Connect with us
Anglostratits

Business

Kaspersky: Advanced Persistent Threat (APT41) targets Southern African organisation in espionage attack

Published

on

Kaspersky

Based on Kaspersky experts’ analysis, the attackers may have gained access to the organisation’s network through a web server exposed to the Internet

JOHANNESBURG, South Africa, July 21, 2025/APO Group/ –Kaspersky Managed Detection and Response experts (www.Kaspersky.co.za) have observed a cyber espionage attack on an organisation in Southern African and have linked it to the Chinese-speaking  APT41 group. Although the threat actor has shown limited activity in Southern Africa, this incident reveals that the cyber attackers have targeted government IT services in one of the countries in the region, attempting to steal sensitive corporate data — including credentials, internal documents, source code, and communications.

APT (Advanced Persistent Threat) is a category of threat actors known for carrying out concerted, stealthy, and ongoing attacks against specific organisations, as opposed to opportunistic, isolated incidents that account for most cybercriminal activity. The adversaries’ techniques observed during the attack in Southern Africa allowed Kaspersky to attribute it to the Chinese-speaking APT41 group with a high confidence. The primary goal of the attack was cyber espionage, which is typical for this threat actor. The attackers attempted to collect sensitive data from the machines they compromised within the organisation’s network.

It is noteworthy that APT41 typically has been showing quite limited activity in the Southern African region. APT41 specialises in cyber espionage and targets organisations across various industries, including telecommunications providers, educational and healthcare institutions, IT, energy, and other sectors, with known activity in at least 42 countries.

Based on Kaspersky experts’ analysis, the attackers may have gained access to the organisation’s network through a web server exposed to the Internet. Using a credential harvesting technique – known in professional terms as registry dumping – the attackers obtained two corporate domain accounts: one with local administrator rights on all workstations and another belonging to a backup solution, which had domain administrator privileges. These accounts allowed the attackers to compromise additional systems within the organisation.

One of the stealers used for data collection was a modified Pillager utility, designed for exporting and decrypting data. The attackers compiled its code from an executable file into a Dynamic Link Library (DLL). With it, they aimed to gather saved credentials from browsers, databases, administrative tools, as well as project source code, screenshots, active chat sessions and their data, email correspondence, lists of installed software, operating system credentials, Wi-Fi credentials, and other information.

Defending against such sophisticated attacks is impossible without comprehensive expertise and continuous monitoring of the entire infrastructure

The second stealer used during the attack was Checkout. In addition to saved credentials and browser history, it was also capable of collecting information on downloaded files and browser-stored credit card data. The attackers also used the RawCopy utility and a version of Mimikatz compiled as a Dynamic Link Library (DLL) to dump registry files and credentials, as well as Cobalt Strike for Command and Control (C2) communication on compromised hosts.

“Interestingly, as one of their C2 communication channels besides Cobalt Strike, the attackers chose the SharePoint server within the victim’s infrastructure. They communicated with it using custom C2 agents connected with a web-shell. They may have chosen SharePoint because it was an internal service already present in the infrastructure and unlikely to raise suspicion. Moreover, in that case, it probably offered the most convenient way to exfiltrate data and control compromised hosts through a legitimate communication channel,” explains Denis Kulik, Lead SOC Analyst at Kaspersky Managed Detection and Response service.

“In general, defending against such sophisticated attacks is impossible without comprehensive expertise and continuous monitoring of the entire infrastructure. It is essential to maintain full security coverage across all systems with solutions capable of automatically blocking malicious activity at an early stage — and to avoid granting user accounts excessive privileges,” comments Denis Kulik.

