Connect with us

GRTech

Ransomware Recovery Costs for Energy and Water Sectors Rise to $3m in 1 Year, Sophos Survey Finds

49% of Ransomware Attacks Against These 2 Critical Infrastructure Sectors Started with an Exploited Vulnerability

Published

on

Sophos’ Annual State of Ransomware

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today released a sector survey report, “The State of Ransomware in Critical Infrastructure 2024,” which revealed that the median recovery costs for two critical infrastructure sectors, Energy and Water, quadrupled to $3 million over the past year.

This is four times higher than the global cross-sector median. In addition, 49% of ransomware attacks against these two critical infrastructure sectors started with an exploited vulnerability.

Data for the State of Ransomware in Critical Infrastructure 2024 report comes from 275 respondents at energy, oil and gas, and utilities organizations, which fall under the Energy and Water sectors of CISA’s 16 defined critical infrastructure sectors.

The results for this sector survey report are part of a broader, vendor-agnostic survey of 5,000 cybersecurity/IT leaders conducted between January and February 2024 across 14 countries and 15 industry sectors.

“Criminals focus where they can cause the most pain and disruption so the public will demand quick resolutions, and they hope, ransom payments to restore services more quickly. This makes utilities prime targets for ransomware attacks. Because of the essential functions they provide, modern society demands they recover quickly and with minimal disruption,” said Chester Wisniewski, global Field CTO.

“Unfortunately, public utilities are not only attractive targets but vulnerable to attacks on many fronts, including the requirement for high availability and safety, as well as an engineering mindset focused on physical security. There’s a preponderance of older technologies configured to enable remote management without modern security controls like encryption and multifactor authentication. Like hospitals and schools these utilities are frequently operating with minimal staffing and without the IT staffing required to stay on top of patching, the latest security vulnerabilities and the monitoring required for early detection and response.”

On top of growing recovery costs, the median ransom payment for organizations in these two sectors jumped to more than $2.5 million in 2024—$500,0000 higher than the global cross-sector median.

The Energy and Water sectors also reported the second highest rate of ransomware attacks. Overall, 67% of the organizations in these sectors reported being hit by ransomware in 2024, in comparison to the global, cross-sector average of 59%.

Other findings from the report include:

  • The energy and water sectors reported increasingly longer recovery times. Only 20% of organizations hit by ransomware were able to recover within a week or less in 2024, compared to 41% in 2023 and 50% in 2022. Fifty-five percent took more than a month to recover, up from 36% in 2023. In comparison, across all sectors, only 35% of companies took more than a month to recover
  • These two critical infrastructure sectors reported the highest rate of backup compromise (79%) and the third highest rate of successful encryption (80%) when compared to the other industries surveyed

“This once again shows that paying ransom payments almost always works against our best interests. An increasing number (61%) paid the ransom as part of their recovery, yet the amount time it took to recover was extended. Not only do these high rates and amounts of ransoms encourage more attacks on the sector, but they are not achieving the claimed goal of shorter recovery times,” said Wisniewski.

“These utilities must recognize they are being targeted and take proactive action to monitor their exposure of remote access and network devices for vulnerabilities and ensure they have 24/7 monitoring and response capabilities to minimize outages and shorten recovery times. Incident response plans should be planned in advance, the same as for fires, floods, hurricanes and earthquakes, and be rehearsed on a regular schedule.”
Read the full State of Ransomware in Critical Infrastructure on Sophos.com.

GrassRoots.ng is on a critical mission; to objectively and honestly represent the voice of ‘grassrooters’ in International, Federal, State and Local Government fora; heralding the achievements of political and other leaders and investors alike, without discrimination. This daily, digital news publication platform serves as the leading source of up-to-date information on how people and events reflect on the global community. The pragmatic articles reflect on the life of the community people, covering news/current affairs, business, technology, culture and fashion, entertainment, sports, State, National and International issues that directly impact the locals.

GRTech

Unlocking Digital Inclusion: S.Mobile and MTN Nigeria Partner for MoMo PSB and Data Bundles, Airtime

Published

on

S.Mobile, MTN Nigeria and MoMo

In a move that promises to revolutionize access to digital services and financial inclusion for millions of Nigerians, S.Mobile has joined forces with MTN Nigeria.

This strategic partnership focuses on the distribution of MTN’s MoMo Payment Service Bank (PSB) and data bundles, offering a seamless gateway to financial services and connectivity.

The collaboration brings together two industry leaders with unique strengths. MTN Nigeria, the country’s largest telecom provider, boasts an extensive network and deep understanding of the Nigerian market. S.Mobile, known for its innovative digital solutions and commitment to financial inclusion, enhances the digital landscape with its user-friendly platforms. Together, they are poised to deliver unparalleled services to everyone, from individuals to businesses.

