Connect with us

Business

Nigerian companies at mercy of cybercriminals, as 70% pay for ransomware attack, report says

Published

on

Hackers breach Russia's version of Google, users exposed

Cybercriminals increased their attacks on Nigerian businesses in 2021, exploiting business owners with ransomware, as 5,600 small and medium enterprises in 31 countries fell victim.

According to Global cybersecurity firm, Sophos, in its ‘State of Ransomware 2022’ report, cybercriminals attacked 71 percent of businesses last year through ransomware.

Ransomware is an extension of malware, used to paralyse the system of an organisation by cybercriminals who take possession of an organisation’s database, and places encryption key, to deny the company access.

In order for organisations to have access to the stolen files, they have to pay for the encryption key. And according to Sophos, 40 percent of companies in Nigeria caught in the web paid in exchange for the key despite having backup data.

It was gathered that the organisations prefer to recover the stolen database due to the cost and time needed to deploy the backup data. Sophos also stated that some business’s backup data might not be up to date.

Read also: Magu tasks banks to protect their customers from cybercriminals

“The survey shows that, globally, the proportion of victims paying the ransom continues to increase, even when they may have other options available.” the report stated.

It further explained that, “There could be several reasons for this, including incomplete backups or the desire to prevent stolen data from appearing on a public leak site.

But the cybersecurity firm said the Nigerian companies put their organisation at risk by paying to recover the encrypted data, as the cybercriminals could have put a backdoor in the recovered data, which would enable the hackers gain access to more files or further mess with the organisation’s system.

“It’s also an option fraught with risk. Organisations don’t know what the attackers might have done, such as adding backdoors, copying passwords and more.

“If organizations don’t thoroughly clean up the recovered data, they’ll end up with all that potentially toxic material in their network and potentially exposed to a repeat attack.” Sophos said.

Join the conversation

Opinions

Support Ripples Nigeria, hold up solutions journalism

Balanced, fearless journalism driven by data comes at huge financial costs.

As a media platform, we hold leadership accountable and will not trade the right to press freedom and free speech for a piece of cake.

If you like what we do, and are ready to uphold solutions journalism, kindly donate to the Ripples Nigeria cause.

Your support would help to ensure that citizens and institutions continue to have free access to credible and reliable information for societal development.

Donate Now