To mitigate or prevent similar attacks, organisations are advised to follow these best practices:

  • Ensure that security agents are deployed on all workstations within the organisation without exception, to enable timely incident detection and minimise potential damage.
  • Review and control service and user account privileges, avoiding excessive rights assignments – especially for accounts used across multiple hosts within the infrastructure.
  • To protect the company against a wide range of threats, use solutions from the Kaspersky Next (https://apo-opa.co/44EI2e3) product line that provide real-time protection, threat visibility, investigation and the response capabilities of EDR and XDR for organisations of any size and industry. Depending on your current needs and available resources, you can choose the most relevant product tier and easily migrate to another one if your cybersecurity requirements are changing.
  • Adopt managed security services by Kaspersky such as Compromise Assessment (https://apo-opa.co/4m8aElL), Managed Detection and Response (MDR) (https://apo-opa.co/4m6do37) and / or Incident Response (https://apo-opa.co/44VsAsP), covering the entire incident management cycle – from threat identification to continuous protection and remediation.  They help to protect against evasive cyberattacks, investigate incidents and get additional expertise even if a company lacks cybersecurity workers.
  • Provide your InfoSec professionals with an in-depth visibility into cyberthreats targeting your organisation. The latest Kaspersky Threat Intelligence (https://apo-opa.co/3TQbRlK) will provide them with rich and meaningful context across the entire incident management cycle and helps them identify cyber risks in a timely manner.

A detailed analysis of the incident is available on Securelist (https://apo-opa.co/46mfGGS).

Kaspersky Managed Detection and Response service monitors suspicious activity and helps organisations respond swiftly to minimise impact. This is a part of Kaspersky Security Services, a team delivering hundreds of information security projects every year for Fortune Global 500 organisations: incident response, managed detection, SOC consulting, red teaming, penetration testing, application security, digital risks protection.

Distributed by APO Group on behalf of Kaspersky.

Home  Facebook

Business

Forget Energy Transition, Produce Oil Like Nothing Before

Published

on

African Energy Chamber

The future requires more oil and gas production – not less

BUENOS AIRES, Argentina, June 9, 2026/APO Group/ –The world does not have an energy problem. It has an energy supply problem. As demand rises, populations grow, and billions of people continue to live without reliable access to electricity and clean cooking technologies, the case for producing more energy has never been stronger. From Africa to Latin America, governments and operators are responding with renewed investments in exploration, production and infrastructure, signaling a shift away from energy subtraction and toward energy addition.

Speaking during the ARPEL Conference 2026 in Buenos Aires, Argentina, NJ Ayuk, Executive Chairman of the African Energy Chamber (AEC) – the voice of the African energy sector – delivered a direct message to policymakers, investors and industry leaders: “Forget transition. Let’s talk about addition. Let’s give people what they need.”

The numbers support the argument. Energy poverty remains one of the greatest barriers to economic development globally. In Africa alone, more than 600 million people remain without access to electricity, with nearly one billion people living without access to clean cooking technologies – the most disproportionately affected of which are women. Asking developing economies to produce less energy while these realities persist is fundamentally disconnected from the needs of billions of people.

“For far too long, we have been told to build less, produce less and pay more for energy,” Ayuk stated. “In Africa, we believe this is a moment for energy addition, not energy subtraction. Drill, baby, drill. It’s more important today than ever before.”

Africa offers the clearest justification for increasing oil and gas production. Despite holding more than 125 billion barrels of crude oil reserves and 620 trillion cubic feet of proven gas reserves, the continent relies heavily on imported petroleum products to sustain its economies. Inadequate investment flows across the energy value chain have impacted development and industrialization, leaving millions in the dark.

The global energy transition further compounds this challenge. Opposition by environmental groups, a shift toward aid rather than commercial business structures and diminishing investment for oil and gas projects have brought significant implications to the continent. While developed economies are pursuing a shift towards alternative energy sources, Africa needs its oil and gas – now more than ever before.

For far too long, we have been told to build less, produce less and pay more for energy

Efforts are being made across the continent to produce more oil and gas. Leading producers such as Nigeria and Angola strive to increase output, targeting brownfield development, accelerated exploration and enhanced recovery. Emerging producers such as Namibia are fast-approaching first oil, while discoveries made in Ivory Coast, investments made in the Republic of Congo, and new LNG builds in Mozambique and Tanzania are supporting greater production continent-wide.

“We must remain resolute. We must commit to an industry that builds more, produces more and never apologizes for oil. Many people in Africa are not ashamed of oil. We believe oil has a major role to play in our energy future,” Ayuk said.