Boosting Financial Inclusion with MoMo PSB

A key aspect of this partnership is the promotion of MTN’s MoMo PSB, a groundbreaking initiative aimed at extending financial services to the unbanked and underbanked. By leveraging MTN’s vast network, MoMo PSB empowers users to access banking services, make transfers, settle bills, and save money directly from their mobile devices, eliminating the need for traditional bank accounts.

S.Mobile plays a crucial role by facilitating MoMo PSB adoption through its digital platforms and partner network. Integrating MoMo PSB simplifies participation in the formal financial system, especially for Nigerians in remote or underserved areas.  This move is expected to significantly boost financial inclusion across the country, enabling more people to manage their finances efficiently and securely.

Revolutionizing Data Bundle Distribution

Beyond MoMo PSB, the partnership focuses on distributing MTN data bundles through S.Mobile’s platforms. With internet usage skyrocketing in Nigeria, the demand for reliable and affordable data is paramount. This collaboration seeks to meet that demand by providing consumers with easy access to data bundles, ensuring uninterrupted connectivity for work, learning, and entertainment.

S.Mobile’s user-friendly interface allows customers to purchase data bundles directly, with real-time updates and instant delivery. This convenience is invaluable for businesses and individuals who rely on a steady internet connection. Integrating MTN’s data services enhances the digital experience for S.Mobile’s customers while driving data usage throughout the country.

A Win-Win Collaboration

This partnership benefits both companies and, more importantly, the millions of Nigerians who stand to gain from enhanced services. For MTN Nigeria, collaborating with S.Mobile represents an opportunity to further expand their reach and deepen their impact in the Nigerian market. S.Mobile’s distribution network and digital expertise  ensure wider accessibility of MTN’s services.

For S.Mobile, partnering with MTN strengthens its position as a key player in the Nigerian digital economy. Offering MoMo PSB and MTN data bundles attracts new customers, enhances service offerings, and fosters greater engagement on their platform. This also aligns with S.Mobile’s mission to empower Nigerians with the tools and services they need to thrive in a digital world.

Looking Ahead

As the S.Mobile and MTN Nigeria partnership takes off, both companies are optimistic about the future. They are committed to continuous innovation and improvement of services to meet evolving customer needs. This collaboration goes beyond business; it’s about empowering millions of Nigerians with the financial and digital tools they need to succeed.

The combined strengths of S.Mobile and MTN Nigeria set a new standard for service delivery, ensuring more Nigerians can access the financial services and connectivity they need. The CEO, Adonu Kingsley Ifeanyi, assures that they will continue to work together, and the impact of this partnership will be felt across the country, driving growth, innovation, and inclusion in the digital age.

Continue Reading

GRTech

Ransomware Groups Weaponize Stolen Data to Increase Pressure on Targets Who Refuse to Pay, Sophos Report Finds

Published

on

Sophos’ Annual State of Ransomware

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today released a new dark web report, “Turning the Screws: The Pressure Tactics of Ransomware Gangs,” which details how cybercriminals are weaponizing stolen data to increase pressure on targets who refuse to pay.

This includes sharing the contact details or doxing the family members of targeted CEOs and business owners, as well as threatening to report any information about illegal business activities uncovered in stolen data to the authorities.

In the report, Sophos X-Ops shares posts found on the dark web that show how ransomware gangs refer to their targets as “irresponsible and negligent,” and in some cases, encourage individual victims whose personal information was stolen to pursue litigation against their employer.

“In December 2023, in the wake of the MGM casino breach, Sophos began taking note of ransomware gangs’ propensity to turn the media into a tool they can use to not only increase pressure on their victims but take control of the narrative and shift the blame. We are also seeing gangs singling out the business leaders they deem ‘responsible’ for the ransomware attack at the companies they target. In one post we found, the attackers published a photo of a business owner with devil horns, along with their social security number. In a different post, the attackers encouraged employees to seek ‘compensation’ from their company, and, in other cases, the attackers threatened to notify customers, partners and competitors about data breaches. These efforts create a lightning rod for blame, increasing the pressure on businesses to pay up and potentially exacerbating the reputational damage from an attack,” said Christopher Budd, director, threat research, Sophos.

Sophos X-Ops also found multiple posts by ransomware attackers detailing their plans to search for information within stolen data that could be used as leverage if companies don’t pay. For example, in one post, the WereWolves ransomware actor notes that any stolen data is subject to “a criminal legal assessment, a commercial assessment and an assessment in terms of insider information for competitors.” In another example, the ransomware group Monti noted that it found an employee at a targeted company searching for child sexual abuse material and threatened to go to the police with the information if the company didn’t pay the ransom.

