtual servers

Mobile threats and social engineering scams, including Flubot and Joker, are expected to continue and diversify to target both individuals and organizations

The application of artificial intelligence to cybersecurity will continue and accelerate, as powerful machine learning models prove their worth in threat detection and alert prioritization. At the same time, however, adversaries are expected to make increasing use of AI, progressing over the next few years from AI-enabled disinformation campaigns and spoof social media profiles to watering-hole attack web content, phishing emails and more as advanced deepfake video and voice synthesis technologies become available

To learn more about the threat landscape in 2021 and what this means for IT security in 2022, read the full Sophos 2022 Threat Report.

TechNews

Samsung Launches Vision AI TV: A New Era in Home Entertainment, Celebrating 19 Consecutive Years as the Global No. 1 TV Brand

Published

1 week ago

August 14, 2025

grassroots

L-r: Ikechukwu Ijeh, Head of Retail, Samsund Consumer Electronics; Jingak Chung, CE Product Manager, Samsung Electronics West Africa; Oge Maduagwu, Head of Marketing Communications Samsung Electronics West Africa; Tae Sun Lee, CEO Samsung Electronics West Africa; Harris Kwak, Business Manager Samsung Electronics West Africa; Ajay David, Head Consumer electronics ,Samsung West Africa, and Adekunle Adewale, Management Strategy, Samsung Consumer Electronics, Samsung West Africa, at the launch of Samsung Vision AI TV in Lagos

Samsung Electronics has announced the launch of its groundbreaking Samsung Vision AI TV, marking a bold new chapter in the company’s history of innovation and leadership in the television industry.

For 19 consecutive years, Samsung has held the position of the world’s No. 1 TV brand, a testament to its unwavering commitment to quality, design, and user experience. This remarkable journey of excellence has been defined by a series of world first innovations that have consistently set new standards in the industry.

From the debut of the Bordeaux LCD TV in 2006, admired for the world’s first sensuous design, to other breakthroughs like the first edge type LED TV, the first Smart TV with applications, the brilliance of 100% Color Volume QLED technology, and the refined Curved UHD TV, Samsung has never stopped setting new standards for what a TV can achieve.

Now in 2025, the company has taken another bold step forward with Samsung Vision AI which positions Samsung TVs as more than entertainment devices. They enhance content interaction, smart home functionality and synergy across devices, while maintaining strong privacy with the Samsung Knox security.

“Our mission has always been to create technology that feels personal, intuitive, and inspiring,” said Tae Sun Lee, CEO of Samsung Electronics West Africa. “With Vision AI, we’re not just offering a TV, we’re introducing a smarter, more connected way to live, building on almost two decades of global leadership.”

Samsung Vision AI is packed with features designed to make the TV experience smarter and more personal:

• Click to Search – Find information and personalized content recommendations about what you’re watching instantly, with just one click.

• Future-Proof Design – Enjoy 7 years of free OS updates so that your TV keeps evolving, unlocking new AI-powered experiences over time.

• Smart Home Control Tower – Effortlessly connect and control your Galaxy devices, Bespoke appliances, and other IoT products through SmartThings.

• Knox Security – Advanced protection to keep your personal information safe while you stay connected.

• Art & Entertainment – Seamlessly integrates with the Samsung Art TV lineup and offers immersive gaming, making it a hub for both creativity and play.

According to Oge Maduagwu, Head of Marketing & Communications, Samsung Electronics West Africa, “These new TVs are intelligent lifestyle hubs as they leverage Vision AI to deliver personalized, contextual, and seamless experiences that redefine television. Combining TV, AI Art, Live translations and sleek designs to set our TVs miles ahead of others”.

Continuing she said:

“Samsung’s 2025 TV lineup delivers our most advanced viewing experience yet, with innovations across OLED, Neo QLED, QLED, and lifestyle models. This year, we’ve introduced glare-free OLED and expanded anti-glare technology to more Neo QLED models, boosted brightness by up to 30%, and added high refresh rates up to 240Hz for ultra-smooth motion. Our new Vision AI enhances picture, sound, and even integrates smart home features like pet and family care monitoring.

“We’ve launched premium additions such as Neo QLED Mini-LED with wireless One Connect, plus Nigeria’s first 100-inch Neo QLED. From breathtaking picture quality to intelligent home integration, 2025 Samsung TVs are designed to deliver unmatched clarity, style, and connectivity.”

She reiterated Samsung’s commitment to shaping the viewing experience of tomorrow, with innovations designed to bring joy, connection, and inspiration to households worldwide.

“For years, customers have put their trust in Samsung TVs, trusting them to get quality and value for their money, thus, making them the global No.1 TV brand for 19 years consecutively and the brand continues to honor that trust by delivering products that exceed expectations.

“The new Neo QLED 8K, OLED, Neo QLED 4K, QLED & Crystal UHD TVs are now available at all authorized Samsung stores nationwide”, she Maduagwu added.

TechNews

NITDA DG Inaugurates National Technical Working Group on Cloud Infrastructure

REPORTER: Sandra Ani

Published

6 months ago

February 22, 2025

grassroots

Kashifu Inuwa DG NITDA during virtual inauguration of TWG on National Cloud Infrastructure

The Director General of NITDA, Kashifu Inuwa, during the virtual inauguration of the Technical Working Group on National Cloud Infrastructure

In a significant move to bolster Nigeria’s digital infrastructure, the National Information Technology Development Agency (NITDA) has inaugurated the Technical Working Group (TWG) on National Cloud Infrastructure.

This initiative aims to enhance local cloud capabilities, attract hyper-scale investments, and position Nigeria as a leading technology hub in Africa.