Latin America offers a powerful demonstration of what sustained exploration and production can achieve. Brazil’s pre-salt developments remain among the most successful offshore projects in the world, delivering large volumes of low-cost production while attracting continued investment. Guyana continues to expand output at one of the fastest rates globally, while Argentina’s Vaca Muerta shale play is strengthening the country’s position as a major energy producer. Pan American Energy also recently announced plans to invest $680 million to revitalize Argentina’s Cerro Dragon field in the mature Golfo San Jorge basin, reflecting global interest in optimizing South American oil production.

The region’s success reflects a commitment to developing resources rather than restricting them. “Our friends in Latin America have been strong stewards for our industry,” Ayuk said, adding, “Be proud of your energy industry.”

That message extends far beyond Latin America. As governments reassess energy policy, supply security and economic growth priorities, oil and gas continue to provide the foundation upon which modern economies are built. The choice facing both emerging and producing nations is increasingly clear: either create the conditions necessary for investment, exploration and development, or risk falling behind in a world that continues to demand more energy.

“We do not have anywhere to transition to. Where are we going to transition to? From the dark to the dark?” Ayuk asked. “We want to ensure that we have energy that drives development.”

For billions of people still seeking access to affordable, reliable energy, the priority is not producing less. It is producing more.

“Don’t ever apologize for producing energy that drives human flourishing,” Ayuk concluded. “Keep building, keep producing and don’t be scared to say, ‘drill, baby, drill’ whenever you have the chance.”

Distributed by APO Group on behalf of African Energy Chamber.

Continue Reading

Business

Heirs Energies’ US$750 Million Financing Named Best Oil & Gas Deal of the Year

Published

on

Heirs Energies Limited

The award was presented on 3 June 2026, in London, and recognises one of the largest financings secured by an indigenous African energy company

LONDON, United Kingdom, June 9, 2026/APO Group/ –Heirs Energies Limited, Africa’s leading indigenous-owned integrated energy company, has been recognised on the global stage after its landmark US$750 million dual-tranche Senior Secured Reserve-Based Lending (RBL) facility was named Best Oil & Gas Deal of the Year at the EMEA Finance Project Finance Awards 2026.

 

The award was presented on 3 June 2026, in London, and recognises one of the largest financings secured by an indigenous African energy company. The transaction highlights the growing role of African capital in supporting strategic investments that advance energy security, economic development, and long-term value creation across the continent.

Executed with the African Export-Import Bank (Afreximbank), the US$750 million financing was structured to accelerate field development, optimise production, and support Heirs Energies’ long-term growth ambitions, while maintaining disciplined capital management.

Commenting on the recognition, Osa Igiehon, Chief Executive Officer of Heirs Energies, said: “This recognition reflects the confidence that African and international financial institutions continue to place in Heirs Energies, our strategy, and our long-term vision.

“The transaction demonstrates that indigenous African energy companies can successfully structure and execute world-class financing solutions that support investment, growth, and value creation. We are proud to receive this award and grateful to our financing partners, advisers, and stakeholders whose support made it possible.”

We are proud to receive this award and grateful to our financing partners, advisers, and stakeholders whose support made it possible

Mr. Haytham ElMaayergi, Executive Vice President, Global Trade Bank at Afreximbank, said: “We are truly honoured that the US$750 million dual-tranche Senior Secured Reserve-Based Lending facility for Heirs Energies has been recognised as Best Oil & Gas Deal of the Year by the EMEA Finance Project Finance Awards.

“This recognition underscores the importance of well-structured, Africa-focused financing in supporting indigenous energy companies with strong governance, high-quality assets and clear long-term growth plans. Afreximbank was proud to support this landmark transaction, which demonstrates how African financial institutions can help mobilise capital for strategic businesses that advance energy security, production capacity and sustainable value creation across the continent.

“We congratulate Heirs Energies and all the partners involved in the transaction and are pleased to see this important financing recognised on such a respected international platform.”

Samuel Nwanze, Executive Director and Chief Financial Officer of Heirs Energies, added: “This award validates the strength of the transaction and the confidence our financing partners placed in Heirs Energies.

“The facility was designed to support our long-term growth strategy, enabling continued investment in field development, production optimisation, and sustainable value creation. We are pleased to see the transaction recognised on such a respected global platform.”

The financing represented a major milestone in Heirs Energies’ evolution from acquisition-led financing to a capital structure aligned with the long-term development profile of its reserves. It further reinforced the Company’s position as a leading indigenous energy producer and demonstrated the ability of African institutions to finance transformational African businesses.