These posts align with a broader trend of criminals seeking to extort companies with increasingly sensitive data relating to employees, clients or patients, including mental health records, the medical records of children, “information about patients’ sexual problems” and “images of nude patients.” In one ransomware case, the Qiulong ransomware group posted the personal data of a CEO’s daughter, as well as a link to her Instagram profile.

“Ransomware gangs are becoming increasingly invasive and bold about how and what they weaponize. Compounding pressure for companies, they’re not just stealing data and threatening to leak it, but they’re actively analyzing it for ways to maximize damage and create new opportunities for extortion. This means that organizations have to not only worry about corporate espionage and loss of trade secrets or illegal activity by employees, but also about these issues in conjunction with cyberattacks,” said Budd.

Read the full report “Turning the Screws: The Pressure Tactics of Ransomware Gangs” on Sophos.com.

Continue Reading

Startups

Scaleup with STEP: How STEP Empowering Startups & Talent in Africa

Published

on

Scaleup with STEP

Africa is rapidly becoming a hotbed for innovation, entrepreneurship, and technological advancements.

Yet, for many startups and talented individuals, the journey from concept to market traction and revenue is often fraught with challenges.

Enter the Startup and Talent Enhancement Program (STEP), a pioneering initiative by IDEA Africa, with support from the UK-Nigeria Tech Hub. STEP is not just a program; it’s a transformative force empowering startups and talent across Africa to scale up and achieve sustainable growth.

The vision of STEP is simple yet profound: to bridge the gap between potential and success for startups that have moved beyond the post-revenue stage but are struggling with technical debt, growth hacking, marketing, and other critical areas. How? By giving them access to a large pool of professionally trained talent, strategic market advice from industry experts with years of experience, and a community with like-minded people and fellow founders. By providing targeted intervention and strategic resources, STEP ensures that these startups are not just surviving but thriving.

STEP’s approach is holistic, providing support in multiple areas crucial for startup success. From offering technical assistance, helping startups overcome technical debt and improve their product offerings to providing growth hacking strategies and tools to drive rapid growth and scale operations, to offering marketing insights and resources to effectively market products and reach the right audience and also assisting startups in developing robust business strategies that ensure long-term success.

STEP is committed to empowering individual talent and helping mentors attain fulfilment. By connecting skilled professionals and experienced mentors with high-potential startups, STEP not only helps these individuals find meaningful work and fulfilment but also fosters a culture of innovation and collaboration. This creates a dynamic ecosystem where both startups, talent and mentors can thrive.

To maintain the quality and impact of the program, STEP employs a rigorous selection process. Startups are evaluated based on their growth potential, market fit, and alignment with STEP’s objectives. This ensures that only the most promising startups, ready to embrace transformative changes, are chosen. The result is a cohort of high-potential startups primed for success.

Why STEP?

We are not just another initiative, but an organisation committed to transforming lives and businesses. We believe in the power of local startups to drive economic growth and create jobs. With tailored support and resources, we help you overcome challenges and reach new heights. Also, we provide comprehensive talent and mentor support, connecting you with skilled professionals who can help take your business to the next level. At STEP, we are dedicated to the professional growth of individuals. Through our program, selected talent will receive upskilling opportunities and access to job placements that match their skills, ensuring a bright future for all.

Application Details:

Key Dates:

  • Application Period: July 22nd – August 31st, 2024

How to Apply for Startups, Talent and Mentors:

  1. Click www.steptech.ng
  2. Select your track
  3. Create an account with us
  4. Verify your email
  5. Log in to start your application

How to Apply for Hubs:

Join STEP in Transforming the Startup Ecosystem

We invite all innovators, from startups to mentors, talent, and hubs, to join us in this exciting journey. STEP is your opportunity to make a significant impact, drive innovation, and contribute to the growth of the startup ecosystem in Enugu, Rivers, and Ekiti states.

“Scaleup with STEP” is not just a call to action; it is a testament to the potential and resilience of African startups and talent. By providing targeted support, fostering connections, and driving innovation, STEP is paving the way for a brighter future in Africa’s tech landscape. Join STEP today and be a part of this incredible transformation.

Join the Community

Stay connected with us on LinkedIn, Twitter, Instagram, and Facebook for updates, success stories, and live Q&A sessions. One of the most vital parts of STEP is the community that we are creating. By joining STEP, you join a community of like-minded innovators, tech enthusiasts, and industry experts. This community is a place to collaborate, share experiences, and form long-term connections that can help your startup grow.

Follow STEP’s innovative and exciting journey on social media platforms @steptechnigeria on Instagram, Facebook, LinkedIn, and X.

For more information, visit the website or contact the team at [email protected].

About IDEA Africa:

IDEA Africa is a leading organization dedicated to fostering innovation and entrepreneurship across Africa.

Through various initiatives and partnerships, IDEA Africa supports the growth of startups and the professional development of talent, driving economic growth and technological advancement in the region.

Continue Reading

Trending