The Nigerian government has alerted its citizens to the increasing wave of ransomware attacks on businesses and individuals.
The Nigeria Computer and Emergency Response Team (ngCERT) disclosed this on its X handle.
The ngCERT team, which rated the attacks as high and critical, is Nigeria’s Internet police unit under the Office of the National Security Adviser (NSA).
It disclosed that it had detected increased ransomware attacks by Phobos ransomware, targeting critical cloud service providers within Nigeria’s cyberspace.
The team said it is partnering with vulnerable and affected organizations to resolve the incidents and prevent more attacks quickly.
The body listed the most at-risk entities, including tech and telecommunication providers.
Other targets include education, healthcare, service providers, and NGOs.
It asked organizations to secure remote desktop protocol (RDP) ports to prevent threat actors from abusing and leveraging its tools.
According to reports, the agency disclosed that Phobos attackers gain entry into weak networks via phishing campaigns to deliver hidden payloads or by employing IP scanning tools like angry IP scanners to identify vulnerable RDP ports.
Reports say the attackers also use RDP in Microsoft Windows environments, adding that they deploy spoofed email attachments containing payloads like smoke loaders to initiate injections.
The development comes amid an increasing wave of insider fraud in Nigerian banks.
Legit.ng reported that commercial banks in the country sacked 93 employees over fraud after a member of staff of one of the banks stole about N44 billion from customers’ accounts.
Leave a Reply