Speaking at the inauguration, NITDA’s Director-General, Kashifu Inuwa, CCIE, emphasised the need for accurate data and regulatory frameworks to support these initiatives, necessary for Nigeria to control its digital infrastructure, data, and technological future noting that,

“Without this foundation, we cannot achieve true digital sovereignty. Our goal is to build an ecosystem where both local data centre providers can scale, and global hyper-scalers see Nigeria as a viable investment destination.”

While identifying lack of accurate data on Nigeria’s IT infrastructure as significant challenge, Inuwa noted that while Africa comprises nearly 19% of the world’s population, it hosts less than 1% of global data centres.

“This disparity, coupled with limited insights into Nigeria’s existing IT capacity, hampers investment efforts and without clear data on our infrastructure, attracting investment becomes challenging,” he said.

The NITDA boss maintained that, to address this, NITDA commissioned comprehensive research to assess Nigeria’s digital landscape which findings have highlighted the need for improved regulatory frameworks, clearer investment incentives, and stronger public-private collaboration. He added that subsequently upon this, NITDA has engaged global consultants to redefine strategies for cloud development.

As the TWG embarks on its mission, NITDA urges industry experts, policymakers, and stakeholders to contribute their expertise and resources. “With collective effort, Nigeria can emerge as the premier digital hub for West and Central Africa,” Inuwa concluded.

While corroborating the Director General’s point of views, Acting Director of Regulation and Compliance, Barrister Emmanuel Edet, underscored the importance of regulatory intervention in fostering a robust digital economy.

“Our objective is to establish policies and legal frameworks that support cloud development, enabling us to securely host and manage our data. This is crucial for the growth of our digital economy, he said.”

He also highlights the necessity of capacity building, stating that, “Equipping ourselves with top-tier training and expertise is essential to fully leverage digital technologies.” Barrister Edet called on all stakeholders to actively participate in shaping Nigeria’s digital future.

“Collaboratively, we must develop a framework that reflects our national interests, and it should be widely accepted. This effort will define Nigeria’s role in the global digital arena, he observed.

The TWG will help in the drive to attract hyperscale investments and enhance local cloud capabilities by proffering measures to encourage the use of accurate data, recommend the enactment and compliance to enabling policies.

Members of the TWG which includes Google, AWS, IBM, Oracle, Microsoft, HUAWEI Cloud, Equinix, Kasi, Rack Centre, Africa Data Centres, several other data centre operators and the Nigeria Data Protection Commission expressed support and readiness to volunteer and contribute resources.

TechNews

At 67% Ransomware in Healthcare Hits Four-Year High, Survey Finds

By; SANDRA ANI

Published

11 months ago

September 26, 2024

grassroots

Ransomware in healthcare 2024

…Nearly 80% of Organizations Hit by Ransomware Took More than a Week to Recover

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today released a sector survey report, “The State of Ransomware in Healthcare 2024,” which revealed that the rate of ransomware attacks against healthcare organizations has reached a four-year high since 2021.

Of those organizations surveyed, two-thirds (67%) were impacted by ransomware attacks in the past year, up from 60% in 2023.

The rising rate of ransomware attacks against healthcare institutions contrasts with the declining rate of ransomware attacks across sectors; the overall rate of ransomware attacks fell from 66% in 2023 to 59% in 2024.

Alongside an increase in the rate of ransomware attacks, the healthcare sector reported increasingly longer recovery times.

Only 22% of ransomware victims fully recovered in a week or less, a considerable drop from the 47% reported in 2023 and 54% in 2022.

In addition, 37% took more than a month to recover, up from 28% in 2023, reflecting the increased severity and complexity of attacks.

“While we’ve seen the rate of ransomware attacks reach a kind of “homeostasis” or even decline across industries, attacks against healthcare organizations continue to intensify, both in number and scope. The highly sensitive nature of healthcare information and need for accessibility will always place a bullseye on the healthcare industry from cybercriminals. Unfortunately, cybercriminals have learned that few healthcare organizations are prepared to respond to these attacks, demonstrated by increasingly longer recovery times. These attacks can have immense ripple effects, as we’ve seen this year with major ransomware attacks impacting the healthcare industry and impacting patient care,” said John Shier, field CTO, Sophos.

“To combat these determined adversaries, healthcare organizations must adopt a more proactive, human-led approach to threat detection and response, combining advanced technology with continuous monitoring to stay ahead of attackers.”

Additional findings from the report include:

· Ransom Recovery Costs Surge: The mean cost of recovery in a healthcare ransomware attack was $2.57 million in 2024, up from $2.2 million in 2023 and double the 2021 cost

· Ransom Demands vs Payments: 57% of healthcare institutions that paid the ransom ended up paying more than the original demand

· Root Cause of Attack: Compromised credentials and exploited vulnerabilities were tied for the number one root cause of attack, each accounting for 34% of attacks

· Backups Targeted: 95% of healthcare organizations hit by ransomware in the past year said that cybercriminals attempted to compromise their backups during the attack.

· Increased Pressure: Organizations whose backups were compromised were more than twice as likely to pay the ransom to recover encrypted data (63% vs. 27%)

· Who Pays the Ransom: Insurance providers are heavily involved in ransom payments, contributing in 77% of cases. 19% of total ransom payment funding comes from insurance providers

The latest Sophos report on real-world ransomware experiences explores the full victim journey, from attack rate and root cause to operational impact and business outcomes, of 402 healthcare organizations.

The results for this sector survey report are part of a broader, vendor-agnostic survey of 5,000 cybersecurity/IT leaders conducted between January and February 2024 across 14 countries and 15 industry sectors.