The EMEA Finance Project Finance Awards recognise outstanding transactions across Europe, the Middle East, and Africa, celebrating excellence, innovation, and impact in project and structured finance.

Distributed by APO Group on behalf of Afreximbank.

Continue Reading

Business

What Human Resource (HR) Professionals Gain from Automation

Published

on

HR

Four examples of automation supporting HR staff

JOHANNESBURG, South Africa, June 9, 2026/APO Group/ –Human resource people are concerned. As automation becomes more featured in modern digital technologies, many HR staff are asking the same question: will automation replace me?

 

Their fears are not unfounded. According to surveys conducted by Gartner (https://apo-opa.co/4uo4fGQ), some companies are using AI as an excuse to reduce HR headcounts, and 79% of Chief HR Officers told AMS (https://apo-opa.co/4xj8Qg9) that they see notable concerns about job security among their teams.

 

Supporting human abilities

 

However, a report published last year by the International Labour Organisation (https://apo-opa.co/3SaBQGM) found that AI and automation are unlikely to replace HR staff. Instead, automation is producing significant productivity improvements for HR staff, says Mignon Wolmarans, HR Product Manager at Deel Local Payroll.

 

“HR jobs require people with complex problem-solving, creativity, and strong interpersonal skills. These are not abilities that a machine or software can replace. But HR people spend most of their time on manual tasks that actually reduce their ability to focus on priorities where their skills are needed the most.”

 

This observation comes from working with clients who adopt automation in their HR environments, she adds.

 

“We sometimes encounter reluctance when we bring up automation, and the resistance is usually around a comfort with manual processes or gaps in training and skills that reduce people’s confidence in technology. But when we work with them to overcome those concerns, they love what automation does and how it gives them more autonomy and focus.”

 

How automation supports HR

 

Modern HR platforms, cloud software, can automate many routine HR tasks, either as processes designed by HR teams or as ready-to-use native features. These latter features match frequent HR tasks that would otherwise require significant manual processing, input from multiple people, or both.

People are most reluctant to adopt automation because of skills gaps, which feeds into fears that the technology will replace them

 

Some examples include:

 

  • Leave management: Automate accruals based on length of service, salary grade, or a combination of the two. Automation applies forfeiture rules automatically, and if an employee’s tenure ends, leave encashment is calculated and processed in a single automated action.

 

  • Claims: Self-service custom forms and document attachments streamline overtime and travel claims. These are processed through established rules and approvals, pushed to the responsible managers or heads of departments. As soon as a claim is approved, it automatically updates payslip information.

 

  • E-onboarding: Instead of HR practitioners capturing new employee information manually, ‌newcomers use online forms to complete their basic profile and address information, and attach key documents, all of which are loaded onto their profile and only require approval from HR.

 

  • Performance management: Set up different performance review layouts, forms, and templates for various roles, objectives, and indicators. Participants can attach supporting documents, while reviewers, managers, and other staff can submit their contributions. All the performance data feeds into central dashboards for complete control and visibility of the company’s performance.

 

These automations reduce manual workloads and errors while extending features to other stakeholders in different departments. Crucially, they don’t replace HR staff and instead give them the capacity to focus on intricate and human-centric activities that require more than capturing data and compiling reports. As mentioned, HR teams can also create automated processes and customised forms.

 

Creating digital confidence

 

The best HR software vendors offer training and skills honing for customers. For example, Deel Local Payroll provides training staff and extensive learning resources for its customers, helping them take charge of automation.

 

“People are most reluctant to adopt automation because of skills gaps, which feeds into fears that the technology will replace them. That’s why we have a dedicated training department, one-to-one training, and e-learning courses that help fill those gaps,” says Wolmarans.

 

The fear that automation will replace HR people is overstated, even if some company leaders consider it an option. Software cannot compare to what skilled HR professionals do best. But those same professionals focus overwhelmingly on manual tasks, taking time better spent on more complex and strategic priorities.

 

Automation doesn’t replace HR professionals. When the right platform and vendor support them, it makes them better at their jobs.

Distributed by APO Group on behalf of Deel Local Payroll, powered by PaySpace.

 

Continue Reading

Trending